cdk-rds-sql 1.0.1 → 1.1.0

package/node_modules/aws-sdk/clients/sagemaker.d.ts

@@ -405,11 +405,11 @@ declare class SageMaker extends Service {
    */
   createTrialComponent(callback?: (err: AWSError, data: SageMaker.Types.CreateTrialComponentResponse) => void): Request<SageMaker.Types.CreateTrialComponentResponse, AWSError>;
   /**
-   * Creates a user profile. A user profile represents a single user within a domain, and is the main way to reference a "person" for the purposes of sharing, reporting, and other user-oriented features. This entity is created when a user onboards to Amazon SageMaker Studio. If an administrator invites a person by email or imports them from Amazon Web Services SSO, a user profile is automatically created. A user profile is the primary holder of settings for an individual user and has a reference to the user's private Amazon Elastic File System (EFS) home directory. 
+   * Creates a user profile. A user profile represents a single user within a domain, and is the main way to reference a "person" for the purposes of sharing, reporting, and other user-oriented features. This entity is created when a user onboards to Amazon SageMaker Studio. If an administrator invites a person by email or imports them from IAM Identity Center, a user profile is automatically created. A user profile is the primary holder of settings for an individual user and has a reference to the user's private Amazon Elastic File System (EFS) home directory. 
    */
   createUserProfile(params: SageMaker.Types.CreateUserProfileRequest, callback?: (err: AWSError, data: SageMaker.Types.CreateUserProfileResponse) => void): Request<SageMaker.Types.CreateUserProfileResponse, AWSError>;
   /**
-   * Creates a user profile. A user profile represents a single user within a domain, and is the main way to reference a "person" for the purposes of sharing, reporting, and other user-oriented features. This entity is created when a user onboards to Amazon SageMaker Studio. If an administrator invites a person by email or imports them from Amazon Web Services SSO, a user profile is automatically created. A user profile is the primary holder of settings for an individual user and has a reference to the user's private Amazon Elastic File System (EFS) home directory. 
+   * Creates a user profile. A user profile represents a single user within a domain, and is the main way to reference a "person" for the purposes of sharing, reporting, and other user-oriented features. This entity is created when a user onboards to Amazon SageMaker Studio. If an administrator invites a person by email or imports them from IAM Identity Center, a user profile is automatically created. A user profile is the primary holder of settings for an individual user and has a reference to the user's private Amazon Elastic File System (EFS) home directory. 
    */
   createUserProfile(callback?: (err: AWSError, data: SageMaker.Types.CreateUserProfileResponse) => void): Request<SageMaker.Types.CreateUserProfileResponse, AWSError>;
   /**
@@ -509,11 +509,11 @@ declare class SageMaker extends Service {
    */
   deleteDeviceFleet(callback?: (err: AWSError, data: {}) => void): Request<{}, AWSError>;
   /**
-   * Used to delete a domain. If you onboarded with IAM mode, you will need to delete your domain to onboard again using Amazon Web Services SSO. Use with caution. All of the members of the domain will lose access to their EFS volume, including data, notebooks, and other artifacts. 
+   * Used to delete a domain. If you onboarded with IAM mode, you will need to delete your domain to onboard again using IAM Identity Center. Use with caution. All of the members of the domain will lose access to their EFS volume, including data, notebooks, and other artifacts. 
    */
   deleteDomain(params: SageMaker.Types.DeleteDomainRequest, callback?: (err: AWSError, data: {}) => void): Request<{}, AWSError>;
   /**
-   * Used to delete a domain. If you onboarded with IAM mode, you will need to delete your domain to onboard again using Amazon Web Services SSO. Use with caution. All of the members of the domain will lose access to their EFS volume, including data, notebooks, and other artifacts. 
+   * Used to delete a domain. If you onboarded with IAM mode, you will need to delete your domain to onboard again using IAM Identity Center. Use with caution. All of the members of the domain will lose access to their EFS volume, including data, notebooks, and other artifacts. 
    */
   deleteDomain(callback?: (err: AWSError, data: {}) => void): Request<{}, AWSError>;
   /**
@@ -2763,7 +2763,7 @@ declare namespace SageMaker {
   }
   export interface AutoMLCandidateGenerationConfig {
     /**
-     * A URL to the Amazon S3 data source containing selected features from the input data source to run an Autopilot job (optional). This file should be in json format as shown below:   { "FeatureAttributeNames":["col1", "col2", ...] }. The key name FeatureAttributeNames is fixed. The values listed in ["col1", "col2", ...] is case sensitive and should be a list of strings containing unique values that are a subset of the column names in the input data. The list of columns provided must not include the target column.
