cdk-preflight 1.12.0 → 1.12.1

package/node_modules/@aws-sdk/client-ec2/dist-types/models/models_6.d.ts

@@ -1,10 +1,64 @@
-import type { AllowedImagesSettingsEnabledState, AnalysisStatus, ArchitectureType, CapacityManagerMonitoredTagKeyStatus, CapacityManagerStatus, CapacityReservationState, CapacityTenancy, ChronologicalOrder, ClientCertificateRevocationListStatusCode, ClientVpnAuthorizationPolicyShadowMode, ClientVpnAuthorizationPolicyStatus, Comparison, CurrencyCodeValues, DeviceTrustProviderType, DiskImageFormat, EkPubKeyFormat, EkPubKeyType, FastLaunchResourceType, FastLaunchStateCode, FastSnapshotRestoreStateCode, FilterByDimension, GroupBy, HttpTokensEnforcedState, HttpTokensState, ImageBlockPublicAccessEnabledState, IngestionStatus, InstanceMetadataEndpointState, InstanceMetadataTagsState, IpamAddressHistoryResourceType, IpamByoipAdvertisementType, IpamByoipCidrState, IpamComplianceStatus, IpamDiscoveryFailureCode, IpamManagementState, IpamNetworkInterfaceAttachmentStatus, IpamOverlapStatus, IpamPolicyManagedBy, IpamPolicyResourceType, IpamPrefixListResolverRuleConditionOperation, IpamPrefixListResolverRuleType, IpamPublicAddressAssociationStatus, IpamPublicAddressAwsService, IpamPublicAddressType, IpamResourceCidrIpSource, IpamResourceType, IpamRoutingPolicyRegistrationState, IpamRpkiStatus, IpamRpkiStrength, ManagedBy, ManagedResourceDefaultVisibility, Metric, MetricType, PartitionLoadFrequency, PaymentOption, PeriodType, ReservationEndDateType, ReservationState, ReservationType, RouteServerRouteInstallationStatus, RouteServerRouteStatus, SnapshotBlockPublicAccessState, SSEType, StatisticType, TargetCapacityUnitType, TransitGatewayAssociationState, TransitGatewayAttachmentResourceType, TransitGatewayPropagationState, UnlimitedSupportedInstanceFamily, UserTrustProviderType, VirtualizationType } from "./enums";
+import type { AllowedImagesSettingsEnabledState, AnalysisStatus, ArchitectureType, CapacityManagerMonitoredTagKeyStatus, CapacityManagerStatus, CapacityReservationState, CapacityTenancy, CapacityUnit, ChronologicalOrder, ClientCertificateRevocationListStatusCode, ClientVpnAuthorizationPolicyShadowMode, ClientVpnAuthorizationPolicyStatus, Comparison, CurrencyCodeValues, DeviceTrustProviderType, DiskImageFormat, EkPubKeyFormat, EkPubKeyType, FastLaunchResourceType, FastLaunchStateCode, FastSnapshotRestoreStateCode, FilterByDimension, GroupBy, HttpTokensEnforcedState, HttpTokensState, ImageBlockPublicAccessEnabledState, IngestionStatus, InstanceMetadataEndpointState, InstanceMetadataTagsState, IpamAddressHistoryResourceType, IpamByoipAdvertisementType, IpamByoipCidrState, IpamComplianceStatus, IpamDiscoveryFailureCode, IpamManagementState, IpamNetworkInterfaceAttachmentStatus, IpamOverlapStatus, IpamPolicyManagedBy, IpamPolicyResourceType, IpamPrefixListResolverRuleConditionOperation, IpamPrefixListResolverRuleType, IpamPublicAddressAssociationStatus, IpamPublicAddressAwsService, IpamPublicAddressType, IpamResourceCidrIpSource, IpamResourceType, IpamRoutingPolicyRegistrationState, IpamRpkiStatus, IpamRpkiStrength, ManagedBy, ManagedResourceDefaultVisibility, Metric, MetricType, PartitionLoadFrequency, PaymentOption, PeriodType, ReservationEndDateType, ReservationState, ReservationType, RouteServerRouteInstallationStatus, RouteServerRouteStatus, SeverityLabel, SnapshotBlockPublicAccessState, SSEType, StatisticType, SupportabilityMarketType, SupportabilityScore, TargetCapacityUnitType, TransitGatewayAssociationState, TransitGatewayAttachmentNatGatewaySupportState, TransitGatewayAttachmentNatSystemRouteSupportValue, TransitGatewayAttachmentResourceType, TransitGatewayNatRuleState, TransitGatewayPropagationState, UnlimitedSupportedInstanceFamily, UserTrustProviderType, VirtualizationType } from "./enums";
