@pulumi/aws 7.34.0 → 7.35.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (203) hide show
  1. package/account/primaryContact.d.ts +1 -1
  2. package/account/primaryContact.js +1 -1
  3. package/appconfig/eventIntegration.d.ts +1 -1
  4. package/appconfig/eventIntegration.js +1 -1
  5. package/bedrock/agentcoreEvaluator.d.ts +314 -0
  6. package/bedrock/agentcoreEvaluator.d.ts.map +1 -0
  7. package/bedrock/agentcoreEvaluator.js +231 -0
  8. package/bedrock/agentcoreEvaluator.js.map +1 -0
  9. package/bedrock/index.d.ts +3 -0
  10. package/bedrock/index.d.ts.map +1 -1
  11. package/bedrock/index.js +6 -1
  12. package/bedrock/index.js.map +1 -1
  13. package/cloudwatch/eventBus.d.ts +1 -1
  14. package/cloudwatch/eventBus.js +1 -1
  15. package/cloudwatch/getEventSource.d.ts +2 -2
  16. package/cloudwatch/getEventSource.js +2 -2
  17. package/detective/graph.d.ts +7 -1
  18. package/detective/graph.d.ts.map +1 -1
  19. package/detective/graph.js +7 -1
  20. package/detective/graph.js.map +1 -1
  21. package/detective/organizationConfiguration.d.ts +11 -5
  22. package/detective/organizationConfiguration.d.ts.map +1 -1
  23. package/detective/organizationConfiguration.js +8 -2
  24. package/detective/organizationConfiguration.js.map +1 -1
  25. package/dms/s3endpoint.d.ts +6 -0
  26. package/dms/s3endpoint.d.ts.map +1 -1
  27. package/dms/s3endpoint.js.map +1 -1
  28. package/ec2/encryptionControl.d.ts +11 -0
  29. package/ec2/encryptionControl.d.ts.map +1 -1
  30. package/ec2/encryptionControl.js +11 -0
  31. package/ec2/encryptionControl.js.map +1 -1
  32. package/ec2/volumeAttachment.d.ts +13 -0
  33. package/ec2/volumeAttachment.d.ts.map +1 -1
  34. package/ec2/volumeAttachment.js +13 -0
  35. package/ec2/volumeAttachment.js.map +1 -1
  36. package/ec2/vpc.d.ts +11 -0
  37. package/ec2/vpc.d.ts.map +1 -1
  38. package/ec2/vpc.js +11 -0
  39. package/ec2/vpc.js.map +1 -1
  40. package/ec2/vpcEncryptionControl.d.ts +11 -0
  41. package/ec2/vpcEncryptionControl.d.ts.map +1 -1
  42. package/ec2/vpcEncryptionControl.js +11 -0
  43. package/ec2/vpcEncryptionControl.js.map +1 -1
  44. package/ec2/vpcEndpointRouteTableAssociation.d.ts +12 -0
  45. package/ec2/vpcEndpointRouteTableAssociation.d.ts.map +1 -1
  46. package/ec2/vpcEndpointRouteTableAssociation.js +12 -0
  47. package/ec2/vpcEndpointRouteTableAssociation.js.map +1 -1
  48. package/elasticache/replicationGroup.d.ts +12 -0
  49. package/elasticache/replicationGroup.d.ts.map +1 -1
  50. package/elasticache/replicationGroup.js +2 -0
  51. package/elasticache/replicationGroup.js.map +1 -1
  52. package/elasticache/serverlessCache.d.ts +12 -0
  53. package/elasticache/serverlessCache.d.ts.map +1 -1
  54. package/elasticache/serverlessCache.js +2 -0
  55. package/elasticache/serverlessCache.js.map +1 -1
  56. package/lakeformation/optIn.d.ts +29 -13
  57. package/lakeformation/optIn.d.ts.map +1 -1
  58. package/lakeformation/optIn.js +14 -1
  59. package/lakeformation/optIn.js.map +1 -1
  60. package/msk/replicator.d.ts +8 -2
  61. package/msk/replicator.d.ts.map +1 -1
  62. package/msk/replicator.js +8 -2
  63. package/msk/replicator.js.map +1 -1
  64. package/observabilityadmin/centralizationRuleForOrganization.d.ts +34 -0
  65. package/observabilityadmin/centralizationRuleForOrganization.d.ts.map +1 -1
  66. package/observabilityadmin/centralizationRuleForOrganization.js +34 -0
  67. package/observabilityadmin/centralizationRuleForOrganization.js.map +1 -1
  68. package/opensearch/serverlessCollection.d.ts +23 -11
  69. package/opensearch/serverlessCollection.d.ts.map +1 -1
  70. package/opensearch/serverlessCollection.js +3 -1
  71. package/opensearch/serverlessCollection.js.map +1 -1
  72. package/package.json +2 -2
  73. package/rds/cluster.d.ts +3 -3
  74. package/s3/accountPublicAccessBlock.d.ts +6 -0
  75. package/s3/accountPublicAccessBlock.d.ts.map +1 -1
  76. package/s3/accountPublicAccessBlock.js +6 -0
  77. package/s3/accountPublicAccessBlock.js.map +1 -1
  78. package/s3/bucketNotification.d.ts +11 -0
  79. package/s3/bucketNotification.d.ts.map +1 -1
  80. package/s3/bucketNotification.js +11 -0
