cdk-preflight 1.12.0 → 1.12.1

package/node_modules/@aws-sdk/client-ec2/dist-types/models/models_7.d.ts

@@ -1,11 +1,299 @@
-import type { _InstanceType, AccountVpcEncryptionControlMode, Affinity, AggregationStatusEnum, ApplianceModeSupportValue, ArchitectureValues, AutoAcceptSharedAttachmentsValue, AutoPlacement, BootModeValues, CapacityReservationAdjustmentStatus, CapacityReservationInstancePlatform, CapacityReservationPreference, ClientVpnAuthorizationPolicyShadowMode, ClientVpnAuthorizationPolicyStatus, CurrencyCodeValues, DefaultHttpTokensEnforcedState, DefaultInstanceMetadataEndpointState, DefaultInstanceMetadataTagsState, DefaultRouteTableAssociationValue, DefaultRouteTablePropagationValue, DiskImageFormat, DnsSupportValue, EncryptionSupportOptionValue, EndDateType, ExcessCapacityTerminationPolicy, FleetExcessCapacityTerminationPolicy, FpgaImageAttributeName, HostMaintenance, HostnameType, HostRecovery, HostTenancy, HttpTokensState, ImdsSupportValues, InstanceAttributeName, InstanceAutoRecoveryState, InstanceBandwidthWeighting, InstanceMatchCriteria, InstanceMetadataEndpointState, InstanceMetadataProtocolState, InstanceMetadataTagsState, InstanceRebootMigrationState, InternetGatewayBlockMode, InternetGatewayExclusionMode, IpAddressType, IpamMeteredAccount, IpamPolicyResourceType, IpamTier, IpScopeEnum, Ipv6SupportValue, IpVersionEnum, LockMode, LockState, ManagedResourceDefaultVisibility, MetadataDefaultHttpTokensState, ModifyAvailabilityZoneOptInStatus, NestedVirtualizationSpecification, NetworkProtocolEnum, OperationType, PayerResponsibility, PayerResponsibilityScope, PayerResponsibilityType, PermissionGroup, PlatformValues, PublicIpDnsOption, RouteServerPersistRoutesAction, SecurityGroupReferencingSupportValue, SelfServicePortal, ShutdownBehavior, SnapshotAttributeName, Status, TargetStorageTier, TpmSupportValues, TrafficDirection, TrafficMirrorFilterRuleField, TrafficMirrorNetworkService, TrafficMirrorRuleAction, TrafficMirrorSessionField, UnlimitedSupportedInstanceFamily, UnsuccessfulInstanceCreditSpecificationErrorCode, VerificationMethod, VerifiedAccessEndpointProtocol, VolumeState, VolumeType, VpcEncryptionControlExclusionStateInput, VpcEncryptionControlMode, VpcTenancy, VpnEcmpSupportValue, VpnTunnelBandwidth } from "./enums";
-import type { AccountVpcEncryptionControl, AddedPrincipal, AddIpamOperatingRegion, AddIpamOrganizationalUnitExclusion, AddPrefixListEntry, AddressAttribute, ApplicationStatusCheckResponseObject, ByoipCidr, CapacityReservation, CapacityReservationAdjustmentDetails, EnaSrdSpecification, HealthCheckPathRequestObject, IamInstanceProfileAssociation, IamInstanceProfileSpecification, InstanceEventWindow, IpamPoolAllocation, IpamRoutingPolicyRegistrationDelta, OperatorResponse, Tag, TagSpecification, TransitGatewayClientVpnAttachment, TransitGatewayMulticastDomainAssociations, TransitGatewayPeeringAttachment, TransitGatewayVpcAttachment, UnsuccessfulItem, VerifiedAccessInstance, VerifiedAccessSseSpecificationResponse, VerifiedAccessTrustProvider } from "./models_0";