 import type { AccessScopeAnalysisFinding, ActiveVpnTunnelStatus, AddressTransfer, InterruptibleCapacityAllocation, InterruptionInfo, IpamPoolAllocation, IpamRoutingPolicyRegistrationDelta, RouteServerAssociation, SubnetAssociation, Tag, TagSpecification, TargetConfigurationRequest, TransitGatewayAssociation, TransitGatewayPolicyTableAssociation, VpcCidrBlockAssociation, VpcIpv6CidrBlockAssociation } from "./models_0";
 import type { InstanceRequirementsRequest, IpamInternetRegistryAssociation, IpamResourceTag, NetworkInsightsAccessScopeContent, RequestIpamResourceTag, ResponseLaunchTemplateData } from "./models_1";
 import type { SubnetCidrReservation, TransitGatewayMeteringPolicyEntry, TransitGatewayPolicyTableEntry, TransitGatewayPrefixListReference } from "./models_2";
 import type { ExportTaskS3Location, FastLaunchLaunchTemplateSpecificationResponse, FastLaunchSnapshotConfigurationResponse, Filter, IpamPoolCidr } from "./models_3";
 import type { RegisteredInstance } from "./models_4";
 import type { RouteServerPropagation, SuccessfulSuppressionResponseObject, TransitGatewayPropagation, UnsuccessfulSuppressionResponseObject } from "./models_5";
+/**
+ * @public
+ */
+export interface DisassociateTransitGatewayPolicyTableRequest {
+    /**
+     * <p>The ID of the disassociated policy table.</p>
+     * @public
+     */
+    TransitGatewayPolicyTableId: string | undefined;
+    /**
+     * <p>The ID of the transit gateway attachment to disassociate from the policy table.</p>
+     * @public
+     */
+    TransitGatewayAttachmentId: string | undefined;
+    /**
+     * <p>Checks whether you have the required permissions for the action, without actually making the request,
+     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+     * @public
+     */
+    DryRun?: boolean | undefined;
+}
+/**
+ * @public
+ */
+export interface DisassociateTransitGatewayPolicyTableResult {
+    /**
+     * <p>Returns details about the transit gateway policy table disassociation.</p>
+     * @public
+     */
+    Association?: TransitGatewayPolicyTableAssociation | undefined;
+}
+/**
+ * @public
+ */
+export interface DisassociateTransitGatewayRouteTableRequest {
+    /**
+     * <p>The ID of the transit gateway route table.</p>
+     * @public
+     */
+    TransitGatewayRouteTableId: string | undefined;
+    /**
+     * <p>The ID of the attachment.</p>
+     * @public
+     */
+    TransitGatewayAttachmentId: string | undefined;
+    /**
+     * <p>Checks whether you have the required permissions for the action, without actually making the request,
+     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+     * @public
+     */
+    DryRun?: boolean | undefined;
+}
 /**
  * @public
  */
@@ -1650,6 +1704,113 @@ export interface ImageWatermarkFilterResponse {
      */
     MaximumDaysSinceWatermarkCreated?: number | undefined;
 }
+/**
+ * <p>The Amazon Inspector scan-result criteria that an AMI must meet to be allowed. The
+ *       criteria can limit the highest finding severity. They can also limit, for each severity, the
+ *       days since Amazon Inspector reported a fix as available.</p>
+ *          <p>The severity limit applies to all findings, whether or not a fix is available. The day
+ *       limits for each severity apply only to findings that have a fix available. A scanned AMI that
+ *       has no fix-available finding of a given severity meets that severity's day limit. AMIs that
+ *       Amazon Inspector has not scanned are not allowed when you specify this condition.</p>
+ * @public
+ */
+export interface ScanResultCondition {
+    /**
+     * <p>The maximum number of days that have elapsed since Amazon Inspector last scanned the AMI.
+     *       For example, a value of <code>7</code> allows AMIs that were scanned within the last 7 days.