  81. package/s3/bucketNotification.js.map +1 -1
  82. package/s3/bucketOwnershipControls.d.ts +11 -0
  83. package/s3/bucketOwnershipControls.d.ts.map +1 -1
  84. package/s3/bucketOwnershipControls.js +11 -0
  85. package/s3/bucketOwnershipControls.js.map +1 -1
  86. package/s3/bucketPublicAccessBlock.d.ts +11 -0
  87. package/s3/bucketPublicAccessBlock.d.ts.map +1 -1
  88. package/s3/bucketPublicAccessBlock.js +11 -0
  89. package/s3/bucketPublicAccessBlock.js.map +1 -1
  90. package/s3/vectorsIndex.d.ts +6 -0
  91. package/s3/vectorsIndex.d.ts.map +1 -1
  92. package/s3/vectorsIndex.js +6 -0
  93. package/s3/vectorsIndex.js.map +1 -1
  94. package/s3/vectorsVectorBucket.d.ts +6 -0
  95. package/s3/vectorsVectorBucket.d.ts.map +1 -1
  96. package/s3/vectorsVectorBucket.js +6 -0
  97. package/s3/vectorsVectorBucket.js.map +1 -1
  98. package/s3/vectorsVectorBucketPolicy.d.ts +6 -0
  99. package/s3/vectorsVectorBucketPolicy.d.ts.map +1 -1
  100. package/s3/vectorsVectorBucketPolicy.js +6 -0
  101. package/s3/vectorsVectorBucketPolicy.js.map +1 -1
  102. package/s3tables/tableBucket.d.ts +6 -0
  103. package/s3tables/tableBucket.d.ts.map +1 -1
  104. package/s3tables/tableBucket.js +6 -0
  105. package/s3tables/tableBucket.js.map +1 -1
  106. package/s3tables/tableBucketPolicy.d.ts +6 -0
  107. package/s3tables/tableBucketPolicy.d.ts.map +1 -1
  108. package/s3tables/tableBucketPolicy.js +6 -0
  109. package/s3tables/tableBucketPolicy.js.map +1 -1
  110. package/s3tables/tableBucketReplication.d.ts +6 -0
  111. package/s3tables/tableBucketReplication.d.ts.map +1 -1
  112. package/s3tables/tableBucketReplication.js +6 -0
  113. package/s3tables/tableBucketReplication.js.map +1 -1
  114. package/s3tables/tableReplication.d.ts +6 -0
  115. package/s3tables/tableReplication.d.ts.map +1 -1
  116. package/s3tables/tableReplication.js +6 -0
  117. package/s3tables/tableReplication.js.map +1 -1
  118. package/sagemaker/hubContentReference.d.ts +220 -0
  119. package/sagemaker/hubContentReference.d.ts.map +1 -0
  120. package/sagemaker/hubContentReference.js +159 -0
  121. package/sagemaker/hubContentReference.js.map +1 -0
  122. package/sagemaker/index.d.ts +3 -0
  123. package/sagemaker/index.d.ts.map +1 -1
  124. package/sagemaker/index.js +6 -1
  125. package/sagemaker/index.js.map +1 -1
  126. package/sagemaker/servicecatalogPortfolioStatus.d.ts +7 -0
  127. package/sagemaker/servicecatalogPortfolioStatus.d.ts.map +1 -1
  128. package/sagemaker/servicecatalogPortfolioStatus.js +7 -0
  129. package/sagemaker/servicecatalogPortfolioStatus.js.map +1 -1
  130. package/secretsmanager/secretPolicy.d.ts +1 -1
  131. package/secretsmanager/secretPolicy.js +1 -1
  132. package/secretsmanager/secretRotation.d.ts +1 -1
  133. package/secretsmanager/secretRotation.js +1 -1
  134. package/sfn/activity.d.ts +6 -0
  135. package/sfn/activity.d.ts.map +1 -1
  136. package/sfn/activity.js +6 -0
  137. package/sfn/activity.js.map +1 -1
  138. package/sfn/alias.d.ts +6 -0
  139. package/sfn/alias.d.ts.map +1 -1
  140. package/sfn/alias.js +6 -0
  141. package/sfn/alias.js.map +1 -1
  142. package/sqs/queuePolicy.d.ts +6 -0
  143. package/sqs/queuePolicy.d.ts.map +1 -1
  144. package/sqs/queuePolicy.js +6 -0
  145. package/sqs/queuePolicy.js.map +1 -1
  146. package/sqs/redriveAllowPolicy.d.ts +6 -0
  147. package/sqs/redriveAllowPolicy.d.ts.map +1 -1
  148. package/sqs/redriveAllowPolicy.js +6 -0
  149. package/sqs/redriveAllowPolicy.js.map +1 -1
  150. package/sqs/redrivePolicy.d.ts +6 -0
  151. package/sqs/redrivePolicy.d.ts.map +1 -1
  152. package/sqs/redrivePolicy.js +6 -0
  153. package/sqs/redrivePolicy.js.map +1 -1
  154. package/ssoadmin/application.d.ts +4 -0
  155. package/ssoadmin/application.d.ts.map +1 -1
  156. package/ssoadmin/application.js +4 -0
  157. package/ssoadmin/application.js.map +1 -1
  158. package/ssoadmin/applicationAssignmentConfiguration.d.ts +5 -1
  159. package/ssoadmin/applicationAssignmentConfiguration.d.ts.map +1 -1
  160. package/ssoadmin/applicationAssignmentConfiguration.js +5 -1
  161. package/ssoadmin/applicationAssignmentConfiguration.js.map +1 -1