+import type { _InstanceType, AccountVpcEncryptionControlMode, Affinity, AggregationStatusEnum, ApplianceModeSupportValue, ArchitectureValues, AutoAcceptSharedAttachmentsValue, AutoPlacement, BootModeValues, CapacityReservationAdjustmentStatus, CapacityReservationInstancePlatform, CapacityReservationPreference, ClientVpnAuthorizationPolicyShadowMode, ClientVpnAuthorizationPolicyStatus, CurrencyCodeValues, DefaultHttpTokensEnforcedState, DefaultInstanceMetadataEndpointState, DefaultInstanceMetadataTagsState, DefaultRouteTableAssociationValue, DefaultRouteTablePropagationValue, DiskImageFormat, DnsSupportValue, EncryptionSupportOptionValue, EndDateType, ExcessCapacityTerminationPolicy, FleetExcessCapacityTerminationPolicy, FpgaImageAttributeName, HostMaintenance, HostnameType, HostRecovery, HostTenancy, HttpTokensState, ImdsSupportValues, InstanceAttributeName, InstanceAutoRecoveryState, InstanceBandwidthWeighting, InstanceMatchCriteria, InstanceMetadataEndpointState, InstanceMetadataProtocolState, InstanceMetadataTagsState, InstanceRebootMigrationState, InternetGatewayBlockMode, InternetGatewayExclusionMode, IpAddressType, IpamMeteredAccount, IpamPolicyResourceType, IpamTier, IpScopeEnum, Ipv6SupportValue, IpVersionEnum, LockMode, LockState, ManagedResourceDefaultVisibility, MetadataDefaultHttpTokensState, ModifyAvailabilityZoneOptInStatus, NestedVirtualizationSpecification, NetworkProtocolEnum, OperationType, PayerResponsibility, PayerResponsibilityScope, PayerResponsibilityType, PermissionGroup, PlatformValues, PublicIpDnsOption, RouteServerPersistRoutesAction, SecurityGroupReferencingSupportValue, SelfServicePortal, ShutdownBehavior, SnapshotAttributeName, Status, TargetStorageTier, TpmSupportValues, TrafficDirection, TrafficMirrorFilterRuleField, TrafficMirrorNetworkService, TrafficMirrorRuleAction, TrafficMirrorSessionField, TransitGatewayAttachmentNatGatewaySupportState, TransitGatewayAttachmentNatGatewaySupportValue, TransitGatewayAttachmentNatSystemRouteSupportValue, UnlimitedSupportedInstanceFamily, UnsuccessfulInstanceCreditSpecificationErrorCode, VerificationMethod, VerifiedAccessEndpointProtocol, VolumeState, VolumeType, VpcEncryptionControlExclusionStateInput, VpcEncryptionControlMode, VpcTenancy, VpnEcmpSupportValue, VpnTunnelBandwidth } from "./enums";
+import type { AccountVpcEncryptionControl, AddedPrincipal, AddIpamOperatingRegion, AddIpamOrganizationalUnitExclusion, AddPrefixListEntry, AddressAttribute, ApplicationStatusCheckResponseObject, ByoipCidr, CapacityReservation, CapacityReservationAdjustmentDetails, EnaSrdSpecification, HealthCheckPathRequestObject, InstanceEventWindow, IpamPoolAllocation, IpamRoutingPolicyRegistrationDelta, OperatorResponse, Tag, TagSpecification, TransitGatewayClientVpnAttachment, TransitGatewayMulticastDomainAssociations, TransitGatewayVpcAttachment, UnsuccessfulItem, VerifiedAccessInstance, VerifiedAccessSseSpecificationResponse, VerifiedAccessTrustProvider } from "./models_0";
 import type { AttributeValue, BlockDeviceMapping, CapacityReservationTarget, ClientConnectOptions, ClientLoginBannerOptions, ClientRouteEnforcementOptions, ConnectionLogOptions, ConnectionTrackingSpecificationRequest, DevicePostureOptions, ExternalAuthorityConfiguration, FleetLaunchTemplateConfigRequest, InstanceEventWindowTimeRangeRequest, Ipam, IpamPool, IpamPrefixListResolver, IpamPrefixListResolverRuleRequest, IpamPrefixListResolverTarget, IpamResourceDiscovery, IpamScope, LaunchTemplate, LocalGatewayRoute, ManagedPrefixList, Placement, RequestIpamResourceTag, TargetCapacitySpecificationRequest, TransitGatewayConfigurationInputStructure, VpcEncryptionControl } from "./models_1";
