aws-sdk 2.1651.0 → 2.1653.0

package/clients/connect.d.ts

@@ -579,6 +579,14 @@ declare class Connect extends Service {
    * This API is in preview release for Amazon Connect and is subject to change. Describes an agent status.
    */
   describeAgentStatus(callback?: (err: AWSError, data: Connect.Types.DescribeAgentStatusResponse) => void): Request<Connect.Types.DescribeAgentStatusResponse, AWSError>;
+  /**
+   * This API is in preview release for Amazon Connect and is subject to change. To request access to this API, contact Amazon Web Services Support. Describes the target authentication profile.
+   */
+  describeAuthenticationProfile(params: Connect.Types.DescribeAuthenticationProfileRequest, callback?: (err: AWSError, data: Connect.Types.DescribeAuthenticationProfileResponse) => void): Request<Connect.Types.DescribeAuthenticationProfileResponse, AWSError>;
+  /**
+   * This API is in preview release for Amazon Connect and is subject to change. To request access to this API, contact Amazon Web Services Support. Describes the target authentication profile.
+   */
+  describeAuthenticationProfile(callback?: (err: AWSError, data: Connect.Types.DescribeAuthenticationProfileResponse) => void): Request<Connect.Types.DescribeAuthenticationProfileResponse, AWSError>;
   /**
    * This API is in preview release for Amazon Connect and is subject to change. Describes the specified contact.   Contact information remains available in Amazon Connect for 24 months, and then it is deleted. Only data from November 12, 2021, and later is returned by this API. 
    */
@@ -995,6 +1003,14 @@ declare class Connect extends Service {
    * This API is in preview release for Amazon Connect and is subject to change. Returns a paginated list of all approved origins associated with the instance.
    */
   listApprovedOrigins(callback?: (err: AWSError, data: Connect.Types.ListApprovedOriginsResponse) => void): Request<Connect.Types.ListApprovedOriginsResponse, AWSError>;
+  /**
+   * This API is in preview release for Amazon Connect and is subject to change. To request access to this API, contact Amazon Web Services Support. Provides summary information about the authentication profiles in a specified Amazon Connect instance.
+   */
+  listAuthenticationProfiles(params: Connect.Types.ListAuthenticationProfilesRequest, callback?: (err: AWSError, data: Connect.Types.ListAuthenticationProfilesResponse) => void): Request<Connect.Types.ListAuthenticationProfilesResponse, AWSError>;
+  /**
+   * This API is in preview release for Amazon Connect and is subject to change. To request access to this API, contact Amazon Web Services Support. Provides summary information about the authentication profiles in a specified Amazon Connect instance.
+   */
+  listAuthenticationProfiles(callback?: (err: AWSError, data: Connect.Types.ListAuthenticationProfilesResponse) => void): Request<Connect.Types.ListAuthenticationProfilesResponse, AWSError>;
   /**
    * This API is in preview release for Amazon Connect and is subject to change. For the specified version of Amazon Lex, returns a paginated list of all the Amazon Lex bots currently associated with the instance. Use this API to returns both Amazon Lex V1 and V2 bots.
    */
@@ -1500,11 +1516,11 @@ declare class Connect extends Service {
    */
   sendChatIntegrationEvent(callback?: (err: AWSError, data: Connect.Types.SendChatIntegrationEventResponse) => void): Request<Connect.Types.SendChatIntegrationEventResponse, AWSError>;
   /**
-   * Provides a pre-signed Amazon S3 URL in response for uploading your content.  You may only use this API to upload attachments to a Connect Case. 
+   * Provides a pre-signed Amazon S3 URL in response for uploading your content.  You may only use this API to upload attachments to an Amazon Connect Case. 
