@pulumi/aws 7.9.0-alpha.1760444549 → 7.9.0-alpha.1761090036

package/types/output.d.ts

@@ -1138,6 +1138,20 @@ export declare namespace amp {
          */
         update?: string;
     }
+    interface ResourcePolicyTimeouts {
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
+         */
+        create?: string;
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
+         */
+        delete?: string;
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
+         */
+        update?: string;
+    }
     interface ScraperDestination {
         /**
          * Configuration block for an Amazon Managed Prometheus workspace destination. See `amp`.
@@ -12958,6 +12972,793 @@ export declare namespace bedrock {
          */
         name: string;
     }
+    interface AgentcoreAgentRuntimeAgentRuntimeArtifact {
+        /**
+         * Container configuration block. See `containerConfiguration` below.
+         */
+        containerConfiguration?: outputs.bedrock.AgentcoreAgentRuntimeAgentRuntimeArtifactContainerConfiguration;
+    }
+    interface AgentcoreAgentRuntimeAgentRuntimeArtifactContainerConfiguration {
+        /**
+         * URI of the container image in Amazon ECR.
+         */
+        containerUri: string;
+    }
+    interface AgentcoreAgentRuntimeAuthorizerConfiguration {
+        /**
+         * JWT-based authorization configuration block. See `customJwtAuthorizer` below.
+         */
+        customJwtAuthorizer?: outputs.bedrock.AgentcoreAgentRuntimeAuthorizerConfigurationCustomJwtAuthorizer;
+    }
+    interface AgentcoreAgentRuntimeAuthorizerConfigurationCustomJwtAuthorizer {
+        /**
+         * Set of allowed audience values for JWT token validation.
+         */
+        allowedAudiences?: string[];
+        /**
+         * Set of allowed client IDs for JWT token validation.
+         */
+        allowedClients?: string[];
+        /**
+         * URL used to fetch OpenID Connect configuration or authorization server metadata. Must end with `.well-known/openid-configuration`.
+         */
+        discoveryUrl: string;
+    }
+    interface AgentcoreAgentRuntimeEndpointTimeouts {
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
+         */
+        create?: string;
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
+         */
+        delete?: string;
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
+         */
+        update?: string;
+    }
+    interface AgentcoreAgentRuntimeLifecycleConfiguration {
+        /**
+         * Timeout in seconds for idle runtime sessions.
+         */
+        idleRuntimeSessionTimeout: number;
+        /**
+         * Maximum lifetime for the instance in seconds.
+         */
+        maxLifetime: number;
+    }
+    interface AgentcoreAgentRuntimeNetworkConfiguration {
+        /**
+         * Network mode for the agent runtime. Valid values: `PUBLIC`, `VPC`.
+         */
+        networkMode: string;
+        /**
+         * Network mode configuration. See `networkModeConfig` below.
+         */
+        networkModeConfig?: outputs.bedrock.AgentcoreAgentRuntimeNetworkConfigurationNetworkModeConfig;
+    }
+    interface AgentcoreAgentRuntimeNetworkConfigurationNetworkModeConfig {
+        /**
+         * Security groups associated with the VPC configuration.
+         */
+        securityGroups: string[];
+        /**
+         * Subnets associated with the VPC configuration.
+         */
+        subnets: string[];
+    }
+    interface AgentcoreAgentRuntimeProtocolConfiguration {
+        /**
+         * Server protocol for the agent runtime. Valid values: `HTTP`, `MCP`, `A2A`.
+         */
+        serverProtocol?: string;
+    }
+    interface AgentcoreAgentRuntimeRequestHeaderConfiguration {
+        /**
+         * A list of HTTP request headers that are allowed to be passed through to the runtime.
+         */
+        requestHeaderAllowlists?: string[];
+    }
+    interface AgentcoreAgentRuntimeTimeouts {
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
+         */
+        create?: string;
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
+         */
+        delete?: string;
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
+         */
+        update?: string;
+    }
+    interface AgentcoreAgentRuntimeWorkloadIdentityDetail {
+        /**
+         * ARN of the workload identity.
+         */
+        workloadIdentityArn: string;
+    }
+    interface AgentcoreApiKeyCredentialProviderApiKeySecretArn {
+        /**
+         * ARN of the secret in AWS Secrets Manager.
+         */
+        secretArn: string;
+    }
+    interface AgentcoreBrowserNetworkConfiguration {
+        /**
+         * Network mode for the browser. Valid values: `PUBLIC`, `SANDBOX`.
+         */
+        networkMode: string;
+        networkModeConfig?: outputs.bedrock.AgentcoreBrowserNetworkConfigurationNetworkModeConfig;
+    }
+    interface AgentcoreBrowserNetworkConfigurationNetworkModeConfig {
+        securityGroups: string[];
+        subnets: string[];
+    }
+    interface AgentcoreBrowserRecording {
+        /**
+         * Whether to enable recording for browser sessions. Defaults to `false`.
+         */
+        enabled?: boolean;
+        /**
+         * S3 location where browser session recordings are stored. See `s3Location` below.
+         */
+        s3Location?: outputs.bedrock.AgentcoreBrowserRecordingS3Location;
+    }
+    interface AgentcoreBrowserRecordingS3Location {
+        /**
+         * Name of the S3 bucket where recordings are stored.
+         */
+        bucket: string;
+        /**
+         * S3 key prefix for recording files.
+         */
+        prefix: string;
+    }
+    interface AgentcoreBrowserTimeouts {
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
+         */
+        create?: string;
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
+         */
+        delete?: string;
+    }
+    interface AgentcoreCodeInterpreterNetworkConfiguration {
+        /**
+         * Network mode for the code interpreter. Valid values: `PUBLIC`, `SANDBOX`, `VPC`.
+         */
+        networkMode: string;
+        /**
+         * VPC configuration. See `vpcConfig` below.
+         */
+        vpcConfig?: outputs.bedrock.AgentcoreCodeInterpreterNetworkConfigurationVpcConfig;
+    }
+    interface AgentcoreCodeInterpreterNetworkConfigurationVpcConfig {
+        /**
+         * Security groups associated with the VPC configuration.
+         */
+        securityGroups: string[];
+        /**
+         * Subnets associated with the VPC configuration.
+         */
+        subnets: string[];
+    }
+    interface AgentcoreCodeInterpreterTimeouts {
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
+         */
+        create?: string;
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
+         */
+        delete?: string;
+    }
+    interface AgentcoreGatewayAuthorizerConfiguration {
+        /**
+         * JWT-based authorization configuration block. See `customJwtAuthorizer` below.
+         */
+        customJwtAuthorizer?: outputs.bedrock.AgentcoreGatewayAuthorizerConfigurationCustomJwtAuthorizer;
+    }
+    interface AgentcoreGatewayAuthorizerConfigurationCustomJwtAuthorizer {
+        /**
+         * Set of allowed audience values for JWT token validation.
+         */
+        allowedAudiences?: string[];
+        /**
+         * Set of allowed client IDs for JWT token validation.
+         */
+        allowedClients?: string[];
+        /**
+         * URL used to fetch OpenID Connect configuration or authorization server metadata. Must end with `.well-known/openid-configuration`.