  162. package/ssoadmin/customerManagedPolicyAttachmentsExclusive.d.ts +1 -0
  163. package/ssoadmin/customerManagedPolicyAttachmentsExclusive.d.ts.map +1 -1
  164. package/ssoadmin/customerManagedPolicyAttachmentsExclusive.js +1 -0
  165. package/ssoadmin/customerManagedPolicyAttachmentsExclusive.js.map +1 -1
  166. package/ssoadmin/managedPolicyAttachmentsExclusive.d.ts +1 -0
  167. package/ssoadmin/managedPolicyAttachmentsExclusive.d.ts.map +1 -1
  168. package/ssoadmin/managedPolicyAttachmentsExclusive.js +1 -0
  169. package/ssoadmin/managedPolicyAttachmentsExclusive.js.map +1 -1
  170. package/ssoadmin/trustedTokenIssuer.d.ts +10 -0
  171. package/ssoadmin/trustedTokenIssuer.d.ts.map +1 -1
  172. package/ssoadmin/trustedTokenIssuer.js +10 -0
  173. package/ssoadmin/trustedTokenIssuer.js.map +1 -1
  174. package/types/input.d.ts +244 -27
  175. package/types/input.d.ts.map +1 -1
  176. package/types/input.js.map +1 -1
  177. package/types/output.d.ts +262 -27
  178. package/types/output.d.ts.map +1 -1
  179. package/types/output.js.map +1 -1
  180. package/uxc/accountCustomizations.d.ts +6 -0
  181. package/uxc/accountCustomizations.d.ts.map +1 -1
  182. package/uxc/accountCustomizations.js +6 -0
  183. package/uxc/accountCustomizations.js.map +1 -1
  184. package/verifiedpermissions/policyStore.d.ts +1 -1
  185. package/verifiedpermissions/policyStore.js +1 -1
  186. package/verifiedpermissions/schema.d.ts +1 -1
  187. package/verifiedpermissions/schema.js +1 -1
  188. package/wafv2/webAclRule.d.ts +1 -0
  189. package/wafv2/webAclRule.d.ts.map +1 -1
  190. package/wafv2/webAclRule.js +1 -0
  191. package/wafv2/webAclRule.js.map +1 -1
  192. package/workmail/defaultDomain.d.ts +11 -0
  193. package/workmail/defaultDomain.d.ts.map +1 -1
  194. package/workmail/defaultDomain.js +11 -0
  195. package/workmail/defaultDomain.js.map +1 -1
  196. package/workmail/domain.d.ts +12 -0
  197. package/workmail/domain.d.ts.map +1 -1
  198. package/workmail/domain.js +12 -0
  199. package/workmail/domain.js.map +1 -1
  200. package/xray/encryptionConfig.d.ts +13 -6
  201. package/xray/encryptionConfig.d.ts.map +1 -1
  202. package/xray/encryptionConfig.js +7 -0
  203. package/xray/encryptionConfig.js.map +1 -1
package/types/input.d.ts CHANGED
@@ -14128,6 +14128,132 @@ export declare namespace bedrock {
14128
14128
  */
14129
14129
  delete?: pulumi.Input<string | undefined>;
14130
14130
  }
14131
+ interface AgentcoreEvaluatorEvaluatorConfig {
14132
+ /**
14133
+ * Configuration that runs a Lambda function you provide to score the agent. See `codeBased` below.
14134
+ */
14135
+ codeBased?: pulumi.Input<inputs.bedrock.AgentcoreEvaluatorEvaluatorConfigCodeBased | undefined>;
14136
+ /**
14137
+ * Configuration that uses a Bedrock model to score the agent. See `llmAsAJudge` below.
14138
+ */
14139
+ llmAsAJudge?: pulumi.Input<inputs.bedrock.AgentcoreEvaluatorEvaluatorConfigLlmAsAJudge | undefined>;
14140
+ }
14141
+ interface AgentcoreEvaluatorEvaluatorConfigCodeBased {
14142
+ /**
14143
+ * Lambda function configuration. See `lambdaConfig` below.
14144
+ */
14145
+ lambdaConfig?: pulumi.Input<inputs.bedrock.AgentcoreEvaluatorEvaluatorConfigCodeBasedLambdaConfig | undefined>;
14146
+ }
14147
+ interface AgentcoreEvaluatorEvaluatorConfigCodeBasedLambdaConfig {
14148
+ /**
14149
+ * ARN of the Lambda function that runs the evaluation.
14150
+ */
14151
+ lambdaArn: pulumi.Input<string>;
14152
+ /**
14153
+ * Time in seconds to wait for the Lambda function before timing out. Defaults to 60. Range 1–300.
14154
+ */
14155
+ lambdaTimeoutInSeconds?: pulumi.Input<number | undefined>;
14156
+ }
14157
+ interface AgentcoreEvaluatorEvaluatorConfigLlmAsAJudge {
14158
+ /**
14159
+ * Instructions that tell the model how to score the agent.
14160
+ */
14161
+ instructions: pulumi.Input<string>;
14162
+ /**
14163
+ * Which Bedrock model to use. See `modelConfig` below.
14164
+ */
14165
+ modelConfig: pulumi.Input<inputs.bedrock.AgentcoreEvaluatorEvaluatorConfigLlmAsAJudgeModelConfig>;
14166
+ /**
14167
+ * Scale used to score the agent. See `ratingScale` below.