    */
   startAttachedFileUpload(params: Connect.Types.StartAttachedFileUploadRequest, callback?: (err: AWSError, data: Connect.Types.StartAttachedFileUploadResponse) => void): Request<Connect.Types.StartAttachedFileUploadResponse, AWSError>;
   /**
-   * Provides a pre-signed Amazon S3 URL in response for uploading your content.  You may only use this API to upload attachments to a Connect Case. 
+   * Provides a pre-signed Amazon S3 URL in response for uploading your content.  You may only use this API to upload attachments to an Amazon Connect Case. 
    */
   startAttachedFileUpload(callback?: (err: AWSError, data: Connect.Types.StartAttachedFileUploadResponse) => void): Request<Connect.Types.StartAttachedFileUploadResponse, AWSError>;
   /**
@@ -1651,6 +1667,14 @@ declare class Connect extends Service {
    * This API is in preview release for Amazon Connect and is subject to change. Updates agent status.
    */
   updateAgentStatus(callback?: (err: AWSError, data: {}) => void): Request<{}, AWSError>;
+  /**
+   * This API is in preview release for Amazon Connect and is subject to change. To request access to this API, contact Amazon Web Services Support. Updates the selected authentication profile.
+   */
+  updateAuthenticationProfile(params: Connect.Types.UpdateAuthenticationProfileRequest, callback?: (err: AWSError, data: {}) => void): Request<{}, AWSError>;
+  /**
+   * This API is in preview release for Amazon Connect and is subject to change. To request access to this API, contact Amazon Web Services Support. Updates the selected authentication profile.
+   */
+  updateAuthenticationProfile(callback?: (err: AWSError, data: {}) => void): Request<{}, AWSError>;
   /**
    * This API is in preview release for Amazon Connect and is subject to change. Adds or updates user-defined contact information associated with the specified contact. At least one field to be updated must be present in the request.  You can add or update user-defined contact information for both ongoing and completed contacts. 
    */
@@ -2015,6 +2039,7 @@ declare class Connect extends Service {
 declare namespace Connect {
   export type ARN = string;
   export type AWSAccountId = string;
+  export type AccessTokenDuration = number;
   export type ActionSummaries = ActionSummary[];
   export interface ActionSummary {
     /**
@@ -2673,6 +2698,86 @@ declare namespace Connect {
     PotentialQualityIssues?: PotentialAudioQualityIssues;
   }
   export type AudioQualityScore = number;
+  export interface AuthenticationProfile {
+    /**
+     * A unique identifier for the authentication profile. 
+     */
+    Id?: AuthenticationProfileId;
+    /**
+     * The Amazon Resource Name (ARN) for the authentication profile.
+     */
+    Arn?: ARN;
+    /**
+     * The name for the authentication profile.
+     */
+    Name?: AuthenticationProfileName;
+    /**
+     * The description for the authentication profile.
+     */
+    Description?: AuthenticationProfileDescription;
+    /**
+     * A list of IP address range strings that are allowed to access the Amazon Connect instance. For more information about how to configure IP addresses, see Configure IP address based access control in the Amazon Connect Administrator Guide.
+     */
+    AllowedIps?: IpCidrList;
+    /**
+     * A list of IP address range strings that are blocked from accessing the Amazon Connect instance. For more information about how to configure IP addresses, see Configure IP address based access control in the Amazon Connect Administrator Guide.
+     */
+    BlockedIps?: IpCidrList;
+    /**
+     * Shows whether the authentication profile is the default authentication profile for the Amazon Connect instance. The default authentication profile applies to all agents in an Amazon Connect instance, unless overridden by another authentication profile.
+     */
+    IsDefault?: Boolean;
+    /**
+     * The timestamp when the authentication profile was created.
+     */
+    CreatedTime?: Timestamp;
+    /**
+     * The timestamp when the authentication profile was last modified.
+     */
+    LastModifiedTime?: Timestamp;
+    /**
+     * The Amazon Web Services Region where the authentication profile was last modified.
