cdk-preflight 1.12.0 → 1.12.1

package/node_modules/@aws-sdk/client-ec2/dist-types/models/models_1.d.ts

@@ -1,509 +1,688 @@
-import type { _InstanceType, AcceleratorManufacturer, AcceleratorName, AcceleratorType, AddressFamily, AmdSevSnpSpecification, AttachmentStatus, AutoProvisionZonesState, AutoScalingIpsState, AvailabilityMode, BareMetal, BlockPublicAccessMode, BootModeOverrideValues, BurstablePerformance, CapacityReservationPreference, ClientVpnAuthenticationType, ClientVpnDeviceTrustProviderType, ClientVpnEndpointStatusCode, ClientVpnRouteStatusCode, ConnectivityType, ContainerFormat, CpuManufacturer, DefaultTargetCapacityType, DestinationFileFormat, DiskImageFormat, Ec2InstanceConnectEndpointState, EndpointIpAddressType, ExportEnvironment, ExportTaskState, FleetCapacityReservationUsageStrategy, FleetExcessCapacityTerminationPolicy, FleetHttpTokensState, FleetInstanceMetadataEndpointState, FleetOnDemandAllocationStrategy, FleetReplacementStrategy, FleetReservationType, FleetType, FlowLogsResourceType, GatewayType, HostnameType, InstanceBandwidthWeighting, InstanceGeneration, InstanceInterruptionBehavior, InstanceLifecycle, InterruptibleCapacityReservationAllocationStatus, InterruptionType, IpAddressType, IpamExternalResourceVerificationTokenState, IpamInternetRegistryAssociationState, IpamMeteredAccount, IpamPolicyState, IpamPoolAwsService, IpamPoolPublicIpSource, IpamPoolSourceResourceType, IpamPoolState, IpamPrefixListResolverRuleConditionOperation, IpamPrefixListResolverRuleType, IpamPrefixListResolverState, IpamPrefixListResolverTargetState, IpamPrefixListResolverVersionCreationStatus, IpamResourceDiscoveryState, IpamResourceType, IpamScopeExternalAuthorityType, IpamScopeState, IpamScopeType, IpamState, IpamTier, KeyFormat, KeyType, LaunchTemplateAutoRecoveryState, LaunchTemplateHttpTokensState, LaunchTemplateInstanceMetadataEndpointState, LaunchTemplateInstanceMetadataOptionsState, LaunchTemplateInstanceMetadataProtocolIpv6, LaunchTemplateInstanceMetadataTagsState, LocalGatewayRouteState, LocalGatewayRouteTableMode, LocalGatewayRouteType, LocalGatewayVirtualInterfaceConfigurationState, LocalGatewayVirtualInterfaceGroupConfigurationState, LocalStorage, LocalStorageType, LogDestinationType, MacModificationTaskState, MacModificationTaskType, MacSystemIntegrityProtectionSettingStatus, MarketType, NatGatewayApplianceModifyState, NatGatewayApplianceState, NatGatewayApplianceType, NatGatewayState, NestedVirtualizationSpecification, NetworkInterfaceCreationType, PlatformValues, PrefixListState, Protocol, ReservedCapacityAllocationStrategy, ReservedCapacityFallbackMarketType, ResourceType, Rir, RuleAction, SecondaryInterfaceType, SelfServicePortal, ShutdownBehavior, SnapshotLocationEnum, SpotAllocationStrategy, SpotInstanceInterruptionBehavior, SpotInstanceType, SubnetState, TaggableResourceType, TargetCapacityUnitType, Tenancy, TokenState, TrafficIpAddressType, TrafficType, TransportProtocol, VolumeType, VpcEncryptionControlExclusionState, VpcEncryptionControlMode, VpcEncryptionControlState, VpcState, WeekDay, ZeroSizePreference } from "./enums";
-import type { AcceleratorCount, AcceleratorCountRequest, AcceleratorTotalMemoryMiB, AcceleratorTotalMemoryMiBRequest, AccessScopePath, AccessScopePathRequest, AddIpamOperatingRegion, AddPrefixListEntry, InstanceEventWindow, IpamRoutingPolicyRegistrationDelta, NatGatewayAddress, OperatorResponse, PortRange, SubnetIpv6CidrBlockAssociation, Tag, TagSpecification, UnsuccessfulItem, VpcCidrBlockAssociation, VpcIpv6CidrBlockAssociation } from "./models_0";
+import type { _InstanceType, AcceleratorManufacturer, AcceleratorName, AcceleratorType, AddressFamily, AmdSevSnpSpecification, AttachmentStatus, AutoProvisionZonesState, AutoScalingIpsState, AvailabilityMode, BareMetal, BlockPublicAccessMode, BootModeOverrideValues, BurstablePerformance, CapacityReservationFleetState, CapacityReservationInstancePlatform, CapacityReservationPreference, CarrierGatewayState, ClientVpnAuthenticationType, ClientVpnDeviceTrustProviderType, ClientVpnEndpointStatusCode, ClientVpnRouteStatusCode, ConnectivityType, ContainerFormat, CpuManufacturer, DefaultTargetCapacityType, DestinationFileFormat, DiskImageFormat, Ec2InstanceConnectEndpointState, EndpointIpAddressType, ExportEnvironment, ExportTaskState, FleetCapacityReservationTenancy, FleetCapacityReservationUsageStrategy, FleetExcessCapacityTerminationPolicy, FleetHttpTokensState, FleetInstanceMatchCriteria, FleetInstanceMetadataEndpointState, FleetOnDemandAllocationStrategy, FleetReplacementStrategy, FleetReservationType, FleetType, FlowLogsResourceType, GatewayType, HostnameType, InstanceBandwidthWeighting, InstanceGeneration, InstanceInterruptionBehavior, InstanceLifecycle, InterruptibleCapacityReservationAllocationStatus, InterruptionType, IpAddressType, IpamExternalResourceVerificationTokenState, IpamInternetRegistryAssociationState, IpamMeteredAccount, IpamPolicyState, IpamPoolAwsService, IpamPoolPublicIpSource, IpamPoolSourceResourceType, IpamPoolState, IpamPrefixListResolverRuleConditionOperation, IpamPrefixListResolverRuleType, IpamPrefixListResolverState, IpamPrefixListResolverTargetState, IpamPrefixListResolverVersionCreationStatus, IpamResourceDiscoveryState, IpamResourceType, IpamScopeExternalAuthorityType, IpamScopeState, IpamScopeType, IpamState, IpamTier, KeyFormat, KeyType, LaunchTemplateAutoRecoveryState, LaunchTemplateHttpTokensState, LaunchTemplateInstanceMetadataEndpointState, LaunchTemplateInstanceMetadataOptionsState, LaunchTemplateInstanceMetadataProtocolIpv6, LaunchTemplateInstanceMetadataTagsState, LocalGatewayRouteState, LocalGatewayRouteTableMode, LocalGatewayRouteType, LocalGatewayVirtualInterfaceConfigurationState, LocalGatewayVirtualInterfaceGroupConfigurationState, LocalStorage, LocalStorageType, LogDestinationType, MacModificationTaskState, MacModificationTaskType, MacSystemIntegrityProtectionSettingStatus, MarketType, NatGatewayApplianceModifyState, NatGatewayApplianceState, NatGatewayApplianceType, NatGatewayState, NestedVirtualizationSpecification, NetworkInterfaceCreationType, PlatformValues, PrefixListState, Protocol, ReservedCapacityAllocationStrategy, ReservedCapacityFallbackMarketType, ResourceType, Rir, RuleAction, SecondaryInterfaceType, SelfServicePortal, ShutdownBehavior, SnapshotLocationEnum, SpotAllocationStrategy, SpotInstanceInterruptionBehavior, SpotInstanceType, SubnetState, TaggableResourceType, TargetCapacityUnitType, Tenancy, TokenState, TrafficIpAddressType, TrafficType, TransportProtocol, VolumeType, VpcEncryptionControlExclusionState, VpcEncryptionControlMode, VpcEncryptionControlState, VpcState, WeekDay, ZeroSizePreference } from "./enums";
+import type { AcceleratorCount, AcceleratorCountRequest, AcceleratorTotalMemoryMiB, AcceleratorTotalMemoryMiBRequest, AccessScopePath, AccessScopePathRequest, AddIpamOperatingRegion, AddPrefixListEntry, BaselineEbsBandwidthMbpsRequest, BaselinePerformanceFactorsRequest, InstanceEventWindow, IpamRoutingPolicyRegistrationDelta, MemoryGiBPerVCpuRequest, MemoryMiBRequest, NatGatewayAddress, OperatorResponse, PortRange, SubnetIpv6CidrBlockAssociation, Tag, TagSpecification, UnsuccessfulItem, VpcCidrBlockAssociation, VpcIpv6CidrBlockAssociation } from "./models_0";
 /**
- * <p>Describes the Active Directory to be used for client authentication.</p>
- * @public
- */
-export interface DirectoryServiceAuthenticationRequest {
-    /**
-     * <p>The ID of the Active Directory to be used for authentication.</p>
-     * @public
-     */
-    DirectoryId?: string | undefined;
-}
-/**
- * <p>The IAM SAML identity provider used for federated authentication.</p>
+ * <p>The minimum and maximum amount of network bandwidth, in gigabits per second (Gbps).</p>
+ *          <note>
+ *             <p>Setting the minimum bandwidth does not guarantee that your instance will achieve the
+ *             minimum bandwidth. Amazon EC2 will identify instance types that support the specified minimum
+ *             bandwidth, but the actual bandwidth of your instance might go below the specified minimum
+ *             at times. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-network-bandwidth.html#available-instance-bandwidth">Available instance bandwidth</a> in the
+ *             <i>Amazon EC2 User Guide</i>.</p>
+ *          </note>
  * @public
  */
-export interface FederatedAuthenticationRequest {
-    /**
-     * <p>The Amazon Resource Name (ARN) of the IAM SAML identity provider.</p>
-     * @public
-     */
-    SAMLProviderArn?: string | undefined;
+export interface NetworkBandwidthGbpsRequest {
     /**
-     * <p>The Amazon Resource Name (ARN) of the IAM SAML identity provider for the self-service portal.</p>
+     * <p>The minimum amount of network bandwidth, in Gbps. To specify no minimum limit, omit this
+     *          parameter.</p>
      * @public
      */
-    SelfServiceSAMLProviderArn?: string | undefined;
-}
-/**
- * <p>Information about the client certificate to be used for authentication.</p>
- * @public
- */
-export interface CertificateAuthenticationRequest {
+    Min?: number | undefined;
     /**
-     * <p>The ARN of the client certificate. The certificate must be signed by a certificate
-     * 			authority (CA) and it must be provisioned in Certificate Manager (ACM).</p>
+     * <p>The maximum amount of network bandwidth, in Gbps. To specify no maximum limit, omit this
+     *          parameter.</p>
      * @public
      */
-    ClientRootCertificateChainArn?: string | undefined;
+    Max?: number | undefined;
 }
 /**
- * <p>Describes the authentication method to be used by a Client VPN endpoint. For more information, see <a href="https://docs.aws.amazon.com/vpn/latest/clientvpn-admin/authentication-authrization.html#client-authentication">Authentication</a>
- * 			in the <i>Client VPN Administrator Guide</i>.</p>
+ * <p>The minimum and maximum number of network interfaces.</p>
  * @public
  */
-export interface ClientVpnAuthenticationRequest {
-    /**
-     * <p>The type of client authentication to be used.</p>
-     * @public
-     */
-    Type?: ClientVpnAuthenticationType | undefined;
-    /**
-     * <p>Information about the Active Directory to be used, if applicable. You must provide this information if <b>Type</b> is <code>directory-service-authentication</code>.</p>
-     * @public
-     */
-    ActiveDirectory?: DirectoryServiceAuthenticationRequest | undefined;
+export interface NetworkInterfaceCountRequest {
     /**
-     * <p>Information about the authentication certificates to be used, if applicable. You must provide this information if <b>Type</b> is <code>certificate-authentication</code>.</p>
+     * <p>The minimum number of network interfaces. To specify no minimum limit, omit this
+     *          parameter.</p>
      * @public
      */
-    MutualAuthentication?: CertificateAuthenticationRequest | undefined;
+    Min?: number | undefined;
     /**
-     * <p>Information about the IAM SAML identity provider to be used, if applicable. You must provide this information if <b>Type</b> is <code>federated-authentication</code>.</p>
+     * <p>The maximum number of network interfaces. To specify no maximum limit, omit this
+     *          parameter.</p>
      * @public
      */
-    FederatedAuthentication?: FederatedAuthenticationRequest | undefined;
+    Max?: number | undefined;
 }
 /**
- * <p>The options for managing connection authorization for new client connections.</p>
+ * <p>The minimum and maximum amount of total local storage, in GB.</p>
  * @public
  */
-export interface ClientConnectOptions {
+export interface TotalLocalStorageGBRequest {
     /**
-     * <p>Indicates whether client connect options are enabled. The default is <code>false</code> (not enabled).</p>
+     * <p>The minimum amount of total local storage, in GB. To specify no minimum limit, omit this
+     *          parameter.</p>
      * @public
      */
-    Enabled?: boolean | undefined;
+    Min?: number | undefined;
     /**
-     * <p>The Amazon Resource Name (ARN) of the Lambda function used for connection authorization.</p>
+     * <p>The maximum amount of total local storage, in GB. To specify no maximum limit, omit this
+     *          parameter.</p>
      * @public
      */
-    LambdaFunctionArn?: string | undefined;
+    Max?: number | undefined;
 }
 /**
- * <p>Options for enabling a customizable text banner that will be displayed on
- * 			Amazon Web Services provided clients when a VPN session is established.</p>
+ * <p>The minimum and maximum number of vCPUs.</p>
  * @public
  */
-export interface ClientLoginBannerOptions {
-    /**
-     * <p>Enable or disable a customizable text banner that will be displayed on
-     * 			Amazon Web Services provided clients when a VPN session is established.</p>
-     *          <p>Valid values: <code>true | false</code>
-     *          </p>
-     *          <p>Default value: <code>false</code>
-     *          </p>
-     * @public
-     */
-    Enabled?: boolean | undefined;
+export interface VCpuCountRangeRequest {
     /**
-     * <p>Customizable text that will be displayed in a banner on Amazon Web Services provided
-     * 			clients when a VPN session is established. UTF-8 encoded characters only. Maximum of
-     * 			1400 characters.</p>
+     * <p>The minimum number of vCPUs. To specify no minimum limit, specify <code>0</code>.</p>
      * @public
      */
-    BannerText?: string | undefined;
-}
-/**
- * <p>Client Route Enforcement is a feature of Client VPN that helps enforce administrator defined
- * 			routes on devices connected through the VPN. This feature helps improve your security
- * 			posture by ensuring that network traffic originating from a connected client is not
- * 			inadvertently sent outside the VPN tunnel.</p>
- *          <p>Client Route Enforcement works by monitoring the route table of a connected device for
- * 			routing policy changes to the VPN connection. If the feature detects any VPN routing
- * 			policy modifications, it will automatically force an update to the route table,
- * 			reverting it back to the expected route configurations.</p>
- * @public
- */
-export interface ClientRouteEnforcementOptions {
+    Min: number | undefined;
     /**
-     * <p>Enable or disable Client Route Enforcement. The state can either be <code>true</code>
-     * 			(enabled) or <code>false</code> (disabled). The default is <code>false</code>.</p>
-     *          <p>Valid values: <code>true | false</code>
-     *          </p>
-     *          <p>Default value: <code>false</code>
-     *          </p>
+     * <p>The maximum number of vCPUs. To specify no maximum limit, omit this parameter.</p>
      * @public
      */
-    Enforced?: boolean | undefined;
+    Max?: number | undefined;
 }
 /**
- * <p>Describes the client connection logging options for the Client VPN endpoint.</p>
+ * <p>The attributes for the instance types. When you specify instance attributes, Amazon EC2 will
+ *          identify instance types with these attributes.</p>
+ *          <p>You must specify <code>VCpuCount</code> and <code>MemoryMiB</code>. All other attributes
+ *          are optional. Any unspecified optional attribute is set to its default.</p>
+ *          <p>When you specify multiple attributes, you get instance types that satisfy all of the
+ *          specified attributes. If you specify multiple values for an attribute, you get instance
+ *          types that satisfy any of the specified values.</p>
+ *          <p>To limit the list of instance types from which Amazon EC2 can identify matching instance types,
+ *          you can use one of the following parameters, but not both in the same request:</p>
+ *          <ul>
+ *             <li>
+ *                <p>
+ *                   <code>AllowedInstanceTypes</code> - The instance types to include in the list. All
+ *                other instance types are ignored, even if they match your specified attributes.</p>
+ *             </li>
+ *             <li>
+ *                <p>
+ *                   <code>ExcludedInstanceTypes</code> - The instance types to exclude from the list,
+ *                even if they match your specified attributes.</p>
+ *             </li>
+ *          </ul>
+ *          <note>
+ *             <p>If you specify <code>InstanceRequirements</code>, you can't specify
+ *             <code>InstanceType</code>.</p>
+ *             <p>Attribute-based instance type selection is only supported when using Auto Scaling
+ *             groups, EC2 Fleet, and Spot Fleet to launch instances. If you plan to use the launch template in
+ *             the <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-launch-instance-wizard.html">launch instance
+ *                wizard</a>, or with the <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RunInstances.html">RunInstances</a> API or
+ *                <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-instance.html">AWS::EC2::Instance</a> Amazon Web Services CloudFormation resource, you can't specify
+ *                <code>InstanceRequirements</code>.</p>
+ *          </note>
+ *          <p>For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-fleet-attribute-based-instance-type-selection.html">Specify attributes for instance type selection for EC2 Fleet or Spot Fleet</a> and <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/spot-placement-score.html">Spot
+ *             placement score</a> in the <i>Amazon EC2 User Guide</i>.</p>
  * @public
  */
-export interface ConnectionLogOptions {
-    /**
-     * <p>Indicates whether connection logging is enabled.</p>
-     * @public
-     */
-    Enabled?: boolean | undefined;
-    /**
-     * <p>The name of the CloudWatch Logs log group. Required if connection logging is enabled.</p>
-     * @public
-     */
-    CloudwatchLogGroup?: string | undefined;
+export interface InstanceRequirementsRequest {
     /**
-     * <p>The name of the CloudWatch Logs log stream to which the connection data is published.</p>
+     * <p>The minimum and maximum number of vCPUs.</p>
      * @public
      */
-    CloudwatchLogStream?: string | undefined;
+    VCpuCount: VCpuCountRangeRequest | undefined;
     /**
-     * <p>Specifies whether to include the authorization policy evaluation context in the connection logs for the Client VPN endpoint.</p>
+     * <p>The minimum and maximum amount of memory, in MiB.</p>
      * @public
      */
-    IncludeAuthorizationPolicyContext?: boolean | undefined;
-}
-/**
- * <p>Describes a device trust provider to configure for a Client VPN endpoint.</p>
- * @public
- */
-export interface ClientVpnTrustProviderRequest {
+    MemoryMiB: MemoryMiBRequest | undefined;
     /**
-     * <p>The type of the device trust provider. Possible values include:</p>
+     * <p>The CPU manufacturers to include.</p>
      *          <ul>
      *             <li>
-     *                <p>
-     *                   <code>crowdstrike</code> - CrowdStrike device trust provider.</p>
+     *                <p>For instance types with Intel CPUs, specify <code>intel</code>.</p>
      *             </li>
      *             <li>
-     *                <p>
-     *                   <code>jamf</code> - Jamf device trust provider.</p>
+     *                <p>For instance types with AMD CPUs, specify <code>amd</code>.</p>
      *             </li>
      *             <li>
-     *                <p>
-     *                   <code>jumpcloud</code> - JumpCloud device trust provider.</p>
+     *                <p>For instance types with Amazon Web Services CPUs, specify <code>amazon-web-services</code>.</p>
+     *             </li>
+     *             <li>
+     *                <p>For instance types with Apple CPUs, specify <code>apple</code>.</p>
      *             </li>
      *          </ul>
+     *          <note>
+     *             <p>Don't confuse the CPU manufacturer with the CPU architecture. Instances will
+     *          be launched with a compatible CPU architecture based on the Amazon Machine Image (AMI) that you
+     *          specify in your launch template.</p>
+     *          </note>
+     *          <p>Default: Any manufacturer</p>
      * @public
      */
-    TrustProviderType?: ClientVpnDeviceTrustProviderType | undefined;
+    CpuManufacturers?: CpuManufacturer[] | undefined;
     /**
-     * <p>The tenant ID associated with your device trust provider account.</p>
+     * <p>The minimum and maximum amount of memory per vCPU, in GiB.</p>
+     *          <p>Default: No minimum or maximum limits</p>
      * @public
      */
-    TenantId?: string | undefined;
+    MemoryGiBPerVCpu?: MemoryGiBPerVCpuRequest | undefined;
     /**
-     * <p>The URL of the public signing key that is used to verify the identity token issued by the device trust provider.</p>
+     * <p>The instance types to exclude.</p>
+     *          <p>You can use strings with one or more wild cards, represented by
+     *          an asterisk (<code>*</code>), to exclude an instance family, type, size, or generation. The
+     *          following are examples: <code>m5.8xlarge</code>, <code>c5*.*</code>, <code>m5a.*</code>,
+     *             <code>r*</code>, <code>*3*</code>.</p>
+     *          <p>For example, if you specify <code>c5*</code>,Amazon EC2 will exclude the entire C5 instance
+     *       family, which includes all C5a and C5n instance types. If you specify
+     *       <code>m5a.*</code>, Amazon EC2 will exclude all the M5a instance types, but not the M5n
+     *       instance types.</p>
+     *          <note>
+     *             <p>If you specify <code>ExcludedInstanceTypes</code>, you can't specify <code>AllowedInstanceTypes</code>.</p>
+     *          </note>
+     *          <p>Default: No excluded instance types</p>
      * @public
      */
-    PublicSigningKeyUrl?: string | undefined;
-}
-/**
- * <p>Describes the device posture options for a Client VPN endpoint. Device posture options specify the device trust providers that the endpoint uses to evaluate the security posture of connecting devices.</p>
- * @public
- */
-export interface DevicePostureOptions {
+    ExcludedInstanceTypes?: string[] | undefined;
     /**
-     * <p>The device trust providers to configure for the Client VPN endpoint.</p>
+     * <p>Indicates whether current or previous generation instance types are included. The
+     *       current generation instance types are recommended for use. Current generation instance types are
+     *       typically the latest two to three generations in each instance family. For more
+     *       information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html">Instance types</a> in the
+     *       <i>Amazon EC2 User Guide</i>.</p>
+     *          <p>For current generation instance types, specify <code>current</code>.</p>
+     *          <p>For previous generation instance types, specify <code>previous</code>.</p>
+     *          <p>Default: Current and previous generation instance types</p>
      * @public
      */
-    TrustProviders?: ClientVpnTrustProviderRequest[] | undefined;
+    InstanceGenerations?: InstanceGeneration[] | undefined;
     /**
-     * <p>Indicates whether device posture evaluation is enabled for the Client VPN endpoint. Specify <code>false</code> to disable device posture, which clears the configured device trust providers.</p>
-     * @public
-     */
-    Enabled?: boolean | undefined;
-}
-/**
- * <p>The Transit Gateway configuration for a Client VPN endpoint.</p>
- * @public
- */
-export interface TransitGatewayConfigurationInputStructure {
-    /**
-     * <p>The ID of the Transit Gateway to associate with the Client VPN endpoint.</p>
-     * @public
-     */
-    TransitGatewayId?: string | undefined;
-    /**
-     * <p>The Availability Zone names for the Transit Gateway association. You can specify up to the maximum number of Availability Zones supported by the Transit Gateway. You cannot specify both <code>AvailabilityZones</code> and <code>AvailabilityZoneIds</code>.</p>
-     * @public
-     */
-    AvailabilityZones?: string[] | undefined;
-    /**
-     * <p>The Availability Zone IDs for the Transit Gateway association. You can specify up to the maximum number of Availability Zones supported by the Transit Gateway. You cannot specify both <code>AvailabilityZones</code> and <code>AvailabilityZoneIds</code>.</p>
-     * @public
-     */
-    AvailabilityZoneIds?: string[] | undefined;
-}
-/**
- * @public
- */
-export interface CreateClientVpnEndpointRequest {
-    /**
-     * <p>The IPv4 address range, in CIDR notation, from which to assign client IP addresses. The address range cannot overlap with the local CIDR of the VPC in which the associated subnet is located, or the routes that you add manually. The address range cannot be changed after the Client VPN endpoint has been created. Client CIDR range must have a size of at least /22 and must not be greater than /12.</p>
-     * @public
-     */
-    ClientCidrBlock?: string | undefined;
-    /**
-     * <p>The ARN of the server certificate. For more information, see
-     * 			the <a href="https://docs.aws.amazon.com/acm/latest/userguide/">Certificate Manager User Guide</a>.</p>
+     * <p>[Price protection] The price protection threshold for Spot Instances, as a percentage higher than
+     *          an identified Spot price. The identified Spot price is the Spot price of the lowest priced
+     *          current generation C, M, or R instance type with your specified attributes. If no current
+     *          generation C, M, or R instance type matches your attributes, then the identified Spot price
+     *          is from the lowest priced current generation instance types, and failing that, from the
+     *          lowest priced previous generation instance types that match your attributes. When Amazon EC2
+     *          selects instance types with your attributes, it will exclude instance types whose Spot
+     *          price exceeds your specified threshold.</p>
+     *          <p>The parameter accepts an integer, which Amazon EC2 interprets as a percentage.</p>
+     *          <p>If you set <code>TargetCapacityUnitType</code> to <code>vcpu</code> or
+     *          <code>memory-mib</code>, the price protection threshold is applied based on the
+     *          per-vCPU or per-memory price instead of the per-instance price.</p>
+     *          <p>This parameter is not supported for <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetSpotPlacementScores.html">GetSpotPlacementScores</a> and <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetInstanceTypesFromInstanceRequirements.html">GetInstanceTypesFromInstanceRequirements</a>.</p>
+     *          <note>
+     *             <p>Only one of <code>SpotMaxPricePercentageOverLowestPrice</code> or
+     *                <code>MaxSpotPriceAsPercentageOfOptimalOnDemandPrice</code> can be specified. If you
+     *             don't specify either, Amazon EC2 will automatically apply optimal price protection to
+     *             consistently select from a wide range of instance types. To indicate no price protection
+     *             threshold for Spot Instances, meaning you want to consider all instance types that match your
+     *             attributes, include one of these parameters and specify a high value, such as
+     *                <code>999999</code>.</p>
+     *          </note>
+     *          <p>Default: <code>100</code>
+     *          </p>
      * @public
      */
-    ServerCertificateArn: string | undefined;
+    SpotMaxPricePercentageOverLowestPrice?: number | undefined;
     /**
-     * <p>Information about the authentication method to be used to authenticate clients.</p>
+     * <p>[Price protection] The price protection threshold for On-Demand Instances, as a percentage higher than
+     *          an identified On-Demand price. The identified On-Demand price is the price of the lowest
+     *          priced current generation C, M, or R instance type with your specified attributes. When
+     *          Amazon EC2 selects instance types with your attributes, it will exclude instance types whose
+     *          price exceeds your specified threshold.</p>
+     *          <p>The parameter accepts an integer, which Amazon EC2 interprets as a percentage.</p>
+     *          <p>To indicate no price protection threshold, specify a high value, such as
+     *             <code>999999</code>.</p>
+     *          <p>This parameter is not supported for <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetSpotPlacementScores.html">GetSpotPlacementScores</a> and <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetInstanceTypesFromInstanceRequirements.html">GetInstanceTypesFromInstanceRequirements</a>.</p>
+     *          <note>
+     *             <p>If you set <code>TargetCapacityUnitType</code> to <code>vcpu</code> or
+     *          <code>memory-mib</code>, the price protection threshold is applied based on the
+     *          per-vCPU or per-memory price instead of the per-instance price.</p>
+     *          </note>
+     *          <p>Default: <code>20</code>
+     *          </p>
      * @public
      */
-    AuthenticationOptions: ClientVpnAuthenticationRequest[] | undefined;
+    OnDemandMaxPricePercentageOverLowestPrice?: number | undefined;
     /**
-     * <p>Information about the client connection logging options.</p>
-     *          <p>If you enable client connection logging, data about client connections is sent to a
-     * 			Cloudwatch Logs log stream. The following information is logged:</p>
+     * <p>Indicates whether bare metal instance types must be included, excluded, or required.</p>
      *          <ul>
      *             <li>
-     *                <p>Client connection requests</p>
-     *             </li>
-     *             <li>
-     *                <p>Client connection results (successful and unsuccessful)</p>
+     *                <p>To include bare metal instance types, specify <code>included</code>.</p>
      *             </li>
      *             <li>
-     *                <p>Reasons for unsuccessful client connection requests</p>
+     *                <p>To require only bare metal instance types, specify <code>required</code>.</p>
      *             </li>
      *             <li>
-     *                <p>Client connection termination time</p>
+     *                <p>To exclude bare metal instance types, specify <code>excluded</code>.</p>
      *             </li>
      *          </ul>
-     * @public
-     */
-    ConnectionLogOptions: ConnectionLogOptions | undefined;
-    /**
-     * <p>Information about the DNS servers to be used for DNS resolution. A Client VPN endpoint can
-     * 			have up to two DNS servers. If no DNS server is specified, the DNS address configured on the device is used for the DNS server.</p>
-     * @public
-     */
-    DnsServers?: string[] | undefined;
-    /**
-     * <p>The transport protocol to be used by the VPN session.</p>
-     *          <p>Default value: <code>udp</code>
+     *          <p>Default: <code>excluded</code>
      *          </p>
      * @public
      */
-    TransportProtocol?: TransportProtocol | undefined;
+    BareMetal?: BareMetal | undefined;
     /**
-     * <p>The port number to assign to the Client VPN endpoint for TCP and UDP traffic.</p>
-     *          <p>Valid Values: <code>443</code> | <code>1194</code>
-     *          </p>
-     *          <p>Default Value: <code>443</code>
+     * <p>Indicates whether burstable performance T instance types are included, excluded, or required. For more information, see
+     *       <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/burstable-performance-instances.html">Burstable performance instances</a>.</p>
+     *          <ul>
+     *             <li>
+     *                <p>To include burstable performance instance types, specify <code>included</code>.</p>
+     *             </li>
+     *             <li>
+     *                <p>To require only burstable performance instance types, specify <code>required</code>.</p>
+     *             </li>
+     *             <li>
+     *                <p>To exclude burstable performance instance types, specify <code>excluded</code>.</p>
+     *             </li>
+     *          </ul>
+     *          <p>Default: <code>excluded</code>
      *          </p>
      * @public
      */
-    VpnPort?: number | undefined;
-    /**
-     * <p>A brief description of the Client VPN endpoint.</p>
-     * @public
-     */
-    Description?: string | undefined;
-    /**
-     * <p>Indicates whether split-tunnel is enabled on the Client VPN endpoint.</p>
-     *          <p>By default, split-tunnel on a VPN endpoint is disabled.</p>
-     *          <p>For information about split-tunnel VPN endpoints, see <a href="https://docs.aws.amazon.com/vpn/latest/clientvpn-admin/split-tunnel-vpn.html">Split-tunnel Client VPN endpoint</a> in the
-     * 			<i>Client VPN Administrator Guide</i>.</p>
-     * @public
-     */
-    SplitTunnel?: boolean | undefined;
+    BurstablePerformance?: BurstablePerformance | undefined;
     /**
-     * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+     * <p>Indicates whether instance types must support hibernation for On-Demand Instances.</p>
+     *          <p>This parameter is not supported for <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetSpotPlacementScores.html">GetSpotPlacementScores</a>.</p>
+     *          <p>Default: <code>false</code>
+     *          </p>
      * @public
      */
-    DryRun?: boolean | undefined;
+    RequireHibernateSupport?: boolean | undefined;
     /**
-     * <p>Unique, case-sensitive identifier that you provide to ensure the idempotency of the request.