14168
+ */
14169
+ ratingScale: pulumi.Input<inputs.bedrock.AgentcoreEvaluatorEvaluatorConfigLlmAsAJudgeRatingScale>;
14170
+ }
14171
+ interface AgentcoreEvaluatorEvaluatorConfigLlmAsAJudgeModelConfig {
14172
+ /**
14173
+ * Amazon Bedrock model configuration. See `bedrockEvaluatorModelConfig` below.
14174
+ */
14175
+ bedrockEvaluatorModelConfig?: pulumi.Input<inputs.bedrock.AgentcoreEvaluatorEvaluatorConfigLlmAsAJudgeModelConfigBedrockEvaluatorModelConfig | undefined>;
14176
+ }
14177
+ interface AgentcoreEvaluatorEvaluatorConfigLlmAsAJudgeModelConfigBedrockEvaluatorModelConfig {
14178
+ /**
14179
+ * JSON-encoded model-specific request fields, for settings not covered by `inferenceConfig`.
14180
+ */
14181
+ additionalModelRequestFields?: pulumi.Input<string | undefined>;
14182
+ /**
14183
+ * Settings that control how the model generates its response. See `inferenceConfig` below.
14184
+ */
14185
+ inferenceConfig?: pulumi.Input<inputs.bedrock.AgentcoreEvaluatorEvaluatorConfigLlmAsAJudgeModelConfigBedrockEvaluatorModelConfigInferenceConfig | undefined>;
14186
+ /**
14187
+ * Identifier of the Amazon Bedrock model to use for evaluation.
14188
+ */
14189
+ modelId: pulumi.Input<string>;
14190
+ }
14191
+ interface AgentcoreEvaluatorEvaluatorConfigLlmAsAJudgeModelConfigBedrockEvaluatorModelConfigInferenceConfig {
14192
+ /**
14193
+ * Maximum number of tokens to generate in the model response. Must be at least 1.
14194
+ */
14195
+ maxTokens?: pulumi.Input<number | undefined>;
14196
+ /**
14197
+ * List of sequences that cause the model to stop generating tokens.
14198
+ */
14199
+ stopSequences?: pulumi.Input<pulumi.Input<string>[] | undefined>;
14200
+ /**
14201
+ * Temperature value that controls randomness. Range 0–1.
14202
+ */
14203
+ temperature?: pulumi.Input<number | undefined>;
14204
+ /**
14205
+ * Top-p sampling parameter. Range 0–1.
14206
+ */
14207
+ topP?: pulumi.Input<number | undefined>;
14208
+ }
14209
+ interface AgentcoreEvaluatorEvaluatorConfigLlmAsAJudgeRatingScale {
14210
+ /**
14211
+ * One or more categorical rating scale definitions. See `categorical` below.
14212
+ */
14213
+ categoricals?: pulumi.Input<pulumi.Input<inputs.bedrock.AgentcoreEvaluatorEvaluatorConfigLlmAsAJudgeRatingScaleCategorical>[] | undefined>;
14214
+ /**
14215
+ * One or more numerical rating scale definitions. See `numerical` below.
14216
+ */
14217
+ numericals?: pulumi.Input<pulumi.Input<inputs.bedrock.AgentcoreEvaluatorEvaluatorConfigLlmAsAJudgeRatingScaleNumerical>[] | undefined>;
14218
+ }
14219
+ interface AgentcoreEvaluatorEvaluatorConfigLlmAsAJudgeRatingScaleCategorical {
14220
+ /**
14221
+ * Description that explains what this categorical rating represents.
14222
+ */
14223
+ definition: pulumi.Input<string>;
14224
+ /**
14225
+ * Label for this categorical rating option. Length 1–100.
14226
+ */
14227
+ label: pulumi.Input<string>;
14228
+ }
14229
+ interface AgentcoreEvaluatorEvaluatorConfigLlmAsAJudgeRatingScaleNumerical {
14230
+ /**
14231
+ * Description that explains what this numerical rating represents.
14232
+ */
14233
+ definition: pulumi.Input<string>;
14234
+ /**
14235
+ * Label for this numerical rating option. Length 1–100.
14236
+ */
14237
+ label: pulumi.Input<string>;
14238
+ /**
14239
+ * Numerical value for this rating option. Must be at least 0.
14240
+ */
14241
+ value: pulumi.Input<number>;
14242
+ }
14243
+ interface AgentcoreEvaluatorTimeouts {
14244
+ /**
14245
+ * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
14246
+ */
14247
+ create?: pulumi.Input<string | undefined>;
14248
+ /**
14249
+ * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
14250
+ */
14251
+ delete?: pulumi.Input<string | undefined>;
14252
+ /**
14253
+ * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
14254
+ */
14255
+ update?: pulumi.Input<string | undefined>;
14256
+ }
14131
14257
  interface AgentcoreGatewayAuthorizerConfiguration {
14132
14258
  /**
14133
14259
  * JWT-based authorization configuration block. See `customJwtAuthorizer` below.
@@ -19021,6 +19147,10 @@ export declare namespace cloudfront {
19021
19147
  */
19022
19148
  ipAddressType?: pulumi.Input<string | undefined>;
19023
19149
  originKeepaliveTimeout?: pulumi.Input<number | undefined>;
19150
+ /**
19151
+ * The origin mTLS configuration for mutual TLS authentication between CloudFront and your origin.
19152
+ */
19153
+ originMtlsConfig?: pulumi.Input<inputs.cloudfront.DistributionOriginCustomOriginConfigOriginMtlsConfig | undefined>;
19024
19154
  /**
19025
19155
  * Origin protocol policy to apply to your origin. One of `http-only`, `https-only`, or `match-viewer`.