 import type { DnsOptionsSpecification, IKEVersionsRequestListValue, PayerResponsibilityEntry, Phase1DHGroupNumbersRequestListValue, Phase1EncryptionAlgorithmsRequestListValue, Phase1IntegrityAlgorithmsRequestListValue, Phase2DHGroupNumbersRequestListValue, Phase2EncryptionAlgorithmsRequestListValue, Phase2IntegrityAlgorithmsRequestListValue, RouteServer, SubnetConfiguration, TrafficMirrorFilter, TrafficMirrorFilterRule, TrafficMirrorPortRangeRequest, TrafficMirrorSession, TransitGateway, TransitGatewayMeteringPolicy, TransitGatewayPolicyTableEntry, TransitGatewayPrefixListReference, TransitGatewayRequestPolicyRule, VerifiedAccessEndpoint, VerifiedAccessGroup, VerifiedAccessSseSpecificationRequest, VpcBlockPublicAccessExclusion, VpnConnection, VpnTunnelLogOptionsSpecification } from "./models_2";
 import type { Byoasn, CapacityBlock, CapacityBlockExtension, ConversionTask, InstanceTagNotificationAttribute, IpamPoolCidr } from "./models_3";
 import type { AttributeBooleanValue, FpgaImageAttribute, ImportImageLicenseConfigurationResponse, InstanceMetadataOptionsResponse, InstanceStatusEvent, LaunchPermission, Monitoring, PublicIpv4PoolRange, ReservedInstancesConfiguration, SnapshotDetail, SnapshotTaskDetail } from "./models_4";
 import type { CreateVolumePermission, LaunchTemplateConfig, ScheduledInstance, VerifiedAccessInstanceLoggingConfiguration, VolumeModification, VpcBlockPublicAccessOptions } from "./models_5";
-import type { InstanceFamilyCreditSpecification, IpamPolicyDocument, IpamResourceCidr, ManagedResourceVisibilitySettings, Purchase } from "./models_6";
+import type { InstanceFamilyCreditSpecification, IpamPolicyDocument, IpamResourceCidr, ManagedResourceVisibilitySettings, Purchase, TransitGatewayNatRule } from "./models_6";
+/**
+ * <p>Describes the targets for the specified Verified Access endpoint.</p>
+ * @public
+ */
+export interface VerifiedAccessEndpointTarget {
+    /**
+     * <p>The ID of the Verified Access endpoint.</p>
+     * @public
+     */
+    VerifiedAccessEndpointId?: string | undefined;
+    /**
+     * <p>The IP address of the target.</p>
+     * @public
+     */
+    VerifiedAccessEndpointTargetIpAddress?: string | undefined;
+    /**
+     * <p>The DNS name of the target.</p>
+     * @public
+     */
+    VerifiedAccessEndpointTargetDns?: string | undefined;
+}
+/**
+ * @public
+ */
+export interface GetVerifiedAccessEndpointTargetsResult {
+    /**
+     * <p>The Verified Access targets.</p>
+     * @public
+     */
+    VerifiedAccessEndpointTargets?: VerifiedAccessEndpointTarget[] | undefined;
+    /**
+     * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
+     * @public
+     */
+    NextToken?: string | undefined;
+}
+/**
+ * @public
+ */
+export interface GetVerifiedAccessGroupPolicyRequest {
+    /**
+     * <p>The ID of the Verified Access group.</p>
+     * @public
+     */
+    VerifiedAccessGroupId: string | undefined;
+    /**
+     * <p>Checks whether you have the required permissions for the action, without actually making the request,
+     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+     * @public
+     */
+    DryRun?: boolean | undefined;
+}
+/**
+ * @public
+ */
+export interface GetVerifiedAccessGroupPolicyResult {
+    /**
+     * <p>The status of the Verified Access policy.</p>
+     * @public
+     */
+    PolicyEnabled?: boolean | undefined;
+    /**
+     * <p>The Verified Access policy document.</p>
+     * @public
+     */
+    PolicyDocument?: string | undefined;
+}
+/**
+ * @public
+ */
+export interface GetVpcResourcesBlockingEncryptionEnforcementRequest {
+    /**
+     * <p>The ID of the VPC to check for resources blocking encryption enforcement.</p>
+     * @public
+     */
+    VpcId: string | undefined;
+    /**
+     * <p>The maximum number of items to return for this request.