+     *       AMIs that Amazon Inspector has not scanned are not allowed.</p>
+     *          <p>Constraints: Minimum value of 0. Maximum value of 2147483647.</p>
+     * @public
+     */
+    MaxDaysSinceLastFindingScan?: number | undefined;
+    /**
+     * <p>The maximum severity that an AMI's Amazon Inspector findings can have for the AMI to be
+     *       allowed. Findings count whether or not a fix is available. For example, a value of
+     *       <code>medium</code> allows AMIs whose highest severity is <code>informational</code>,
+     *       <code>low</code>, or <code>medium</code>.</p>
+     *          <p>The valid values are the following Amazon Inspector severity levels, which correspond to
+     *       CVSS score ranges:</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>informational</code> - CVSS score of 0.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>low</code> - CVSS score of 0.1 to 3.9.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>medium</code> - CVSS score of 4.0 to 6.9.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>high</code> - CVSS score of 7.0 to 8.9.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>critical</code> - CVSS score of 9.0 to 10.0.</p>
+     *             </li>
+     *          </ul>
+     *          <p>For more information, see <a href="https://docs.aws.amazon.com/inspector/latest/user/findings-understanding-severity.html#findings-understanding-package-score">Software
+     *         package vulnerability severity</a> in the <i>Amazon Inspector User Guide</i>.</p>
+     *          <p>A scanned AMI that has no findings meets this limit.</p>
+     *          <p>AMIs that Amazon Inspector has not scanned are not allowed when you specify this
+     *       condition.</p>
+     * @public
+     */
+    MaximumSeverityLabel?: SeverityLabel | undefined;
+    /**
+     * <p>The maximum number of days since Amazon Inspector reported a fix as available for an
+     *       <code>informational</code> severity finding on the AMI. For example, a value of <code>7</code>
+     *       does not allow an AMI if Amazon Inspector reported such a fix more than 7 days ago.</p>
+     *          <p>A scanned AMI that has no <code>informational</code> severity finding with a fix available meets
+     *       this limit. AMIs that Amazon Inspector has not scanned are not allowed.</p>
+     *          <p>Constraints: Minimum value of 0. Maximum value of 2147483647.</p>
+     * @public
+     */
+    MaxDaysSinceInformationalFixAvailable?: number | undefined;
+    /**
+     * <p>The maximum number of days since Amazon Inspector reported a fix as available for a
+     *       <code>low</code> severity finding on the AMI. For example, a value of <code>7</code> does not
+     *       allow an AMI if Amazon Inspector reported such a fix more than 7 days ago.</p>
+     *          <p>A scanned AMI that has no <code>low</code> severity finding with a fix available meets
+     *       this limit. AMIs that Amazon Inspector has not scanned are not allowed.</p>
+     *          <p>Constraints: Minimum value of 0. Maximum value of 2147483647.</p>
+     * @public
+     */
+    MaxDaysSinceLowFixAvailable?: number | undefined;
+    /**
+     * <p>The maximum number of days since Amazon Inspector reported a fix as available for a
+     *       <code>medium</code> severity finding on the AMI. For example, a value of <code>7</code> does
+     *       not allow an AMI if Amazon Inspector reported such a fix more than 7 days ago.</p>
+     *          <p>A scanned AMI that has no <code>medium</code> severity finding with a fix available meets
+     *       this limit. AMIs that Amazon Inspector has not scanned are not allowed.</p>
+     *          <p>Constraints: Minimum value of 0. Maximum value of 2147483647.</p>
+     * @public
+     */
+    MaxDaysSinceMediumFixAvailable?: number | undefined;
+    /**
+     * <p>The maximum number of days since Amazon Inspector reported a fix as available for a
+     *       <code>high</code> severity finding on the AMI. For example, a value of <code>7</code> does not
+     *       allow an AMI if Amazon Inspector reported such a fix more than 7 days ago.</p>
+     *          <p>A scanned AMI that has no <code>high</code> severity finding with a fix available meets
+     *       this limit. AMIs that Amazon Inspector has not scanned are not allowed.</p>
+     *          <p>Constraints: Minimum value of 0. Maximum value of 2147483647.</p>
+     * @public
+     */
+    MaxDaysSinceHighFixAvailable?: number | undefined;
+    /**
+     * <p>The maximum number of days since Amazon Inspector reported a fix as available for a
+     *       <code>critical</code> severity finding on the AMI. For example, a value of <code>7</code> does
+     *       not allow an AMI if Amazon Inspector reported such a fix more than 7 days ago.</p>
+     *          <p>A scanned AMI that has no <code>critical</code> severity finding with a fix available meets
+     *       this limit. AMIs that Amazon Inspector has not scanned are not allowed.</p>
+     *          <p>Constraints: Minimum value of 0. Maximum value of 2147483647.</p>
+     * @public
+     */
+    MaxDaysSinceCriticalFixAvailable?: number | undefined;
+}
 /**
  * <p>The criteria that are evaluated to determine which AMIs are discoverable and usable in
  *       your account for the specified Amazon Web Services Region.</p>
@@ -1741,6 +1902,14 @@ export interface ImageCriterion {
      * @public
      */
     ImageWatermarks?: ImageWatermarkFilterResponse[] | undefined;
+    /**
+     * <p>The Amazon Inspector scan-result criteria that an AMI must meet to be allowed. The
+     *       criteria can limit the highest finding severity, the number of days since Amazon Inspector
+     *       last scanned the AMI, and the number of days since Amazon Inspector reported a fix as
+     *       available.</p>
+     * @public
+     */
+    ScanResultCondition?: ScanResultCondition | undefined;
 }
 /**
  * @public
@@ -2648,6 +2817,144 @@ export interface GetCapacityManagerMonitoredTagKeysResult {
      */
     NextToken?: string | undefined;
 }
+/**
+ * <p>The architecture type, virtualization type, and other attributes for the instance types.