19026
19156
  */
@@ -19031,6 +19161,12 @@ export declare namespace cloudfront {
19031
19161
  */
19032
19162
  originSslProtocols: pulumi.Input<pulumi.Input<string>[]>;
19033
19163
  }
19164
+ interface DistributionOriginCustomOriginConfigOriginMtlsConfig {
19165
+ /**
19166
+ * ARN of the ACM certificate to use for mutual TLS authentication with the origin. The certificate must have Extended Key Usage set to TLS Client Authentication.
19167
+ */
19168
+ clientCertificateArn: pulumi.Input<string>;
19169
+ }
19034
19170
  interface DistributionOriginGroup {
19035
19171
  /**
19036
19172
  * The failover criteria for when to failover to the secondary origin.
@@ -19649,6 +19785,10 @@ export declare namespace cloudfront {
19649
19785
  * Custom keep-alive timeout, in seconds. Default: 5.
19650
19786
  */
19651
19787
  originKeepaliveTimeout?: pulumi.Input<number | undefined>;
19788
+ /**
19789
+ * Origin mTLS configuration for mutual TLS authentication between CloudFront and your origin. See Origin mTLS Config below.
19790
+ */
19791
+ originMtlsConfig?: pulumi.Input<inputs.cloudfront.MultitenantDistributionOriginCustomOriginConfigOriginMtlsConfig | undefined>;
19652
19792
  /**
19653
19793
  * Origin protocol policy to apply to your origin. Valid values are `http-only`, `https-only`, and `match-viewer`.
19654
19794
  */
@@ -19662,6 +19802,12 @@ export declare namespace cloudfront {
19662
19802
  */
19663
19803
  originSslProtocols: pulumi.Input<pulumi.Input<string>[]>;
19664
19804
  }
19805
+ interface MultitenantDistributionOriginCustomOriginConfigOriginMtlsConfig {
19806
+ /**
19807
+ * ARN of the ACM certificate to use for mutual TLS authentication with the origin. The certificate must have Extended Key Usage set to TLS Client Authentication.
19808
+ */
19809
+ clientCertificateArn: pulumi.Input<string>;
19810
+ }
19665
19811
  interface MultitenantDistributionOriginGroup {
19666
19812
  /**
19667
19813
  * Failover criteria for when to failover to the secondary origin. See Failover Criteria below.
@@ -38002,6 +38148,15 @@ export declare namespace eks {
38002
38148
  * The `controlPlanePlacement` configuration block supports the following arguments:
38003
38149
  */
38004
38150
  controlPlanePlacement?: pulumi.Input<inputs.eks.ClusterOutpostConfigControlPlanePlacement | undefined>;
38151
+ /**
38152
+ * Amazon EC2 instance type for etcd instances of your local Amazon EKS cluster on AWS Outposts.
38153
+ */
38154
+ etcdInstanceType?: pulumi.Input<string | undefined>;
38155
+ /**
38156
+ * Placement configuration for the etcd instances of your local Amazon EKS cluster on an AWS Outpost.
38157
+ * The `etcdPlacement` configuration block supports the following arguments:
38158
+ */
38159
+ etcdPlacement?: pulumi.Input<inputs.eks.ClusterOutpostConfigEtcdPlacement | undefined>;
38005
38160
  /**
38006
38161
  * The ARN of the Outpost that you want to use for your local Amazon EKS cluster on Outposts. This argument is a list of arns, but only a single Outpost ARN is supported currently.
38007
38162
  */
@@ -38009,9 +38164,19 @@ export declare namespace eks {
38009
38164
  }
38010
38165
  interface ClusterOutpostConfigControlPlanePlacement {
38011
38166
  /**
38012
- * The name of the placement group for the Kubernetes control plane instances. This setting can't be changed after cluster creation.
38167
+ * Name of the placement group for the Kubernetes control plane instances. This setting can't be changed after cluster creation.
38168
+ */
38169
+ groupName?: pulumi.Input<string | undefined>;
38170
+ /**
38171
+ * Placement group spread level for control plane instances. Valid values: `host`, `rack`.
38172
+ */
38173
+ spreadLevel?: pulumi.Input<string | undefined>;
38174
+ }
38175
+ interface ClusterOutpostConfigEtcdPlacement {
38176
+ /**
38177
+ * Placement group spread level for etcd instances. Valid values: `host`, `rack`.
38013
38178
  */
38014
- groupName: pulumi.Input<string>;
38179
+ spreadLevel?: pulumi.Input<string | undefined>;
38015
38180
  }
38016
38181
  interface ClusterRemoteNetworkConfig {
38017
38182
  /**
@@ -50790,28 +50955,31 @@ export declare namespace lakeformation {
50790
50955
  }
50791
50956
  interface OptInCondition {
50792
50957
  /**
50793
- * List of LF-tag conditions or a saved expression that apply to the resource's LF-Tag policy.
50958
+ * Expression written based on the Cedar Policy Language used to match the principal attributes.
50794
50959
  */
50795
50960
  expression?: pulumi.Input<string | undefined>;
50796
50961
  }
50797
50962
  interface OptInPrincipal {
50963
+ /**
50964
+ * Identifier for the Lake Formation principal.