+     */
+    LastModifiedRegion?: RegionName;
+    /**
+     * The short lived session duration configuration for users logged in to Amazon Connect, in minutes. This value determines the maximum possible time before an agent is authenticated. For more information, see Configure the session duration in the Amazon Connect Administrator Guide.
+     */
+    PeriodicSessionDuration?: AccessTokenDuration;
+    /**
+     * The long lived session duration for users logged in to Amazon Connect, in minutes. After this time period, users must log in again. For more information, see Configure the session duration in the Amazon Connect Administrator Guide.
+     */
+    MaxSessionDuration?: RefreshTokenDuration;
+  }
+  export type AuthenticationProfileDescription = string;
+  export type AuthenticationProfileId = string;
+  export type AuthenticationProfileName = string;
+  export interface AuthenticationProfileSummary {
+    /**
+     * The unique identifier of the authentication profile.
+     */
+    Id?: AuthenticationProfileId;
+    /**
+     * The Amazon Resource Name (ARN) of the authentication profile summary.
+     */
+    Arn?: ARN;
+    /**
+     * The name of the authentication profile summary.
+     */
+    Name?: AuthenticationProfileName;
+    /**
+     * Shows whether the authentication profile is the default authentication profile for the Amazon Connect instance. The default authentication profile applies to all agents in an Amazon Connect instance, unless overridden by another authentication profile.
+     */
+    IsDefault?: Boolean;
+    /**
+     * The timestamp when the authentication profile summary was last modified.
+     */
+    LastModifiedTime?: Timestamp;
+    /**
+     * The Amazon Web Services Region when the authentication profile summary was last modified.
+     */
+    LastModifiedRegion?: RegionName;
+  }
+  export type AuthenticationProfileSummaryList = AuthenticationProfileSummary[];
   export type AutoAccept = boolean;
   export interface AvailableNumberSummary {
     /**
@@ -2951,7 +3056,7 @@ declare namespace Connect {
   export type ComparisonOperator = string;
   export interface CompleteAttachedFileUploadRequest {
     /**
-     * The unique identifier of the Connect instance.
+     * The unique identifier of the Amazon Connect instance.
      */
     InstanceId: InstanceId;
     /**
@@ -4740,6 +4845,22 @@ declare namespace Connect {
      */
     AgentStatus?: AgentStatus;
   }
+  export interface DescribeAuthenticationProfileRequest {
+    /**
+     * A unique identifier for the authentication profile. 
+     */
+    AuthenticationProfileId: AuthenticationProfileId;
+    /**
+     * The identifier of the Amazon Connect instance. You can find the instance ID in the Amazon Resource Name (ARN) of the instance.
+     */
+    InstanceId: InstanceId;
+  }
+  export interface DescribeAuthenticationProfileResponse {
+    /**
+     * The authentication profile object being described.
+     */
+    AuthenticationProfile?: AuthenticationProfile;
+  }
   export interface DescribeContactEvaluationRequest {
     /**
      * The identifier of the Amazon Connect instance. You can find the instance ID in the Amazon Resource Name (ARN) of the instance.
@@ -7101,6 +7222,8 @@ declare namespace Connect {
     Id?: TaskTemplateFieldIdentifier;
   }
   export type InvisibleTaskTemplateFields = InvisibleFieldInfo[];
+  export type IpCidr = string;
+  export type IpCidrList = IpCidr[];
   export type JoinToken = string;
   export type KeyId = string;
   export interface KinesisFirehoseConfig {
@@ -7237,6 +7360,30 @@ declare namespace Connect {
      */
     NextToken?: NextToken;
   }
+  export interface ListAuthenticationProfilesRequest {
+    /**
+     * The identifier of the Amazon Connect instance. You can find the instance ID in the Amazon Resource Name (ARN) of the instance.
+     */
+    InstanceId: InstanceId;
+    /**
+     * The maximum number of results to return per page.
