aws-sdk 2.1608.0 → 2.1610.0

package/clients/qbusiness.js

@@ -9,6 +9,7 @@ Object.defineProperty(apiLoader.services['qbusiness'], '2023-11-27', {
   get: function get() {
     var model = require('../apis/qbusiness-2023-11-27.min.json');
     model.paginators = require('../apis/qbusiness-2023-11-27.paginators.json').pagination;
+    model.waiters = require('../apis/qbusiness-2023-11-27.waiters2.json').waiters;
     return model;
   },
   enumerable: true,

package/clients/quicksight.d.ts

@@ -1291,6 +1291,14 @@ declare class QuickSight extends Service {
    * Updates the custom permissions that are associated with a role.
    */
   updateRoleCustomPermission(callback?: (err: AWSError, data: QuickSight.Types.UpdateRoleCustomPermissionResponse) => void): Request<QuickSight.Types.UpdateRoleCustomPermissionResponse, AWSError>;
+  /**
+   * Updates the SPICE capacity configuration for a Amazon QuickSight account.
+   */
+  updateSPICECapacityConfiguration(params: QuickSight.Types.UpdateSPICECapacityConfigurationRequest, callback?: (err: AWSError, data: QuickSight.Types.UpdateSPICECapacityConfigurationResponse) => void): Request<QuickSight.Types.UpdateSPICECapacityConfigurationResponse, AWSError>;
+  /**
+   * Updates the SPICE capacity configuration for a Amazon QuickSight account.
+   */
+  updateSPICECapacityConfiguration(callback?: (err: AWSError, data: QuickSight.Types.UpdateSPICECapacityConfigurationResponse) => void): Request<QuickSight.Types.UpdateSPICECapacityConfigurationResponse, AWSError>;
   /**
    * Updates a template from an existing Amazon QuickSight analysis or another template.
    */
@@ -1703,10 +1711,20 @@ declare namespace QuickSight {
      * The Q search bar that you want to use for anonymous user embedding.
      */
     QSearchBar?: AnonymousUserQSearchBarEmbeddingConfiguration;
+    /**
+     * The Generative Q&amp;A experience that you want to use for anonymous user embedding.
+     */
+    GenerativeQnA?: AnonymousUserGenerativeQnAEmbeddingConfiguration;
+  }
+  export interface AnonymousUserGenerativeQnAEmbeddingConfiguration {
+    /**
+     * The Amazon QuickSight Q topic ID of the new reader experience topic that you want the anonymous user to see first. This ID is included in the output URL. When the URL in response is accessed, Amazon QuickSight renders the Generative Q&amp;A experience with this new reader experience topic pre selected. The Amazon Resource Name (ARN) of this Q new reader experience topic must be included in the AuthorizedResourceArns parameter. Otherwise, the request fails with an InvalidParameterValueException error.
+     */
+    InitialTopicId: RestrictiveResourceId;
   }
   export interface AnonymousUserQSearchBarEmbeddingConfiguration {
     /**
-     * The QuickSight Q topic ID of the topic that you want the anonymous user to see first. This ID is included in the output URL. When the URL in response is accessed, Amazon QuickSight renders the Q search bar with this topic pre-selected. The Amazon Resource Name (ARN) of this Q topic must be included in the AuthorizedResourceArns parameter. Otherwise, the request will fail with InvalidParameterValueException.
+     * The Amazon QuickSight Q topic ID of the legacy topic that you want the anonymous user to see first. This ID is included in the output URL. When the URL in response is accessed, Amazon QuickSight renders the Q search bar with this legacy topic pre-selected. The Amazon Resource Name (ARN) of this Q legacy topic must be included in the AuthorizedResourceArns parameter. Otherwise, the request fails with an InvalidParameterValueException error.
      */
     InitialTopicId: RestrictiveResourceId;
   }
@@ -3724,7 +3742,7 @@ declare namespace QuickSight {
     /**
      * The edition of Amazon QuickSight that you want your account to have. Currently, you can choose from ENTERPRISE or ENTERPRISE_AND_Q. If you choose ENTERPRISE_AND_Q, the following parameters are required:    FirstName     LastName     EmailAddress     ContactNumber   
      */
-    Edition: Edition;
+    Edition?: Edition;
     /**
      * The method that you want to use to authenticate your Amazon QuickSight account. If you choose ACTIVE_DIRECTORY, provide an ActiveDirectoryName and an AdminGroup associated with your Active Directory. If you choose IAM_IDENTITY_CENTER, provide an AdminGroup associated with your IAM Identity Center account.
      */
@@ -3754,7 +3772,7 @@ declare namespace QuickSight {
      */
     DirectoryId?: String;
     /**
-     * The admin group associated with your Active Directory or IAM Identity Center account. This field is required if ACTIVE_DIRECTORY or IAM_IDENTITY_CENTER is the selected authentication method of the new Amazon QuickSight account. For more information about using IAM Identity Center in Amazon QuickSight, see Using IAM Identity Center with Amazon QuickSight Enterprise Edition in the Amazon QuickSight User Guide. For more information about using Active Directory in Amazon QuickSight, see Using Active Directory with Amazon QuickSight Enterprise Edition in the Amazon QuickSight User Guide.
+     * The admin group associated with your Active Directory or IAM Identity Center account. Either this field or the AdminProGroup field is required if ACTIVE_DIRECTORY or IAM_IDENTITY_CENTER is the selected authentication method of the new Amazon QuickSight account. For more information about using IAM Identity Center in Amazon QuickSight, see Using IAM Identity Center with Amazon QuickSight Enterprise Edition in the Amazon QuickSight User Guide. For more information about using Active Directory in Amazon QuickSight, see Using Active Directory with Amazon QuickSight Enterprise Edition in the Amazon QuickSight User Guide.
      */
     AdminGroup?: GroupsList;
     /**
@@ -3765,6 +3783,18 @@ declare namespace QuickSight {
      * The reader group associated with your Active Directory or IAM Identity Center account. For more information about using IAM Identity Center in Amazon QuickSight, see Using IAM Identity Center with Amazon QuickSight Enterprise Edition in the Amazon QuickSight User Guide. For more information about using Active Directory in Amazon QuickSight, see Using Active Directory with Amazon QuickSight Enterprise Edition in the Amazon QuickSight User Guide.
      */
     ReaderGroup?: GroupsList;
+    /**
+     * The admin pro group associated with your Active Directory or IAM Identity Center account. Either this field or the AdminGroup field is required if ACTIVE_DIRECTORY or IAM_IDENTITY_CENTER is the selected authentication method of the new Amazon QuickSight account. For more information about using IAM Identity Center in Amazon QuickSight, see Using IAM Identity Center with Amazon QuickSight Enterprise Edition in the Amazon QuickSight User Guide. For more information about using Active Directory in Amazon QuickSight, see Using Active Directory with Amazon QuickSight Enterprise Edition in the Amazon QuickSight User Guide.
+     */
+    AdminProGroup?: GroupsList;
+    /**
+     * The author pro group associated with your Active Directory or IAM Identity Center account. For more information about using IAM Identity Center in Amazon QuickSight, see Using IAM Identity Center with Amazon QuickSight Enterprise Edition in the Amazon QuickSight User Guide. For more information about using Active Directory in Amazon QuickSight, see Using Active Directory with Amazon QuickSight Enterprise Edition in the Amazon QuickSight User Guide.
+     */
+    AuthorProGroup?: GroupsList;
+    /**
+     * The reader pro group associated with your Active Directory or IAM Identity Center account. For more information about using IAM Identity Center in Amazon QuickSight, see Using IAM Identity Center with Amazon QuickSight Enterprise Edition in the Amazon QuickSight User Guide. For more information about using Active Directory in Amazon QuickSight, see Using Active Directory with Amazon QuickSight Enterprise Edition in the Amazon QuickSight User Guide.