50965
+ */
50798
50966
  dataLakePrincipalIdentifier: pulumi.Input<string>;
50799
50967
  }
50800
50968
  interface OptInResourceData {
50801
50969
  /**
50802
- * Identifier for the Data Catalog. By default, the account ID. The Data Catalog is the persistent metadata store. It contains database definitions, table definitions, and other control information to manage your Lake Formation environment. See Catalog for more details.
50970
+ * Identifier for the Data Catalog. By default, the account ID. The Data Catalog is the persistent metadata store. It contains database definitions, table definitions, and other control information to manage your Lake Formation environment. See `catalog` Block for more details.
50803
50971
  */
50804
50972
  catalogs?: pulumi.Input<pulumi.Input<inputs.lakeformation.OptInResourceDataCatalog>[] | undefined>;
50805
50973
  /**
50806
- * Data cell filter. See Data Cells Filter for more details.
50974
+ * Data cell filter. See `dataCellsFilter` Block for more details.
50807
50975
  */
50808
50976
  dataCellsFilters?: pulumi.Input<pulumi.Input<inputs.lakeformation.OptInResourceDataDataCellsFilter>[] | undefined>;
50809
50977
  /**
50810
- * Location of an Amazon S3 path where permissions are granted or revoked. See Data Location for more details.
50978
+ * Location of an Amazon S3 path where permissions are granted or revoked. See `dataLocation` Block for more details.
50811
50979
  */
50812
50980
  dataLocations?: pulumi.Input<pulumi.Input<inputs.lakeformation.OptInResourceDataDataLocation>[] | undefined>;
50813
50981
  /**
50814
- * Database for the resource. Unique to the Data Catalog. A database is a set of associated table definitions organized into a logical group. You can Grant and Revoke database permissions to a principal. See Database for more details.
50982
+ * Database for the resource. Unique to the Data Catalog. A database is a set of associated table definitions organized into a logical group. You can Grant and Revoke database permissions to a principal. See `database` Block for more details.
50815
50983
  */
50816
50984
  database?: pulumi.Input<inputs.lakeformation.OptInResourceDataDatabase | undefined>;
50817
50985
  /**
@@ -50819,19 +50987,19 @@ export declare namespace lakeformation {
50819
50987
  */
50820
50988
  lfTag?: pulumi.Input<inputs.lakeformation.OptInResourceDataLfTag | undefined>;
50821
50989
  /**
50822
- * Logical expression composed of one or more LF-Tag key:value pairs. See LF-Tag Expression for more details.
50990
+ * Logical expression composed of one or more LF-Tag key:value pairs. See `lfTagExpression` Block for more details.
50823
50991
  */
50824
50992
  lfTagExpressions?: pulumi.Input<pulumi.Input<inputs.lakeformation.OptInResourceDataLfTagExpression>[] | undefined>;
50825
50993
  /**
50826
- * List of LF-Tag conditions or saved LF-Tag expressions that define a resource's LF-Tag policy. See LF-Tag Policy for more details.
50994
+ * List of LF-Tag conditions or saved LF-Tag expressions that define a resource's LF-Tag policy. See `lfTagPolicy` Block for more details.
50827
50995
  */
50828
50996
  lfTagPolicies?: pulumi.Input<pulumi.Input<inputs.lakeformation.OptInResourceDataLfTagPolicy>[] | undefined>;
50829
50997
  /**
50830
- * Table for the resource. A table is a metadata definition that represents your data. You can Grant and Revoke table privileges to a principal. See Table for more details.
50998
+ * Table for the resource. A table is a metadata definition that represents your data. You can Grant and Revoke table privileges to a principal. See `table` Block for more details.
50831
50999
  */
50832
51000
  table?: pulumi.Input<inputs.lakeformation.OptInResourceDataTable | undefined>;
50833
51001
  /**
50834
- * Table with columns for the resource. A principal with permissions to this resource can select metadata from the columns of a table in the Data Catalog and the underlying data in Amazon S3. See Table With Columns for more details.
51002
+ * Table with columns for the resource. A principal with permissions to this resource can select metadata from the columns of a table in the Data Catalog and the underlying data in Amazon S3. See `tableWithColumns` Block for more details.
50835
51003
  */
50836
51004
  tableWithColumns?: pulumi.Input<inputs.lakeformation.OptInResourceDataTableWithColumns | undefined>;
50837
51005
  }
@@ -50843,11 +51011,11 @@ export declare namespace lakeformation {
50843
51011
  }
50844
51012
  interface OptInResourceDataDataCellsFilter {
50845
51013
  /**
50846
- * The name of the database for the table. Unique to a Data Catalog. A database is a set of associated table definitions organized into a logical group. You can Grant and Revoke database privileges to a principal.
51014
+ * Database in the Glue Data Catalog.
50847
51015
  */
50848
51016
  databaseName?: pulumi.Input<string | undefined>;
50849
51017
  /**
50850
- * Name of the table.
51018
+ * Name of the data cells filter.
50851
51019
  */
50852
51020
  name?: pulumi.Input<string | undefined>;
50853
51021
  /**
@@ -50861,7 +51029,7 @@ export declare namespace lakeformation {
50861
51029
  }
50862
51030
  interface OptInResourceDataDataLocation {
50863
51031
  /**
50864
- * Identifier for the Data Catalog. By default, it is the account ID of the caller.
51032
+ * Identifier for the Data Catalog where the location is registered with Lake Formation. By default, it is the account ID of the caller.
50865
51033
  */
50866
51034
  catalogId?: pulumi.Input<string | undefined>;
50867
51035
  /**
@@ -50875,7 +51043,7 @@ export declare namespace lakeformation {
50875
51043
  */
50876
51044
  catalogId?: pulumi.Input<string | undefined>;
50877
51045
  /**
50878
- * Name of the table.