+     * 	To get the next page of items, make another request with the token returned in the output.
+     * 	For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
+     * @public
+     */
+    MaxResults?: number | undefined;
+    /**
+     * <p>The token returned from a previous paginated request. Pagination continues from the end of the items returned by the previous request.</p>
+     * @public
+     */
+    NextToken?: string | undefined;
+    /**
+     * <p>Checks whether you have the required permissions for the action, without actually making the request,
+     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+     * @public
+     */
+    DryRun?: boolean | undefined;
+}
+/**
+ * <p>Describes a resource that is not compliant with VPC encryption requirements.</p>
+ *          <p>For more information, see <a href="https://docs.aws.amazon.com/vpc/latest/userguide/vpc-encryption-controls.html">Enforce VPC encryption in transit</a> in the <i>Amazon VPC User Guide</i>.</p>
+ * @public
+ */
+export interface VpcEncryptionNonCompliantResource {
+    /**
+     * <p>The ID of the non-compliant resource.</p>
+     * @public
+     */
+    Id?: string | undefined;
+    /**
+     * <p>The type of the non-compliant resource.</p>
+     * @public
+     */
+    Type?: string | undefined;
+    /**
+     * <p>A description of the non-compliant resource.</p>
+     * @public
+     */
+    Description?: string | undefined;
+    /**
+     * <p>Indicates whether the resource can be excluded from encryption enforcement.</p>
+     * @public
+     */
+    IsExcludable?: boolean | undefined;
+}
+/**
+ * @public
+ */
+export interface GetVpcResourcesBlockingEncryptionEnforcementResult {
+    /**
+     * <p>Information about resources that are blocking encryption enforcement.</p>
+     * @public
+     */
+    NonCompliantResources?: VpcEncryptionNonCompliantResource[] | undefined;
+    /**
+     * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there are no more items to return.</p>
+     * @public
+     */
+    NextToken?: string | undefined;
+}
+/**
+ * @public
+ */
+export interface GetVpnConnectionDeviceSampleConfigurationRequest {
+    /**
+     * <p>The <code>VpnConnectionId</code> specifies the Site-to-Site VPN connection used for the sample
+     *             configuration.</p>
+     * @public
+     */
+    VpnConnectionId: string | undefined;
+    /**
+     * <p>Device identifier provided by the <code>GetVpnConnectionDeviceTypes</code> API.</p>
+     * @public
+     */
+    VpnConnectionDeviceTypeId: string | undefined;
+    /**
+     * <p>The IKE version to be used in the sample configuration file for your customer gateway
+     *             device. You can specify one of the following versions: <code>ikev1</code> or
+     *                 <code>ikev2</code>.</p>
+     * @public
+     */
+    InternetKeyExchangeVersion?: string | undefined;
+    /**
+     * <p>The type of sample configuration to generate. Valid values are "compatibility" (includes IKEv1) or "recommended" (throws UnsupportedOperationException for IKEv1).</p>
+     * @public
+     */
+    SampleType?: string | undefined;
+    /**
+     * <p>Checks whether you have the required permissions for the action, without actually
+     *             making the request, and provides an error response. If you have the required
+     *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
+     *                 <code>UnauthorizedOperation</code>.</p>
+     * @public
+     */
+    DryRun?: boolean | undefined;
+}
+/**
+ * @public
+ */
+export interface GetVpnConnectionDeviceSampleConfigurationResult {
+    /**
+     * <p>Sample configuration file for the specified customer gateway device.</p>
+     * @public
+     */
+    VpnConnectionDeviceSampleConfiguration?: string | undefined;
+}
+/**
+ * @public
+ */
+export interface GetVpnConnectionDeviceTypesRequest {
+    /**
+     * <p>The maximum number of results returned by <code>GetVpnConnectionDeviceTypes</code> in
+     *             paginated output. When this parameter is used, <code>GetVpnConnectionDeviceTypes</code>
+     *             only returns <code>MaxResults</code> results in a single page along with a
+     *                 <code>NextToken</code> response element. The remaining results of the initial
+     *             request can be seen by sending another <code>GetVpnConnectionDeviceTypes</code> request
+     *             with the returned <code>NextToken</code> value. This value can be between 200 and 1000.
