@pulumi/aws 7.44.0-alpha.1787915979 → 7.44.0

package/types/output.d.ts

@@ -904,7 +904,7 @@ export declare namespace alb {
     }
     interface ListenerRuleActionForwardTargetGroup {
         /**
-         * The Amazon Resource Name (ARN) of the target group.
+         * ARN of the target group.
          */
         arn: string;
         /**
@@ -1672,7 +1672,7 @@ export declare namespace amplify {
          */
         certificateVerificationDnsRecord: string;
         /**
-         * The Amazon resource name (ARN) for the custom certificate.
+         * ARN for the custom certificate.
          * Required when `type` is `CUSTOM`.
          */
         customCertificateArn?: string;
@@ -2038,7 +2038,7 @@ export declare namespace apigatewayv2 {
          */
         ownershipVerificationCertificateArn: string;
         /**
-         * Transport Layer Security (TLS) version of the [security policy](https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-custom-domain-tls-version.html) for the domain name. Valid values: `TLS_1_2`.
+         * TLS version of the [security policy](https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-custom-domain-tls-version.html) for the domain name. Valid values: `TLS_1_2`.
          */
         securityPolicy: string;
         /**
@@ -2571,11 +2571,11 @@ export declare namespace appconfig {
          */
         name: string;
         /**
-         * Amazon Resource Name (ARN) for an Identity and Access Management assume role.
+         * ARN for an Identity and Access Management assume role.
          */
         roleArn?: string;
         /**
-         * Extension URI associated to the action point in the extension definition. The URI can be an Amazon Resource Name (ARN) for one of the following: an Lambda function, an Amazon Simple Queue Service queue, an Amazon Simple Notification Service topic, or the Amazon EventBridge default event bus.
+         * Extension URI associated to the action point in the extension definition. The URI can be an ARN for one of the following: an Lambda function, an Amazon Simple Queue Service queue, an Amazon Simple Notification Service topic, or the Amazon EventBridge default event bus.
          */
         uri: string;
     }
@@ -5183,7 +5183,7 @@ export declare namespace appmesh {
     }
     interface GetVirtualNodeSpecBackendDefaultClientPolicy {
         /**
-         * Transport Layer Security (TLS) properties for the listener. See `spec.listener.tls` Block for details.
+         * TLS properties for the listener. See `spec.listener.tls` Block for details.
          */
         tls: outputs.appmesh.GetVirtualNodeSpecBackendDefaultClientPolicyTl[];
     }
@@ -5201,7 +5201,7 @@ export declare namespace appmesh {
          */
         ports: number[];
         /**
-         * Listener's Transport Layer Security (TLS) validation context. See `spec.listener.tls.validation` Block for details.
+         * Listener's TLS validation context. See `spec.listener.tls.validation` Block for details.
          */
         validations: outputs.appmesh.GetVirtualNodeSpecBackendDefaultClientPolicyTlValidation[];
     }
@@ -5227,7 +5227,7 @@ export declare namespace appmesh {
     }
     interface GetVirtualNodeSpecBackendDefaultClientPolicyTlCertificateSd {
         /**
-         * Name of the secret for a virtual node's Transport Layer Security (TLS) Secret Discovery Service validation context trust.
+         * Name of the secret for a virtual node's TLS Secret Discovery Service validation context trust.
          */
         secretName: string;
     }
@@ -5281,7 +5281,7 @@ export declare namespace appmesh {
     }
     interface GetVirtualNodeSpecBackendDefaultClientPolicyTlValidationTrustSd {
         /**
-         * Name of the secret for a virtual node's Transport Layer Security (TLS) Secret Discovery Service validation context trust.
+         * Name of the secret for a virtual node's TLS Secret Discovery Service validation context trust.
          */
         secretName: string;
     }
@@ -5297,7 +5297,7 @@ export declare namespace appmesh {
     }
     interface GetVirtualNodeSpecBackendVirtualServiceClientPolicy {
         /**
-         * Transport Layer Security (TLS) properties for the listener. See `spec.listener.tls` Block for details.
+         * TLS properties for the listener. See `spec.listener.tls` Block for details.
          */
         tls: outputs.appmesh.GetVirtualNodeSpecBackendVirtualServiceClientPolicyTl[];
     }
@@ -5315,7 +5315,7 @@ export declare namespace appmesh {
          */
         ports: number[];
         /**
-         * Listener's Transport Layer Security (TLS) validation context. See `spec.listener.tls.validation` Block for details.
+         * Listener's TLS validation context. See `spec.listener.tls.validation` Block for details.
          */
         validations: outputs.appmesh.GetVirtualNodeSpecBackendVirtualServiceClientPolicyTlValidation[];
     }
@@ -5341,7 +5341,7 @@ export declare namespace appmesh {
     }
     interface GetVirtualNodeSpecBackendVirtualServiceClientPolicyTlCertificateSd {
         /**
-         * Name of the secret for a virtual node's Transport Layer Security (TLS) Secret Discovery Service validation context trust.
+         * Name of the secret for a virtual node's TLS Secret Discovery Service validation context trust.
          */
         secretName: string;
     }
@@ -5395,7 +5395,7 @@ export declare namespace appmesh {
     }
     interface GetVirtualNodeSpecBackendVirtualServiceClientPolicyTlValidationTrustSd {
         /**
-         * Name of the secret for a virtual node's Transport Layer Security (TLS) Secret Discovery Service validation context trust.
+         * Name of the secret for a virtual node's TLS Secret Discovery Service validation context trust.
          */
         secretName: string;
     }
@@ -5421,7 +5421,7 @@ export declare namespace appmesh {
          */
         timeouts: outputs.appmesh.GetVirtualNodeSpecListenerTimeout[];
         /**
-         * Transport Layer Security (TLS) properties for the listener. See `spec.listener.tls` Block for details.
+         * TLS properties for the listener. See `spec.listener.tls` Block for details.
          */
         tls: outputs.appmesh.GetVirtualNodeSpecListenerTl[];
     }
@@ -5683,7 +5683,7 @@ export declare namespace appmesh {
          */
         mode: string;
         /**
-         * Listener's Transport Layer Security (TLS) validation context. See `spec.listener.tls.validation` Block for details.
+         * Listener's TLS validation context. See `spec.listener.tls.validation` Block for details.
          */
         validations: outputs.appmesh.GetVirtualNodeSpecListenerTlValidation[];
     }
@@ -5719,7 +5719,7 @@ export declare namespace appmesh {
     }
     interface GetVirtualNodeSpecListenerTlCertificateSd {
         /**
-         * Name of the secret for a virtual node's Transport Layer Security (TLS) Secret Discovery Service validation context trust.
+         * Name of the secret for a virtual node's TLS Secret Discovery Service validation context trust.
          */
         secretName: string;
     }
@@ -5763,7 +5763,7 @@ export declare namespace appmesh {
     }
     interface GetVirtualNodeSpecListenerTlValidationTrustSd {
         /**
-         * Name of the secret for a virtual node's Transport Layer Security (TLS) Secret Discovery Service validation context trust.
+         * Name of the secret for a virtual node's TLS Secret Discovery Service validation context trust.
          */
         secretName: string;
     }
@@ -6558,7 +6558,7 @@ export declare namespace appmesh {
     }
     interface VirtualGatewaySpecBackendDefaultsClientPolicy {
         /**
-         * Transport Layer Security (TLS) client policy. See `spec.backend_defaults.client_policy.tls` Block for details.
+         * TLS client policy. See `spec.backend_defaults.client_policy.tls` Block for details.
          */
         tls?: outputs.appmesh.VirtualGatewaySpecBackendDefaultsClientPolicyTls;
     }
@@ -6576,7 +6576,7 @@ export declare namespace appmesh {
          */
         ports?: number[];
         /**
-         * Listener's Transport Layer Security (TLS) validation context.
+         * Listener's TLS validation context.
          */
         validation: outputs.appmesh.VirtualGatewaySpecBackendDefaultsClientPolicyTlsValidation;
     }
@@ -6599,13 +6599,13 @@ export declare namespace appmesh {
     }
     interface VirtualGatewaySpecBackendDefaultsClientPolicyTlsCertificateSds {
         /**
-         * Name of the secret for a virtual gateway's Transport Layer Security (TLS) Secret Discovery Service validation context trust.
+         * Name of the secret for a virtual gateway's TLS Secret Discovery Service validation context trust.
          */
         secretName: string;
     }
     interface VirtualGatewaySpecBackendDefaultsClientPolicyTlsValidation {
         /**
-         * SANs for a virtual gateway's listener's Transport Layer Security (TLS) validation context.
+         * SANs for a virtual gateway's listener's TLS validation context.
          */
         subjectAlternativeNames?: outputs.appmesh.VirtualGatewaySpecBackendDefaultsClientPolicyTlsValidationSubjectAlternativeNames;
         /**
@@ -6650,7 +6650,7 @@ export declare namespace appmesh {
     }
     interface VirtualGatewaySpecBackendDefaultsClientPolicyTlsValidationTrustSds {
         /**
-         * Name of the secret for a virtual gateway's Transport Layer Security (TLS) Secret Discovery Service validation context trust.
+         * Name of the secret for a virtual gateway's TLS Secret Discovery Service validation context trust.
          */
         secretName: string;
     }
@@ -6668,7 +6668,7 @@ export declare namespace appmesh {
          */
         portMapping: outputs.appmesh.VirtualGatewaySpecListenerPortMapping;
         /**
-         * Transport Layer Security (TLS) properties for the listener. See `spec.listener.tls` Block for details.
+         * TLS properties for the listener. See `spec.listener.tls` Block for details.
          */
         tls?: outputs.appmesh.VirtualGatewaySpecListenerTls;
     }
@@ -6758,7 +6758,7 @@ export declare namespace appmesh {
          */
         mode: string;
         /**
-         * Listener's Transport Layer Security (TLS) validation context.
+         * Listener's TLS validation context.
          */
         validation?: outputs.appmesh.VirtualGatewaySpecListenerTlsValidation;
     }
@@ -6791,13 +6791,13 @@ export declare namespace appmesh {
     }
     interface VirtualGatewaySpecListenerTlsCertificateSds {
         /**
-         * Name of the secret for a virtual gateway's Transport Layer Security (TLS) Secret Discovery Service validation context trust.
+         * Name of the secret for a virtual gateway's TLS Secret Discovery Service validation context trust.
          */
         secretName: string;
     }
     interface VirtualGatewaySpecListenerTlsValidation {
         /**
-         * SANs for a virtual gateway's listener's Transport Layer Security (TLS) validation context.
+         * SANs for a virtual gateway's listener's TLS validation context.
          */
         subjectAlternativeNames?: outputs.appmesh.VirtualGatewaySpecListenerTlsValidationSubjectAlternativeNames;
         /**
@@ -6832,7 +6832,7 @@ export declare namespace appmesh {
     }
     interface VirtualGatewaySpecListenerTlsValidationTrustSds {
         /**
-         * Name of the secret for a virtual gateway's Transport Layer Security (TLS) Secret Discovery Service validation context trust.
+         * Name of the secret for a virtual gateway's TLS Secret Discovery Service validation context trust.
          */
         secretName: string;
     }
@@ -6911,7 +6911,7 @@ export declare namespace appmesh {
     }
     interface VirtualNodeSpecBackendDefaultsClientPolicy {
         /**
-         * Transport Layer Security (TLS) properties for the listener. See `spec.listener.tls` Block for details.
+         * TLS properties for the listener. See `spec.listener.tls` Block for details.
          */
         tls?: outputs.appmesh.VirtualNodeSpecBackendDefaultsClientPolicyTls;
     }
@@ -6929,7 +6929,7 @@ export declare namespace appmesh {
          */
         ports?: number[];
         /**
-         * Listener's Transport Layer Security (TLS) validation context. See `spec.listener.tls.validation` Block for details.
+         * Listener's TLS validation context. See `spec.listener.tls.validation` Block for details.
          */
         validation: outputs.appmesh.VirtualNodeSpecBackendDefaultsClientPolicyTlsValidation;
     }
@@ -6955,7 +6955,7 @@ export declare namespace appmesh {
     }
     interface VirtualNodeSpecBackendDefaultsClientPolicyTlsCertificateSds {
         /**
-         * Name of the secret for a virtual node's Transport Layer Security (TLS) Secret Discovery Service validation context trust.
+         * Name of the secret for a virtual node's TLS Secret Discovery Service validation context trust.
          */
         secretName: string;
     }
@@ -7009,7 +7009,7 @@ export declare namespace appmesh {
     }
     interface VirtualNodeSpecBackendDefaultsClientPolicyTlsValidationTrustSds {
         /**
-         * Name of the secret for a virtual node's Transport Layer Security (TLS) Secret Discovery Service validation context trust.
+         * Name of the secret for a virtual node's TLS Secret Discovery Service validation context trust.
          */
         secretName: string;
     }
@@ -7025,7 +7025,7 @@ export declare namespace appmesh {
     }
     interface VirtualNodeSpecBackendVirtualServiceClientPolicy {
         /**
-         * Transport Layer Security (TLS) properties for the listener. See `spec.listener.tls` Block for details.
+         * TLS properties for the listener. See `spec.listener.tls` Block for details.
          */
         tls?: outputs.appmesh.VirtualNodeSpecBackendVirtualServiceClientPolicyTls;
     }
@@ -7043,7 +7043,7 @@ export declare namespace appmesh {
          */
         ports?: number[];
         /**
-         * Listener's Transport Layer Security (TLS) validation context. See `spec.listener.tls.validation` Block for details.
+         * Listener's TLS validation context. See `spec.listener.tls.validation` Block for details.
          */
         validation: outputs.appmesh.VirtualNodeSpecBackendVirtualServiceClientPolicyTlsValidation;
     }
@@ -7069,7 +7069,7 @@ export declare namespace appmesh {
     }
     interface VirtualNodeSpecBackendVirtualServiceClientPolicyTlsCertificateSds {
         /**
-         * Name of the secret for a virtual node's Transport Layer Security (TLS) Secret Discovery Service validation context trust.
+         * Name of the secret for a virtual node's TLS Secret Discovery Service validation context trust.
          */
         secretName: string;
     }
@@ -7123,7 +7123,7 @@ export declare namespace appmesh {
     }
     interface VirtualNodeSpecBackendVirtualServiceClientPolicyTlsValidationTrustSds {
         /**
-         * Name of the secret for a virtual node's Transport Layer Security (TLS) Secret Discovery Service validation context trust.
+         * Name of the secret for a virtual node's TLS Secret Discovery Service validation context trust.
          */
         secretName: string;
     }
@@ -7149,7 +7149,7 @@ export declare namespace appmesh {
          */
         timeout?: outputs.appmesh.VirtualNodeSpecListenerTimeout;
         /**
-         * Transport Layer Security (TLS) properties for the listener. See `spec.listener.tls` Block for details.
+         * TLS properties for the listener. See `spec.listener.tls` Block for details.
          */
         tls?: outputs.appmesh.VirtualNodeSpecListenerTls;
     }
@@ -7411,7 +7411,7 @@ export declare namespace appmesh {
          */
         mode: string;
         /**
-         * Listener's Transport Layer Security (TLS) validation context. See `spec.listener.tls.validation` Block for details.
+         * Listener's TLS validation context. See `spec.listener.tls.validation` Block for details.
          */
         validation?: outputs.appmesh.VirtualNodeSpecListenerTlsValidation;
     }
@@ -7447,7 +7447,7 @@ export declare namespace appmesh {
     }
     interface VirtualNodeSpecListenerTlsCertificateSds {
         /**
-         * Name of the secret for a virtual node's Transport Layer Security (TLS) Secret Discovery Service validation context trust.
+         * Name of the secret for a virtual node's TLS Secret Discovery Service validation context trust.
          */
         secretName: string;
     }
@@ -7491,7 +7491,7 @@ export declare namespace appmesh {
     }
     interface VirtualNodeSpecListenerTlsValidationTrustSds {
         /**
-         * Name of the secret for a virtual node's Transport Layer Security (TLS) Secret Discovery Service validation context trust.
+         * Name of the secret for a virtual node's TLS Secret Discovery Service validation context trust.
          */
         secretName: string;
     }
@@ -7715,7 +7715,7 @@ export declare namespace apprunner {
          */
         ingressConfiguration: outputs.apprunner.ServiceNetworkConfigurationIngressConfiguration;
         /**
-         * App Runner provides you with the option to choose between Internet Protocol version 4 (IPv4) and dual stack (IPv4 and IPv6) for your incoming public network configuration. Valid values: `IPV4`, `DUAL_STACK`. Default: `IPV4`.
+         * App Runner provides you with the option to choose between IP version 4 (IPv4) and dual stack (IPv4 and IPv6) for your incoming public network configuration. Valid values: `IPV4`, `DUAL_STACK`. Default: `IPV4`.
          */
         ipAddressType?: string;
     }
@@ -7725,7 +7725,7 @@ export declare namespace apprunner {
          */
         egressType: string;
         /**
-         * Amazon Resource Name (ARN) of the App Runner VPC connector that you want to associate with your App Runner service. Only valid when `EgressType = VPC`.
+         * ARN of the App Runner VPC connector that you want to associate with your App Runner service. Only valid when `EgressType = VPC`.
          */
         vpcConnectorArn?: string;
     }
@@ -8569,7 +8569,7 @@ export declare namespace appsync {
     }
     interface GraphQLApiLogConfig {
         /**
-         * Amazon Resource Name of the service role that AWS AppSync will assume to publish to Amazon CloudWatch logs in your account.
+         * ARN of the service role that AWS AppSync will assume to publish to Amazon CloudWatch logs in your account.
          */
         cloudwatchLogsRoleArn: string;
         /**
@@ -10185,7 +10185,7 @@ export declare namespace athena {
          */
         queryResultsS3AccessGrantsConfiguration?: outputs.athena.WorkgroupConfigurationQueryResultsS3AccessGrantsConfiguration;
         /**
-         * If set to true , allows members assigned to a workgroup to reference Amazon S3 Requester Pays buckets in queries. If set to false , workgroup members cannot query data from Requester Pays buckets, and queries that retrieve data from Requester Pays buckets cause an error. The default is false . For more information about Requester Pays buckets, see [Requester Pays Buckets](https://docs.aws.amazon.com/AmazonS3/latest/dev/RequesterPaysBuckets.html) in the Amazon Simple Storage Service Developer Guide.
+         * If set to true , allows members assigned to a workgroup to reference Amazon S3 Requester Pays buckets in queries. If set to false , workgroup members cannot query data from Requester Pays buckets, and queries that retrieve data from Requester Pays buckets cause an error. The default is false . For more information about Requester Pays buckets, see [Requester Pays Buckets](https://docs.aws.amazon.com/AmazonS3/latest/dev/RequesterPaysBuckets.html) in the S3 Developer Guide.
          */
         requesterPaysEnabled?: boolean;
         /**
@@ -10351,7 +10351,7 @@ export declare namespace auditmanager {
     }
     interface AssessmentRole {
         /**
-         * Amazon Resource Name (ARN) of the IAM role.
+         * ARN of the IAM role.
          */
         roleArn: string;
         /**
@@ -10361,7 +10361,7 @@ export declare namespace auditmanager {
     }
     interface AssessmentRolesAll {
         /**
-         * Amazon Resource Name (ARN) of the IAM role.
+         * ARN of the IAM role.
          */
         roleArn: string;
         /**
@@ -10820,7 +10820,7 @@ export declare namespace autoscaling {
     }
     interface GetGroupTrafficSource {
         /**
-         * Identifier of the traffic source. For Application Load Balancers, Gateway Load Balancers, Network Load Balancers, and VPC Lattice, this will be the Amazon Resource Name (ARN) for a target group in this account and Region. For Classic Load Balancers, this will be the name of the Classic Load Balancer in this account and Region.
+         * Identifier of the traffic source. For Application Load Balancers, Gateway Load Balancers, Network Load Balancers, and VPC Lattice, this will be the ARN for a target group in this account and Region. For Classic Load Balancers, this will be the name of the Classic Load Balancer in this account and Region.
          */
         identifier: string;
         /**
@@ -11139,7 +11139,7 @@ export declare namespace autoscaling {
         /**
          * List of CPU manufacturer names. Default is any manufacturer.
          *
-         * > **NOTE:** Don't confuse the CPU hardware manufacturer with the CPU hardware architecture. Instances will be launched with a compatible CPU architecture based on the Amazon Machine Image (AMI) that you specify in your launch template.
+         * > **NOTE:** Don't confuse the CPU hardware manufacturer with the CPU hardware architecture. Instances will be launched with a compatible CPU architecture based on the AMI that you specify in your launch template.
          *
          * ```
          * Valid names:
@@ -11292,7 +11292,7 @@ export declare namespace autoscaling {
     }
     interface GroupTrafficSource {
         /**
-         * Identifies the traffic source. For Application Load Balancers, Gateway Load Balancers, Network Load Balancers, and VPC Lattice, this will be the Amazon Resource Name (ARN) for a target group in this account and Region. For Classic Load Balancers, this will be the name of the Classic Load Balancer in this account and Region.
+         * Identifies the traffic source. For Application Load Balancers, Gateway Load Balancers, Network Load Balancers, and VPC Lattice, this will be the ARN for a target group in this account and Region. For Classic Load Balancers, this will be the name of the Classic Load Balancer in this account and Region.
          */
         identifier: string;
         /**
@@ -11781,7 +11781,7 @@ export declare namespace autoscaling {
     }
     interface TrafficSourceAttachmentTrafficSource {
         /**
-         * Identifies the traffic source. For Application Load Balancers, Gateway Load Balancers, Network Load Balancers, and VPC Lattice, this will be the Amazon Resource Name (ARN) for a target group in this account and Region. For Classic Load Balancers, this will be the name of the Classic Load Balancer in this account and Region.
+         * Identifies the traffic source. For Application Load Balancers, Gateway Load Balancers, Network Load Balancers, and VPC Lattice, this will be the ARN for a target group in this account and Region. For Classic Load Balancers, this will be the name of the Classic Load Balancer in this account and Region.
          */
         identifier: string;
         /**
@@ -12213,7 +12213,7 @@ export declare namespace backup {
     }
     interface PlanRuleCopyAction {
         /**
-         * An Amazon Resource Name (ARN) that uniquely identifies the destination backup vault for the copied backup.
+         * ARN that uniquely identifies the destination backup vault for the copied backup.
          */
         destinationVaultArn: string;
         /**
@@ -12293,7 +12293,7 @@ export declare namespace backup {
          */
         accounts?: string[];
         /**
-         * Amazon Resource Names (ARNs) of the frameworks a report covers.
+         * ARNs of the frameworks a report covers.
          */
         frameworkArns?: string[];
         /**
@@ -12453,7 +12453,7 @@ export declare namespace batch {
          */
         desiredVcpus: number;
         /**
-         * Provides information used to select Amazon Machine Images (AMIs) for EC2 instances in the compute environment. If Ec2Configuration isn't specified, the default is ECS_AL2. This parameter isn't applicable to jobs that are running on Fargate resources, and shouldn't be specified.
+         * Provides information used to select AMIs for EC2 instances in the compute environment. If Ec2Configuration isn't specified, the default is ECS_AL2. This parameter isn't applicable to jobs that are running on Fargate resources, and shouldn't be specified.
          */
         ec2Configurations: outputs.batch.ComputeEnvironmentComputeResourcesEc2Configuration[];
         /**
@@ -12461,7 +12461,7 @@ export declare namespace batch {
          */
         ec2KeyPair?: string;
         /**
-         * The Amazon Machine Image (AMI) ID used for instances launched in the compute environment. This parameter isn't applicable to jobs running on Fargate resources, and shouldn't be specified. (Deprecated, use `ec2Configuration` `imageIdOverride` instead)
+         * AMI ID used for instances launched in the compute environment. This parameter isn't applicable to jobs running on Fargate resources, and shouldn't be specified. (Deprecated, use `ec2Configuration` `imageIdOverride` instead)
          */
         imageId?: string;
         /**
@@ -12493,7 +12493,7 @@ export declare namespace batch {
          */
         securityGroupIds?: string[];
         /**
-         * The Amazon Resource Name (ARN) of the Amazon EC2 Spot Fleet IAM role applied to a SPOT compute environment. This parameter is required for SPOT compute environments. This parameter isn't applicable to jobs running on Fargate resources, and shouldn't be specified.
+         * ARN of the Amazon EC2 Spot Fleet IAM role applied to a SPOT compute environment. This parameter is required for SPOT compute environments. This parameter isn't applicable to jobs running on Fargate resources, and shouldn't be specified.
          */
         spotIamFleetRole?: string;
         /**
@@ -12541,7 +12541,7 @@ export declare namespace batch {
     }
     interface ComputeEnvironmentEksConfiguration {
         /**
-         * The Amazon Resource Name (ARN) of the Amazon EKS cluster.
+         * ARN of the Amazon EKS cluster.
          */
         eksClusterArn: string;
         /**
@@ -12907,7 +12907,7 @@ export declare namespace batch {
          */
         ephemeralStorages: outputs.batch.GetJobDefinitionNodePropertyNodeRangePropertyContainerEphemeralStorage[];
         /**
-         * Amazon Resource Name (ARN) of the execution role that AWS Batch can assume. For jobs that run on Fargate resources, you must provide an execution role.
+         * ARN of the execution role that AWS Batch can assume. For jobs that run on Fargate resources, you must provide an execution role.
          */
         executionRoleArn: string;
         /**
@@ -12923,7 +12923,7 @@ export declare namespace batch {
          */
         instanceType: string;
         /**
-         * Amazon Resource Name (ARN) of the IAM role that the container can assume for AWS permissions.
+         * ARN of the IAM role that the container can assume for AWS permissions.
          */
         jobRoleArn: string;
         /**
@@ -13603,7 +13603,7 @@ export declare namespace batch {
     }
     interface JobQueueComputeEnvironmentOrder {
         /**
-         * The Amazon Resource Name (ARN) of the compute environment.
+         * ARN of the compute environment.
          */
         computeEnvironment: string;
         /**
@@ -14088,7 +14088,7 @@ export declare namespace bedrock {
          */
         authType: string;
         /**
-         * The Amazon Resource Name of an AWS Secrets Manager secret that stores your authentication credentials for your SharePoint site. For more information on the key-value pairs that must be included in your secret, depending on your authentication type, see SharePoint connection configuration. Pattern: ^arn:aws(|-cn|-us-gov):secretsmanager:[a-z0-9-]{1,20}:([0-9]{12}|):secret:[a-zA-Z0-9!/_+=.@-]{1,512}$.