+     */
+    ReaderProGroup?: GroupsList;
     /**
      * The first name of the author of the Amazon QuickSight account to use for future communications. This field is required if ENTERPPRISE_AND_Q is the selected edition of the new Amazon QuickSight account.
      */
@@ -9901,6 +9931,16 @@ declare namespace QuickSight {
      */
     ForegroundColor?: ConditionalFormattingColor;
   }
+  export interface GaugeChartColorConfiguration {
+    /**
+     * The foreground color configuration of a GaugeChartVisual.
+     */
+    ForegroundColor?: HexColor;
+    /**
+     * The background color configuration of a GaugeChartVisual.
+     */
+    BackgroundColor?: HexColor;
+  }
   export interface GaugeChartConditionalFormatting {
     /**
      * Conditional formatting options of a GaugeChartVisual.
@@ -9939,6 +9979,10 @@ declare namespace QuickSight {
      * The visual palette configuration of a GaugeChartVisual.
      */
     VisualPalette?: VisualPalette;
+    /**
+     * The color configuration of a GaugeChartVisual.
+     */
+    ColorConfiguration?: GaugeChartColorConfiguration;
     /**
      * The general visual interactions setup for a visual.
      */
@@ -10074,7 +10118,7 @@ declare namespace QuickSight {
      */
     UserArn: Arn;
     /**
-     * The experience you are embedding. For registered users, you can embed Amazon QuickSight dashboards, Amazon QuickSight visuals, the Amazon QuickSight Q search bar, or the entire Amazon QuickSight console.
+     * The experience that you want to embed. For registered users, you can embed Amazon QuickSight dashboards, Amazon QuickSight visuals, the Amazon QuickSight Q search bar, the Amazon QuickSight Generative Q&amp;A experience, or the entire Amazon QuickSight console.
      */
     ExperienceConfiguration: RegisteredUserEmbeddingExperienceConfiguration;
     /**
@@ -10084,7 +10128,7 @@ declare namespace QuickSight {
   }
   export interface GenerateEmbedUrlForRegisteredUserResponse {
     /**
-     * The embed URL for the Amazon QuickSight dashboard, visual, Q search bar, or console.
+     * The embed URL for the Amazon QuickSight dashboard, visual, Q search bar, Generative Q&amp;A experience, or console.
      */
     EmbedUrl: EmbeddingUrl;
     /**
@@ -14128,6 +14172,7 @@ declare namespace QuickSight {
   export type ProjectedColumnList = String[];
   export type PropertyRole = "PRIMARY"|"ID"|string;
   export type PropertyUsage = "INHERIT"|"DIMENSION"|"MEASURE"|string;
+  export type PurchaseMode = "MANUAL"|"AUTO_PURCHASE"|string;
   export interface PutDataSetRefreshPropertiesRequest {
     /**
      * The Amazon Web Services account ID.
@@ -14546,7 +14591,7 @@ declare namespace QuickSight {
   export type RefreshSchedules = RefreshSchedule[];
   export interface RegisterUserRequest {
     /**
-     * Amazon QuickSight supports several ways of managing the identity of users. This parameter accepts two values:    IAM: A user whose identity maps to an existing IAM user or role.     QUICKSIGHT: A user whose identity is owned and managed internally by Amazon QuickSight.   
+     * The identity type that your Amazon QuickSight account uses to manage the identity of users.
      */
     IdentityType: IdentityType;
     /**
@@ -14578,7 +14623,7 @@ declare namespace QuickSight {
      */
     UserName?: UserName;
     /**
-     * (Enterprise edition only) The name of the custom permissions profile that you want to assign to this user. Customized permissions allows you to control a user's access by restricting access the following operations:   Create and update data sources   Create and update datasets   Create and update email reports   Subscribe to email reports   To add custom permissions to an existing user, use  UpdateUser  instead. A set of custom permissions includes any combination of these restrictions. Currently, you need to create the profile names for custom permission sets by using the Amazon QuickSight console. Then, you use the RegisterUser API operation to assign the named set of permissions to a Amazon QuickSight user.  Amazon QuickSight custom permissions are applied through IAM policies. Therefore, they override the permissions typically granted by assigning Amazon QuickSight users to one of the default security cohorts in Amazon QuickSight (admin, author, reader). This feature is available only to Amazon QuickSight Enterprise edition subscriptions.
+     * (Enterprise edition only) The name of the custom permissions profile that you want to assign to this user. Customized permissions allows you to control a user's access by restricting access the following operations:   Create and update data sources   Create and update datasets   Create and update email reports   Subscribe to email reports   To add custom permissions to an existing user, use  UpdateUser  instead. A set of custom permissions includes any combination of these restrictions. Currently, you need to create the profile names for custom permission sets by using the Amazon QuickSight console. Then, you use the RegisterUser API operation to assign the named set of permissions to a Amazon QuickSight user.  Amazon QuickSight custom permissions are applied through IAM policies. Therefore, they override the permissions typically granted by assigning Amazon QuickSight users to one of the default security cohorts in Amazon QuickSight (admin, author, reader, admin pro, author pro, reader pro). This feature is available only to Amazon QuickSight Enterprise edition subscriptions.
      */
     CustomPermissionsName?: RoleName;
     /**
@@ -14665,10 +14710,20 @@ declare namespace QuickSight {
      * The type of embedding experience. In this case, Amazon QuickSight visuals.
      */
     DashboardVisual?: RegisteredUserDashboardVisualEmbeddingConfiguration;
+    /**
+     * The configuration details for embedding the Generative Q&amp;A experience. For more information about embedding the Generative Q&amp;A experience, see Embedding Overview in the Amazon QuickSight User Guide.
+     */
+    GenerativeQnA?: RegisteredUserGenerativeQnAEmbeddingConfiguration;
+  }
+  export interface RegisteredUserGenerativeQnAEmbeddingConfiguration {
+    /**
+     * The ID of the new Q reader experience topic that you want to make the starting topic in the Generative Q&amp;A experience. You can find a topic ID by navigating to the Topics pane in the Amazon QuickSight application and opening a topic. The ID is in the URL for the topic that you open. If you don't specify an initial topic or you specify a legacy topic, a list of all shared new reader experience topics is shown in the Generative Q&amp;A experience for your readers. When you select an initial new reader experience topic, you can specify whether or not readers are allowed to select other new reader experience topics from the available ones in the list.
+     */
+    InitialTopicId?: RestrictiveResourceId;
   }
   export interface RegisteredUserQSearchBarEmbeddingConfiguration {
     /**
-     * The ID of the Q topic that you want to make the starting topic in the Q search bar. You can find a topic ID by navigating to the Topics pane in the Amazon QuickSight application and opening a topic. The ID is in the URL for the topic that you open. If you don't specify an initial topic, a list of all shared topics is shown in the Q bar for your readers. When you select an initial topic, you can specify whether or not readers are allowed to select other topics from the available ones in the list.
+     * The ID of the legacy Q topic that you want to use as the starting topic in the Q search bar. To locate the topic ID of the topic that you want to use, open the Amazon QuickSight console, navigate to the Topics pane, and choose thre topic that you want to use. The TopicID is located in the URL of the topic that opens. When you select an initial topic, you can specify whether or not readers are allowed to select other topics from the list of available topics. If you don't specify an initial topic or if you specify a new reader experience topic, a list of all shared legacy topics is shown in the Q bar. 