+ *          When you specify instance attributes, Amazon EC2 will identify instance types with those
+ *          attributes.</p>
+ *          <p>If you specify <code>InstanceRequirementsWithMetadataRequest</code>, you can't specify
+ *          <code>InstanceTypes</code>.</p>
+ * @public
+ */
+export interface InstanceRequirementsWithMetadataRequest {
+    /**
+     * <p>The architecture type.</p>
+     * @public
+     */
+    ArchitectureTypes?: ArchitectureType[] | undefined;
+    /**
+     * <p>The virtualization type.</p>
+     * @public
+     */
+    VirtualizationTypes?: VirtualizationType[] | undefined;
+    /**
+     * <p>The attributes for the instance types. When you specify instance attributes, Amazon EC2 will
+     *          identify instance types with those attributes.</p>
+     * @public
+     */
+    InstanceRequirements?: InstanceRequirementsRequest | undefined;
+}
+/**
+ * @public
+ */
+export interface GetCapacityManagerSupportabilityScoresRequest {
+    /**
+     * <p>
+     * The capacity market to score.
+     * </p>
+     * @public
+     */
+    MarketType: SupportabilityMarketType | undefined;
+    /**
+     * <p>
+     * The amount of capacity that you need, in the unit that you specify for <code>CapacityUnit</code>. Each score is relative to this amount.
+     * </p>
+     * @public
+     */
+    CapacityAmount: number | undefined;
+    /**
+     * <p>
+     * The unit for <code>CapacityAmount</code>.
+     * </p>
+     * @public
+     */
+    CapacityUnit: CapacityUnit | undefined;
+    /**
+     * <p>
+     * The IDs of the Availability Zones to score, such as <code>use1-az1</code>. You can specify Availability Zones in different Regions.
+     * You can specify up to 10 Availability Zones.
+     * </p>
+     * @public
+     */
+    CapacityAvailabilityZoneIds: string[] | undefined;
+    /**
+     * <p>
+     * The instance types to score. You can specify up to 50 instance types.
+     * </p>
+     *          <p>
+     * Specify either <code>InstanceTypes</code> or <code>InstanceRequirementsWithMetadata</code>, but not both.
+     * </p>
+     * @public
+     */
+    InstanceTypes?: string[] | undefined;
+    /**
+     * <p>
+     * The attributes that the instance types must have, such as vCPU and memory ranges. Capacity Manager resolves the attributes into matching instance types and scores each one.
+     * </p>
+     *          <p>
+     * Specify either <code>InstanceTypes</code> or <code>InstanceRequirementsWithMetadata</code>, but not both.
+     * </p>
+     * @public
+     */
+    InstanceRequirementsWithMetadata?: InstanceRequirementsWithMetadataRequest | undefined;
+    /**
+     * <p>
+     * Checks whether you have the required permissions for the action, without actually making the request, and provides an error response.
+     * If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.
+     * </p>
+     * @public
+     */
+    DryRun?: boolean | undefined;
+}
+/**
+ * <p>
+ * The supportability score for a single instance type and Availability Zone combination.
+ * </p>
+ * @public
+ */
+export interface CapacityManagerSupportabilityScore {
+    /**
+     * <p>
+     * The instance type.
+     * </p>
+     * @public
+     */
+    InstanceType?: string | undefined;
+    /**
+     * <p>
+     * The ID of the Availability Zone.
+     * </p>
+     * @public
+     */
+    AvailabilityZoneId?: string | undefined;
+    /**
+     * <p>
+     * How well the combination can support the requested capacity right now. <code>high</code> means that the combination holds several times the requested amount.
+     * <code>medium</code> means that it can cover the request with little to spare. <code>low</code> means that it holds less than the requested amount.
+     * </p>
+     * @public
+     */
+    Score?: SupportabilityScore | undefined;
+}
+/**
+ * @public
+ */
+export interface GetCapacityManagerSupportabilityScoresResult {
+    /**
+     * <p>
+     * The score for all instance type and Availability Zone combinations in the request together.
+     * A <code>high</code> aggregate score with lower individual scores means that no single combination can support the full request, but the combinations together can.
+     * </p>
+     * @public
+     */
+    AggregateScore?: SupportabilityScore | undefined;
+    /**
+     * <p>
+     * The score for each instance type and Availability Zone combination in the request.
+     * </p>
+     * @public
+     */
+    CapacityManagerSupportabilityScores?: CapacityManagerSupportabilityScore[] | undefined;
+}
 /**
  * @public
  */
@@ -3669,47 +3976,168 @@ export interface GetImageBlockPublicAccessStateResult {
 /**
  * @public
  */
-export interface GetInstanceMetadataDefaultsRequest {
+export interface GetImageFindingsRequest {
     /**
-     * <p>Checks whether you have the required permissions for the operation, without actually making the
-     *   request, and provides an error response. If you have the required permissions, the error response is
-     *   <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+     * <p>The ID of the AMI.</p>
+     * @public
+     */
+    ImageId: string | undefined;
+    /**
+     * <p>The maximum number of items to return for this request.