+         * ARN of an AWS Secrets Manager secret that stores your authentication credentials for your SharePoint site. For more information on the key-value pairs that must be included in your secret, depending on your authentication type, see SharePoint connection configuration. Pattern: ^arn:aws(|-cn|-us-gov):secretsmanager:[a-z0-9-]{1,20}:([0-9]{12}|):secret:[a-zA-Z0-9!/_+=.@-]{1,512}$.
          */
         credentialsSecretArn: string;
         /**
@@ -14212,7 +14212,7 @@ export declare namespace bedrock {
          */
         authType: string;
         /**
-         * The Amazon Resource Name of an AWS Secrets Manager secret that stores your authentication credentials for your SharePoint site. For more information on the key-value pairs that must be included in your secret, depending on your authentication type, see SharePoint connection configuration. Pattern: ^arn:aws(|-cn|-us-gov):secretsmanager:[a-z0-9-]{1,20}:([0-9]{12}|):secret:[a-zA-Z0-9!/_+=.@-]{1,512}$.
+         * ARN of an AWS Secrets Manager secret that stores your authentication credentials for your SharePoint site. For more information on the key-value pairs that must be included in your secret, depending on your authentication type, see SharePoint connection configuration. Pattern: ^arn:aws(|-cn|-us-gov):secretsmanager:[a-z0-9-]{1,20}:([0-9]{12}|):secret:[a-zA-Z0-9!/_+=.@-]{1,512}$.
          */
         credentialsSecretArn: string;
         /**
@@ -14262,7 +14262,7 @@ export declare namespace bedrock {
          */
         authType: string;
         /**
-         * The Amazon Resource Name of an AWS Secrets Manager secret that stores your authentication credentials for your SharePoint site. For more information on the key-value pairs that must be included in your secret, depending on your authentication type, see SharePoint connection configuration. Pattern: ^arn:aws(|-cn|-us-gov):secretsmanager:[a-z0-9-]{1,20}:([0-9]{12}|):secret:[a-zA-Z0-9!/_+=.@-]{1,512}$.
+         * ARN of an AWS Secrets Manager secret that stores your authentication credentials for your SharePoint site. For more information on the key-value pairs that must be included in your secret, depending on your authentication type, see SharePoint connection configuration. Pattern: ^arn:aws(|-cn|-us-gov):secretsmanager:[a-z0-9-]{1,20}:([0-9]{12}|):secret:[a-zA-Z0-9!/_+=.@-]{1,512}$.
          */
         credentialsSecretArn: string;
         /**
@@ -14648,7 +14648,7 @@ export declare namespace bedrock {
     }
     interface AgentFlowDefinitionNodeConfigurationAgent {
         /**
-         * The Amazon Resource Name (ARN) of the alias of the agent to invoke.
+         * ARN of the alias of the agent to invoke.
          */
         agentAliasArn: string;
     }
@@ -14736,13 +14736,13 @@ export declare namespace bedrock {
     }
     interface AgentFlowDefinitionNodeConfigurationLambdaFunction {
         /**
-         * The Amazon Resource Name (ARN) of the Lambda function to invoke.
+         * ARN of the Lambda function to invoke.
          */
         lambdaArn: string;
     }
     interface AgentFlowDefinitionNodeConfigurationLex {
         /**
-         * The Amazon Resource Name (ARN) of the Amazon Lex bot alias to invoke.
+         * ARN of the Amazon Lex bot alias to invoke.
          */
         botAliasArn: string;
         /**
@@ -14999,7 +14999,7 @@ export declare namespace bedrock {
     }
     interface AgentFlowDefinitionNodeConfigurationPromptSourceConfigurationResource {
         /**
-         * The Amazon Resource Name (ARN) of the prompt from Prompt management.
+         * ARN of the prompt from Prompt management.
          */
         promptArn: string;
     }
@@ -18689,11 +18689,11 @@ export declare namespace bedrock {
     }
     interface AgentcoreMemoryStrategyConfiguration {
         /**
-         * Consolidation configuration for the memory strategy. See `consolidation` Block below. Once added, this block cannot be removed without recreating the resource.
+         * Consolidation configuration for the memory strategy. See `consolidation` Block below. Cannot be used with `type` set to `SELF_MANAGED`. Once added, this block cannot be removed without recreating the resource.
          */
         consolidation?: outputs.bedrock.AgentcoreMemoryStrategyConfigurationConsolidation;
         /**
-         * Extraction configuration for the memory strategy. See `extraction` Block below. Cannot be used with `type` set to `SUMMARY_OVERRIDE`. Once added, this block cannot be removed without recreating the resource.
+         * Extraction configuration for the memory strategy. See `extraction` Block below. Cannot be used with `type` set to `SUMMARY_OVERRIDE` or `SELF_MANAGED`. Once added, this block cannot be removed without recreating the resource.
          */
         extraction?: outputs.bedrock.AgentcoreMemoryStrategyConfigurationExtraction;
         /**
@@ -18701,7 +18701,11 @@ export declare namespace bedrock {
          */
         reflection?: outputs.bedrock.AgentcoreMemoryStrategyConfigurationReflection;
         /**
-         * Type of custom override. Valid values: `SEMANTIC_OVERRIDE`, `SUMMARY_OVERRIDE`, `USER_PREFERENCE_OVERRIDE`, `EPISODIC_OVERRIDE`. Changing this forces a new resource.
+         * Self-managed processing configuration. Required when `type` is `SELF_MANAGED` and only valid for that type. See `selfManagedConfiguration` Block below.
+         */
+        selfManagedConfiguration?: outputs.bedrock.AgentcoreMemoryStrategyConfigurationSelfManagedConfiguration;
+        /**
+         * Type of custom override. Valid values: `SEMANTIC_OVERRIDE`, `SUMMARY_OVERRIDE`, `USER_PREFERENCE_OVERRIDE`, `EPISODIC_OVERRIDE`, `SELF_MANAGED`. Changing this forces a new resource.
          */
         type: string;
     }
@@ -18739,6 +18743,182 @@ export declare namespace bedrock {
          */
         namespaceTemplates: string[];
     }
+    interface AgentcoreMemoryStrategyConfigurationSelfManagedConfiguration {
+        /**
+         * Number of historical messages to include in processing context. Valid range: `0` to `50`. Defaults to `4`.
+         */
+        historicalContextWindowSize: number;
+        /**
+         * Configuration used to invoke the self-managed memory processing pipeline. See `invocationConfiguration` Block below.
+         */
+        invocationConfiguration: outputs.bedrock.AgentcoreMemoryStrategyConfigurationSelfManagedConfigurationInvocationConfiguration;
+        /**
+         * Conditions that trigger memory processing. See `triggerConditions` Block below. When omitted, the service supplies the documented defaults for all three trigger types.
+         */
+        triggerConditions?: outputs.bedrock.AgentcoreMemoryStrategyConfigurationSelfManagedConfigurationTriggerConditions;
+        /**
+         * Actual deployed trigger conditions.
+         */
+        triggerConditionsActuals: outputs.bedrock.AgentcoreMemoryStrategyConfigurationSelfManagedConfigurationTriggerConditionsActual[];
+    }
+    interface AgentcoreMemoryStrategyConfigurationSelfManagedConfigurationInvocationConfiguration {
+        /**
+         * S3 bucket name for event payload delivery.
+         */
+        payloadDeliveryBucketName: string;
+        /**
+         * ARN of the SNS topic for job notifications.
+         */
+        topicArn: string;
+    }
+    interface AgentcoreMemoryStrategyConfigurationSelfManagedConfigurationTriggerConditions {
+        /**
+         * Message-based condition. See `messageBasedTrigger` Block below.
+         */
+        messageBasedTrigger?: outputs.bedrock.AgentcoreMemoryStrategyConfigurationSelfManagedConfigurationTriggerConditionsMessageBasedTrigger;
+        /**
+         * Idle-time condition. See `timeBasedTrigger` Block below.
+         */
+        timeBasedTrigger?: outputs.bedrock.AgentcoreMemoryStrategyConfigurationSelfManagedConfigurationTriggerConditionsTimeBasedTrigger;
+        /**
+         * Token-based condition. See `tokenBasedTrigger` Block below.
+         */
+        tokenBasedTrigger?: outputs.bedrock.AgentcoreMemoryStrategyConfigurationSelfManagedConfigurationTriggerConditionsTokenBasedTrigger;
+    }
+    interface AgentcoreMemoryStrategyConfigurationSelfManagedConfigurationTriggerConditionsActual {
+        /**
+         * Message-based condition.
+         */
+        messageBasedTriggers: outputs.bedrock.AgentcoreMemoryStrategyConfigurationSelfManagedConfigurationTriggerConditionsActualMessageBasedTrigger[];
+        /**
+         * Idle-time condition.
+         */
+        timeBasedTriggers: outputs.bedrock.AgentcoreMemoryStrategyConfigurationSelfManagedConfigurationTriggerConditionsActualTimeBasedTrigger[];
+        /**
+         * Token-based condition.
+         */
+        tokenBasedTriggers: outputs.bedrock.AgentcoreMemoryStrategyConfigurationSelfManagedConfigurationTriggerConditionsActualTokenBasedTrigger[];
+    }
+    interface AgentcoreMemoryStrategyConfigurationSelfManagedConfigurationTriggerConditionsActualMessageBasedTrigger {
+        /**
+         * Number of messages that trigger memory processing. Accepts values from `1` to `50`.
+         */
+        messageCount: number;
+    }
+    interface AgentcoreMemoryStrategyConfigurationSelfManagedConfigurationTriggerConditionsActualTimeBasedTrigger {
+        /**
+         * Idle session timeout (seconds) that triggers memory processing. Accepts values from `10` to `3000`.
+         */
+        idleSessionTimeout: number;
+    }
+    interface AgentcoreMemoryStrategyConfigurationSelfManagedConfigurationTriggerConditionsActualTokenBasedTrigger {
+        /**
+         * Number of tokens that trigger memory processing. Accepts values from `100` to `500000`.
+         */
+        tokenCount: number;
+    }
+    interface AgentcoreMemoryStrategyConfigurationSelfManagedConfigurationTriggerConditionsMessageBasedTrigger {
+        /**
+         * Number of messages that trigger memory processing. Accepts values from `1` to `50`.
+         */
+        messageCount: number;
+    }
+    interface AgentcoreMemoryStrategyConfigurationSelfManagedConfigurationTriggerConditionsTimeBasedTrigger {
+        /**
+         * Idle session timeout (seconds) that triggers memory processing. Accepts values from `10` to `3000`.
+         */
+        idleSessionTimeout: number;
+    }
+    interface AgentcoreMemoryStrategyConfigurationSelfManagedConfigurationTriggerConditionsTokenBasedTrigger {
+        /**
+         * Number of tokens that trigger memory processing. Accepts values from `100` to `500000`.
+         */
+        tokenCount: number;
+    }
+    interface AgentcoreMemoryStrategyMemoryRecordSchema {
+        /**
+         * List of metadata field definitions for records generated by this strategy. See `metadataSchema` Block below.
+         */
+        metadataSchemas?: outputs.bedrock.AgentcoreMemoryStrategyMemoryRecordSchemaMetadataSchema[];
+    }
+    interface AgentcoreMemoryStrategyMemoryRecordSchemaMetadataSchema {
+        /**
+         * Configuration for extracting this metadata value from conversational content. Applicable only when `extractionType` is `LLM_INFERRED`. See `extractionConfig` Block below.
+         */
+        extractionConfig?: outputs.bedrock.AgentcoreMemoryStrategyMemoryRecordSchemaMetadataSchemaExtractionConfig;
+        /**
+         * Whether the metadata value is extracted by the LLM or passed through deterministically from the event. Valid values: `LLM_INFERRED`, `STRICTLY_CONSISTENT`.
+         */
+        extractionType: string;
+        /**
+         * Metadata field name. Must match an indexed key to be queryable via metadata filters.
+         */
+        key: string;
+        /**
+         * Metadata value type. Valid values: `STRING`, `STRINGLIST`, `NUMBER`.
+         */
+        type: string;
+    }
+    interface AgentcoreMemoryStrategyMemoryRecordSchemaMetadataSchemaExtractionConfig {
+        /**
+         * Model-based extraction configuration. See `llmExtractionConfig` Block below.
+         */
+        llmExtractionConfig?: outputs.bedrock.AgentcoreMemoryStrategyMemoryRecordSchemaMetadataSchemaExtractionConfigLlmExtractionConfig;
+    }
+    interface AgentcoreMemoryStrategyMemoryRecordSchemaMetadataSchemaExtractionConfigLlmExtractionConfig {
+        /**
+         * Description of what this metadata field represents.
+         */
+        definition: string;
+        /**
+         * Instructions for extraction. Supports built-in operators like `LATEST_VALUE` or custom natural-language instructions.
+         */
+        llmExtractionInstruction: string;
+        /**
+         * Validation rules to constrain extracted values. See `validation` Block below.
+         */
+        validation?: outputs.bedrock.AgentcoreMemoryStrategyMemoryRecordSchemaMetadataSchemaExtractionConfigLlmExtractionConfigValidation;
+    }
+    interface AgentcoreMemoryStrategyMemoryRecordSchemaMetadataSchemaExtractionConfigLlmExtractionConfigValidation {
+        /**
+         * Validation for `NUMBER` fields. See `numberValidation` Block below.
+         */
+        numberValidation?: outputs.bedrock.AgentcoreMemoryStrategyMemoryRecordSchemaMetadataSchemaExtractionConfigLlmExtractionConfigValidationNumberValidation;
+        /**
+         * Validation for `STRINGLIST` fields. See `stringListValidation` Block below.
+         */
+        stringListValidation?: outputs.bedrock.AgentcoreMemoryStrategyMemoryRecordSchemaMetadataSchemaExtractionConfigLlmExtractionConfigValidationStringListValidation;
+        /**
+         * Validation for `STRING` fields. See `stringValidation` Block below.
+         */
+        stringValidation?: outputs.bedrock.AgentcoreMemoryStrategyMemoryRecordSchemaMetadataSchemaExtractionConfigLlmExtractionConfigValidationStringValidation;
+    }
+    interface AgentcoreMemoryStrategyMemoryRecordSchemaMetadataSchemaExtractionConfigLlmExtractionConfigValidationNumberValidation {
+        /**
+         * Maximum allowed value.
+         */
+        maxValue?: number;
+        /**
+         * Minimum allowed value.
+         */
+        minValue?: number;
+    }
+    interface AgentcoreMemoryStrategyMemoryRecordSchemaMetadataSchemaExtractionConfigLlmExtractionConfigValidationStringListValidation {
+        /**
+         * Allowed values for items in this `STRINGLIST` field.
+         */
+        allowedValues?: string[];
+        /**
+         * Maximum number of items in the string list.
+         */
+        maxItems?: number;
+    }
+    interface AgentcoreMemoryStrategyMemoryRecordSchemaMetadataSchemaExtractionConfigLlmExtractionConfigValidationStringValidation {
+        /**
+         * Allowed values for this `STRING` field.
+         */
+        allowedValues: string[];
+    }
     interface AgentcoreMemoryStrategyReflectionConfiguration {
         /**
          * Namespace templates over which to create reflections. Can be less nested than episode namespaces.
@@ -18761,21 +18941,21 @@ export declare namespace bedrock {
     }
     interface AgentcoreMemoryStreamDeliveryResources {
         /**
-         * List of stream delivery resource configurations. See `resource` below.
+         * List of stream delivery resource configurations. See `resource` Block below.
          */
         resource?: outputs.bedrock.AgentcoreMemoryStreamDeliveryResourcesResource;
     }
     interface AgentcoreMemoryStreamDeliveryResourcesResource {
         /**
-         * Kinesis Data Stream configuration. See `kinesis` below.
+         * Kinesis Data Stream configuration. See `kinesis` Block below.
          */
         kinesis?: outputs.bedrock.AgentcoreMemoryStreamDeliveryResourcesResourceKinesis;
     }
     interface AgentcoreMemoryStreamDeliveryResourcesResourceKinesis {
         /**
-         * Content configurations for stream delivery. See `contentConfiguration` below.
+         * Content configurations for stream delivery. See `contentConfiguration` Block below.
          */
-        contentConfiguration?: outputs.bedrock.AgentcoreMemoryStreamDeliveryResourcesResourceKinesisContentConfiguration;
+        contentConfiguration: outputs.bedrock.AgentcoreMemoryStreamDeliveryResourcesResourceKinesisContentConfiguration;
         /**
          * ARN of the Kinesis Data Stream.
          */
@@ -19856,7 +20036,7 @@ export declare namespace bedrock {
     }
     interface GetInferenceProfileModel {
         /**
-         * The Amazon Resource Name (ARN) of the model.
+         * The ARN of the model.
          */
         modelArn: string;
     }
@@ -19870,7 +20050,7 @@ export declare namespace bedrock {
          */
         description: string;
         /**
-         * Amazon Resource Name (ARN) of the inference profile.
+         * ARN of the inference profile.
          */
         inferenceProfileArn: string;
         /**
@@ -19900,7 +20080,7 @@ export declare namespace bedrock {
     }
     interface GetInferenceProfilesInferenceProfileSummaryModel {
         /**
-         * Amazon Resource Name (ARN) of the model.
+         * ARN of the model.
          */
         modelArn: string;
     }
@@ -20165,13 +20345,13 @@ export declare namespace bedrock {
     }
     interface InferenceProfileModel {
         /**
-         * The Amazon Resource Name (ARN) of the model.
+         * The ARN of the model.
          */
         modelArn: string;
     }
     interface InferenceProfileModelSource {
         /**
-         * The Amazon Resource Name (ARN) of the model.
+         * The ARN of the model.
          */
         copyFrom: string;
     }
@@ -20489,7 +20669,7 @@ export declare namespace budgets {
          */
         groups?: string[];
         /**
-         * The Amazon Resource Name (ARN) of the policy to be attached.
+         * ARN of the policy to be attached.
          */
         policyArn: string;
         /**
@@ -21836,7 +22016,7 @@ export declare namespace chime {
     }
     interface SdkvoiceSipMediaApplicationEndpoints {
         /**
-         * Valid Amazon Resource Name (ARN) of the Lambda function, version, or alias. The function must be created in the same AWS Region as the SIP media application.
+         * Valid ARN of the Lambda function, version, or alias. The function must be created in the same AWS Region as the SIP media application.
          */
         lambdaArn: string;
     }
@@ -22255,7 +22435,7 @@ export declare namespace cloudformation {
          */
         logGroupName: string;
         /**
-         * Amazon Resource Name (ARN) of the IAM Role CloudFormation assumes when sending error logging information to CloudWatch Logs.
+         * ARN of the IAM Role CloudFormation assumes when sending error logging information to CloudWatch Logs.
          */
         logRoleArn: string;
     }
@@ -23418,7 +23598,7 @@ export declare namespace cloudfront {
     }
     interface GetDistributionTenantCustomizationCertificate {
         /**
-         * ARN (Amazon Resource Name) for the distribution tenant.
+         * ARN for the distribution tenant.
          */
         arn: string;
     }
@@ -23429,7 +23609,7 @@ export declare namespace cloudfront {
     interface GetDistributionTenantCustomizationWebAcl {
         action: string;
         /**
-         * ARN (Amazon Resource Name) for the distribution tenant.
+         * ARN for the distribution tenant.
          */
         arn: string;
     }
@@ -24694,7 +24874,7 @@ export declare namespace cloudwatch {
     }
     interface CompositeAlarmActionsSuppressor {
         /**
-         * Can be an AlarmName or an Amazon Resource Name (ARN) from an existing alarm.
+         * Can be an AlarmName or an ARN from an existing alarm.
          */
         alarm: string;
         /**
@@ -26892,7 +27072,7 @@ export declare namespace codeconnections {
          */
         subnetIds: string[];
         /**
-         * The value of the Transport Layer Security (TLS) certificate associated with the infrastructure where your provider type is installed.
+         * Value of the TLS certificate associated with the infrastructure where your provider type is installed.
          */
         tlsCertificate?: string;
         /**
@@ -27149,7 +27329,7 @@ export declare namespace codedeploy {
     }
     interface DeploymentGroupLoadBalancerInfoTargetGroupPairInfoProdTrafficRoute {
         /**
-         * List of Amazon Resource Names (ARNs) of the load balancer listeners. Must contain exactly one listener ARN.
+         * List of ARNs of the load balancer listeners. Must contain exactly one listener ARN.
          */
         listenerArns: string[];
     }
@@ -27161,7 +27341,7 @@ export declare namespace codedeploy {
     }
     interface DeploymentGroupLoadBalancerInfoTargetGroupPairInfoTestTrafficRoute {
         /**
-         * List of Amazon Resource Names (ARNs) of the load balancer listeners.
+         * List of ARNs of the load balancer listeners.
          */
         listenerArns: string[];
     }
@@ -27217,7 +27397,7 @@ export declare namespace codeguruprofiler {
 export declare namespace codegurureviewer {
     interface RepositoryAssociationKmsKeyDetails {
         /**
-         * The encryption option for a repository association. It is either owned by AWS Key Management Service (KMS) (`AWS_OWNED_CMK`) or customer managed (`CUSTOMER_MANAGED_CMK`).
+         * Encryption option for a repository association. It is either owned by KMS (`AWS_OWNED_CMK`) or customer managed (`CUSTOMER_MANAGED_CMK`).
          */
         encryptionOption?: string;
         /**
@@ -27233,7 +27413,7 @@ export declare namespace codegurureviewer {
     }
     interface RepositoryAssociationRepositoryBitbucket {
         /**
-         * The Amazon Resource Name (ARN) of an AWS CodeStar Connections connection.
+         * ARN of an AWS CodeStar Connections connection.
          */
         connectionArn: string;
         /**
@@ -27253,7 +27433,7 @@ export declare namespace codegurureviewer {
     }
     interface RepositoryAssociationRepositoryGithubEnterpriseServer {
         /**
-         * The Amazon Resource Name (ARN) of an AWS CodeStar Connections connection.
+         * ARN of an AWS CodeStar Connections connection.
          */
         connectionArn: string;
         /**
@@ -27358,7 +27538,7 @@ export declare namespace codepipeline {
     }
     interface PipelineArtifactStore {
         /**
-         * The encryption key block AWS CodePipeline uses to encrypt the data in the artifact store, such as an AWS Key Management Service (AWS KMS) key. If you don't specify a key, AWS CodePipeline uses the default key for Amazon Simple Storage Service (Amazon S3). An `encryptionKey` block is documented below.
+         * Encryption key block AWS CodePipeline uses to encrypt the data in the artifact store, such as a KMS key. If you don't specify a key, AWS CodePipeline uses the default key for S3. An `encryptionKey` block is documented below.
          */
         encryptionKey?: outputs.codepipeline.PipelineArtifactStoreEncryptionKey;
         /**
@@ -27958,7 +28138,7 @@ export declare namespace codestarconnections {
          */
         subnetIds: string[];
         /**
-         * The value of the Transport Layer Security (TLS) certificate associated with the infrastructure where your provider type is installed.
+         * Value of the TLS certificate associated with the infrastructure where your provider type is installed.
          */
         tlsCertificate?: string;
         /**
@@ -28120,7 +28300,7 @@ export declare namespace cognito {
          */
         replyToEmailAddress: string;
         /**
-         * - Source Amazon Resource Name (ARN) for emails.
+         * - Source ARN for emails.
          */
         sourceArn: string;
     }
@@ -28466,7 +28646,7 @@ export declare namespace cognito {
          */
         replyTo?: string;
         /**
-         * The Amazon Resource Name (ARN) of the identity that is associated with the sending authorization policy. This identity permits Amazon Cognito to send for the email address specified in the From parameter.
+         * ARN of the identity that is associated with the sending authorization policy. This identity permits Amazon Cognito to send for the email address specified in the From parameter.
          */
         sourceArn: string;
     }
@@ -28692,7 +28872,7 @@ export declare namespace cognito {
          */
         defineAuthChallenge?: string;
         /**
-         * The Amazon Resource Name of Key Management Service Customer master keys. Amazon Cognito uses the key to encrypt codes and temporary passwords sent to CustomEmailSender and CustomSMSSender.
+         * ARN of KMS Customer master keys. Amazon Cognito uses the key to encrypt codes and temporary passwords sent to CustomEmailSender and CustomSMSSender.
          */
         kmsKeyId?: string;
         /**
@@ -28730,7 +28910,7 @@ export declare namespace cognito {
     }
     interface UserPoolLambdaConfigCustomEmailSender {
         /**
-         * The Lambda Amazon Resource Name of the Lambda function that Amazon Cognito triggers to send email notifications to users.
+         * Lambda ARN of the Lambda function that Amazon Cognito triggers to send email notifications to users.
          */
         lambdaArn: string;
         /**
@@ -28740,7 +28920,7 @@ export declare namespace cognito {
     }
     interface UserPoolLambdaConfigCustomSmsSender {
         /**
-         * The Lambda Amazon Resource Name of the Lambda function that Amazon Cognito triggers to send SMS notifications to users.
+         * Lambda ARN of the Lambda function that Amazon Cognito triggers to send SMS notifications to users.
          */
         lambdaArn: string;
         /**
@@ -30617,13 +30797,13 @@ export declare namespace connect {
     }
     interface GetInstanceStorageConfigStorageConfigKinesisFirehoseConfig {
         /**
-         * The Amazon Resource Name (ARN) of the delivery stream.
+         * ARN of the delivery stream.
          */
         firehoseArn: string;
     }
     interface GetInstanceStorageConfigStorageConfigKinesisStreamConfig {
         /**
-         * The Amazon Resource Name (ARN) of the data stream.
+         * ARN of the data stream.
          */
         streamArn: string;
     }
@@ -31067,13 +31247,13 @@ export declare namespace connect {
     }
     interface InstanceStorageConfigStorageConfigKinesisFirehoseConfig {
         /**
-         * The Amazon Resource Name (ARN) of the delivery stream.
+         * ARN of the delivery stream.
          */
         firehoseArn: string;
     }
     interface InstanceStorageConfigStorageConfigKinesisStreamConfig {
         /**
-         * The Amazon Resource Name (ARN) of the data stream.
+         * ARN of the data stream.
          */
         streamArn: string;
     }
@@ -31263,7 +31443,7 @@ export declare namespace connect {
     }
     interface UserHierarchyGroupHierarchyPathLevelFife {
         /**
-         * The Amazon Resource Name (ARN) of the hierarchy group.
+         * The ARN of the hierarchy group.
          */
         arn: string;
         /**
@@ -31277,7 +31457,7 @@ export declare namespace connect {
     }
     interface UserHierarchyGroupHierarchyPathLevelFour {
         /**
-         * The Amazon Resource Name (ARN) of the hierarchy group.
+         * The ARN of the hierarchy group.