      */
     InitialTopicId?: RestrictiveResourceId;
   }
@@ -14823,7 +14878,7 @@ declare namespace QuickSight {
     RequestId?: String;
   }
   export type RestrictiveResourceId = string;
-  export type Role = "ADMIN"|"AUTHOR"|"READER"|string;
+  export type Role = "ADMIN"|"AUTHOR"|"READER"|"ADMIN_PRO"|"AUTHOR_PRO"|"READER_PRO"|string;
   export type RoleArn = string;
   export type RoleName = string;
   export type RoleSessionName = string;
@@ -17885,6 +17940,10 @@ declare namespace QuickSight {
      * The name of the topic.
      */
     Name?: ResourceName;
+    /**
+     * The user experience version of the topic.
+     */
+    UserExperienceVersion?: TopicUserExperienceVersion;
   }
   export type TopicTimeGranularity = "SECOND"|"MINUTE"|"HOUR"|"DAY"|"WEEK"|"MONTH"|"QUARTER"|"YEAR"|string;
   export type TopicUserExperienceVersion = "LEGACY"|"NEW_READER_EXPERIENCE"|string;
@@ -19093,6 +19152,26 @@ declare namespace QuickSight {
      */
     Status?: StatusCode;
   }
+  export interface UpdateSPICECapacityConfigurationRequest {
+    /**
+     * The ID of the Amazon Web Services account that contains the SPICE configuration that you want to update.
+     */
+    AwsAccountId: AwsAccountId;
+    /**
+     * Determines how SPICE capacity can be purchased. The following options are available.     MANUAL: SPICE capacity can only be purchased manually.    AUTO_PURCHASE: Extra SPICE capacity is automatically purchased on your behalf as needed. SPICE capacity can also be purchased manually with this option.  
+     */
+    PurchaseMode: PurchaseMode;
+  }
+  export interface UpdateSPICECapacityConfigurationResponse {
+    /**
+     * The Amazon Web Services request ID for this operation.
+     */
+    RequestId?: String;
+    /**
+     * The HTTP status of the request.
+     */
+    Status?: StatusCode;
+  }
   export interface UpdateTemplateAliasRequest {
     /**
      * The ID of the Amazon Web Services account that contains the template alias that you're updating.
@@ -19479,7 +19558,7 @@ declare namespace QuickSight {
      */
     Email: String;
     /**
-     * The Amazon QuickSight role of the user. The role can be one of the following default security cohorts:    READER: A user who has read-only access to dashboards.    AUTHOR: A user who can create data sources, datasets, analyses, and dashboards.    ADMIN: A user who is an author, who can also manage Amazon QuickSight settings.   The name of the Amazon QuickSight role is invisible to the user except for the console screens dealing with permissions.
+     * The Amazon QuickSight role of the user. The role can be one of the following default security cohorts:    READER: A user who has read-only access to dashboards.    AUTHOR: A user who can create data sources, datasets, analyses, and dashboards.    ADMIN: A user who is an author, who can also manage Amazon QuickSight settings.    READER_PRO: Reader Pro adds Generative BI capabilities to the Reader role. Reader Pros have access to Amazon Q Business, can build stories with Amazon Q, and can generate executive summaries from dashboards.    AUTHOR_PRO: Author Pro adds Generative BI capabilities to the Author role. Author Pros can author dashboards with natural language with Amazon Q, build stories with Amazon Q, create Topics for Q&amp;A, and generate executive summaries from dashboards.    ADMIN_PRO: Admin Pros are Author Pros who can also manage Amazon QuickSight administrative settings. Admin Pro users are billed at Author Pro pricing.   The name of the Amazon QuickSight role is invisible to the user except for the console screens dealing with permissions.
      */
     Role: UserRole;
     /**
@@ -19609,7 +19688,7 @@ declare namespace QuickSight {
      */
     Email?: String;
     /**
-     * The Amazon QuickSight role for the user. The user role can be one of the following:.    READER: A user who has read-only access to dashboards.    AUTHOR: A user who can create data sources, datasets, analyses, and dashboards.    ADMIN: A user who is an author, who can also manage Amazon Amazon QuickSight settings.    RESTRICTED_READER: This role isn't currently available for use.    RESTRICTED_AUTHOR: This role isn't currently available for use.  
+     * The Amazon QuickSight role for the user. The user role can be one of the following:.    READER: A user who has read-only access to dashboards.    AUTHOR: A user who can create data sources, datasets, analyses, and dashboards.    ADMIN: A user who is an author, who can also manage Amazon Amazon QuickSight settings.    READER_PRO: Reader Pro adds Generative BI capabilities to the Reader role. Reader Pros have access to Amazon Q Business, can build stories with Amazon Q, and can generate executive summaries from dashboards.    AUTHOR_PRO: Author Pro adds Generative BI capabilities to the Author role. Author Pros can author dashboards with natural language with Amazon Q, build stories with Amazon Q, create Topics for Q&amp;A, and generate executive summaries from dashboards.    ADMIN_PRO: Admin Pros are Author Pros who can also manage Amazon QuickSight administrative settings. Admin Pro users are billed at Author Pro pricing.    RESTRICTED_READER: This role isn't currently available for use.    RESTRICTED_AUTHOR: This role isn't currently available for use.  
      */
     Role?: UserRole;
     /**
@@ -19643,7 +19722,7 @@ declare namespace QuickSight {
   }
   export type UserList = User[];
   export type UserName = string;
-  export type UserRole = "ADMIN"|"AUTHOR"|"READER"|"RESTRICTED_AUTHOR"|"RESTRICTED_READER"|string;
+  export type UserRole = "ADMIN"|"AUTHOR"|"READER"|"RESTRICTED_AUTHOR"|"RESTRICTED_READER"|"ADMIN_PRO"|"AUTHOR_PRO"|"READER_PRO"|string;
   export interface VPCConnection {
     /**
      * The ID of the VPC connection that you're creating. This ID is a unique identifier for each Amazon Web Services Region in an Amazon Web Services account.

package/clients/route53resolver.d.ts

@@ -737,7 +737,11 @@ declare namespace Route53Resolver {
      */
     Name: Name;
     /**
-     *  The DNS query type you want the rule to evaluate. Allowed values are;     A: Returns an IPv4 address.   AAAA: Returns an Ipv6 address.   CAA: Restricts CAs that can create SSL/TLS certifications for the domain.   CNAME: Returns another domain name.   DS: Record that identifies the DNSSEC signing key of a delegated zone.   MX: Specifies mail servers.   NAPTR: Regular-expression-based rewriting of domain names.   NS: Authoritative name servers.   PTR: Maps an IP address to a domain name.   SOA: Start of authority record for the zone.   SPF: Lists the servers authorized to send emails from a domain.   SRV: Application specific values that identify servers.   TXT: Verifies email senders and application-specific values.  
+     *  How you want the the rule to evaluate DNS redirection in the DNS redirection chain, such as CNAME, DNAME, ot ALIAS.   Inspect_Redirection_Domain (Default) inspects all domains in the redirection chain. The individual domains in the redirection chain must be added to the allow domain list.  Trust_Redirection_Domain  inspects only the first domain in the redirection chain. You don't need to add the subsequent domains in the redirection list to the domain alloww list.
+     */
+    FirewallDomainRedirectionAction?: FirewallDomainRedirectionAction;
+    /**
+     *  The DNS query type you want the rule to evaluate. Allowed values are;     A: Returns an IPv4 address.   AAAA: Returns an Ipv6 address.   CAA: Restricts CAs that can create SSL/TLS certifications for the domain.   CNAME: Returns another domain name.   DS: Record that identifies the DNSSEC signing key of a delegated zone.   MX: Specifies mail servers.   NAPTR: Regular-expression-based rewriting of domain names.   NS: Authoritative name servers.   PTR: Maps an IP address to a domain name.   SOA: Start of authority record for the zone.   SPF: Lists the servers authorized to send emails from a domain.   SRV: Application specific values that identify servers.   TXT: Verifies email senders and application-specific values.   A query type you define by using the DNS type ID, for example 28 for AAAA. The values must be defined as TYPENUMBER, where the NUMBER can be 1-65334, for example, TYPE28. For more information, see List of DNS record types.  