-     * For more information, see <a href="https://docs.aws.amazon.com/ec2/latest/devguide/ec2-api-idempotency.html">Ensuring idempotency</a>.</p>
+     * <p>The minimum and maximum number of network interfaces.</p>
+     *          <p>Default: No minimum or maximum limits</p>
      * @public
      */
-    ClientToken?: string | undefined;
+    NetworkInterfaceCount?: NetworkInterfaceCountRequest | undefined;
     /**
-     * <p>The tags to apply to the Client VPN endpoint during creation.</p>
+     * <p>Indicates whether instance types with instance store volumes are included, excluded, or required. For more information,
+     *       <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/InstanceStorage.html">Amazon
+     *          EC2 instance store</a> in the <i>Amazon EC2 User Guide</i>.</p>
+     *          <ul>
+     *             <li>
+     *                <p>To include instance types with instance store volumes, specify
+     *                   <code>included</code>.</p>
+     *             </li>
+     *             <li>
+     *                <p>To require only instance types with instance store volumes, specify
+     *                   <code>required</code>.</p>
+     *             </li>
+     *             <li>
+     *                <p>To exclude instance types with instance store volumes, specify
+     *                   <code>excluded</code>.</p>
+     *             </li>
+     *          </ul>
+     *          <p>Default: <code>included</code>
+     *          </p>
      * @public
      */
-    TagSpecifications?: TagSpecification[] | undefined;
+    LocalStorage?: LocalStorage | undefined;
     /**
-     * <p>The IDs of one or more security groups to apply to the target network. You must also specify the ID of the VPC that contains the security groups.</p>
+     * <p>The type of local storage that is required.</p>
+     *          <ul>
+     *             <li>
+     *                <p>For instance types with hard disk drive (HDD) storage, specify <code>hdd</code>.</p>
+     *             </li>
+     *             <li>
+     *                <p>For instance types with solid state drive (SSD) storage, specify
+     *                <code>ssd</code>.</p>
+     *             </li>
+     *          </ul>
+     *          <p>Default: <code>hdd</code> and <code>ssd</code>
+     *          </p>
      * @public
      */
-    SecurityGroupIds?: string[] | undefined;
+    LocalStorageTypes?: LocalStorageType[] | undefined;
     /**
-     * <p>The ID of the VPC to associate with the Client VPN endpoint. If no security group IDs are specified in the request, the default security group for the VPC is applied.</p>
+     * <p>The minimum and maximum amount of total local storage, in GB.</p>
+     *          <p>Default: No minimum or maximum limits</p>
      * @public
      */
-    VpcId?: string | undefined;
+    TotalLocalStorageGB?: TotalLocalStorageGBRequest | undefined;
     /**
-     * <p>Specify whether to enable the self-service portal for the Client VPN endpoint.</p>
-     *          <p>Default Value: <code>enabled</code>
-     *          </p>
+     * <p>The minimum and maximum baseline bandwidth to Amazon EBS, in Mbps. For more information, see
+     *             <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-optimized.html">Amazon
+     *             EBS–optimized instances</a> in the <i>Amazon EC2 User Guide</i>.</p>
+     *          <p>Default: No minimum or maximum limits</p>
      * @public
      */
-    SelfServicePortal?: SelfServicePortal | undefined;
+    BaselineEbsBandwidthMbps?: BaselineEbsBandwidthMbpsRequest | undefined;
     /**
-     * <p>The options for managing connection authorization for new client connections.</p>
+     * <p>The accelerator types that must be on the instance type.</p>
+     *          <ul>
+     *             <li>
+     *                <p>For instance types with FPGA accelerators, specify <code>fpga</code>.</p>
+     *             </li>
+     *             <li>
+     *                <p>For instance types with GPU accelerators, specify <code>gpu</code>.</p>
+     *             </li>
+     *             <li>
+     *                <p>For instance types with Inference accelerators, specify <code>inference</code>.</p>
+     *             </li>
+     *             <li>
+     *                <p>For instance types with Media accelerators, specify <code>media</code>.</p>
+     *             </li>
+     *          </ul>
+     *          <p>Default: Any accelerator type</p>
      * @public
      */
-    ClientConnectOptions?: ClientConnectOptions | undefined;
+    AcceleratorTypes?: AcceleratorType[] | undefined;
     /**
-     * <p>The maximum VPN session duration time in hours.</p>
-     *          <p>Valid values: <code>8 | 10 | 12 | 24</code>
-     *          </p>
-     *          <p>Default value: <code>24</code>
-     *          </p>
+     * <p>The minimum and maximum number of accelerators (GPUs, FPGAs, or Amazon Web Services Inferentia chips) on
+     *          an instance.</p>
+     *          <p>To exclude accelerator-enabled instance types, set <code>Max</code> to <code>0</code>.</p>
+     *          <p>Default: No minimum or maximum limits</p>
      * @public
      */
-    SessionTimeoutHours?: number | undefined;
+    AcceleratorCount?: AcceleratorCountRequest | undefined;
     /**
-     * <p>Options for enabling a customizable text banner that will be displayed on
-     * 			Amazon Web Services provided clients when a VPN session is established.</p>
+     * <p>Indicates whether instance types must have accelerators by specific manufacturers.</p>
+     *          <ul>
+     *             <li>
+     *                <p>For instance types with Amazon Web Services devices, specify <code>amazon-web-services</code>.</p>
+     *             </li>
+     *             <li>
+     *                <p>For instance types with AMD devices, specify <code>amd</code>.</p>
+     *             </li>
+     *             <li>
+     *                <p>For instance types with Habana devices, specify <code>habana</code>.</p>
+     *             </li>
+     *             <li>
+     *                <p>For instance types with NVIDIA devices, specify <code>nvidia</code>.</p>
+     *             </li>
+     *             <li>
+     *                <p>For instance types with Xilinx devices, specify <code>xilinx</code>.</p>
+     *             </li>
+     *          </ul>
+     *          <p>Default: Any manufacturer</p>
      * @public
      */
-    ClientLoginBannerOptions?: ClientLoginBannerOptions | undefined;
+    AcceleratorManufacturers?: AcceleratorManufacturer[] | undefined;
     /**
-     * <p>Client route enforcement is a feature of the Client VPN service that helps enforce administrator defined routes on devices connected through the VPN. T
-     * 		his feature helps improve your security posture by ensuring that network traffic originating from a connected client is not inadvertently sent outside the VPN tunnel.</p>
-     *          <p>Client route enforcement works by monitoring the route table of a connected device for routing policy changes to the VPN connection. If the feature detects any VPN routing policy modifications, it will automatically force an update to the route table,
-     * 			reverting it back to the expected route configurations.</p>
-     * @public
+     * <p>The accelerators that must be on the instance type.</p>
+     *          <ul>
+     *             <li>
+     *                <p>For instance types with NVIDIA A10G GPUs, specify <code>a10g</code>.</p>
+     *             </li>
+     *             <li>
+     *                <p>For instance types with NVIDIA A100 GPUs, specify <code>a100</code>.</p>
+     *             </li>
+     *             <li>
+     *                <p>For instance types with NVIDIA H100 GPUs, specify <code>h100</code>.</p>
+     *             </li>
+     *             <li>
+     *                <p>For instance types with Amazon Web Services Inferentia chips, specify <code>inferentia</code>.</p>
+     *             </li>
+     *             <li>
+     *                <p>For instance types with Amazon Web Services Inferentia2 chips, specify <code>inferentia2</code>.</p>
+     *             </li>
+     *             <li>
+     *                <p>For instance types with Habana Gaudi HL-205 GPUs, specify <code>gaudi-hl-205</code>.</p>
+     *             </li>
+     *             <li>
+     *                <p>For instance types with NVIDIA GRID K520 GPUs, specify <code>k520</code>.</p>
+     *             </li>
+     *             <li>
+     *                <p>For instance types with NVIDIA K80 GPUs, specify <code>k80</code>.</p>
+     *             </li>
+     *             <li>
+     *                <p>For instance types with NVIDIA L4 GPUs, specify <code>l4</code>.</p>
+     *             </li>
+     *             <li>
+     *                <p>For instance types with NVIDIA L40S GPUs, specify <code>l40s</code>.</p>
+     *             </li>
+     *             <li>
+     *                <p>For instance types with NVIDIA M60 GPUs, specify <code>m60</code>.</p>
+     *             </li>
+     *             <li>
+     *                <p>For instance types with AMD Radeon Pro V520 GPUs, specify <code>radeon-pro-v520</code>.</p>
+     *             </li>
+     *             <li>
+     *                <p>For instance types with Amazon Web Services Trainium chips, specify <code>trainium</code>.</p>
+     *             </li>
+     *             <li>
+     *                <p>For instance types with Amazon Web Services Trainium2 chips, specify <code>trainium2</code>.</p>
+     *             </li>
+     *             <li>
+     *                <p>For instance types with NVIDIA T4 GPUs, specify <code>t4</code>.</p>
+     *             </li>
+     *             <li>
+     *                <p>For instance types with NVIDIA T4G GPUs, specify <code>t4g</code>.</p>
+     *             </li>
+     *             <li>
+     *                <p>For instance types with Xilinx U30 cards, specify <code>u30</code>.</p>
+     *             </li>
+     *             <li>
+     *                <p>For instance types with Xilinx VU9P FPGAs, specify <code>vu9p</code>.</p>
+     *             </li>
+     *             <li>
+     *                <p>For instance types with NVIDIA V100 GPUs, specify <code>v100</code>.</p>
+     *             </li>
+     *          </ul>
+     *          <p>Default: Any accelerator</p>
+     * @public
      */
-    ClientRouteEnforcementOptions?: ClientRouteEnforcementOptions | undefined;
+    AcceleratorNames?: AcceleratorName[] | undefined;
     /**
-     * <p>Indicates whether the client VPN session is disconnected after the maximum timeout specified in <code>SessionTimeoutHours</code> is reached. If <code>true</code>, users are prompted to reconnect client VPN. If <code>false</code>, client VPN attempts to reconnect automatically.
-     *                    The default value is <code>true</code>.</p>
+     * <p>The minimum and maximum amount of total accelerator memory, in MiB.</p>
+     *          <p>Default: No minimum or maximum limits</p>
      * @public
      */
-    DisconnectOnSessionTimeout?: boolean | undefined;
+    AcceleratorTotalMemoryMiB?: AcceleratorTotalMemoryMiBRequest | undefined;
     /**
-     * <p>The IP address type for the Client VPN endpoint. Valid values are <code>ipv4</code>
-     * 			(default) for IPv4 addressing only, <code>ipv6</code> for IPv6 addressing only, or <code>dual-stack</code> for both IPv4 and IPv6
-     * 			addressing. When set to <code>dual-stack,</code> clients can connect to the endpoint
-     * 			using either IPv4 or IPv6 addresses..</p>
+     * <p>The minimum and maximum amount of baseline network bandwidth, in gigabits per second
+     *           (Gbps). For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-network-bandwidth.html">Amazon EC2 instance network bandwidth</a> in the <i>Amazon EC2 User Guide</i>.</p>
+     *          <p>Default: No minimum or maximum limits</p>
      * @public
      */
-    EndpointIpAddressType?: EndpointIpAddressType | undefined;
+    NetworkBandwidthGbps?: NetworkBandwidthGbpsRequest | undefined;
     /**
-     * <p>The IP address type for traffic within the Client VPN tunnel. Valid values are <code>ipv4</code> (default) for IPv4 traffic only, <code>ipv6</code> for IPv6 addressing only, or <code>dual-stack</code> for both IPv4 and IPv6 traffic. When set to <code>dual-stack</code>, clients can access both IPv4 and IPv6 resources through the VPN .</p>
+     * <p>The instance types to apply your specified attributes against. All other instance types
+     *          are ignored, even if they match your specified attributes.</p>
+     *          <p>You can use strings with one or more wild cards, represented by
+     *          an asterisk (<code>*</code>), to allow an instance type, size, or generation. The
+     *          following are examples: <code>m5.8xlarge</code>, <code>c5*.*</code>, <code>m5a.*</code>,
+     *          <code>r*</code>, <code>*3*</code>.</p>
+     *          <p>For example, if you specify <code>c5*</code>,Amazon EC2 will allow the entire C5 instance
+     *          family, which includes all C5a and C5n instance types. If you specify
+     *          <code>m5a.*</code>, Amazon EC2 will allow all the M5a instance types, but not the M5n
+     *          instance types.</p>
+     *          <note>
+     *             <p>If you specify <code>AllowedInstanceTypes</code>, you can't specify <code>ExcludedInstanceTypes</code>.</p>
+     *          </note>
+     *          <p>Default: All instance types</p>
      * @public
      */
-    TrafficIpAddressType?: TrafficIpAddressType | undefined;
+    AllowedInstanceTypes?: string[] | undefined;
     /**
-     * <p>The Transit Gateway configuration for the Client VPN endpoint. Use this parameter to associate the endpoint with a Transit Gateway instead of a VPC. You cannot specify both <code>TransitGatewayConfiguration</code> and <code>VpcId</code>/<code>SecurityGroupIds</code>.</p>
+     * <p>[Price protection] The price protection threshold for Spot Instances, as a percentage of an
+     *          identified On-Demand price. The identified On-Demand price is the price of the lowest
+     *          priced current generation C, M, or R instance type with your specified attributes. If no
+     *          current generation C, M, or R instance type matches your attributes, then the identified
+     *          price is from the lowest priced current generation instance types, and failing that, from
+     *          the lowest priced previous generation instance types that match your attributes. When Amazon EC2
+     *          selects instance types with your attributes, it will exclude instance types whose price
+     *          exceeds your specified threshold.</p>
+     *          <p>The parameter accepts an integer, which Amazon EC2 interprets as a percentage.</p>
+     *          <p>If you set <code>TargetCapacityUnitType</code> to <code>vcpu</code> or
+     *          <code>memory-mib</code>, the price protection threshold is based on the per vCPU or per
+     *          memory price instead of the per instance price.</p>
+     *          <note>
+     *             <p>Only one of <code>SpotMaxPricePercentageOverLowestPrice</code> or
+     *                <code>MaxSpotPriceAsPercentageOfOptimalOnDemandPrice</code> can be specified. If you
+     *             don't specify either, Amazon EC2 will automatically apply optimal price protection to
+     *             consistently select from a wide range of instance types. To indicate no price protection
+     *             threshold for Spot Instances, meaning you want to consider all instance types that match your
+     *             attributes, include one of these parameters and specify a high value, such as
+     *                <code>999999</code>.</p>
+     *          </note>
      * @public
      */
-    TransitGatewayConfiguration?: TransitGatewayConfigurationInputStructure | undefined;
+    MaxSpotPriceAsPercentageOfOptimalOnDemandPrice?: number | undefined;
     /**
-     * <p>The device posture options for the Client VPN endpoint. Use this parameter to specify the device trust providers that the endpoint uses to evaluate the security posture of connecting devices.</p>
+     * <p>The baseline performance to consider, using an instance family as a baseline reference.