          */
         arn: string;
         /**
@@ -31291,7 +31471,7 @@ export declare namespace connect {
     }
     interface UserHierarchyGroupHierarchyPathLevelOne {
         /**
-         * The Amazon Resource Name (ARN) of the hierarchy group.
+         * The ARN of the hierarchy group.
          */
         arn: string;
         /**
@@ -31305,7 +31485,7 @@ export declare namespace connect {
     }
     interface UserHierarchyGroupHierarchyPathLevelThree {
         /**
-         * The Amazon Resource Name (ARN) of the hierarchy group.
+         * The ARN of the hierarchy group.
          */
         arn: string;
         /**
@@ -31319,7 +31499,7 @@ export declare namespace connect {
     }
     interface UserHierarchyGroupHierarchyPathLevelTwo {
         /**
-         * The Amazon Resource Name (ARN) of the hierarchy group.
+         * The ARN of the hierarchy group.
          */
         arn: string;
         /**
@@ -31357,7 +31537,7 @@ export declare namespace connect {
     }
     interface UserHierarchyStructureHierarchyStructureLevelFive {
         /**
-         * The Amazon Resource Name (ARN) of the hierarchy level.
+         * The ARN of the hierarchy level.
          */
         arn: string;
         /**
@@ -31371,7 +31551,7 @@ export declare namespace connect {
     }
     interface UserHierarchyStructureHierarchyStructureLevelFour {
         /**
-         * The Amazon Resource Name (ARN) of the hierarchy level.
+         * The ARN of the hierarchy level.
          */
         arn: string;
         /**
@@ -31385,7 +31565,7 @@ export declare namespace connect {
     }
     interface UserHierarchyStructureHierarchyStructureLevelOne {
         /**
-         * The Amazon Resource Name (ARN) of the hierarchy level.
+         * The ARN of the hierarchy level.
          */
         arn: string;
         /**
@@ -31399,7 +31579,7 @@ export declare namespace connect {
     }
     interface UserHierarchyStructureHierarchyStructureLevelThree {
         /**
-         * The Amazon Resource Name (ARN) of the hierarchy level.
+         * The ARN of the hierarchy level.
          */
         arn: string;
         /**
@@ -31413,7 +31593,7 @@ export declare namespace connect {
     }
     interface UserHierarchyStructureHierarchyStructureLevelTwo {
         /**
-         * The Amazon Resource Name (ARN) of the hierarchy level.
+         * The ARN of the hierarchy level.
          */
         arn: string;
         /**
@@ -34220,11 +34400,11 @@ export declare namespace datapipeline {
 export declare namespace datasync {
     interface EfsLocationEc2Config {
         /**
-         * List of Amazon Resource Names (ARNs) of the EC2 Security Groups that are associated with the EFS Mount Target.
+         * List of ARNs of the EC2 Security Groups that are associated with the EFS Mount Target.
          */
         securityGroupArns: string[];
         /**
-         * Amazon Resource Name (ARN) of the EC2 Subnet that is associated with the EFS Mount Target.
+         * ARN of the EC2 Subnet that is associated with the EFS Mount Target.
          */
         subnetArn: string;
     }
@@ -34326,7 +34506,7 @@ export declare namespace datasync {
     }
     interface NfsLocationOnPremConfig {
         /**
-         * List of Amazon Resource Names (ARNs) of the DataSync Agents used to connect to the NFS server.
+         * List of ARNs of the DataSync Agents used to connect to the NFS server.
          */
         agentArns: string[];
     }
@@ -34472,7 +34652,7 @@ export declare namespace datasync {
     }
     interface TaskTaskReportConfigS3Destination {
         /**
-         * Specifies the Amazon Resource Name (ARN) of the IAM policy that allows DataSync to upload a task report to your S3 bucket.
+         * ARN of the IAM policy that allows DataSync to upload a task report to your S3 bucket.
          */
         bucketAccessRoleArn: string;
         /**
@@ -34726,7 +34906,7 @@ export declare namespace devopsguru {
     }
     interface GetNotificationChannelSn {
         /**
-         * Amazon Resource Name (ARN) of an Amazon Simple Notification Service topic.
+         * ARN of an Amazon Simple Notification Service topic.
          */
         topicArn: string;
     }
@@ -34758,7 +34938,7 @@ export declare namespace devopsguru {
     }
     interface NotificationChannelSns {
         /**
-         * Amazon Resource Name (ARN) of an Amazon Simple Notification Service topic.
+         * ARN of an Amazon Simple Notification Service topic.
          */
         topicArn: string;
     }
@@ -35213,7 +35393,7 @@ export declare namespace dlm {
         retainRule?: outputs.dlm.LifecyclePolicyPolicyDetailsScheduleCrossRegionCopyRuleRetainRule;
         target?: string;
         /**
-         * Use only for DLM policies of `policy_type=IMAGE_MANAGEMENT`. The target Region or the Amazon Resource Name (ARN) of the target Outpost for the snapshot copies.
+         * Use only for DLM policies of `policy_type=IMAGE_MANAGEMENT`. The target Region or the ARN of the target Outpost for the snapshot copies.
          */
         targetRegion?: string;
     }
@@ -35336,7 +35516,7 @@ export declare namespace dms {
          */
         saslUsername?: string;
         /**
-         * Set secure connection to a Kafka target endpoint using Transport Layer Security (TLS). Options include `ssl-encryption`, `ssl-authentication`, and `sasl-ssl`. `sasl-ssl` requires `saslUsername` and `saslPassword`.
+         * Set secure connection to a Kafka target endpoint using TLS. Options include `ssl-encryption`, `ssl-authentication`, and `sasl-ssl`. `sasl-ssl` requires `saslUsername` and `saslPassword`.
          */
         securityProtocol?: string;
         /**
@@ -35712,7 +35892,7 @@ export declare namespace dms {
          */
         authUserName?: string;
         /**
-         * Transmission Control Protocol (TCP) port for the endpoint.
+         * TCP port for the endpoint.
          */
         port: number;
         /**
@@ -35720,11 +35900,11 @@ export declare namespace dms {
          */
         serverName: string;
         /**
-         * The Amazon Resource Name (ARN) for the certificate authority (CA) that DMS uses to connect to your Redis target endpoint.
+         * ARN for the certificate authority (CA) that DMS uses to connect to your Redis target endpoint.
          */
         sslCaCertificateArn?: string;
         /**
-         * The plaintext option doesn't provide Transport Layer Security (TLS) encryption for traffic between endpoint and database. Options include `plaintext`, `ssl-encryption`. The default is `ssl-encryption`.
+         * The plaintext option doesn't provide TLS encryption for traffic between endpoint and database. Options include `plaintext`, `ssl-encryption`. The default is `ssl-encryption`.
          */
         sslSecurityProtocol?: string;
     }
@@ -35746,7 +35926,7 @@ export declare namespace dms {
          */
         serverSideEncryptionKmsKeyId?: string;
         /**
-         * Amazon Resource Name (ARN) of the IAM Role with permissions to read from or write to the S3 Bucket for intermediate storage.
+         * ARN of the IAM Role with permissions to read from or write to the S3 Bucket for intermediate storage.
          */
         serviceAccessRoleArn?: string;
     }
@@ -35897,7 +36077,7 @@ export declare namespace dms {
          */
         dnsNameServers?: string;
         /**
-         * An Key Management Service (KMS) key Amazon Resource Name (ARN) that is used to encrypt the data during DMS Serverless replication. If you don't specify a value for the KmsKeyId parameter, DMS uses your default encryption key.
+         * KMS key ARN that is used to encrypt the data during DMS Serverless replication. If you don't specify a value for the KmsKeyId parameter, DMS uses your default encryption key.
          */
         kmsKeyId: string;
         /**
@@ -35926,7 +36106,7 @@ export declare namespace dms {
          */
         replicationSubnetGroupId: string;
         /**
-         * Specifies the virtual private cloud (VPC) security group to use with the DMS Serverless replication. The VPC security group must work with the VPC containing the replication.
+         * VPC security group to use with the DMS Serverless replication. The VPC security group must work with the VPC containing the replication.
          */
         vpcSecurityGroupIds: string[];
     }
@@ -36012,7 +36192,7 @@ export declare namespace docdb {
     }
     interface GlobalClusterGlobalClusterMember {
         /**
-         * Amazon Resource Name (ARN) of member DB Cluster.
+         * ARN of member DB Cluster.
          */
         dbClusterArn: string;
         /**
@@ -36997,7 +37177,7 @@ export declare namespace ec2 {
          */
         cidrBlock?: string;
         /**
-         * The Amazon Resource Name (ARN) of a core network.
+         * ARN of a core network.
          */
         coreNetworkArn?: string;
         /**
@@ -37376,7 +37556,7 @@ export declare namespace ec2 {
         burstablePerformance?: string;
         /**
          * The CPU manufacturers to include. Default is any manufacturer.
-         * > **NOTE:** Don't confuse the CPU hardware manufacturer with the CPU hardware architecture. Instances will be launched with a compatible CPU architecture based on the Amazon Machine Image (AMI) that you specify in your launch template.
+         * > **NOTE:** Don't confuse the CPU hardware manufacturer with the CPU hardware architecture. Instances will be launched with a compatible CPU architecture based on the AMI that you specify in your launch template.
          */
         cpuManufacturers?: string[];
         /**
@@ -39756,12 +39936,11 @@ export declare namespace ec2 {
          */
         associationId: string;
         /**
-         * Cidr block of the desired VPC.
+         * CIDR block of the desired VPC.
          */
         cidrBlock: string;
         /**
-         * Current state of the desired VPC.
-         * Can be either `"pending"` or `"available"`.
+         * Current state of the desired VPC. Can be either `"pending"` or `"available"`.
          */
         state: string;
     }
@@ -39829,13 +40008,11 @@ export declare namespace ec2 {
     }
     interface GetVpcFilter {
         /**
-         * Name of the field to filter by, as defined by
-         * [the underlying AWS API](http://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeVpcs.html).
+         * Name of the field to filter by, as defined by [the underlying AWS API](http://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeVpcs.html).
          */
         name: string;
         /**
-         * Set of values that are accepted for the given field.
-         * A VPC will be selected if any one of the given values matches.
+         * Set of values that are accepted for the given field. A VPC will be selected if any one of the given values matches.
          */
         values: string[];
     }
@@ -40058,11 +40235,11 @@ export declare namespace ec2 {
          */
         associationId: string;
         /**
-         * The source that allocated the IP address space. Values: `amazon`, `byoip`, `none`.
+         * Source that allocated the IP address space. Values: `amazon`, `byoip`, `none`.
          */
         ipSource: string;
         /**
-         * Indicates whether the address is `public` or `private`.
+         * Whether the address is `public` or `private`.
          */
         ipv6AddressAttribute: string;
         /**
@@ -40078,8 +40255,7 @@ export declare namespace ec2 {
          */
         networkBorderGroup: string;
         /**
-         * Current state of the desired VPC.
-         * Can be either `"pending"` or `"available"`.
+         * Current state of the desired VPC. Can be either `"pending"` or `"available"`.
          */
         state: string;
     }
@@ -40240,7 +40416,7 @@ export declare namespace ec2 {
          */
         iops: number;
         /**
-         * Amazon Resource Name (ARN) of the KMS Key to use when encrypting the volume. Must be configured to perform drift detection.
+         * ARN of the KMS Key to use when encrypting the volume. Must be configured to perform drift detection.
          */
         kmsKeyId: string;
         /**
@@ -40434,7 +40610,7 @@ export declare namespace ec2 {
          */
         iops: number;
         /**
-         * Amazon Resource Name (ARN) of the KMS Key to use when encrypting the volume. Must be configured to perform drift detection.
+         * ARN of the KMS Key to use when encrypting the volume. Must be configured to perform drift detection.
          */
         kmsKeyId: string;
         /**
@@ -40731,7 +40907,7 @@ export declare namespace ec2 {
     }
     interface LaunchTemplateIamInstanceProfile {
         /**
-         * The Amazon Resource Name (ARN) of the instance profile. Conflicts with `name`.
+         * ARN of the instance profile. Conflicts with `name`.
          */
         arn?: string;
         /**
@@ -40840,7 +41016,7 @@ export declare namespace ec2 {
         /**
          * List of CPU manufacturer names. Default is any manufacturer.
          *
-         * > **NOTE:** Don't confuse the CPU hardware manufacturer with the CPU hardware architecture. Instances will be launched with a compatible CPU architecture based on the Amazon Machine Image (AMI) that you specify in your launch template.
+         * > **NOTE:** Don't confuse the CPU hardware manufacturer with the CPU hardware architecture. Instances will be launched with a compatible CPU architecture based on the AMI that you specify in your launch template.
          *
          * ```
          * Valid names:
@@ -41706,7 +41882,7 @@ export declare namespace ec2 {
     }
     interface NetworkInsightsAnalysisAlternatePathHint {
         /**
-         * The Amazon Resource Name (ARN) of the component.
+         * ARN of the component.
          */
         componentArn: string;
         /**
@@ -42610,7 +42786,7 @@ export declare namespace ec2 {
          */
         cidrBlock?: string;
         /**
-         * The Amazon Resource Name (ARN) of a core network.
+         * ARN of a core network.
          */
         coreNetworkArn?: string;
         /**
@@ -42644,7 +42820,7 @@ export declare namespace ec2 {
          */
         networkInterfaceId?: string;
         /**
-         * The Amazon Resource Name (ARN) of an ODB network.
+         * ARN of an ODB network.
          */
         odbNetworkArn?: string;
         /**
@@ -42994,7 +43170,7 @@ export declare namespace ec2 {
         /**
          * List of CPU manufacturer names. Default is any manufacturer.
          *
-         * > **NOTE:** Don't confuse the CPU hardware manufacturer with the CPU hardware architecture. Instances will be launched with a compatible CPU architecture based on the Amazon Machine Image (AMI) that you specify in your launch template.
+         * > **NOTE:** Don't confuse the CPU hardware manufacturer with the CPU hardware architecture. Instances will be launched with a compatible CPU architecture based on the AMI that you specify in your launch template.
          *
          * ```
          * Valid names:
@@ -43243,7 +43419,7 @@ export declare namespace ec2 {
          */
         iops: number;
         /**
-         * Amazon Resource Name (ARN) of the KMS Key to use when encrypting the volume. Must be configured to perform drift detection.
+         * ARN of the KMS Key to use when encrypting the volume. Must be configured to perform drift detection.
          */
         kmsKeyId: string;
         /**
@@ -43403,7 +43579,7 @@ export declare namespace ec2 {
          */
         iops: number;
         /**
-         * Amazon Resource Name (ARN) of the KMS Key to use when encrypting the volume. Must be configured to perform drift detection.
+         * ARN of the KMS Key to use when encrypting the volume. Must be configured to perform drift detection.
          */
         kmsKeyId: string;
         /**
@@ -43808,7 +43984,7 @@ export declare namespace ec2 {
          */
         bgpLogEnabled?: boolean;
         /**
-         * The Amazon Resource Name (ARN) of the CloudWatch log group to send BGP logs to.
+         * ARN of the CloudWatch log group to send BGP logs to.
          */
         bgpLogGroupArn?: string;
         /**
@@ -43820,7 +43996,7 @@ export declare namespace ec2 {
          */
         logEnabled?: boolean;
         /**
-         * The Amazon Resource Name (ARN) of the CloudWatch log group to send logs to.
+         * ARN of the CloudWatch log group to send logs to.
          */
         logGroupArn?: string;
         /**
@@ -43840,7 +44016,7 @@ export declare namespace ec2 {
          */
         bgpLogEnabled?: boolean;
         /**
-         * The Amazon Resource Name (ARN) of the CloudWatch log group to send BGP logs to.
+         * ARN of the CloudWatch log group to send BGP logs to.
          */
         bgpLogGroupArn?: string;
         /**
@@ -43852,7 +44028,7 @@ export declare namespace ec2 {
          */
         logEnabled?: boolean;
         /**
-         * The Amazon Resource Name (ARN) of the CloudWatch log group to send logs to.
+         * ARN of the CloudWatch log group to send logs to.
          */
         logGroupArn?: string;
         /**
@@ -43866,7 +44042,7 @@ export declare namespace ec2 {
          */
         acceptedRouteCount: number;
         /**
-         * The Amazon Resource Name (ARN) of the VPN tunnel endpoint certificate.
+         * ARN of the VPN tunnel endpoint certificate.
          */
         certificateArn: string;
         /**
@@ -43916,7 +44092,7 @@ export declare namespace ec2clientvpn {
          */
         enabled: boolean;
         /**
-         * The Amazon Resource Name (ARN) of the Lambda function used for connection authorization.
+         * ARN of the Lambda function used for connection authorization.
          */
         lambdaFunctionArn: string;
     }
@@ -44701,7 +44877,7 @@ export declare namespace ecs {
          */
         acceleratorTotalMemoryMib?: outputs.ecs.CapacityProviderManagedInstancesProviderInstanceLaunchTemplateInstanceRequirementsAcceleratorTotalMemoryMib;
         /**
-         * Accelerator types to include. You can specify `gpu` for graphics processing units, `fpga` for field programmable gate arrays, or `inference` for machine learning inference accelerators. Valid values are `gpu`, `fpga`, `inference`.
+         * Accelerator types to include. You can specify `gpu` for GPUs, `fpga` for field programmable gate arrays, or `inference` for machine learning inference accelerators. Valid values are `gpu`, `fpga`, `inference`.
          */
         acceleratorTypes?: string[];
         /**
@@ -44919,7 +45095,7 @@ export declare namespace ecs {
     }
     interface ClusterConfigurationExecuteCommandConfiguration {
         /**
-         * AWS Key Management Service key ID to encrypt the data between the local client and the container.
+         * KMS key ID to encrypt the data between the local client and the container.
          */
         kmsKeyId?: string;
         /**
@@ -44955,11 +45131,11 @@ export declare namespace ecs {
     }
     interface ClusterConfigurationManagedStorageConfiguration {
         /**
-         * AWS Key Management Service key ARN for the Fargate ephemeral storage.
+         * KMS key ARN for the Fargate ephemeral storage.
          */
         fargateEphemeralStorageKmsKeyId?: string;
         /**
-         * AWS Key Management Service key ARN to encrypt the managed storage.
+         * KMS key ARN to encrypt the managed storage.
          */
         kmsKeyId?: string;
     }
@@ -45989,7 +46165,7 @@ export declare namespace ecs {
          */
         cpu?: string;
         /**
-         * Amazon Resource Name (ARN) of the task execution role override for the task.
+         * ARN of the task execution role override for the task.
          */
         executionRoleArn?: string;
         /**
@@ -45997,7 +46173,7 @@ export declare namespace ecs {
          */
         memory?: string;
         /**
-         * Amazon Resource Name (ARN) of the role that containers in this task can assume.
+         * ARN of the role that containers in this task can assume.
          */
         taskRoleArn?: string;
     }
@@ -46337,7 +46513,7 @@ export declare namespace ecs {
          */
         timeout?: outputs.ecs.ServiceServiceConnectConfigurationServiceTimeout;
         /**
-         * Configuration for enabling Transport Layer Security (TLS)
+         * Configuration for enabling TLS
          */
         tls?: outputs.ecs.ServiceServiceConnectConfigurationServiceTls;
     }
@@ -46449,7 +46625,7 @@ export declare namespace ecs {
          */
         iops?: number;
         /**
-         * Amazon Resource Name (ARN) identifier of the Amazon Web Services Key Management Service key to use for Amazon EBS encryption.
+         * ARN identifier of the Amazon Web Services KMS key to use for Amazon EBS encryption.
          */
         kmsKeyId?: string;
         /**
@@ -46657,7 +46833,7 @@ export declare namespace ecs {
     }
     interface TaskDefinitionVolumeFsxWindowsFileServerVolumeConfigurationAuthorizationConfig {
         /**
-         * Authorization credential option to use. The authorization credential options can be provided using either the Amazon Resource Name (ARN) of an AWS Secrets Manager secret or AWS Systems Manager Parameter Store parameter. The ARNs refer to the stored credentials.
+         * Authorization credential option to use. The authorization credential options can be provided using either the ARN of an AWS Secrets Manager secret or AWS Systems Manager Parameter Store parameter. The ARNs refer to the stored credentials.
          */
         credentialsParameter: string;
         /**
@@ -46689,7 +46865,7 @@ export declare namespace ecs {
          */
         base?: number;
         /**
-         * Short name or full Amazon Resource Name (ARN) of the capacity provider.
+         * Short name or full ARN of the capacity provider.
          */
         capacityProvider: string;
         /**
@@ -46924,7 +47100,7 @@ export declare namespace eks {
     }
     interface AddonPodIdentityAssociation {
         /**
-         * The Amazon Resource Name (ARN) of the IAM role to associate with the service account. The EKS Pod Identity agent manages credentials to assume this role for applications in the containers in the pods that use this service account.
+         * ARN of the IAM role to associate with the service account. The EKS Pod Identity agent manages credentials to assume this role for applications in the containers in the pods that use this service account.
          */
         roleArn: string;
         /**
@@ -47059,7 +47235,7 @@ export declare namespace eks {
     }
     interface ClusterEncryptionConfigProvider {
         /**
-         * ARN of the Key Management Service (KMS) customer master key (CMK). The CMK must be symmetric, created in the same region as the cluster, and if the CMK was created in a different account, the user must have access to the CMK. For more information, see [Allowing Users in Other Accounts to Use a CMK in the AWS Key Management Service Developer Guide](https://docs.aws.amazon.com/kms/latest/developerguide/key-policy-modifying-external-accounts.html).
+         * ARN of the KMS customer master key (CMK). The CMK must be symmetric, created in the same region as the cluster, and if the CMK was created in a different account, the user must have access to the CMK. For more information, see [Allowing Users in Other Accounts to Use a CMK in the KMS Developer Guide](https://docs.aws.amazon.com/kms/latest/developerguide/key-policy-modifying-external-accounts.html).
          */
         keyArn: string;
     }
@@ -50603,7 +50779,7 @@ export declare namespace emrserverless {
          */
         enabled: boolean;
         /**
-         * The AWS Key Management Service (KMS) key ARN to encrypt the logs that you store in CloudWatch Logs.
+         * KMS key ARN to encrypt the logs that you store in CloudWatch Logs.
          */
         encryptionKeyArn?: string;
         /**
@@ -51213,7 +51389,7 @@ export declare namespace fis {
     }
     interface ExperimentTemplateLogConfigurationCloudwatchLogsConfiguration {
         /**
-         * Amazon Resource Name (ARN) of the destination Amazon CloudWatch Logs log group. The ARN must end with `:*`
+         * ARN of the destination Amazon CloudWatch Logs log group. The ARN must end with `:*`
          */
         logGroupArn: string;
     }
@@ -51581,7 +51757,7 @@ export declare namespace fsx {
          */
         nfs?: outputs.fsx.FileCacheDataRepositoryAssociationNf[];
         /**
-         * Amazon Resource Name (ARN) of the data repository association.
+         * ARN of the data repository association.
          */
         resourceArn: string;
         /**
@@ -51629,7 +51805,7 @@ export declare namespace fsx {
     }
     interface FileCacheLustreConfigurationLogConfiguration {
         /**
-         * Amazon Resource Name (ARN) of the destination that receives the logs.
+         * ARN of the destination that receives the logs.
          */
         destination: string;
         /**
@@ -51794,7 +51970,7 @@ export declare namespace fsx {
     }
     interface LustreFileSystemLogConfiguration {
         /**
-         * Amazon Resource Name (ARN) that specifies the destination of the logs. The name of the Amazon CloudWatch Logs log group must begin with the `/aws/fsx` prefix. If you do not provide a destination, Amazon FSx will create and use a log stream in the CloudWatch Logs `/aws/fsx/lustre` log group.
+         * ARN that specifies the destination of the logs. The name of the Amazon CloudWatch Logs log group must begin with the `/aws/fsx` prefix. If you do not provide a destination, Amazon FSx will create and use a log stream in the CloudWatch Logs `/aws/fsx/lustre` log group.
          */
         destination: string;
         /**
@@ -52160,7 +52336,7 @@ export declare namespace fsx {
          */
         copyStrategy: string;
         /**
-         * The Amazon Resource Name (ARN) of the origin snapshot.
+         * The ARN of the origin snapshot.
          */
         snapshotArn: string;
     }
@@ -52240,7 +52416,7 @@ export declare namespace fsx {
     }
     interface WindowsFileSystemAuditLogConfiguration {
         /**
-         * Amazon Resource Name (ARN) for the destination of the audit logs. The destination can be any Amazon CloudWatch Logs log group ARN or Amazon Kinesis Data Firehose delivery stream ARN. Can be specified when `fileAccessAuditLogLevel` and `fileShareAccessAuditLogLevel` are not set to `DISABLED`. The name of the Amazon CloudWatch Logs log group must begin with the `/aws/fsx` prefix. The name of the Amazon Kinesis Data Firehouse delivery stream must begin with the `aws-fsx` prefix. If you do not provide a destination in `auditLogDestionation`, Amazon FSx will create and use a log stream in the CloudWatch Logs /aws/fsx/windows log group.
+         * ARN for the destination of the audit logs. The destination can be any Amazon CloudWatch Logs log group ARN or Amazon Kinesis Data Firehose delivery stream ARN. Can be specified when `fileAccessAuditLogLevel` and `fileShareAccessAuditLogLevel` are not set to `DISABLED`. The name of the Amazon CloudWatch Logs log group must begin with the `/aws/fsx` prefix. The name of the Amazon Kinesis Data Firehouse delivery stream must begin with the `aws-fsx` prefix. If you do not provide a destination in `auditLogDestionation`, Amazon FSx will create and use a log stream in the CloudWatch Logs /aws/fsx/windows log group.
          */
         auditLogDestination: string;
         /**
@@ -52268,7 +52444,7 @@ export declare namespace fsx {
          */
         dnsIps: string[];
         /**
-         * Amazon Resource Name (ARN) for the AWS Secrets Manager secret that contains the credentials for the service account on your self-managed AD domain. Conflicts with `username` and `password`.
+         * ARN for the AWS Secrets Manager secret that contains the credentials for the service account on your self-managed AD domain. Conflicts with `username` and `password`.
          */
         domainJoinServiceAccountSecret?: string;
         /**
@@ -52560,7 +52736,7 @@ export declare namespace globalaccelerator {
     }
     interface CustomRoutingEndpointGroupEndpointConfiguration {
         /**
-         * An ID for the endpoint. For custom routing accelerators, this is the virtual private cloud (VPC) subnet ID.
+         * ID for the endpoint. For custom routing accelerators, this is the VPC subnet ID.