+     */
+    MaxResults?: MaxResult1000;
+    /**
+     * The token for the next set of results. Use the value returned in the previous response in the next request to retrieve the next set of results.
+     */
+    NextToken?: NextToken;
+  }
+  export interface ListAuthenticationProfilesResponse {
+    /**
+     * A summary of a given authentication profile.
+     */
+    AuthenticationProfileSummaryList?: AuthenticationProfileSummaryList;
+    /**
+     * If there are additional results, this is the token for the next set of results.
+     */
+    NextToken?: NextToken;
+  }
   export interface ListBotsRequest {
     /**
      * The identifier of the Amazon Connect instance. You can find the instance ID in the Amazon Resource Name (ARN) of the instance.
@@ -9492,6 +9639,7 @@ declare namespace Connect {
   export type ReferenceType = "URL"|"ATTACHMENT"|"NUMBER"|"STRING"|"DATE"|"EMAIL"|string;
   export type ReferenceTypes = ReferenceType[];
   export type ReferenceValue = string;
+  export type RefreshTokenDuration = number;
   export type RegionName = string;
   export type RehydrationType = "ENTIRE_PAST_SESSION"|"FROM_SEGMENT"|string;
   export interface ReleasePhoneNumberRequest {
@@ -10018,7 +10166,7 @@ declare namespace Connect {
   }
   export interface SearchContactFlowsResponse {
     /**
-     * Information about the contact flows.
+     * Information about the flows.
      */
     ContactFlows?: ContactFlowSearchSummaryList;
     /**
@@ -10749,7 +10897,7 @@ declare namespace Connect {
      */
     ClientToken?: ClientToken;
     /**
-     * The unique identifier of the Connect instance.
+     * The unique identifier of the Amazon Connect instance.
      */
     InstanceId: InstanceId;
     /**
@@ -11073,7 +11221,7 @@ declare namespace Connect {
      */
     ClientToken?: ClientToken;
     /**
-     * The identifier of the flow for the call. To see the ContactFlowId in the Amazon Connect admin website, on the navigation menu go to Routing, Contact Flows. Choose the flow. On the flow page, under the name of the flow, choose Show additional flow information. The ContactFlowId is the last part of the ARN, shown here in bold:  arn:aws:connect:us-west-2:xxxxxxxxxxxx:instance/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/contact-flow/846ec553-a005-41c0-8341-xxxxxxxxxxxx 
+     * The identifier of the flow for the call. To see the ContactFlowId in the Amazon Connect admin website, on the navigation menu go to Routing, Flows. Choose the flow. On the flow page, under the name of the flow, choose Show additional flow information. The ContactFlowId is the last part of the ARN, shown here in bold:  arn:aws:connect:us-west-2:xxxxxxxxxxxx:instance/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/contact-flow/846ec553-a005-41c0-8341-xxxxxxxxxxxx 
      */
     ContactFlowId: ContactFlowId;
     /**
@@ -11694,6 +11842,36 @@ declare namespace Connect {
      */
     ResetOrderNumber?: Boolean;
   }
+  export interface UpdateAuthenticationProfileRequest {
+    /**
+     * A unique identifier for the authentication profile. 
+     */
+    AuthenticationProfileId: AuthenticationProfileId;
+    /**
+     * The identifier of the Amazon Connect instance. You can find the instance ID in the Amazon Resource Name (ARN) of the instance.
+     */
+    InstanceId: InstanceId;
+    /**
+     * The name for the authentication profile.
+     */
+    Name?: AuthenticationProfileName;
+    /**
+     * The description for the authentication profile.
+     */
+    Description?: AuthenticationProfileDescription;
+    /**
+     * A list of IP address range strings that are allowed to access the instance. For more information on how to configure IP addresses, seeConfigure session timeouts in the Amazon Connect Administrator Guide.
+     */
+    AllowedIps?: IpCidrList;
+    /**
+     * A list of IP address range strings that are blocked from accessing the instance. For more information on how to configure IP addresses, For more information on how to configure IP addresses, see Configure IP-based access control in the Amazon Connect Administrator Guide. 