+         */
+        discoveryUrl: string;
+    }
+    interface AgentcoreGatewayProtocolConfiguration {
+        /**
+         * Model Context Protocol (MCP) configuration block. See `mcp` below.
+         */
+        mcp?: outputs.bedrock.AgentcoreGatewayProtocolConfigurationMcp;
+    }
+    interface AgentcoreGatewayProtocolConfigurationMcp {
+        /**
+         * Instructions for the MCP protocol configuration.
+         */
+        instructions?: string;
+        /**
+         * Search type for MCP. Valid values: `SEMANTIC`, `HYBRID`.
+         */
+        searchType?: string;
+        /**
+         * Set of supported MCP protocol versions.
+         */
+        supportedVersions?: string[];
+    }
+    interface AgentcoreGatewayTargetCredentialProviderConfiguration {
+        /**
+         * API key-based authentication configuration. See `apiKey` below.
+         */
+        apiKey?: outputs.bedrock.AgentcoreGatewayTargetCredentialProviderConfigurationApiKey;
+        /**
+         * Use the gateway's IAM role for authentication. This is an empty configuration block.
+         */
+        gatewayIamRole?: outputs.bedrock.AgentcoreGatewayTargetCredentialProviderConfigurationGatewayIamRole;
+        /**
+         * OAuth-based authentication configuration. See `oauth` below.
+         */
+        oauth?: outputs.bedrock.AgentcoreGatewayTargetCredentialProviderConfigurationOauth;
+    }
+    interface AgentcoreGatewayTargetCredentialProviderConfigurationApiKey {
+        /**
+         * Location where the API key credential is provided. Valid values: `HEADER`, `QUERY_PARAMETER`.
+         */
+        credentialLocation?: string;
+        /**
+         * Name of the parameter containing the API key credential.
+         */
+        credentialParameterName?: string;
+        /**
+         * Prefix to add to the API key credential value.
+         */
+        credentialPrefix?: string;
+        /**
+         * ARN of the OIDC provider for API key authentication.
+         */
+        providerArn: string;
+    }
+    interface AgentcoreGatewayTargetCredentialProviderConfigurationGatewayIamRole {
+    }
+    interface AgentcoreGatewayTargetCredentialProviderConfigurationOauth {
+        /**
+         * Map of custom parameters to include in OAuth requests.
+         */
+        customParameters?: {
+            [key: string]: string;
+        };
+        /**
+         * ARN of the OIDC provider for OAuth authentication.
+         */
+        providerArn: string;
+        /**
+         * Set of OAuth scopes to request.
+         */
+        scopes: string[];
+    }
+    interface AgentcoreGatewayTargetTargetConfiguration {
+        /**
+         * Model Context Protocol (MCP) configuration. See `mcp` below.
+         */
+        mcp?: outputs.bedrock.AgentcoreGatewayTargetTargetConfigurationMcp;
+    }
+    interface AgentcoreGatewayTargetTargetConfigurationMcp {
+        /**
+         * Lambda function target configuration. See `lambda` below.
+         */
+        lambda?: outputs.bedrock.AgentcoreGatewayTargetTargetConfigurationMcpLambda;
+        /**
+         * OpenAPI schema-based target configuration. See `apiSchemaConfiguration` below.
+         */
+        openApiSchema?: outputs.bedrock.AgentcoreGatewayTargetTargetConfigurationMcpOpenApiSchema;
+        /**
+         * Smithy model-based target configuration. See `apiSchemaConfiguration` below.
+         */
+        smithyModel?: outputs.bedrock.AgentcoreGatewayTargetTargetConfigurationMcpSmithyModel;
+    }
+    interface AgentcoreGatewayTargetTargetConfigurationMcpLambda {
+        /**
+         * ARN of the Lambda function to invoke.
+         */
+        lambdaArn: string;
+        /**
+         * Schema definition for the tool. See `toolSchema` below.
+         */
+        toolSchema?: outputs.bedrock.AgentcoreGatewayTargetTargetConfigurationMcpLambdaToolSchema;
+    }
+    interface AgentcoreGatewayTargetTargetConfigurationMcpLambdaToolSchema {
+        /**
+         * Inline tool definition. See `inlinePayload` below.
+         */
+        inlinePayloads?: outputs.bedrock.AgentcoreGatewayTargetTargetConfigurationMcpLambdaToolSchemaInlinePayload[];
+        /**
+         * S3-based tool definition. See `s3` below.
+         */
+        s3?: outputs.bedrock.AgentcoreGatewayTargetTargetConfigurationMcpLambdaToolSchemaS3;
+    }
+    interface AgentcoreGatewayTargetTargetConfigurationMcpLambdaToolSchemaInlinePayload {
+        /**
+         * Description of what the tool does.
+         */
+        description: string;
+        /**
+         * Schema for the tool's input. See `schemaDefinition` below.
+         */
+        inputSchema?: outputs.bedrock.AgentcoreGatewayTargetTargetConfigurationMcpLambdaToolSchemaInlinePayloadInputSchema;
+        /**
+         * Name of the tool.
+         */
+        name: string;
+        /**
+         * Schema for the tool's output. See `schemaDefinition` below.
+         */
+        outputSchema?: outputs.bedrock.AgentcoreGatewayTargetTargetConfigurationMcpLambdaToolSchemaInlinePayloadOutputSchema;
+    }
+    interface AgentcoreGatewayTargetTargetConfigurationMcpLambdaToolSchemaInlinePayloadInputSchema {
+        /**
+         * Description of the gateway target.
+         */
+        description?: string;
+        items?: outputs.bedrock.AgentcoreGatewayTargetTargetConfigurationMcpLambdaToolSchemaInlinePayloadInputSchemaItems;
+        properties?: outputs.bedrock.AgentcoreGatewayTargetTargetConfigurationMcpLambdaToolSchemaInlinePayloadInputSchemaProperty[];
+        type: string;
+    }
+    interface AgentcoreGatewayTargetTargetConfigurationMcpLambdaToolSchemaInlinePayloadInputSchemaItems {
+        /**
+         * Description of the array items.
+         */
+        description?: string;
+        /**
+         * Nested items definition for arrays of arrays.
+         */
+        items?: outputs.bedrock.AgentcoreGatewayTargetTargetConfigurationMcpLambdaToolSchemaInlinePayloadInputSchemaItemsItems;
+        /**
+         * Set of property definitions for arrays of objects. See `property` below.
+         */
+        properties?: outputs.bedrock.AgentcoreGatewayTargetTargetConfigurationMcpLambdaToolSchemaInlinePayloadInputSchemaItemsProperty[];
+        /**
+         * Data type of the array items.
+         */
+        type: string;
+    }
+    interface AgentcoreGatewayTargetTargetConfigurationMcpLambdaToolSchemaInlinePayloadInputSchemaItemsItems {
+        /**
+         * Description of the array items.
+         */
+        description?: string;
+        /**
+         * JSON-encoded schema definition for array items. Used for complex nested structures. Cannot be used with `propertiesJson`.
+         */
+        itemsJson?: string;
+        /**
+         * JSON-encoded schema definition for object properties. Used for complex nested structures. Cannot be used with `itemsJson`.
+         */
+        propertiesJson?: string;
+        /**
+         * Data type of the array items.