          */
         endpointId?: string;
     }
@@ -52585,7 +52761,7 @@ export declare namespace globalaccelerator {
          */
         clientIpPreservationEnabled: boolean;
         /**
-         * An ID for the endpoint. If the endpoint is a Network Load Balancer or Application Load Balancer, this is the Amazon Resource Name (ARN) of the resource. If the endpoint is an Elastic IP address, this is the Elastic IP address allocation ID.
+         * ID for the endpoint. If the endpoint is a Network Load Balancer or Application Load Balancer, this is the ARN of the resource. If the endpoint is an Elastic IP address, this is the Elastic IP address allocation ID.
          */
         endpointId?: string;
         /**
@@ -54479,7 +54655,7 @@ export declare namespace glue {
          */
         cloudwatchEncryptionMode?: string;
         /**
-         * Amazon Resource Name (ARN) of the KMS key to be used to encrypt the data.
+         * ARN of the KMS key to be used to encrypt the data.
          */
         kmsKeyArn?: string;
     }
@@ -54489,13 +54665,13 @@ export declare namespace glue {
          */
         jobBookmarksEncryptionMode?: string;
         /**
-         * Amazon Resource Name (ARN) of the KMS key to be used to encrypt the data.
+         * ARN of the KMS key to be used to encrypt the data.
          */
         kmsKeyArn?: string;
     }
     interface SecurityConfigurationEncryptionConfigurationS3Encryption {
         /**
-         * Amazon Resource Name (ARN) of the KMS key to be used to encrypt the data.
+         * ARN of the KMS key to be used to encrypt the data.
          */
         kmsKeyArn?: string;
         /**
@@ -55555,7 +55731,7 @@ export declare namespace identitystore {
 export declare namespace imagebuilder {
     interface ContainerRecipeComponent {
         /**
-         * Amazon Resource Name (ARN) of the Image Builder Component to associate.
+         * ARN of the Image Builder Component to associate.
          */
         componentArn: string;
         /**
@@ -55615,7 +55791,7 @@ export declare namespace imagebuilder {
          */
         iops?: number;
         /**
-         * Amazon Resource Name (ARN) of the Key Management Service (KMS) Key for encryption.
+         * ARN of the KMS Key for encryption.
          */
         kmsKeyId?: string;
         /**
@@ -55647,7 +55823,7 @@ export declare namespace imagebuilder {
     }
     interface DistributionConfigurationDistribution {
         /**
-         * Configuration block with Amazon Machine Image (AMI) distribution settings. Detailed below.
+         * Configuration block with AMI distribution settings. Detailed below.
          */
         amiDistributionConfiguration?: outputs.imagebuilder.DistributionConfigurationDistributionAmiDistributionConfiguration;
         /**
@@ -55663,7 +55839,7 @@ export declare namespace imagebuilder {
          */
         launchTemplateConfigurations?: outputs.imagebuilder.DistributionConfigurationDistributionLaunchTemplateConfiguration[];
         /**
-         * Set of Amazon Resource Names (ARNs) of License Manager License Configurations.
+         * Set of ARNs of License Manager License Configurations.
          */
         licenseConfigurationArns?: string[];
         /**
@@ -55691,7 +55867,7 @@ export declare namespace imagebuilder {
          */
         description?: string;
         /**
-         * Amazon Resource Name (ARN) of the Key Management Service (KMS) Key to encrypt the distributed AMI.
+         * ARN of the KMS Key to encrypt the distributed AMI.
          */
         kmsKeyId?: string;
         /**
@@ -55967,7 +56143,7 @@ export declare namespace imagebuilder {
          */
         launchTemplateConfigurations: outputs.imagebuilder.GetDistributionConfigurationDistributionLaunchTemplateConfiguration[];
         /**
-         * Set of Amazon Resource Names (ARNs) of License Manager License Configurations.
+         * Set of ARNs of License Manager License Configurations.
          */
         licenseConfigurationArns: string[];
         /**
@@ -55995,7 +56171,7 @@ export declare namespace imagebuilder {
          */
         description: string;
         /**
-         * ARN of Key Management Service (KMS) Key to encrypt AMI.
+         * ARN of KMS Key to encrypt AMI.
          */
         kmsKeyId: string;
         /**
@@ -56183,7 +56359,7 @@ export declare namespace imagebuilder {
     }
     interface GetImageOutputResource {
         /**
-         * Set of objects with each Amazon Machine Image (AMI) created.
+         * Set of objects with each AMI created.
          */
         amis: outputs.imagebuilder.GetImageOutputResourceAmi[];
         /**
@@ -56305,7 +56481,7 @@ export declare namespace imagebuilder {
          */
         iops: number;
         /**
-         * ARN of the Key Management Service (KMS) Key for encryption.
+         * ARN of the KMS Key for encryption.
          */
         kmsKeyId: string;
         /**
@@ -56447,7 +56623,7 @@ export declare namespace imagebuilder {
     }
     interface ImageOutputResource {
         /**
-         * Set of objects with each Amazon Machine Image (AMI) created.
+         * Set of objects with each AMI created.
          */
         amis: outputs.imagebuilder.ImageOutputResourceAmi[];
         /**
@@ -56554,7 +56730,7 @@ export declare namespace imagebuilder {
          */
         parameters?: outputs.imagebuilder.ImagePipelineWorkflowParameter[];
         /**
-         * Amazon Resource Name (ARN) of the Image Builder Workflow.
+         * ARN of the Image Builder Workflow.
          *
          * The following arguments are optional:
          */
@@ -56602,7 +56778,7 @@ export declare namespace imagebuilder {
          */
         iops?: number;
         /**
-         * Amazon Resource Name (ARN) of the Key Management Service (KMS) Key for encryption.
+         * ARN of the KMS Key for encryption.
          */
         kmsKeyId?: string;
         /**
@@ -56624,7 +56800,7 @@ export declare namespace imagebuilder {
     }
     interface ImageRecipeComponent {
         /**
-         * Amazon Resource Name (ARN) of the Image Builder Component to associate.
+         * ARN of the Image Builder Component to associate.
          */
         componentArn: string;
         /**
@@ -56662,7 +56838,7 @@ export declare namespace imagebuilder {
          */
         parameters?: outputs.imagebuilder.ImageWorkflowParameter[];
         /**
-         * Amazon Resource Name (ARN) of the Image Builder Workflow.
+         * ARN of the Image Builder Workflow.
          *
          * The following arguments are optional:
          */
@@ -56902,7 +57078,7 @@ export declare namespace inspector2 {
          */
         componentTypes?: outputs.inspector2.FilterFilterCriteriaComponentType[];
         /**
-         * (Optional) The ID of the Amazon Machine Image (AMI). Documented below.
+         * (Optional) ID of the AMI. Documented below.
          */
         ec2InstanceImageIds?: outputs.inspector2.FilterFilterCriteriaEc2InstanceImageId[];
         /**
@@ -58840,7 +59016,7 @@ export declare namespace kendra {
          */
         urlInclusionPatterns?: string[];
         /**
-         * A block that specifies the seed or starting point URLs of the websites or the sitemap URLs of the websites you want to crawl. You can include website subdomains. You can list up to `100` seed URLs and up to `3` sitemap URLs. You can only crawl websites that use the secure communication protocol, Hypertext Transfer Protocol Secure (HTTPS). If you receive an error when crawling a website, it could be that the website is blocked from crawling. When selecting websites to index, you must adhere to the [Amazon Acceptable Use Policy](https://aws.amazon.com/aup/) and all other Amazon terms. Remember that you must only use Amazon Kendra Web Crawler to index your own webpages, or webpages that you have authorization to index. Detailed below.
+         * Block that specifies the seed or starting point URLs of the websites or the sitemap URLs of the websites you want to crawl. You can include website subdomains. You can list up to `100` seed URLs and up to `3` sitemap URLs. You can only crawl websites that use the secure communication protocol, HTTPS. If you receive an error when crawling a website, it could be that the website is blocked from crawling. When selecting websites to index, you must adhere to the [Amazon Acceptable Use Policy](https://aws.amazon.com/aup/) and all other Amazon terms. Remember that you must only use Amazon Kendra Web Crawler to index your own webpages, or webpages that you have authorization to index. Detailed below.
          */
         urls: outputs.kendra.DataSourceConfigurationWebCrawlerConfigurationUrls;
     }
@@ -58921,7 +59097,7 @@ export declare namespace kendra {
          */
         preExtractionHookConfiguration?: outputs.kendra.DataSourceCustomDocumentEnrichmentConfigurationPreExtractionHookConfiguration;
         /**
-         * The Amazon Resource Name (ARN) of a role with permission to run `preExtractionHookConfiguration` and `postExtractionHookConfiguration` for altering document metadata and content during the document ingestion process. For more information, see [IAM roles for Amazon Kendra](https://docs.aws.amazon.com/kendra/latest/dg/iam-roles.html).
+         * ARN of a role with permission to run `preExtractionHookConfiguration` and `postExtractionHookConfiguration` for altering document metadata and content during the document ingestion process. For more information, see [IAM roles for Amazon Kendra](https://docs.aws.amazon.com/kendra/latest/dg/iam-roles.html).
          */
         roleArn?: string;
     }
@@ -59003,7 +59179,7 @@ export declare namespace kendra {
          */
         invocationCondition?: outputs.kendra.DataSourceCustomDocumentEnrichmentConfigurationPostExtractionHookConfigurationInvocationCondition;
         /**
-         * The Amazon Resource Name (ARN) of a Lambda Function that can manipulate your document metadata fields or attributes and content.
+         * ARN of a Lambda Function that can manipulate your document metadata fields or attributes and content.
          */
         lambdaArn: string;
         /**
@@ -59046,7 +59222,7 @@ export declare namespace kendra {
          */
         invocationCondition?: outputs.kendra.DataSourceCustomDocumentEnrichmentConfigurationPreExtractionHookConfigurationInvocationCondition;
         /**
-         * The Amazon Resource Name (ARN) of a Lambda Function that can manipulate your document metadata fields or attributes and content.
+         * ARN of a Lambda Function that can manipulate your document metadata fields or attributes and content.
          */
         lambdaArn: string;
         /**
@@ -59509,7 +59685,7 @@ export declare namespace kendra {
          */
         keyLocation: string;
         /**
-         * The Amazon Resource Name (ARN) of the secret.
+         * ARN of the secret.
          */
         secretsManagerArn?: string;
         /**
@@ -59585,7 +59761,7 @@ export declare namespace keyspaces {
     }
     interface TableEncryptionSpecification {
         /**
-         * The Amazon Resource Name (ARN) of the customer managed KMS key.
+         * ARN of the customer managed KMS key.
          */
         kmsKeyIdentifier?: string;
         /**
@@ -61093,7 +61269,7 @@ export declare namespace kinesis {
          */
         retryDuration?: number;
         /**
-         * The Amazon Resource Name (ARN) of the IAM role to be assumed by Kinesis Data Firehose for calling the Serverless offering for Amazon OpenSearch Service Configuration API and for indexing documents.  The pattern needs to be `arn:.*`.
+         * ARN of the IAM role to be assumed by Kinesis Data Firehose for calling the Serverless offering for Amazon OpenSearch Service Configuration API and for indexing documents.  The pattern needs to be `arn:.*`.
          */
         roleArn: string;
         /**
@@ -61441,7 +61617,7 @@ export declare namespace kinesis {
          */
         enabled?: boolean;
         /**
-         * Amazon Resource Name (ARN) of the encryption key. Required when `keyType` is `CUSTOMER_MANAGED_CMK`.
+         * ARN of the encryption key. Required when `keyType` is `CUSTOMER_MANAGED_CMK`.
          */
         keyArn?: string;
         /**
@@ -62085,7 +62261,7 @@ export declare namespace kinesisanalyticsv2 {
          */
         kinesisFirehoseInput?: outputs.kinesisanalyticsv2.ApplicationApplicationConfigurationSqlApplicationConfigurationInputKinesisFirehoseInput;
         /**
-         * If the streaming source is a Kinesis data stream, identifies the stream's Amazon Resource Name (ARN).
+         * If the streaming source is a Kinesis data stream, identifies the stream's ARN.
          */
         kinesisStreamsInput?: outputs.kinesisanalyticsv2.ApplicationApplicationConfigurationSqlApplicationConfigurationInputKinesisStreamsInput;
         /**
@@ -62897,7 +63073,7 @@ export declare namespace lakeformation {
     }
     interface PermissionsDataLocation {
         /**
-         * Amazon Resource Name (ARN) that uniquely identifies the data location resource.
+         * ARN that uniquely identifies the data location resource.
          *
          * The following argument is optional:
          */
@@ -63185,11 +63361,11 @@ export declare namespace lambda {
     }
     interface CapacityProviderCapacityProviderScalingConfig {
         /**
-         * The maximum number of VCPUs for the Capacity Provider.
+         * Maximum number of VCPUs for the Capacity Provider.
          */
         maxVcpuCount: number;
         /**
-         * The scaling mode for the Capacity Provider. Valid values are `"Auto"` and `"Manual"`. Defaults to `"Auto"`.
+         * Scaling mode for the Capacity Provider. Valid values are `"Auto"` and `"Manual"`. Defaults to `"Auto"`.
          */
         scalingMode: string;
         /**
@@ -63199,11 +63375,11 @@ export declare namespace lambda {
     }
     interface CapacityProviderCapacityProviderScalingConfigScalingPolicy {
         /**
-         * The predefined metric type for the scaling policy. Valid values are `"LambdaCapacityProviderAverageCPUUtilization"`.
+         * Predefined metric type for the scaling policy. Valid values are `"LambdaCapacityProviderAverageCPUUtilization"`.
          */
         predefinedMetricType: string;
         /**
-         * The target value for the scaling policy.
+         * Target value for the scaling policy.
          */
         targetValue: number;
     }
@@ -63223,7 +63399,7 @@ export declare namespace lambda {
     }
     interface CapacityProviderPermissionsConfig {
         /**
-         * The ARN of the IAM role that allows Lambda to manage the Capacity Provider.
+         * ARN of the IAM role that allows Lambda to manage the Capacity Provider.
          */
         capacityProviderOperatorRoleArn: string;
     }
@@ -63313,7 +63489,7 @@ export declare namespace lambda {
     }
     interface EventSourceMappingAmazonManagedKafkaEventSourceConfigSchemaRegistryConfig {
         /**
-         * Configuration block for authentication Lambda uses to access the schema registry.
+         * Configuration block for authentication Lambda uses to access the schema registry. See below.
          */
         accessConfigs?: outputs.lambda.EventSourceMappingAmazonManagedKafkaEventSourceConfigSchemaRegistryConfigAccessConfig[];
         /**
@@ -63325,18 +63501,12 @@ export declare namespace lambda {
          */
         schemaRegistryUri?: string;
         /**
-         * Repeatable block that defines schema validation settings. These specify the message attributes that Lambda should validate and filter using the schema registry.
+         * Repeatable block that defines schema validation settings. These specify the message attributes that Lambda should validate and filter using the schema registry. See below.
          */
         schemaValidationConfigs?: outputs.lambda.EventSourceMappingAmazonManagedKafkaEventSourceConfigSchemaRegistryConfigSchemaValidationConfig[];
     }
     interface EventSourceMappingAmazonManagedKafkaEventSourceConfigSchemaRegistryConfigAccessConfig {
-        /**
-         * Authentication type Lambda uses to access the schema registry.
-         */
         type?: string;
-        /**
-         * URI of the secret (Secrets Manager secret ARN) used to authenticate with the schema registry.
-         */
         uri?: string;
     }
     interface EventSourceMappingAmazonManagedKafkaEventSourceConfigSchemaRegistryConfigSchemaValidationConfig {
@@ -63367,7 +63537,7 @@ export declare namespace lambda {
          */
         databaseName: string;
         /**
-         * Determines what DocumentDB sends to your event stream during document update operations. If set to `UpdateLookup`, DocumentDB sends a delta describing the changes, along with a copy of the entire document. Otherwise, DocumentDB sends only a partial document that contains the changes. Valid values: `UpdateLookup`, `Default`.
+         * DocumentDB behavior during document update operations. If set to `UpdateLookup`, DocumentDB sends a delta describing the changes, along with a copy of the entire document. Otherwise, DocumentDB sends only a partial document that contains the changes. Valid values: `UpdateLookup`, `Default`.
          */
         fullDocument?: string;
     }
@@ -63399,7 +63569,7 @@ export declare namespace lambda {
          */
         minimumPollers: number;
         /**
-         * The name of the provisioned poller group used to group multiple ESMs within the event source's VPC to share Event Poller Unit (EPU) capacity. You can use this option to optimize Provisioned mode costs for your ESMs. You can group up to 100 ESMs per poller group and aggregate maximum pollers across all ESMs in a group cannot exceed 2000.
+         * Name of the provisioned poller group used to group multiple ESMs within the event source's VPC to share Event Poller Unit (EPU) capacity. You can use this option to optimize Provisioned mode costs for your ESMs. You can group up to 100 ESMs per poller group and aggregate maximum pollers across all ESMs in a group cannot exceed 2000.
          */
         pollerGroupName: string;
     }
@@ -63429,7 +63599,7 @@ export declare namespace lambda {
     }
     interface EventSourceMappingSelfManagedKafkaEventSourceConfigSchemaRegistryConfig {
         /**
-         * Configuration block for authentication Lambda uses to access the schema registry.
+         * Configuration block for authentication Lambda uses to access the schema registry. See below.
          */
         accessConfigs?: outputs.lambda.EventSourceMappingSelfManagedKafkaEventSourceConfigSchemaRegistryConfigAccessConfig[];
         /**
@@ -63441,18 +63611,12 @@ export declare namespace lambda {
          */
         schemaRegistryUri?: string;
         /**
-         * Repeatable block that defines schema validation settings. These specify the message attributes that Lambda should validate and filter using the schema registry.
+         * Repeatable block that defines schema validation settings. These specify the message attributes that Lambda should validate and filter using the schema registry. See below.
          */
         schemaValidationConfigs?: outputs.lambda.EventSourceMappingSelfManagedKafkaEventSourceConfigSchemaRegistryConfigSchemaValidationConfig[];
     }
     interface EventSourceMappingSelfManagedKafkaEventSourceConfigSchemaRegistryConfigAccessConfig {
-        /**
-         * Authentication type Lambda uses to access the schema registry.
-         */
         type?: string;
-        /**
-         * URI of the secret (Secrets Manager secret ARN) used to authenticate with the schema registry.
-         */
         uri?: string;
     }
     interface EventSourceMappingSelfManagedKafkaEventSourceConfigSchemaRegistryConfigSchemaValidationConfig {
@@ -63689,7 +63853,7 @@ export declare namespace lambda {
     }
     interface GetFunctionCapacityProviderConfig {
         /**
-         * Configuration block for Lambda Managed Instances Capacity Provider.
+         * Configuration block for Lambda Managed Instances Capacity Provider. See `lambdaManagedInstancesCapacityProviderConfig` below.
          */
         lambdaManagedInstancesCapacityProviderConfigs: outputs.lambda.GetFunctionCapacityProviderConfigLambdaManagedInstancesCapacityProviderConfig[];
     }
@@ -63767,7 +63931,7 @@ export declare namespace lambda {
     }
     interface GetFunctionTenancyConfig {
         /**
-         * (Required) Tenant Isolation Mode. Valid values: `PER_TENANT`.
+         * Tenant Isolation Mode. Valid values: `PER_TENANT`.
          */
         tenantIsolationMode: string;
     }
@@ -63804,6 +63968,9 @@ export declare namespace lambda {
         maxAge: number;
     }
     interface GetFunctionVpcConfig {
+        /**
+         * Whether IPv6 is allowed for dual-stack VPC.
+         */
         ipv6AllowedForDualStack: boolean;
         /**
          * List of security group IDs associated with the Lambda function.
@@ -64762,7 +64929,7 @@ export declare namespace lb {
     }
     interface ListenerRuleActionForwardTargetGroup {
         /**
-         * The Amazon Resource Name (ARN) of the target group.
+         * ARN of the target group.
          */
         arn: string;
         /**
@@ -65173,7 +65340,7 @@ export declare namespace lex {
     }
     interface BotAliasConversationLogs {
         /**
-         * The Amazon Resource Name (ARN) of the IAM role used to write your logs to CloudWatch Logs or an S3 bucket. Must be between 20 and 2048 characters in length.
+         * ARN of the IAM role used to write your logs to CloudWatch Logs or an S3 bucket. Must be between 20 and 2048 characters in length.
          */
         iamRoleArn: string;
         /**
@@ -65187,7 +65354,7 @@ export declare namespace lex {
          */
         destination: string;
         /**
-         * The Amazon Resource Name (ARN) of the key used to encrypt audio logs in an S3 bucket. This can only be specified when `destination` is set to `S3`. Must be between 20 and 2048 characters in length.
+         * ARN of the key used to encrypt audio logs in an S3 bucket. This can only be specified when `destination` is set to `S3`. Must be between 20 and 2048 characters in length.
          */
         kmsKeyArn?: string;
         /**
@@ -65195,7 +65362,7 @@ export declare namespace lex {
          */
         logType: string;
         /**
-         * The Amazon Resource Name (ARN) of the CloudWatch Logs log group or S3 bucket where the logs are delivered. Must be less than or equal to 2048 characters in length.
+         * ARN of the CloudWatch Logs log group or S3 bucket where the logs are delivered. Must be less than or equal to 2048 characters in length.
          */
         resourceArn: string;
         /**
@@ -65290,7 +65457,7 @@ export declare namespace lex {
          */
         messageVersion: string;
         /**
-         * The Amazon Resource Name (ARN) of the Lambda function.
+         * ARN of the Lambda function.
          */
         uri: string;
     }
@@ -65378,7 +65545,7 @@ export declare namespace lex {
          */
         messageVersion: string;
         /**
-         * The Amazon Resource Name (ARN) of the Lambda function.
+         * ARN of the Lambda function.
          */
         uri: string;
     }
@@ -77037,7 +77204,7 @@ export declare namespace licensemanager {
          */
         name: string;
         /**
-         * Asymmetric KMS key from AWS Key Management Service. The KMS key must have a key usage of sign and verify, and support the RSASSA-PSS SHA-256 signing algorithm.
+         * Asymmetric KMS key from KMS. The KMS key must have a key usage of sign and verify, and support the RSASSA-PSS SHA-256 signing algorithm.
          */
         signKey: string;
     }
@@ -77544,7 +77711,7 @@ export declare namespace macie2 {
          */
         keyPrefix?: string;
         /**
-         * Amazon Resource Name (ARN) of the KMS key to be used to encrypt the data.
+         * ARN of the KMS key to be used to encrypt the data.
          *
          * Additional information can be found in the [Storing and retaining sensitive data discovery results with Amazon Macie for AWS Macie documentation](https://docs.aws.amazon.com/macie/latest/user/discovery-results-repository-s3.html).
          */
@@ -81599,7 +81766,7 @@ export declare namespace mq {
     }
     interface GetBrokerEncryptionOption {
         /**
-         * Amazon Resource Name (ARN) of Key Management Service (KMS) Customer Master Key (CMK) to use for encryption at rest.
+         * ARN of KMS Customer Master Key (CMK) to use for encryption at rest.
          */
         kmsKeyId: string;
         /**
@@ -81886,13 +82053,13 @@ export declare namespace msk {
     }
     interface ClusterClientAuthenticationTls {
         /**
-         * List of ACM Certificate Authority Amazon Resource Names (ARNs).
+         * List of ACM Certificate Authority ARNs.
          */
         certificateAuthorityArns?: string[];
     }
     interface ClusterConfigurationInfo {
         /**
-         * Amazon Resource Name (ARN) of the MSK Configuration to use in the cluster.
+         * ARN of the MSK Configuration to use in the cluster.
          */
         arn: string;
         /**
@@ -82015,7 +82182,7 @@ export declare namespace msk {
          */
         clientSubnet: string;
         /**
-         * The client virtual private cloud (VPC) IP address
+         * Client VPC IP address
          */
         clientVpcIpAddress: string;
         /**
@@ -82087,7 +82254,7 @@ export declare namespace msk {
          */
         securityGroupsIds?: string[];
         /**
-         * The list of subnets to connect to in the virtual private cloud (VPC). AWS creates elastic network interfaces inside these subnets to allow communication between your Kafka Cluster and the replicator.
+         * List of subnets to connect to in the VPC. AWS creates elastic network interfaces inside these subnets to allow communication between your Kafka Cluster and the replicator.
          */
         subnetIds: string[];
     }
@@ -82431,7 +82598,7 @@ export declare namespace mskconnect {
     }
     interface ConnectorPluginCustomPlugin {
         /**
-         * The Amazon Resource Name (ARN) of the custom plugin.
+         * ARN of the custom plugin.
          */
         arn: string;
         /**
@@ -82441,7 +82608,7 @@ export declare namespace mskconnect {
     }
     interface ConnectorWorkerConfiguration {
         /**
-         * The Amazon Resource Name (ARN) of the worker configuration.
+         * ARN of the worker configuration.
          */
         arn: string;
         /**
@@ -82457,7 +82624,7 @@ export declare namespace mskconnect {
     }
     interface CustomPluginLocationS3 {
         /**
-         * The Amazon Resource Name (ARN) of an S3 bucket.
+         * ARN of an S3 bucket.
          */
         bucketArn: string;
         /**
@@ -82852,7 +83019,7 @@ export declare namespace networkfirewall {
          */
         priority?: number;
         /**
-         * The Amazon Resource Name (ARN) of the stateful rule group.
+         * ARN of the stateful rule group.
          */
         resourceArn: string;
     }
@@ -82896,7 +83063,7 @@ export declare namespace networkfirewall {
          */
         priority: number;
         /**
-         * The Amazon Resource Name (ARN) of the stateless rule group.
+         * ARN of the stateless rule group.
          */
         resourceArn: string;
     }
@@ -82928,11 +83095,11 @@ export declare namespace networkfirewall {
     }
     interface GetFirewallEncryptionConfiguration {
         /**
-         * The ID of the AWS Key Management Service (AWS KMS) customer managed key.
+         * The ID of the KMS customer managed key.
          */
         keyId: string;
         /**
-         * The type of the AWS Key Management Service (AWS KMS) key use by the firewall.
+         * The type of the KMS key use by the firewall.
          */
         type: string;
     }
@@ -83350,7 +83517,7 @@ export declare namespace networkfirewall {
          */
         destinations?: outputs.networkfirewall.RuleGroupRuleGroupRulesSourceStatelessRulesAndCustomActionsStatelessRuleRuleDefinitionMatchAttributesDestination[];
         /**
-         * Set of protocols to inspect for, specified using the protocol's assigned internet protocol number (IANA). If not specified, this matches with any protocol.