51046
+ * Name of the database resource. Unique to the Data Catalog.
50879
51047
  */
50880
51048
  name: pulumi.Input<string>;
50881
51049
  }
@@ -50885,11 +51053,11 @@ export declare namespace lakeformation {
50885
51053
  */
50886
51054
  catalogId?: pulumi.Input<string | undefined>;
50887
51055
  /**
50888
- * (Required) Key name for the LF-Tag.
51056
+ * Key name for the LF-Tag.
50889
51057
  */
50890
51058
  key: pulumi.Input<string>;
50891
51059
  /**
50892
- * (Required) Set of tag values for the LF-Tag key. At least one value is required. Each value can be 1-255 characters.
51060
+ * Set of tag values for the LF-Tag key. At least one value is required. Each value can be 1-255 characters.
50893
51061
  */
50894
51062
  values: pulumi.Input<pulumi.Input<string>[]>;
50895
51063
  }
@@ -50899,17 +51067,17 @@ export declare namespace lakeformation {
50899
51067
  */
50900
51068
  catalogId?: pulumi.Input<string | undefined>;
50901
51069
  /**
50902
- * Name of the table.
51070
+ * Name of the LF-Tag expression to grant permissions on.
50903
51071
  */
50904
51072
  name: pulumi.Input<string>;
50905
51073
  }
50906
51074
  interface OptInResourceDataLfTagPolicy {
50907
51075
  /**
50908
- * Identifier for the Data Catalog. By default, it is the account ID of the caller.
51076
+ * Identifier for the Data Catalog. By default, it is the account ID of the caller. The Data Catalog is the persistent metadata store. It contains database definitions, table definitions, and other control information to manage your Lake Formation environment.
50909
51077
  */
50910
51078
  catalogId?: pulumi.Input<string | undefined>;
50911
51079
  /**
50912
- * If provided, permissions are granted to the Data Catalog resources whose assigned LF-Tags match the expression body of the saved expression under the provided ExpressionName .
51080
+ * Name of the saved expression to match. If provided, permissions are granted to the Data Catalog resources whose assigned LF-Tags match the expression body of the saved expression under the provided expression name.
50913
51081
  */
50914
51082
  expressionName?: pulumi.Input<string | undefined>;
50915
51083
  /**
@@ -50927,7 +51095,7 @@ export declare namespace lakeformation {
50927
51095
  */
50928
51096
  catalogId?: pulumi.Input<string | undefined>;
50929
51097
  /**
50930
- * The name of the database for the table. Unique to a Data Catalog. A database is a set of associated table definitions organized into a logical group. You can Grant and Revoke database privileges to a principal.
51098
+ * Name of the database for the table. Unique to a Data Catalog. A database is a set of associated table definitions organized into a logical group. You can Grant and Revoke database privileges to a principal.
50931
51099
  */
50932
51100
  databaseName: pulumi.Input<string>;
50933
51101
  /**
@@ -50949,11 +51117,11 @@ export declare namespace lakeformation {
50949
51117
  */
50950
51118
  columnNames?: pulumi.Input<pulumi.Input<string>[] | undefined>;
50951
51119
  /**
50952
- * Wildcard specified by a ColumnWildcard object. At least one of ColumnNames or ColumnWildcard is required.
51120
+ * Wildcard specified by a ColumnWildcard object. At least one of ColumnNames or ColumnWildcard is required. See `columnWildcard` Block for more details.
50953
51121
  */
50954
51122
  columnWildcard?: pulumi.Input<inputs.lakeformation.OptInResourceDataTableWithColumnsColumnWildcard | undefined>;
50955
51123
  /**
50956
- * The name of the database for the table. Unique to a Data Catalog. A database is a set of associated table definitions organized into a logical group. You can Grant and Revoke database privileges to a principal.
51124
+ * Name of the database for the table. Unique to a Data Catalog. A database is a set of associated table definitions organized into a logical group. You can Grant and Revoke database privileges to a principal.
50957
51125
  */
50958
51126
  databaseName: pulumi.Input<string>;
50959
51127
  /**
@@ -50962,6 +51130,9 @@ export declare namespace lakeformation {
50962
51130
  name: pulumi.Input<string>;
50963
51131
  }
50964
51132
  interface OptInResourceDataTableWithColumnsColumnWildcard {
51133
+ /**
51134
+ * Excludes column names. Any column with this name will be excluded.
51135
+ */
50965
51136
  excludedColumnNames?: pulumi.Input<pulumi.Input<string>[] | undefined>;
50966
51137
  }
50967
51138
  interface PermissionsDataCellsFilter {
@@ -71072,7 +71243,7 @@ export declare namespace oam {
71072
71243
  export declare namespace observabilityadmin {
71073
71244
  interface CentralizationRuleForOrganizationRule {
71074
71245
  /**
71075
- * Configuration block for the destination where logs will be centralized. See `destination` below.
71246
+ * Configuration block for the destination where telemetry will be centralized. See `destination` below.
71076
71247
  */
71077
71248
  destination: pulumi.Input<inputs.observabilityadmin.CentralizationRuleForOrganizationRuleDestination>;
71078
71249
  /**
@@ -71082,7 +71253,7 @@ export declare namespace observabilityadmin {
71082
71253
  }
71083
71254
  interface CentralizationRuleForOrganizationRuleDestination {
71084
71255
  /**
71085
- * AWS account ID where logs will be centralized.