+     *          The instance family establishes the lowest acceptable level of performance. Amazon EC2 uses this
+     *          baseline to guide instance type selection, but there is no guarantee that the selected
+     *          instance types will always exceed the baseline for every application. Currently, this
+     *          parameter only supports CPU performance as a baseline performance factor. For more
+     *          information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-fleet-attribute-based-instance-type-selection.html#ec2fleet-abis-performance-protection">Performance protection</a> in the <i>Amazon EC2 User Guide</i>.</p>
      * @public
      */
-    DevicePostureOptions?: DevicePostureOptions | undefined;
+    BaselinePerformanceFactors?: BaselinePerformanceFactorsRequest | undefined;
+    /**
+     * <p>Specifies whether instance types must support encrypting in-transit traffic between
+     *          instances. For more information, including the supported instance types, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/data-protection.html#encryption-transit">Encryption in
+     *             transit</a> in the <i>Amazon EC2 User Guide</i>.</p>
+     *          <p>Default: <code>false</code>
+     *          </p>
+     * @public
+     */
+    RequireEncryptionInTransit?: boolean | undefined;
 }
 /**
- * <p>Describes the state of a Client VPN endpoint.</p>
+ * <p>Information about an instance type to use in a Capacity Reservation Fleet.</p>
  * @public
  */
-export interface ClientVpnEndpointStatus {
+export interface ReservationFleetInstanceSpecification {
     /**
-     * <p>The state of the Client VPN endpoint. Possible states include:</p>
-     *          <ul>
-     *             <li>
-     *                <p>
-     *                   <code>pending-associate</code> - The Client VPN endpoint has been created but no target networks
-     * 					have been associated. The Client VPN endpoint cannot accept connections.</p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>available</code> - The Client VPN endpoint has been created and a target network has been
-     * 					associated. The Client VPN endpoint can accept connections.</p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>deleting</code> - The Client VPN endpoint is being deleted. The Client VPN endpoint cannot accept
-     * 					connections.</p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>deleted</code> - The Client VPN endpoint has been deleted. The Client VPN endpoint cannot accept
-     * 					connections.</p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>pending</code> - The Client VPN endpoint has been created with a Transit Gateway configuration and is waiting for the Transit Gateway attachment to be accepted. The Client VPN endpoint cannot accept connections.</p>
-     *             </li>
-     *          </ul>
+     * <p>The instance type for which the Capacity Reservation Fleet reserves capacity.</p>
      * @public
      */
-    Code?: ClientVpnEndpointStatusCode | undefined;
+    InstanceType?: _InstanceType | undefined;
     /**
-     * <p>A message about the status of the Client VPN endpoint.</p>
+     * <p>The type of operating system for which the Capacity Reservation Fleet reserves
+     * 			capacity.</p>
      * @public
      */
-    Message?: string | undefined;
-}
-/**
- * @public
- */
-export interface CreateClientVpnEndpointResult {
+    InstancePlatform?: CapacityReservationInstancePlatform | undefined;
     /**
-     * <p>The ID of the Client VPN endpoint.</p>
+     * <p>The number of capacity units provided by the specified instance type. This value,
+     * 			together with the total target capacity that you specify for the Fleet determine the
+     * 			number of instances for which the Fleet reserves capacity. Both values are based on
+     * 			units that make sense for your workload. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/crfleet-concepts.html#target-capacity">Total target
+     * 				capacity</a> in the <i>Amazon EC2 User Guide</i>.</p>
      * @public
      */
-    ClientVpnEndpointId?: string | undefined;
+    Weight?: number | undefined;
     /**
-     * <p>The current state of the Client VPN endpoint.</p>
+     * <p>The Availability Zone in which the Capacity Reservation Fleet reserves the capacity. A
+     * 			Capacity Reservation Fleet can't span Availability Zones. All instance type
+     * 			specifications that you specify for the Fleet must use the same Availability
+     * 			Zone.</p>
      * @public
      */
-    Status?: ClientVpnEndpointStatus | undefined;
+    AvailabilityZone?: string | undefined;
     /**
-     * <p>The DNS name to be used by clients when establishing their VPN session.</p>
+     * <p>The ID of the Availability Zone in which the Capacity Reservation Fleet reserves the
+     * 			capacity. A Capacity Reservation Fleet can't span Availability Zones. All instance type
+     * 			specifications that you specify for the Fleet must use the same Availability
+     * 			Zone.</p>
      * @public
      */
-    DnsName?: string | undefined;
+    AvailabilityZoneId?: string | undefined;
+    /**
+     * <p>Indicates whether the Capacity Reservation Fleet supports EBS-optimized instances
+     * 			types. This optimization provides dedicated throughput to Amazon EBS and an
+     * 			optimized configuration stack to provide optimal I/O performance. This optimization
+     * 			isn't available with all instance types. Additional usage charges apply when using
+     * 			EBS-optimized instance types.</p>
+     * @public
+     */
+    EbsOptimized?: boolean | undefined;
+    /**
+     * <p>The priority to assign to the instance type. This value is used to determine which of
+     * 			the instance types specified for the Fleet should be prioritized for use. A lower value
+     * 			indicates a high priority. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/crfleet-concepts.html#instance-priority">Instance type
+     * 				priority</a> in the <i>Amazon EC2 User Guide</i>.</p>
+     * @public
+     */
+    Priority?: number | undefined;
 }
 /**
  * @public
  */
-export interface CreateClientVpnRouteRequest {
+export interface CreateCapacityReservationFleetRequest {
     /**
-     * <p>The ID of the Client VPN endpoint to which to add the route.</p>
+     * <p>The strategy used by the Capacity Reservation Fleet to determine which of the
+     * 			specified instance types to use. Currently, only the <code>prioritized</code> allocation
+     * 			strategy is supported. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/crfleet-concepts.html#allocation-strategy"> Allocation
+     * 				strategy</a> in the <i>Amazon EC2 User Guide</i>.</p>
+     *          <p>Valid values: <code>prioritized</code>
+     *          </p>
      * @public
      */
-    ClientVpnEndpointId: string | undefined;
+    AllocationStrategy?: string | undefined;
     /**
-     * <p>The IPv4 address range, in CIDR notation, of the route destination. For example:</p>
+     * <p>Unique, case-sensitive identifier that you provide to ensure the idempotency of the request. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html">Ensure Idempotency</a>.</p>
+     * @public
+     */
+    ClientToken?: string | undefined;
+    /**
+     * <p>Information about the instance types for which to reserve the capacity.</p>
+     * @public
+     */
+    InstanceTypeSpecifications?: ReservationFleetInstanceSpecification[] | undefined;
+    /**
+     * <p>Reserved for internal use.</p>
+     * @public
+     */
+    InstanceRequirements?: InstanceRequirementsRequest | undefined;
+    /**
+     * <p>Reserved for internal use.</p>
+     * @public
+     */
+    AvailabilityZone?: string | undefined;
+    /**
+     * <p>Reserved for internal use.</p>
+     * @public
+     */
+    AvailabilityZoneId?: string | undefined;
+    /**
+     * <p>Indicates the tenancy of the Capacity Reservation Fleet. All Capacity Reservations in
+     * 			the Fleet inherit this tenancy. The Capacity Reservation Fleet can have one of the
+     * 			following tenancy settings:</p>
      *          <ul>
      *             <li>
-     *                <p>To add a route for Internet access, enter <code>0.0.0.0/0</code>
-     *                </p>
-     *             </li>
-     *             <li>
-     *                <p>To add a route for a peered VPC, enter the peered VPC's IPv4 CIDR range</p>
-     *             </li>
-     *             <li>
-     *                <p>To add a route for an on-premises network, enter the Amazon Web Services Site-to-Site VPN connection's IPv4 CIDR range</p>
+     *                <p>
+     *                   <code>default</code> - The Capacity Reservation Fleet is created on hardware
+     * 					that is shared with other Amazon Web Services accounts.</p>
      *             </li>
      *             <li>
-     *                <p>To add a route for the local network, enter the client CIDR range</p>
+     *                <p>
+     *                   <code>dedicated</code> - The Capacity Reservations are created on single-tenant
+     * 					hardware that is dedicated to a single Amazon Web Services account.</p>
      *             </li>
      *          </ul>
      * @public
      */
-    DestinationCidrBlock: string | undefined;
+    Tenancy?: FleetCapacityReservationTenancy | undefined;
     /**
-     * <p>The ID of the subnet through which you want to route traffic. The specified subnet must be
-     * 			an existing target network of the Client VPN endpoint.</p>
-     *          <p>Alternatively, if you're adding a route for the local network, specify <code>local</code>.</p>
-     *          <p>This parameter is required for VPC-based Client VPN endpoints. For Transit Gateway-based endpoints, this parameter is not required.</p>
+     * <p>The total number of capacity units to be reserved by the Capacity Reservation Fleet.
+     * 			This value, together with the instance type weights that you assign to each instance
+     * 			type used by the Fleet determine the number of instances for which the Fleet reserves
+     * 			capacity. Both values are based on units that make sense for your workload. For more
+     * 			information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/crfleet-concepts.html#target-capacity">Total target
+     * 				capacity</a> in the <i>Amazon EC2 User Guide</i>.</p>
      * @public
      */
-    TargetVpcSubnetId?: string | undefined;
+    TotalTargetCapacity: number | undefined;
     /**
-     * <p>A brief description of the route.</p>
+     * <p>The date and time at which the Capacity Reservation Fleet expires. When the Capacity
+     * 			Reservation Fleet expires, its state changes to <code>expired</code> and all of the
+     * 			Capacity Reservations in the Fleet expire.</p>
+     *          <p>The Capacity Reservation Fleet expires within an hour after the specified time. For
+     * 			example, if you specify <code>5/31/2019</code>, <code>13:30:55</code>, the Capacity
+     * 			Reservation Fleet is guaranteed to expire between <code>13:30:55</code> and
+     * 				<code>14:30:55</code> on <code>5/31/2019</code>. </p>
      * @public
      */
-    Description?: string | undefined;
+    EndDate?: Date | undefined;
     /**
-     * <p>Unique, case-sensitive identifier that you provide to ensure the idempotency of the request.
-     * For more information, see <a href="https://docs.aws.amazon.com/ec2/latest/devguide/ec2-api-idempotency.html">Ensuring idempotency</a>.</p>
+     * <p>Indicates the type of instance launches that the Capacity Reservation Fleet accepts.
+     * 			All Capacity Reservations in the Fleet inherit this instance matching criteria.</p>
+     *          <p>Currently, Capacity Reservation Fleets support <code>open</code> instance matching
+     * 			criteria only. This means that instances that have matching attributes (instance type,
+     * 			platform, and Availability Zone) run in the Capacity Reservations automatically.
+     * 			Instances do not need to explicitly target a Capacity Reservation Fleet to use its
+     * 			reserved capacity.</p>
      * @public
      */
-    ClientToken?: string | undefined;
+    InstanceMatchCriteria?: FleetInstanceMatchCriteria | undefined;
+    /**
+     * <p>The tags to assign to the Capacity Reservation Fleet. The tags are automatically
+     * 			assigned to the Capacity Reservations in the Fleet.</p>
+     * @public
+     */
+    TagSpecifications?: TagSpecification[] | undefined;
     /**
      * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
      * @public
@@ -511,1029 +690,1028 @@ export interface CreateClientVpnRouteRequest {
     DryRun?: boolean | undefined;
 }
 /**
- * <p>Describes the state of a Client VPN endpoint route.</p>
+ * <p>Information about a Capacity Reservation in a Capacity Reservation Fleet.</p>
  * @public
  */
-export interface ClientVpnRouteStatus {
+export interface FleetCapacityReservation {
     /**
-     * <p>The state of the Client VPN endpoint route.</p>
+     * <p>The ID of the Capacity Reservation.</p>
      * @public
      */
-    Code?: ClientVpnRouteStatusCode | undefined;
+    CapacityReservationId?: string | undefined;
     /**
-     * <p>A message about the status of the Client VPN endpoint route, if applicable.</p>
+     * <p>The ID of the Availability Zone in which the Capacity Reservation reserves
+     * 			capacity.</p>
      * @public
      */
-    Message?: string | undefined;
-}
-/**
- * @public
- */
-export interface CreateClientVpnRouteResult {
-    /**
-     * <p>The current state of the route.</p>
-     * @public
-     */
-    Status?: ClientVpnRouteStatus | undefined;
-}
-/**
- * @public
- */
-export interface CreateCoipCidrRequest {
-    /**
-     * <p>
-     *       A customer-owned IP address range to create.
-     *       </p>
-     * @public
-     */
-    Cidr: string | undefined;
+    AvailabilityZoneId?: string | undefined;
     /**
-     * <p>
-     *          The ID of the address pool.
-     *       </p>
+     * <p>The instance type for which the Capacity Reservation reserves capacity.</p>
      * @public
      */
-    CoipPoolId: string | undefined;
+    InstanceType?: _InstanceType | undefined;
     /**
-     * <p>Checks whether you have the required permissions for the action, without actually making the request,
-     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+     * <p>The type of operating system for which the Capacity Reservation reserves
+     * 			capacity.</p>
      * @public
      */
-    DryRun?: boolean | undefined;
-}
-/**
- * <p>
- *       Information about a customer-owned IP address range.
- *       </p>
- * @public
- */
-export interface CoipCidr {
+    InstancePlatform?: CapacityReservationInstancePlatform | undefined;
     /**
-     * <p>
-     *       An address range in a customer-owned IP address space.
-     *       </p>
+     * <p>The Availability Zone in which the Capacity Reservation reserves capacity.</p>
      * @public
      */
-    Cidr?: string | undefined;
+    AvailabilityZone?: string | undefined;
     /**
-     * <p>
-     *          The ID of the address pool.
-     *       </p>
+     * <p>The total number of instances for which the Capacity Reservation reserves
+     * 			capacity.</p>
      * @public
      */
-    CoipPoolId?: string | undefined;
+    TotalInstanceCount?: number | undefined;
     /**
-     * <p>
-     *       The ID of the local gateway route table.
-     *       </p>
+     * <p>The number of capacity units fulfilled by the Capacity Reservation. For more
+     * 			information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/crfleet-concepts.html#target-capacity">Total target
+     * 				capacity</a> in the <i>Amazon EC2 User Guide</i>.</p>
      * @public
      */
-    LocalGatewayRouteTableId?: string | undefined;
-}
-/**
- * @public
- */
-export interface CreateCoipCidrResult {
+    FulfilledCapacity?: number | undefined;
     /**
-     * <p>
-     *          Information about a range of customer-owned IP addresses.
-     *       </p>
+     * <p>Indicates whether the Capacity Reservation reserves capacity for EBS-optimized
+     * 			instance types.</p>
      * @public
      */
-    CoipCidr?: CoipCidr | undefined;
-}
-/**
- * @public
- */
-export interface CreateCoipPoolRequest {
+    EbsOptimized?: boolean | undefined;
     /**
-     * <p>
-     *       The ID of the local gateway route table.
-     *       </p>
+     * <p>The date and time at which the Capacity Reservation was created.</p>
      * @public
      */
-    LocalGatewayRouteTableId: string | undefined;
+    CreateDate?: Date | undefined;
     /**
-     * <p>
-     *       The tags to assign to the CoIP address pool.
-     *       </p>
+     * <p>The weight of the instance type in the Capacity Reservation Fleet. For more
+     * 			information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/crfleet-concepts.html#instance-weight">Instance type
+     * 				weight</a> in the <i>Amazon EC2 User Guide</i>.</p>
      * @public
      */
-    TagSpecifications?: TagSpecification[] | undefined;
+    Weight?: number | undefined;
     /**
-     * <p>Checks whether you have the required permissions for the action, without actually making the request,
-     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+     * <p>The priority of the instance type in the Capacity Reservation Fleet. For more
+     * 			information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/crfleet-concepts.html#instance-priority">Instance type
+     * 				priority</a> in the <i>Amazon EC2 User Guide</i>.</p>
      * @public
      */
-    DryRun?: boolean | undefined;
+    Priority?: number | undefined;
 }
 /**
- * <p>Describes a customer-owned address pool.</p>
  * @public
  */
-export interface CoipPool {
+export interface CreateCapacityReservationFleetResult {
     /**
-     * <p>The ID of the address pool.</p>
+     * <p>The ID of the Capacity Reservation Fleet.</p>
      * @public
      */
-    PoolId?: string | undefined;
+    CapacityReservationFleetId?: string | undefined;
     /**
-     * <p>The address ranges of the address pool.</p>
+     * <p>The status of the Capacity Reservation Fleet.</p>
      * @public
      */
-    PoolCidrs?: string[] | undefined;
+    State?: CapacityReservationFleetState | undefined;
     /**
-     * <p>The ID of the local gateway route table.</p>
+     * <p>The total number of capacity units for which the Capacity Reservation Fleet reserves
+     * 			capacity.</p>
      * @public
      */
-    LocalGatewayRouteTableId?: string | undefined;
+    TotalTargetCapacity?: number | undefined;
     /**
-     * <p>The tags.</p>
+     * <p>The requested capacity units that have been successfully reserved.</p>
      * @public
      */
-    Tags?: Tag[] | undefined;
+    TotalFulfilledCapacity?: number | undefined;
     /**
-     * <p>The ARN of the address pool.</p>
+     * <p>The instance matching criteria for the Capacity Reservation Fleet.</p>
      * @public
      */
-    PoolArn?: string | undefined;
-}
-/**
- * @public
- */
-export interface CreateCoipPoolResult {
+    InstanceMatchCriteria?: FleetInstanceMatchCriteria | undefined;
     /**
-     * <p>Information about the CoIP address pool.</p>
+     * <p>The allocation strategy used by the Capacity Reservation Fleet.</p>
      * @public
      */
-    CoipPool?: CoipPool | undefined;
-}
-/**
- * <p>Contains the parameters for CreateCustomerGateway.</p>
- * @public
- */
-export interface CreateCustomerGatewayRequest {
+    AllocationStrategy?: string | undefined;
     /**
-     * <p>For customer gateway devices that support BGP, specify the device's ASN. You must specify either <code>BgpAsn</code> or <code>BgpAsnExtended</code> when creating the customer gateway. If the ASN is larger than <code>2,147,483,647</code>, you must use <code>BgpAsnExtended</code>.</p>
-     *          <p>Default: 65000</p>
-     *          <p>Valid values: <code>1</code> to <code>2,147,483,647</code>
-     *          </p>
+     * <p>The date and time at which the Capacity Reservation Fleet was created.</p>
      * @public
      */
-    BgpAsn?: number | undefined;
+    CreateTime?: Date | undefined;
     /**
-     * <p>
-     *             <i>This member has been deprecated.</i> The Internet-routable IP address for the customer gateway's outside interface. The
-     *             address must be static.</p>
+     * <p>The date and time at which the Capacity Reservation Fleet expires.</p>
      * @public
      */
-    PublicIp?: string | undefined;
+    EndDate?: Date | undefined;
     /**
-     * <p>The Amazon Resource Name (ARN) for the customer gateway certificate.</p>
+     * <p>Indicates the tenancy of Capacity Reservation Fleet.</p>
      * @public
      */
-    CertificateArn?: string | undefined;
+    Tenancy?: FleetCapacityReservationTenancy | undefined;
     /**
-     * <p>The type of VPN connection that this customer gateway supports
-     *             (<code>ipsec.1</code>).</p>
+     * <p>Information about the individual Capacity Reservations in the Capacity Reservation
+     * 			Fleet.</p>
      * @public
      */
-    Type: GatewayType | undefined;
+    FleetCapacityReservations?: FleetCapacityReservation[] | undefined;
     /**
-     * <p>The tags to apply to the customer gateway.</p>
+     * <p>The tags assigned to the Capacity Reservation Fleet.</p>
      * @public
      */
-    TagSpecifications?: TagSpecification[] | undefined;
+    Tags?: Tag[] | undefined;
+}
+/**
+ * @public
+ */
+export interface CreateCarrierGatewayRequest {
     /**
-     * <p>A name for the customer gateway device.</p>
-     *          <p>Length Constraints: Up to 255 characters.</p>
+     * <p>The ID of the VPC to associate with the carrier gateway.</p>
      * @public
      */
-    DeviceName?: string | undefined;
+    VpcId: string | undefined;
     /**
-     * <p>The IP address for the customer gateway device's outside interface. The address must be
-     *             static. If <code>OutsideIpAddressType</code> in your VPN connection options is set to
-     *                 <code>PrivateIpv4</code>, you can use an RFC6598 or RFC1918 private IPv4 address. If
-     *                 <code>OutsideIpAddressType</code> is set to <code>Ipv6</code>, you can use an IPv6 address. </p>
+     * <p>The tags to associate with the carrier gateway.</p>
      * @public
      */
-    IpAddress?: string | undefined;
+    TagSpecifications?: TagSpecification[] | undefined;
     /**
-     * <p>For customer gateway devices that support BGP, specify the device's ASN. You must specify either <code>BgpAsn</code> or <code>BgpAsnExtended</code> when creating the customer gateway. If the ASN is larger than <code>2,147,483,647</code>, you must use <code>BgpAsnExtended</code>.</p>
-     *          <p>Valid values: <code>2,147,483,648</code> to <code>4,294,967,295</code>
-     *          </p>
+     * <p>Checks whether you have the required permissions for the action, without actually making the request,
+     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
      * @public
      */
-    BgpAsnExtended?: number | undefined;
+    DryRun?: boolean | undefined;
     /**
-     * <p>Checks whether you have the required permissions for the action, without actually
-     *             making the request, and provides an error response. If you have the required
-     *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
-     *                 <code>UnauthorizedOperation</code>.</p>
+     * <p>Unique, case-sensitive identifier that you provide to ensure the idempotency of the
+     *             request. For more information, see <a href="https://docs.aws.amazon.com/ec2/latest/devguide/ec2-api-idempotency.html">How to ensure
+     *                 idempotency</a>.</p>
      * @public
      */
-    DryRun?: boolean | undefined;
+    ClientToken?: string | undefined;
 }
 /**
- * <p>Describes a customer gateway.</p>
+ * <p>Describes a carrier gateway.</p>
  * @public
  */
-export interface CustomerGateway {
+export interface CarrierGateway {
     /**
-     * <p>The Amazon Resource Name (ARN) for the customer gateway certificate.</p>
+     * <p>The ID of the carrier gateway.</p>
      * @public
      */
-    CertificateArn?: string | undefined;
+    CarrierGatewayId?: string | undefined;
     /**
-     * <p>The name of customer gateway device.</p>
+     * <p>The ID of the VPC associated with the carrier gateway.</p>
      * @public
      */
-    DeviceName?: string | undefined;
+    VpcId?: string | undefined;
     /**
-     * <p>Any tags assigned to the customer gateway.</p>
+     * <p>The state of the carrier gateway.</p>
      * @public
      */
-    Tags?: Tag[] | undefined;
+    State?: CarrierGatewayState | undefined;
     /**
-     * <p>The customer gateway device's Border Gateway Protocol (BGP) Autonomous System Number
-     *             (ASN).</p>
-     *          <p>Valid values: <code>2,147,483,648</code> to <code>4,294,967,295</code>
-     *          </p>
+     * <p>The Amazon Web Services account ID of the owner of the carrier gateway.</p>
      * @public
      */
-    BgpAsnExtended?: string | undefined;
+    OwnerId?: string | undefined;
     /**
-     * <p>The ID of the customer gateway.</p>
+     * <p>The tags assigned to the carrier gateway.</p>
      * @public
      */
-    CustomerGatewayId?: string | undefined;
+    Tags?: Tag[] | undefined;
+}
+/**
+ * @public
+ */
+export interface CreateCarrierGatewayResult {
     /**
-     * <p>The current state of the customer gateway (<code>pending | available | deleting |
-     *                 deleted</code>).</p>
+     * <p>Information about the carrier gateway.</p>
      * @public
      */
-    State?: string | undefined;
+    CarrierGateway?: CarrierGateway | undefined;
+}
+/**
+ * <p>Describes the Active Directory to be used for client authentication.</p>
+ * @public
+ */
+export interface DirectoryServiceAuthenticationRequest {
     /**
-     * <p>The type of VPN connection the customer gateway supports
-     *             (<code>ipsec.1</code>).</p>
+     * <p>The ID of the Active Directory to be used for authentication.</p>
      * @public
      */
-    Type?: string | undefined;
+    DirectoryId?: string | undefined;
+}
+/**
+ * <p>The IAM SAML identity provider used for federated authentication.</p>
+ * @public
+ */
+export interface FederatedAuthenticationRequest {
     /**
-     * <p>
-     *             The IP address for the customer gateway device's outside interface. The address must be static. If <code>OutsideIpAddressType</code> in your VPN connection options is set to <code>PrivateIpv4</code>, you can use an RFC6598 or RFC1918 private IPv4 address. If
-     *             <code>OutsideIpAddressType</code> is set to <code>PublicIpv4</code>, you can use a public IPv4 address. If <code>OutsideIpAddressType</code> is set to <code>Ipv6</code>, you can use a public IPv6 address.