+     *             If this parameter is not used, then <code>GetVpnConnectionDeviceTypes</code> returns all
+     *             results.</p>
+     * @public
+     */
+    MaxResults?: number | undefined;
+    /**
+     * <p>The <code>NextToken</code> value returned from a previous paginated
+     *                 <code>GetVpnConnectionDeviceTypes</code> request where <code>MaxResults</code> was
+     *             used and the results exceeded the value of that parameter. Pagination continues from the
+     *             end of the previous results that returned the <code>NextToken</code> value. This value
+     *             is null when there are no more results to return. </p>
+     * @public
+     */
+    NextToken?: string | undefined;
+    /**
+     * <p>Checks whether you have the required permissions for the action, without actually
+     *             making the request, and provides an error response. If you have the required
+     *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
+     *                 <code>UnauthorizedOperation</code>.</p>
+     * @public
+     */
+    DryRun?: boolean | undefined;
+}
+/**
+ * <p>List of customer gateway devices that have a sample configuration file available for
+ *             use. You can also see the list of device types with sample configuration files available
+ *             under <a href="https://docs.aws.amazon.com/vpn/latest/s2svpn/your-cgw.html">Your customer
+ *                 gateway device</a> in the <i>Amazon Web Services Site-to-Site VPN User Guide</i>.</p>
+ * @public
+ */
+export interface VpnConnectionDeviceType {
+    /**
+     * <p>Customer gateway device identifier.</p>
+     * @public
+     */
+    VpnConnectionDeviceTypeId?: string | undefined;
+    /**
+     * <p>Customer gateway device vendor.</p>
+     * @public
+     */
+    Vendor?: string | undefined;
+    /**
+     * <p>Customer gateway device platform.</p>
+     * @public
+     */
+    Platform?: string | undefined;
+    /**
+     * <p>Customer gateway device software version.</p>
+     * @public
+     */
+    Software?: string | undefined;
+}
+/**
+ * @public
+ */
+export interface GetVpnConnectionDeviceTypesResult {
+    /**
+     * <p>List of customer gateway devices that have a sample configuration file available for
+     *             use.</p>
+     * @public
+     */
+    VpnConnectionDeviceTypes?: VpnConnectionDeviceType[] | undefined;
+    /**
+     * <p>The <code>NextToken</code> value to include in a future
+     *                 <code>GetVpnConnectionDeviceTypes</code> request. When the results of a
+     *                 <code>GetVpnConnectionDeviceTypes</code> request exceed <code>MaxResults</code>,
+     *             this value can be used to retrieve the next page of results. This value is null when
+     *             there are no more results to return.</p>
+     * @public
+     */
+    NextToken?: string | undefined;
+}
+/**
+ * @public
+ */
+export interface GetVpnTunnelReplacementStatusRequest {
+    /**
+     * <p>The ID of the Site-to-Site VPN connection. </p>
+     * @public
+     */
+    VpnConnectionId: string | undefined;
+    /**
+     * <p>The external IP address of the VPN tunnel.</p>
+     * @public
+     */
+    VpnTunnelOutsideIpAddress: string | undefined;
+    /**
+     * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+     * @public
+     */
+    DryRun?: boolean | undefined;
+}
 /**
  * <p>Details for Site-to-Site VPN tunnel endpoint maintenance events.</p>
  * @public
@@ -1816,7 +2104,7 @@ export interface ModifyClientVpnEndpointRequest {
      */
     TransitGatewayConfiguration?: TransitGatewayConfigurationInputStructure | undefined;