      */
     Qtype?: Qtype;
   }
@@ -789,7 +793,7 @@ declare namespace Route53Resolver {
      */
     Name?: Name;
     /**
-     * The ID of one or more security groups that you want to use to control access to this VPC. The security group that you specify must include one or more inbound rules (for inbound Resolver endpoints) or outbound rules (for outbound Resolver endpoints). Inbound and outbound rules must allow TCP and UDP access. For inbound access, open port 53. For outbound access, open the port that you're using for DNS queries on your network.
+     * The ID of one or more security groups that you want to use to control access to this VPC. The security group that you specify must include one or more inbound rules (for inbound Resolver endpoints) or outbound rules (for outbound Resolver endpoints). Inbound and outbound rules must allow TCP and UDP access. For inbound access, open port 53. For outbound access, open the port that you're using for DNS queries on your network. Some security group rules will cause your connection to be tracked. For outbound resolver endpoint, it can potentially impact the maximum queries per second from outbound endpoint to your target name server. For inbound resolver endpoint, it can bring down the overall maximum queries per second per IP address to as low as 1500. To avoid connection tracking caused by security group, see Untracked connections.
      */
     SecurityGroupIds: SecurityGroupIds;
     /**
@@ -922,7 +926,7 @@ declare namespace Route53Resolver {
      */
     FirewallDomainListId: ResourceId;
     /**
-     *  The DNS query type that the rule you are deleting evaluates. Allowed values are;     A: Returns an IPv4 address.   AAAA: Returns an Ipv6 address.   CAA: Restricts CAs that can create SSL/TLS certifications for the domain.   CNAME: Returns another domain name.   DS: Record that identifies the DNSSEC signing key of a delegated zone.   MX: Specifies mail servers.   NAPTR: Regular-expression-based rewriting of domain names.   NS: Authoritative name servers.   PTR: Maps an IP address to a domain name.   SOA: Start of authority record for the zone.   SPF: Lists the servers authorized to send emails from a domain.   SRV: Application specific values that identify servers.   TXT: Verifies email senders and application-specific values.  
+     *  The DNS query type that the rule you are deleting evaluates. Allowed values are;     A: Returns an IPv4 address.   AAAA: Returns an Ipv6 address.   CAA: Restricts CAs that can create SSL/TLS certifications for the domain.   CNAME: Returns another domain name.   DS: Record that identifies the DNSSEC signing key of a delegated zone.   MX: Specifies mail servers.   NAPTR: Regular-expression-based rewriting of domain names.   NS: Authoritative name servers.   PTR: Maps an IP address to a domain name.   SOA: Start of authority record for the zone.   SPF: Lists the servers authorized to send emails from a domain.   SRV: Application specific values that identify servers.   TXT: Verifies email senders and application-specific values.   A query type you define by using the DNS type ID, for example 28 for AAAA. The values must be defined as TYPENUMBER, where the NUMBER can be 1-65334, for example, TYPE28. For more information, see List of DNS record types.  
      */
     Qtype?: Qtype;
   }
@@ -1144,6 +1148,7 @@ declare namespace Route53Resolver {
   export type FirewallDomainListMetadataList = FirewallDomainListMetadata[];
   export type FirewallDomainListStatus = "COMPLETE"|"COMPLETE_IMPORT_FAILED"|"IMPORTING"|"DELETING"|"UPDATING"|string;
   export type FirewallDomainName = string;
+  export type FirewallDomainRedirectionAction = "INSPECT_REDIRECTION_DOMAIN"|"TRUST_REDIRECTION_DOMAIN"|string;
   export type FirewallDomainUpdateOperation = "ADD"|"REMOVE"|"REPLACE"|string;
   export type FirewallDomains = FirewallDomainName[];
   export type FirewallFailOpenStatus = "ENABLED"|"DISABLED"|"USE_LOCAL_RESOURCE_SETTING"|string;
@@ -1197,7 +1202,11 @@ declare namespace Route53Resolver {
      */
     ModificationTime?: Rfc3339TimeString;
     /**
-     *  The DNS query type you want the rule to evaluate. Allowed values are;     A: Returns an IPv4 address.   AAAA: Returns an Ipv6 address.   CAA: Restricts CAs that can create SSL/TLS certifications for the domain.   CNAME: Returns another domain name.   DS: Record that identifies the DNSSEC signing key of a delegated zone.   MX: Specifies mail servers.   NAPTR: Regular-expression-based rewriting of domain names.   NS: Authoritative name servers.   PTR: Maps an IP address to a domain name.   SOA: Start of authority record for the zone.   SPF: Lists the servers authorized to send emails from a domain.   SRV: Application specific values that identify servers.   TXT: Verifies email senders and application-specific values.  
+     *  How you want the the rule to evaluate DNS redirection in the DNS redirection chain, such as CNAME, DNAME, ot ALIAS.   Inspect_Redirection_Domain (Default) inspects all domains in the redirection chain. The individual domains in the redirection chain must be added to the allow domain list.  Trust_Redirection_Domain  inspects only the first domain in the redirection chain. You don't need to add the subsequent domains in the domain in the redirection list to the domain alloww list.
+     */
+    FirewallDomainRedirectionAction?: FirewallDomainRedirectionAction;
+    /**
+     *  The DNS query type you want the rule to evaluate. Allowed values are;     A: Returns an IPv4 address.   AAAA: Returns an Ipv6 address.   CAA: Restricts CAs that can create SSL/TLS certifications for the domain.   CNAME: Returns another domain name.   DS: Record that identifies the DNSSEC signing key of a delegated zone.   MX: Specifies mail servers.   NAPTR: Regular-expression-based rewriting of domain names.   NS: Authoritative name servers.   PTR: Maps an IP address to a domain name.   SOA: Start of authority record for the zone.   SPF: Lists the servers authorized to send emails from a domain.   SRV: Application specific values that identify servers.   TXT: Verifies email senders and application-specific values.   A query type you define by using the DNS type ID, for example 28 for AAAA. The values must be defined as TYPENUMBER, where the NUMBER can be 1-65334, for example, TYPE28. For more information, see List of DNS record types.  
      */
     Qtype?: Qtype;
   }
@@ -2637,7 +2646,11 @@ declare namespace Route53Resolver {
      */
     Name?: Name;
     /**
-     *  The DNS query type you want the rule to evaluate. Allowed values are;     A: Returns an IPv4 address.   AAAA: Returns an Ipv6 address.   CAA: Restricts CAs that can create SSL/TLS certifications for the domain.   CNAME: Returns another domain name.   DS: Record that identifies the DNSSEC signing key of a delegated zone.   MX: Specifies mail servers.   NAPTR: Regular-expression-based rewriting of domain names.   NS: Authoritative name servers.   PTR: Maps an IP address to a domain name.   SOA: Start of authority record for the zone.   SPF: Lists the servers authorized to send emails from a domain.   SRV: Application specific values that identify servers.   TXT: Verifies email senders and application-specific values.  
+     *  How you want the the rule to evaluate DNS redirection in the DNS redirection chain, such as CNAME, DNAME, ot ALIAS.   Inspect_Redirection_Domain (Default) inspects all domains in the redirection chain. The individual domains in the redirection chain must be added to the allow domain list.  Trust_Redirection_Domain  inspects only the first domain in the redirection chain. You don't need to add the subsequent domains in the domain in the redirection list to the domain alloww list.