-     *         </p>
+     * <p>The Amazon Resource Name (ARN) of the IAM SAML identity provider.</p>
      * @public
      */
-    IpAddress?: string | undefined;
+    SAMLProviderArn?: string | undefined;
     /**
-     * <p>The customer gateway device's Border Gateway Protocol (BGP) Autonomous System Number
-     *             (ASN).</p>
-     *          <p>Valid values: <code>1</code> to <code>2,147,483,647</code>
-     *          </p>
+     * <p>The Amazon Resource Name (ARN) of the IAM SAML identity provider for the self-service portal.</p>
      * @public
      */
-    BgpAsn?: string | undefined;
+    SelfServiceSAMLProviderArn?: string | undefined;
 }
 /**
- * <p>Contains the output of CreateCustomerGateway.</p>
+ * <p>Information about the client certificate to be used for authentication.</p>
  * @public
  */
-export interface CreateCustomerGatewayResult {
+export interface CertificateAuthenticationRequest {
     /**
-     * <p>Information about the customer gateway.</p>
+     * <p>The ARN of the client certificate. The certificate must be signed by a certificate
+     * 			authority (CA) and it must be provisioned in Certificate Manager (ACM).</p>
      * @public
      */
-    CustomerGateway?: CustomerGateway | undefined;
+    ClientRootCertificateChainArn?: string | undefined;
 }
 /**
+ * <p>Describes the authentication method to be used by a Client VPN endpoint. For more information, see <a href="https://docs.aws.amazon.com/vpn/latest/clientvpn-admin/authentication-authrization.html#client-authentication">Authentication</a>
+ * 			in the <i>Client VPN Administrator Guide</i>.</p>
  * @public
  */
-export interface CreateDefaultSubnetRequest {
+export interface ClientVpnAuthenticationRequest {
     /**
-     * <p>The Availability Zone in which to create the default subnet.</p>
-     *          <p>Either <code>AvailabilityZone</code> or <code>AvailabilityZoneId</code> must be specified,
-     *             but not both.</p>
+     * <p>The type of client authentication to be used.</p>
      * @public
      */
-    AvailabilityZone?: string | undefined;
+    Type?: ClientVpnAuthenticationType | undefined;
     /**
-     * <p>Checks whether you have the required permissions for the action, without actually making the request,
-     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+     * <p>Information about the Active Directory to be used, if applicable. You must provide this information if <b>Type</b> is <code>directory-service-authentication</code>.</p>
      * @public
      */
-    DryRun?: boolean | undefined;
+    ActiveDirectory?: DirectoryServiceAuthenticationRequest | undefined;
     /**
-     * <p>Indicates whether to create an IPv6 only subnet. If you already have a default subnet
-     *             for this Availability Zone, you must delete it before you can create an IPv6 only subnet.</p>
+     * <p>Information about the authentication certificates to be used, if applicable. You must provide this information if <b>Type</b> is <code>certificate-authentication</code>.</p>
      * @public
      */
-    Ipv6Native?: boolean | undefined;
+    MutualAuthentication?: CertificateAuthenticationRequest | undefined;
     /**
-     * <p>The ID of the Availability Zone.</p>
-     *          <p>Either <code>AvailabilityZone</code> or <code>AvailabilityZoneId</code> must be specified,
-     *             but not both.</p>
+     * <p>Information about the IAM SAML identity provider to be used, if applicable. You must provide this information if <b>Type</b> is <code>federated-authentication</code>.</p>
      * @public
      */
-    AvailabilityZoneId?: string | undefined;
+    FederatedAuthentication?: FederatedAuthenticationRequest | undefined;
 }
 /**
- * <p>The state of VPC Block Public Access (BPA).</p>
+ * <p>The options for managing connection authorization for new client connections.</p>
  * @public
  */
-export interface BlockPublicAccessStates {
+export interface ClientConnectOptions {
     /**
-     * <p>The mode of VPC BPA.</p>
-     *          <ul>
-     *             <li>
-     *                <p>
-     *                   <code>off</code>: VPC BPA is not enabled and traffic is allowed to and from internet gateways and egress-only internet gateways in this Region.</p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>block-bidirectional</code>: Block all traffic to and from internet gateways and egress-only internet gateways in this Region (except for excluded VPCs and subnets).</p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>block-ingress</code>: Block all internet traffic to the VPCs in this Region (except for VPCs or subnets which are excluded). Only traffic to and from NAT gateways and egress-only internet gateways is allowed because these gateways only allow outbound connections to be established.</p>
-     *             </li>
-     *          </ul>
+     * <p>Indicates whether client connect options are enabled. The default is <code>false</code> (not enabled).</p>
      * @public
      */
-    InternetGatewayBlockMode?: BlockPublicAccessMode | undefined;
+    Enabled?: boolean | undefined;
+    /**
+     * <p>The Amazon Resource Name (ARN) of the Lambda function used for connection authorization.</p>
+     * @public
+     */
+    LambdaFunctionArn?: string | undefined;
 }
 /**
- * <p>Describes the options for instance hostnames.</p>
+ * <p>Options for enabling a customizable text banner that will be displayed on
+ * 			Amazon Web Services provided clients when a VPN session is established.</p>
  * @public
  */
-export interface PrivateDnsNameOptionsOnLaunch {
-    /**
-     * <p>The type of hostname for EC2 instances. For IPv4 only subnets, an instance DNS name
-     *             must be based on the instance IPv4 address. For IPv6 only subnets, an instance DNS name
-     *             must be based on the instance ID. For dual-stack subnets, you can specify whether DNS
-     *             names use the instance IPv4 address or the instance ID.</p>
-     * @public
-     */
-    HostnameType?: HostnameType | undefined;
+export interface ClientLoginBannerOptions {
     /**
-     * <p>Indicates whether to respond to DNS queries for instance hostnames with DNS A
-     *             records.</p>
+     * <p>Enable or disable a customizable text banner that will be displayed on
+     * 			Amazon Web Services provided clients when a VPN session is established.</p>
+     *          <p>Valid values: <code>true | false</code>
+     *          </p>
+     *          <p>Default value: <code>false</code>
+     *          </p>
      * @public
      */
-    EnableResourceNameDnsARecord?: boolean | undefined;
+    Enabled?: boolean | undefined;
     /**
-     * <p>Indicates whether to respond to DNS queries for instance hostname with DNS AAAA
-     *             records.</p>
+     * <p>Customizable text that will be displayed in a banner on Amazon Web Services provided
+     * 			clients when a VPN session is established. UTF-8 encoded characters only. Maximum of
+     * 			1400 characters.</p>
      * @public
      */
-    EnableResourceNameDnsAAAARecord?: boolean | undefined;
+    BannerText?: string | undefined;
 }
 /**
- * <p>Describes a subnet.</p>
+ * <p>Client Route Enforcement is a feature of Client VPN that helps enforce administrator defined
+ * 			routes on devices connected through the VPN. This feature helps improve your security
+ * 			posture by ensuring that network traffic originating from a connected client is not
+ * 			inadvertently sent outside the VPN tunnel.</p>
+ *          <p>Client Route Enforcement works by monitoring the route table of a connected device for
+ * 			routing policy changes to the VPN connection. If the feature detects any VPN routing
+ * 			policy modifications, it will automatically force an update to the route table,
+ * 			reverting it back to the expected route configurations.</p>
  * @public
  */
-export interface Subnet {
+export interface ClientRouteEnforcementOptions {
     /**
-     * <p>The AZ ID of the subnet.</p>
+     * <p>Enable or disable Client Route Enforcement. The state can either be <code>true</code>
+     * 			(enabled) or <code>false</code> (disabled). The default is <code>false</code>.</p>
+     *          <p>Valid values: <code>true | false</code>
+     *          </p>
+     *          <p>Default value: <code>false</code>
+     *          </p>
      * @public
      */
-    AvailabilityZoneId?: string | undefined;
+    Enforced?: boolean | undefined;
+}
+/**
+ * <p>Describes the client connection logging options for the Client VPN endpoint.</p>
+ * @public
+ */
+export interface ConnectionLogOptions {
     /**
-     * <p>
-     *             Indicates the device position for local network interfaces in this subnet. For example,
-     *             <code>1</code> indicates local network interfaces in this subnet are the secondary
-     *             network interface (eth1).
-     *         </p>
+     * <p>Indicates whether connection logging is enabled.</p>
      * @public
      */
-    EnableLniAtDeviceIndex?: number | undefined;
+    Enabled?: boolean | undefined;
     /**
-     * <p>Indicates whether a network interface created in this subnet (including a network
-     *             interface created by <a>RunInstances</a>) receives a customer-owned IPv4 address.</p>
+     * <p>The name of the CloudWatch Logs log group. Required if connection logging is enabled.</p>
      * @public
      */
-    MapCustomerOwnedIpOnLaunch?: boolean | undefined;
+    CloudwatchLogGroup?: string | undefined;
     /**
-     * <p>The customer-owned IPv4 address pool associated with the subnet.</p>
+     * <p>The name of the CloudWatch Logs log stream to which the connection data is published.</p>
      * @public
      */
-    CustomerOwnedIpv4Pool?: string | undefined;
+    CloudwatchLogStream?: string | undefined;
     /**
-     * <p>The ID of the Amazon Web Services account that owns the subnet.</p>
+     * <p>Specifies whether to include the authorization policy evaluation context in the connection logs for the Client VPN endpoint.</p>
      * @public
      */
-    OwnerId?: string | undefined;
+    IncludeAuthorizationPolicyContext?: boolean | undefined;
+}
+/**
+ * <p>Describes a device trust provider to configure for a Client VPN endpoint.</p>
+ * @public
+ */
+export interface ClientVpnTrustProviderRequest {
     /**
-     * <p>Indicates whether a network interface created in this subnet (including a network
-     *             interface created by <a>RunInstances</a>) receives an IPv6 address.</p>
+     * <p>The type of the device trust provider. Possible values include:</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>crowdstrike</code> - CrowdStrike device trust provider.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>jamf</code> - Jamf device trust provider.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>jumpcloud</code> - JumpCloud device trust provider.</p>
+     *             </li>
+     *          </ul>
      * @public
      */
-    AssignIpv6AddressOnCreation?: boolean | undefined;
+    TrustProviderType?: ClientVpnDeviceTrustProviderType | undefined;
     /**
-     * <p>Information about the IPv6 CIDR blocks associated with the subnet.</p>
+     * <p>The tenant ID associated with your device trust provider account.</p>
      * @public
      */
-    Ipv6CidrBlockAssociationSet?: SubnetIpv6CidrBlockAssociation[] | undefined;
+    TenantId?: string | undefined;
     /**
-     * <p>Any tags assigned to the subnet.</p>
+     * <p>The URL of the public signing key that is used to verify the identity token issued by the device trust provider.</p>
      * @public
      */
-    Tags?: Tag[] | undefined;
+    PublicSigningKeyUrl?: string | undefined;
+}
+/**
+ * <p>Describes the device posture options for a Client VPN endpoint. Device posture options specify the device trust providers that the endpoint uses to evaluate the security posture of connecting devices.</p>
+ * @public
+ */
+export interface DevicePostureOptions {
     /**
-     * <p>The Amazon Resource Name (ARN) of the subnet.</p>
+     * <p>The device trust providers to configure for the Client VPN endpoint.</p>
      * @public
      */
-    SubnetArn?: string | undefined;
+    TrustProviders?: ClientVpnTrustProviderRequest[] | undefined;
     /**
-     * <p>The Amazon Resource Name (ARN) of the Outpost.</p>
+     * <p>Indicates whether device posture evaluation is enabled for the Client VPN endpoint. Specify <code>false</code> to disable device posture, which clears the configured device trust providers.</p>
      * @public
      */
-    OutpostArn?: string | undefined;
+    Enabled?: boolean | undefined;
+}
+/**
+ * <p>The Transit Gateway configuration for a Client VPN endpoint.</p>
+ * @public
+ */
+export interface TransitGatewayConfigurationInputStructure {
     /**
-     * <p>Indicates whether DNS queries made to the Amazon-provided DNS Resolver in this subnet
-     *             should return synthetic IPv6 addresses for IPv4-only destinations.</p>
+     * <p>The ID of the Transit Gateway to associate with the Client VPN endpoint.</p>
      * @public
      */
-    EnableDns64?: boolean | undefined;
+    TransitGatewayId?: string | undefined;
     /**
-     * <p>Indicates whether this is an IPv6 only subnet.</p>
+     * <p>The Availability Zone names for the Transit Gateway association. You can specify up to the maximum number of Availability Zones supported by the Transit Gateway. You cannot specify both <code>AvailabilityZones</code> and <code>AvailabilityZoneIds</code>.</p>
      * @public
      */
-    Ipv6Native?: boolean | undefined;
+    AvailabilityZones?: string[] | undefined;
     /**
-     * <p>The type of hostnames to assign to instances in the subnet at launch. An instance hostname
-     *             is based on the IPv4 address or ID of the instance.</p>
+     * <p>The Availability Zone IDs for the Transit Gateway association. You can specify up to the maximum number of Availability Zones supported by the Transit Gateway. You cannot specify both <code>AvailabilityZones</code> and <code>AvailabilityZoneIds</code>.</p>
      * @public
      */
-    PrivateDnsNameOptionsOnLaunch?: PrivateDnsNameOptionsOnLaunch | undefined;
+    AvailabilityZoneIds?: string[] | undefined;
+}
+/**
+ * @public
+ */
+export interface CreateClientVpnEndpointRequest {
     /**
-     * <p>The state of VPC Block Public Access (BPA).</p>
+     * <p>The IPv4 address range, in CIDR notation, from which to assign client IP addresses. The address range cannot overlap with the local CIDR of the VPC in which the associated subnet is located, or the routes that you add manually. The address range cannot be changed after the Client VPN endpoint has been created. Client CIDR range must have a size of at least /22 and must not be greater than /12.</p>
      * @public
      */
-    BlockPublicAccessStates?: BlockPublicAccessStates | undefined;
+    ClientCidrBlock?: string | undefined;
     /**
-     * <p>Indicates if this is a subnet used with Amazon Elastic VMware Service (EVS).
-     *             Possible values are <code>Elastic VMware Service</code> or no value. For more
-     *             information about Amazon EVS, see <a href="https://docs.aws.amazon.com/evs/latest/APIReference/Welcome.html">
-     *                <i>Amazon Elastic VMware Service
-     *                     API Reference</i>
-     *             </a>.</p>
+     * <p>The ARN of the server certificate. For more information, see
+     * 			the <a href="https://docs.aws.amazon.com/acm/latest/userguide/">Certificate Manager User Guide</a>.</p>
      * @public
      */
-    Type?: string | undefined;
+    ServerCertificateArn: string | undefined;
     /**
-     * <p>The ID of the subnet.</p>
+     * <p>Information about the authentication method to be used to authenticate clients.</p>
      * @public
      */
-    SubnetId?: string | undefined;
+    AuthenticationOptions: ClientVpnAuthenticationRequest[] | undefined;
     /**
-     * <p>The current state of the subnet.</p>
+     * <p>Information about the client connection logging options.</p>
+     *          <p>If you enable client connection logging, data about client connections is sent to a
+     * 			Cloudwatch Logs log stream. The following information is logged:</p>
      *          <ul>
      *             <li>
-     *                <p>
-     *                   <code>failed</code>: The underlying infrastructure to support the subnet failed to provision
-     *                     as expected.</p>
+     *                <p>Client connection requests</p>
      *             </li>
      *             <li>
-     *                <p>
-     *                   <code>failed-insufficient-capacity</code>: The underlying infrastructure to support the subnet
-     *                     failed to provision due to a shortage of EC2 instance capacity.</p>
+     *                <p>Client connection results (successful and unsuccessful)</p>
+     *             </li>
+     *             <li>
+     *                <p>Reasons for unsuccessful client connection requests</p>
+     *             </li>
+     *             <li>
+     *                <p>Client connection termination time</p>
      *             </li>
      *          </ul>
      * @public
      */
-    State?: SubnetState | undefined;
+    ConnectionLogOptions: ConnectionLogOptions | undefined;
     /**
-     * <p>The ID of the VPC the subnet is in.</p>
+     * <p>Information about the DNS servers to be used for DNS resolution. A Client VPN endpoint can
+     * 			have up to two DNS servers. If no DNS server is specified, the DNS address configured on the device is used for the DNS server.</p>
      * @public
      */
-    VpcId?: string | undefined;
+    DnsServers?: string[] | undefined;
     /**
-     * <p>The IPv4 CIDR block assigned to the subnet.</p>
+     * <p>The transport protocol to be used by the VPN session.</p>
+     *          <p>Default value: <code>udp</code>
+     *          </p>
      * @public
      */
-    CidrBlock?: string | undefined;
+    TransportProtocol?: TransportProtocol | undefined;
     /**
-     * <p>The number of unused private IPv4 addresses in the subnet. The IPv4 addresses for any
-     * 			stopped instances are considered unavailable.</p>
+     * <p>The port number to assign to the Client VPN endpoint for TCP and UDP traffic.</p>
+     *          <p>Valid Values: <code>443</code> | <code>1194</code>
+     *          </p>
+     *          <p>Default Value: <code>443</code>
+     *          </p>
      * @public
      */
-    AvailableIpAddressCount?: number | undefined;
+    VpnPort?: number | undefined;
     /**
-     * <p>The Availability Zone of the subnet.</p>
+     * <p>A brief description of the Client VPN endpoint.</p>
      * @public
      */
-    AvailabilityZone?: string | undefined;
+    Description?: string | undefined;
     /**
-     * <p>Indicates whether this is the default subnet for the Availability Zone.</p>
+     * <p>Indicates whether split-tunnel is enabled on the Client VPN endpoint.</p>
+     *          <p>By default, split-tunnel on a VPN endpoint is disabled.</p>
+     *          <p>For information about split-tunnel VPN endpoints, see <a href="https://docs.aws.amazon.com/vpn/latest/clientvpn-admin/split-tunnel-vpn.html">Split-tunnel Client VPN endpoint</a> in the
+     * 			<i>Client VPN Administrator Guide</i>.</p>
      * @public
      */
-    DefaultForAz?: boolean | undefined;
+    SplitTunnel?: boolean | undefined;
     /**
-     * <p>Indicates whether instances launched in this subnet receive a public IPv4 address.</p>
-     *          <p>Amazon Web Services charges for all public IPv4 addresses, including public IPv4 addresses
-     * associated with running instances and Elastic IP addresses. For more information, see the <i>Public IPv4 Address</i> tab on the <a href="http://aws.amazon.com/vpc/pricing/">Amazon VPC pricing page</a>.</p>
+     * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
      * @public
      */
-    MapPublicIpOnLaunch?: boolean | undefined;
-}
-/**
- * @public
- */
-export interface CreateDefaultSubnetResult {
+    DryRun?: boolean | undefined;
     /**
-     * <p>Information about the subnet.</p>
+     * <p>Unique, case-sensitive identifier that you provide to ensure the idempotency of the request.
+     * For more information, see <a href="https://docs.aws.amazon.com/ec2/latest/devguide/ec2-api-idempotency.html">Ensuring idempotency</a>.</p>
      * @public
      */
-    Subnet?: Subnet | undefined;
-}
-/**
- * @public
- */
-export interface CreateDefaultVpcRequest {
+    ClientToken?: string | undefined;
     /**
-     * <p>Checks whether you have the required permissions for the action, without actually making the request,
-     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-     * @public
-     */
-    DryRun?: boolean | undefined;
-}
-/**
- * <p>Describes an exclusion configuration for VPC Encryption Control.</p>
- *          <p>For more information, see <a href="https://docs.aws.amazon.com/vpc/latest/userguide/vpc-encryption-controls.html">Enforce VPC encryption in transit</a> in the <i>Amazon VPC User Guide</i>.</p>
- * @public
- */
-export interface VpcEncryptionControlExclusion {
-    /**
-     * <p>The current state of the exclusion configuration.</p>
-     * @public
-     */
-    State?: VpcEncryptionControlExclusionState | undefined;
-    /**
-     * <p>A message providing additional information about the exclusion state.</p>
-     * @public
-     */
-    StateMessage?: string | undefined;
-}
-/**
- * <p>Describes the exclusion configurations for various resource types in VPC Encryption Control.</p>
- *          <p>For more information, see <a href="https://docs.aws.amazon.com/vpc/latest/userguide/vpc-encryption-controls.html">Enforce VPC encryption in transit</a> in the <i>Amazon VPC User Guide</i>.</p>
- * @public
- */
-export interface VpcEncryptionControlExclusions {
-    /**
-     * <p>The exclusion configuration for internet gateway traffic.</p>
+     * <p>The tags to apply to the Client VPN endpoint during creation.</p>
      * @public
      */
-    InternetGateway?: VpcEncryptionControlExclusion | undefined;
+    TagSpecifications?: TagSpecification[] | undefined;
     /**
-     * <p>The exclusion configuration for egress-only internet gateway traffic.</p>
+     * <p>The IDs of one or more security groups to apply to the target network. You must also specify the ID of the VPC that contains the security groups.</p>
      * @public
      */
-    EgressOnlyInternetGateway?: VpcEncryptionControlExclusion | undefined;
+    SecurityGroupIds?: string[] | undefined;
     /**
-     * <p>The exclusion configuration for NAT gateway traffic.</p>
+     * <p>The ID of the VPC to associate with the Client VPN endpoint. If no security group IDs are specified in the request, the default security group for the VPC is applied.</p>
      * @public
      */
-    NatGateway?: VpcEncryptionControlExclusion | undefined;
+    VpcId?: string | undefined;
     /**
-     * <p>The exclusion configuration for virtual private gateway traffic.</p>
+     * <p>Specify whether to enable the self-service portal for the Client VPN endpoint.</p>
+     *          <p>Default Value: <code>enabled</code>
+     *          </p>
      * @public
      */
-    VirtualPrivateGateway?: VpcEncryptionControlExclusion | undefined;
+    SelfServicePortal?: SelfServicePortal | undefined;
     /**
-     * <p>The exclusion configuration for VPC peering connection traffic.</p>
+     * <p>The options for managing connection authorization for new client connections.</p>
      * @public
      */
-    VpcPeering?: VpcEncryptionControlExclusion | undefined;
+    ClientConnectOptions?: ClientConnectOptions | undefined;
     /**
-     * <p>The exclusion configuration for Lambda function traffic.</p>
+     * <p>The maximum VPN session duration time in hours.</p>
+     *          <p>Valid values: <code>8 | 10 | 12 | 24</code>
+     *          </p>
+     *          <p>Default value: <code>24</code>
+     *          </p>
      * @public
      */
-    Lambda?: VpcEncryptionControlExclusion | undefined;
+    SessionTimeoutHours?: number | undefined;
     /**
-     * <p>The exclusion configuration for VPC Lattice traffic.</p>
+     * <p>Options for enabling a customizable text banner that will be displayed on
+     * 			Amazon Web Services provided clients when a VPN session is established.</p>
      * @public
      */
-    VpcLattice?: VpcEncryptionControlExclusion | undefined;
+    ClientLoginBannerOptions?: ClientLoginBannerOptions | undefined;
     /**
-     * <p>The exclusion configuration for Elastic File System traffic.</p>
+     * <p>Client route enforcement is a feature of the Client VPN service that helps enforce administrator defined routes on devices connected through the VPN. T
+     * 		his feature helps improve your security posture by ensuring that network traffic originating from a connected client is not inadvertently sent outside the VPN tunnel.</p>
+     *          <p>Client route enforcement works by monitoring the route table of a connected device for routing policy changes to the VPN connection. If the feature detects any VPN routing policy modifications, it will automatically force an update to the route table,
+     * 			reverting it back to the expected route configurations.</p>
      * @public
      */
-    ElasticFileSystem?: VpcEncryptionControlExclusion | undefined;
-}
-/**
- * <p>Describes the configuration and state of VPC encryption controls.</p>
- *          <p>For more information, see <a href="https://docs.aws.amazon.com/vpc/latest/userguide/vpc-encryption-controls.html">Enforce VPC encryption in transit</a> in the <i>Amazon VPC User Guide</i>.</p>
- * @public
- */
-export interface VpcEncryptionControl {
+    ClientRouteEnforcementOptions?: ClientRouteEnforcementOptions | undefined;
     /**
-     * <p>The ID of the VPC associated with the encryption control configuration.</p>
+     * <p>Indicates whether the client VPN session is disconnected after the maximum timeout specified in <code>SessionTimeoutHours</code> is reached. If <code>true</code>, users are prompted to reconnect client VPN. If <code>false</code>, client VPN attempts to reconnect automatically.