+         */
+        type: string;
+    }
+    interface AgentcoreGatewayTargetTargetConfigurationMcpLambdaToolSchemaInlinePayloadInputSchemaItemsProperty {
+        /**
+         * Description of the property.
+         */
+        description?: string;
+        /**
+         * JSON-encoded schema definition for array items. Used for complex nested structures. Cannot be used with `propertiesJson`.
+         */
+        itemsJson?: string;
+        /**
+         * Name of the property.
+         */
+        name: string;
+        /**
+         * JSON-encoded schema definition for object properties. Used for complex nested structures. Cannot be used with `itemsJson`.
+         */
+        propertiesJson?: string;
+        /**
+         * Whether this property is required. Defaults to `false`.
+         */
+        required: boolean;
+        /**
+         * Data type of the property.
+         */
+        type: string;
+    }
+    interface AgentcoreGatewayTargetTargetConfigurationMcpLambdaToolSchemaInlinePayloadInputSchemaProperty {
+        /**
+         * Description of the property.
+         */
+        description?: string;
+        /**
+         * Items definition for array properties. See `items` above.
+         */
+        items?: outputs.bedrock.AgentcoreGatewayTargetTargetConfigurationMcpLambdaToolSchemaInlinePayloadInputSchemaPropertyItems;
+        /**
+         * Name of the property.
+         */
+        name: string;
+        /**
+         * Set of nested property definitions for object properties.
+         */
+        properties?: outputs.bedrock.AgentcoreGatewayTargetTargetConfigurationMcpLambdaToolSchemaInlinePayloadInputSchemaPropertyProperty[];
+        /**
+         * Whether this property is required. Defaults to `false`.
+         */
+        required: boolean;
+        /**
+         * Data type of the property.
+         */
+        type: string;
+    }
+    interface AgentcoreGatewayTargetTargetConfigurationMcpLambdaToolSchemaInlinePayloadInputSchemaPropertyItems {
+        /**
+         * Description of the array items.
+         */
+        description?: string;
+        /**
+         * Nested items definition for arrays of arrays.
+         */
+        items?: outputs.bedrock.AgentcoreGatewayTargetTargetConfigurationMcpLambdaToolSchemaInlinePayloadInputSchemaPropertyItemsItems;
+        /**
+         * Set of property definitions for arrays of objects. See `property` below.
+         */
+        properties?: outputs.bedrock.AgentcoreGatewayTargetTargetConfigurationMcpLambdaToolSchemaInlinePayloadInputSchemaPropertyItemsProperty[];
+        /**
+         * Data type of the array items.
+         */
+        type: string;
+    }
+    interface AgentcoreGatewayTargetTargetConfigurationMcpLambdaToolSchemaInlinePayloadInputSchemaPropertyItemsItems {
+        /**
+         * Description of the array items.
+         */
+        description?: string;
+        /**
+         * JSON-encoded schema definition for array items. Used for complex nested structures. Cannot be used with `propertiesJson`.
+         */
+        itemsJson?: string;
+        /**
+         * JSON-encoded schema definition for object properties. Used for complex nested structures. Cannot be used with `itemsJson`.
+         */
+        propertiesJson?: string;
+        /**
+         * Data type of the array items.
+         */
+        type: string;
+    }
+    interface AgentcoreGatewayTargetTargetConfigurationMcpLambdaToolSchemaInlinePayloadInputSchemaPropertyItemsProperty {
+        /**
+         * Description of the property.
+         */
+        description?: string;
+        /**
+         * JSON-encoded schema definition for array items. Used for complex nested structures. Cannot be used with `propertiesJson`.
+         */
+        itemsJson?: string;
+        /**
+         * Name of the property.
+         */
+        name: string;
+        /**
+         * JSON-encoded schema definition for object properties. Used for complex nested structures. Cannot be used with `itemsJson`.
+         */
+        propertiesJson?: string;
+        /**
+         * Whether this property is required. Defaults to `false`.
+         */
+        required: boolean;
+        /**
+         * Data type of the property.
+         */
+        type: string;
+    }
+    interface AgentcoreGatewayTargetTargetConfigurationMcpLambdaToolSchemaInlinePayloadInputSchemaPropertyProperty {
+        /**
+         * Description of the property.
+         */
+        description?: string;
+        /**
+         * JSON-encoded schema definition for array items. Used for complex nested structures. Cannot be used with `propertiesJson`.
+         */
+        itemsJson?: string;
+        /**
+         * Name of the property.
+         */
+        name: string;
+        /**
+         * JSON-encoded schema definition for object properties. Used for complex nested structures. Cannot be used with `itemsJson`.
+         */
+        propertiesJson?: string;
+        /**
+         * Whether this property is required. Defaults to `false`.
+         */
+        required: boolean;
+        /**
+         * Data type of the property.
+         */
+        type: string;
+    }
+    interface AgentcoreGatewayTargetTargetConfigurationMcpLambdaToolSchemaInlinePayloadOutputSchema {
+        /**
+         * Description of the gateway target.
+         */
+        description?: string;
+        items?: outputs.bedrock.AgentcoreGatewayTargetTargetConfigurationMcpLambdaToolSchemaInlinePayloadOutputSchemaItems;
+        properties?: outputs.bedrock.AgentcoreGatewayTargetTargetConfigurationMcpLambdaToolSchemaInlinePayloadOutputSchemaProperty[];
+        type: string;
+    }
+    interface AgentcoreGatewayTargetTargetConfigurationMcpLambdaToolSchemaInlinePayloadOutputSchemaItems {
+        /**
+         * Description of the array items.
+         */
+        description?: string;
+        /**
+         * Nested items definition for arrays of arrays.
+         */
+        items?: outputs.bedrock.AgentcoreGatewayTargetTargetConfigurationMcpLambdaToolSchemaInlinePayloadOutputSchemaItemsItems;
+        /**
+         * Set of property definitions for arrays of objects. See `property` below.
+         */
+        properties?: outputs.bedrock.AgentcoreGatewayTargetTargetConfigurationMcpLambdaToolSchemaInlinePayloadOutputSchemaItemsProperty[];
+        /**
+         * Data type of the array items.
+         */
+        type: string;
+    }
+    interface AgentcoreGatewayTargetTargetConfigurationMcpLambdaToolSchemaInlinePayloadOutputSchemaItemsItems {
+        /**
+         * Description of the array items.
+         */
+        description?: string;
+        /**
+         * JSON-encoded schema definition for array items. Used for complex nested structures. Cannot be used with `propertiesJson`.
+         */
+        itemsJson?: string;
+        /**
+         * JSON-encoded schema definition for object properties. Used for complex nested structures. Cannot be used with `itemsJson`.
+         */
+        propertiesJson?: string;
+        /**
+         * Data type of the array items.
+         */
+        type: string;
+    }
+    interface AgentcoreGatewayTargetTargetConfigurationMcpLambdaToolSchemaInlinePayloadOutputSchemaItemsProperty {
+        /**
+         * Description of the property.
+         */
+        description?: string;
+        /**
+         * JSON-encoded schema definition for array items. Used for complex nested structures. Cannot be used with `propertiesJson`.
+         */
+        itemsJson?: string;
+        /**
+         * Name of the property.
+         */
+        name: string;
+        /**
+         * JSON-encoded schema definition for object properties. Used for complex nested structures. Cannot be used with `itemsJson`.