+     */
+    FirewallDomainRedirectionAction?: FirewallDomainRedirectionAction;
+    /**
+     *  The DNS query type you want the rule to evaluate. Allowed values are;     A: Returns an IPv4 address.   AAAA: Returns an Ipv6 address.   CAA: Restricts CAs that can create SSL/TLS certifications for the domain.   CNAME: Returns another domain name.   DS: Record that identifies the DNSSEC signing key of a delegated zone.   MX: Specifies mail servers.   NAPTR: Regular-expression-based rewriting of domain names.   NS: Authoritative name servers.   PTR: Maps an IP address to a domain name.   SOA: Start of authority record for the zone.   SPF: Lists the servers authorized to send emails from a domain.   SRV: Application specific values that identify servers.   TXT: Verifies email senders and application-specific values.   A query type you define by using the DNS type ID, for example 28 for AAAA. The values must be defined as TYPENUMBER, where the NUMBER can be 1-65334, for example, TYPE28. For more information, see List of DNS record types.  
      */
     Qtype?: Qtype;
   }

package/clients/sagemaker.d.ts

@@ -6450,6 +6450,10 @@ declare namespace SageMaker {
      * Contains information about the infrastructure health check configuration for the training job.
      */
     InfraCheckConfig?: InfraCheckConfig;
+    /**
+     * Contains information about attribute-based access control (ABAC) for the training job.
+     */
+    SessionChainingConfig?: SessionChainingConfig;
   }
   export interface CreateTrainingJobResponse {
     /**
@@ -11607,6 +11611,7 @@ declare namespace SageMaker {
   }
   export interface EnableSagemakerServicecatalogPortfolioOutput {
   }
+  export type EnableSessionTagChaining = boolean;
   export interface Endpoint {
     /**
      * The name of the endpoint.
@@ -20100,7 +20105,7 @@ declare namespace SageMaker {
      */
     KmsKeyId?: KmsKeyId;
   }
-  export type ProductionVariantInstanceType = "ml.t2.medium"|"ml.t2.large"|"ml.t2.xlarge"|"ml.t2.2xlarge"|"ml.m4.xlarge"|"ml.m4.2xlarge"|"ml.m4.4xlarge"|"ml.m4.10xlarge"|"ml.m4.16xlarge"|"ml.m5.large"|"ml.m5.xlarge"|"ml.m5.2xlarge"|"ml.m5.4xlarge"|"ml.m5.12xlarge"|"ml.m5.24xlarge"|"ml.m5d.large"|"ml.m5d.xlarge"|"ml.m5d.2xlarge"|"ml.m5d.4xlarge"|"ml.m5d.12xlarge"|"ml.m5d.24xlarge"|"ml.c4.large"|"ml.c4.xlarge"|"ml.c4.2xlarge"|"ml.c4.4xlarge"|"ml.c4.8xlarge"|"ml.p2.xlarge"|"ml.p2.8xlarge"|"ml.p2.16xlarge"|"ml.p3.2xlarge"|"ml.p3.8xlarge"|"ml.p3.16xlarge"|"ml.c5.large"|"ml.c5.xlarge"|"ml.c5.2xlarge"|"ml.c5.4xlarge"|"ml.c5.9xlarge"|"ml.c5.18xlarge"|"ml.c5d.large"|"ml.c5d.xlarge"|"ml.c5d.2xlarge"|"ml.c5d.4xlarge"|"ml.c5d.9xlarge"|"ml.c5d.18xlarge"|"ml.g4dn.xlarge"|"ml.g4dn.2xlarge"|"ml.g4dn.4xlarge"|"ml.g4dn.8xlarge"|"ml.g4dn.12xlarge"|"ml.g4dn.16xlarge"|"ml.r5.large"|"ml.r5.xlarge"|"ml.r5.2xlarge"|"ml.r5.4xlarge"|"ml.r5.12xlarge"|"ml.r5.24xlarge"|"ml.r5d.large"|"ml.r5d.xlarge"|"ml.r5d.2xlarge"|"ml.r5d.4xlarge"|"ml.r5d.12xlarge"|"ml.r5d.24xlarge"|"ml.inf1.xlarge"|"ml.inf1.2xlarge"|"ml.inf1.6xlarge"|"ml.inf1.24xlarge"|"ml.dl1.24xlarge"|"ml.c6i.large"|"ml.c6i.xlarge"|"ml.c6i.2xlarge"|"ml.c6i.4xlarge"|"ml.c6i.8xlarge"|"ml.c6i.12xlarge"|"ml.c6i.16xlarge"|"ml.c6i.24xlarge"|"ml.c6i.32xlarge"|"ml.g5.xlarge"|"ml.g5.2xlarge"|"ml.g5.4xlarge"|"ml.g5.8xlarge"|"ml.g5.12xlarge"|"ml.g5.16xlarge"|"ml.g5.24xlarge"|"ml.g5.48xlarge"|"ml.p4d.24xlarge"|"ml.c7g.large"|"ml.c7g.xlarge"|"ml.c7g.2xlarge"|"ml.c7g.4xlarge"|"ml.c7g.8xlarge"|"ml.c7g.12xlarge"|"ml.c7g.16xlarge"|"ml.m6g.large"|"ml.m6g.xlarge"|"ml.m6g.2xlarge"|"ml.m6g.4xlarge"|"ml.m6g.8xlarge"|"ml.m6g.12xlarge"|"ml.m6g.16xlarge"|"ml.m6gd.large"|"ml.m6gd.xlarge"|"ml.m6gd.2xlarge"|"ml.m6gd.4xlarge"|"ml.m6gd.8xlarge"|"ml.m6gd.12xlarge"|"ml.m6gd.16xlarge"|"ml.c6g.large"|"ml.c6g.xlarge"|"ml.c6g.2xlarge"|"ml.c6g.4xlarge"|"ml.c6g.8xlarge"|"ml.c6g.12xlarge"|"ml.c6g.16xlarge"|"ml.c6gd.large"|"ml.c6gd.xlarge"|"ml.c6gd.2xlarge"|"ml.c6gd.4xlarge"|"ml.c6gd.8xlarge"|"ml.c6gd.12xlarge"|"ml.c6gd.16xlarge"|"ml.c6gn.large"|"ml.c6gn.xlarge"|"ml.c6gn.2xlarge"|"ml.c6gn.4xlarge"|"ml.c6gn.8xlarge"|"ml.c6gn.12xlarge"|"ml.c6gn.16xlarge"|"ml.r6g.large"|"ml.r6g.xlarge"|"ml.r6g.2xlarge"|"ml.r6g.4xlarge"|"ml.r6g.8xlarge"|"ml.r6g.12xlarge"|"ml.r6g.16xlarge"|"ml.r6gd.large"|"ml.r6gd.xlarge"|"ml.r6gd.2xlarge"|"ml.r6gd.4xlarge"|"ml.r6gd.8xlarge"|"ml.r6gd.12xlarge"|"ml.r