+     *                    The default value is <code>true</code>.</p>
      * @public
      */
-    VpcId?: string | undefined;
+    DisconnectOnSessionTimeout?: boolean | undefined;
     /**
-     * <p>The ID of the VPC Encryption Control configuration.</p>
+     * <p>The IP address type for the Client VPN endpoint. Valid values are <code>ipv4</code>
+     * 			(default) for IPv4 addressing only, <code>ipv6</code> for IPv6 addressing only, or <code>dual-stack</code> for both IPv4 and IPv6
+     * 			addressing. When set to <code>dual-stack,</code> clients can connect to the endpoint
+     * 			using either IPv4 or IPv6 addresses..</p>
      * @public
      */
-    VpcEncryptionControlId?: string | undefined;
+    EndpointIpAddressType?: EndpointIpAddressType | undefined;
     /**
-     * <p>The encryption mode for the VPC Encryption Control configuration.</p>
+     * <p>The IP address type for traffic within the Client VPN tunnel. Valid values are <code>ipv4</code> (default) for IPv4 traffic only, <code>ipv6</code> for IPv6 addressing only, or <code>dual-stack</code> for both IPv4 and IPv6 traffic. When set to <code>dual-stack</code>, clients can access both IPv4 and IPv6 resources through the VPN .</p>
      * @public
      */
-    Mode?: VpcEncryptionControlMode | undefined;
+    TrafficIpAddressType?: TrafficIpAddressType | undefined;
     /**
-     * <p>The current state of the VPC Encryption Control configuration.</p>
+     * <p>The Transit Gateway configuration for the Client VPN endpoint. Use this parameter to associate the endpoint with a Transit Gateway instead of a VPC. You cannot specify both <code>TransitGatewayConfiguration</code> and <code>VpcId</code>/<code>SecurityGroupIds</code>.</p>
      * @public
      */
-    State?: VpcEncryptionControlState | undefined;
+    TransitGatewayConfiguration?: TransitGatewayConfigurationInputStructure | undefined;
     /**
-     * <p>A message providing additional information about the encryption control state.</p>
+     * <p>The device posture options for the Client VPN endpoint. Use this parameter to specify the device trust providers that the endpoint uses to evaluate the security posture of connecting devices.</p>
      * @public
      */
-    StateMessage?: string | undefined;
+    DevicePostureOptions?: DevicePostureOptions | undefined;
+}
+/**
+ * <p>Describes the state of a Client VPN endpoint.</p>
+ * @public
+ */
+export interface ClientVpnEndpointStatus {
     /**
-     * <p>Information about resource exclusions for the VPC Encryption Control configuration.</p>
+     * <p>The state of the Client VPN endpoint. Possible states include:</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>pending-associate</code> - The Client VPN endpoint has been created but no target networks
+     * 					have been associated. The Client VPN endpoint cannot accept connections.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>available</code> - The Client VPN endpoint has been created and a target network has been
+     * 					associated. The Client VPN endpoint can accept connections.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>deleting</code> - The Client VPN endpoint is being deleted. The Client VPN endpoint cannot accept
+     * 					connections.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>deleted</code> - The Client VPN endpoint has been deleted. The Client VPN endpoint cannot accept
+     * 					connections.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>pending</code> - The Client VPN endpoint has been created with a Transit Gateway configuration and is waiting for the Transit Gateway attachment to be accepted. The Client VPN endpoint cannot accept connections.</p>
+     *             </li>
+     *          </ul>
      * @public
      */
-    ResourceExclusions?: VpcEncryptionControlExclusions | undefined;
+    Code?: ClientVpnEndpointStatusCode | undefined;
     /**
-     * <p>The tags assigned to the VPC Encryption Control configuration.</p>
+     * <p>A message about the status of the Client VPN endpoint.</p>
      * @public
      */
-    Tags?: Tag[] | undefined;
+    Message?: string | undefined;
 }
 /**
- * <p>Describes a VPC.</p>
  * @public
  */
-export interface Vpc {
-    /**
-     * <p>The ID of the Amazon Web Services account that owns the VPC.</p>
-     * @public
-     */
-    OwnerId?: string | undefined;
+export interface CreateClientVpnEndpointResult {
     /**
-     * <p>The allowed tenancy of instances launched into the VPC.</p>
+     * <p>The ID of the Client VPN endpoint.</p>
      * @public
      */
-    InstanceTenancy?: Tenancy | undefined;
+    ClientVpnEndpointId?: string | undefined;
     /**
-     * <p>Information about the IPv6 CIDR blocks associated with the VPC.</p>
+     * <p>The current state of the Client VPN endpoint.</p>
      * @public
      */
-    Ipv6CidrBlockAssociationSet?: VpcIpv6CidrBlockAssociation[] | undefined;
+    Status?: ClientVpnEndpointStatus | undefined;
     /**
-     * <p>Information about the IPv4 CIDR blocks associated with the VPC.</p>
+     * <p>The DNS name to be used by clients when establishing their VPN session.</p>
      * @public
      */
-    CidrBlockAssociationSet?: VpcCidrBlockAssociation[] | undefined;
+    DnsName?: string | undefined;
+}
+/**
+ * @public
+ */
+export interface CreateClientVpnRouteRequest {
     /**
-     * <p>Indicates whether the VPC is the default VPC.</p>
+     * <p>The ID of the Client VPN endpoint to which to add the route.</p>
      * @public
      */
-    IsDefault?: boolean | undefined;
+    ClientVpnEndpointId: string | undefined;
     /**
-     * <p>Describes the configuration and state of VPC encryption controls.</p>
-     *          <p>For more information, see <a href="https://docs.aws.amazon.com/vpc/latest/userguide/vpc-encryption-controls.html">Enforce VPC encryption in transit</a> in the <i>Amazon VPC User Guide</i>.</p>
+     * <p>The IPv4 address range, in CIDR notation, of the route destination. For example:</p>
+     *          <ul>
+     *             <li>
+     *                <p>To add a route for Internet access, enter <code>0.0.0.0/0</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>To add a route for a peered VPC, enter the peered VPC's IPv4 CIDR range</p>
+     *             </li>
+     *             <li>
+     *                <p>To add a route for an on-premises network, enter the Amazon Web Services Site-to-Site VPN connection's IPv4 CIDR range</p>
+     *             </li>
+     *             <li>
+     *                <p>To add a route for the local network, enter the client CIDR range</p>
+     *             </li>
+     *          </ul>
      * @public
      */
-    EncryptionControl?: VpcEncryptionControl | undefined;
+    DestinationCidrBlock: string | undefined;
     /**
-     * <p>Any tags assigned to the VPC.</p>
+     * <p>The ID of the subnet through which you want to route traffic. The specified subnet must be
+     * 			an existing target network of the Client VPN endpoint.</p>
+     *          <p>Alternatively, if you're adding a route for the local network, specify <code>local</code>.</p>
+     *          <p>This parameter is required for VPC-based Client VPN endpoints. For Transit Gateway-based endpoints, this parameter is not required.</p>
      * @public
      */
-    Tags?: Tag[] | undefined;
+    TargetVpcSubnetId?: string | undefined;
     /**
-     * <p>The state of VPC Block Public Access (BPA).</p>
+     * <p>A brief description of the route.</p>
      * @public
      */
-    BlockPublicAccessStates?: BlockPublicAccessStates | undefined;
+    Description?: string | undefined;
     /**
-     * <p>The ID of the VPC.</p>
+     * <p>Unique, case-sensitive identifier that you provide to ensure the idempotency of the request.
+     * For more information, see <a href="https://docs.aws.amazon.com/ec2/latest/devguide/ec2-api-idempotency.html">Ensuring idempotency</a>.</p>
      * @public
      */
-    VpcId?: string | undefined;
+    ClientToken?: string | undefined;
     /**
-     * <p>The current state of the VPC.</p>
+     * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
      * @public
      */
-    State?: VpcState | undefined;
+    DryRun?: boolean | undefined;
+}
+/**
+ * <p>Describes the state of a Client VPN endpoint route.</p>
+ * @public
+ */
+export interface ClientVpnRouteStatus {
     /**
-     * <p>The primary IPv4 CIDR block for the VPC.</p>
+     * <p>The state of the Client VPN endpoint route.</p>
      * @public
      */
-    CidrBlock?: string | undefined;
+    Code?: ClientVpnRouteStatusCode | undefined;
     /**
-     * <p>The ID of the set of DHCP options you've associated with the VPC.</p>
+     * <p>A message about the status of the Client VPN endpoint route, if applicable.</p>
      * @public
      */
-    DhcpOptionsId?: string | undefined;
+    Message?: string | undefined;
 }
 /**
  * @public
  */
-export interface CreateDefaultVpcResult {
+export interface CreateClientVpnRouteResult {
     /**
-     * <p>Information about the VPC.</p>
+     * <p>The current state of the route.</p>
      * @public
      */
-    Vpc?: Vpc | undefined;
+    Status?: ClientVpnRouteStatus | undefined;
 }
 /**
  * @public
  */
-export interface CreateDelegateMacVolumeOwnershipTaskRequest {
+export interface CreateCoipCidrRequest {
     /**
-     * <p>Unique, case-sensitive identifier that you provide to ensure the idempotency of the request. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html">Ensuring Idempotency</a>.</p>
+     * <p>
+     *       A customer-owned IP address range to create.
+     *       </p>
      * @public
      */
-    ClientToken?: string | undefined;
+    Cidr: string | undefined;
     /**
-     * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+     * <p>
+     *          The ID of the address pool.
+     *       </p>
      * @public
      */
-    DryRun?: boolean | undefined;
+    CoipPoolId: string | undefined;
     /**
-     * <p>The ID of the Amazon EC2 Mac instance.</p>
+     * <p>Checks whether you have the required permissions for the action, without actually making the request,
+     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
      * @public
      */
-    InstanceId: string | undefined;
-    /**
-     * <p>Specifies the following credentials:</p>
-     *          <ul>
-     *             <li>
-     *                <p>
-     *                   <b>Internal disk administrative user</b>
-     *                </p>
-     *                <ul>
-     *                   <li>
-     *                      <p>
-     *                         <b>Username</b> - Only the default administrative user
-     *                      (<code>aws-managed-user</code>) is supported and it is used by default. You can't
-     *                      specify a different administrative user.</p>
-     *                   </li>
-     *                   <li>
-     *                      <p>
-     *                         <b>Password</b> - If you did not change the default
-     *                      password for <code>aws-managed-user</code>, specify the default password, which is
-     *                      <i>blank</i>. Otherwise, specify your password.</p>
-     *                   </li>
-     *                </ul>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <b>Amazon EBS root volume administrative user</b>
-     *                </p>
-     *                <ul>
-     *                   <li>
-     *                      <p>
-     *                         <b>Username</b> - If you did not change the default
-     *                      administrative user, specify <code>ec2-user</code>. Otherwise, specify the username
-     *                      for your administrative user.</p>
-     *                   </li>
-     *                   <li>
-     *                      <p>
-     *                         <b>Password</b> - Specify the password for the
-     *                      administrative user.</p>
-     *                   </li>
-     *                </ul>
-     *             </li>
-     *          </ul>
-     *          <p>The credentials must be specified in the following JSON format:</p>
-     *          <p>
-     *             <code>\{
-     *   "internalDiskPassword":"<i>internal-disk-admin_password</i>",
-     *   "rootVolumeUsername":"<i>root-volume-admin_username</i>",
-     *   "rootVolumepassword":"<i>root-volume-admin_password</i>"
-     * \}</code>
-     *          </p>
-     * @public
-     */
-    MacCredentials: string | undefined;
-    /**
-     * <p>The tags to assign to the volume ownership delegation task.</p>
-     * @public
-     */
-    TagSpecifications?: TagSpecification[] | undefined;
+    DryRun?: boolean | undefined;
 }
 /**
- * <p>Describes the configuration for a System Integrity Protection (SIP) modification task.</p>
+ * <p>
+ *       Information about a customer-owned IP address range.
+ *       </p>
  * @public
  */
-export interface MacSystemIntegrityProtectionConfiguration {
-    /**
-     * <p>Indicates whether Apple Internal was enabled or disabled by the task.</p>
-     * @public
-     */
-    AppleInternal?: MacSystemIntegrityProtectionSettingStatus | undefined;
+export interface CoipCidr {
     /**
-     * <p>Indicates whether Base System was enabled or disabled by the task.</p>
+     * <p>
+     *       An address range in a customer-owned IP address space.
+     *       </p>
      * @public
      */
-    BaseSystem?: MacSystemIntegrityProtectionSettingStatus | undefined;
+    Cidr?: string | undefined;
     /**
-     * <p>Indicates whether Debugging Restrictions was enabled or disabled by the task.</p>
+     * <p>
+     *          The ID of the address pool.
+     *       </p>
      * @public
      */
-    DebuggingRestrictions?: MacSystemIntegrityProtectionSettingStatus | undefined;
+    CoipPoolId?: string | undefined;
     /**
-     * <p>Indicates whether Dtrace Restrictions was enabled or disabled by the task.</p>
+     * <p>
+     *       The ID of the local gateway route table.
+     *       </p>
      * @public
      */
-    DTraceRestrictions?: MacSystemIntegrityProtectionSettingStatus | undefined;
+    LocalGatewayRouteTableId?: string | undefined;
+}
+/**
+ * @public
+ */
+export interface CreateCoipCidrResult {
     /**
-     * <p>Indicates whether Filesystem Protections was enabled or disabled by the task.</p>
+     * <p>
+     *          Information about a range of customer-owned IP addresses.
+     *       </p>
      * @public
      */
-    FilesystemProtections?: MacSystemIntegrityProtectionSettingStatus | undefined;
+    CoipCidr?: CoipCidr | undefined;
+}
+/**
+ * @public
+ */
+export interface CreateCoipPoolRequest {
     /**
-     * <p>Indicates whether Kext Signing was enabled or disabled by the task.</p>
+     * <p>
+     *       The ID of the local gateway route table.
+     *       </p>
      * @public
      */
-    KextSigning?: MacSystemIntegrityProtectionSettingStatus | undefined;
+    LocalGatewayRouteTableId: string | undefined;
     /**
-     * <p>Indicates whether NVRAM Protections was enabled or disabled by the task.</p>
+     * <p>
+     *       The tags to assign to the CoIP address pool.
+     *       </p>
      * @public
      */
-    NvramProtections?: MacSystemIntegrityProtectionSettingStatus | undefined;
+    TagSpecifications?: TagSpecification[] | undefined;
     /**
-     * <p>Indicates SIP was enabled or disabled by the task.</p>
+     * <p>Checks whether you have the required permissions for the action, without actually making the request,
+     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
      * @public
      */
-    Status?: MacSystemIntegrityProtectionSettingStatus | undefined;
+    DryRun?: boolean | undefined;
 }
 /**
- * <p>Information about a System Integrity Protection (SIP) modification task or volume
- *          ownership delegation task for an Amazon EC2 Mac instance.</p>
+ * <p>Describes a customer-owned address pool.</p>
  * @public
  */
-export interface MacModificationTask {
-    /**
-     * <p>The ID of the Amazon EC2 Mac instance.</p>
-     * @public
-     */
-    InstanceId?: string | undefined;
+export interface CoipPool {
     /**
-     * <p>The ID of task.</p>
+     * <p>The ID of the address pool.</p>
      * @public
      */
-    MacModificationTaskId?: string | undefined;
+    PoolId?: string | undefined;
     /**
-     * <p>[SIP modification tasks only] Information about the SIP
-     *          configuration.</p>
+     * <p>The address ranges of the address pool.</p>
      * @public
      */
-    MacSystemIntegrityProtectionConfig?: MacSystemIntegrityProtectionConfiguration | undefined;
+    PoolCidrs?: string[] | undefined;
     /**
-     * <p>The date and time the task was created, in the UTC timezone
-     *          (<code>YYYY-MM-DDThh:mm:ss.sssZ</code>).</p>
+     * <p>The ID of the local gateway route table.</p>
      * @public
      */
-    StartTime?: Date | undefined;
+    LocalGatewayRouteTableId?: string | undefined;
     /**
-     * <p>The tags assigned to the task.</p>
+     * <p>The tags.</p>
      * @public
      */
     Tags?: Tag[] | undefined;
     /**
-     * <p>The state of the task.</p>
-     * @public
-     */
-    TaskState?: MacModificationTaskState | undefined;
-    /**
-     * <p>The type of task.</p>
+     * <p>The ARN of the address pool.</p>
      * @public
      */
-    TaskType?: MacModificationTaskType | undefined;
+    PoolArn?: string | undefined;
 }
 /**
  * @public
  */
-export interface CreateDelegateMacVolumeOwnershipTaskResult {
+export interface CreateCoipPoolResult {
     /**
-     * <p>Information about the volume ownership delegation task.</p>
+     * <p>Information about the CoIP address pool.</p>
      * @public
      */
-    MacModificationTask?: MacModificationTask | undefined;
+    CoipPool?: CoipPool | undefined;
 }
 /**
- * <p>Describes a DHCP configuration option.</p>
+ * <p>Contains the parameters for CreateCustomerGateway.</p>
  * @public
  */
-export interface NewDhcpConfiguration {
+export interface CreateCustomerGatewayRequest {
     /**
-     * <p>The name of a DHCP option.</p>
+     * <p>For customer gateway devices that support BGP, specify the device's ASN. You must specify either <code>BgpAsn</code> or <code>BgpAsnExtended</code> when creating the customer gateway. If the ASN is larger than <code>2,147,483,647</code>, you must use <code>BgpAsnExtended</code>.</p>
+     *          <p>Default: 65000</p>
+     *          <p>Valid values: <code>1</code> to <code>2,147,483,647</code>
+     *          </p>
      * @public
      */
-    Key?: string | undefined;
+    BgpAsn?: number | undefined;
     /**
-     * <p>The values for the DHCP option.</p>
+     * <p>
+     *             <i>This member has been deprecated.</i> The Internet-routable IP address for the customer gateway's outside interface. The
+     *             address must be static.</p>
      * @public
      */
-    Values?: string[] | undefined;
-}
-/**
- * @public
- */
-export interface CreateDhcpOptionsRequest {
+    PublicIp?: string | undefined;
     /**
-     * <p>A DHCP configuration option.</p>
+     * <p>The Amazon Resource Name (ARN) for the customer gateway certificate.</p>
      * @public
      */
-    DhcpConfigurations: NewDhcpConfiguration[] | undefined;
+    CertificateArn?: string | undefined;
     /**
-     * <p>The tags to assign to the DHCP option.</p>
+     * <p>The type of VPN connection that this customer gateway supports
+     *             (<code>ipsec.1</code>).</p>
+     * @public
+     */
+    Type: GatewayType | undefined;
+    /**
+     * <p>The tags to apply to the customer gateway.</p>
      * @public
      */
     TagSpecifications?: TagSpecification[] | undefined;
     /**
-     * <p>Checks whether you have the required permissions for the action, without actually making the request,
-     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+     * <p>A name for the customer gateway device.</p>
+     *          <p>Length Constraints: Up to 255 characters.</p>
      * @public
      */
-    DryRun?: boolean | undefined;
-}
-/**
- * <p>Describes a value for a resource attribute that is a String.</p>
- * @public
- */
-export interface AttributeValue {
+    DeviceName?: string | undefined;
     /**
-     * <p>The attribute value. The value is case-sensitive.</p>
+     * <p>The IP address for the customer gateway device's outside interface. The address must be
+     *             static. If <code>OutsideIpAddressType</code> in your VPN connection options is set to
+     *                 <code>PrivateIpv4</code>, you can use an RFC6598 or RFC1918 private IPv4 address. If
+     *                 <code>OutsideIpAddressType</code> is set to <code>Ipv6</code>, you can use an IPv6 address. </p>
      * @public
      */
-    Value?: string | undefined;
-}
-/**
- * <p>Describes a DHCP configuration option.</p>
- * @public
- */
-export interface DhcpConfiguration {
+    IpAddress?: string | undefined;
     /**
-     * <p>The name of a DHCP option.</p>
+     * <p>For customer gateway devices that support BGP, specify the device's ASN. You must specify either <code>BgpAsn</code> or <code>BgpAsnExtended</code> when creating the customer gateway. If the ASN is larger than <code>2,147,483,647</code>, you must use <code>BgpAsnExtended</code>.</p>
+     *          <p>Valid values: <code>2,147,483,648</code> to <code>4,294,967,295</code>
+     *          </p>
      * @public
      */
-    Key?: string | undefined;
+    BgpAsnExtended?: number | undefined;
     /**
-     * <p>The values for the DHCP option.</p>
+     * <p>Checks whether you have the required permissions for the action, without actually
+     *             making the request, and provides an error response. If you have the required
+     *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
+     *                 <code>UnauthorizedOperation</code>.</p>
      * @public
      */
-    Values?: AttributeValue[] | undefined;
+    DryRun?: boolean | undefined;
 }
 /**
- * <p>The set of DHCP options.</p>
+ * <p>Describes a customer gateway.</p>
  * @public
  */
-export interface DhcpOptions {
+export interface CustomerGateway {
     /**
-     * <p>The ID of the Amazon Web Services account that owns the DHCP options set.</p>
+     * <p>The Amazon Resource Name (ARN) for the customer gateway certificate.</p>
      * @public
      */
-    OwnerId?: string | undefined;
+    CertificateArn?: string | undefined;
     /**
-     * <p>Any tags assigned to the DHCP options set.</p>
+     * <p>The name of customer gateway device.</p>
+     * @public
+     */
+    DeviceName?: string | undefined;
+    /**
+     * <p>Any tags assigned to the customer gateway.</p>
      * @public
      */
     Tags?: Tag[] | undefined;
     /**
-     * <p>The ID of the set of DHCP options.</p>
+     * <p>The customer gateway device's Border Gateway Protocol (BGP) Autonomous System Number
+     *             (ASN).</p>
+     *          <p>Valid values: <code>2,147,483,648</code> to <code>4,294,967,295</code>
+     *          </p>
      * @public
      */
-    DhcpOptionsId?: string | undefined;
+    BgpAsnExtended?: string | undefined;
     /**
-     * <p>The DHCP options in the set.</p>
+     * <p>The ID of the customer gateway.</p>
      * @public
      */
-    DhcpConfigurations?: DhcpConfiguration[] | undefined;
-}
-/**
+    CustomerGatewayId?: string | undefined;
+    /**
+     * <p>The current state of the customer gateway (<code>pending | available | deleting |
+     *                 deleted</code>).</p>
+     * @public
+     */
+    State?: string | undefined;
+    /**
+     * <p>The type of VPN connection the customer gateway supports
+     *             (<code>ipsec.1</code>).</p>
+     * @public
+     */
+    Type?: string | undefined;
+    /**
+     * <p>
+     *             The IP address for the customer gateway device's outside interface. The address must be static. If <code>OutsideIpAddressType</code> in your VPN connection options is set to <code>PrivateIpv4</code>, you can use an RFC6598 or RFC1918 private IPv4 address. If
+     *             <code>OutsideIpAddressType</code> is set to <code>PublicIpv4</code>, you can use a public IPv4 address. If <code>OutsideIpAddressType</code> is set to <code>Ipv6</code>, you can use a public IPv6 address.
+     *         </p>
+     * @public
+     */
+    IpAddress?: string | undefined;
+    /**
+     * <p>The customer gateway device's Border Gateway Protocol (BGP) Autonomous System Number
+     *             (ASN).</p>
+     *          <p>Valid values: <code>1</code> to <code>2,147,483,647</code>
+     *          </p>
+     * @public
+     */
+    BgpAsn?: string | undefined;
+}
+/**
+ * <p>Contains the output of CreateCustomerGateway.</p>
  * @public
  */
-export interface CreateDhcpOptionsResult {
+export interface CreateCustomerGatewayResult {
     /**
-     * <p>A set of DHCP options.</p>
+     * <p>Information about the customer gateway.</p>
      * @public
      */
-    DhcpOptions?: DhcpOptions | undefined;
+    CustomerGateway?: CustomerGateway | undefined;
 }
 /**
  * @public
  */
-export interface CreateEgressOnlyInternetGatewayRequest {
+export interface CreateDefaultSubnetRequest {
     /**
-     * <p>Unique, case-sensitive identifier that you provide to ensure the idempotency of the
-     * 			request. For more information, see <a href="https://docs.aws.amazon.com/ec2/latest/devguide/ec2-api-idempotency.html">Ensuring idempotency</a>.</p>
+     * <p>The Availability Zone in which to create the default subnet.</p>
+     *          <p>Either <code>AvailabilityZone</code> or <code>AvailabilityZoneId</code> must be specified,
+     *             but not both.</p>
      * @public
      */
-    ClientToken?: string | undefined;
+    AvailabilityZone?: string | undefined;
     /**
      * <p>Checks whether you have the required permissions for the action, without actually making the request,
      *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
@@ -1542,1025 +1720,1044 @@ export interface CreateEgressOnlyInternetGatewayRequest {
      */
     DryRun?: boolean | undefined;
     /**
-     * <p>The ID of the VPC for which to create the egress-only internet gateway.</p>
+     * <p>Indicates whether to create an IPv6 only subnet. If you already have a default subnet
+     *             for this Availability Zone, you must delete it before you can create an IPv6 only subnet.</p>
      * @public
      */
-    VpcId: string | undefined;
+    Ipv6Native?: boolean | undefined;
     /**
-     * <p>The tags to assign to the egress-only internet gateway.</p>
+     * <p>The ID of the Availability Zone.</p>
+     *          <p>Either <code>AvailabilityZone</code> or <code>AvailabilityZoneId</code> must be specified,
+     *             but not both.</p>
      * @public
      */
-    TagSpecifications?: TagSpecification[] | undefined;
+    AvailabilityZoneId?: string | undefined;
 }
 /**
- * <p>Describes the attachment of a VPC to an internet gateway or an egress-only internet gateway.</p>
+ * <p>The state of VPC Block Public Access (BPA).</p>
  * @public
  */
-export interface InternetGatewayAttachment {
-    /**
-     * <p>The current state of the attachment. For an internet gateway, the state is
-     * 				<code>available</code> when attached to a VPC; otherwise, this value is not
-     * 			returned.</p>
-     * @public
-     */
-    State?: AttachmentStatus | undefined;
+export interface BlockPublicAccessStates {
     /**
-     * <p>The ID of the VPC.</p>
+     * <p>The mode of VPC BPA.</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>off</code>: VPC BPA is not enabled and traffic is allowed to and from internet gateways and egress-only internet gateways in this Region.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>block-bidirectional</code>: Block all traffic to and from internet gateways and egress-only internet gateways in this Region (except for excluded VPCs and subnets).</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>block-ingress</code>: Block all internet traffic to the VPCs in this Region (except for VPCs or subnets which are excluded). Only traffic to and from NAT gateways and egress-only internet gateways is allowed because these gateways only allow outbound connections to be established.</p>
+     *             </li>
+     *          </ul>
      * @public
      */
-    VpcId?: string | undefined;
+    InternetGatewayBlockMode?: BlockPublicAccessMode | undefined;
 }
 /**
- * <p>Describes an egress-only internet gateway.</p>
+ * <p>Describes the options for instance hostnames.</p>
  * @public
  */
-export interface EgressOnlyInternetGateway {
+export interface PrivateDnsNameOptionsOnLaunch {
     /**
-     * <p>Information about the attachment of the egress-only internet gateway.</p>
+     * <p>The type of hostname for EC2 instances. For IPv4 only subnets, an instance DNS name
+     *             must be based on the instance IPv4 address. For IPv6 only subnets, an instance DNS name
+     *             must be based on the instance ID. For dual-stack subnets, you can specify whether DNS
+     *             names use the instance IPv4 address or the instance ID.</p>
      * @public
      */
-    Attachments?: InternetGatewayAttachment[] | undefined;
+    HostnameType?: HostnameType | undefined;
     /**
-     * <p>The ID of the egress-only internet gateway.</p>
+     * <p>Indicates whether to respond to DNS queries for instance hostnames with DNS A
+     *             records.</p>
      * @public
      */
-    EgressOnlyInternetGatewayId?: string | undefined;
+    EnableResourceNameDnsARecord?: boolean | undefined;
     /**
-     * <p>The tags assigned to the egress-only internet gateway.</p>
+     * <p>Indicates whether to respond to DNS queries for instance hostname with DNS AAAA
+     *             records.</p>
      * @public
      */
-    Tags?: Tag[] | undefined;
+    EnableResourceNameDnsAAAARecord?: boolean | undefined;
 }
 /**
+ * <p>Describes a subnet.</p>
  * @public
  */
-export interface CreateEgressOnlyInternetGatewayResult {
+export interface Subnet {
     /**
-     * <p>Unique, case-sensitive identifier that you provide to ensure the idempotency of the
-     * 			request.</p>
+     * <p>The AZ ID of the subnet.</p>
      * @public
      */
-    ClientToken?: string | undefined;
+    AvailabilityZoneId?: string | undefined;
     /**
-     * <p>Information about the egress-only internet gateway.</p>
+     * <p>
+     *             Indicates the device position for local network interfaces in this subnet. For example,
+     *             <code>1</code> indicates local network interfaces in this subnet are the secondary
+     *             network interface (eth1).