+         */
+        propertiesJson?: string;
+        /**
+         * Whether this property is required. Defaults to `false`.
+         */
+        required: boolean;
+        /**
+         * Data type of the property.
+         */
+        type: string;
+    }
+    interface AgentcoreGatewayTargetTargetConfigurationMcpLambdaToolSchemaInlinePayloadOutputSchemaProperty {
+        /**
+         * Description of the property.
+         */
+        description?: string;
+        /**
+         * Items definition for array properties. See `items` above.
+         */
+        items?: outputs.bedrock.AgentcoreGatewayTargetTargetConfigurationMcpLambdaToolSchemaInlinePayloadOutputSchemaPropertyItems;
+        /**
+         * Name of the property.
+         */
+        name: string;
+        /**
+         * Set of nested property definitions for object properties.
+         */
+        properties?: outputs.bedrock.AgentcoreGatewayTargetTargetConfigurationMcpLambdaToolSchemaInlinePayloadOutputSchemaPropertyProperty[];
+        /**
+         * Whether this property is required. Defaults to `false`.
+         */
+        required: boolean;
+        /**
+         * Data type of the property.
+         */
+        type: string;
+    }
+    interface AgentcoreGatewayTargetTargetConfigurationMcpLambdaToolSchemaInlinePayloadOutputSchemaPropertyItems {
+        /**
+         * Description of the array items.
+         */
+        description?: string;
+        /**
+         * Nested items definition for arrays of arrays.
+         */
+        items?: outputs.bedrock.AgentcoreGatewayTargetTargetConfigurationMcpLambdaToolSchemaInlinePayloadOutputSchemaPropertyItemsItems;
+        /**
+         * Set of property definitions for arrays of objects. See `property` below.
+         */
+        properties?: outputs.bedrock.AgentcoreGatewayTargetTargetConfigurationMcpLambdaToolSchemaInlinePayloadOutputSchemaPropertyItemsProperty[];
+        /**
+         * Data type of the array items.
+         */
+        type: string;
+    }
+    interface AgentcoreGatewayTargetTargetConfigurationMcpLambdaToolSchemaInlinePayloadOutputSchemaPropertyItemsItems {
+        /**
+         * Description of the array items.
+         */
+        description?: string;
+        /**
+         * JSON-encoded schema definition for array items. Used for complex nested structures. Cannot be used with `propertiesJson`.
+         */
+        itemsJson?: string;
+        /**
+         * JSON-encoded schema definition for object properties. Used for complex nested structures. Cannot be used with `itemsJson`.
+         */
+        propertiesJson?: string;
+        /**
+         * Data type of the array items.
+         */
+        type: string;
+    }
+    interface AgentcoreGatewayTargetTargetConfigurationMcpLambdaToolSchemaInlinePayloadOutputSchemaPropertyItemsProperty {
+        /**
+         * Description of the property.
+         */
+        description?: string;
+        /**
+         * JSON-encoded schema definition for array items. Used for complex nested structures. Cannot be used with `propertiesJson`.
+         */
+        itemsJson?: string;
+        /**
+         * Name of the property.
+         */
+        name: string;
+        /**
+         * JSON-encoded schema definition for object properties. Used for complex nested structures. Cannot be used with `itemsJson`.
+         */
+        propertiesJson?: string;
+        /**
+         * Whether this property is required. Defaults to `false`.
+         */
+        required: boolean;
+        /**
+         * Data type of the property.
+         */
+        type: string;
+    }
+    interface AgentcoreGatewayTargetTargetConfigurationMcpLambdaToolSchemaInlinePayloadOutputSchemaPropertyProperty {
+        /**
+         * Description of the property.
+         */
+        description?: string;
+        /**
+         * JSON-encoded schema definition for array items. Used for complex nested structures. Cannot be used with `propertiesJson`.
+         */
+        itemsJson?: string;
+        /**
+         * Name of the property.
+         */
+        name: string;
+        /**
+         * JSON-encoded schema definition for object properties. Used for complex nested structures. Cannot be used with `itemsJson`.
+         */
+        propertiesJson?: string;
+        /**
+         * Whether this property is required. Defaults to `false`.
+         */
+        required: boolean;
+        /**
+         * Data type of the property.
+         */
+        type: string;
+    }
+    interface AgentcoreGatewayTargetTargetConfigurationMcpLambdaToolSchemaS3 {
+        /**
+         * Account ID of the S3 bucket owner.
+         */
+        bucketOwnerAccountId?: string;
+        /**
+         * S3 URI where the schema is stored.
+         */
+        uri?: string;
+    }
+    interface AgentcoreGatewayTargetTargetConfigurationMcpOpenApiSchema {
+        inlinePayload?: outputs.bedrock.AgentcoreGatewayTargetTargetConfigurationMcpOpenApiSchemaInlinePayload;
+        s3?: outputs.bedrock.AgentcoreGatewayTargetTargetConfigurationMcpOpenApiSchemaS3;
+    }
+    interface AgentcoreGatewayTargetTargetConfigurationMcpOpenApiSchemaInlinePayload {
+        /**
+         * The inline schema payload content.
+         */
+        payload: string;
+    }
+    interface AgentcoreGatewayTargetTargetConfigurationMcpOpenApiSchemaS3 {
+        /**
+         * Account ID of the S3 bucket owner.
+         */
+        bucketOwnerAccountId?: string;
+        /**
+         * S3 URI where the schema is stored.
+         */
+        uri?: string;
+    }
+    interface AgentcoreGatewayTargetTargetConfigurationMcpSmithyModel {
+        inlinePayload?: outputs.bedrock.AgentcoreGatewayTargetTargetConfigurationMcpSmithyModelInlinePayload;
+        s3?: outputs.bedrock.AgentcoreGatewayTargetTargetConfigurationMcpSmithyModelS3;
+    }
+    interface AgentcoreGatewayTargetTargetConfigurationMcpSmithyModelInlinePayload {
+        /**
+         * The inline schema payload content.
+         */
+        payload: string;
+    }
+    interface AgentcoreGatewayTargetTargetConfigurationMcpSmithyModelS3 {
+        /**
+         * Account ID of the S3 bucket owner.
+         */
+        bucketOwnerAccountId?: string;
+        /**
+         * S3 URI where the schema is stored.
+         */
+        uri?: string;
+    }
+    interface AgentcoreGatewayTargetTimeouts {
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
+         */
+        create?: string;
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
+         */
+        delete?: string;
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
+         */
+        update?: string;
+    }
+    interface AgentcoreGatewayTimeouts {
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
+         */
+        create?: string;
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
+         */
+        delete?: string;
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
+         */
+        update?: string;
+    }
+    interface AgentcoreGatewayWorkloadIdentityDetail {
+        /**
+         * ARN of the workload identity.
+         */
+        workloadIdentityArn: string;
+    }
     interface CustomModelOutputDataConfig {
         /**
          * The S3 URI where the output data is stored.
@@ -16980,7 +17781,9 @@ export declare namespace cloudwatch {
          */
         accountId?: string;
         /**
-         * The math expression to be performed on the returned data, if this object is performing a math expression. This expression can use the id of the other metrics to refer to those metrics, and can also use the id of other expressions to use the result of those expressions. For more information about metric math expressions, see Metric Math Syntax and Functions in the [Amazon CloudWatch User Guide](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/using-metric-math.html#metric-math-syntax).