6gd.16xlarge"|"ml.p4de.24xlarge"|"ml.trn1.2xlarge"|"ml.trn1.32xlarge"|"ml.trn1n.32xlarge"|"ml.inf2.xlarge"|"ml.inf2.8xlarge"|"ml.inf2.24xlarge"|"ml.inf2.48xlarge"|"ml.p5.48xlarge"|"ml.m7i.large"|"ml.m7i.xlarge"|"ml.m7i.2xlarge"|"ml.m7i.4xlarge"|"ml.m7i.8xlarge"|"ml.m7i.12xlarge"|"ml.m7i.16xlarge"|"ml.m7i.24xlarge"|"ml.m7i.48xlarge"|"ml.c7i.large"|"ml.c7i.xlarge"|"ml.c7i.2xlarge"|"ml.c7i.4xlarge"|"ml.c7i.8xlarge"|"ml.c7i.12xlarge"|"ml.c7i.16xlarge"|"ml.c7i.24xlarge"|"ml.c7i.48xlarge"|"ml.r7i.large"|"ml.r7i.xlarge"|"ml.r7i.2xlarge"|"ml.r7i.4xlarge"|"ml.r7i.8xlarge"|"ml.r7i.12xlarge"|"ml.r7i.16xlarge"|"ml.r7i.24xlarge"|"ml.r7i.48xlarge"|string;
+  export type ProductionVariantInstanceType = "ml.t2.medium"|"ml.t2.large"|"ml.t2.xlarge"|"ml.t2.2xlarge"|"ml.m4.xlarge"|"ml.m4.2xlarge"|"ml.m4.4xlarge"|"ml.m4.10xlarge"|"ml.m4.16xlarge"|"ml.m5.large"|"ml.m5.xlarge"|"ml.m5.2xlarge"|"ml.m5.4xlarge"|"ml.m5.12xlarge"|"ml.m5.24xlarge"|"ml.m5d.large"|"ml.m5d.xlarge"|"ml.m5d.2xlarge"|"ml.m5d.4xlarge"|"ml.m5d.12xlarge"|"ml.m5d.24xlarge"|"ml.c4.large"|"ml.c4.xlarge"|"ml.c4.2xlarge"|"ml.c4.4xlarge"|"ml.c4.8xlarge"|"ml.p2.xlarge"|"ml.p2.8xlarge"|"ml.p2.16xlarge"|"ml.p3.2xlarge"|"ml.p3.8xlarge"|"ml.p3.16xlarge"|"ml.c5.large"|"ml.c5.xlarge"|"ml.c5.2xlarge"|"ml.c5.4xlarge"|"ml.c5.9xlarge"|"ml.c5.18xlarge"|"ml.c5d.large"|"ml.c5d.xlarge"|"ml.c5d.2xlarge"|"ml.c5d.4xlarge"|"ml.c5d.9xlarge"|"ml.c5d.18xlarge"|"ml.g4dn.xlarge"|"ml.g4dn.2xlarge"|"ml.g4dn.4xlarge"|"ml.g4dn.8xlarge"|"ml.g4dn.12xlarge"|"ml.g4dn.16xlarge"|"ml.r5.large"|"ml.r5.xlarge"|"ml.r5.2xlarge"|"ml.r5.4xlarge"|"ml.r5.12xlarge"|"ml.r5.24xlarge"|"ml.r5d.large"|"ml.r5d.xlarge"|"ml.r5d.2xlarge"|"ml.r5d.4xlarge"|"ml.r5d.12xlarge"|"ml.r5d.24xlarge"|"ml.inf1.xlarge"|"ml.inf1.2xlarge"|"ml.inf1.6xlarge"|"ml.inf1.24xlarge"|"ml.dl1.24xlarge"|"ml.c6i.large"|"ml.c6i.xlarge"|"ml.c6i.2xlarge"|"ml.c6i.4xlarge"|"ml.c6i.8xlarge"|"ml.c6i.12xlarge"|"ml.c6i.16xlarge"|"ml.c6i.24xlarge"|"ml.c6i.32xlarge"|"ml.g5.xlarge"|"ml.g5.2xlarge"|"ml.g5.4xlarge"|"ml.g5.8xlarge"|"ml.g5.12xlarge"|"ml.g5.16xlarge"|"ml.g5.24xlarge"|"ml.g5.48xlarge"|"ml.g6.xlarge"|"ml.g6.2xlarge"|"ml.g6.4xlarge"|"ml.g6.8xlarge"|"ml.g6.12xlarge"|"ml.g6.16xlarge"|"ml.g6.24xlarge"|"ml.g6.48xlarge"|"ml.p4d.24xlarge"|"ml.c7g.large"|"ml.c7g.xlarge"|"ml.c7g.2xlarge"|"ml.c7g.4xlarge"|"ml.c7g.8xlarge"|"ml.c7g.12xlarge"|"ml.c7g.16xlarge"|"ml.m6g.large"|"ml.m6g.xlarge"|"ml.m6g.2xlarge"|"ml.m6g.4xlarge"|"ml.m6g.8xlarge"|"ml.m6g.12xlarge"|"ml.m6g.16xlarge"|"ml.m6gd.large"|"ml.m6gd.xlarge"|"ml.m6gd.2xlarge"|"ml.m6gd.4xlarge"|"ml.m6gd.8xlarge"|"ml.m6gd.12xlarge"|"ml.m6gd.16xlarge"|"ml.c6g.large"|"ml.c6g.xlarge"|"ml.c6g.2xlarge"|"ml.c6g.4xlarge"|"ml.c6g.8xlarge"|"ml.c6g.12xlarge"|"ml.c6g.16xlarge"|"ml.c6gd.large"|"ml.c6gd.xlarge"|"ml.c6gd.2xlarge"|"ml.c6gd.4xlarge"|"ml.c6gd.8xlarge"|"ml.c6gd.12xlarge"|"ml.c6gd.16xlarge"|"ml.c6gn.large"|"ml.c6gn.xlarge"|"ml.c6gn.2xlarge"|"ml.c6gn.4xlarge"|"ml.c6gn.8xlarge"|"ml.c6gn.12xlarge"|"ml.c6gn.16xlarge"|"ml.r6g.large"|"ml.r6g.xlarge"|"ml.r6g.2xlarge"|"ml.r6g.4xlarge"|"ml.r6g.8xlarge"|"ml.r6g.12xlarge"|"ml.r6g.16xlarge"|"ml.r6gd.large"|"ml.r6gd.xlarge"|"ml.r6gd.2xlarge"|"ml.r6gd.4xlarge"|"ml.r6gd.8xlarge"|"ml.r6gd.12xlarge"|"ml.r6gd.16xlarge"|"ml.p4de.24xlarge"|"ml.trn1.2xlarge"|"ml.trn1.32xlarge"|"ml.trn1n.32xlarge"|"ml.inf2.xlarge"|"ml.inf2.8xlarge"|"ml.inf2.24xlarge"|"ml.inf2.48xlarge"|"ml.p5.48xlarge"|"ml.m7i.large"|"ml.m7i.xlarge"|"ml.m7i.2xlarge"|"ml.m7i.4xlarge"|"ml.m7i.8xlarge"|"ml.m7i.12xlarge"|"ml.m7i.16xlarge"|"ml.m7i.24xlarge"|"ml.m7i.48xlarge"|"ml.c7i.large"|"ml.c7i.xlarge"|"ml.c7i.2xlarge"|"ml.c7i.4xlarge"|"ml.c7i.8xlarge"|"ml.c7i.12xlarge"|"ml.c7i.16xlarge"|"ml.c7i.24xlarge"|"ml.c7i.48xlarge"|"ml.r7i.large"|"ml.r7i.xlarge"|"ml.r7i.2xlarge"|"ml.r7i.4xlarge"|"ml.r7i.8xlarge"|"ml.r7i.12xlarge"|"ml.r7i.16xlarge"|"ml.r7i.24xlarge"|"ml.r7i.48xlarge"|string;
   export type ProductionVariantList = ProductionVariant[];
   export interface ProductionVariantManagedInstanceScaling {
     /**
@@ -21462,6 +21467,12 @@ declare namespace SageMaker {
      */
     ProvisioningParameters?: ProvisioningParameters;
   }
+  export interface SessionChainingConfig {
+    /**
+     * Set to True to allow SageMaker to extract session tags from a training job creation role and reuse these tags when assuming the training job execution role.