+         * Set of protocols to inspect for, specified using the protocol's assigned IP number (IANA). If not specified, this matches with any protocol.
          */
         protocols?: number[];
         /**
@@ -83454,7 +83621,7 @@ export declare namespace networkfirewall {
     }
     interface TlsInspectionConfigurationEncryptionConfiguration {
         /**
-         * ARN of the Amazon Web Services Key Management Service (KMS) customer managed key.
+         * ARN of the Amazon Web Services KMS customer managed key.
          */
         keyId: string;
         /**
@@ -83514,7 +83681,7 @@ export declare namespace networkfirewall {
          */
         destinations: outputs.networkfirewall.TlsInspectionConfigurationTlsInspectionConfigurationServerCertificateConfigurationScopeDestination[];
         /**
-         * Set of protocols to inspect for, specified using the protocol's assigned internet protocol number (IANA). Network Firewall currently supports TCP only. Valid values: `6`
+         * Set of protocols to inspect for, specified using the protocol's assigned IP number (IANA). Network Firewall currently supports TCP only. Valid values: `6`
          */
         protocols: number[];
         /**
@@ -84403,6 +84570,10 @@ export declare namespace observabilityadmin {
          * Configuration block for logs encryption settings. See `logsEncryptionConfiguration` below.
          */
         logsEncryptionConfiguration?: outputs.observabilityadmin.CentralizationRuleForOrganizationRuleDestinationDestinationLogsConfigurationLogsEncryptionConfiguration;
+        /**
+         * Configuration block for propagating source resource tags to centralized destination log groups. See `tagPropagationConfiguration` below.
+         */
+        tagPropagationConfiguration?: outputs.observabilityadmin.CentralizationRuleForOrganizationRuleDestinationDestinationLogsConfigurationTagPropagationConfiguration;
     }
     interface CentralizationRuleForOrganizationRuleDestinationDestinationLogsConfigurationBackupConfiguration {
         /**
@@ -84438,6 +84609,16 @@ export declare namespace observabilityadmin {
          */
         kmsKeyArn?: string;
     }
+    interface CentralizationRuleForOrganizationRuleDestinationDestinationLogsConfigurationTagPropagationConfiguration {
+        /**
+         * ARN of the IAM role that the service assumes to propagate source resource tags to centralized destination log groups.
+         */
+        destinationRoleArn: string;
+        /**
+         * Strategy for resolving tag conflicts when propagating tags to destination log groups. Valid values: `IN_SYNC`, `ADD_ONLY`, `UPDATE_SYNC`.
+         */
+        tagConflictResolutionStrategy?: string;
+    }
     interface CentralizationRuleForOrganizationRuleDestinationDestinationMetricsConfiguration {
         /**
          * Configuration block for metrics backup settings. See `destinationMetricsBackupConfiguration` below.
@@ -85280,7 +85461,7 @@ export declare namespace odb {
     }
     interface GetCloudAutonomousVmClustersCloudAutonomousVmCluster {
         /**
-         * Amazon Resource Name (ARN) for the Exadata infrastructure.
+         * ARN for the Exadata infrastructure.
          */
         arn: string;
         /**
@@ -85334,7 +85515,7 @@ export declare namespace odb {
     }
     interface GetCloudExadataInfrastructuresCloudExadataInfrastructure {
         /**
-         * Amazon Resource Name (ARN) for the Exadata infrastructure.
+         * ARN for the Exadata infrastructure.
          */
         arn: string;
         /**
@@ -85376,7 +85557,7 @@ export declare namespace odb {
     }
     interface GetCloudVmClustersCloudVmCluster {
         /**
-         * Amazon Resource Name (ARN) for the cloud vm cluster.
+         * ARN for the cloud vm cluster.
          */
         arn: string;
         /**
@@ -85414,7 +85595,7 @@ export declare namespace odb {
          */
         additionalDetails: string;
         /**
-         * Amazon Resource Name (ARN) of the DB node.
+         * ARN of the DB node.
          */
         arn: string;
         /**
@@ -85802,7 +85983,7 @@ export declare namespace odb {
     }
     interface GetNetworkPeeringConnectionsOdbPeeringConnection {
         /**
-         * Amazon Resource Name (ARN) for the ODB network peering connection.
+         * ARN for the ODB network peering connection.
          */
         arn: string;
         /**
@@ -85824,7 +86005,7 @@ export declare namespace odb {
     }
     interface GetNetworksOdbNetwork {
         /**
-         * Amazon Resource Name (ARN) of the odb network resource.
+         * ARN of the odb network resource.
          */
         arn: string;
         /**
@@ -86056,7 +86237,7 @@ export declare namespace opensearch {
     }
     interface ApplicationDataSource {
         /**
-         * The Amazon Resource Name (ARN) of the OpenSearch domain or collection. Must be between 20 and 2048 characters.
+         * ARN of the OpenSearch domain or collection. Must be between 20 and 2048 characters.
          */
         dataSourceArn?: string;
         /**
@@ -86071,7 +86252,7 @@ export declare namespace opensearch {
         enabled?: boolean;
         iamIdentityCenterApplicationArn: string;
         /**
-         * The Amazon Resource Name (ARN) of the IAM Identity Center instance. Must be between 20 and 2048 characters.
+         * ARN of the IAM Identity Center instance. Must be between 20 and 2048 characters.
          */
         iamIdentityCenterInstanceArn?: string;
         /**
@@ -86869,7 +87050,7 @@ export declare namespace opensearch {
     }
     interface GetServerlessCollectionGroupsCollectionGroupSummary {
         /**
-         * Amazon Resource Name (ARN) of the collection group.
+         * ARN of the collection group.
          */
         arn: string;
         /**
@@ -86931,7 +87112,7 @@ export declare namespace opensearch {
          */
         groupAttribute: string;
         /**
-         * Amazon Resource Name (ARN) of the IAM Identity Center instance used to integrate with OpenSearch Serverless.
+         * ARN of the IAM Identity Center instance used to integrate with OpenSearch Serverless.
          */
         instanceArn: string;
         /**
@@ -87071,7 +87252,7 @@ export declare namespace opensearch {
          */
         groupAttribute: string;
         /**
-         * Amazon Resource Name (ARN) of the IAM Identity Center instance used to integrate with OpenSearch Serverless.
+         * ARN of the IAM Identity Center instance used to integrate with OpenSearch Serverless.
          */
         instanceArn: string;
         /**
@@ -87346,7 +87527,7 @@ export declare namespace organizations {
     }
     interface GetOrganizationalUnitChildAccountsAccount {
         /**
-         * The Amazon Resource Name (ARN) of the account.
+         * The ARN of the account.
          */
         arn: string;
         /**
@@ -87382,7 +87563,7 @@ export declare namespace organizations {
     }
     interface GetOrganizationalUnitDescendantAccountsAccount {
         /**
-         * The Amazon Resource Name (ARN) of the account.
+         * The ARN of the account.
          */
         arn: string;
         /**
@@ -87862,7 +88043,7 @@ export declare namespace pipes {
     }
     interface PipeLogConfigurationFirehoseLogDestination {
         /**
-         * Amazon Resource Name (ARN) of the Kinesis Data Firehose delivery stream to which EventBridge delivers the pipe log records.
+         * ARN of the Kinesis Data Firehose delivery stream to which EventBridge delivers the pipe log records.
          */
         deliveryStreamArn: string;
     }
@@ -88236,7 +88417,7 @@ export declare namespace pipes {
          */
         dependsOns?: outputs.pipes.PipeTargetParametersBatchJobParametersDependsOn[];
         /**
-         * The job definition used by this job. This value can be one of name, name:revision, or the Amazon Resource Name (ARN) for the job definition. If name is specified without a revision then the latest active revision is used.
+         * Job definition used by this job. This value can be one of name, name:revision, or the ARN for the job definition. If name is specified without a revision then the latest active revision is used.
          */
         jobDefinition: string;
         /**
@@ -88430,7 +88611,7 @@ export declare namespace pipes {
          */
         ephemeralStorage?: outputs.pipes.PipeTargetParametersEcsTaskParametersOverridesEphemeralStorage;
         /**
-         * The Amazon Resource Name (ARN) of the task execution IAM role override for the task.
+         * ARN of the task execution IAM role override for the task.
          */
         executionRoleArn?: string;
         /**
@@ -88442,7 +88623,7 @@ export declare namespace pipes {
          */
         memory?: string;
         /**
-         * The Amazon Resource Name (ARN) of the IAM role that containers in this task can assume. All containers in this task are granted the permissions that are specified in this role.
+         * ARN of the IAM role that containers in this task can assume. All containers in this task are granted the permissions that are specified in this role.
          */
         taskRoleArn?: string;
     }
@@ -88556,11 +88737,11 @@ export declare namespace pipes {
          */
         endpointId?: string;
         /**
-         * List of AWS resources, identified by Amazon Resource Name (ARN), which the event primarily concerns. Any number, including zero, may be present.
+         * List of AWS resources, identified by ARN, which the event primarily concerns. Any number, including zero, may be present.
          */
         resources?: string[];
         /**
-         * Source resource of the pipe. This field typically requires an ARN (Amazon Resource Name). However, when using a self-managed Kafka cluster, you should use a different format. Instead of an ARN, use 'smk://' followed by the bootstrap server's address.
+         * Source resource of the pipe. This field typically requires an ARN. However, when using a self-managed Kafka cluster, you should use a different format. Instead of an ARN, use 'smk://' followed by the bootstrap server's address.
          */
         source?: string;
         /**
@@ -88727,7 +88908,7 @@ export declare namespace qldb {
          */
         aggregationEnabled?: boolean;
         /**
-         * The Amazon Resource Name (ARN) of the Kinesis Data Streams resource.
+         * ARN of the Kinesis Data Streams resource.
          */
         streamArn: string;
     }
@@ -88815,7 +88996,7 @@ export declare namespace quicksight {
     }
     interface AnalysisSourceEntitySourceTemplate {
         /**
-         * The Amazon Resource Name (ARN) of the resource.
+         * ARN of the resource.
          */
         arn: string;
         /**
@@ -88825,7 +89006,7 @@ export declare namespace quicksight {
     }
     interface AnalysisSourceEntitySourceTemplateDataSetReference {
         /**
-         * Dataset Amazon Resource Name (ARN).
+         * Dataset ARN.
          */
         dataSetArn: string;
         /**
@@ -89093,7 +89274,7 @@ export declare namespace quicksight {
     }
     interface DashboardSourceEntitySourceTemplate {
         /**
-         * The Amazon Resource Name (ARN) of the resource.
+         * ARN of the resource.
          */
         arn: string;
         /**
@@ -89103,7 +89284,7 @@ export declare namespace quicksight {
     }
     interface DashboardSourceEntitySourceTemplateDataSetReference {
         /**
-         * Dataset Amazon Resource Name (ARN).
+         * Dataset ARN.
          */
         dataSetArn: string;
         /**
@@ -89591,7 +89772,7 @@ export declare namespace quicksight {
     }
     interface DataSourceCredentials {
         /**
-         * The Amazon Resource Name (ARN) of a data source that has the credential pair that you want to use.
+         * The ARN of a data source that has the credential pair that you want to use.
          * When the value is not null, the `credentialPair` from the data source in the ARN is used.
          */
         copySourceArn?: string;
@@ -89600,7 +89781,7 @@ export declare namespace quicksight {
          */
         credentialPair?: outputs.quicksight.DataSourceCredentialsCredentialPair;
         /**
-         * The Amazon Resource Name (ARN) of the secret associated with the data source in Amazon Secrets Manager.
+         * The ARN of the secret associated with the data source in Amazon Secrets Manager.
          */
         secretArn?: string;
     }
@@ -89962,7 +90143,7 @@ export declare namespace quicksight {
          */
         actions: string[];
         /**
-         * The Amazon Resource Name (ARN) of the principal.
+         * ARN of the principal.
          */
         principal: string;
     }
@@ -89974,7 +90155,7 @@ export declare namespace quicksight {
     }
     interface DataSourceVpcConnectionProperties {
         /**
-         * The Amazon Resource Name (ARN) for the VPC connection.
+         * ARN for the VPC connection.
          */
         vpcConnectionArn: string;
     }
@@ -90407,7 +90588,7 @@ export declare namespace quicksight {
     }
     interface TemplateSourceEntitySourceAnalysis {
         /**
-         * The Amazon Resource Name (ARN) of the resource.
+         * ARN of the resource.
          */
         arn: string;
         /**
@@ -90417,7 +90598,7 @@ export declare namespace quicksight {
     }
     interface TemplateSourceEntitySourceAnalysisDataSetReference {
         /**
-         * Dataset Amazon Resource Name (ARN).
+         * Dataset ARN.
          */
         dataSetArn: string;
         /**
@@ -90427,7 +90608,7 @@ export declare namespace quicksight {
     }
     interface TemplateSourceEntitySourceTemplate {
         /**
-         * The Amazon Resource Name (ARN) of the resource.
+         * ARN of the resource.
          */
         arn: string;
     }
@@ -90693,7 +90874,7 @@ export declare namespace rds {
          */
         kmsKeyId: string;
         /**
-         * Amazon Resource Name (ARN) of the secret.
+         * ARN of the secret.
          */
         secretArn: string;
         /**
@@ -90841,7 +91022,7 @@ export declare namespace rds {
     }
     interface GetGlobalClusterMember {
         /**
-         * Amazon Resource Name (ARN) of member DB Cluster
+         * ARN of member DB Cluster
          */
         dbClusterArn: string;
         /**
@@ -90855,7 +91036,7 @@ export declare namespace rds {
          */
         kmsKeyId: string;
         /**
-         * The Amazon Resource Name (ARN) of the secret.
+         * ARN of the secret.
          */
         secretArn: string;
         /**
@@ -90993,7 +91174,7 @@ export declare namespace rds {
     }
     interface GlobalClusterGlobalClusterMember {
         /**
-         * Amazon Resource Name (ARN) of member DB Cluster.
+         * ARN of member DB Cluster.
          */
         dbClusterArn: string;
         /**
@@ -91046,7 +91227,7 @@ export declare namespace rds {
          */
         kmsKeyId: string;
         /**
-         * The Amazon Resource Name (ARN) of the secret.
+         * ARN of the secret.
          */
         secretArn: string;
         /**
@@ -91188,7 +91369,7 @@ export declare namespace rds {
          */
         iamAuth?: string;
         /**
-         * Amazon Resource Name (ARN) representing the secret that the proxy uses to authenticate to the RDS DB instance or Aurora DB cluster. These secrets are stored within Amazon Secrets Manager.
+         * ARN representing the secret that the proxy uses to authenticate to the RDS DB instance or Aurora DB cluster. These secrets are stored within Amazon Secrets Manager.
          */
         secretArn?: string;
         /**
@@ -91300,7 +91481,7 @@ export declare namespace redshift {
     }
     interface GetDataSharesDataShare {
         /**
-         * ARN (Amazon Resource Name) of the data share.
+         * ARN of the data share.
          */
         dataShareArn: string;
         /**
@@ -91308,13 +91489,13 @@ export declare namespace redshift {
          */
         managedBy: string;
         /**
-         * ARN (Amazon Resource Name) of the producer.
+         * ARN of the producer.
          */
         producerArn: string;
     }
     interface GetProducerDataSharesDataShare {
         /**
-         * ARN (Amazon Resource Name) of the data share.
+         * ARN of the data share.
          */
         dataShareArn: string;
         /**
@@ -91322,7 +91503,7 @@ export declare namespace redshift {
          */
         managedBy: string;
         /**
-         * Amazon Resource Name (ARN) of the producer namespace that returns in the list of datashares.
+         * ARN of the producer namespace that returns in the list of datashares.
          *
          * The following arguments are optional:
          */
@@ -91809,6 +91990,10 @@ export declare namespace resiliencehub {
          * ARN of the associated system.
          */
         systemArn: string;
+        /**
+         * List of user journey identifiers that associate the system with the service.
+         */
+        userJourneyIds: string[];
     }
     interface GetV2ServicePermissionModel {
         /**
@@ -91923,8 +92108,6 @@ export declare namespace resiliencehub {
         resourceTags?: outputs.resiliencehub.V2InputSourceResourceConfigurationResourceTag[];
         /**
          * S3 URL.
-         *
-         * Exactly one attribute must be configured.
          */
         tfStateFileUrl?: string;
     }
@@ -91993,6 +92176,10 @@ export declare namespace resiliencehub {
          * ARN of the system to associate with the service.
          */
         systemArn: string;
+        /**
+         * List of user journey identifiers that associate the system with the service.
+         */
+        userJourneyIds?: string[];
     }
     interface V2ServicePermissionModel {
         /**
@@ -92032,7 +92219,7 @@ export declare namespace resourceexplorer {
     }
     interface SearchResource {
         /**
-         * Amazon resource name of resource.
+         * ARN of resource.
          */
         arn: string;
         /**
@@ -94834,7 +95021,7 @@ export declare namespace s3 {
     }
     interface BucketReplicationConfigRuleDestinationEncryptionConfiguration {
         /**
-         * ID (Key ARN or Alias ARN) of the customer managed AWS KMS key stored in AWS Key Management Service (KMS) for the destination bucket.
+         * ID (Key ARN or Alias ARN) of the customer managed AWS KMS key stored in KMS for the destination bucket.
          */
         replicaKmsKeyId: string;
     }
@@ -95880,13 +96067,13 @@ export declare namespace s3 {
          */
         sourceSelectionCriterias: outputs.s3.GetBucketReplicationConfigurationRuleSourceSelectionCriteria[];
         /**
-         * Whether Amazon S3 replicates objects created with server-side encryption using an AWS KMS key stored in AWS Key Management Service.
+         * Whether Amazon S3 replicates objects created with server-side encryption using an AWS KMS key stored in KMS.
          */
         status: string;
     }
     interface GetBucketReplicationConfigurationRuleDeleteMarkerReplication {
         /**
-         * Whether Amazon S3 replicates objects created with server-side encryption using an AWS KMS key stored in AWS Key Management Service.
+         * Whether Amazon S3 replicates objects created with server-side encryption using an AWS KMS key stored in KMS.
          */
         status: string;
     }
@@ -95928,7 +96115,7 @@ export declare namespace s3 {
     }
     interface GetBucketReplicationConfigurationRuleDestinationEncryptionConfiguration {
         /**
-         * ID (Key ARN or Alias ARN) of the customer managed AWS KMS key stored in AWS Key Management Service (KMS) for the destination bucket.
+         * ID (Key ARN or Alias ARN) of the customer managed AWS KMS key stored in KMS for the destination bucket.
          */
         replicaKmsKeyId: string;
     }
@@ -95938,7 +96125,7 @@ export declare namespace s3 {
          */
         eventThresholds: outputs.s3.GetBucketReplicationConfigurationRuleDestinationMetricEventThreshold[];
         /**
-         * Whether Amazon S3 replicates objects created with server-side encryption using an AWS KMS key stored in AWS Key Management Service.
+         * Whether Amazon S3 replicates objects created with server-side encryption using an AWS KMS key stored in KMS.
          */
         status: string;
     }
@@ -95950,7 +96137,7 @@ export declare namespace s3 {
     }
     interface GetBucketReplicationConfigurationRuleDestinationReplicationTime {
         /**
-         * Whether Amazon S3 replicates objects created with server-side encryption using an AWS KMS key stored in AWS Key Management Service.
+         * Whether Amazon S3 replicates objects created with server-side encryption using an AWS KMS key stored in KMS.
          */
         status: string;
         /**
@@ -95966,7 +96153,7 @@ export declare namespace s3 {
     }
     interface GetBucketReplicationConfigurationRuleExistingObjectReplication {
         /**
-         * Whether Amazon S3 replicates objects created with server-side encryption using an AWS KMS key stored in AWS Key Management Service.
+         * Whether Amazon S3 replicates objects created with server-side encryption using an AWS KMS key stored in KMS.
          */
         status: string;
     }
@@ -96026,13 +96213,13 @@ export declare namespace s3 {
     }
     interface GetBucketReplicationConfigurationRuleSourceSelectionCriteriaReplicaModification {
         /**
-         * Whether Amazon S3 replicates objects created with server-side encryption using an AWS KMS key stored in AWS Key Management Service.
+         * Whether Amazon S3 replicates objects created with server-side encryption using an AWS KMS key stored in KMS.
          */
         status: string;
     }
     interface GetBucketReplicationConfigurationRuleSourceSelectionCriteriaSseKmsEncryptedObject {
         /**
-         * Whether Amazon S3 replicates objects created with server-side encryption using an AWS KMS key stored in AWS Key Management Service.
+         * Whether Amazon S3 replicates objects created with server-side encryption using an AWS KMS key stored in KMS.
          */
         status: string;
     }
@@ -96232,7 +96419,7 @@ export declare namespace s3 {
     }
     interface VectorsIndexEncryptionConfiguration {
         /**
-         * AWS Key Management Service (KMS) customer managed key ID to use for the encryption configuration. This parameter is allowed if and only if `sseType` is set to `aws:kms`. To specify the KMS key, you must use the format of the KMS key Amazon Resource Name (ARN).
+         * KMS customer managed key ID to use for the encryption configuration. This parameter is allowed if and only if `sseType` is set to `aws:kms`. To specify the KMS key, you must use the format of the KMS key ARN.
          */
         kmsKeyArn: string;
         /**
@@ -96580,7 +96767,7 @@ export declare namespace s3control {
     }
     interface ObjectLambdaAccessPointConfigurationTransformationConfigurationContentTransformationAwsLambda {
         /**
-         * Amazon Resource Name (ARN) of the AWS Lambda function.
+         * ARN of the AWS Lambda function.
          */
         functionArn: string;
         /**
@@ -96766,7 +96953,7 @@ export declare namespace s3control {
     }
     interface StorageLensConfigurationStorageLensConfigurationAwsOrg {
         /**
-         * Amazon Resource Name (ARN) of the Amazon Web Services organization.
+         * ARN of the Amazon Web Services organization.
          */
         arn: string;
     }
@@ -96796,7 +96983,7 @@ export declare namespace s3control {
          */
         accountId: string;
         /**
-         * Amazon Resource Name (ARN) of the bucket.
+         * ARN of the bucket.
          */
         arn: string;
         /**
@@ -96888,7 +97075,7 @@ export declare namespace s3control {
          */
         accountId: string;
         /**
-         * Amazon Resource Name (ARN) of the bucket.
+         * ARN of the bucket.
          */
         arn: string;
         /**
@@ -97934,7 +98121,7 @@ export declare namespace sagemaker {
          */
         instanceType?: string;
         /**
-         * The Amazon Resource Name (ARN) of the Lifecycle Configuration attached to the Resource.
+         * ARN of the Lifecycle Configuration attached to the Resource.
          */
         lifecycleConfigArn?: string;
         /**
@@ -97960,7 +98147,7 @@ export declare namespace sagemaker {
          */
         repositoryUrl: string;
         /**
-         * The Amazon Resource Name (ARN) of the AWS Secrets Manager secret that contains the credentials used to access the git repository. The secret must have a staging label of AWSCURRENT and must be in the following format: `{"username": UserName, "password": Password}`
+         * ARN of the AWS Secrets Manager secret that contains the credentials used to access the git repository. The secret must have a staging label of AWSCURRENT and must be in the following format: `{"username": UserName, "password": Password}`
          */
         secretArn?: string;
     }
@@ -98080,7 +98267,7 @@ export declare namespace sagemaker {
     }
     interface DataQualityJobDefinitionDataQualityJobOutputConfig {
         /**
-         * The AWS Key Management Service (AWS KMS) key that Amazon SageMaker AI uses to encrypt the model artifacts at rest using Amazon S3 server-side encryption.
+         * KMS key that Amazon SageMaker AI uses to encrypt the model artifacts at rest using Amazon S3 server-side encryption.
          */
         kmsKeyId?: string;
         /**
@@ -98124,7 +98311,7 @@ export declare namespace sagemaker {
          */
         instanceType: string;
         /**
-         * The AWS Key Management Service (AWS KMS) key that Amazon SageMaker AI uses to encrypt data on the storage volume attached to the ML compute instance(s) that run the model monitoring job.
+         * KMS key that Amazon SageMaker AI uses to encrypt data on the storage volume attached to the ML compute instance(s) that run the model monitoring job.
          */
         volumeKmsKeyId?: string;
         /**
@@ -98178,7 +98365,7 @@ export declare namespace sagemaker {
     }
     interface DeviceFleetOutputConfig {
         /**
-         * The AWS Key Management Service (AWS KMS) key that Amazon SageMaker AI uses to encrypt data on the storage volume after compilation job. If you don't provide a KMS key ID, Amazon SageMaker AI uses the default KMS key for Amazon S3 for your role's account.
+         * KMS key that Amazon SageMaker AI uses to encrypt data on the storage volume after compilation job. If you don't provide a KMS key ID, Amazon SageMaker AI uses the default KMS key for Amazon S3 for your role's account.
          */
         kmsKeyId?: string;
         /**
@@ -98212,7 +98399,7 @@ export declare namespace sagemaker {
          */
         kernelGatewayAppSettings?: outputs.sagemaker.DomainDefaultSpaceSettingsKernelGatewayAppSettings;
         /**
-         * The security groups for the Amazon Virtual Private Cloud that the space uses for communication.
+         * Security groups for the VPC that the space uses for communication.
          */
         securityGroups?: string[];
         /**
@@ -98264,7 +98451,7 @@ export declare namespace sagemaker {
          */
         customImages?: outputs.sagemaker.DomainDefaultSpaceSettingsJupyterLabAppSettingsCustomImage[];
         /**
-         * The default instance type and the Amazon Resource Name (ARN) of the SageMaker AI image created on the instance. see `defaultResourceSpec` Block below.
+         * Default instance type and the ARN of the SageMaker AI image created on the instance. see `defaultResourceSpec` Block below.
          */
         defaultResourceSpec?: outputs.sagemaker.DomainDefaultSpaceSettingsJupyterLabAppSettingsDefaultResourceSpec;
         /**
@@ -98272,7 +98459,7 @@ export declare namespace sagemaker {
          */
         emrSettings?: outputs.sagemaker.DomainDefaultSpaceSettingsJupyterLabAppSettingsEmrSettings;
         /**
-         * The Amazon Resource Name (ARN) of the Lifecycle Configurations.
+         * ARN of the Lifecycle Configurations.
          */
         lifecycleConfigArns?: string[];
     }
@@ -98326,7 +98513,7 @@ export declare namespace sagemaker {
          */
         instanceType?: string;
         /**
-         * The Amazon Resource Name (ARN) of the Lifecycle Configuration attached to the Resource.