+     */
+    BlockedIps?: IpCidrList;
+    /**
+     * The short lived session duration configuration for users logged in to Amazon Connect, in minutes. This value determines the maximum possible time before an agent is authenticated. For more information, For more information on how to configure IP addresses, see Configure session timeouts in the Amazon Connect Administrator Guide. 
+     */
+    PeriodicSessionDuration?: AccessTokenDuration;
+  }
   export interface UpdateCaseActionDefinition {
     /**
      * An array of objects with Field ID and Value data.

package/clients/ec2.d.ts

@@ -7377,7 +7377,7 @@ declare namespace EC2 {
      */
     StatusMessage?: String;
     /**
-     * The state of the address pool.
+     * The state of the address range.    advertised: The address range is being advertised to the internet by Amazon Web Services.    deprovisioned: The address range is deprovisioned.    failed-deprovision: The request to deprovision the address range was unsuccessful. Ensure that all EIPs from the range have been deallocated and try again.    failed-provision: The request to provision the address range was unsuccessful.    pending-deprovision: You’ve submitted a request to deprovision an address range and it's pending.    pending-provision: You’ve submitted a request to provision an address range and it's pending.    provisioned: The address range is provisioned and can be advertised. The range is not currently advertised.    provisioned-not-publicly-advertisable: The address range is provisioned and cannot be advertised.  
      */
     State?: ByoipCidrState;
     /**
@@ -9546,7 +9546,7 @@ declare namespace EC2 {
      */
     SecurityGroupIds?: SecurityGroupIdStringListRequest;
     /**
-     * Indicates whether your client's IP address is preserved as the source. The value is true or false.   If true, your client's IP address is used when you connect to a resource.   If false, the elastic network interface IP address is used when you connect to a resource.   Default: true 
+     * Indicates whether the client IP address is preserved as the source. The following are the possible values.    true - Use the client IP address as the source.    false - Use the network interface IP address as the source.   Default: false 
      */
     PreserveClientIp?: Boolean;
     /**
@@ -11656,7 +11656,7 @@ declare namespace EC2 {
      */
     KmsKeyId?: KmsKeyId;
     /**
-     * The Amazon Resource Name (ARN) of the Outpost.
+     * The Amazon Resource Name (ARN) of the Outpost on which to create the volume. If you intend to use a volume with an instance running on an outpost, then you must create the volume on the same outpost as the instance. You can't use a volume created in an Amazon Web Services Region with an instance on an Amazon Web Services outpost, or the other way around.
      */
     OutpostArn?: String;
     /**
@@ -18019,7 +18019,7 @@ declare namespace EC2 {
      */
     Filters?: FilterList;
     /**
-     * The volume IDs.
+     * The volume IDs. If not specified, then all volumes are included in the response.
      */
     VolumeIds?: VolumeIdStringList;
     /**
@@ -23157,7 +23157,7 @@ declare namespace EC2 {
   export type HostReservationId = string;
   export type HostReservationIdSet = HostReservationId[];
   export type HostReservationSet = HostReservation[];
-  export type HostTenancy = "dedicated"|"host"|string;
+  export type HostTenancy = "default"|"dedicated"|"host"|string;
   export type HostnameType = "ip-name"|"resource-name"|string;
   export type Hour = number;
   export type HttpTokensState = "optional"|"required"|string;
@@ -25096,7 +25096,7 @@ declare namespace EC2 {
      */
     AllowedInstanceTypes?: AllowedInstanceTypeSet;
     /**
-     * [Price protection] The price protection threshold for Spot Instances, as a percentage of an identified On-Demand price. The identified On-Demand price is the price of the lowest priced current generation C, M, or R instance type with your specified attributes. If no current generation C, M, or R instance type matches your attributes, then the identified price is from the lowest priced current generation instance types, and failing that, from the lowest priced previous generation instance types that match your attributes. When Amazon EC2 selects instance types with your attributes, it will exclude instance types whose price exceeds your specified threshold. The parameter accepts an integer, which Amazon EC2 interprets as a percentage. If you set DesiredCapacityType to vcpu or memory-mib, the price protection threshold is based on the per vCPU or per memory price instead of the per instance price.  Only one of SpotMaxPricePercentageOverLowestPrice or MaxSpotPriceAsPercentageOfOptimalOnDemandPrice can be specified. If you don't specify either, Amazon EC2 will automatically apply optimal price protection to consistently select from a wide range of instance types. To indicate no price protection threshold for Spot Instances, meaning you want to consider all instance types that match your attributes, include one of these parameters and specify a high value, such as 999999. 