+     *          To get the next page of items, make another request with the token returned in the output.
+     * 	        For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
+     * @public
+     */
+    MaxResults?: number | undefined;
+    /**
+     * <p>The token returned from a previous paginated request. Pagination continues from the end of the items returned by the previous request.</p>
+     * @public
+     */
+    NextToken?: string | undefined;
+    /**
+     * <p>Checks whether you have the required permissions for the action, without actually making the request,
+     * 			and provides an error response. If you have the required permissions, the error response is
+     * 			<code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
      * @public
      */
     DryRun?: boolean | undefined;
 }
 /**
- * <p>The default instance metadata service (IMDS) settings that were set at the account
- *             level in the specified Amazon Web Services
- Region.</p>
+ * <p>Describes an Amazon Inspector vulnerability finding for an AMI.</p>
  * @public
  */
-export interface InstanceMetadataDefaultsResponse {
+export interface ImageFinding {
     /**
-     * <p>Indicates whether IMDSv2 is required.</p>
-     *          <ul>
-     *             <li>
-     *                <p>
-     *                   <code>optional</code> – IMDSv2 is optional, which means that you can
-     *                     use either IMDSv2 or IMDSv1.</p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>required</code> – IMDSv2 is required, which means that IMDSv1 is
-     *                     disabled, and you must use IMDSv2.</p>
-     *             </li>
-     *          </ul>
+     * <p>Specifies whether a fix is available for the finding. This value is <code>true</code> when
+     *       Amazon Inspector reports a full or partial fix for the finding.</p>
      * @public
      */
-    HttpTokens?: HttpTokensState | undefined;
+    FixAvailable?: boolean | undefined;
     /**
-     * <p>The maximum number of hops that the metadata token can travel.</p>
+     * <p>The Amazon Inspector score for the finding.</p>
      * @public
      */
-    HttpPutResponseHopLimit?: number | undefined;
+    Score?: number | undefined;
     /**
-     * <p>Indicates whether the IMDS endpoint for an instance is enabled or disabled. When disabled, the instance
-     *             metadata can't be accessed.</p>
+     * <p>The date and time, in the ISO 8601 format in the UTC time zone
+     *       (YYYY-MM-DDThh:mm:ss.sssZ), when Amazon Inspector first observed the finding.</p>
+     * @public
+     */
+    FirstObservedAt?: Date | undefined;
+    /**
+     * <p>The date and time, in the ISO 8601 format in the UTC time zone
+     *       (YYYY-MM-DDThh:mm:ss.sssZ), when Amazon Inspector last updated the finding.</p>
+     * @public
+     */
+    UpdatedAt?: Date | undefined;
+    /**
+     * <p>The title of the finding.</p>
+     * @public
+     */
+    Title?: string | undefined;
+    /**
+     * <p>The file paths in the AMI that are affected by the finding. Amazon EC2 returns up to 10
+     *       file paths for each finding.</p>
+     * @public
+     */
+    Paths?: string[] | undefined;
+    /**
+     * <p>The severity of the finding.</p>
+     *          <p>The valid values are the following Amazon Inspector severity levels, which correspond to
+     *       CVSS score ranges:</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>informational</code> - CVSS score of 0.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>low</code> - CVSS score of 0.1 to 3.9.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>medium</code> - CVSS score of 4.0 to 6.9.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>high</code> - CVSS score of 7.0 to 8.9.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>critical</code> - CVSS score of 9.0 to 10.0.</p>
+     *             </li>
+     *          </ul>
+     *          <p>For more information, see <a href="https://docs.aws.amazon.com/inspector/latest/user/findings-understanding-severity.html#findings-understanding-package-score">Software
+     *         package vulnerability severity</a> in the <i>Amazon Inspector User Guide</i>.</p>
+     * @public
+     */
+    SeverityLabel?: SeverityLabel | undefined;
+    /**
+     * <p>The ID of the Amazon EBS snapshot of the AMI in which the finding was detected.</p>
+     * @public
+     */
+    SnapshotId?: string | undefined;
+}
+/**
+ * @public
+ */
+export interface GetImageFindingsResult {
+    /**
+     * <p>The Amazon Inspector findings for the AMI.</p>
+     * @public
+     */
+    ImageFindings?: ImageFinding[] | undefined;
+    /**
+     * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there
+     *          are no more items to return.</p>
+     * @public
+     */
+    NextToken?: string | undefined;
+}
+/**
+ * @public
+ */
+export interface GetInstanceMetadataDefaultsRequest {
+    /**
+     * <p>Checks whether you have the required permissions for the operation, without actually making the
+     *   request, and provides an error response. If you have the required permissions, the error response is
+     *   <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+     * @public
+     */
+    DryRun?: boolean | undefined;
+}
+/**
+ * <p>The default instance metadata service (IMDS) settings that were set at the account
+ *             level in the specified Amazon Web Services
+ Region.</p>
+ * @public
+ */
+export interface InstanceMetadataDefaultsResponse {
+    /**
+     * <p>Indicates whether IMDSv2 is required.</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>optional</code> – IMDSv2 is optional, which means that you can
+     *                     use either IMDSv2 or IMDSv1.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>required</code> – IMDSv2 is required, which means that IMDSv1 is
+     *                     disabled, and you must use IMDSv2.</p>
+     *             </li>
+     *          </ul>
+     * @public
+     */
+    HttpTokens?: HttpTokensState | undefined;
+    /**
+     * <p>The maximum number of hops that the metadata token can travel.</p>
+     * @public
+     */
+    HttpPutResponseHopLimit?: number | undefined;
+    /**
+     * <p>Indicates whether the IMDS endpoint for an instance is enabled or disabled. When disabled, the instance
+     *             metadata can't be accessed.</p>
      * @public
      */
     HttpEndpoint?: InstanceMetadataEndpointState | undefined;
@@ -6909,32 +7337,6 @@ export interface GetSnapshotBlockPublicAccessStateResult {
      */
     ManagedBy?: ManagedBy | undefined;
 }
-/**
- * <p>The architecture type, virtualization type, and other attributes for the instance types.