+         * ARN of the Lifecycle Configuration attached to the Resource.
          */
         lifecycleConfigArn?: string;
         /**
@@ -98344,11 +98531,11 @@ export declare namespace sagemaker {
     }
     interface DomainDefaultSpaceSettingsJupyterLabAppSettingsEmrSettings {
         /**
-         * An array of Amazon Resource Names (ARNs) of the IAM roles that the execution role of SageMaker AI can assume for performing operations or tasks related to Amazon EMR clusters or Amazon EMR Serverless applications. These roles define the permissions and access policies required when performing Amazon EMR-related operations, such as listing, connecting to, or terminating Amazon EMR clusters or Amazon EMR Serverless applications. They are typically used in cross-account access scenarios, where the Amazon EMR resources (clusters or serverless applications) are located in a different AWS account than the SageMaker AI domain.
+         * Array of ARNs of the IAM roles that the execution role of SageMaker AI can assume for performing operations or tasks related to Amazon EMR clusters or Amazon EMR Serverless applications. These roles define the permissions and access policies required when performing Amazon EMR-related operations, such as listing, connecting to, or terminating Amazon EMR clusters or Amazon EMR Serverless applications. They are typically used in cross-account access scenarios, where the Amazon EMR resources (clusters or serverless applications) are located in a different AWS account than the SageMaker AI domain.
          */
         assumableRoleArns?: string[];
         /**
-         * An array of Amazon Resource Names (ARNs) of the IAM roles used by the Amazon EMR cluster instances or job execution environments to access other AWS services and resources needed during the runtime of your Amazon EMR or Amazon EMR Serverless workloads, such as Amazon S3 for data access, Amazon CloudWatch for logging, or other AWS services based on the particular workload requirements.
+         * Array of ARNs of the IAM roles used by the Amazon EMR cluster instances or job execution environments to access other AWS services and resources needed during the runtime of your Amazon EMR or Amazon EMR Serverless workloads, such as Amazon S3 for data access, Amazon CloudWatch for logging, or other AWS services based on the particular workload requirements.
          */
         executionRoleArns?: string[];
     }
@@ -98358,11 +98545,11 @@ export declare namespace sagemaker {
          */
         codeRepositories?: outputs.sagemaker.DomainDefaultSpaceSettingsJupyterServerAppSettingsCodeRepository[];
         /**
-         * The default instance type and the Amazon Resource Name (ARN) of the SageMaker AI image created on the instance. see `defaultResourceSpec` Block below.
+         * Default instance type and the ARN of the SageMaker AI image created on the instance. see `defaultResourceSpec` Block below.
          */
         defaultResourceSpec?: outputs.sagemaker.DomainDefaultSpaceSettingsJupyterServerAppSettingsDefaultResourceSpec;
         /**
-         * The Amazon Resource Name (ARN) of the Lifecycle Configurations.
+         * ARN of the Lifecycle Configurations.
          */
         lifecycleConfigArns?: string[];
     }
@@ -98378,7 +98565,7 @@ export declare namespace sagemaker {
          */
         instanceType?: string;
         /**
-         * The Amazon Resource Name (ARN) of the Lifecycle Configuration attached to the Resource.
+         * ARN of the Lifecycle Configuration attached to the Resource.
          */
         lifecycleConfigArn?: string;
         /**
@@ -98400,11 +98587,11 @@ export declare namespace sagemaker {
          */
         customImages?: outputs.sagemaker.DomainDefaultSpaceSettingsKernelGatewayAppSettingsCustomImage[];
         /**
-         * The default instance type and the Amazon Resource Name (ARN) of the SageMaker AI image created on the instance. see `defaultResourceSpec` Block below.
+         * Default instance type and the ARN of the SageMaker AI image created on the instance. see `defaultResourceSpec` Block below.
          */
         defaultResourceSpec?: outputs.sagemaker.DomainDefaultSpaceSettingsKernelGatewayAppSettingsDefaultResourceSpec;
         /**
-         * The Amazon Resource Name (ARN) of the Lifecycle Configurations.
+         * ARN of the Lifecycle Configurations.
          */
         lifecycleConfigArns?: string[];
     }
@@ -98428,7 +98615,7 @@ export declare namespace sagemaker {
          */
         instanceType?: string;
         /**
-         * The Amazon Resource Name (ARN) of the Lifecycle Configuration attached to the Resource.
+         * ARN of the Lifecycle Configuration attached to the Resource.
          */
         lifecycleConfigArn?: string;
         /**
@@ -98573,7 +98760,7 @@ export declare namespace sagemaker {
     }
     interface DomainDefaultUserSettingsCanvasAppSettingsEmrServerlessSettings {
         /**
-         * The Amazon Resource Name (ARN) of the AWS IAM role that is assumed for running Amazon EMR Serverless jobs in SageMaker AI Canvas. This role should have the necessary permissions to read and write data attached and a trust relationship with EMR Serverless.
+         * ARN of the AWS IAM role that is assumed for running Amazon EMR Serverless jobs in SageMaker AI Canvas. This role should have the necessary permissions to read and write data attached and a trust relationship with EMR Serverless.
          */
         executionRoleArn?: string;
         /**
@@ -98606,7 +98793,7 @@ export declare namespace sagemaker {
     }
     interface DomainDefaultUserSettingsCanvasAppSettingsModelRegisterSettings {
         /**
-         * The Amazon Resource Name (ARN) of the SageMaker AI model registry account. Required only to register model versions created by a different SageMaker AI Canvas AWS account than the AWS account in which SageMaker AI model registry is set up.
+         * ARN of the SageMaker AI model registry account. Required only to register model versions created by a different SageMaker AI Canvas AWS account than the AWS account in which SageMaker AI model registry is set up.
          */
         crossAccountModelRegisterRoleArn?: string;
         /**
@@ -98630,7 +98817,7 @@ export declare namespace sagemaker {
          */
         s3ArtifactPath?: string;
         /**
-         * The Amazon Web Services Key Management Service (KMS) encryption key ID that is used to encrypt artifacts generated by Canvas in the Amazon S3 bucket.
+         * KMS encryption key ID that is used to encrypt artifacts generated by Canvas in the Amazon S3 bucket.
          */
         s3KmsKeyId?: string;
     }
@@ -98648,11 +98835,11 @@ export declare namespace sagemaker {
          */
         customImages?: outputs.sagemaker.DomainDefaultUserSettingsCodeEditorAppSettingsCustomImage[];
         /**
-         * The default instance type and the Amazon Resource Name (ARN) of the SageMaker AI image created on the instance. see `defaultResourceSpec` Block below.
+         * Default instance type and the ARN of the SageMaker AI image created on the instance. see `defaultResourceSpec` Block below.
          */
         defaultResourceSpec?: outputs.sagemaker.DomainDefaultUserSettingsCodeEditorAppSettingsDefaultResourceSpec;
         /**
-         * The Amazon Resource Name (ARN) of the Lifecycle Configurations.
+         * ARN of the Lifecycle Configurations.
          */
         lifecycleConfigArns?: string[];
     }
@@ -98700,7 +98887,7 @@ export declare namespace sagemaker {
          */
         instanceType?: string;
         /**
-         * The Amazon Resource Name (ARN) of the Lifecycle Configuration attached to the Resource.
+         * ARN of the Lifecycle Configuration attached to the Resource.
          */
         lifecycleConfigArn?: string;
         /**
@@ -98760,7 +98947,7 @@ export declare namespace sagemaker {
          */
         customImages?: outputs.sagemaker.DomainDefaultUserSettingsJupyterLabAppSettingsCustomImage[];
         /**
-         * The default instance type and the Amazon Resource Name (ARN) of the SageMaker AI image created on the instance. see `defaultResourceSpec` Block below.
+         * Default instance type and the ARN of the SageMaker AI image created on the instance. see `defaultResourceSpec` Block below.
          */
         defaultResourceSpec?: outputs.sagemaker.DomainDefaultUserSettingsJupyterLabAppSettingsDefaultResourceSpec;
         /**
@@ -98768,7 +98955,7 @@ export declare namespace sagemaker {
          */
         emrSettings?: outputs.sagemaker.DomainDefaultUserSettingsJupyterLabAppSettingsEmrSettings;
         /**
-         * The Amazon Resource Name (ARN) of the Lifecycle Configurations.
+         * ARN of the Lifecycle Configurations.
          */
         lifecycleConfigArns?: string[];
     }
@@ -98822,7 +99009,7 @@ export declare namespace sagemaker {
          */
         instanceType?: string;
         /**
-         * The Amazon Resource Name (ARN) of the Lifecycle Configuration attached to the Resource.
+         * ARN of the Lifecycle Configuration attached to the Resource.
          */
         lifecycleConfigArn?: string;
         /**
@@ -98840,11 +99027,11 @@ export declare namespace sagemaker {
     }
     interface DomainDefaultUserSettingsJupyterLabAppSettingsEmrSettings {
         /**
-         * An array of Amazon Resource Names (ARNs) of the IAM roles that the execution role of SageMaker AI can assume for performing operations or tasks related to Amazon EMR clusters or Amazon EMR Serverless applications. These roles define the permissions and access policies required when performing Amazon EMR-related operations, such as listing, connecting to, or terminating Amazon EMR clusters or Amazon EMR Serverless applications. They are typically used in cross-account access scenarios, where the Amazon EMR resources (clusters or serverless applications) are located in a different AWS account than the SageMaker AI domain.
+         * Array of ARNs of the IAM roles that the execution role of SageMaker AI can assume for performing operations or tasks related to Amazon EMR clusters or Amazon EMR Serverless applications. These roles define the permissions and access policies required when performing Amazon EMR-related operations, such as listing, connecting to, or terminating Amazon EMR clusters or Amazon EMR Serverless applications. They are typically used in cross-account access scenarios, where the Amazon EMR resources (clusters or serverless applications) are located in a different AWS account than the SageMaker AI domain.
          */
         assumableRoleArns?: string[];
         /**
-         * An array of Amazon Resource Names (ARNs) of the IAM roles used by the Amazon EMR cluster instances or job execution environments to access other AWS services and resources needed during the runtime of your Amazon EMR or Amazon EMR Serverless workloads, such as Amazon S3 for data access, Amazon CloudWatch for logging, or other AWS services based on the particular workload requirements.
+         * Array of ARNs of the IAM roles used by the Amazon EMR cluster instances or job execution environments to access other AWS services and resources needed during the runtime of your Amazon EMR or Amazon EMR Serverless workloads, such as Amazon S3 for data access, Amazon CloudWatch for logging, or other AWS services based on the particular workload requirements.
          */
         executionRoleArns?: string[];
     }
@@ -98854,11 +99041,11 @@ export declare namespace sagemaker {
          */
         codeRepositories?: outputs.sagemaker.DomainDefaultUserSettingsJupyterServerAppSettingsCodeRepository[];
         /**
-         * The default instance type and the Amazon Resource Name (ARN) of the SageMaker AI image created on the instance. see `defaultResourceSpec` Block below.
+         * Default instance type and the ARN of the SageMaker AI image created on the instance. see `defaultResourceSpec` Block below.
          */
         defaultResourceSpec?: outputs.sagemaker.DomainDefaultUserSettingsJupyterServerAppSettingsDefaultResourceSpec;
         /**
-         * The Amazon Resource Name (ARN) of the Lifecycle Configurations.
+         * ARN of the Lifecycle Configurations.
          */
         lifecycleConfigArns?: string[];
     }
@@ -98874,7 +99061,7 @@ export declare namespace sagemaker {
          */
         instanceType?: string;
         /**
-         * The Amazon Resource Name (ARN) of the Lifecycle Configuration attached to the Resource.
+         * ARN of the Lifecycle Configuration attached to the Resource.
          */
         lifecycleConfigArn?: string;
         /**
@@ -98896,11 +99083,11 @@ export declare namespace sagemaker {
          */
         customImages?: outputs.sagemaker.DomainDefaultUserSettingsKernelGatewayAppSettingsCustomImage[];
         /**
-         * The default instance type and the Amazon Resource Name (ARN) of the SageMaker AI image created on the instance. see `defaultResourceSpec` Block below.
+         * Default instance type and the ARN of the SageMaker AI image created on the instance. see `defaultResourceSpec` Block below.
          */
         defaultResourceSpec?: outputs.sagemaker.DomainDefaultUserSettingsKernelGatewayAppSettingsDefaultResourceSpec;
         /**
-         * The Amazon Resource Name (ARN) of the Lifecycle Configurations.
+         * ARN of the Lifecycle Configurations.
          */
         lifecycleConfigArns?: string[];
     }
@@ -98924,7 +99111,7 @@ export declare namespace sagemaker {
          */
         instanceType?: string;
         /**
-         * The Amazon Resource Name (ARN) of the Lifecycle Configuration attached to the Resource.
+         * ARN of the Lifecycle Configuration attached to the Resource.
          */
         lifecycleConfigArn?: string;
         /**
@@ -98946,7 +99133,7 @@ export declare namespace sagemaker {
          */
         customImages?: outputs.sagemaker.DomainDefaultUserSettingsRSessionAppSettingsCustomImage[];
         /**
-         * The default instance type and the Amazon Resource Name (ARN) of the SageMaker AI image created on the instance. see `defaultResourceSpec` Block above.
+         * Default instance type and the ARN of the SageMaker AI image created on the instance. see `defaultResourceSpec` Block above.
          */
         defaultResourceSpec?: outputs.sagemaker.DomainDefaultUserSettingsRSessionAppSettingsDefaultResourceSpec;
     }
@@ -98970,7 +99157,7 @@ export declare namespace sagemaker {
          */
         instanceType?: string;
         /**
-         * The Amazon Resource Name (ARN) of the Lifecycle Configuration attached to the Resource.
+         * ARN of the Lifecycle Configuration attached to the Resource.
          */
         lifecycleConfigArn?: string;
         /**
@@ -99002,7 +99189,7 @@ export declare namespace sagemaker {
          */
         notebookOutputOption?: string;
         /**
-         * When `notebookOutputOption` is Allowed, the AWS Key Management Service (KMS) encryption key ID used to encrypt the notebook cell output in the Amazon S3 bucket.
+         * When `notebookOutputOption` is Allowed, the KMS encryption key ID used to encrypt the notebook cell output in the Amazon S3 bucket.
          */
         s3KmsKeyId?: string;
         /**
@@ -99042,7 +99229,7 @@ export declare namespace sagemaker {
     }
     interface DomainDefaultUserSettingsTensorBoardAppSettings {
         /**
-         * The default instance type and the Amazon Resource Name (ARN) of the SageMaker AI image created on the instance. see `defaultResourceSpec` Block below.
+         * Default instance type and the ARN of the SageMaker AI image created on the instance. see `defaultResourceSpec` Block below.
          */
         defaultResourceSpec?: outputs.sagemaker.DomainDefaultUserSettingsTensorBoardAppSettingsDefaultResourceSpec;
     }
@@ -99052,7 +99239,7 @@ export declare namespace sagemaker {
          */
         instanceType?: string;
         /**
-         * The Amazon Resource Name (ARN) of the Lifecycle Configuration attached to the Resource.
+         * ARN of the Lifecycle Configuration attached to the Resource.
          */
         lifecycleConfigArn?: string;
         /**
@@ -99082,7 +99269,7 @@ export declare namespace sagemaker {
          */
         rStudioServerProDomainSettings?: outputs.sagemaker.DomainDomainSettingsRStudioServerProDomainSettings;
         /**
-         * The security groups for the Amazon Virtual Private Cloud that the Domain uses for communication between Domain-level apps and user apps.
+         * Security groups for the VPC that the Domain uses for communication between Domain-level apps and user apps.
          */
         securityGroupIds?: string[];
         /**
@@ -99102,7 +99289,7 @@ export declare namespace sagemaker {
     }
     interface DomainDomainSettingsRStudioServerProDomainSettings {
         /**
-         * The default instance type and the Amazon Resource Name (ARN) of the SageMaker AI image created on the instance. see `defaultResourceSpec` Block above.
+         * Default instance type and the ARN of the SageMaker AI image created on the instance. see `defaultResourceSpec` Block above.
          */
         defaultResourceSpec?: outputs.sagemaker.DomainDomainSettingsRStudioServerProDomainSettingsDefaultResourceSpec;
         /**
@@ -99124,7 +99311,7 @@ export declare namespace sagemaker {
          */
         instanceType?: string;
         /**
-         * The Amazon Resource Name (ARN) of the Lifecycle Configuration attached to the Resource.
+         * ARN of the Lifecycle Configuration attached to the Resource.
          */
         lifecycleConfigArn?: string;
         /**
@@ -99314,7 +99501,7 @@ export declare namespace sagemaker {
          */
         capacityReservationPreference?: string;
         /**
-         * The Amazon Resource Name (ARN) that uniquely identifies the ML capacity reservation that SageMaker AI applies when it deploys the endpoint.
+         * ARN that uniquely identifies the ML capacity reservation that SageMaker AI applies when it deploys the endpoint.
          */
         mlReservationArn?: string;
     }
@@ -99434,7 +99621,7 @@ export declare namespace sagemaker {
          */
         capacityReservationPreference?: string;
         /**
-         * The Amazon Resource Name (ARN) that uniquely identifies the ML capacity reservation that SageMaker AI applies when it deploys the endpoint.
+         * ARN that uniquely identifies the ML capacity reservation that SageMaker AI applies when it deploys the endpoint.
          */
         mlReservationArn?: string;
     }
@@ -99647,7 +99834,7 @@ export declare namespace sagemaker {
     }
     interface FeatureGroupOfflineStoreConfigS3StorageConfig {
         /**
-         * The AWS Key Management Service (KMS) key ID of the key used to encrypt any objects written into the OfflineStore S3 location.
+         * KMS key ID of the key used to encrypt any objects written into the OfflineStore S3 location.
          */
         kmsKeyId?: string;
         /**
@@ -99679,7 +99866,7 @@ export declare namespace sagemaker {
     }
     interface FeatureGroupOnlineStoreConfigSecurityConfig {
         /**
-         * The ID of the AWS Key Management Service (AWS KMS) key that SageMaker AI Feature Store uses to encrypt the Amazon S3 objects at rest using Amazon S3 server-side encryption.
+         * ID of the KMS key that SageMaker AI Feature Store uses to encrypt the Amazon S3 objects at rest using Amazon S3 server-side encryption.
          */
         kmsKeyId?: string;
     }
@@ -99712,7 +99899,7 @@ export declare namespace sagemaker {
     }
     interface FlowDefinitionHumanLoopConfig {
         /**
-         * The Amazon Resource Name (ARN) of the human task user interface.
+         * ARN of the human task user interface.
          */
         humanTaskUiArn: string;
         /**
@@ -99744,7 +99931,7 @@ export declare namespace sagemaker {
          */
         taskTitle: string;
         /**
-         * The Amazon Resource Name (ARN) of the human task user interface. Amazon Resource Name (ARN) of a team of workers. For Public workforces see [AWS Docs](https://docs.aws.amazon.com/sagemaker/latest/dg/sms-workforce-management-public.html).
+         * ARN of the human task user interface. ARN of a team of workers. For Public workforces see [AWS Docs](https://docs.aws.amazon.com/sagemaker/latest/dg/sms-workforce-management-public.html).
          */
         workteamArn: string;
     }
@@ -99776,7 +99963,7 @@ export declare namespace sagemaker {
     }
     interface FlowDefinitionOutputConfig {
         /**
-         * The Amazon Key Management Service (KMS) key ARN for server-side encryption.
+         * KMS key ARN for server-side encryption.
          */
         kmsKeyId?: string;
         /**
@@ -100754,7 +100941,7 @@ export declare namespace sagemaker {
          */
         image?: string;
         /**
-         * Specifies whether the model container is in Amazon ECR or a private Docker registry accessible from your Amazon Virtual Private Cloud (VPC). For more information see [Using a Private Docker Registry for Real-Time Inference Containers](https://docs.aws.amazon.com/sagemaker/latest/dg/your-algorithms-containers-inference-private.html). see Image Config.
+         * Whether the model container is in Amazon ECR or a private Docker registry accessible from your VPC. For more information see [Using a Private Docker Registry for Real-Time Inference Containers](https://docs.aws.amazon.com/sagemaker/latest/dg/your-algorithms-containers-inference-private.html). see Image Config.
          */
         imageConfig?: outputs.sagemaker.ModelContainerImageConfig;
         /**
@@ -100774,7 +100961,7 @@ export declare namespace sagemaker {
          */
         modelDataUrl?: string;
         /**
-         * Amazon Resource Name (ARN) of the model package to use to create the model.
+         * ARN of the model package to use to create the model.
          * A list of key value pairs.
          */
         modelPackageName?: string;
@@ -100819,7 +101006,7 @@ export declare namespace sagemaker {
     }
     interface ModelContainerImageConfig {
         /**
-         * Specifies whether the model container is in Amazon ECR or a private Docker registry accessible from your Amazon Virtual Private Cloud (VPC). Allowed values are: `Platform` and `Vpc`.
+         * Whether the model container is in Amazon ECR or a private Docker registry accessible from your VPC. Allowed values are: `Platform` and `Vpc`.
          */
         repositoryAccessMode: string;
         /**
@@ -100829,7 +101016,7 @@ export declare namespace sagemaker {
     }
     interface ModelContainerImageConfigRepositoryAuthConfig {
         /**
-         * Amazon Resource Name (ARN) of an AWS Lambda function that provides credentials to authenticate to the private Docker registry where your model image is hosted. For information about how to create an AWS Lambda function, see [Create a Lambda function with the console](https://docs.aws.amazon.com/lambda/latest/dg/getting-started-create-function.html) in the _AWS Lambda Developer Guide_.
+         * ARN of an AWS Lambda function that provides credentials to authenticate to the private Docker registry where your model image is hosted. For information about how to create an AWS Lambda function, see [Create a Lambda function with the console](https://docs.aws.amazon.com/lambda/latest/dg/getting-started-create-function.html) in the _AWS Lambda Developer Guide_.
          */
         repositoryCredentialsProviderArn: string;
     }
@@ -100895,7 +101082,7 @@ export declare namespace sagemaker {
          */
         image?: string;
         /**
-         * Specifies whether the model container is in Amazon ECR or a private Docker registry accessible from your Amazon Virtual Private Cloud (VPC). For more information see [Using a Private Docker Registry for Real-Time Inference Containers](https://docs.aws.amazon.com/sagemaker/latest/dg/your-algorithms-containers-inference-private.html). see Image Config.
+         * Whether the model container is in Amazon ECR or a private Docker registry accessible from your VPC. For more information see [Using a Private Docker Registry for Real-Time Inference Containers](https://docs.aws.amazon.com/sagemaker/latest/dg/your-algorithms-containers-inference-private.html). see Image Config.
          */
         imageConfig?: outputs.sagemaker.ModelPrimaryContainerImageConfig;
         /**
@@ -100912,7 +101099,7 @@ export declare namespace sagemaker {
          */
         modelDataUrl?: string;
         /**
-         * Amazon Resource Name (ARN) of the model package to use to create the model.
+         * ARN of the model package to use to create the model.
          * A list of key value pairs.
          */
         modelPackageName?: string;
@@ -100957,7 +101144,7 @@ export declare namespace sagemaker {
     }
     interface ModelPrimaryContainerImageConfig {
         /**
-         * Specifies whether the model container is in Amazon ECR or a private Docker registry accessible from your Amazon Virtual Private Cloud (VPC). Allowed values are: `Platform` and `Vpc`.
+         * Whether the model container is in Amazon ECR or a private Docker registry accessible from your VPC. Allowed values are: `Platform` and `Vpc`.
          */
         repositoryAccessMode: string;
         /**
@@ -100967,7 +101154,7 @@ export declare namespace sagemaker {
     }
     interface ModelPrimaryContainerImageConfigRepositoryAuthConfig {
         /**
-         * Amazon Resource Name (ARN) of an AWS Lambda function that provides credentials to authenticate to the private Docker registry where your model image is hosted. For information about how to create an AWS Lambda function, see [Create a Lambda function with the console](https://docs.aws.amazon.com/lambda/latest/dg/getting-started-create-function.html) in the _AWS Lambda Developer Guide_.
+         * ARN of an AWS Lambda function that provides credentials to authenticate to the private Docker registry where your model image is hosted. For information about how to create an AWS Lambda function, see [Create a Lambda function with the console](https://docs.aws.amazon.com/lambda/latest/dg/getting-started-create-function.html) in the _AWS Lambda Developer Guide_.
          */
         repositoryCredentialsProviderArn: string;
     }
@@ -101428,7 +101615,7 @@ export declare namespace sagemaker {
          */
         appLifecycleManagement?: outputs.sagemaker.SpaceSpaceSettingsCodeEditorAppSettingsAppLifecycleManagement;
         /**
-         * The default instance type and the Amazon Resource Name (ARN) of the SageMaker AI image created on the instance. See `defaultResourceSpec` Block below.
+         * Default instance type and the ARN of the SageMaker AI image created on the instance. See `defaultResourceSpec` Block below.
          */
         defaultResourceSpec: outputs.sagemaker.SpaceSpaceSettingsCodeEditorAppSettingsDefaultResourceSpec;
     }
@@ -101450,11 +101637,11 @@ export declare namespace sagemaker {
          */
         instanceType?: string;
         /**
-         * The Amazon Resource Name (ARN) of the Lifecycle Configuration attached to the Resource.
+         * ARN of the Lifecycle Configuration attached to the Resource.
          */
         lifecycleConfigArn?: string;
         /**
-         * The Amazon Resource Name (ARN) of the SageMaker AI image created on the instance.
+         * ARN of the SageMaker AI image created on the instance.
          */
         sagemakerImageArn?: string;
         /**
@@ -101488,7 +101675,7 @@ export declare namespace sagemaker {
          */
         codeRepositories?: outputs.sagemaker.SpaceSpaceSettingsJupyterLabAppSettingsCodeRepository[];
         /**
-         * The default instance type and the Amazon Resource Name (ARN) of the SageMaker AI image created on the instance. See `defaultResourceSpec` Block below.
+         * Default instance type and the ARN of the SageMaker AI image created on the instance. See `defaultResourceSpec` Block below.
          */
         defaultResourceSpec: outputs.sagemaker.SpaceSpaceSettingsJupyterLabAppSettingsDefaultResourceSpec;
     }
@@ -101516,11 +101703,11 @@ export declare namespace sagemaker {
          */
         instanceType?: string;
         /**
-         * The Amazon Resource Name (ARN) of the Lifecycle Configuration attached to the Resource.
+         * ARN of the Lifecycle Configuration attached to the Resource.