+     * A URL to the Amazon S3 data source containing selected features from the input data source to run an Autopilot job. You can input FeatureAttributeNames (optional) in JSON format as shown below:   { "FeatureAttributeNames":["col1", "col2", ...] }. You can also specify the data type of the feature (optional) in the format shown below:  { "FeatureDataTypes":{"col1":"numeric", "col2":"categorical" ... } }   These column keys may not include the target column.  In ensembling mode, Autopilot will only support the following data types: numeric, categorical, text and datetime. In HPO mode, Autopilot can support numeric, categorical, text, datetime and sequence. If only FeatureDataTypes is provided, the column keys (col1, col2,..) should be a subset of the column names in the input data.  If both FeatureDataTypes and FeatureAttributeNames are provided, then the column keys should be a subset of the column names provided in FeatureAttributeNames.  The key name FeatureAttributeNames is fixed. The values listed in ["col1", "col2", ...] is case sensitive and should be a list of strings containing unique values that are a subset of the column names in the input data. The list of columns provided must not include the target column.
      */
     FeatureSpecificationS3Uri?: S3Uri;
   }
@@ -3128,6 +3128,12 @@ declare namespace SageMaker {
   export type CandidateStepName = string;
   export type CandidateStepType = "AWS::SageMaker::TrainingJob"|"AWS::SageMaker::TransformJob"|"AWS::SageMaker::ProcessingJob"|string;
   export type CandidateSteps = AutoMLCandidateStep[];
+  export interface CanvasAppSettings {
+    /**
+     * Time series forecast settings for the Canvas app.
+     */
+    TimeSeriesForecastingSettings?: TimeSeriesForecastingSettings;
+  }
   export interface CapacitySize {
     /**
      * Specifies the endpoint capacity type.    INSTANCE_COUNT: The endpoint activates based on the number of instances.    CAPACITY_PERCENT: The endpoint activates based on the specified percentage of capacity.  
@@ -5147,11 +5153,11 @@ declare namespace SageMaker {
      */
     UserProfileName: UserProfileName;
     /**
-     * A specifier for the type of value specified in SingleSignOnUserValue. Currently, the only supported value is "UserName". If the Domain's AuthMode is Amazon Web Services SSO, this field is required. If the Domain's AuthMode is not Amazon Web Services SSO, this field cannot be specified. 
+     * A specifier for the type of value specified in SingleSignOnUserValue. Currently, the only supported value is "UserName". If the Domain's AuthMode is IAM Identity Center, this field is required. If the Domain's AuthMode is not IAM Identity Center, this field cannot be specified. 
      */
     SingleSignOnUserIdentifier?: SingleSignOnUserIdentifier;
     /**
-     * The username of the associated Amazon Web Services Single Sign-On User for this UserProfile. If the Domain's AuthMode is Amazon Web Services SSO, this field is required, and must match a valid username of a user in your directory. If the Domain's AuthMode is not Amazon Web Services SSO, this field cannot be specified. 
+     * The username of the associated Amazon Web Services Single Sign-On User for this UserProfile. If the Domain's AuthMode is IAM Identity Center, this field is required, and must match a valid username of a user in your directory. If the Domain's AuthMode is not IAM Identity Center, this field cannot be specified. 
      */
     SingleSignOnUserValue?: String256;
     /**
@@ -6540,7 +6546,7 @@ declare namespace SageMaker {
      */
     HomeEfsFileSystemId?: ResourceId;
     /**
-     * The Amazon Web Services SSO managed application instance ID.
+     * The IAM Identity Center managed application instance ID.
      */
     SingleSignOnManagedApplicationInstanceId?: String256;
     /**
@@ -8566,11 +8572,11 @@ declare namespace SageMaker {
      */
     FailureReason?: FailureReason;
     /**
-     * The Amazon Web Services SSO user identifier.
+     * The IAM Identity Center user identifier.
      */
     SingleSignOnUserIdentifier?: SingleSignOnUserIdentifier;
     /**
-     * The Amazon Web Services SSO user value.
+     * The IAM Identity Center user value.
      */
     SingleSignOnUserValue?: String256;
     /**
@@ -9635,6 +9641,7 @@ declare namespace SageMaker {
   export type FeatureParameterRemovals = FeatureParameterKey[];
   export type FeatureParameterValue = string;
   export type FeatureParameters = FeatureParameter[];
+  export type FeatureStatus = "ENABLED"|"DISABLED"|string;
   export type FeatureType = "Integral"|"Fractional"|"String"|string;
   export interface FileSource {
     /**
@@ -17003,6 +17010,16 @@ declare namespace SageMaker {
   export type TenthFractionsOfACent = number;
   export type TerminationWaitInSeconds = number;
   export type ThingName = string;
+  export interface TimeSeriesForecastingSettings {
+    /**
+     * Describes whether time series forecasting is enabled or disabled in the Canvas app.