- *          When you specify instance attributes, Amazon EC2 will identify instance types with those
- *          attributes.</p>
- *          <p>If you specify <code>InstanceRequirementsWithMetadataRequest</code>, you can't specify
- *          <code>InstanceTypes</code>.</p>
- * @public
- */
-export interface InstanceRequirementsWithMetadataRequest {
-    /**
-     * <p>The architecture type.</p>
-     * @public
-     */
-    ArchitectureTypes?: ArchitectureType[] | undefined;
-    /**
-     * <p>The virtualization type.</p>
-     * @public
-     */
-    VirtualizationTypes?: VirtualizationType[] | undefined;
-    /**
-     * <p>The attributes for the instance types. When you specify instance attributes, Amazon EC2 will
-     *          identify instance types with those attributes.</p>
-     * @public
-     */
-    InstanceRequirements?: InstanceRequirementsRequest | undefined;
-}
 /**
  * @public
  */
@@ -7140,6 +7542,88 @@ export interface GetSubnetCidrReservationsResult {
      */
     NextToken?: string | undefined;
 }
+/**
+ * @public
+ */
+export interface GetTransitGatewayAttachmentNatConfigurationRequest {
+    /**
+     * <p>The ID of the transit gateway attachment.</p>
+     * @public
+     */
+    TransitGatewayAttachmentId: string | undefined;
+    /**
+     * <p>Checks whether you have the required permissions for the action, without actually making the request,
+     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+     * @public
+     */
+    DryRun?: boolean | undefined;
+}
+/**
+ * <p>Contains information about a NAT gateway rule for a transit gateway attachment, including the rule number, the source CIDR block, the translated CIDR block, and the state of the rule.</p>
+ * @public
+ */
+export interface TransitGatewayNatRule {
+    /**
+     * <p>The rule number.</p>
+     * @public
+     */
+    RuleNumber?: number | undefined;
+    /**
+     * <p>The IPv4 CIDR block of the source addresses to translate.</p>
+     * @public
+     */
+    MatchSourceCidr?: string | undefined;
+    /**
+     * <p>The IPv4 CIDR block that the transit gateway translates the source addresses to.</p>
+     * @public
+     */
+    NatCidr?: string | undefined;
+    /**
+     * <p>The state of the NAT gateway rule. The possible values are:</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>pending</code> - The transit gateway is applying a change to the rule.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>activated</code> - The rule is in effect because NAT gateway support is enabled for the attachment.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>deactivated</code> - The rule isn't in effect because NAT gateway support is disabled for the attachment.</p>
+     *             </li>
+     *          </ul>
+     * @public
+     */
+    State?: TransitGatewayNatRuleState | undefined;
+}
+/**
+ * @public
+ */
+export interface GetTransitGatewayAttachmentNatConfigurationResult {
+    /**
+     * <p>The ID of the transit gateway attachment.</p>
+     * @public
+     */
+    TransitGatewayAttachmentId?: string | undefined;
+    /**
+     * <p>The state of NAT gateway support for the attachment.</p>
+     * @public
+     */
+    NatGatewaySupport?: TransitGatewayAttachmentNatGatewaySupportState | undefined;
+    /**
+     * <p>Specifies whether the transit gateway installs routes for the NAT CIDRs in the route tables to which the attachment propagates.</p>
+     * @public
+     */
+    NatSystemRouteSupport?: TransitGatewayAttachmentNatSystemRouteSupportValue | undefined;
+    /**
+     * <p>The NAT gateway rules for the attachment.</p>
+     * @public
+     */
+    NatGatewayRules?: TransitGatewayNatRule[] | undefined;
+}
 /**
  * @public
  */
@@ -7820,291 +8304,3 @@ export interface GetVerifiedAccessEndpointTargetsRequest {
      */
     DryRun?: boolean | undefined;
 }
-/**
- * <p>Describes the targets for the specified Verified Access endpoint.</p>
- * @public
- */
-export interface VerifiedAccessEndpointTarget {
-    /**
-     * <p>The ID of the Verified Access endpoint.</p>
-     * @public
-     */
-    VerifiedAccessEndpointId?: string | undefined;
-    /**
-     * <p>The IP address of the target.</p>
-     * @public
-     */
-    VerifiedAccessEndpointTargetIpAddress?: string | undefined;
-    /**
-     * <p>The DNS name of the target.</p>
-     * @public
-     */
-    VerifiedAccessEndpointTargetDns?: string | undefined;
-}
-/**
- * @public
- */
-export interface GetVerifiedAccessEndpointTargetsResult {
-    /**
-     * <p>The Verified Access targets.</p>
-     * @public
-     */