          */
         lifecycleConfigArn?: string;
         /**
-         * The Amazon Resource Name (ARN) of the SageMaker AI image created on the instance.
+         * ARN of the SageMaker AI image created on the instance.
          */
         sagemakerImageArn?: string;
         /**
@@ -101538,11 +101725,11 @@ export declare namespace sagemaker {
          */
         codeRepositories?: outputs.sagemaker.SpaceSpaceSettingsJupyterServerAppSettingsCodeRepository[];
         /**
-         * The default instance type and the Amazon Resource Name (ARN) of the SageMaker AI image created on the instance. See `defaultResourceSpec` Block below.
+         * Default instance type and the ARN of the SageMaker AI image created on the instance. See `defaultResourceSpec` Block below.
          */
         defaultResourceSpec: outputs.sagemaker.SpaceSpaceSettingsJupyterServerAppSettingsDefaultResourceSpec;
         /**
-         * The Amazon Resource Name (ARN) of the Lifecycle Configurations.
+         * ARN of the Lifecycle Configurations.
          */
         lifecycleConfigArns?: string[];
     }
@@ -101558,11 +101745,11 @@ export declare namespace sagemaker {
          */
         instanceType?: string;
         /**
-         * The Amazon Resource Name (ARN) of the Lifecycle Configuration attached to the Resource.
+         * ARN of the Lifecycle Configuration attached to the Resource.
          */
         lifecycleConfigArn?: string;
         /**
-         * The Amazon Resource Name (ARN) of the SageMaker AI image created on the instance.
+         * ARN of the SageMaker AI image created on the instance.
          */
         sagemakerImageArn?: string;
         /**
@@ -101580,11 +101767,11 @@ export declare namespace sagemaker {
          */
         customImages?: outputs.sagemaker.SpaceSpaceSettingsKernelGatewayAppSettingsCustomImage[];
         /**
-         * The default instance type and the Amazon Resource Name (ARN) of the SageMaker AI image created on the instance. See `defaultResourceSpec` Block below.
+         * Default instance type and the ARN of the SageMaker AI image created on the instance. See `defaultResourceSpec` Block below.
          */
         defaultResourceSpec: outputs.sagemaker.SpaceSpaceSettingsKernelGatewayAppSettingsDefaultResourceSpec;
         /**
-         * The Amazon Resource Name (ARN) of the Lifecycle Configurations.
+         * ARN of the Lifecycle Configurations.
          */
         lifecycleConfigArns?: string[];
     }
@@ -101608,11 +101795,11 @@ export declare namespace sagemaker {
          */
         instanceType?: string;
         /**
-         * The Amazon Resource Name (ARN) of the Lifecycle Configuration attached to the Resource.
+         * ARN of the Lifecycle Configuration attached to the Resource.
          */
         lifecycleConfigArn?: string;
         /**
-         * The Amazon Resource Name (ARN) of the SageMaker AI image created on the instance.
+         * ARN of the SageMaker AI image created on the instance.
          */
         sagemakerImageArn?: string;
         /**
@@ -102273,7 +102460,7 @@ export declare namespace sagemaker {
     }
     interface UserProfileUserSettingsCanvasAppSettingsEmrServerlessSettings {
         /**
-         * The Amazon Resource Name (ARN) of the AWS IAM role that is assumed for running Amazon EMR Serverless jobs in SageMaker AI Canvas. This role should have the necessary permissions to read and write data attached and a trust relationship with EMR Serverless.
+         * ARN of the AWS IAM role that is assumed for running Amazon EMR Serverless jobs in SageMaker AI Canvas. This role should have the necessary permissions to read and write data attached and a trust relationship with EMR Serverless.
          */
         executionRoleArn?: string;
         /**
@@ -102306,7 +102493,7 @@ export declare namespace sagemaker {
     }
     interface UserProfileUserSettingsCanvasAppSettingsModelRegisterSettings {
         /**
-         * The Amazon Resource Name (ARN) of the SageMaker AI model registry account. Required only to register model versions created by a different SageMaker AI Canvas AWS account than the AWS account in which SageMaker AI model registry is set up.
+         * ARN of the SageMaker AI model registry account. Required only to register model versions created by a different SageMaker AI Canvas AWS account than the AWS account in which SageMaker AI model registry is set up.
          */
         crossAccountModelRegisterRoleArn?: string;
         /**
@@ -102330,7 +102517,7 @@ export declare namespace sagemaker {
          */
         s3ArtifactPath?: string;
         /**
-         * The Amazon Web Services Key Management Service (KMS) encryption key ID that is used to encrypt artifacts generated by Canvas in the Amazon S3 bucket.
+         * KMS encryption key ID that is used to encrypt artifacts generated by Canvas in the Amazon S3 bucket.
          */
         s3KmsKeyId?: string;
     }
@@ -102348,11 +102535,11 @@ export declare namespace sagemaker {
          */
         customImages?: outputs.sagemaker.UserProfileUserSettingsCodeEditorAppSettingsCustomImage[];
         /**
-         * The default instance type and the Amazon Resource Name (ARN) of the SageMaker AI image created on the instance. see Default Resource Spec below.
+         * Default instance type and the ARN of the SageMaker AI image created on the instance. see Default Resource Spec below.
          */
         defaultResourceSpec?: outputs.sagemaker.UserProfileUserSettingsCodeEditorAppSettingsDefaultResourceSpec;
         /**
-         * The Amazon Resource Name (ARN) of the Lifecycle Configurations.
+         * ARN of the Lifecycle Configurations.
          */
         lifecycleConfigArns?: string[];
     }
@@ -102400,7 +102587,7 @@ export declare namespace sagemaker {
          */
         instanceType?: string;
         /**
-         * The Amazon Resource Name (ARN) of the Lifecycle Configuration attached to the Resource.
+         * ARN of the Lifecycle Configuration attached to the Resource.
          */
         lifecycleConfigArn?: string;
         /**
@@ -102457,7 +102644,7 @@ export declare namespace sagemaker {
         codeRepositories?: outputs.sagemaker.UserProfileUserSettingsJupyterLabAppSettingsCodeRepository[];
         customImages?: outputs.sagemaker.UserProfileUserSettingsJupyterLabAppSettingsCustomImage[];
         /**
-         * The default instance type and the Amazon Resource Name (ARN) of the SageMaker AI image created on the instance. see Default Resource Spec below.
+         * Default instance type and the ARN of the SageMaker AI image created on the instance. see Default Resource Spec below.
          */
         defaultResourceSpec?: outputs.sagemaker.UserProfileUserSettingsJupyterLabAppSettingsDefaultResourceSpec;
         /**
@@ -102465,7 +102652,7 @@ export declare namespace sagemaker {
          */
         emrSettings?: outputs.sagemaker.UserProfileUserSettingsJupyterLabAppSettingsEmrSettings;
         /**
-         * The Amazon Resource Name (ARN) of the Lifecycle Configurations.
+         * ARN of the Lifecycle Configurations.
          */
         lifecycleConfigArns?: string[];
     }
@@ -102519,7 +102706,7 @@ export declare namespace sagemaker {
          */
         instanceType?: string;
         /**
-         * The Amazon Resource Name (ARN) of the Lifecycle Configuration attached to the Resource.
+         * ARN of the Lifecycle Configuration attached to the Resource.
          */
         lifecycleConfigArn?: string;
         /**
@@ -102537,11 +102724,11 @@ export declare namespace sagemaker {
     }
     interface UserProfileUserSettingsJupyterLabAppSettingsEmrSettings {
         /**
-         * An array of Amazon Resource Names (ARNs) of the IAM roles that the execution role of SageMaker AI can assume for performing operations or tasks related to Amazon EMR clusters or Amazon EMR Serverless applications. These roles define the permissions and access policies required when performing Amazon EMR-related operations, such as listing, connecting to, or terminating Amazon EMR clusters or Amazon EMR Serverless applications. They are typically used in cross-account access scenarios, where the Amazon EMR resources (clusters or serverless applications) are located in a different AWS account than the SageMaker AI domain.
+         * Array of ARNs of the IAM roles that the execution role of SageMaker AI can assume for performing operations or tasks related to Amazon EMR clusters or Amazon EMR Serverless applications. These roles define the permissions and access policies required when performing Amazon EMR-related operations, such as listing, connecting to, or terminating Amazon EMR clusters or Amazon EMR Serverless applications. They are typically used in cross-account access scenarios, where the Amazon EMR resources (clusters or serverless applications) are located in a different AWS account than the SageMaker AI domain.
          */
         assumableRoleArns?: string[];
         /**
-         * An array of Amazon Resource Names (ARNs) of the IAM roles used by the Amazon EMR cluster instances or job execution environments to access other AWS services and resources needed during the runtime of your Amazon EMR or Amazon EMR Serverless workloads, such as Amazon S3 for data access, Amazon CloudWatch for logging, or other AWS services based on the particular workload requirements.
+         * Array of ARNs of the IAM roles used by the Amazon EMR cluster instances or job execution environments to access other AWS services and resources needed during the runtime of your Amazon EMR or Amazon EMR Serverless workloads, such as Amazon S3 for data access, Amazon CloudWatch for logging, or other AWS services based on the particular workload requirements.
          */
         executionRoleArns?: string[];
     }
@@ -102551,11 +102738,11 @@ export declare namespace sagemaker {
          */
         codeRepositories?: outputs.sagemaker.UserProfileUserSettingsJupyterServerAppSettingsCodeRepository[];
         /**
-         * The default instance type and the Amazon Resource Name (ARN) of the SageMaker AI image created on the instance. see Default Resource Spec below.
+         * Default instance type and the ARN of the SageMaker AI image created on the instance. see Default Resource Spec below.
          */
         defaultResourceSpec?: outputs.sagemaker.UserProfileUserSettingsJupyterServerAppSettingsDefaultResourceSpec;
         /**
-         * The Amazon Resource Name (ARN) of the Lifecycle Configurations.
+         * ARN of the Lifecycle Configurations.
          */
         lifecycleConfigArns?: string[];
     }
@@ -102571,7 +102758,7 @@ export declare namespace sagemaker {
          */
         instanceType?: string;
         /**
-         * The Amazon Resource Name (ARN) of the Lifecycle Configuration attached to the Resource.
+         * ARN of the Lifecycle Configuration attached to the Resource.
          */
         lifecycleConfigArn?: string;
         /**
@@ -102593,11 +102780,11 @@ export declare namespace sagemaker {
          */
         customImages?: outputs.sagemaker.UserProfileUserSettingsKernelGatewayAppSettingsCustomImage[];
         /**
-         * The default instance type and the Amazon Resource Name (ARN) of the SageMaker AI image created on the instance. see Default Resource Spec below.
+         * Default instance type and the ARN of the SageMaker AI image created on the instance. see Default Resource Spec below.
          */
         defaultResourceSpec?: outputs.sagemaker.UserProfileUserSettingsKernelGatewayAppSettingsDefaultResourceSpec;
         /**
-         * The Amazon Resource Name (ARN) of the Lifecycle Configurations.
+         * ARN of the Lifecycle Configurations.
          */
         lifecycleConfigArns?: string[];
     }
@@ -102621,7 +102808,7 @@ export declare namespace sagemaker {
          */
         instanceType?: string;
         /**
-         * The Amazon Resource Name (ARN) of the Lifecycle Configuration attached to the Resource.
+         * ARN of the Lifecycle Configuration attached to the Resource.
          */
         lifecycleConfigArn?: string;
         /**
@@ -102643,7 +102830,7 @@ export declare namespace sagemaker {
          */
         customImages?: outputs.sagemaker.UserProfileUserSettingsRSessionAppSettingsCustomImage[];
         /**
-         * The default instance type and the Amazon Resource Name (ARN) of the SageMaker AI image created on the instance. see Default Resource Spec below.
+         * Default instance type and the ARN of the SageMaker AI image created on the instance. see Default Resource Spec below.
          */
         defaultResourceSpec?: outputs.sagemaker.UserProfileUserSettingsRSessionAppSettingsDefaultResourceSpec;
     }
@@ -102667,7 +102854,7 @@ export declare namespace sagemaker {
          */
         instanceType?: string;
         /**
-         * The Amazon Resource Name (ARN) of the Lifecycle Configuration attached to the Resource.
+         * ARN of the Lifecycle Configuration attached to the Resource.
          */
         lifecycleConfigArn?: string;
         /**
@@ -102699,7 +102886,7 @@ export declare namespace sagemaker {
          */
         notebookOutputOption?: string;
         /**
-         * When `notebookOutputOption` is Allowed, the AWS Key Management Service (KMS) encryption key ID used to encrypt the notebook cell output in the Amazon S3 bucket.
+         * When `notebookOutputOption` is Allowed, the KMS encryption key ID used to encrypt the notebook cell output in the Amazon S3 bucket.
          */
         s3KmsKeyId?: string;
         /**
@@ -102739,7 +102926,7 @@ export declare namespace sagemaker {
     }
     interface UserProfileUserSettingsTensorBoardAppSettings {
         /**
-         * The default instance type and the Amazon Resource Name (ARN) of the SageMaker AI image created on the instance. see Default Resource Spec below.
+         * Default instance type and the ARN of the SageMaker AI image created on the instance. see Default Resource Spec below.
          */
         defaultResourceSpec?: outputs.sagemaker.UserProfileUserSettingsTensorBoardAppSettingsDefaultResourceSpec;
     }
@@ -102749,7 +102936,7 @@ export declare namespace sagemaker {
          */
         instanceType?: string;
         /**
-         * The Amazon Resource Name (ARN) of the Lifecycle Configuration attached to the Resource.
+         * ARN of the Lifecycle Configuration attached to the Resource.
          */
         lifecycleConfigArn?: string;
         /**
@@ -103457,7 +103644,7 @@ export declare namespace securityhub {
          */
         noteUpdatedBies?: outputs.securityhub.AutomationRuleCriteriaNoteUpdatedBy[];
         /**
-         * The Amazon Resource Name (ARN) for a third-party product that generated a finding in Security Hub. Documented below.
+         * ARN for a third-party product that generated a finding in Security Hub. Documented below.
          */
         productArns?: outputs.securityhub.AutomationRuleCriteriaProductArn[];
         /**
@@ -103477,7 +103664,7 @@ export declare namespace securityhub {
          */
         relatedFindingsProductArns?: outputs.securityhub.AutomationRuleCriteriaRelatedFindingsProductArn[];
         /**
-         * The Amazon Resource Name (ARN) of the application that is related to a finding. Documented below.
+         * ARN of the application that is related to a finding. Documented below.
          */
         resourceApplicationArns?: outputs.securityhub.AutomationRuleCriteriaResourceApplicationArn[];
         /**
@@ -103489,7 +103676,7 @@ export declare namespace securityhub {
          */
         resourceDetailsOthers?: outputs.securityhub.AutomationRuleCriteriaResourceDetailsOther[];
         /**
-         * The identifier for the given resource type. For AWS resources that are identified by Amazon Resource Names (ARNs), this is the ARN. For AWS resources that lack ARNs, this is the identifier as defined by the AWS service that created the resource. For non-AWS resources, this is a unique identifier that is associated with the resource. Documented below.
+         * Identifier for the given resource type. For AWS resources that are identified by ARNs, this is the ARN. For AWS resources that lack ARNs, this is the identifier as defined by the AWS service that created the resource. For non-AWS resources, this is a unique identifier that is associated with the resource. Documented below.
          */
         resourceIds?: outputs.securityhub.AutomationRuleCriteriaResourceId[];
         /**
@@ -104015,7 +104202,7 @@ export declare namespace securityhub {
          */
         instanceName: string;
         /**
-         * Amazon Resource Name (ARN) of the AWS Secrets Manager secret that contains the ServiceNow credentials.
+         * ARN of the AWS Secrets Manager secret that contains the ServiceNow credentials.
          */
         secretArn: string;
     }
@@ -104361,7 +104548,7 @@ export declare namespace securityhub {
          */
         resourceAwsEc2InstanceIamInstanceProfileArns?: outputs.securityhub.InsightFiltersResourceAwsEc2InstanceIamInstanceProfileArn[];
         /**
-         * The Amazon Machine Image (AMI) ID of the instance. See String Filter below for more details.
+         * AMI ID of the instance. See String Filter below for more details.
          */
         resourceAwsEc2InstanceImageIds?: outputs.securityhub.InsightFiltersResourceAwsEc2InstanceImageId[];
         /**
@@ -105266,7 +105453,7 @@ export declare namespace securitylake {
     }
     interface CustomLogSourceConfigurationCrawlerConfiguration {
         /**
-         * The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) role to be used by the AWS Glue crawler.
+         * The ARN of the AWS Identity and Access Management (IAM) role to be used by the AWS Glue crawler.
          */
         roleArn: string;
     }
@@ -105395,7 +105582,7 @@ export declare namespace securitylake {
          */
         httpMethod?: string;
         /**
-         * The Amazon Resource Name (ARN) of the EventBridge API destinations IAM role that you created.
+         * ARN of the EventBridge API destinations IAM role that you created.
          * For more information about ARNs and how to use them in policies, see Managing data access and AWS Managed Policies in the Amazon Security Lake User Guide.
          */
         targetRoleArn: string;
@@ -105857,7 +106044,7 @@ export declare namespace servicequotas {
 export declare namespace ses {
     interface ConfigurationSetDeliveryOptions {
         /**
-         * Whether messages that use the configuration set are required to use Transport Layer Security (TLS). If the value is `Require`, messages are only delivered if a TLS connection can be established. If the value is `Optional`, messages can be delivered in plain text if a TLS connection can't be established. Valid values: `Require` or `Optional`. Defaults to `Optional`.
+         * Whether messages that use the configuration set are required to use TLS. If the value is `Require`, messages are only delivered if a TLS connection can be established. If the value is `Optional`, messages can be delivered in plain text if a TLS connection can't be established. Valid values: `Require` or `Optional`. Defaults to `Optional`.
          */
         tlsPolicy?: string;
     }
@@ -105869,157 +106056,157 @@ export declare namespace ses {
     }
     interface EventDestinationCloudwatchDestination {
         /**
-         * The default value for the event
+         * Default value for the event
          */
         defaultValue: string;
         /**
-         * The name for the dimension
+         * Name for the dimension
          */
         dimensionName: string;
         /**
-         * The source for the value. May be any of `"messageTag"`, `"emailHeader"` or `"linkTag"`.
+         * Source for the value. May be any of `"messageTag"`, `"emailHeader"` or `"linkTag"`.
          */
         valueSource: string;
     }
     interface EventDestinationKinesisDestination {
         /**
-         * The ARN of the role that has permissions to access the Kinesis Stream
+         * ARN of the role that has permissions to access the Kinesis Stream
          */
         roleArn: string;
         /**
-         * The ARN of the Kinesis Stream
+         * ARN of the Kinesis Stream
          */
         streamArn: string;
     }
     interface EventDestinationSnsDestination {
         /**
-         * The ARN of the SNS topic
+         * ARN of the SNS topic
          */
         topicArn: string;
     }
     interface ReceiptRuleAddHeaderAction {
         /**
-         * The name of the header to add
+         * Name of the header to add.
          */
         headerName: string;
         /**
-         * The value of the header to add
+         * Value of the header to add.
          */
         headerValue: string;
         /**
-         * The position of the action in the receipt rule
+         * Position of the action in the receipt rule.
          */
         position: number;
     }
     interface ReceiptRuleBounceAction {
         /**
-         * The message to send
+         * Message to send.
          */
         message: string;
         /**
-         * The position of the action in the receipt rule
+         * Position of the action in the receipt rule.
          */
         position: number;
         /**
-         * The email address of the sender
+         * Email address of the sender.
          */
         sender: string;
         /**
-         * The RFC 5321 SMTP reply code
+         * RFC 5321 SMTP reply code.
          */
         smtpReplyCode: string;
         /**
-         * The RFC 3463 SMTP enhanced status code
+         * RFC 3463 SMTP enhanced status code.
          */
         statusCode?: string;
         /**
-         * The ARN of an SNS topic to notify
+         * ARN of an SNS topic to notify.
          */
         topicArn?: string;
     }
     interface ReceiptRuleLambdaAction {
         /**
-         * The ARN of the Lambda function to invoke
+         * ARN of the Lambda function to invoke.
          */
         functionArn: string;
         /**
-         * `Event` or `RequestResponse`
+         * `Event` or `RequestResponse`.
          */
         invocationType?: string;
         /**
-         * The position of the action in the receipt rule
+         * Position of the action in the receipt rule.
          */
         position: number;
         /**
-         * The ARN of an SNS topic to notify
+         * ARN of an SNS topic to notify.
          */
         topicArn?: string;
     }
     interface ReceiptRuleS3Action {
         /**
-         * The name of the S3 bucket
+         * Name of the S3 bucket.
          */
         bucketName: string;
         /**
-         * The ARN of the IAM role to be used by Amazon Simple Email Service while writing to the Amazon S3 bucket, optionally encrypting your mail via the provided customer managed key, and publishing to the Amazon SNS topic
+         * ARN of the IAM role to be used by Amazon Simple Email Service while writing to the Amazon S3 bucket, optionally encrypting your mail via the provided customer managed key, and publishing to the Amazon SNS topic.
          */
         iamRoleArn?: string;
         /**
-         * The ARN of the KMS key
+         * ARN of the KMS key.
          */
         kmsKeyArn?: string;
         /**
-         * The key prefix of the S3 bucket
+         * Key prefix of the S3 bucket.
          */
         objectKeyPrefix?: string;
         /**
-         * The position of the action in the receipt rule
+         * Position of the action in the receipt rule.
          */
         position: number;
         /**
-         * The ARN of an SNS topic to notify
+         * ARN of an SNS topic to notify.
          */
         topicArn?: string;
     }
     interface ReceiptRuleSnsAction {
         /**
-         * The encoding to use for the email within the Amazon SNS notification. Default value is `UTF-8`.
+         * Encoding to use for the email within the Amazon SNS notification. Default value is `UTF-8`.
          */
         encoding?: string;
         /**
-         * The position of the action in the receipt rule
+         * Position of the action in the receipt rule.
          */
         position: number;
         /**
-         * The ARN of an SNS topic to notify
+         * ARN of an SNS topic to notify.
          */
         topicArn: string;
     }
     interface ReceiptRuleStopAction {
         /**
-         * The position of the action in the receipt rule
+         * Position of the action in the receipt rule.
          */
         position: number;
         /**
-         * The scope to apply. The only acceptable value is `RuleSet`.
+         * Scope to apply. The only acceptable value is `RuleSet`.
          */
         scope: string;
         /**
-         * The ARN of an SNS topic to notify
+         * ARN of an SNS topic to notify.
          */
         topicArn?: string;
     }
     interface ReceiptRuleWorkmailAction {
         /**
-         * The ARN of the WorkMail organization
+         * ARN of the WorkMail organization.
          */
         organizationArn: string;
         /**
-         * The position of the action in the receipt rule
+         * Position of the action in the receipt rule.
          */
         position: number;
         /**
-         * The ARN of an SNS topic to notify
+         * ARN of an SNS topic to notify.
          */
         topicArn?: string;
     }
@@ -106027,33 +106214,33 @@ export declare namespace ses {
 export declare namespace sesv2 {
     interface AccountVdmAttributesDashboardAttributes {
         /**
-         * Specifies the status of your VDM engagement metrics collection. Valid values: `ENABLED`, `DISABLED`.
+         * Status of your VDM engagement metrics collection. Valid values: `ENABLED`, `DISABLED`.
          */
         engagementMetrics?: string;
     }
     interface AccountVdmAttributesGuardianAttributes {
         /**
-         * Specifies the status of your VDM optimized shared delivery. Valid values: `ENABLED`, `DISABLED`.
+         * Status of your VDM optimized shared delivery. Valid values: `ENABLED`, `DISABLED`.
          */
         optimizedSharedDelivery?: string;
     }
     interface ConfigurationSetDeliveryOptions {
         /**
-         * The maximum amount of time, in seconds, that Amazon SES API v2 will attempt delivery of email. If specified, the value must greater than or equal to 300 seconds (5 minutes) and less than or equal to 50400 seconds (840 minutes).
+         * Maximum amount of time, in seconds, that Amazon SES API v2 will attempt delivery of email. If specified, the value must be greater than or equal to 300 seconds (5 minutes) and less than or equal to 50400 seconds (840 minutes).
          */
         maxDeliverySeconds?: number;
         /**
-         * The name of the dedicated IP pool to associate with the configuration set.
+         * Name of the dedicated IP pool to associate with the configuration set.
          */
         sendingPoolName?: string;
         /**
-         * Specifies whether messages that use the configuration set are required to use Transport Layer Security (TLS). Valid values: `REQUIRE`, `OPTIONAL`.
+         * Whether messages that use the configuration set are required to use TLS. Valid values: `REQUIRE`, `OPTIONAL`.
          */
         tlsPolicy?: string;
     }
     interface ConfigurationSetEventDestinationEventDestination {
         /**
-         * An object that defines an Amazon CloudWatch destination for email events. See `cloudWatchDestination` Block for details.
+         * Object that defines an Amazon CloudWatch destination for email events. See `cloudWatchDestination` Block for details.
          */
         cloudWatchDestination?: outputs.sesv2.ConfigurationSetEventDestinationEventDestinationCloudWatchDestination;
         /**
@@ -106061,11 +106248,11 @@ export declare namespace sesv2 {
          */
         enabled?: boolean;
         /**
-         * An object that defines an Amazon EventBridge destination for email events. You can use Amazon EventBridge to send notifications when certain email events occur. See `eventBridgeDestination` Block for details.
+         * Object that defines an Amazon EventBridge destination for email events. You can use Amazon EventBridge to send notifications when certain email events occur. See `eventBridgeDestination` Block for details.
          */
         eventBridgeDestination?: outputs.sesv2.ConfigurationSetEventDestinationEventDestinationEventBridgeDestination;
         /**
-         * An object that defines an Amazon Kinesis Data Firehose destination for email events. See `kinesisFirehoseDestination` Block for details.
+         * Object that defines an Amazon Kinesis Data Firehose destination for email events. See `kinesisFirehoseDestination` Block for details.
          */
         kinesisFirehoseDestination?: outputs.sesv2.ConfigurationSetEventDestinationEventDestinationKinesisFirehoseDestination;
         /**
@@ -106073,62 +106260,65 @@ export declare namespace sesv2 {
          */
         matchingEventTypes: string[];
         /**
-         * An object that defines an AWS End User Messaging project destination for email events. See `pinpointDestination` Block for details.
+         * Object that defines an AWS End User Messaging project destination for email events. See `pinpointDestination` Block for details.
          */
         pinpointDestination?: outputs.sesv2.ConfigurationSetEventDestinationEventDestinationPinpointDestination;
         /**
-         * An object that defines an Amazon SNS destination for email events. See `snsDestination` Block for details.