+     * [Price protection] The price protection threshold for Spot Instances, as a percentage of an identified On-Demand price. The identified On-Demand price is the price of the lowest priced current generation C, M, or R instance type with your specified attributes. If no current generation C, M, or R instance type matches your attributes, then the identified price is from the lowest priced current generation instance types, and failing that, from the lowest priced previous generation instance types that match your attributes. When Amazon EC2 selects instance types with your attributes, it will exclude instance types whose price exceeds your specified threshold. The parameter accepts an integer, which Amazon EC2 interprets as a percentage. If you set TargetCapacityUnitType to vcpu or memory-mib, the price protection threshold is based on the per vCPU or per memory price instead of the per instance price.  Only one of SpotMaxPricePercentageOverLowestPrice or MaxSpotPriceAsPercentageOfOptimalOnDemandPrice can be specified. If you don't specify either, Amazon EC2 will automatically apply optimal price protection to consistently select from a wide range of instance types. To indicate no price protection threshold for Spot Instances, meaning you want to consider all instance types that match your attributes, include one of these parameters and specify a high value, such as 999999. 
      */
     MaxSpotPriceAsPercentageOfOptimalOnDemandPrice?: Integer;
   }
@@ -25194,7 +25194,7 @@ declare namespace EC2 {
      */
     AllowedInstanceTypes?: AllowedInstanceTypeSet;
     /**
-     * [Price protection] The price protection threshold for Spot Instances, as a percentage of an identified On-Demand price. The identified On-Demand price is the price of the lowest priced current generation C, M, or R instance type with your specified attributes. If no current generation C, M, or R instance type matches your attributes, then the identified price is from the lowest priced current generation instance types, and failing that, from the lowest priced previous generation instance types that match your attributes. When Amazon EC2 selects instance types with your attributes, it will exclude instance types whose price exceeds your specified threshold. The parameter accepts an integer, which Amazon EC2 interprets as a percentage. If you set DesiredCapacityType to vcpu or memory-mib, the price protection threshold is based on the per vCPU or per memory price instead of the per instance price.  Only one of SpotMaxPricePercentageOverLowestPrice or MaxSpotPriceAsPercentageOfOptimalOnDemandPrice can be specified. If you don't specify either, Amazon EC2 will automatically apply optimal price protection to consistently select from a wide range of instance types. To indicate no price protection threshold for Spot Instances, meaning you want to consider all instance types that match your attributes, include one of these parameters and specify a high value, such as 999999. 
+     * [Price protection] The price protection threshold for Spot Instances, as a percentage of an identified On-Demand price. The identified On-Demand price is the price of the lowest priced current generation C, M, or R instance type with your specified attributes. If no current generation C, M, or R instance type matches your attributes, then the identified price is from the lowest priced current generation instance types, and failing that, from the lowest priced previous generation instance types that match your attributes. When Amazon EC2 selects instance types with your attributes, it will exclude instance types whose price exceeds your specified threshold. The parameter accepts an integer, which Amazon EC2 interprets as a percentage. If you set TargetCapacityUnitType to vcpu or memory-mib, the price protection threshold is based on the per vCPU or per memory price instead of the per instance price.  Only one of SpotMaxPricePercentageOverLowestPrice or MaxSpotPriceAsPercentageOfOptimalOnDemandPrice can be specified. If you don't specify either, Amazon EC2 will automatically apply optimal price protection to consistently select from a wide range of instance types. To indicate no price protection threshold for Spot Instances, meaning you want to consider all instance types that match your attributes, include one of these parameters and specify a high value, such as 999999. 