+     */
+    Status?: FeatureStatus;
+    /**
+     * The IAM role that Canvas passes to Amazon Forecast for time series forecasting. By default, Canvas uses the execution role specified in the UserProfile that launches the Canvas app. If an execution role is not specified in the UserProfile, Canvas uses the execution role specified in the Domain that owns the UserProfile. To allow time series forecasting, this IAM role should have the  AmazonSageMakerCanvasForecastAccess policy attached and forecast.amazonaws.com added in the trust relationship as a service principal.
+     */
+    AmazonForecastRoleArn?: RoleArn;
+  }
   export type Timestamp = Date;
   export type TrafficDurationInSeconds = number;
   export interface TrafficPattern {
@@ -18611,6 +18628,10 @@ declare namespace SageMaker {
      * A collection of settings that configure the RSessionGateway app.
      */
     RSessionAppSettings?: RSessionAppSettings;
+    /**
+     * The Canvas app settings.
+     */
+    CanvasAppSettings?: CanvasAppSettings;
   }
   export type ValidationFraction = number;
   export type VariantName = string;

package/node_modules/aws-sdk/clients/ssm.d.ts

@@ -1181,6 +1181,35 @@ declare namespace SSM {
   }
   export type AgentErrorCode = string;
   export type AggregatorSchemaOnly = boolean;
+  export interface Alarm {
+    /**
+     * The name of your CloudWatch alarm.
+     */
+    Name: AlarmName;
+  }
+  export interface AlarmConfiguration {
+    /**
+     * If you specify true for this value, your automation or command continue to run even if we can't gather information about the state of your CloudWatch alarm. The default value is false.
+     */
+    IgnorePollAlarmFailure?: Boolean;
+    /**
+     * The name of the CloudWatch alarm specified in the configuration.
+     */
+    Alarms: AlarmList;
+  }
+  export type AlarmList = Alarm[];
+  export type AlarmName = string;
+  export interface AlarmStateInformation {
+    /**
+     * The name of your CloudWatch alarm.
+     */
+    Name: AlarmName;
+    /**
+     * The state of your CloudWatch alarm.
+     */
+    State: ExternalAlarmState;
+  }
+  export type AlarmStateInformationList = AlarmStateInformation[];
   export type AllowedPattern = string;
   export type ApplyOnlyAtCronInterval = boolean;
   export type ApproveAfterDays = number;
@@ -1364,6 +1393,11 @@ declare namespace SSM {
      * A key-value mapping of document parameters to target resources. Both Targets and TargetMaps can't be specified together.
      */
     TargetMaps?: TargetMaps;
+    AlarmConfiguration?: AlarmConfiguration;
+    /**
+     * The CloudWatch alarm that was invoked during the association.
+     */
+    TriggeredAlarms?: AlarmStateInformationList;
   }
   export type AssociationDescriptionList = AssociationDescription[];
   export interface AssociationExecution {
@@ -1399,6 +1433,11 @@ declare namespace SSM {
      * An aggregate status of the resources in the execution based on the status type.
      */
     ResourceCountByStatus?: ResourceCountByStatus;
+    AlarmConfiguration?: AlarmConfiguration;
+    /**
+     * The CloudWatch alarms that were invoked by the association.
+     */
+    TriggeredAlarms?: AlarmStateInformationList;
   }
   export interface AssociationExecutionFilter {
     /**
@@ -1763,6 +1802,14 @@ declare namespace SSM {
      * An aggregate of step execution statuses displayed in the Amazon Web Services Systems Manager console for a multi-Region and multi-account Automation execution.
      */
     ProgressCounters?: ProgressCounters;
+    /**
+     * The details for the CloudWatch alarm applied to your automation.
+     */
+    AlarmConfiguration?: AlarmConfiguration;
+    /**
+     * The CloudWatch alarm that was invoked by the automation.
+     */
+    TriggeredAlarms?: AlarmStateInformationList;
     /**
      * The subtype of the Automation operation. Currently, the only supported value is ChangeRequest.
      */
@@ -1892,6 +1939,14 @@ declare namespace SSM {
      * Use this filter with DescribeAutomationExecutions. Specify either Local or CrossAccount. CrossAccount is an Automation that runs in multiple Amazon Web Services Regions and Amazon Web Services accounts. For more information, see Running Automation workflows in multiple Amazon Web Services Regions and accounts in the Amazon Web Services Systems Manager User Guide. 
      */
     AutomationType?: AutomationType;
+    /**
+     * The details for the CloudWatch alarm applied to your automation.
+     */
+    AlarmConfiguration?: AlarmConfiguration;
+    /**
+     * The CloudWatch alarm that was invoked by the automation.
+     */
+    TriggeredAlarms?: AlarmStateInformationList;
     /**
      * The subtype of the Automation operation. Currently, the only supported value is ChangeRequest.