     /**
-     * <p>The device posture options for the Client VPN endpoint. Specifying this parameter replaces the entire device posture configuration for the endpoint. To remove all device trust providers, specify an empty list.</p>
+     * <p>The device posture options for the Client VPN endpoint. Specifying this parameter replaces the entire device posture configuration for the endpoint. To disable device posture and remove all device trust providers, specify <code>false</code> for <code>Enabled</code>.</p>
      * @public
      */
     DevicePostureOptions?: DevicePostureOptions | undefined;
@@ -5148,6 +5436,103 @@ export interface ModifyTransitGatewayResult {
      */
     TransitGateway?: TransitGateway | undefined;
 }
+/**
+ * <p>Describes a NAT gateway rule to apply to a transit gateway attachment. A NAT gateway rule translates source addresses in the
+ *          <code>MatchSourceCidr</code> range to the corresponding addresses in the <code>NatCidr</code> range.</p>
+ * @public
+ */
+export interface TransitGatewayNatRuleRequest {
+    /**
+     * <p>The rule number. Valid values are 1 to 32766. Each rule number must be unique within the request.</p>
+     * @public
+     */
+    RuleNumber?: number | undefined;
+    /**
+     * <p>The IPv4 CIDR block of the source addresses to translate. The CIDR block can't overlap the multicast
+     *          range (<code>224.0.0.0/4</code>) or the link-local range (<code>169.254.0.0/16</code>).</p>
+     * @public
+     */
+    MatchSourceCidr?: string | undefined;
+    /**
+     * <p>The IPv4 CIDR block to translate the source addresses to. The CIDR block must be in a private (RFC 1918)
+     *          or shared address space (RFC 6598) range, and must have the same prefix length as <code>MatchSourceCidr</code>.
+     *          The CIDR blocks in the rules for an attachment can't overlap each other.</p>
+     * @public
+     */
+    NatCidr?: string | undefined;
+}
+/**
+ * @public
+ */
+export interface ModifyTransitGatewayAttachmentNatConfigurationRequest {
+    /**
+     * <p>The ID of the transit gateway attachment.</p>
+     * @public
+     */
+    TransitGatewayAttachmentId: string | undefined;
+    /**
+     * <p>Specifies whether to enable or disable NAT gateway support for the attachment. To enable NAT gateway support, the attachment
+     *          must have at least one NAT gateway rule. You can't modify the NAT configuration while NAT gateway support is <code>enabling</code>
+     *          or <code>disabling</code>. If you omit this parameter, the current value doesn't change.</p>
+     * @public
+     */
+    NatGatewaySupport?: TransitGatewayAttachmentNatGatewaySupportValue | undefined;
+    /**
+     * <p>Specifies whether the transit gateway installs routes for the NAT CIDRs in the route tables to which the attachment
+     *          propagates. For VPC attachments, the transit gateway always installs these routes. You can enable or disable this option only for
+     *          Amazon Web Services Direct Connect gateway attachments and Site-to-Site VPN attachments that use dynamic routing. For these
+     *          attachments, the default is <code>enable</code>. If you omit this parameter, the current value doesn't change.</p>
+     * @public
+     */
+    NatSystemRouteSupport?: TransitGatewayAttachmentNatSystemRouteSupportValue | undefined;
+    /**
+     * <p>The NAT gateway rules for the attachment. The rules that you specify replace all existing NAT gateway rules for the attachment.
+     *          You can specify up to 50 rules for an attachment. If you omit this parameter, the existing rules don't change.