+     */
+    EnableSessionTagChaining?: EnableSessionTagChaining;
+  }
   export type SessionExpirationDurationInSeconds = number;
   export interface ShadowModeConfig {
     /**

package/clients/signer.d.ts

@@ -141,11 +141,11 @@ declare class Signer extends Service {
    */
   signPayload(callback?: (err: AWSError, data: Signer.Types.SignPayloadResponse) => void): Request<Signer.Types.SignPayloadResponse, AWSError>;
   /**
-   * Initiates a signing job to be performed on the code provided. Signing jobs are viewable by the ListSigningJobs operation for two years after they are performed. Note the following requirements:     You must create an Amazon S3 source bucket. For more information, see Creating a Bucket in the Amazon S3 Getting Started Guide.    Your S3 source bucket must be version enabled.   You must create an S3 destination bucket. AWS Signer uses your S3 destination bucket to write your signed code.   You specify the name of the source and destination buckets when calling the StartSigningJob operation.   You must also specify a request token that identifies your request to Signer.   You can call the DescribeSigningJob and the ListSigningJobs actions after you call StartSigningJob. For a Java example that shows how to use this action, see StartSigningJob.
+   * Initiates a signing job to be performed on the code provided. Signing jobs are viewable by the ListSigningJobs operation for two years after they are performed. Note the following requirements:     You must create an Amazon S3 source bucket. For more information, see Creating a Bucket in the Amazon S3 Getting Started Guide.    Your S3 source bucket must be version enabled.   You must create an S3 destination bucket. AWS Signer uses your S3 destination bucket to write your signed code.   You specify the name of the source and destination buckets when calling the StartSigningJob operation.   You must ensure the S3 buckets are from the same Region as the signing profile. Cross-Region signing isn't supported.   You must also specify a request token that identifies your request to Signer.   You can call the DescribeSigningJob and the ListSigningJobs actions after you call StartSigningJob. For a Java example that shows how to use this action, see StartSigningJob.
    */
   startSigningJob(params: Signer.Types.StartSigningJobRequest, callback?: (err: AWSError, data: Signer.Types.StartSigningJobResponse) => void): Request<Signer.Types.StartSigningJobResponse, AWSError>;
   /**
-   * Initiates a signing job to be performed on the code provided. Signing jobs are viewable by the ListSigningJobs operation for two years after they are performed. Note the following requirements:     You must create an Amazon S3 source bucket. For more information, see Creating a Bucket in the Amazon S3 Getting Started Guide.    Your S3 source bucket must be version enabled.   You must create an S3 destination bucket. AWS Signer uses your S3 destination bucket to write your signed code.   You specify the name of the source and destination buckets when calling the StartSigningJob operation.   You must also specify a request token that identifies your request to Signer.   You can call the DescribeSigningJob and the ListSigningJobs actions after you call StartSigningJob. For a Java example that shows how to use this action, see StartSigningJob.
+   * Initiates a signing job to be performed on the code provided. Signing jobs are viewable by the ListSigningJobs operation for two years after they are performed. Note the following requirements:     You must create an Amazon S3 source bucket. For more information, see Creating a Bucket in the Amazon S3 Getting Started Guide.    Your S3 source bucket must be version enabled.   You must create an S3 destination bucket. AWS Signer uses your S3 destination bucket to write your signed code.   You specify the name of the source and destination buckets when calling the StartSigningJob operation.   You must ensure the S3 buckets are from the same Region as the signing profile. Cross-Region signing isn't supported.   You must also specify a request token that identifies your request to Signer.   You can call the DescribeSigningJob and the ListSigningJobs actions after you call StartSigningJob. For a Java example that shows how to use this action, see StartSigningJob.
    */
   startSigningJob(callback?: (err: AWSError, data: Signer.Types.StartSigningJobResponse) => void): Request<Signer.Types.StartSigningJobResponse, AWSError>;
   /**
@@ -185,7 +185,7 @@ declare namespace Signer {
      */
     profileVersion?: ProfileVersion;
     /**
-     * The AWS Signer action permitted as part of cross-account permissions.
+     * For cross-account signing. Grant a designated account permission to perform one or more of the following actions. Each action is associated with a specific API's operations. For more information about cross-account signing, see Using cross-account signing with signing profiles in the AWS Signer Developer Guide. You can designate the following actions to an account.    signer:StartSigningJob. This action isn't supported for container image workflows. For details, see StartSigningJob.    signer:SignPayload. This action isn't supported for AWS Lambda workflows. For details, see SignPayload     signer:GetSigningProfile. For details, see GetSigningProfile.    signer:RevokeSignature. For details, see RevokeSignature.  
      */
     action: String;
     /**

package/clients/timestreamquery.d.ts

@@ -35,6 +35,14 @@ declare class TimestreamQuery extends Service {
    * Deletes a given scheduled query. This is an irreversible operation. 
    */
   deleteScheduledQuery(callback?: (err: AWSError, data: {}) => void): Request<{}, AWSError>;
+  /**
+   * Describes the settings for your account that include the query pricing model and the configured maximum TCUs the service can use for your query workload. You're charged only for the duration of compute units used for your workloads.
+   */
+  describeAccountSettings(params: TimestreamQuery.Types.DescribeAccountSettingsRequest, callback?: (err: AWSError, data: TimestreamQuery.Types.DescribeAccountSettingsResponse) => void): Request<TimestreamQuery.Types.DescribeAccountSettingsResponse, AWSError>;
+  /**
+   * Describes the settings for your account that include the query pricing model and the configured maximum TCUs the service can use for your query workload. You're charged only for the duration of compute units used for your workloads.
+   */
+  describeAccountSettings(callback?: (err: AWSError, data: TimestreamQuery.Types.DescribeAccountSettingsResponse) => void): Request<TimestreamQuery.Types.DescribeAccountSettingsResponse, AWSError>;
   /**
    * DescribeEndpoints returns a list of available endpoints to make Timestream API calls against. This API is available through both Write and Query. Because the Timestream SDKs are designed to transparently work with the service’s architecture, including the management and mapping of the service endpoints, it is not recommended that you use this API unless:   You are using VPC endpoints (Amazon Web Services PrivateLink) with Timestream     Your application uses a programming language that does not yet have SDK support   You require better control over the client-side implementation   For detailed information on how and when to use and implement DescribeEndpoints, see The Endpoint Discovery Pattern.
    */
@@ -107,6 +115,14 @@ declare class TimestreamQuery extends Service {
    * Removes the association of tags from a Timestream query resource.
    */
   untagResource(callback?: (err: AWSError, data: TimestreamQuery.Types.UntagResourceResponse) => void): Request<TimestreamQuery.Types.UntagResourceResponse, AWSError>;
+  /**
+   * Transitions your account to use TCUs for query pricing and modifies the maximum query compute units that you've configured. If you reduce the value of MaxQueryTCU to a desired configuration, the new value can take up to 24 hours to be effective.  After you've transitioned your account to use TCUs for query pricing, you can't transition to using bytes scanned for query pricing. 
+   */
+  updateAccountSettings(params: TimestreamQuery.Types.UpdateAccountSettingsRequest, callback?: (err: AWSError, data: TimestreamQuery.Types.UpdateAccountSettingsResponse) => void): Request<TimestreamQuery.Types.UpdateAccountSettingsResponse, AWSError>;
+  /**
+   * Transitions your account to use TCUs for query pricing and modifies the maximum query compute units that you've configured. If you reduce the value of MaxQueryTCU to a desired configuration, the new value can take up to 24 hours to be effective.  After you've transitioned your account to use TCUs for query pricing, you can't transition to using bytes scanned for query pricing. 