+         * A Metrics Insights query or a metric math expression to be evaluated on the returned data.
+         * For details about Metrics Insights queries, see [Metrics Insights query components and syntax](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/cloudwatch-metrics-insights-querylanguage) in the AWS documentation.
+         * For details about metric math expressions, see [Metric Math Syntax and Functions](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/using-metric-math.html#metric-math-syntax) in the AWS documentation.
          */
         expression?: string;
         /**
@@ -30302,6 +31105,31 @@ export declare namespace ec2 {
          */
         values: string[];
     }
+    interface GetVpnConnectionFilter {
+        /**
+         * Name of the filter field. Valid values can be found in the [EC2 `DescribeVPNConnections` API Reference](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeVpnConnections.html).
+         */
+        name: string;
+        /**
+         * Set of values that are accepted for the given filter field. Results will be selected if any given value matches.
+         */
+        values: string[];
+    }
+    interface GetVpnConnectionRoute {
+        destinationCidrBlock: string;
+        source: string;
+        /**
+         * Current state of the VPN connection.
+         */
+        state: string;
+    }
+    interface GetVpnConnectionVgwTelemetry {
+        acceptedRouteCount: number;
+        lastStatusChange: string;
+        outsideIpAddress: string;
+        status: string;
+        statusMessage: string;
+    }
     interface GetVpnGatewayFilter {
         /**
          * Name of the field to filter by, as defined by
@@ -30679,7 +31507,7 @@ export declare namespace ec2 {
          */
         iops: number;
         /**
-         * The ARN of the AWS Key Management Service (AWS KMS) customer master key (CMK) to use when creating the encrypted volume.
+         * Identifier (key ID, key alias, key ARN, or alias ARN) of the customer managed KMS key to use for EBS encryption.
          * `encrypted` must be set to `true` when this is set.
          */
         kmsKeyId?: string;
@@ -37995,6 +38823,16 @@ export declare namespace emrserverless {
          */
         subnetIds?: string[];
     }
+    interface ApplicationSchedulerConfiguration {
+        /**
+         * Maximum concurrent job runs on this application. Valid range is `1` to `1000`. Defaults to `15`.
+         */
+        maxConcurrentRuns: number;
+        /**
+         * Maximum duration in minutes for the job in QUEUED state. Valid range is from `15` to `720`. Defaults to `360`.
+         */
+        queueTimeoutMinutes: number;
+    }
 }
 export declare namespace evidently {
     interface FeatureEvaluationRule {
@@ -49490,194 +50328,232 @@ export declare namespace lakeformation {
          */
         wildcard?: boolean;
     }
-    interface ResourceLfTagDatabase {
-        /**
-         * Identifier for the Data Catalog. By default, it is the account ID of the caller.
-         */
-        catalogId?: string;
-        /**
-         * Name of the database resource. Unique to the Data Catalog.
-         *
-         * The following argument is optional:
-         */
-        name: string;
-    }
-    interface ResourceLfTagLfTag {
-        /**
-         * Identifier for the Data Catalog. By default, it is the account ID of the caller.
-         */
-        catalogId: string;
-        /**
-         * Key name for an existing LF-tag.
-         */
-        key: string;
-        /**
-         * Value from the possible values for the LF-tag.
-         *
-         * The following argument is optional:
-         */
-        value: string;
-    }
-    interface ResourceLfTagTable {
-        /**
-         * Identifier for the Data Catalog. By default, it is the account ID of the caller.
-         */
-        catalogId?: string;
-        /**
-         * Name of the database for the table. Unique to a Data Catalog.
-         */
-        databaseName: string;
-        /**
-         * Name of the table.
-         */
-        name?: string;
-        /**
-         * Whether to use a wildcard representing every table under a database. Defaults to `false`.
-         *
-         * The following arguments are optional:
-         */
-        wildcard?: boolean;
-    }
-    interface ResourceLfTagTableWithColumns {
-        /**
-         * Identifier for the Data Catalog. By default, it is the account ID of the caller.
-         */
-        catalogId?: string;
-        /**
-         * Set of column names for the table.
-         */
-        columnNames?: string[];
-        /**
-         * Option to add column wildcard. See Column Wildcard for more details.
-         */
-        columnWildcard?: outputs.lakeformation.ResourceLfTagTableWithColumnsColumnWildcard;
-        /**
-         * Name of the database for the table with columns resource. Unique to the Data Catalog.
-         */
-        databaseName: string;
-        /**
-         * Name of the table resource.
-         *
-         * The following arguments are optional:
-         */
-        name: string;
-    }
-    interface ResourceLfTagTableWithColumnsColumnWildcard {
-        excludedColumnNames?: string[];
-    }
-    interface ResourceLfTagTimeouts {
-        /**
-         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
-         */
-        create?: string;
+    interface ResourceLfTagDatabase {
+        /**
+         * Identifier for the Data Catalog. By default, it is the account ID of the caller.
+         */
+        catalogId?: string;
+        /**
+         * Name of the database resource. Unique to the Data Catalog.
+         *
+         * The following argument is optional:
+         */
+        name: string;
+    }
+    interface ResourceLfTagLfTag {
+        /**
+         * Identifier for the Data Catalog. By default, it is the account ID of the caller.
+         */
+        catalogId: string;
+        /**
+         * Key name for an existing LF-tag.
+         */
+        key: string;
+        /**
+         * Value from the possible values for the LF-tag.
+         *
+         * The following argument is optional:
+         */
+        value: string;
+    }
+    interface ResourceLfTagTable {
+        /**
+         * Identifier for the Data Catalog. By default, it is the account ID of the caller.
+         */
+        catalogId?: string;
+        /**
+         * Name of the database for the table. Unique to a Data Catalog.
+         */
+        databaseName: string;
+        /**
+         * Name of the table.
+         */
+        name?: string;
+        /**
+         * Whether to use a wildcard representing every table under a database. Defaults to `false`.
+         *
+         * The following arguments are optional:
+         */
+        wildcard?: boolean;
+    }
+    interface ResourceLfTagTableWithColumns {
+        /**
+         * Identifier for the Data Catalog. By default, it is the account ID of the caller.
+         */
+        catalogId?: string;
+        /**
+         * Set of column names for the table.
+         */
+        columnNames?: string[];
+        /**
+         * Option to add column wildcard. See Column Wildcard for more details.
+         */
+        columnWildcard?: outputs.lakeformation.ResourceLfTagTableWithColumnsColumnWildcard;
+        /**
+         * Name of the database for the table with columns resource. Unique to the Data Catalog.
+         */
+        databaseName: string;
+        /**
+         * Name of the table resource.
+         *
+         * The following arguments are optional:
+         */
+        name: string;
+    }
+    interface ResourceLfTagTableWithColumnsColumnWildcard {
+        excludedColumnNames?: string[];
+    }
+    interface ResourceLfTagTimeouts {
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
+         */
+        create?: string;
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
+         */
+        delete?: string;
+    }
+    interface ResourceLfTagsDatabase {
+        /**
+         * Identifier for the Data Catalog. By default, it is the account ID of the caller.
+         */
+        catalogId: string;
+        /**
+         * Name of the database resource. Unique to the Data Catalog.