-    VerifiedAccessEndpointTargets?: VerifiedAccessEndpointTarget[] | undefined;
-    /**
-     * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
-     * @public
-     */
-    NextToken?: string | undefined;
-}
-/**
- * @public
- */
-export interface GetVerifiedAccessGroupPolicyRequest {
-    /**
-     * <p>The ID of the Verified Access group.</p>
-     * @public
-     */
-    VerifiedAccessGroupId: string | undefined;
-    /**
-     * <p>Checks whether you have the required permissions for the action, without actually making the request,
-     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-     * @public
-     */
-    DryRun?: boolean | undefined;
-}
-/**
- * @public
- */
-export interface GetVerifiedAccessGroupPolicyResult {
-    /**
-     * <p>The status of the Verified Access policy.</p>
-     * @public
-     */
-    PolicyEnabled?: boolean | undefined;
-    /**
-     * <p>The Verified Access policy document.</p>
-     * @public
-     */
-    PolicyDocument?: string | undefined;
-}
-/**
- * @public
- */
-export interface GetVpcResourcesBlockingEncryptionEnforcementRequest {
-    /**
-     * <p>The ID of the VPC to check for resources blocking encryption enforcement.</p>
-     * @public
-     */
-    VpcId: string | undefined;
-    /**
-     * <p>The maximum number of items to return for this request.
-     * 	To get the next page of items, make another request with the token returned in the output.
-     * 	For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
-     * @public
-     */
-    MaxResults?: number | undefined;
-    /**
-     * <p>The token returned from a previous paginated request. Pagination continues from the end of the items returned by the previous request.</p>
-     * @public
-     */
-    NextToken?: string | undefined;
-    /**
-     * <p>Checks whether you have the required permissions for the action, without actually making the request,
-     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-     * @public
-     */
-    DryRun?: boolean | undefined;
-}
-/**
- * <p>Describes a resource that is not compliant with VPC encryption requirements.</p>
- *          <p>For more information, see <a href="https://docs.aws.amazon.com/vpc/latest/userguide/vpc-encryption-controls.html">Enforce VPC encryption in transit</a> in the <i>Amazon VPC User Guide</i>.</p>
- * @public
- */
-export interface VpcEncryptionNonCompliantResource {
-    /**
-     * <p>The ID of the non-compliant resource.</p>
-     * @public
-     */
-    Id?: string | undefined;
-    /**
-     * <p>The type of the non-compliant resource.</p>
-     * @public
-     */
-    Type?: string | undefined;
-    /**
-     * <p>A description of the non-compliant resource.</p>
-     * @public
-     */
-    Description?: string | undefined;
-    /**
-     * <p>Indicates whether the resource can be excluded from encryption enforcement.</p>
-     * @public
-     */
-    IsExcludable?: boolean | undefined;
-}
-/**
- * @public
- */
-export interface GetVpcResourcesBlockingEncryptionEnforcementResult {
-    /**
-     * <p>Information about resources that are blocking encryption enforcement.</p>
-     * @public
-     */
-    NonCompliantResources?: VpcEncryptionNonCompliantResource[] | undefined;
-    /**
-     * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there are no more items to return.</p>
-     * @public
-     */
-    NextToken?: string | undefined;
-}
-/**
- * @public
- */
-export interface GetVpnConnectionDeviceSampleConfigurationRequest {
-    /**
-     * <p>The <code>VpnConnectionId</code> specifies the Site-to-Site VPN connection used for the sample
-     *             configuration.</p>
-     * @public
-     */
-    VpnConnectionId: string | undefined;
-    /**
-     * <p>Device identifier provided by the <code>GetVpnConnectionDeviceTypes</code> API.</p>
-     * @public
-     */
-    VpnConnectionDeviceTypeId: string | undefined;
-    /**
-     * <p>The IKE version to be used in the sample configuration file for your customer gateway
-     *             device. You can specify one of the following versions: <code>ikev1</code> or
-     *                 <code>ikev2</code>.</p>
-     * @public
-     */
-    InternetKeyExchangeVersion?: string | undefined;
-    /**
-     * <p>The type of sample configuration to generate. Valid values are "compatibility" (includes IKEv1) or "recommended" (throws UnsupportedOperationException for IKEv1).</p>
-     * @public
-     */
-    SampleType?: string | undefined;
-    /**
-     * <p>Checks whether you have the required permissions for the action, without actually
-     *             making the request, and provides an error response. If you have the required