+   */
+  updateAccountSettings(callback?: (err: AWSError, data: TimestreamQuery.Types.UpdateAccountSettingsResponse) => void): Request<TimestreamQuery.Types.UpdateAccountSettingsResponse, AWSError>;
   /**
    * Update a scheduled query.
    */
@@ -220,6 +236,18 @@ declare namespace TimestreamQuery {
      */
     ScheduledQueryArn: AmazonResourceName;
   }
+  export interface DescribeAccountSettingsRequest {
+  }
+  export interface DescribeAccountSettingsResponse {
+    /**
+     * The maximum number of Timestream compute units (TCUs) the service will use at any point in time to serve your queries.
+     */
+    MaxQueryTCU?: MaxQueryCapacity;
+    /**
+     * The pricing model for queries in your account.
+     */
+    QueryPricingModel?: QueryPricingModel;
+  }
   export interface DescribeEndpointsRequest {
   }
   export interface DescribeEndpointsResponse {
@@ -304,6 +332,10 @@ declare namespace TimestreamQuery {
      * Bytes metered for a single scheduled query run.
      */
     BytesMetered?: Long;
+    /**
+     * Bytes scanned for a single scheduled query run.
+     */
+    CumulativeBytesScanned?: Long;
     /**
      * The number of records ingested for a single scheduled query run. 
      */
@@ -358,6 +390,7 @@ declare namespace TimestreamQuery {
     NextToken?: NextTagsForResourceResultsToken;
   }
   export type Long = number;
+  export type MaxQueryCapacity = number;
   export type MaxQueryResults = number;
   export type MaxScheduledQueriesResults = number;
   export type MaxTagsForResourceResult = number;
@@ -453,6 +486,7 @@ declare namespace TimestreamQuery {
     Parameters: ParameterMappingList;
   }
   export type QueryId = string;
+  export type QueryPricingModel = "BYTES_SCANNED"|"COMPUTE_UNITS"|string;
   export interface QueryRequest {
     /**
      *  The query to be run by Timestream. 
@@ -835,6 +869,26 @@ declare namespace TimestreamQuery {
   }
   export interface UntagResourceResponse {
   }
+  export interface UpdateAccountSettingsRequest {
+    /**
+     * The maximum number of compute units the service will use at any point in time to serve your queries. To run queries, you must set a minimum capacity of 4 TCU. You can set the maximum number of TCU in multiples of 4, for example, 4, 8, 16, 32, and so on. The maximum value supported for MaxQueryTCU is 1000. To request an increase to this soft limit, contact Amazon Web Services Support. For information about the default quota for maxQueryTCU, see Default quotas.
+     */
+    MaxQueryTCU?: MaxQueryCapacity;
+    /**
+     * The pricing model for queries in an account.
+     */
+    QueryPricingModel?: QueryPricingModel;
+  }
+  export interface UpdateAccountSettingsResponse {
+    /**
+     * The configured maximum number of compute units the service will use at any point in time to serve your queries.
+     */
+    MaxQueryTCU?: MaxQueryCapacity;
+    /**
+     * The pricing model for an account.
+     */
+    QueryPricingModel?: QueryPricingModel;
+  }
   export interface UpdateScheduledQueryRequest {
     /**
      * ARN of the scheuled query.

package/clients/transcribeservice.d.ts

@@ -378,6 +378,7 @@ declare namespace TranscribeService {
   export type BaseModelName = "NarrowBand"|"WideBand"|string;
   export type Boolean = boolean;
   export type CLMLanguageCode = "en-US"|"hi-IN"|"es-US"|"en-GB"|"en-AU"|"de-DE"|"ja-JP"|string;
+  export type CallAnalyticsFeature = "GENERATIVE_SUMMARIZATION"|string;
   export interface CallAnalyticsJob {
     /**
      * The name of the Call Analytics job. Job names are case sensitive and must be unique within an Amazon Web Services account.
@@ -387,6 +388,10 @@ declare namespace TranscribeService {
      * Provides the status of the specified Call Analytics job. If the status is COMPLETED, the job is finished and you can find the results at the location specified in TranscriptFileUri (or RedactedTranscriptFileUri, if you requested transcript redaction). If the status is FAILED, FailureReason provides details on why your transcription job failed.
      */
     CallAnalyticsJobStatus?: CallAnalyticsJobStatus;
+    /**
+     * Provides detailed information about a call analytics job, including information about skipped analytics features.
+     */
+    CallAnalyticsJobDetails?: CallAnalyticsJobDetails;
     /**
      * The language code used to create your Call Analytics job. For a list of supported languages and their associated language codes, refer to the Supported languages table. If you do not know the language spoken in your media file, you can omit this field and let Amazon Transcribe automatically identify the language of your media. To improve the accuracy of language identification, you can include several language codes and Amazon Transcribe chooses the closest match for your transcription.
      */
@@ -437,6 +442,12 @@ declare namespace TranscribeService {
      */
     ChannelDefinitions?: ChannelDefinitions;
   }
+  export interface CallAnalyticsJobDetails {
+    /**
+     * Contains information about any skipped analytics features during the analysis of a call analytics job. This array lists all the analytics features that were skipped, along with their corresponding reason code and message.
+     */
+    Skipped?: CallAnalyticsSkippedFeatureList;
+  }
   export type CallAnalyticsJobName = string;
   export interface CallAnalyticsJobSettings {
     /**
@@ -496,11 +507,31 @@ declare namespace TranscribeService {
      * Provides the status of your Call Analytics job. If the status is COMPLETED, the job is finished and you can find the results at the location specified in TranscriptFileUri (or RedactedTranscriptFileUri, if you requested transcript redaction). If the status is FAILED, FailureReason provides details on why your transcription job failed.
      */
     CallAnalyticsJobStatus?: CallAnalyticsJobStatus;
+    /**
+     * Provides detailed information about a call analytics job, including information about skipped analytics features.
+     */
+    CallAnalyticsJobDetails?: CallAnalyticsJobDetails;
     /**
      * If CallAnalyticsJobStatus is FAILED, FailureReason contains information about why the Call Analytics job failed. See also: Common Errors.
      */
     FailureReason?: FailureReason;
   }
+  export interface CallAnalyticsSkippedFeature {
+    /**
+     * Indicates the type of analytics feature that was skipped during the analysis of a call analytics job.
+     */
+    Feature?: CallAnalyticsFeature;
+    /**
+     * Provides a code indicating the reason why a specific analytics feature was skipped during the analysis of a call analytics job.
+     */
+    ReasonCode?: CallAnalyticsSkippedReasonCode;
+    /**
+     * Contains additional information or a message explaining why a specific analytics feature was skipped during the analysis of a call analytics job.
+     */
+    Message?: String;
+  }
+  export type CallAnalyticsSkippedFeatureList = CallAnalyticsSkippedFeature[];
+  export type CallAnalyticsSkippedReasonCode = "INSUFFICIENT_CONVERSATION_CONTENT"|"FAILED_SAFETY_GUIDELINES"|string;
   export type CategoryName = string;
   export interface CategoryProperties {
     /**
@@ -2015,6 +2046,7 @@ declare namespace TranscribeService {
      */
     TranscriptionJob?: TranscriptionJob;
   }
+  export type String = string;
   export type StringTargetList = NonEmptyString[];
   export type SubtitleFileUris = Uri[];
   export type SubtitleFormat = "vtt"|"srt"|string;