+         *
+         * The following argument is optional:
+         */
+        name: string;
+    }
+    interface ResourceLfTagsLfTag {
+        /**
+         * Identifier for the Data Catalog. By default, it is the account ID of the caller.
+         */
+        catalogId: string;
+        /**
+         * Key name for an existing LF-tag.
+         */
+        key: string;
+        /**
+         * Value from the possible values for the LF-tag.
+         *
+         * The following argument is optional:
+         */
+        value: string;
+    }
+    interface ResourceLfTagsTable {
+        /**
+         * Identifier for the Data Catalog. By default, it is the account ID of the caller.
+         */
+        catalogId: string;
+        /**
+         * Name of the database for the table. Unique to a Data Catalog.
+         */
+        databaseName: string;
+        /**
+         * Name of the table.
+         */
+        name: string;
+        /**
+         * Whether to use a wildcard representing every table under a database. Defaults to `false`.
+         *
+         * The following arguments are optional:
+         */
+        wildcard?: boolean;
+    }
+    interface ResourceLfTagsTableWithColumns {
+        /**
+         * Identifier for the Data Catalog. By default, it is the account ID of the caller.
+         */
+        catalogId: string;
+        /**
+         * Set of column names for the table.
+         */
+        columnNames?: string[];
+        /**
+         * Name of the database for the table with columns resource. Unique to the Data Catalog.
+         */
+        databaseName: string;
+        /**
+         * Set of column names for the table to exclude. If `excludedColumnNames` is included, `wildcard` must be set to `true` to avoid the provider reporting a difference.
+         */
+        excludedColumnNames?: string[];
+        /**
+         * Name of the table resource.
+         */
+        name: string;
+        /**
+         * Whether to use a column wildcard. If `excludedColumnNames` is included, `wildcard` must be set to `true` to avoid the provider reporting a difference.
+         *
+         * The following arguments are optional:
+         */
+        wildcard?: boolean;
+    }
+}
+export declare namespace lambda {
+    interface AliasRoutingConfig {
         /**
-         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
+         * Map that defines the proportion of events that should be sent to different versions of a Lambda function.
          */
-        delete?: string;
+        additionalVersionWeights?: {
+            [key: string]: number;
+        };
     }
-    interface ResourceLfTagsDatabase {
-        /**
-         * Identifier for the Data Catalog. By default, it is the account ID of the caller.
-         */
-        catalogId: string;
+    interface CodeSigningConfigAllowedPublishers {
         /**
-         * Name of the database resource. Unique to the Data Catalog.
-         *
-         * The following argument is optional:
+         * Set of ARNs for each of the signing profiles. A signing profile defines a trusted user who can sign a code package. Maximum of 20 signing profiles.
          */
-        name: string;
+        signingProfileVersionArns: string[];
     }
-    interface ResourceLfTagsLfTag {
-        /**
-         * Identifier for the Data Catalog. By default, it is the account ID of the caller.
-         */
-        catalogId: string;
-        /**
-         * Key name for an existing LF-tag.
-         */
-        key: string;
+    interface CodeSigningConfigPolicies {
         /**
-         * Value from the possible values for the LF-tag.
-         *
-         * The following argument is optional:
+         * Code signing configuration policy for deployment validation failure. If you set the policy to `Enforce`, Lambda blocks the deployment request if code-signing validation checks fail. If you set the policy to `Warn`, Lambda allows the deployment and creates a CloudWatch log. Valid values: `Warn`, `Enforce`. Default value: `Warn`.
          */
-        value: string;
+        untrustedArtifactOnDeployment: string;
     }
-    interface ResourceLfTagsTable {
-        /**
-         * Identifier for the Data Catalog. By default, it is the account ID of the caller.
-         */
-        catalogId: string;
-        /**
-         * Name of the database for the table. Unique to a Data Catalog.
-         */
-        databaseName: string;
+    interface EventSourceMappingAmazonManagedKafkaEventSourceConfig {
         /**
-         * Name of the table.
+         * Kafka consumer group ID between 1 and 200 characters for use when creating this event source mapping. If one is not specified, this value will be automatically generated. See [AmazonManagedKafkaEventSourceConfig Syntax](https://docs.aws.amazon.com/lambda/latest/dg/API_AmazonManagedKafkaEventSourceConfig.html).
          */
-        name: string;
+        consumerGroupId: string;
         /**
-         * Whether to use a wildcard representing every table under a database. Defaults to `false`.
-         *
-         * The following arguments are optional:
+         * Block for a Kafka schema registry setting. See below.
          */
-        wildcard?: boolean;
+        schemaRegistryConfig?: outputs.lambda.EventSourceMappingAmazonManagedKafkaEventSourceConfigSchemaRegistryConfig;
     }
-    interface ResourceLfTagsTableWithColumns {
-        /**
-         * Identifier for the Data Catalog. By default, it is the account ID of the caller.
-         */
-        catalogId: string;
-        /**
-         * Set of column names for the table.
-         */
-        columnNames?: string[];
+    interface EventSourceMappingAmazonManagedKafkaEventSourceConfigSchemaRegistryConfig {
         /**
-         * Name of the database for the table with columns resource. Unique to the Data Catalog.
+         * Configuration block for authentication Lambda uses to access the schema registry.
          */
-        databaseName: string;
+        accessConfigs?: outputs.lambda.EventSourceMappingAmazonManagedKafkaEventSourceConfigSchemaRegistryConfigAccessConfig[];
         /**
-         * Set of column names for the table to exclude. If `excludedColumnNames` is included, `wildcard` must be set to `true` to avoid the provider reporting a difference.
+         * Record format that Lambda delivers to the function after schema validation. Valid values: `JSON`, `SOURCE`.
          */
-        excludedColumnNames?: string[];
+        eventRecordFormat?: string;
         /**
-         * Name of the table resource.
+         * URI of the schema registry. For AWS Glue schema registries, use the ARN of the registry. For Confluent schema registries, use the registry URL.
          */
-        name: string;
+        schemaRegistryUri?: string;
         /**
-         * Whether to use a column wildcard. If `excludedColumnNames` is included, `wildcard` must be set to `true` to avoid the provider reporting a difference.
-         *
-         * The following arguments are optional:
+         * Repeatable block that defines schema validation settings. These specify the message attributes that Lambda should validate and filter using the schema registry.
          */
-        wildcard?: boolean;
+        schemaValidationConfigs?: outputs.lambda.EventSourceMappingAmazonManagedKafkaEventSourceConfigSchemaRegistryConfigSchemaValidationConfig[];
     }
-}
-export declare namespace lambda {
-    interface AliasRoutingConfig {
+    interface EventSourceMappingAmazonManagedKafkaEventSourceConfigSchemaRegistryConfigAccessConfig {
         /**
-         * Map that defines the proportion of events that should be sent to different versions of a Lambda function.
+         * Authentication type Lambda uses to access the schema registry.
          */
-        additionalVersionWeights?: {
-            [key: string]: number;
-        };
-    }
-    interface CodeSigningConfigAllowedPublishers {
-        /**
-         * Set of ARNs for each of the signing profiles. A signing profile defines a trusted user who can sign a code package. Maximum of 20 signing profiles.