+         * Object that defines an Amazon SNS destination for email events. See `snsDestination` Block for details.
          */
         snsDestination?: outputs.sesv2.ConfigurationSetEventDestinationEventDestinationSnsDestination;
     }
     interface ConfigurationSetEventDestinationEventDestinationCloudWatchDestination {
         /**
-         * An array of objects that define the dimensions to use when you send email events to Amazon CloudWatch. See `dimensionConfiguration` Block for details.
+         * Array of objects that define the dimensions to use when you send email events to Amazon CloudWatch. See `dimensionConfiguration` Block for details.
          */
         dimensionConfigurations: outputs.sesv2.ConfigurationSetEventDestinationEventDestinationCloudWatchDestinationDimensionConfiguration[];
     }
     interface ConfigurationSetEventDestinationEventDestinationCloudWatchDestinationDimensionConfiguration {
         /**
-         * The default value of the dimension that is published to Amazon CloudWatch if you don't provide the value of the dimension when you send an email.
+         * Default value of the dimension that is published to Amazon CloudWatch if you don't provide the value of the dimension when you send an email.
          */
         defaultDimensionValue: string;
         /**
-         * The name of an Amazon CloudWatch dimension associated with an email sending metric.
+         * Name of an Amazon CloudWatch dimension associated with an email sending metric.
          */
         dimensionName: string;
         /**
-         * The location where the Amazon SES API v2 finds the value of a dimension to publish to Amazon CloudWatch. Valid values: `MESSAGE_TAG`, `EMAIL_HEADER`, `LINK_TAG`.
+         * Location where the Amazon SES API v2 finds the value of a dimension to publish to Amazon CloudWatch. Valid values: `MESSAGE_TAG`, `EMAIL_HEADER`, `LINK_TAG`.
          */
         dimensionValueSource: string;
     }
     interface ConfigurationSetEventDestinationEventDestinationEventBridgeDestination {
         /**
-         * The Amazon Resource Name (ARN) of the Amazon EventBridge bus to publish email events to. Only the default bus is supported.
+         * ARN of the Amazon EventBridge bus to publish email events to. Only the default bus is supported.
          */
         eventBusArn: string;
     }
     interface ConfigurationSetEventDestinationEventDestinationKinesisFirehoseDestination {
         /**
-         * The Amazon Resource Name (ARN) of the Amazon Kinesis Data Firehose stream that the Amazon SES API v2 sends email events to.
+         * ARN of the Amazon Kinesis Data Firehose stream that the Amazon SES API v2 sends email events to.
          */
         deliveryStreamArn: string;
         /**
-         * The Amazon Resource Name (ARN) of the IAM role that the Amazon SES API v2 uses to send email events to the Amazon Kinesis Data Firehose stream.
+         * ARN of the IAM role that the Amazon SES API v2 uses to send email events to the Amazon Kinesis Data Firehose stream.
          */
         iamRoleArn: string;
     }
     interface ConfigurationSetEventDestinationEventDestinationPinpointDestination {
+        /**
+         * ARN of the AWS End User Messaging project to send email events to.
+         */
         applicationArn: string;
     }
     interface ConfigurationSetEventDestinationEventDestinationSnsDestination {
         /**
-         * The Amazon Resource Name (ARN) of the Amazon SNS topic to publish email events to.
+         * ARN of the Amazon SNS topic to publish email events to.
          */
         topicArn: string;
     }
     interface ConfigurationSetReputationOptions {
         /**
-         * The date and time (in Unix time) when the reputation metrics were last given a fresh start. When your account is given a fresh start, your reputation metrics are calculated starting from the date of the fresh start.
+         * Date and time (in Unix time) when the reputation metrics were last given a fresh start. When your account is given a fresh start, your reputation metrics are calculated starting from the date of the fresh start.
          */
         lastFreshStart: string;
         /**
@@ -106144,39 +106334,39 @@ export declare namespace sesv2 {
     }
     interface ConfigurationSetSuppressionOptions {
         /**
-         * A list that contains the reasons that email addresses are automatically added to the suppression list for your account. Valid values: `BOUNCE`, `COMPLAINT`.
+         * List that contains the reasons that email addresses are automatically added to the suppression list for your account. Valid values: `BOUNCE`, `COMPLAINT`.
          */
         suppressedReasons?: string[];
     }
     interface ConfigurationSetTrackingOptions {
         /**
-         * The domain to use for tracking open and click events.
+         * Domain to use for tracking open and click events.
          */
         customRedirectDomain: string;
         /**
-         * The https policy to use for tracking open and click events. Valid values are `REQUIRE`, `REQUIRE_OPEN_ONLY` or `OPTIONAL`.
+         * HTTPS policy to use for tracking open and click events. Valid values are `REQUIRE`, `REQUIRE_OPEN_ONLY` or `OPTIONAL`.
          */
         httpsPolicy?: string;
     }
     interface ConfigurationSetVdmOptions {
         /**
-         * Specifies additional settings for your VDM configuration as applicable to the Dashboard. See `dashboardOptions` Block for details.
+         * Additional settings for your VDM configuration as applicable to the Dashboard. See `dashboardOptions` Block for details.
          */
         dashboardOptions?: outputs.sesv2.ConfigurationSetVdmOptionsDashboardOptions;
         /**
-         * Specifies additional settings for your VDM configuration as applicable to the Guardian. See `guardianOptions` Block for details.
+         * Additional settings for your VDM configuration as applicable to the Guardian. See `guardianOptions` Block for details.
          */
         guardianOptions?: outputs.sesv2.ConfigurationSetVdmOptionsGuardianOptions;
     }
     interface ConfigurationSetVdmOptionsDashboardOptions {
         /**
-         * Specifies the status of your VDM engagement metrics collection. Valid values: `ENABLED`, `DISABLED`.
+         * Status of your VDM engagement metrics collection. Valid values: `ENABLED`, `DISABLED`.
          */
         engagementMetrics?: string;
     }
     interface ConfigurationSetVdmOptionsGuardianOptions {
         /**
-         * Specifies the status of your VDM optimized shared delivery. Valid values: `ENABLED`, `DISABLED`.
+         * Status of your VDM optimized shared delivery. Valid values: `ENABLED`, `DISABLED`.
          */
         optimizedSharedDelivery?: string;
     }
@@ -106202,33 +106392,33 @@ export declare namespace sesv2 {
     }
     interface EmailIdentityDkimSigningAttributes {
         /**
-         * [Easy DKIM] The key length of the DKIM key pair in use.
+         * [Easy DKIM] Key length of the DKIM key pair in use.
          */
         currentSigningKeyLength: string;
         /**
-         * [Bring Your Own DKIM] A private key that's used to generate a DKIM signature. The private key must use 1024 or 2048-bit RSA encryption, and must be encoded using base64 encoding.
+         * [Bring Your Own DKIM] Private key used to generate a DKIM signature. The private key must use 1024 or 2048-bit RSA encryption, and must be encoded using base64 encoding.
          *
          * > **NOTE:** You have to delete the first and last lines ('-----BEGIN PRIVATE KEY-----' and '-----END PRIVATE KEY-----', respectively) of the generated private key. Additionally, you have to remove the line breaks in the generated private key. The resulting value is a string of characters with no spaces or line breaks.
          */
         domainSigningPrivateKey?: string;
         /**
-         * [Bring Your Own DKIM] A string that's used to identify a public key in the DNS configuration for a domain.
+         * [Bring Your Own DKIM] String used to identify a public key in the DNS configuration for a domain.
          */
         domainSigningSelector?: string;
         /**
-         * [Easy DKIM] The last time a key pair was generated for this identity.
+         * [Easy DKIM] Last time a key pair was generated for this identity.
          */
         lastKeyGenerationTimestamp: string;
         /**
-         * [Easy DKIM] The key length of the future DKIM key pair to be generated. This can be changed at most once per day. Valid values: `RSA_1024_BIT`, `RSA_2048_BIT`.
+         * [Easy DKIM] Key length of the future DKIM key pair to be generated. This can be changed at most once per day. Valid values: `RSA_1024_BIT`, `RSA_2048_BIT`.
          */
         nextSigningKeyLength: string;
         /**
-         * A string that indicates how DKIM was configured for the identity. `AWS_SES` indicates that DKIM was configured for the identity by using Easy DKIM. `EXTERNAL` indicates that DKIM was configured for the identity by using Bring Your Own DKIM (BYODKIM).
+         * How DKIM was configured for the identity. `AWS_SES` indicates that DKIM was configured for the identity by using Easy DKIM. `EXTERNAL` indicates that DKIM was configured for the identity by using Bring Your Own DKIM (BYODKIM).
          */
         signingAttributesOrigin: string;
         /**
-         * Describes whether or not Amazon SES has successfully located the DKIM records in the DNS records for the domain. See the [AWS SES API v2 Reference](https://docs.aws.amazon.com/ses/latest/APIReference-V2/API_DkimAttributes.html#SES-Type-DkimAttributes-Status) for supported statuses.
+         * Whether Amazon SES has successfully located the DKIM records in the DNS records for the domain. See the [AWS SES API v2 Reference](https://docs.aws.amazon.com/ses/latest/APIReference-V2/API_DkimAttributes.html#SES-Type-DkimAttributes-Status) for supported statuses.
          */
         status: string;
         /**
@@ -106238,69 +106428,69 @@ export declare namespace sesv2 {
     }
     interface GetConfigurationSetDeliveryOption {
         /**
-         * The maximum amount of time, in seconds, that Amazon SES API v2 will attempt delivery of email. If specified, the value must greater than or equal to 300 seconds (5 minutes) and less than or equal to 50400 seconds (840 minutes).
+         * Maximum amount of time, in seconds, that Amazon SES API v2 attempts delivery of email. If specified, the value must be greater than or equal to 300 seconds (5 minutes) and less than or equal to 50400 seconds (840 minutes).
          */
         maxDeliverySeconds: number;
         /**
-         * The name of the dedicated IP pool to associate with the configuration set.
+         * Name of the dedicated IP pool to associate with the configuration set.
          */
         sendingPoolName: string;
         /**
-         * Specifies whether messages that use the configuration set are required to use Transport Layer Security (TLS).
+         * Whether messages that use the configuration set are required to use TLS.
          */
         tlsPolicy: string;
     }
     interface GetConfigurationSetReputationOption {
         /**
-         * The date and time (in Unix time) when the reputation metrics were last given a fresh start.
+         * Date and time (in Unix time) when the reputation metrics were last given a fresh start.
          */
         lastFreshStart: string;
         /**
-         * Specifies whether tracking of reputation metrics is enabled.
+         * Whether tracking of reputation metrics is enabled.
          */
         reputationMetricsEnabled: boolean;
     }
     interface GetConfigurationSetSendingOption {
         /**
-         * Specifies whether email sending is enabled.
+         * Whether email sending is enabled.
          */
         sendingEnabled: boolean;
     }
     interface GetConfigurationSetSuppressionOption {
         /**
-         * A list that contains the reasons that email addresses are automatically added to the suppression list for your account.
+         * List that contains the reasons that email addresses are automatically added to the suppression list for your account.
          */
         suppressedReasons: string[];
     }
     interface GetConfigurationSetTrackingOption {
         /**
-         * The domain to use for tracking open and click events.
+         * Domain used for tracking open and click events.
          */
         customRedirectDomain: string;
         /**
-         * The https policy to use for tracking open and click events. Valid values are `REQUIRE`, `REQUIRE_OPEN_ONLY` or `OPTIONAL`.
+         * HTTPS policy used for tracking open and click events. Valid values are `REQUIRE`, `REQUIRE_OPEN_ONLY`, or `OPTIONAL`.
          */
         httpsPolicy: string;
     }
     interface GetConfigurationSetVdmOption {
         /**
-         * Specifies additional settings for your VDM configuration as applicable to the Dashboard.
+         * Additional settings for your VDM configuration as applicable to the Dashboard.
          */
         dashboardOptions: outputs.sesv2.GetConfigurationSetVdmOptionDashboardOption[];
         /**
-         * Specifies additional settings for your VDM configuration as applicable to the Guardian.
+         * Additional settings for your VDM configuration as applicable to the Guardian.
          */
         guardianOptions: outputs.sesv2.GetConfigurationSetVdmOptionGuardianOption[];
     }
     interface GetConfigurationSetVdmOptionDashboardOption {
         /**
-         * Specifies the status of your VDM engagement metrics collection.
+         * Status of your VDM engagement metrics collection.
          */
         engagementMetrics: string;
     }
     interface GetConfigurationSetVdmOptionGuardianOption {
         /**
-         * Specifies the status of your VDM optimized shared delivery.
+         * Status of your VDM optimized shared delivery.
          */
         optimizedSharedDelivery: string;
     }
@@ -106310,11 +106500,11 @@ export declare namespace sesv2 {
          */
         ip: string;
         /**
-         * Indicates how complete the dedicated IP warm-up process is. When this value equals `1`, the address has completed the warm-up process and is ready for use.
+         * How complete the dedicated IP warm-up process is. When this value equals `1`, the address has completed the warm-up process and is ready for use.
          */
         warmupPercentage: number;
         /**
-         * The warm-up status of a dedicated IP address. Valid values: `IN_PROGRESS`, `DONE`.
+         * Warm-up status of a dedicated IP address. Valid values: `IN_PROGRESS`, `DONE`.
          */
         warmupStatus: string;
     }
@@ -106323,7 +106513,13 @@ export declare namespace sesv2 {
          * [Easy DKIM] The key length of the DKIM key pair in use.
          */
         currentSigningKeyLength: string;
+        /**
+         * [Bring Your Own DKIM] Private key used to generate DKIM signatures.
+         */
         domainSigningPrivateKey: string;
+        /**
+         * [Bring Your Own DKIM] Selector added to the DNS configuration for the domain.
+         */
         domainSigningSelector: string;
         /**
          * [Easy DKIM] The last time a key pair was generated for this identity.
@@ -106334,11 +106530,11 @@ export declare namespace sesv2 {
          */
         nextSigningKeyLength: string;
         /**
-         * A string that indicates how DKIM was configured for the identity. `AWS_SES` indicates that DKIM was configured for the identity by using Easy DKIM. `EXTERNAL` indicates that DKIM was configured for the identity by using Bring Your Own DKIM (BYODKIM).
+         * String that indicates how DKIM was configured for the identity. `AWS_SES` indicates that DKIM was configured for the identity by using Easy DKIM. `EXTERNAL` indicates that DKIM was configured for the identity by using Bring Your Own DKIM (BYODKIM).
          */
         signingAttributesOrigin: string;
         /**
-         * Describes whether or not Amazon SES has successfully located the DKIM records in the DNS records for the domain. See the [AWS SES API v2 Reference](https://docs.aws.amazon.com/ses/latest/APIReference-V2/API_DkimAttributes.html#SES-Type-DkimAttributes-Status) for supported statuses.
+         * Whether or not Amazon SES has successfully located the DKIM records in the DNS records for the domain. See the [AWS SES API v2 Reference](https://docs.aws.amazon.com/ses/latest/APIReference-V2/API_DkimAttributes.html#SES-Type-DkimAttributes-Status) for supported statuses.
          */
         status: string;
         /**
@@ -106346,6 +106542,34 @@ export declare namespace sesv2 {
          */
         tokens: string[];
     }
+    interface MultiRegionEndpointDetails {
+        /**
+         * Secondary region route configuration. See `routesDetails` Block below.
+         */
+        routesDetails?: outputs.sesv2.MultiRegionEndpointDetailsRoutesDetails;
+    }
+    interface MultiRegionEndpointDetailsRoutesDetails {
+        /**
+         * Name of the secondary AWS region.
+         */
+        region: string;
+    }
+    interface MultiRegionEndpointRoute {
+        /**
+         * Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
+         */
+        region: string;
+    }
+    interface MultiRegionEndpointTimeouts {
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
+         */
+        create?: string;
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
+         */
+        delete?: string;
+    }
 }
 export declare namespace sfn {
     interface ActivityEncryptionConfiguration {
@@ -106364,7 +106588,7 @@ export declare namespace sfn {
     }
     interface AliasRoutingConfiguration {
         /**
-         * The Amazon Resource Name (ARN) of the state machine version.
+         * ARN of the state machine version.
          */
         stateMachineVersionArn: string;
         /**
@@ -106400,7 +106624,7 @@ export declare namespace sfn {
          */
         level?: string;
         /**
-         * Amazon Resource Name (ARN) of a CloudWatch log group. Make sure the State Machine has the correct IAM policies for logging. The ARN must end with `:*`
+         * ARN of a CloudWatch log group. Make sure the State Machine has the correct IAM policies for logging. The ARN must end with `:*`
          */
         logDestination?: string;
     }
@@ -106572,7 +106796,7 @@ export declare namespace signer {
     }
     interface SigningProfileSigningMaterial {
         /**
-         * The Amazon Resource Name (ARN) of the certificates that is used to sign your code.
+         * ARN of the certificates that is used to sign your code.
          */
         certificateArn: string;
     }
@@ -107003,7 +107227,7 @@ export declare namespace ssm {
          */
         parameters?: outputs.ssm.MaintenanceWindowTaskTaskInvocationParametersRunCommandParametersParameter[];
         /**
-         * The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) service role to use to publish Amazon Simple Notification Service (Amazon SNS) notifications for maintenance window Run Command tasks.
+         * ARN of the AWS Identity and Access Management (IAM) service role to use to publish Amazon Simple Notification Service (Amazon SNS) notifications for maintenance window Run Command tasks.
          */
         serviceRoleArn?: string;
         /**
@@ -107023,7 +107247,7 @@ export declare namespace ssm {
     }
     interface MaintenanceWindowTaskTaskInvocationParametersRunCommandParametersNotificationConfig {
         /**
-         * An Amazon Resource Name (ARN) for a Simple Notification Service (SNS) topic. Run Command pushes notifications about command status changes to this topic.
+         * ARN for a Simple Notification Service (SNS) topic. Run Command pushes notifications about command status changes to this topic.
          */
         notificationArn?: string;
         /**
@@ -107208,7 +107432,7 @@ export declare namespace ssmcontacts {
     }
     interface GetPlanStageTargetContactTargetInfo {
         /**
-         * The Amazon Resource Name (ARN) of the contact or escalation plan.
+         * ARN of the contact or escalation plan.
          */
         contactId: string;
         isEssential: boolean;
@@ -107235,7 +107459,7 @@ export declare namespace ssmcontacts {
     }
     interface PlanStageTargetChannelTargetInfo {
         /**
-         * The Amazon Resource Name (ARN) of the contact channel.
+         * The ARN of the contact channel.
          */
         contactChannelId: string;
         /**
@@ -107245,7 +107469,7 @@ export declare namespace ssmcontacts {
     }
     interface PlanStageTargetContactTargetInfo {
         /**
-         * The Amazon Resource Name (ARN) of the contact.
+         * The ARN of the contact.
          */
         contactId?: string;
         /**
@@ -107257,7 +107481,7 @@ export declare namespace ssmcontacts {
 export declare namespace ssmincidents {
     interface GetReplicationSetRegion {
         /**
-         * The ARN of the AWS Key Management Service (AWS KMS) encryption key.
+         * ARN of the KMS encryption key.
          */
         kmsKeyArn: string;
         /**
@@ -107300,7 +107524,7 @@ export declare namespace ssmincidents {
          */
         parameters: outputs.ssmincidents.GetResponsePlanActionSsmAutomationParameter[];
         /**
-         * The Amazon Resource Name (ARN) of the role that the automation document assumes when it runs commands.
+         * The ARN of the role that the automation document assumes when it runs commands.
          */
         roleArn: string;
         /**
@@ -107374,7 +107598,7 @@ export declare namespace ssmincidents {
     }
     interface ReplicationSetRegion {
         /**
-         * The Amazon Resource name (ARN) of the customer managed key. If omitted, AWS manages the AWS KMS keys for you, using an AWS owned key, as indicated by a default value of `DefaultKey`.
+         * ARN of the customer managed key. If omitted, AWS manages the AWS KMS keys for you, using an AWS owned key, as indicated by a default value of `DefaultKey`.
          */
         kmsKeyArn?: string;
         /**
@@ -107417,7 +107641,7 @@ export declare namespace ssmincidents {
          */
         parameters?: outputs.ssmincidents.ResponsePlanActionSsmAutomationParameter[];
         /**
-         * The Amazon Resource Name (ARN) of the role that the automation document assumes when it runs commands.
+         * The ARN of the role that the automation document assumes when it runs commands.
          */
         roleArn: string;
         /**
@@ -107714,7 +107938,7 @@ export declare namespace storagegateway {
     }
     interface GatewayGatewayNetworkInterface {
         /**
-         * The Internet Protocol version 4 (IPv4) address of the interface.
+         * IP version 4 (IPv4) address of the interface.
          */
         ipv4Address: string;
     }
@@ -108641,7 +108865,7 @@ export declare namespace transfer {
          */
         trustedHostKeys?: string[];
         /**
-         * Identifier for the secret (in AWS Secrets Manager) that contains the SFTP user's private key, password, or both. The identifier can be either the Amazon Resource Name (ARN) or the name of the secret.
+         * Identifier for the secret (in AWS Secrets Manager) that contains the SFTP user's private key, password, or both. The identifier can be either the ARN or the name of the secret.
          */
         userSecretId?: string;
     }
@@ -108727,7 +108951,7 @@ export declare namespace transfer {
          */
         vpcEndpointId: string;
         /**
-         * VPC ID of the virtual private cloud in which the SFTP server's endpoint will be hosted. This property can only be used when `endpointType` is set to `VPC`.
+         * VPC ID of the VPC in which the SFTP server's endpoint will be hosted. This property can only be used when `endpointType` is set to `VPC`.
          */
         vpcId?: string;
     }
@@ -109406,7 +109630,7 @@ export declare namespace verifiedpermissions {
          */
         groupConfiguration?: outputs.verifiedpermissions.IdentitySourceConfigurationCognitoUserPoolConfigurationGroupConfiguration;
         /**
-         * The Amazon Resource Name (ARN) of the Amazon Cognito user pool that contains the identities to be authorized.
+         * ARN of the Amazon Cognito user pool that contains the identities to be authorized.
          */
         userPoolArn: string;
     }
@@ -109838,7 +110062,7 @@ export declare namespace vpclattice {
     }
     interface ListenerDefaultActionForwardTargetGroup {
         /**
-         * ID or Amazon Resource Name (ARN) of the target group.
+         * ID or ARN of the target group.
          */
         targetGroupIdentifier?: string;
         /**
@@ -110390,7 +110614,7 @@ export declare namespace waf {
     }
     interface WebAclLoggingConfiguration {
         /**
-         * Amazon Resource Name (ARN) of Kinesis Firehose Delivery Stream
+         * ARN of Kinesis Firehose Delivery Stream
          */
         logDestination: string;
         /**
@@ -110685,7 +110909,7 @@ export declare namespace wafregional {
     }
     interface WebAclLoggingConfiguration {
         /**
-         * Amazon Resource Name (ARN) of Kinesis Firehose Delivery Stream
+         * ARN of Kinesis Firehose Delivery Stream
          */
         logDestination: string;
         /**
@@ -111475,7 +111699,7 @@ export declare namespace wafv2 {
     }
     interface RuleGroupRuleStatementIpSetReferenceStatement {
         /**
-         * The Amazon Resource Name (ARN) of the IP Set that this statement references.
+         * ARN of the IP Set that this statement references.
          */
         arn: string;
         /**
@@ -112054,7 +112278,7 @@ export declare namespace wafv2 {
     }
     interface RuleGroupRuleStatementRateBasedStatementScopeDownStatementIpSetReferenceStatement {
         /**
-         * The Amazon Resource Name (ARN) of the IP Set that this statement references.
+         * ARN of the IP Set that this statement references.
          */
         arn: string;
         /**
@@ -112326,7 +112550,7 @@ export declare namespace wafv2 {
     }
     interface RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexPatternSetReferenceStatement {
         /**
-         * The Amazon Resource Name (ARN) of the Regex Pattern Set that this statement references.
+         * ARN of the Regex Pattern Set that this statement references.
          */
         arn: string;
         /**
@@ -113456,7 +113680,7 @@ export declare namespace wafv2 {
     }
     interface RuleGroupRuleStatementRegexPatternSetReferenceStatement {
         /**
-         * The Amazon Resource Name (ARN) of the Regex Pattern Set that this statement references.
+         * ARN of the Regex Pattern Set that this statement references.
          */
         arn: string;
         /**
@@ -120574,7 +120798,7 @@ export declare namespace workspaces {
     }
     interface DirectoryCertificateBasedAuthProperties {
         /**
-         * The Amazon Resource Name (ARN) of the certificate manager private certificate authority (ACM-PCA) that is used for certificate-based authentication.
+         * ARN of the certificate manager private certificate authority (ACM-PCA) that is used for certificate-based authentication.
          */
         certificateAuthorityArn?: string;
         /**
@@ -120619,6 +120843,10 @@ export declare namespace workspaces {
         switchRunningMode?: boolean;
     }
     interface DirectoryWorkspaceAccessProperties {
+        /**
+         * Configuration for accessing WorkSpaces through VPC endpoints instead of the public internet. Defined below.
+         */
+        accessEndpointConfig?: outputs.workspaces.DirectoryWorkspaceAccessPropertiesAccessEndpointConfig;
         /**
          * Indicates whether users can use Android devices to access their WorkSpaces.
          */
@@ -120652,6 +120880,26 @@ export declare namespace workspaces {
          */
         deviceTypeZeroclient?: string;
     }
+    interface DirectoryWorkspaceAccessPropertiesAccessEndpointConfig {
+        /**
+         * Set of access endpoints used to control the network paths that users use to access their WorkSpaces. Defined below.
+         */
+        accessEndpoints: outputs.workspaces.DirectoryWorkspaceAccessPropertiesAccessEndpointConfigAccessEndpoint[];
+        /**
+         * List of protocols that fall back to the public internet when streaming over a VPC endpoint is unavailable. Valid value is `PCOIP`.
+         */
+        internetFallbackProtocols?: string[];
+    }
+    interface DirectoryWorkspaceAccessPropertiesAccessEndpointConfigAccessEndpoint {
+        /**
+         * Type of access endpoint. Valid value is `STREAMING_WSP`.
+         */
+        accessEndpointType: string;
+        /**
+         * Identifier of the VPC endpoint that the access endpoint uses.
+         */
+        vpcEndpointId: string;
+    }
     interface DirectoryWorkspaceCreationProperties {
         /**
          * The identifier of your custom security group. Should relate to the same VPC, where workspaces reside in.