+     *         </p>
      * @public
      */
-    EgressOnlyInternetGateway?: EgressOnlyInternetGateway | undefined;
-}
-/**
- * <p>The Amazon EC2 launch template that can be used by
- *          an EC2 Fleet to configure Amazon EC2 instances. You must specify either the ID or name of the launch template in the request, but not both.</p>
- *          <p>For information about launch templates, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-launch-templates.html">Launch
- *             an instance from a launch template</a> in the
- *          <i>Amazon EC2 User Guide</i>.</p>
- * @public
- */
-export interface FleetLaunchTemplateSpecificationRequest {
+    EnableLniAtDeviceIndex?: number | undefined;
     /**
-     * <p>The ID of the launch template.</p>
-     *          <p>You must specify the <code>LaunchTemplateId</code> or the <code>LaunchTemplateName</code>, but not both.</p>
+     * <p>Indicates whether a network interface created in this subnet (including a network
+     *             interface created by <a>RunInstances</a>) receives a customer-owned IPv4 address.</p>
      * @public
      */
-    LaunchTemplateId?: string | undefined;
+    MapCustomerOwnedIpOnLaunch?: boolean | undefined;
     /**
-     * <p>The name of the launch template.</p>
-     *          <p>You must specify the <code>LaunchTemplateName</code> or the <code>LaunchTemplateId</code>, but not both.</p>
+     * <p>The customer-owned IPv4 address pool associated with the subnet.</p>
      * @public
      */
-    LaunchTemplateName?: string | undefined;
+    CustomerOwnedIpv4Pool?: string | undefined;
     /**
-     * <p>The launch template version number, <code>$Latest</code>, or <code>$Default</code>. You must specify a value, otherwise the request fails.</p>
-     *          <p>If the value is <code>$Latest</code>, Amazon EC2 uses the latest version of the launch template.</p>
-     *          <p>If the value is <code>$Default</code>, Amazon EC2 uses the default version of the launch template.</p>
+     * <p>The ID of the Amazon Web Services account that owns the subnet.</p>
      * @public
      */
-    Version?: string | undefined;
+    OwnerId?: string | undefined;
     /**
-     * <p>The base64-encoded user data for instances launched by the fleet. User data is limited
-     *          to 16 KB, in raw form, before it is base64-encoded.</p>
-     *          <p>Supported only for fleets of type <code>instant</code>.</p>
+     * <p>Indicates whether a network interface created in this subnet (including a network
+     *             interface created by <a>RunInstances</a>) receives an IPv6 address.</p>
      * @public
      */
-    LaunchTemplateSpecificationUserData?: string | undefined;
-}
-/**
- * <p>Describes a block device for an EBS volume.</p>
- * @public
- */
-export interface FleetEbsBlockDeviceRequest {
+    AssignIpv6AddressOnCreation?: boolean | undefined;
     /**
-     * <p>Indicates whether the encryption state of an EBS volume is changed while being restored
-     *          from a backing snapshot. The effect of setting the encryption state to <code>true</code>
-     *          depends on the volume origin (new or from a snapshot), starting encryption state,
-     *          ownership, and whether encryption by default is enabled. For more information, see <a href="https://docs.aws.amazon.com/ebs/latest/userguide/ebs-encryption.html">Amazon EBS
-     *             encryption</a> in the <i>Amazon EBS User Guide</i>.</p>
-     *          <p>In no case can you remove encryption from an encrypted volume.</p>
-     *          <p>Encrypted volumes can only be attached to instances that support Amazon EBS encryption. For
-     *          more information, see <a href="https://docs.aws.amazon.com/ebs/latest/userguide/ebs-encryption-requirements.html#ebs-encryption_supported_instances">Supported instance types</a>.</p>
-     *          <p>This parameter is not returned by <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeImageAttribute">DescribeImageAttribute</a>.</p>
-     *          <p>For <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateImage">CreateImage</a> and <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RegisterImage">RegisterImage</a>, whether you
-     *          can include this parameter, and the allowed values differ depending on the type of block
-     *          device mapping you are creating.</p>
-     *          <ul>
-     *             <li>
-     *                <p>If you are creating a block device mapping for a <b>new (empty)
-     *                   volume</b>, you can include this parameter, and specify either
-     *                   <code>true</code> for an encrypted volume, or <code>false</code> for an
-     *                unencrypted volume. If you omit this parameter, it defaults to <code>false</code>
-     *                (unencrypted).</p>
-     *             </li>
-     *             <li>
-     *                <p>If you are creating a block device mapping from an <b>existing encrypted or
-     *                   unencrypted snapshot</b>, you must omit this parameter. If you include this
-     *                parameter, the request will fail, regardless of the value that you specify.</p>
-     *             </li>
-     *             <li>
-     *                <p>If you are creating a block device mapping from an <b>existing unencrypted
-     *                   volume</b>, you can include this parameter, but you must specify
-     *                   <code>false</code>. If you specify <code>true</code>, the request will fail. In
-     *                this case, we recommend that you omit the parameter.</p>
-     *             </li>
-     *             <li>
-     *                <p>If you are creating a block device mapping from an <b>existing encrypted
-     *                   volume</b>, you can include this parameter, and specify either
-     *                   <code>true</code> or <code>false</code>. However, if you specify
-     *                   <code>false</code>, the parameter is ignored and the block device mapping is
-     *                always encrypted. In this case, we recommend that you omit the parameter.</p>
-     *             </li>
-     *          </ul>
+     * <p>Information about the IPv6 CIDR blocks associated with the subnet.</p>
      * @public
      */
-    Encrypted?: boolean | undefined;
+    Ipv6CidrBlockAssociationSet?: SubnetIpv6CidrBlockAssociation[] | undefined;
     /**
-     * <p>Indicates whether the EBS volume is deleted on instance termination. For more
-     *          information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/preserving-volumes-on-termination.html">Preserve data when
-     *             an instance is terminated</a> in the <i>Amazon EC2 User Guide</i>.</p>
+     * <p>Any tags assigned to the subnet.</p>
      * @public
      */
-    DeleteOnTermination?: boolean | undefined;
+    Tags?: Tag[] | undefined;
     /**
-     * <p>The number of I/O operations per second (IOPS). For <code>gp3</code>, <code>io1</code>, and <code>io2</code> volumes,
-     *          this represents the number of IOPS that are provisioned for the volume. For <code>gp2</code>
-     *          volumes, this represents the baseline performance of the volume and the rate at which
-     *          the volume accumulates I/O credits for bursting.</p>
-     *          <p>The following are the supported values for each volume type:</p>
-     *          <ul>
-     *             <li>
-     *                <p>
-     *                   <code>gp3</code>: 3,000 - 80,000 IOPS</p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>io1</code>: 100 - 64,000 IOPS</p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>io2</code>: 100 - 256,000 IOPS</p>
-     *             </li>
-     *          </ul>
-     *          <p>For <code>io2</code> volumes, you can achieve up to 256,000 IOPS on
-     * <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html#ec2-nitro-instances">instances
-     * built on the Nitro System</a>. On other instances, you can achieve performance up to 32,000 IOPS.</p>
-     *          <p>This parameter is required for <code>io1</code> and <code>io2</code> volumes. The default for <code>gp3</code> volumes
-     *          is 3,000 IOPS.</p>
+     * <p>The Amazon Resource Name (ARN) of the subnet.</p>
      * @public
      */
-    Iops?: number | undefined;
+    SubnetArn?: string | undefined;
     /**
-     * <p>The throughput that the volume supports, in MiB/s.</p>
-     *          <p>This parameter is valid only for <code>gp3</code> volumes.</p>
-     *          <p>Valid Range: Minimum value of 125. Maximum value of 2,000.</p>
+     * <p>The Amazon Resource Name (ARN) of the Outpost.</p>
      * @public
      */
-    Throughput?: number | undefined;
+    OutpostArn?: string | undefined;
     /**
-     * <p>Identifier (key ID, key alias, key ARN, or alias ARN) of the customer managed KMS key
-     *          to use for EBS encryption.</p>
-     *          <p>This parameter is only supported on <code>BlockDeviceMapping</code> objects called by
-     *             <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateFleet.html">CreateFleet</a>, <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RequestSpotInstances.html">RequestSpotInstances</a>, and <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RunInstances.html">RunInstances</a>.</p>
+     * <p>Indicates whether DNS queries made to the Amazon-provided DNS Resolver in this subnet
+     *             should return synthetic IPv6 addresses for IPv4-only destinations.</p>
      * @public
      */
-    KmsKeyId?: string | undefined;
+    EnableDns64?: boolean | undefined;
     /**
-     * <p>The ID of the snapshot.</p>
+     * <p>Indicates whether this is an IPv6 only subnet.</p>
      * @public
      */
-    SnapshotId?: string | undefined;
+    Ipv6Native?: boolean | undefined;
     /**
-     * <p>The size of the volume, in GiBs. You must specify either a snapshot ID or a volume
-     *          size. If you specify a snapshot, the default is the snapshot size. You can specify a
-     *          volume size that is equal to or larger than the snapshot size.</p>
-     *          <p>The following are the supported sizes for each volume type:</p>
+     * <p>The type of hostnames to assign to instances in the subnet at launch. An instance hostname
+     *             is based on the IPv4 address or ID of the instance.</p>
+     * @public
+     */
+    PrivateDnsNameOptionsOnLaunch?: PrivateDnsNameOptionsOnLaunch | undefined;
+    /**
+     * <p>The state of VPC Block Public Access (BPA).</p>
+     * @public
+     */
+    BlockPublicAccessStates?: BlockPublicAccessStates | undefined;
+    /**
+     * <p>Indicates if this is a subnet used with Amazon Elastic VMware Service (EVS).
+     *             Possible values are <code>Elastic VMware Service</code> or no value. For more
+     *             information about Amazon EVS, see <a href="https://docs.aws.amazon.com/evs/latest/APIReference/Welcome.html">
+     *                <i>Amazon Elastic VMware Service
+     *                     API Reference</i>
+     *             </a>.</p>
+     * @public
+     */
+    Type?: string | undefined;
+    /**
+     * <p>The ID of the subnet.</p>
+     * @public
+     */
+    SubnetId?: string | undefined;
+    /**
+     * <p>The current state of the subnet.</p>
      *          <ul>
      *             <li>
      *                <p>
-     *                   <code>gp2</code>: 1 - 16,384 GiB</p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>gp3</code>: 1 - 65,536 GiB</p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>io1</code>: 4 - 16,384 GiB</p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>io2</code>: 4 - 65,536 GiB</p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>st1</code> and <code>sc1</code>: 125 - 16,384 GiB</p>
+     *                   <code>failed</code>: The underlying infrastructure to support the subnet failed to provision
+     *                     as expected.</p>
      *             </li>
      *             <li>
      *                <p>
-     *                   <code>standard</code>: 1 - 1024 GiB</p>
+     *                   <code>failed-insufficient-capacity</code>: The underlying infrastructure to support the subnet
+     *                     failed to provision due to a shortage of EC2 instance capacity.</p>
      *             </li>
      *          </ul>
      * @public
      */
-    VolumeSize?: number | undefined;
-    /**
-     * <p>The volume type. For more information, see <a href="https://docs.aws.amazon.com/ebs/latest/userguide/ebs-volume-types.html">Amazon EBS volume types</a> in the
-     *          <i>Amazon EBS User Guide</i>.</p>
-     * @public
-     */
-    VolumeType?: VolumeType | undefined;
-}
-/**
- * <p>Describes a block device mapping, which defines the EBS volumes and instance store
- *          volumes to attach to an instance at launch.</p>
- *          <p>To override a block device mapping specified in the launch template:</p>
- *          <ul>
- *             <li>
- *                <p>Specify the exact same <code>DeviceName</code> here as specified in the launch
- *                template.</p>
- *             </li>
- *             <li>
- *                <p>Only specify the parameters you want to change.</p>
- *             </li>
- *             <li>
- *                <p>Any parameters you don't specify here will keep their original launch template
- *                values.</p>
- *             </li>
- *          </ul>
- *          <p>To add a new block device mapping:</p>
- *          <ul>
- *             <li>
- *                <p>Specify a <code>DeviceName</code> that doesn't exist in the launch
- *                template.</p>
- *             </li>
- *             <li>
- *                <p>Specify all desired parameters here.</p>
- *             </li>
- *          </ul>
- * @public
- */
-export interface FleetBlockDeviceMappingRequest {
+    State?: SubnetState | undefined;
     /**
-     * <p>The device name (for example, <code>/dev/sdh</code> or <code>xvdh</code>).</p>
+     * <p>The ID of the VPC the subnet is in.</p>
      * @public
      */
-    DeviceName?: string | undefined;
+    VpcId?: string | undefined;
     /**
-     * <p>The virtual device name (<code>ephemeralN</code>). Instance store volumes are numbered
-     *          starting from 0. An instance type with 2 available instance store volumes can specify
-     *          mappings for <code>ephemeral0</code> and <code>ephemeral1</code>. The number of available
-     *          instance store volumes depends on the instance type. After you connect to the instance, you
-     *          must mount the volume.</p>
-     *          <p>NVMe instance store volumes are automatically enumerated and assigned a device name.
-     *          Including them in your block device mapping has no effect.</p>
-     *          <p>Constraints: For M3 instances, you must specify instance store volumes in the block
-     *          device mapping for the instance. When you launch an M3 instance, we ignore any instance
-     *          store volumes specified in the block device mapping for the AMI.</p>
+     * <p>The IPv4 CIDR block assigned to the subnet.</p>
      * @public
      */
-    VirtualName?: string | undefined;
+    CidrBlock?: string | undefined;
     /**
-     * <p>Parameters used to automatically set up EBS volumes when the instance is
-     *          launched.</p>
+     * <p>The number of unused private IPv4 addresses in the subnet. The IPv4 addresses for any
+     * 			stopped instances are considered unavailable.</p>
      * @public
      */
-    Ebs?: FleetEbsBlockDeviceRequest | undefined;
+    AvailableIpAddressCount?: number | undefined;
     /**
-     * <p>To omit the device from the block device mapping, specify an empty string. When this
-     *          property is specified, the device is removed from the block device mapping regardless of
-     *          the assigned value.</p>
+     * <p>The Availability Zone of the subnet.</p>
      * @public
      */
-    NoDevice?: string | undefined;
-}
-/**
- * <p>Describes an IAM instance profile. Supported only for fleets of type
- *          <code>instant</code>.</p>
- * @public
- */
-export interface FleetIamInstanceProfileSpecificationRequest {
+    AvailabilityZone?: string | undefined;
     /**
-     * <p>The Amazon Resource Name (ARN) of the instance profile.</p>
+     * <p>Indicates whether this is the default subnet for the Availability Zone.</p>
      * @public
      */
-    Arn?: string | undefined;
+    DefaultForAz?: boolean | undefined;
     /**
-     * <p>The name of the instance profile.</p>
+     * <p>Indicates whether instances launched in this subnet receive a public IPv4 address.</p>
+     *          <p>Amazon Web Services charges for all public IPv4 addresses, including public IPv4 addresses
+     * associated with running instances and Elastic IP addresses. For more information, see the <i>Public IPv4 Address</i> tab on the <a href="http://aws.amazon.com/vpc/pricing/">Amazon VPC pricing page</a>.</p>
      * @public
      */
-    Name?: string | undefined;
+    MapPublicIpOnLaunch?: boolean | undefined;
 }
 /**
- * <p>The minimum and maximum baseline bandwidth to Amazon EBS, in Mbps. For more information, see
- *             <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-optimized.html">Amazon
- *             EBS–optimized instances</a> in the <i>Amazon EC2 User Guide</i>.</p>
  * @public
  */
-export interface BaselineEbsBandwidthMbpsRequest {
-    /**
-     * <p>The minimum baseline bandwidth, in Mbps. To specify no minimum limit, omit
-     *          this parameter.</p>
-     * @public
-     */
-    Min?: number | undefined;
+export interface CreateDefaultSubnetResult {
     /**
-     * <p>The maximum baseline bandwidth, in Mbps. To specify no maximum limit, omit
-     *          this parameter.</p>
+     * <p>Information about the subnet.</p>
      * @public
      */
-    Max?: number | undefined;
+    Subnet?: Subnet | undefined;
 }
 /**
- * <p>Specify an instance family to use as the baseline reference for CPU performance. All
- *          instance types that match your specified attributes will be compared against the CPU
- *          performance of the referenced instance family, regardless of CPU manufacturer or
- *          architecture.</p>
- *          <note>
- *             <p>Currently, only one instance family can be specified in the list.</p>
- *          </note>
  * @public
  */
-export interface PerformanceFactorReferenceRequest {
+export interface CreateDefaultVpcRequest {
     /**
-     * <p>The instance family to use as a baseline reference.</p>
-     *          <note>
-     *             <p>Ensure that you specify the correct value for the instance family. The instance
-     *             family is everything before the period (<code>.</code>) in the instance type name. For
-     *             example, in the instance type <code>c6i.large</code>, the instance family is
-     *             <code>c6i</code>, not <code>c6</code>. For more information, see <a href="https://docs.aws.amazon.com/ec2/latest/instancetypes/instance-type-names.html">Amazon EC2
-     *                instance type naming conventions</a> in <i>Amazon EC2 Instance
-     *                   Types</i>.</p>
-     *          </note>
-     *          <p>The following instance families are <i>not supported</i> for performance
-     *          protection:</p>
-     *          <ul>
-     *             <li>
-     *                <p>
-     *                   <code>c1</code>
-     *                </p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>g3</code> | <code>g3s</code>
-     *                </p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>hpc7g</code>
-     *                </p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>m1</code> | <code>m2</code>
-     *                </p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>mac1</code> | <code>mac2</code> | <code>mac2-m1ultra</code> |
-     *                <code>mac2-m2</code> | <code>mac2-m2pro</code>
-     *                </p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>p3dn</code> | <code>p4d</code> | <code>p5</code>
-     *                </p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>t1</code>
-     *                </p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>u-12tb1</code> | <code>u-18tb1</code> | <code>u-24tb1</code> |
-     *                <code>u-3tb1</code> | <code>u-6tb1</code> | <code>u-9tb1</code> |
-     *                <code>u7i-12tb</code> | <code>u7in-16tb</code> | <code>u7in-24tb</code> |
-     *                <code>u7in-32tb</code>
-     *                </p>
-     *             </li>
-     *          </ul>
-     *          <p>If you enable performance protection by specifying a supported instance family, the
-     *          returned instance types will exclude the above unsupported instance families.</p>
-     *          <p>If you specify an unsupported instance family as a value for baseline performance, the
-     *          API returns an empty response for <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetInstanceTypesFromInstanceRequirements">GetInstanceTypesFromInstanceRequirements</a> and an exception for <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateFleet">CreateFleet</a>, <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RequestSpotFleet">RequestSpotFleet</a>, <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_ModifyFleet">ModifyFleet</a>, and <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_ModifySpotFleetRequest">ModifySpotFleetRequest</a>.</p>
+     * <p>Checks whether you have the required permissions for the action, without actually making the request,
+     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
      * @public
      */
-    InstanceFamily?: string | undefined;
+    DryRun?: boolean | undefined;
 }
 /**
- * <p>The CPU performance to consider, using an instance family as the baseline reference.</p>
+ * <p>Describes an exclusion configuration for VPC Encryption Control.</p>
+ *          <p>For more information, see <a href="https://docs.aws.amazon.com/vpc/latest/userguide/vpc-encryption-controls.html">Enforce VPC encryption in transit</a> in the <i>Amazon VPC User Guide</i>.</p>
  * @public
  */
-export interface CpuPerformanceFactorRequest {
+export interface VpcEncryptionControlExclusion {
     /**
-     * <p>Specify an instance family to use as the baseline reference for CPU performance. All
-     *          instance types that match your specified attributes will be compared against the CPU
-     *          performance of the referenced instance family, regardless of CPU manufacturer or
-     *          architecture differences.</p>
-     *          <note>
-     *             <p>Currently, only one instance family can be specified in the list.</p>
-     *          </note>
+     * <p>The current state of the exclusion configuration.</p>
      * @public
      */
-    References?: PerformanceFactorReferenceRequest[] | undefined;
-}
-/**
- * <p>The baseline performance to consider, using an instance family as a baseline reference.