-         */
-        signingProfileVersionArns: string[];
-    }
-    interface CodeSigningConfigPolicies {
+        type?: string;
         /**
-         * Code signing configuration policy for deployment validation failure. If you set the policy to `Enforce`, Lambda blocks the deployment request if code-signing validation checks fail. If you set the policy to `Warn`, Lambda allows the deployment and creates a CloudWatch log. Valid values: `Warn`, `Enforce`. Default value: `Warn`.
+         * URI of the secret (Secrets Manager secret ARN) used to authenticate with the schema registry.
          */
-        untrustedArtifactOnDeployment: string;
+        uri?: string;
     }
-    interface EventSourceMappingAmazonManagedKafkaEventSourceConfig {
+    interface EventSourceMappingAmazonManagedKafkaEventSourceConfigSchemaRegistryConfigSchemaValidationConfig {
         /**
-         * Kafka consumer group ID between 1 and 200 characters for use when creating this event source mapping. If one is not specified, this value will be automatically generated. See [AmazonManagedKafkaEventSourceConfig Syntax](https://docs.aws.amazon.com/lambda/latest/dg/API_AmazonManagedKafkaEventSourceConfig.html).
+         * Message attribute to validate. Valid values: `KEY`, `VALUE`.
          */
-        consumerGroupId: string;
+        attribute?: string;
     }
     interface EventSourceMappingDestinationConfig {
         /**
@@ -49752,6 +50628,44 @@ export declare namespace lambda {
          * Kafka consumer group ID between 1 and 200 characters for use when creating this event source mapping. If one is not specified, this value will be automatically generated. See [SelfManagedKafkaEventSourceConfig Syntax](https://docs.aws.amazon.com/lambda/latest/dg/API_SelfManagedKafkaEventSourceConfig.html).
          */
         consumerGroupId: string;
+        /**
+         * Block for a Kafka schema registry setting. See below.
+         */
+        schemaRegistryConfig?: outputs.lambda.EventSourceMappingSelfManagedKafkaEventSourceConfigSchemaRegistryConfig;
+    }
+    interface EventSourceMappingSelfManagedKafkaEventSourceConfigSchemaRegistryConfig {
+        /**
+         * Configuration block for authentication Lambda uses to access the schema registry.
+         */
+        accessConfigs?: outputs.lambda.EventSourceMappingSelfManagedKafkaEventSourceConfigSchemaRegistryConfigAccessConfig[];
+        /**
+         * Record format that Lambda delivers to the function after schema validation. Valid values: `JSON`, `SOURCE`.
+         */
+        eventRecordFormat?: string;
+        /**
+         * URI of the schema registry. For AWS Glue schema registries, use the ARN of the registry. For Confluent schema registries, use the registry URL.
+         */
+        schemaRegistryUri?: string;
+        /**
+         * Repeatable block that defines schema validation settings. These specify the message attributes that Lambda should validate and filter using the schema registry.
+         */
+        schemaValidationConfigs?: outputs.lambda.EventSourceMappingSelfManagedKafkaEventSourceConfigSchemaRegistryConfigSchemaValidationConfig[];
+    }
+    interface EventSourceMappingSelfManagedKafkaEventSourceConfigSchemaRegistryConfigAccessConfig {
+        /**
+         * Authentication type Lambda uses to access the schema registry.
+         */
+        type?: string;
+        /**
+         * URI of the secret (Secrets Manager secret ARN) used to authenticate with the schema registry.
+         */
+        uri?: string;
+    }
+    interface EventSourceMappingSelfManagedKafkaEventSourceConfigSchemaRegistryConfigSchemaValidationConfig {
+        /**
+         * Message attribute to validate. Valid values: `KEY`, `VALUE`.
+         */
+        attribute?: string;
     }
     interface EventSourceMappingSourceAccessConfiguration {
         /**
@@ -68971,6 +69885,40 @@ export declare namespace odb {
     interface GetCloudAutonomousVmClusterMaintenanceWindowMonth {
         name: string;
     }
+    interface GetCloudAutonomousVmClustersCloudAutonomousVmCluster {
+        /**
+         * The Amazon Resource Name (ARN) for the Exadata infrastructure.
+         */
+        arn: string;
+        /**
+         * Cloud exadata infrastructure id associated with this cloud autonomous VM cluster.
+         */
+        cloudExadataInfrastructureId: string;
+        /**
+         * The display name of the Autonomous VM cluster.
+         */
+        displayName: string;
+        /**
+         * The unique identifier of the cloud autonomous vm cluster.
+         */
+        id: string;
+        /**
+         * The name of the OCI resource anchor associated with this Autonomous VM cluster.
+         */
+        ociResourceAnchorName: string;
+        /**
+         * The URL for accessing the OCI console page for this Autonomous VM cluster.
+         */
+        ociUrl: string;
+        /**
+         * The Oracle Cloud Identifier (OCID) of the Autonomous VM cluster.
+         */
+        ocid: string;
+        /**
+         * The unique identifier of the ODB network associated with this Autonomous VM cluster.
+         */
+        odbNetworkId: string;
+    }
     interface GetCloudExadataInfrastructureCustomerContactsToSendToOci {
         email: string;
     }
@@ -68991,6 +69939,32 @@ export declare namespace odb {
     interface GetCloudExadataInfrastructureMaintenanceWindowMonth {
         name: string;
     }
+    interface GetCloudExadataInfrastructuresCloudExadataInfrastructure {
+        /**
+         * The Amazon Resource Name (ARN) for the Exadata infrastructure.
+         */
+        arn: string;
+        /**
+         * The display name of the Exadata infrastructure.
+         */
+        displayName: string;
+        /**
+         * The unique identifier of the Exadata infrastructure.
+         */
+        id: string;
+        /**
+         * The name of the OCI resource anchor for the Exadata infrastructure.
+         */
+        ociResourceAnchorName: string;
+        /**
+         * The HTTPS link to the Exadata infrastructure in OCI.
+         */
+        ociUrl: string;
+        /**
+         * The OCID of the Exadata infrastructure in OCI.
+         */
+        ocid: string;
+    }
     interface GetCloudVmClusterDataCollectionOption {
         isDiagnosticsEventsEnabled: boolean;
         isHealthMonitoringEnabled: boolean;
@@ -69007,6 +69981,40 @@ export declare namespace odb {
         flashCacheLimit: string;
         share: number;
     }
+    interface GetCloudVmClustersCloudVmCluster {
+        /**
+         * The Amazon Resource Name (ARN) for the cloud vm cluster.
+         */
+        arn: string;
+        /**
+         * The ID of the Cloud Exadata Infrastructure.
+         */
+        cloudExadataInfrastructureId: string;
+        /**
+         * The display name of the VM cluster.
+         */
+        displayName: string;
+        /**
+         * The unique identifier of the cloud vm cluster.
+         */
+        id: string;
+        /**
+         * The name of the OCI Resource Anchor.
+         */
+        ociResourceAnchorName: string;
+        /**
+         * The HTTPS link to the VM cluster in OCI.
+         */
+        ociUrl: string;
+        /**
+         * The OCID of the VM cluster.
+         */
+        ocid: string;
+        /**
+         * The ID of the ODB network.
+         */
+        odbNetworkId: string;
+    }
     interface GetDbNodesDbNode {
         /**
          * Additional information about the planned maintenance.