-     *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
-     *                 <code>UnauthorizedOperation</code>.</p>
-     * @public
-     */
-    DryRun?: boolean | undefined;
-}
-/**
- * @public
- */
-export interface GetVpnConnectionDeviceSampleConfigurationResult {
-    /**
-     * <p>Sample configuration file for the specified customer gateway device.</p>
-     * @public
-     */
-    VpnConnectionDeviceSampleConfiguration?: string | undefined;
-}
-/**
- * @public
- */
-export interface GetVpnConnectionDeviceTypesRequest {
-    /**
-     * <p>The maximum number of results returned by <code>GetVpnConnectionDeviceTypes</code> in
-     *             paginated output. When this parameter is used, <code>GetVpnConnectionDeviceTypes</code>
-     *             only returns <code>MaxResults</code> results in a single page along with a
-     *                 <code>NextToken</code> response element. The remaining results of the initial
-     *             request can be seen by sending another <code>GetVpnConnectionDeviceTypes</code> request
-     *             with the returned <code>NextToken</code> value. This value can be between 200 and 1000.
-     *             If this parameter is not used, then <code>GetVpnConnectionDeviceTypes</code> returns all
-     *             results.</p>
-     * @public
-     */
-    MaxResults?: number | undefined;
-    /**
-     * <p>The <code>NextToken</code> value returned from a previous paginated
-     *                 <code>GetVpnConnectionDeviceTypes</code> request where <code>MaxResults</code> was
-     *             used and the results exceeded the value of that parameter. Pagination continues from the
-     *             end of the previous results that returned the <code>NextToken</code> value. This value
-     *             is null when there are no more results to return. </p>
-     * @public
-     */
-    NextToken?: string | undefined;
-    /**
-     * <p>Checks whether you have the required permissions for the action, without actually
-     *             making the request, and provides an error response. If you have the required
-     *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
-     *                 <code>UnauthorizedOperation</code>.</p>
-     * @public
-     */
-    DryRun?: boolean | undefined;
-}
-/**
- * <p>List of customer gateway devices that have a sample configuration file available for
- *             use. You can also see the list of device types with sample configuration files available
- *             under <a href="https://docs.aws.amazon.com/vpn/latest/s2svpn/your-cgw.html">Your customer
- *                 gateway device</a> in the <i>Amazon Web Services Site-to-Site VPN User Guide</i>.</p>
- * @public
- */
-export interface VpnConnectionDeviceType {
-    /**
-     * <p>Customer gateway device identifier.</p>
-     * @public
-     */
-    VpnConnectionDeviceTypeId?: string | undefined;
-    /**
-     * <p>Customer gateway device vendor.</p>
-     * @public
-     */
-    Vendor?: string | undefined;
-    /**
-     * <p>Customer gateway device platform.</p>
-     * @public
-     */
-    Platform?: string | undefined;
-    /**
-     * <p>Customer gateway device software version.</p>
-     * @public
-     */
-    Software?: string | undefined;
-}
-/**
- * @public
- */
-export interface GetVpnConnectionDeviceTypesResult {
-    /**
-     * <p>List of customer gateway devices that have a sample configuration file available for
-     *             use.</p>
-     * @public
-     */
-    VpnConnectionDeviceTypes?: VpnConnectionDeviceType[] | undefined;
-    /**
-     * <p>The <code>NextToken</code> value to include in a future
-     *                 <code>GetVpnConnectionDeviceTypes</code> request. When the results of a
-     *                 <code>GetVpnConnectionDeviceTypes</code> request exceed <code>MaxResults</code>,
-     *             this value can be used to retrieve the next page of results. This value is null when
-     *             there are no more results to return.</p>
-     * @public
-     */
-    NextToken?: string | undefined;
-}
-/**
- * @public
- */
-export interface GetVpnTunnelReplacementStatusRequest {
-    /**
-     * <p>The ID of the Site-to-Site VPN connection. </p>
-     * @public
-     */
-    VpnConnectionId: string | undefined;
-    /**
-     * <p>The external IP address of the VPN tunnel.</p>
-     * @public
-     */
-    VpnTunnelOutsideIpAddress: string | undefined;
-    /**
-     * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-     * @public
-     */
-    DryRun?: boolean | undefined;
-}