+     *          To remove all rules, use <code>ResetNatGatewayRules</code>.</p>
+     * @public
+     */
+    NatGatewayRules?: TransitGatewayNatRuleRequest[] | undefined;
+    /**
+     * <p>Specifies whether to remove all NAT gateway rules from the attachment. If you omit this parameter, the transit gateway doesn't
+     *          remove any rules. You can't specify this parameter together with <code>NatGatewayRules</code>. Because you can't enable
+     *          NAT gateway support without rules, also set <code>NatGatewaySupport</code> to <code>disable</code> in the same request
+     *          if NAT gateway support is currently enabled.</p>
+     * @public
+     */
+    ResetNatGatewayRules?: boolean | undefined;
+    /**
+     * <p>Checks whether you have the required permissions for the action, without actually making the request,
+     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+     * @public
+     */
+    DryRun?: boolean | undefined;
+}
+/**
+ * @public
+ */
+export interface ModifyTransitGatewayAttachmentNatConfigurationResult {
+    /**
+     * <p>The ID of the transit gateway attachment.</p>
+     * @public
+     */
+    TransitGatewayAttachmentId?: string | undefined;
+    /**
+     * <p>The state of NAT gateway support for the attachment.</p>
+     * @public
+     */
+    NatGatewaySupport?: TransitGatewayAttachmentNatGatewaySupportState | undefined;
+    /**
+     * <p>Specifies whether the transit gateway installs routes for the NAT CIDRs in the route tables to which the attachment propagates.</p>
+     * @public
+     */
+    NatSystemRouteSupport?: TransitGatewayAttachmentNatSystemRouteSupportValue | undefined;
+    /**
+     * <p>The NAT gateway rules for the attachment.</p>
+     * @public
+     */
+    NatGatewayRules?: TransitGatewayNatRule[] | undefined;
+}
 /**
  * @public
  */
@@ -8289,245 +8674,3 @@ export interface RejectTransitGatewayMulticastDomainAssociationsResult {
      */
     Associations?: TransitGatewayMulticastDomainAssociations | undefined;
 }
-/**
- * @public
- */
-export interface RejectTransitGatewayPeeringAttachmentRequest {
-    /**
-     * <p>The ID of the transit gateway peering attachment.</p>
-     * @public
-     */
-    TransitGatewayAttachmentId: string | undefined;
-    /**
-     * <p>Checks whether you have the required permissions for the action, without actually making the request,
-     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-     * @public
-     */
-    DryRun?: boolean | undefined;
-}
-/**
- * @public
- */
-export interface RejectTransitGatewayPeeringAttachmentResult {
-    /**
-     * <p>The transit gateway peering attachment.</p>
-     * @public
-     */
-    TransitGatewayPeeringAttachment?: TransitGatewayPeeringAttachment | undefined;
-}
-/**
- * @public
- */
-export interface RejectTransitGatewayVpcAttachmentRequest {
-    /**
-     * <p>The ID of the attachment.</p>
-     * @public
-     */
-    TransitGatewayAttachmentId: string | undefined;
-    /**
-     * <p>Checks whether you have the required permissions for the action, without actually making the request,
-     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-     * @public
-     */
-    DryRun?: boolean | undefined;
-}
-/**
- * @public
- */
-export interface RejectTransitGatewayVpcAttachmentResult {
-    /**
-     * <p>Information about the attachment.</p>
-     * @public
-     */
-    TransitGatewayVpcAttachment?: TransitGatewayVpcAttachment | undefined;
-}
-/**
- * @public
- */
-export interface RejectVpcEndpointConnectionsRequest {
-    /**
-     * <p>Checks whether you have the required permissions for the action, without actually making the request,
-     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-     * @public
-     */
-    DryRun?: boolean | undefined;
-    /**
-     * <p>The ID of the service.</p>
-     * @public
-     */
-    ServiceId: string | undefined;
-    /**
-     * <p>The IDs of the VPC endpoints.</p>
-     * @public
-     */
-    VpcEndpointIds: string[] | undefined;
-}
-/**
- * @public
- */
-export interface RejectVpcEndpointConnectionsResult {
-    /**
-     * <p>Information about the endpoints that were not rejected, if applicable.</p>
-     * @public
-     */