@@ -69184,30 +70192,99 @@ export declare namespace odb {
         timePatchingStarted: string;
     }
     interface GetDbSystemShapesDbSystemShape {
+        /**
+         * The maximum number of CPU cores that can be enabled for the shape.
+         */
         availableCoreCount: number;
+        /**
+         * The maximum number of CPU cores per DB node that can be enabled for the shape.
+         */
         availableCoreCountPerNode: number;
+        /**
+         * The maximum amount of data storage, in terabytes (TB), that can be enabled for the shape.
+         */
         availableDataStorageInTbs: number;
+        /**
+         * The maximum amount of data storage, in terabytes (TB), that's available per storage server for the shape.
+         */
         availableDataStoragePerServerInTbs: number;
+        /**
+         * The maximum amount of DB node storage, in gigabytes (GB), that's available per DB node for the shape.
+         */
         availableDbNodePerNodeInGbs: number;
+        /**
+         * The maximum amount of DB node storage, in gigabytes (GB), that can be enabled for the shape.
+         */
         availableDbNodeStorageInGbs: number;
+        /**
+         * The maximum amount of memory, in gigabytes (GB), that can be enabled for the shape.
+         */
         availableMemoryInGbs: number;
+        /**
+         * The maximum amount of memory, in gigabytes (GB), that's available per DB node for the shape.
+         */
         availableMemoryPerNodeInGbs: number;
+        /**
+         * The discrete number by which the CPU core count for the shape can be increased or decreased.
+         */
         coreCountIncrement: number;
+        /**
+         * The maximum number of Exadata storage servers available for the shape.
+         */
         maxStorageCount: number;
+        /**
+         * The maximum number of compute servers available for the shape.
+         */
         maximumNodeCount: number;
+        /**
+         * The minimum number of CPU cores that can be enabled per node for the shape.
+         */
         minCoreCountPerNode: number;
+        /**
+         * The minimum amount of data storage, in terabytes (TB), that must be allocated for the shape.
+         */
         minDataStorageInTbs: number;
+        /**
+         * The minimum amount of DB node storage, in gigabytes (GB), that must be allocated per DB node for the shape.
+         */
         minDbNodeStoragePerNodeInGbs: number;
+        /**
+         * The minimum amount of memory, in gigabytes (GB), that must be allocated per DB node for the shape.
+         */
         minMemoryPerNodeInGbs: number;
+        /**
+         * The minimum number of Exadata storage servers available for the shape.
+         */
         minStorageCount: number;
+        /**
+         * The minimum number of CPU cores that can be enabled for the shape.
+         */
         minimumCoreCount: number;
+        /**
+         * The minimum number of compute servers available for the shape.
+         */
         minimumNodeCount: number;
+        /**
+         * The name of the shape.
+         */
         name: string;
+        /**
+         * The runtime minimum number of CPU cores that can be enabled for the shape.
+         */
         runtimeMinimumCoreCount: number;
+        /**
+         * The family of the shape.
+         */
         shapeFamily: string;
+        /**
+         * The shape type, determined by the CPU hardware.
+         */
         shapeType: string;
     }
     interface GetGiVersionsGiVersion {
+        /**
+         * The GI software version.
+         */
         version: string;
     }
     interface GetNetworkManagedService {
@@ -69250,6 +70327,54 @@ export declare namespace odb {
         domainName: string;
         ociDnsListenerIp: string;
     }
+    interface GetNetworkPeeringConnectionsOdbPeeringConnection {
+        /**
+         * The Amazon Resource Name (ARN) for the  ODB network peering connection.
+         */
+        arn: string;
+        /**
+         * Display name of the ODB network peering connection.
+         */
+        displayName: string;
+        /**
+         * The unique identifier of the  ODB network peering connection.
+         */
+        id: string;
+        /**
+         * ARN of the ODB network peering connection.
+         */
+        odbNetworkArn: string;
+        /**
+         * ARN of the peer network peering connection.
+         */
+        peerNetworkArn: string;
+    }
+    interface GetNetworksOdbNetwork {
+        /**
+         * Amazon Resource Name (ARN) of the odb network resource.
+         */
+        arn: string;
+        /**
+         * Display name for the network resource.
+         */
+        displayName: string;
+        /**
+         * Unique identifier of the odb network resource.
+         */
+        id: string;
+        /**
+         * The unique identifier of the OCI network anchor for the ODB network.
+         */
+        ociNetworkAnchorId: string;
+        /**
+         * The unique identifier  Oracle Cloud ID (OCID) of the OCI VCN for the ODB network.
+         */
+        ociVcnId: string;
+        /**
+         * The URL of the OCI VCN for the ODB network.
+         */
+        ociVcnUrl: string;
+    }
     interface NetworkManagedService {
         managedS3BackupAccesses: outputs.odb.NetworkManagedServiceManagedS3BackupAccess[];
         managedServiceIpv4Cidrs: string[];
@@ -73605,6 +74730,16 @@ export declare namespace rds {
         name: string;
         values: string[];
     }
+    interface GetGlobalClusterMember {
+        /**
+         * Amazon Resource Name (ARN) of member DB Cluster
+         */
+        dbClusterArn: string;
+        /**
+         * Whether the member is the primary DB Cluster
+         */
+        isWriter: boolean;
+    }
     interface GetInstanceMasterUserSecret {
         /**
          * The Amazon Web Services KMS key identifier that is used to encrypt the secret.
@@ -87438,6 +88573,26 @@ export declare namespace transfer {
          */
         uid: number;
     }
+    interface WebAppIdentityProviderDetails {
+        /**
+         * Block that describes the values to use for the IAM Identity Center settings. See Identity center config below.
+         */
+        identityCenterConfig?: outputs.transfer.WebAppIdentityProviderDetailsIdentityCenterConfig;
+    }
+    interface WebAppIdentityProviderDetailsIdentityCenterConfig {
+        applicationArn: string;
+        /**
+         * ARN of the IAM Identity Center used for the web app.
+         */
+        instanceArn?: string;
+        /**
+         * ARN of an identity bearer role for your web app.
+         */
+        role?: string;
+    }
+    interface WebAppWebAppUnit {
+        provisioned: number;
+    }
     interface WorkflowOnExceptionStep {
         /**
          * Details for a step that performs a file copy. See Copy Step Details below.
@@ -88620,6 +89775,33 @@ export declare namespace vpclattice {
         value?: string;
     }
 }
+export declare namespace vpn {
+    interface GetConnectionFilter {
+        /**
+         * Name of the filter field. Valid values can be found in the [EC2 `DescribeVPNConnections` API Reference](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeVpnConnections.html).
+         */
+        name: string;
+        /**
+         * Set of values that are accepted for the given filter field. Results will be selected if any given value matches.
+         */
+        values: string[];
+    }
+    interface GetConnectionRoute {
+        destinationCidrBlock: string;
+        source: string;
+        /**
+         * Current state of the VPN connection.
+         */
+        state: string;
+    }
+    interface GetConnectionVgwTelemetry {
+        acceptedRouteCount: number;
+        lastStatusChange: string;
+        outsideIpAddress: string;
+        status: string;
+        statusMessage: string;
+    }
+}
 export declare namespace waf {
     interface ByteMatchSetByteMatchTuple {
         /**