71256
+ * AWS account ID where telemetry will be centralized.
71086
71257
  */
71087
71258
  account: pulumi.Input<string>;
71088
71259
  /**
@@ -71090,7 +71261,11 @@ export declare namespace observabilityadmin {
71090
71261
  */
71091
71262
  destinationLogsConfiguration?: pulumi.Input<inputs.observabilityadmin.CentralizationRuleForOrganizationRuleDestinationDestinationLogsConfiguration | undefined>;
71092
71263
  /**
71093
- * AWS region where logs will be centralized.
71264
+ * Configuration block for destination metrics settings. See `destinationMetricsConfiguration` below.
71265
+ */
71266
+ destinationMetricsConfiguration?: pulumi.Input<inputs.observabilityadmin.CentralizationRuleForOrganizationRuleDestinationDestinationMetricsConfiguration | undefined>;
71267
+ /**
71268
+ * AWS region where telemetry will be centralized.
71094
71269
  */
71095
71270
  region: pulumi.Input<string>;
71096
71271
  }
@@ -71138,9 +71313,21 @@ export declare namespace observabilityadmin {
71138
71313
  */
71139
71314
  kmsKeyArn?: pulumi.Input<string | undefined>;
71140
71315
  }
71316
+ interface CentralizationRuleForOrganizationRuleDestinationDestinationMetricsConfiguration {
71317
+ /**
71318
+ * Configuration block for metrics backup settings. See `destinationMetricsBackupConfiguration` below.
71319
+ */
71320
+ backupConfiguration?: pulumi.Input<inputs.observabilityadmin.CentralizationRuleForOrganizationRuleDestinationDestinationMetricsConfigurationBackupConfiguration | undefined>;
71321
+ }
71322
+ interface CentralizationRuleForOrganizationRuleDestinationDestinationMetricsConfigurationBackupConfiguration {
71323
+ /**
71324
+ * AWS region for backup storage.
71325
+ */
71326
+ region: pulumi.Input<string>;
71327
+ }
71141
71328
  interface CentralizationRuleForOrganizationRuleSource {
71142
71329
  /**
71143
- * Set of AWS regions from which to centralize logs. Must contain at least one region.
71330
+ * Set of AWS regions from which to centralize telemetry. Must contain at least one region.
71144
71331
  */
71145
71332
  regions: pulumi.Input<pulumi.Input<string>[]>;
71146
71333
  /**
@@ -71151,6 +71338,10 @@ export declare namespace observabilityadmin {
71151
71338
  * Configuration block for source logs settings. See `sourceLogsConfiguration` below.
71152
71339
  */
71153
71340
  sourceLogsConfiguration?: pulumi.Input<inputs.observabilityadmin.CentralizationRuleForOrganizationRuleSourceSourceLogsConfiguration | undefined>;
71341
+ /**
71342
+ * Configuration block for source metrics settings. See `sourceMetricsConfiguration` below.
71343
+ */
71344
+ sourceMetricsConfiguration?: pulumi.Input<inputs.observabilityadmin.CentralizationRuleForOrganizationRuleSourceSourceMetricsConfiguration | undefined>;
71154
71345
  }
71155
71346
  interface CentralizationRuleForOrganizationRuleSourceSourceLogsConfiguration {
71156
71347
  /**
@@ -71166,6 +71357,12 @@ export declare namespace observabilityadmin {
71166
71357
  */
71167
71358
  logGroupSelectionCriteria?: pulumi.Input<string | undefined>;
71168
71359
  }
71360
+ interface CentralizationRuleForOrganizationRuleSourceSourceMetricsConfiguration {
71361
+ /**
71362
+ * Filter expression that selects which source metrics to centralize. Currently, only `*` (all metrics) is supported.
71363
+ */
71364
+ metricsSelectionCriteria: pulumi.Input<string>;
71365
+ }
71169
71366
  interface CentralizationRuleForOrganizationTimeouts {
71170
71367
  /**
71171
71368
  * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
@@ -72639,6 +72836,12 @@ export declare namespace opensearch {
72639
72836
  */
72640
72837
  delete?: pulumi.Input<string | undefined>;
72641
72838
  }
72839
+ interface ServerlessCollectionVectorOption {
72840
+ /**
72841
+ * Status of serverless vector acceleration for the collection. One of `ENABLED`, `DISABLED`, or `ALLOWED`.
72842
+ */
72843
+ serverlessVectorAcceleration: pulumi.Input<string>;
72844
+ }
72642
72845
  interface ServerlessSecurityConfigSamlOptions {
72643
72846
  /**
72644
72847
  * Group attribute for this SAML integration.
@@ -83907,6 +84110,20 @@ export declare namespace sagemaker {
83907
84110
  */
83908
84111
  s3OutputPath: pulumi.Input<string>;
83909
84112
  }
84113
+ interface HubContentReferenceTimeouts {
84114
+ /**
84115
+ * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
84116
+ */
84117
+ create?: pulumi.Input<string | undefined>;
84118
+ /**
84119
+ * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
84120
+ */
84121
+ delete?: pulumi.Input<string | undefined>;
84122
+ /**
84123
+ * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
84124
+ */
84125
+ update?: pulumi.Input<string | undefined>;
84126
+ }
83910
84127
  interface HubS3StorageConfig {
83911
84128
  /**
83912
84129
  * The Amazon S3 bucket prefix for hosting hub content.interface.