-    Unsuccessful?: UnsuccessfulItem[] | undefined;
-}
-/**
- * @public
- */
-export interface RejectVpcPeeringConnectionRequest {
-    /**
-     * <p>Checks whether you have the required permissions for the action, without actually making the request,
-     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-     * @public
-     */
-    DryRun?: boolean | undefined;
-    /**
-     * <p>The ID of the VPC peering connection.</p>
-     * @public
-     */
-    VpcPeeringConnectionId: string | undefined;
-}
-/**
- * @public
- */
-export interface RejectVpcPeeringConnectionResult {
-    /**
-     * <p>Returns <code>true</code> if the request succeeds; otherwise, it returns an error.</p>
-     * @public
-     */
-    Return?: boolean | undefined;
-}
-/**
- * @public
- */
-export interface ReleaseAddressRequest {
-    /**
-     * <p>The allocation ID. This parameter is required.</p>
-     * @public
-     */
-    AllocationId?: string | undefined;
-    /**
-     * <p>Deprecated.</p>
-     * @public
-     */
-    PublicIp?: string | undefined;
-    /**
-     * <p>The set of Availability Zones, Local Zones, or Wavelength Zones from which Amazon Web Services advertises
-     *       IP addresses.</p>
-     *          <p>If you provide an incorrect network border group, you receive an <code>InvalidAddress.NotFound</code> error.</p>
-     * @public
-     */
-    NetworkBorderGroup?: string | undefined;
-    /**
-     * <p>Checks whether you have the required permissions for the action, without actually making the request,
-     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-     * @public
-     */
-    DryRun?: boolean | undefined;
-}
-/**
- * @public
- */
-export interface ReleaseHostsRequest {
-    /**
-     * <p>The IDs of the Dedicated Hosts to release.</p>
-     * @public
-     */
-    HostIds: string[] | undefined;
-}
-/**
- * @public
- */
-export interface ReleaseHostsResult {
-    /**
-     * <p>The IDs of the Dedicated Hosts that were successfully released.</p>
-     * @public
-     */
-    Successful?: string[] | undefined;
-    /**
-     * <p>The IDs of the Dedicated Hosts that could not be released, including an error
-     *             message.</p>
-     * @public
-     */
-    Unsuccessful?: UnsuccessfulItem[] | undefined;
-}
-/**
- * @public
- */
-export interface ReleaseIpamPoolAllocationRequest {
-    /**
-     * <p>A check for whether you have the required permissions for the action without actually making the request
-     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-     * @public
-     */
-    DryRun?: boolean | undefined;
-    /**
-     * <p>The ID of the IPAM pool which contains the allocation you want to release.</p>
-     * @public
-     */
-    IpamPoolId: string | undefined;
-    /**
-     * <p>The CIDR of the allocation you want to release.</p>
-     * @public
-     */
-    Cidr: string | undefined;
-    /**
-     * <p>The ID of the allocation.</p>
-     * @public
-     */
-    IpamPoolAllocationId: string | undefined;
-}
-/**
- * @public
- */
-export interface ReleaseIpamPoolAllocationResult {
-    /**
-     * <p>Indicates if the release was successful.</p>
-     * @public
-     */
-    Success?: boolean | undefined;
-}
-/**
- * @public
- */
-export interface ReplaceIamInstanceProfileAssociationRequest {
-    /**
-     * <p>The IAM instance profile.</p>
-     * @public
-     */
-    IamInstanceProfile: IamInstanceProfileSpecification | undefined;
-    /**
-     * <p>The ID of the existing IAM instance profile association.</p>
-     * @public
-     */
-    AssociationId: string | undefined;
-}
-/**
- * @public
- */
-export interface ReplaceIamInstanceProfileAssociationResult {
-    /**
-     * <p>Information about the IAM instance profile association.</p>
-     * @public
-     */
-    IamInstanceProfileAssociation?: IamInstanceProfileAssociation | undefined;
-}
-/**
- * <p>The maximum age for allowed images.</p>
- * @public
- */
-export interface CreationDateConditionRequest {
-    /**
-     * <p>The maximum number of days that have elapsed since the image was created. For example, a
-     *       value of <code>300</code> allows images that were created within the last 300 days.</p>
-     * @public
-     */
-    MaximumDaysSinceCreated?: number | undefined;
-}