- *          The instance family establishes the lowest acceptable level of performance. Amazon EC2 uses this
- *          baseline to guide instance type selection, but there is no guarantee that the selected
- *          instance types will always exceed the baseline for every application.</p>
- *          <p>Currently, this parameter only supports CPU performance as a baseline performance
- *          factor. For example, specifying <code>c6i</code> would use the CPU performance of the
- *          <code>c6i</code> family as the baseline reference.</p>
- * @public
- */
-export interface BaselinePerformanceFactorsRequest {
+    State?: VpcEncryptionControlExclusionState | undefined;
     /**
-     * <p>The CPU performance to consider, using an instance family as the baseline reference.</p>
+     * <p>A message providing additional information about the exclusion state.</p>
      * @public
      */
-    Cpu?: CpuPerformanceFactorRequest | undefined;
+    StateMessage?: string | undefined;
 }
 /**
- * <p>The minimum and maximum amount of memory per vCPU, in GiB.</p>
+ * <p>Describes the exclusion configurations for various resource types in VPC Encryption Control.</p>
+ *          <p>For more information, see <a href="https://docs.aws.amazon.com/vpc/latest/userguide/vpc-encryption-controls.html">Enforce VPC encryption in transit</a> in the <i>Amazon VPC User Guide</i>.</p>
  * @public
  */
-export interface MemoryGiBPerVCpuRequest {
+export interface VpcEncryptionControlExclusions {
     /**
-     * <p>The minimum amount of memory per vCPU, in GiB. To specify no minimum limit, omit this
-     *          parameter.</p>
+     * <p>The exclusion configuration for internet gateway traffic.</p>
      * @public
      */
-    Min?: number | undefined;
+    InternetGateway?: VpcEncryptionControlExclusion | undefined;
     /**
-     * <p>The maximum amount of memory per vCPU, in GiB. To specify no maximum limit, omit this
-     *          parameter.</p>
+     * <p>The exclusion configuration for egress-only internet gateway traffic.</p>
      * @public
      */
-    Max?: number | undefined;
-}
-/**
- * <p>The minimum and maximum amount of memory, in MiB.</p>
- * @public
- */
-export interface MemoryMiBRequest {
+    EgressOnlyInternetGateway?: VpcEncryptionControlExclusion | undefined;
     /**
-     * <p>The minimum amount of memory, in MiB. To specify no minimum limit, specify
-     *          <code>0</code>.</p>
+     * <p>The exclusion configuration for NAT gateway traffic.</p>
      * @public
      */
-    Min: number | undefined;
+    NatGateway?: VpcEncryptionControlExclusion | undefined;
     /**
-     * <p>The maximum amount of memory, in MiB. To specify no maximum limit, omit this
-     *          parameter.</p>
+     * <p>The exclusion configuration for virtual private gateway traffic.</p>
      * @public
      */
-    Max?: number | undefined;
-}
-/**
- * <p>The minimum and maximum amount of network bandwidth, in gigabits per second (Gbps).</p>
- *          <note>
- *             <p>Setting the minimum bandwidth does not guarantee that your instance will achieve the
- *             minimum bandwidth. Amazon EC2 will identify instance types that support the specified minimum
- *             bandwidth, but the actual bandwidth of your instance might go below the specified minimum
- *             at times. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-network-bandwidth.html#available-instance-bandwidth">Available instance bandwidth</a> in the
- *             <i>Amazon EC2 User Guide</i>.</p>
- *          </note>
- * @public
- */
-export interface NetworkBandwidthGbpsRequest {
+    VirtualPrivateGateway?: VpcEncryptionControlExclusion | undefined;
     /**
-     * <p>The minimum amount of network bandwidth, in Gbps. To specify no minimum limit, omit this
-     *          parameter.</p>
+     * <p>The exclusion configuration for VPC peering connection traffic.</p>
      * @public
      */
-    Min?: number | undefined;
+    VpcPeering?: VpcEncryptionControlExclusion | undefined;
     /**
-     * <p>The maximum amount of network bandwidth, in Gbps. To specify no maximum limit, omit this
-     *          parameter.</p>
+     * <p>The exclusion configuration for Lambda function traffic.</p>
      * @public
      */
-    Max?: number | undefined;
-}
-/**
- * <p>The minimum and maximum number of network interfaces.</p>
- * @public
- */
-export interface NetworkInterfaceCountRequest {
+    Lambda?: VpcEncryptionControlExclusion | undefined;
     /**
-     * <p>The minimum number of network interfaces. To specify no minimum limit, omit this
-     *          parameter.</p>
+     * <p>The exclusion configuration for VPC Lattice traffic.</p>
      * @public
      */
-    Min?: number | undefined;
+    VpcLattice?: VpcEncryptionControlExclusion | undefined;
     /**
-     * <p>The maximum number of network interfaces. To specify no maximum limit, omit this
-     *          parameter.</p>
+     * <p>The exclusion configuration for Elastic File System traffic.</p>
      * @public
      */
-    Max?: number | undefined;
+    ElasticFileSystem?: VpcEncryptionControlExclusion | undefined;
 }
 /**
- * <p>The minimum and maximum amount of total local storage, in GB.</p>
+ * <p>Describes the configuration and state of VPC encryption controls.</p>
+ *          <p>For more information, see <a href="https://docs.aws.amazon.com/vpc/latest/userguide/vpc-encryption-controls.html">Enforce VPC encryption in transit</a> in the <i>Amazon VPC User Guide</i>.</p>
  * @public
  */
-export interface TotalLocalStorageGBRequest {
+export interface VpcEncryptionControl {
     /**
-     * <p>The minimum amount of total local storage, in GB. To specify no minimum limit, omit this
-     *          parameter.</p>
+     * <p>The ID of the VPC associated with the encryption control configuration.</p>
      * @public
      */
-    Min?: number | undefined;
+    VpcId?: string | undefined;
     /**
-     * <p>The maximum amount of total local storage, in GB. To specify no maximum limit, omit this
-     *          parameter.</p>
+     * <p>The ID of the VPC Encryption Control configuration.</p>
      * @public
      */
-    Max?: number | undefined;
-}
-/**
- * <p>The minimum and maximum number of vCPUs.</p>
- * @public
- */
-export interface VCpuCountRangeRequest {
+    VpcEncryptionControlId?: string | undefined;
     /**
-     * <p>The minimum number of vCPUs. To specify no minimum limit, specify <code>0</code>.</p>
+     * <p>The encryption mode for the VPC Encryption Control configuration.</p>
      * @public
      */
-    Min: number | undefined;
+    Mode?: VpcEncryptionControlMode | undefined;
     /**
-     * <p>The maximum number of vCPUs. To specify no maximum limit, omit this parameter.</p>
+     * <p>The current state of the VPC Encryption Control configuration.</p>
      * @public
      */
-    Max?: number | undefined;
+    State?: VpcEncryptionControlState | undefined;
+    /**
+     * <p>A message providing additional information about the encryption control state.</p>
+     * @public
+     */
+    StateMessage?: string | undefined;
+    /**
+     * <p>Information about resource exclusions for the VPC Encryption Control configuration.</p>
+     * @public
+     */
+    ResourceExclusions?: VpcEncryptionControlExclusions | undefined;
+    /**
+     * <p>The tags assigned to the VPC Encryption Control configuration.</p>
+     * @public
+     */
+    Tags?: Tag[] | undefined;
 }
 /**
- * <p>The attributes for the instance types. When you specify instance attributes, Amazon EC2 will
- *          identify instance types with these attributes.</p>
- *          <p>You must specify <code>VCpuCount</code> and <code>MemoryMiB</code>. All other attributes
- *          are optional. Any unspecified optional attribute is set to its default.</p>
- *          <p>When you specify multiple attributes, you get instance types that satisfy all of the
- *          specified attributes. If you specify multiple values for an attribute, you get instance
- *          types that satisfy any of the specified values.</p>
- *          <p>To limit the list of instance types from which Amazon EC2 can identify matching instance types,
- *          you can use one of the following parameters, but not both in the same request:</p>
- *          <ul>
- *             <li>
- *                <p>
- *                   <code>AllowedInstanceTypes</code> - The instance types to include in the list. All
- *                other instance types are ignored, even if they match your specified attributes.</p>
- *             </li>
- *             <li>
- *                <p>
- *                   <code>ExcludedInstanceTypes</code> - The instance types to exclude from the list,
- *                even if they match your specified attributes.</p>
- *             </li>
- *          </ul>
- *          <note>
- *             <p>If you specify <code>InstanceRequirements</code>, you can't specify
- *             <code>InstanceType</code>.</p>
- *             <p>Attribute-based instance type selection is only supported when using Auto Scaling
- *             groups, EC2 Fleet, and Spot Fleet to launch instances. If you plan to use the launch template in
- *             the <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-launch-instance-wizard.html">launch instance
- *                wizard</a>, or with the <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RunInstances.html">RunInstances</a> API or
- *                <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-instance.html">AWS::EC2::Instance</a> Amazon Web Services CloudFormation resource, you can't specify
- *                <code>InstanceRequirements</code>.</p>
- *          </note>
- *          <p>For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-fleet-attribute-based-instance-type-selection.html">Specify attributes for instance type selection for EC2 Fleet or Spot Fleet</a> and <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/spot-placement-score.html">Spot
- *             placement score</a> in the <i>Amazon EC2 User Guide</i>.</p>
+ * <p>Describes a VPC.</p>
  * @public
  */
-export interface InstanceRequirementsRequest {
+export interface Vpc {
     /**
-     * <p>The minimum and maximum number of vCPUs.</p>
+     * <p>The ID of the Amazon Web Services account that owns the VPC.</p>
      * @public
      */
-    VCpuCount: VCpuCountRangeRequest | undefined;
+    OwnerId?: string | undefined;
     /**
-     * <p>The minimum and maximum amount of memory, in MiB.</p>
+     * <p>The allowed tenancy of instances launched into the VPC.</p>
      * @public
      */
-    MemoryMiB: MemoryMiBRequest | undefined;
+    InstanceTenancy?: Tenancy | undefined;
     /**
-     * <p>The CPU manufacturers to include.</p>
-     *          <ul>
-     *             <li>
-     *                <p>For instance types with Intel CPUs, specify <code>intel</code>.</p>
-     *             </li>
-     *             <li>
-     *                <p>For instance types with AMD CPUs, specify <code>amd</code>.</p>
-     *             </li>
-     *             <li>
-     *                <p>For instance types with Amazon Web Services CPUs, specify <code>amazon-web-services</code>.</p>
-     *             </li>
-     *             <li>
-     *                <p>For instance types with Apple CPUs, specify <code>apple</code>.</p>
-     *             </li>
-     *          </ul>
-     *          <note>
-     *             <p>Don't confuse the CPU manufacturer with the CPU architecture. Instances will
-     *          be launched with a compatible CPU architecture based on the Amazon Machine Image (AMI) that you
-     *          specify in your launch template.</p>
-     *          </note>
-     *          <p>Default: Any manufacturer</p>
+     * <p>Information about the IPv6 CIDR blocks associated with the VPC.</p>
      * @public
      */
-    CpuManufacturers?: CpuManufacturer[] | undefined;
+    Ipv6CidrBlockAssociationSet?: VpcIpv6CidrBlockAssociation[] | undefined;
     /**
-     * <p>The minimum and maximum amount of memory per vCPU, in GiB.</p>
-     *          <p>Default: No minimum or maximum limits</p>
+     * <p>Information about the IPv4 CIDR blocks associated with the VPC.</p>
      * @public
      */
-    MemoryGiBPerVCpu?: MemoryGiBPerVCpuRequest | undefined;
+    CidrBlockAssociationSet?: VpcCidrBlockAssociation[] | undefined;
     /**
-     * <p>The instance types to exclude.</p>
-     *          <p>You can use strings with one or more wild cards, represented by
-     *          an asterisk (<code>*</code>), to exclude an instance family, type, size, or generation. The
-     *          following are examples: <code>m5.8xlarge</code>, <code>c5*.*</code>, <code>m5a.*</code>,
-     *             <code>r*</code>, <code>*3*</code>.</p>
-     *          <p>For example, if you specify <code>c5*</code>,Amazon EC2 will exclude the entire C5 instance
-     *       family, which includes all C5a and C5n instance types. If you specify
-     *       <code>m5a.*</code>, Amazon EC2 will exclude all the M5a instance types, but not the M5n
-     *       instance types.</p>
-     *          <note>
-     *             <p>If you specify <code>ExcludedInstanceTypes</code>, you can't specify <code>AllowedInstanceTypes</code>.</p>
-     *          </note>
-     *          <p>Default: No excluded instance types</p>
+     * <p>Indicates whether the VPC is the default VPC.</p>
      * @public
      */
-    ExcludedInstanceTypes?: string[] | undefined;
+    IsDefault?: boolean | undefined;
     /**
-     * <p>Indicates whether current or previous generation instance types are included. The
-     *       current generation instance types are recommended for use. Current generation instance types are
-     *       typically the latest two to three generations in each instance family. For more
-     *       information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html">Instance types</a> in the
-     *       <i>Amazon EC2 User Guide</i>.</p>
-     *          <p>For current generation instance types, specify <code>current</code>.</p>
-     *          <p>For previous generation instance types, specify <code>previous</code>.</p>
-     *          <p>Default: Current and previous generation instance types</p>
+     * <p>Describes the configuration and state of VPC encryption controls.</p>
+     *          <p>For more information, see <a href="https://docs.aws.amazon.com/vpc/latest/userguide/vpc-encryption-controls.html">Enforce VPC encryption in transit</a> in the <i>Amazon VPC User Guide</i>.</p>
      * @public
      */
-    InstanceGenerations?: InstanceGeneration[] | undefined;
+    EncryptionControl?: VpcEncryptionControl | undefined;
     /**
-     * <p>[Price protection] The price protection threshold for Spot Instances, as a percentage higher than
-     *          an identified Spot price. The identified Spot price is the Spot price of the lowest priced
-     *          current generation C, M, or R instance type with your specified attributes. If no current
-     *          generation C, M, or R instance type matches your attributes, then the identified Spot price
-     *          is from the lowest priced current generation instance types, and failing that, from the
-     *          lowest priced previous generation instance types that match your attributes. When Amazon EC2
-     *          selects instance types with your attributes, it will exclude instance types whose Spot
-     *          price exceeds your specified threshold.</p>
-     *          <p>The parameter accepts an integer, which Amazon EC2 interprets as a percentage.</p>
-     *          <p>If you set <code>TargetCapacityUnitType</code> to <code>vcpu</code> or
-     *          <code>memory-mib</code>, the price protection threshold is applied based on the
-     *          per-vCPU or per-memory price instead of the per-instance price.</p>
-     *          <p>This parameter is not supported for <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetSpotPlacementScores.html">GetSpotPlacementScores</a> and <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetInstanceTypesFromInstanceRequirements.html">GetInstanceTypesFromInstanceRequirements</a>.</p>
-     *          <note>
-     *             <p>Only one of <code>SpotMaxPricePercentageOverLowestPrice</code> or
-     *                <code>MaxSpotPriceAsPercentageOfOptimalOnDemandPrice</code> can be specified. If you
-     *             don't specify either, Amazon EC2 will automatically apply optimal price protection to
-     *             consistently select from a wide range of instance types. To indicate no price protection
-     *             threshold for Spot Instances, meaning you want to consider all instance types that match your
-     *             attributes, include one of these parameters and specify a high value, such as
-     *                <code>999999</code>.</p>
-     *          </note>
-     *          <p>Default: <code>100</code>
-     *          </p>
+     * <p>Any tags assigned to the VPC.</p>
      * @public
      */
-    SpotMaxPricePercentageOverLowestPrice?: number | undefined;
+    Tags?: Tag[] | undefined;
     /**
-     * <p>[Price protection] The price protection threshold for On-Demand Instances, as a percentage higher than
-     *          an identified On-Demand price. The identified On-Demand price is the price of the lowest
-     *          priced current generation C, M, or R instance type with your specified attributes. When
-     *          Amazon EC2 selects instance types with your attributes, it will exclude instance types whose
-     *          price exceeds your specified threshold.</p>
-     *          <p>The parameter accepts an integer, which Amazon EC2 interprets as a percentage.</p>
-     *          <p>To indicate no price protection threshold, specify a high value, such as
-     *             <code>999999</code>.</p>
-     *          <p>This parameter is not supported for <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetSpotPlacementScores.html">GetSpotPlacementScores</a> and <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetInstanceTypesFromInstanceRequirements.html">GetInstanceTypesFromInstanceRequirements</a>.</p>
-     *          <note>
-     *             <p>If you set <code>TargetCapacityUnitType</code> to <code>vcpu</code> or
-     *          <code>memory-mib</code>, the price protection threshold is applied based on the
-     *          per-vCPU or per-memory price instead of the per-instance price.</p>
-     *          </note>
-     *          <p>Default: <code>20</code>
-     *          </p>
+     * <p>The state of VPC Block Public Access (BPA).</p>
      * @public
      */
-    OnDemandMaxPricePercentageOverLowestPrice?: number | undefined;
+    BlockPublicAccessStates?: BlockPublicAccessStates | undefined;
     /**
-     * <p>Indicates whether bare metal instance types must be included, excluded, or required.</p>
-     *          <ul>
-     *             <li>
-     *                <p>To include bare metal instance types, specify <code>included</code>.</p>
-     *             </li>
-     *             <li>
-     *                <p>To require only bare metal instance types, specify <code>required</code>.</p>
-     *             </li>
-     *             <li>
-     *                <p>To exclude bare metal instance types, specify <code>excluded</code>.</p>
-     *             </li>
-     *          </ul>
-     *          <p>Default: <code>excluded</code>
-     *          </p>
+     * <p>The ID of the VPC.</p>
      * @public
      */
-    BareMetal?: BareMetal | undefined;
+    VpcId?: string | undefined;
     /**
-     * <p>Indicates whether burstable performance T instance types are included, excluded, or required. For more information, see
-     *       <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/burstable-performance-instances.html">Burstable performance instances</a>.</p>
-     *          <ul>
-     *             <li>
-     *                <p>To include burstable performance instance types, specify <code>included</code>.</p>
-     *             </li>
-     *             <li>
-     *                <p>To require only burstable performance instance types, specify <code>required</code>.</p>
-     *             </li>
-     *             <li>
-     *                <p>To exclude burstable performance instance types, specify <code>excluded</code>.</p>
-     *             </li>
-     *          </ul>
-     *          <p>Default: <code>excluded</code>
-     *          </p>
+     * <p>The current state of the VPC.</p>
      * @public
      */
-    BurstablePerformance?: BurstablePerformance | undefined;
+    State?: VpcState | undefined;
     /**
-     * <p>Indicates whether instance types must support hibernation for On-Demand Instances.</p>
-     *          <p>This parameter is not supported for <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetSpotPlacementScores.html">GetSpotPlacementScores</a>.</p>
-     *          <p>Default: <code>false</code>
-     *          </p>
+     * <p>The primary IPv4 CIDR block for the VPC.</p>
      * @public
      */
-    RequireHibernateSupport?: boolean | undefined;
+    CidrBlock?: string | undefined;
     /**
-     * <p>The minimum and maximum number of network interfaces.</p>
-     *          <p>Default: No minimum or maximum limits</p>
+     * <p>The ID of the set of DHCP options you've associated with the VPC.</p>
      * @public
      */
-    NetworkInterfaceCount?: NetworkInterfaceCountRequest | undefined;
+    DhcpOptionsId?: string | undefined;
+}
+/**
+ * @public
+ */
+export interface CreateDefaultVpcResult {
     /**
-     * <p>Indicates whether instance types with instance store volumes are included, excluded, or required. For more information,
-     *       <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/InstanceStorage.html">Amazon
-     *          EC2 instance store</a> in the <i>Amazon EC2 User Guide</i>.</p>
-     *          <ul>
-     *             <li>
-     *                <p>To include instance types with instance store volumes, specify
-     *                   <code>included</code>.</p>
-     *             </li>
-     *             <li>
-     *                <p>To require only instance types with instance store volumes, specify
-     *                   <code>required</code>.</p>
-     *             </li>
-     *             <li>
-     *                <p>To exclude instance types with instance store volumes, specify
-     *                   <code>excluded</code>.</p>
-     *             </li>
-     *          </ul>
-     *          <p>Default: <code>included</code>
-     *          </p>
+     * <p>Information about the VPC.</p>
      * @public
      */
-    LocalStorage?: LocalStorage | undefined;
+    Vpc?: Vpc | undefined;
+}
+/**
+ * @public
+ */
+export interface CreateDelegateMacVolumeOwnershipTaskRequest {
     /**
-     * <p>The type of local storage that is required.</p>
+     * <p>Unique, case-sensitive identifier that you provide to ensure the idempotency of the request. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html">Ensuring Idempotency</a>.</p>
+     * @public
+     */
+    ClientToken?: string | undefined;
+    /**
+     * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+     * @public
+     */
+    DryRun?: boolean | undefined;
+    /**
+     * <p>The ID of the Amazon EC2 Mac instance.</p>
+     * @public
+     */
+    InstanceId: string | undefined;
+    /**
+     * <p>Specifies the following credentials:</p>
      *          <ul>
      *             <li>
-     *                <p>For instance types with hard disk drive (HDD) storage, specify <code>hdd</code>.</p>
+     *                <p>
+     *                   <b>Internal disk administrative user</b>
+     *                </p>
+     *                <ul>
+     *                   <li>
+     *                      <p>
+     *                         <b>Username</b> - Only the default administrative user
+     *                      (<code>aws-managed-user</code>) is supported and it is used by default. You can't
+     *                      specify a different administrative user.</p>
+     *                   </li>
+     *                   <li>
+     *                      <p>
+     *                         <b>Password</b> - If you did not change the default
+     *                      password for <code>aws-managed-user</code>, specify the default password, which is
+     *                      <i>blank</i>. Otherwise, specify your password.</p>
+     *                   </li>
+     *                </ul>
      *             </li>
      *             <li>
-     *                <p>For instance types with solid state drive (SSD) storage, specify
-     *                <code>ssd</code>.</p>
+     *                <p>
+     *                   <b>Amazon EBS root volume administrative user</b>
+     *                </p>
+     *                <ul>
+     *                   <li>
+     *                      <p>
+     *                         <b>Username</b> - If you did not change the default
+     *                      administrative user, specify <code>ec2-user</code>. Otherwise, specify the username
+     *                      for your administrative user.</p>
+     *                   </li>
+     *                   <li>
+     *                      <p>
+     *                         <b>Password</b> - Specify the password for the
+     *                      administrative user.</p>
+     *                   </li>
+     *                </ul>
      *             </li>
      *          </ul>
-     *          <p>Default: <code>hdd</code> and <code>ssd</code>
+     *          <p>The credentials must be specified in the following JSON format:</p>
+     *          <p>
+     *             <code>\{
+     *   "internalDiskPassword":"<i>internal-disk-admin_password</i>",
+     *   "rootVolumeUsername":"<i>root-volume-admin_username</i>",
+     *   "rootVolumepassword":"<i>root-volume-admin_password</i>"
+     * \}</code>
      *          </p>
      * @public
      */
-    LocalStorageTypes?: LocalStorageType[] | undefined;
+    MacCredentials: string | undefined;
     /**
-     * <p>The minimum and maximum amount of total local storage, in GB.</p>
-     *          <p>Default: No minimum or maximum limits</p>
+     * <p>The tags to assign to the volume ownership delegation task.</p>
      * @public
      */
-    TotalLocalStorageGB?: TotalLocalStorageGBRequest | undefined;
+    TagSpecifications?: TagSpecification[] | undefined;
+}
+/**
+ * <p>Describes the configuration for a System Integrity Protection (SIP) modification task.</p>
+ * @public
+ */
+export interface MacSystemIntegrityProtectionConfiguration {
     /**
-     * <p>The minimum and maximum baseline bandwidth to Amazon EBS, in Mbps. For more information, see
-     *             <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-optimized.html">Amazon
-     *             EBS–optimized instances</a> in the <i>Amazon EC2 User Guide</i>.</p>
-     *          <p>Default: No minimum or maximum limits</p>
+     * <p>Indicates whether Apple Internal was enabled or disabled by the task.</p>
      * @public
      */
-    BaselineEbsBandwidthMbps?: BaselineEbsBandwidthMbpsRequest | undefined;
+    AppleInternal?: MacSystemIntegrityProtectionSettingStatus | undefined;
     /**
-     * <p>The accelerator types that must be on the instance type.</p>
-     *          <ul>
-     *             <li>
-     *                <p>For instance types with FPGA accelerators, specify <code>fpga</code>.</p>
-     *             </li>
-     *             <li>
-     *                <p>For instance types with GPU accelerators, specify <code>gpu</code>.</p>
-     *             </li>
-     *             <li>
-     *                <p>For instance types with Inference accelerators, specify <code>inference</code>.</p>
-     *             </li>
-     *             <li>
-     *                <p>For instance types with Media accelerators, specify <code>media</code>.</p>
-     *             </li>
-     *          </ul>
-     *          <p>Default: Any accelerator type</p>
+     * <p>Indicates whether Base System was enabled or disabled by the task.</p>
      * @public
      */
-    AcceleratorTypes?: AcceleratorType[] | undefined;
+    BaseSystem?: MacSystemIntegrityProtectionSettingStatus | undefined;
     /**
-     * <p>The minimum and maximum number of accelerators (GPUs, FPGAs, or Amazon Web Services Inferentia chips) on
-     *          an instance.</p>
-     *          <p>To exclude accelerator-enabled instance types, set <code>Max</code> to <code>0</code>.</p>
-     *          <p>Default: No minimum or maximum limits</p>
+     * <p>Indicates whether Debugging Restrictions was enabled or disabled by the task.</p>
      * @public
      */
-    AcceleratorCount?: AcceleratorCountRequest | undefined;
+    DebuggingRestrictions?: MacSystemIntegrityProtectionSettingStatus | undefined;
     /**
-     * <p>Indicates whether instance types must have accelerators by specific manufacturers.</p>
-     *          <ul>
-     *             <li>
-     *                <p>For instance types with Amazon Web Services devices, specify <code>amazon-web-services</code>.</p>
-     *             </li>
-     *             <li>
-     *                <p>For instance types with AMD devices, specify <code>amd</code>.</p>
-     *             </li>
-     *             <li>
-     *                <p>For instance types with Habana devices, specify <code>habana</code>.</p>
-     *             </li>
-     *             <li>
-     *                <p>For instance types with NVIDIA devices, specify <code>nvidia</code>.</p>
-     *             </li>
-     *             <li>
-     *                <p>For instance types with Xilinx devices, specify <code>xilinx</code>.</p>