      */
     MaxSpotPriceAsPercentageOfOptimalOnDemandPrice?: Integer;
   }
@@ -28622,7 +28622,7 @@ declare namespace EC2 {
      */
     SriovNetSupport?: AttributeValue;
     /**
-     * Changes the instance's user data to the specified value. If you are using an Amazon Web Services SDK or command line tool, base64-encoding is performed for you, and you can load the text from a file. Otherwise, you must provide base64-encoded text.
+     * Changes the instance's user data to the specified value. User data must be base64-encoded. Depending on the tool or SDK that you're using, the base64-encoding might be performed for you. For more information, see Work with instance user data.
      */
     UserData?: BlobAttributeValue;
     /**
@@ -34686,7 +34686,7 @@ declare namespace EC2 {
      */
     SubnetId?: SubnetId;
     /**
-     * The user data script to make available to the instance. For more information, see Run commands on your Amazon EC2 instance at launch in the Amazon EC2 User Guide. If you are using a command line tool, base64-encoding is performed for you, and you can load the text from a file. Otherwise, you must provide base64-encoded text. User data is limited to 16 KB.
+     * The user data to make available to the instance. User data must be base64-encoded. Depending on the tool or SDK that you're using, the base64-encoding might be performed for you. For more information, see Work with instance user data.
      */
     UserData?: RunInstancesUserData;
     /**

package/clients/eks.d.ts

@@ -860,7 +860,7 @@ declare namespace EKS {
   export type BoxedBoolean = boolean;
   export type BoxedInteger = number;
   export type Capacity = number;
-  export type CapacityTypes = "ON_DEMAND"|"SPOT"|string;
+  export type CapacityTypes = "ON_DEMAND"|"SPOT"|"CAPACITY_BLOCK"|string;
   export type Category = "UPGRADE_READINESS"|string;
   export type CategoryList = Category[];
   export interface Certificate {

package/clients/paymentcryptography.d.ts

@@ -256,6 +256,7 @@ declare namespace PaymentCryptography {
      */
     Key: Key;
   }
+  export type EvenHexLengthBetween16And32 = string;
   export interface ExportAttributes {
     /**
      * Parameter information for IPEK export.
@@ -351,7 +352,7 @@ declare namespace PaymentCryptography {
     /**
      * A random number value that is unique to the TR-34 key block generated using 2 pass. The operation will fail, if a random nonce value is not provided for a TR-34 key block generated using 2 pass.
      */
-    RandomNonce?: HexLength16;
+    RandomNonce?: EvenHexLengthBetween16And32;
     /**
      * Optional metadata for export associated with the key material. This data is signed but transmitted in clear text.
      */
@@ -461,7 +462,6 @@ declare namespace PaymentCryptography {
      */
     KeyCertificateChain: CertificateType;
   }
-  export type HexLength16 = string;
   export type HexLength20Or24 = string;
   export interface ImportKeyCryptogram {
     KeyAttributes: KeyAttributes;
@@ -563,7 +563,7 @@ declare namespace PaymentCryptography {
     /**
      * A random number value that is unique to the TR-34 key block generated using 2 pass. The operation will fail, if a random nonce value is not provided for a TR-34 key block generated using 2 pass.
      */
-    RandomNonce?: HexLength16;
+    RandomNonce?: EvenHexLengthBetween16And32;
   }
   export interface Key {
     /**