-     *             </li>
-     *          </ul>
-     *          <p>Default: Any manufacturer</p>
+     * <p>Indicates whether Dtrace Restrictions was enabled or disabled by the task.</p>
      * @public
      */
-    AcceleratorManufacturers?: AcceleratorManufacturer[] | undefined;
+    DTraceRestrictions?: MacSystemIntegrityProtectionSettingStatus | undefined;
     /**
-     * <p>The accelerators that must be on the instance type.</p>
-     *          <ul>
-     *             <li>
-     *                <p>For instance types with NVIDIA A10G GPUs, specify <code>a10g</code>.</p>
-     *             </li>
-     *             <li>
-     *                <p>For instance types with NVIDIA A100 GPUs, specify <code>a100</code>.</p>
-     *             </li>
-     *             <li>
-     *                <p>For instance types with NVIDIA H100 GPUs, specify <code>h100</code>.</p>
-     *             </li>
-     *             <li>
-     *                <p>For instance types with Amazon Web Services Inferentia chips, specify <code>inferentia</code>.</p>
-     *             </li>
-     *             <li>
-     *                <p>For instance types with Amazon Web Services Inferentia2 chips, specify <code>inferentia2</code>.</p>
-     *             </li>
-     *             <li>
-     *                <p>For instance types with Habana Gaudi HL-205 GPUs, specify <code>gaudi-hl-205</code>.</p>
-     *             </li>
+     * <p>Indicates whether Filesystem Protections was enabled or disabled by the task.</p>
+     * @public
+     */
+    FilesystemProtections?: MacSystemIntegrityProtectionSettingStatus | undefined;
+    /**
+     * <p>Indicates whether Kext Signing was enabled or disabled by the task.</p>
+     * @public
+     */
+    KextSigning?: MacSystemIntegrityProtectionSettingStatus | undefined;
+    /**
+     * <p>Indicates whether NVRAM Protections was enabled or disabled by the task.</p>
+     * @public
+     */
+    NvramProtections?: MacSystemIntegrityProtectionSettingStatus | undefined;
+    /**
+     * <p>Indicates SIP was enabled or disabled by the task.</p>
+     * @public
+     */
+    Status?: MacSystemIntegrityProtectionSettingStatus | undefined;
+}
+/**
+ * <p>Information about a System Integrity Protection (SIP) modification task or volume
+ *          ownership delegation task for an Amazon EC2 Mac instance.</p>
+ * @public
+ */
+export interface MacModificationTask {
+    /**
+     * <p>The ID of the Amazon EC2 Mac instance.</p>
+     * @public
+     */
+    InstanceId?: string | undefined;
+    /**
+     * <p>The ID of task.</p>
+     * @public
+     */
+    MacModificationTaskId?: string | undefined;
+    /**
+     * <p>[SIP modification tasks only] Information about the SIP
+     *          configuration.</p>
+     * @public
+     */
+    MacSystemIntegrityProtectionConfig?: MacSystemIntegrityProtectionConfiguration | undefined;
+    /**
+     * <p>The date and time the task was created, in the UTC timezone
+     *          (<code>YYYY-MM-DDThh:mm:ss.sssZ</code>).</p>
+     * @public
+     */
+    StartTime?: Date | undefined;
+    /**
+     * <p>The tags assigned to the task.</p>
+     * @public
+     */
+    Tags?: Tag[] | undefined;
+    /**
+     * <p>The state of the task.</p>
+     * @public
+     */
+    TaskState?: MacModificationTaskState | undefined;
+    /**
+     * <p>The type of task.</p>
+     * @public
+     */
+    TaskType?: MacModificationTaskType | undefined;
+}
+/**
+ * @public
+ */
+export interface CreateDelegateMacVolumeOwnershipTaskResult {
+    /**
+     * <p>Information about the volume ownership delegation task.</p>
+     * @public
+     */
+    MacModificationTask?: MacModificationTask | undefined;
+}
+/**
+ * <p>Describes a DHCP configuration option.</p>
+ * @public
+ */
+export interface NewDhcpConfiguration {
+    /**
+     * <p>The name of a DHCP option.</p>
+     * @public
+     */
+    Key?: string | undefined;
+    /**
+     * <p>The values for the DHCP option.</p>
+     * @public
+     */
+    Values?: string[] | undefined;
+}
+/**
+ * @public
+ */
+export interface CreateDhcpOptionsRequest {
+    /**
+     * <p>A DHCP configuration option.</p>
+     * @public
+     */
+    DhcpConfigurations: NewDhcpConfiguration[] | undefined;
+    /**
+     * <p>The tags to assign to the DHCP option.</p>
+     * @public
+     */
+    TagSpecifications?: TagSpecification[] | undefined;
+    /**
+     * <p>Checks whether you have the required permissions for the action, without actually making the request,
+     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+     * @public
+     */
+    DryRun?: boolean | undefined;
+}
+/**
+ * <p>Describes a value for a resource attribute that is a String.</p>
+ * @public
+ */
+export interface AttributeValue {
+    /**
+     * <p>The attribute value. The value is case-sensitive.</p>
+     * @public
+     */
+    Value?: string | undefined;
+}
+/**
+ * <p>Describes a DHCP configuration option.</p>
+ * @public
+ */
+export interface DhcpConfiguration {
+    /**
+     * <p>The name of a DHCP option.</p>
+     * @public
+     */
+    Key?: string | undefined;
+    /**
+     * <p>The values for the DHCP option.</p>
+     * @public
+     */
+    Values?: AttributeValue[] | undefined;
+}
+/**
+ * <p>The set of DHCP options.</p>
+ * @public
+ */
+export interface DhcpOptions {
+    /**
+     * <p>The ID of the Amazon Web Services account that owns the DHCP options set.</p>
+     * @public
+     */
+    OwnerId?: string | undefined;
+    /**
+     * <p>Any tags assigned to the DHCP options set.</p>
+     * @public
+     */
+    Tags?: Tag[] | undefined;
+    /**
+     * <p>The ID of the set of DHCP options.</p>
+     * @public
+     */
+    DhcpOptionsId?: string | undefined;
+    /**
+     * <p>The DHCP options in the set.</p>
+     * @public
+     */
+    DhcpConfigurations?: DhcpConfiguration[] | undefined;
+}
+/**
+ * @public
+ */
+export interface CreateDhcpOptionsResult {
+    /**
+     * <p>A set of DHCP options.</p>
+     * @public
+     */
+    DhcpOptions?: DhcpOptions | undefined;
+}
+/**
+ * @public
+ */
+export interface CreateEgressOnlyInternetGatewayRequest {
+    /**
+     * <p>Unique, case-sensitive identifier that you provide to ensure the idempotency of the
+     * 			request. For more information, see <a href="https://docs.aws.amazon.com/ec2/latest/devguide/ec2-api-idempotency.html">Ensuring idempotency</a>.</p>
+     * @public
+     */
+    ClientToken?: string | undefined;
+    /**
+     * <p>Checks whether you have the required permissions for the action, without actually making the request,
+     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+     * @public
+     */
+    DryRun?: boolean | undefined;
+    /**
+     * <p>The ID of the VPC for which to create the egress-only internet gateway.</p>
+     * @public
+     */
+    VpcId: string | undefined;
+    /**
+     * <p>The tags to assign to the egress-only internet gateway.</p>
+     * @public
+     */
+    TagSpecifications?: TagSpecification[] | undefined;
+}
+/**
+ * <p>Describes the attachment of a VPC to an internet gateway or an egress-only internet gateway.</p>
+ * @public
+ */
+export interface InternetGatewayAttachment {
+    /**
+     * <p>The current state of the attachment. For an internet gateway, the state is
+     * 				<code>available</code> when attached to a VPC; otherwise, this value is not
+     * 			returned.</p>
+     * @public
+     */
+    State?: AttachmentStatus | undefined;
+    /**
+     * <p>The ID of the VPC.</p>
+     * @public
+     */
+    VpcId?: string | undefined;
+}
+/**
+ * <p>Describes an egress-only internet gateway.</p>
+ * @public
+ */
+export interface EgressOnlyInternetGateway {
+    /**
+     * <p>Information about the attachment of the egress-only internet gateway.</p>
+     * @public
+     */
+    Attachments?: InternetGatewayAttachment[] | undefined;
+    /**
+     * <p>The ID of the egress-only internet gateway.</p>
+     * @public
+     */
+    EgressOnlyInternetGatewayId?: string | undefined;
+    /**
+     * <p>The tags assigned to the egress-only internet gateway.</p>
+     * @public
+     */
+    Tags?: Tag[] | undefined;
+}
+/**
+ * @public
+ */
+export interface CreateEgressOnlyInternetGatewayResult {
+    /**
+     * <p>Unique, case-sensitive identifier that you provide to ensure the idempotency of the
+     * 			request.</p>
+     * @public
+     */
+    ClientToken?: string | undefined;
+    /**
+     * <p>Information about the egress-only internet gateway.</p>
+     * @public
+     */
+    EgressOnlyInternetGateway?: EgressOnlyInternetGateway | undefined;
+}
+/**
+ * <p>The Amazon EC2 launch template that can be used by
+ *          an EC2 Fleet to configure Amazon EC2 instances. You must specify either the ID or name of the launch template in the request, but not both.</p>
+ *          <p>For information about launch templates, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-launch-templates.html">Launch
+ *             an instance from a launch template</a> in the
+ *          <i>Amazon EC2 User Guide</i>.</p>
+ * @public
+ */
+export interface FleetLaunchTemplateSpecificationRequest {
+    /**
+     * <p>The ID of the launch template.</p>
+     *          <p>You must specify the <code>LaunchTemplateId</code> or the <code>LaunchTemplateName</code>, but not both.</p>
+     * @public
+     */
+    LaunchTemplateId?: string | undefined;
+    /**
+     * <p>The name of the launch template.</p>
+     *          <p>You must specify the <code>LaunchTemplateName</code> or the <code>LaunchTemplateId</code>, but not both.</p>
+     * @public
+     */
+    LaunchTemplateName?: string | undefined;
+    /**
+     * <p>The launch template version number, <code>$Latest</code>, or <code>$Default</code>. You must specify a value, otherwise the request fails.</p>
+     *          <p>If the value is <code>$Latest</code>, Amazon EC2 uses the latest version of the launch template.</p>
+     *          <p>If the value is <code>$Default</code>, Amazon EC2 uses the default version of the launch template.</p>
+     * @public
+     */
+    Version?: string | undefined;
+    /**
+     * <p>The base64-encoded user data for instances launched by the fleet. User data is limited
+     *          to 16 KB, in raw form, before it is base64-encoded.</p>
+     *          <p>Supported only for fleets of type <code>instant</code>.</p>
+     * @public
+     */
+    LaunchTemplateSpecificationUserData?: string | undefined;
+}
+/**
+ * <p>Describes a block device for an EBS volume.</p>
+ * @public
+ */
+export interface FleetEbsBlockDeviceRequest {
+    /**
+     * <p>Indicates whether the encryption state of an EBS volume is changed while being restored
+     *          from a backing snapshot. The effect of setting the encryption state to <code>true</code>
+     *          depends on the volume origin (new or from a snapshot), starting encryption state,
+     *          ownership, and whether encryption by default is enabled. For more information, see <a href="https://docs.aws.amazon.com/ebs/latest/userguide/ebs-encryption.html">Amazon EBS
+     *             encryption</a> in the <i>Amazon EBS User Guide</i>.</p>
+     *          <p>In no case can you remove encryption from an encrypted volume.</p>
+     *          <p>Encrypted volumes can only be attached to instances that support Amazon EBS encryption. For
+     *          more information, see <a href="https://docs.aws.amazon.com/ebs/latest/userguide/ebs-encryption-requirements.html#ebs-encryption_supported_instances">Supported instance types</a>.</p>
+     *          <p>This parameter is not returned by <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeImageAttribute">DescribeImageAttribute</a>.</p>
+     *          <p>For <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateImage">CreateImage</a> and <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RegisterImage">RegisterImage</a>, whether you
+     *          can include this parameter, and the allowed values differ depending on the type of block
+     *          device mapping you are creating.</p>
+     *          <ul>
      *             <li>
-     *                <p>For instance types with NVIDIA GRID K520 GPUs, specify <code>k520</code>.</p>
+     *                <p>If you are creating a block device mapping for a <b>new (empty)
+     *                   volume</b>, you can include this parameter, and specify either
+     *                   <code>true</code> for an encrypted volume, or <code>false</code> for an
+     *                unencrypted volume. If you omit this parameter, it defaults to <code>false</code>
+     *                (unencrypted).</p>
      *             </li>
      *             <li>
-     *                <p>For instance types with NVIDIA K80 GPUs, specify <code>k80</code>.</p>
+     *                <p>If you are creating a block device mapping from an <b>existing encrypted or
+     *                   unencrypted snapshot</b>, you must omit this parameter. If you include this
+     *                parameter, the request will fail, regardless of the value that you specify.</p>
      *             </li>
      *             <li>
-     *                <p>For instance types with NVIDIA L4 GPUs, specify <code>l4</code>.</p>
+     *                <p>If you are creating a block device mapping from an <b>existing unencrypted
+     *                   volume</b>, you can include this parameter, but you must specify
+     *                   <code>false</code>. If you specify <code>true</code>, the request will fail. In
+     *                this case, we recommend that you omit the parameter.</p>
      *             </li>
      *             <li>
-     *                <p>For instance types with NVIDIA L40S GPUs, specify <code>l40s</code>.</p>
+     *                <p>If you are creating a block device mapping from an <b>existing encrypted
+     *                   volume</b>, you can include this parameter, and specify either
+     *                   <code>true</code> or <code>false</code>. However, if you specify
+     *                   <code>false</code>, the parameter is ignored and the block device mapping is
+     *                always encrypted. In this case, we recommend that you omit the parameter.</p>
      *             </li>
+     *          </ul>
+     * @public
+     */
+    Encrypted?: boolean | undefined;
+    /**
+     * <p>Indicates whether the EBS volume is deleted on instance termination. For more
+     *          information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/preserving-volumes-on-termination.html">Preserve data when
+     *             an instance is terminated</a> in the <i>Amazon EC2 User Guide</i>.</p>
+     * @public
+     */
+    DeleteOnTermination?: boolean | undefined;
+    /**
+     * <p>The number of I/O operations per second (IOPS). For <code>gp3</code>, <code>io1</code>, and <code>io2</code> volumes,
+     *          this represents the number of IOPS that are provisioned for the volume. For <code>gp2</code>
+     *          volumes, this represents the baseline performance of the volume and the rate at which
+     *          the volume accumulates I/O credits for bursting.</p>
+     *          <p>The following are the supported values for each volume type:</p>
+     *          <ul>
      *             <li>
-     *                <p>For instance types with NVIDIA M60 GPUs, specify <code>m60</code>.</p>
+     *                <p>
+     *                   <code>gp3</code>: 3,000 - 80,000 IOPS</p>
      *             </li>
      *             <li>
-     *                <p>For instance types with AMD Radeon Pro V520 GPUs, specify <code>radeon-pro-v520</code>.</p>
+     *                <p>
+     *                   <code>io1</code>: 100 - 64,000 IOPS</p>
      *             </li>
      *             <li>
-     *                <p>For instance types with Amazon Web Services Trainium chips, specify <code>trainium</code>.</p>
+     *                <p>
+     *                   <code>io2</code>: 100 - 256,000 IOPS</p>
      *             </li>
+     *          </ul>
+     *          <p>For <code>io2</code> volumes, you can achieve up to 256,000 IOPS on
+     * <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html#ec2-nitro-instances">instances
+     * built on the Nitro System</a>. On other instances, you can achieve performance up to 32,000 IOPS.</p>
+     *          <p>This parameter is required for <code>io1</code> and <code>io2</code> volumes. The default for <code>gp3</code> volumes
+     *          is 3,000 IOPS.</p>
+     * @public
+     */
+    Iops?: number | undefined;
+    /**
+     * <p>The throughput that the volume supports, in MiB/s.</p>
+     *          <p>This parameter is valid only for <code>gp3</code> volumes.</p>
+     *          <p>Valid Range: Minimum value of 125. Maximum value of 2,000.</p>
+     * @public
+     */
+    Throughput?: number | undefined;
+    /**
+     * <p>Identifier (key ID, key alias, key ARN, or alias ARN) of the customer managed KMS key
+     *          to use for EBS encryption.</p>
+     *          <p>This parameter is only supported on <code>BlockDeviceMapping</code> objects called by
+     *             <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateFleet.html">CreateFleet</a>, <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RequestSpotInstances.html">RequestSpotInstances</a>, and <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RunInstances.html">RunInstances</a>.</p>
+     * @public
+     */
+    KmsKeyId?: string | undefined;
+    /**
+     * <p>The ID of the snapshot.</p>
+     * @public
+     */
+    SnapshotId?: string | undefined;
+    /**
+     * <p>The size of the volume, in GiBs. You must specify either a snapshot ID or a volume
+     *          size. If you specify a snapshot, the default is the snapshot size. You can specify a
+     *          volume size that is equal to or larger than the snapshot size.</p>
+     *          <p>The following are the supported sizes for each volume type:</p>
+     *          <ul>
      *             <li>
-     *                <p>For instance types with Amazon Web Services Trainium2 chips, specify <code>trainium2</code>.</p>
+     *                <p>
+     *                   <code>gp2</code>: 1 - 16,384 GiB</p>
      *             </li>
      *             <li>
-     *                <p>For instance types with NVIDIA T4 GPUs, specify <code>t4</code>.</p>
+     *                <p>
+     *                   <code>gp3</code>: 1 - 65,536 GiB</p>
      *             </li>
      *             <li>
-     *                <p>For instance types with NVIDIA T4G GPUs, specify <code>t4g</code>.</p>
+     *                <p>
+     *                   <code>io1</code>: 4 - 16,384 GiB</p>
      *             </li>
      *             <li>
-     *                <p>For instance types with Xilinx U30 cards, specify <code>u30</code>.</p>
+     *                <p>
+     *                   <code>io2</code>: 4 - 65,536 GiB</p>
      *             </li>
      *             <li>
-     *                <p>For instance types with Xilinx VU9P FPGAs, specify <code>vu9p</code>.</p>
+     *                <p>
+     *                   <code>st1</code> and <code>sc1</code>: 125 - 16,384 GiB</p>
      *             </li>
      *             <li>
-     *                <p>For instance types with NVIDIA V100 GPUs, specify <code>v100</code>.</p>
+     *                <p>
+     *                   <code>standard</code>: 1 - 1024 GiB</p>
      *             </li>
      *          </ul>
-     *          <p>Default: Any accelerator</p>
      * @public
      */
-    AcceleratorNames?: AcceleratorName[] | undefined;
+    VolumeSize?: number | undefined;
     /**
-     * <p>The minimum and maximum amount of total accelerator memory, in MiB.</p>
-     *          <p>Default: No minimum or maximum limits</p>
+     * <p>The volume type. For more information, see <a href="https://docs.aws.amazon.com/ebs/latest/userguide/ebs-volume-types.html">Amazon EBS volume types</a> in the
+     *          <i>Amazon EBS User Guide</i>.</p>
      * @public
      */
-    AcceleratorTotalMemoryMiB?: AcceleratorTotalMemoryMiBRequest | undefined;
+    VolumeType?: VolumeType | undefined;
+}
+/**
+ * <p>Describes a block device mapping, which defines the EBS volumes and instance store
+ *          volumes to attach to an instance at launch.</p>
+ *          <p>To override a block device mapping specified in the launch template:</p>
+ *          <ul>
+ *             <li>
+ *                <p>Specify the exact same <code>DeviceName</code> here as specified in the launch
+ *                template.</p>
+ *             </li>
+ *             <li>
+ *                <p>Only specify the parameters you want to change.</p>
+ *             </li>
+ *             <li>
+ *                <p>Any parameters you don't specify here will keep their original launch template
+ *                values.</p>
+ *             </li>
+ *          </ul>
+ *          <p>To add a new block device mapping:</p>
+ *          <ul>
+ *             <li>
+ *                <p>Specify a <code>DeviceName</code> that doesn't exist in the launch
+ *                template.</p>
+ *             </li>
+ *             <li>
+ *                <p>Specify all desired parameters here.</p>
+ *             </li>
+ *          </ul>
+ * @public
+ */
+export interface FleetBlockDeviceMappingRequest {
     /**
-     * <p>The minimum and maximum amount of baseline network bandwidth, in gigabits per second
-     *           (Gbps). For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-network-bandwidth.html">Amazon EC2 instance network bandwidth</a> in the <i>Amazon EC2 User Guide</i>.</p>
-     *          <p>Default: No minimum or maximum limits</p>
+     * <p>The device name (for example, <code>/dev/sdh</code> or <code>xvdh</code>).</p>
      * @public
      */
-    NetworkBandwidthGbps?: NetworkBandwidthGbpsRequest | undefined;
+    DeviceName?: string | undefined;
     /**
-     * <p>The instance types to apply your specified attributes against. All other instance types
-     *          are ignored, even if they match your specified attributes.</p>
-     *          <p>You can use strings with one or more wild cards, represented by
-     *          an asterisk (<code>*</code>), to allow an instance type, size, or generation. The
-     *          following are examples: <code>m5.8xlarge</code>, <code>c5*.*</code>, <code>m5a.*</code>,
-     *          <code>r*</code>, <code>*3*</code>.</p>
-     *          <p>For example, if you specify <code>c5*</code>,Amazon EC2 will allow the entire C5 instance
-     *          family, which includes all C5a and C5n instance types. If you specify
-     *          <code>m5a.*</code>, Amazon EC2 will allow all the M5a instance types, but not the M5n
-     *          instance types.</p>
-     *          <note>
-     *             <p>If you specify <code>AllowedInstanceTypes</code>, you can't specify <code>ExcludedInstanceTypes</code>.</p>
-     *          </note>
-     *          <p>Default: All instance types</p>
+     * <p>The virtual device name (<code>ephemeralN</code>). Instance store volumes are numbered
+     *          starting from 0. An instance type with 2 available instance store volumes can specify
+     *          mappings for <code>ephemeral0</code> and <code>ephemeral1</code>. The number of available
+     *          instance store volumes depends on the instance type. After you connect to the instance, you
+     *          must mount the volume.</p>
+     *          <p>NVMe instance store volumes are automatically enumerated and assigned a device name.
+     *          Including them in your block device mapping has no effect.</p>
+     *          <p>Constraints: For M3 instances, you must specify instance store volumes in the block
+     *          device mapping for the instance. When you launch an M3 instance, we ignore any instance
+     *          store volumes specified in the block device mapping for the AMI.</p>
      * @public
      */
-    AllowedInstanceTypes?: string[] | undefined;
+    VirtualName?: string | undefined;
     /**
-     * <p>[Price protection] The price protection threshold for Spot Instances, as a percentage of an
-     *          identified On-Demand price. The identified On-Demand price is the price of the lowest
-     *          priced current generation C, M, or R instance type with your specified attributes. If no
-     *          current generation C, M, or R instance type matches your attributes, then the identified
-     *          price is from the lowest priced current generation instance types, and failing that, from
-     *          the lowest priced previous generation instance types that match your attributes. When Amazon EC2
-     *          selects instance types with your attributes, it will exclude instance types whose price
-     *          exceeds your specified threshold.</p>
-     *          <p>The parameter accepts an integer, which Amazon EC2 interprets as a percentage.</p>
-     *          <p>If you set <code>TargetCapacityUnitType</code> to <code>vcpu</code> or
-     *          <code>memory-mib</code>, the price protection threshold is based on the per vCPU or per
-     *          memory price instead of the per instance price.</p>
-     *          <note>
-     *             <p>Only one of <code>SpotMaxPricePercentageOverLowestPrice</code> or
-     *                <code>MaxSpotPriceAsPercentageOfOptimalOnDemandPrice</code> can be specified. If you
-     *             don't specify either, Amazon EC2 will automatically apply optimal price protection to
-     *             consistently select from a wide range of instance types. To indicate no price protection
-     *             threshold for Spot Instances, meaning you want to consider all instance types that match your
-     *             attributes, include one of these parameters and specify a high value, such as
-     *                <code>999999</code>.</p>
-     *          </note>
+     * <p>Parameters used to automatically set up EBS volumes when the instance is
+     *          launched.</p>
      * @public
      */
-    MaxSpotPriceAsPercentageOfOptimalOnDemandPrice?: number | undefined;
+    Ebs?: FleetEbsBlockDeviceRequest | undefined;
     /**
-     * <p>The baseline performance to consider, using an instance family as a baseline reference.
-     *          The instance family establishes the lowest acceptable level of performance. Amazon EC2 uses this
-     *          baseline to guide instance type selection, but there is no guarantee that the selected
-     *          instance types will always exceed the baseline for every application. Currently, this
-     *          parameter only supports CPU performance as a baseline performance factor. For more
-     *          information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-fleet-attribute-based-instance-type-selection.html#ec2fleet-abis-performance-protection">Performance protection</a> in the <i>Amazon EC2 User Guide</i>.</p>
+     * <p>To omit the device from the block device mapping, specify an empty string. When this
+     *          property is specified, the device is removed from the block device mapping regardless of
+     *          the assigned value.</p>
      * @public
      */
-    BaselinePerformanceFactors?: BaselinePerformanceFactorsRequest | undefined;
+    NoDevice?: string | undefined;
+}
+/**
+ * <p>Describes an IAM instance profile. Supported only for fleets of type
+ *          <code>instant</code>.</p>
+ * @public
+ */
+export interface FleetIamInstanceProfileSpecificationRequest {
     /**
-     * <p>Specifies whether instance types must support encrypting in-transit traffic between
-     *          instances. For more information, including the supported instance types, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/data-protection.html#encryption-transit">Encryption in
-     *             transit</a> in the <i>Amazon EC2 User Guide</i>.</p>
-     *          <p>Default: <code>false</code>
-     *          </p>
+     * <p>The Amazon Resource Name (ARN) of the instance profile.</p>
      * @public
      */
-    RequireEncryptionInTransit?: boolean | undefined;
+    Arn?: string | undefined;
+    /**
+     * <p>The name of the instance profile.</p>
+     * @public
+     */
+    Name?: string | undefined;
 }
 /**
  * <p>Describes the metadata options for the instances. Supported only for fleets of type
@@ -12567,26 +12764,3 @@ export interface AttachmentEnaSrdUdpSpecification {
      */
     EnaSrdUdpEnabled?: boolean | undefined;
 }
-/**
- * <p>ENA Express uses Amazon Web Services Scalable Reliable Datagram (SRD) technology to increase the
- * 			maximum bandwidth used per stream and minimize tail latency of network traffic between EC2 instances.
- * 			With ENA Express, you can communicate between two EC2 instances in the same subnet within the same
- * 			account, or in different accounts. Both sending and receiving instances must have ENA Express enabled.</p>
- *          <p>To improve the reliability of network packet delivery, ENA Express reorders network packets on the
- * 			receiving end by default. However, some UDP-based applications are designed to handle network packets
- * 			that are out of order to reduce the overhead for packet delivery at the network layer. When ENA Express
- * 			is enabled, you can specify whether UDP network traffic uses it.</p>
- * @public
- */
-export interface AttachmentEnaSrdSpecification {
-    /**
-     * <p>Indicates whether ENA Express is enabled for the network interface.</p>
-     * @public
-     */
-    EnaSrdEnabled?: boolean | undefined;
-    /**
-     * <p>Configures ENA Express for UDP network traffic.</p>
-     * @public
-     */
-    EnaSrdUdpSpecification?: AttachmentEnaSrdUdpSpecification | undefined;
-}