      */
@@ -2105,6 +2160,14 @@ declare namespace SSM {
      * The TimeoutSeconds value specified for a command.
      */
     TimeoutSeconds?: TimeoutSeconds;
+    /**
+     * The details for the CloudWatch alarm applied to your command.
+     */
+    AlarmConfiguration?: AlarmConfiguration;
+    /**
+     * The CloudWatch alarm that was invoked by the command.
+     */
+    TriggeredAlarms?: AlarmStateInformationList;
   }
   export interface CommandFilter {
     /**
@@ -2505,6 +2568,7 @@ declare namespace SSM {
      * A key-value mapping of document parameters to target resources. Both Targets and TargetMaps can't be specified together.
      */
     TargetMaps?: TargetMaps;
+    AlarmConfiguration?: AlarmConfiguration;
   }
   export interface CreateAssociationBatchResult {
     /**
@@ -2590,9 +2654,10 @@ declare namespace SSM {
      */
     TargetMaps?: TargetMaps;
     /**
-     * Adds or overwrites one or more tags for a State Manager association. Tags are metadata that you can assign to your Amazon Web Services resources. Tags enable you to categorize your resources in different ways, for example, by purpose, owner, or environment. Each tag consists of a key and an optional value, both of which you define. 
+     * Optional metadata that you assign to a resource. Tags enable you to categorize a resource in different ways, such as by purpose, owner, or environment. For example, you might want to tag an association to identify the type of resource to which it applies, the environment, or the purpose of the association.
      */
     Tags?: TagList;
+    AlarmConfiguration?: AlarmConfiguration;
   }
   export interface CreateAssociationResult {
     /**
@@ -4339,7 +4404,7 @@ declare namespace SSM {
   export type DocumentSha1 = string;
   export type DocumentStatus = "Creating"|"Active"|"Updating"|"Deleting"|"Failed"|string;
   export type DocumentStatusInformation = string;
-  export type DocumentType = "Command"|"Policy"|"Automation"|"Session"|"Package"|"ApplicationConfiguration"|"ApplicationConfigurationSchema"|"DeploymentStrategy"|"ChangeCalendar"|"Automation.ChangeTemplate"|"ProblemAnalysis"|"ProblemAnalysisTemplate"|string;
+  export type DocumentType = "Command"|"Policy"|"Automation"|"Session"|"Package"|"ApplicationConfiguration"|"ApplicationConfigurationSchema"|"DeploymentStrategy"|"ChangeCalendar"|"Automation.ChangeTemplate"|"ProblemAnalysis"|"ProblemAnalysisTemplate"|"CloudFormation"|"ConformancePackTemplate"|string;
   export type DocumentVersion = string;
   export interface DocumentVersionInfo {
     /**
@@ -4403,6 +4468,7 @@ declare namespace SSM {
   export type ExecutionMode = "Auto"|"Interactive"|string;
   export type ExecutionRoleName = string;
   export type ExpirationDate = Date;
+  export type ExternalAlarmState = "UNKNOWN"|"ALARM"|string;
   export interface FailedCreateAssociation {
     /**
      * The association.
@@ -4913,6 +4979,14 @@ declare namespace SSM {
      * The time the task execution completed.
      */
     EndTime?: DateTime;
+    /**
+     * The details for the CloudWatch alarm you applied to your maintenance window task.
+     */
+    AlarmConfiguration?: AlarmConfiguration;
+    /**
+     * The CloudWatch alarms that were invoked by the maintenance window task.
+     */
+    TriggeredAlarms?: AlarmStateInformationList;
   }
   export interface GetMaintenanceWindowRequest {
     /**
@@ -5053,6 +5127,10 @@ declare namespace SSM {
      * The action to take on tasks when the maintenance window cutoff time is reached. CONTINUE_TASK means that tasks continue to run. For Automation, Lambda, Step Functions tasks, CANCEL_TASK means that currently running task invocations continue, but no new task invocations are started. For Run Command tasks, CANCEL_TASK means the system attempts to stop the task by sending a CancelCommand operation.
      */
     CutoffBehavior?: MaintenanceWindowTaskCutoffBehavior;
+    /**
+     * The details for the CloudWatch alarm you applied to your maintenance window task.
+     */
+    AlarmConfiguration?: AlarmConfiguration;
   }
   export interface GetOpsItemRequest {
     /**
@@ -6465,6 +6543,14 @@ declare namespace SSM {
      * The type of task that ran.
      */
     TaskType?: MaintenanceWindowTaskType;
+    /**
+     * The details for the CloudWatch alarm applied to your maintenance window task.
+     */
+    AlarmConfiguration?: AlarmConfiguration;
+    /**
+     * The CloudWatch alarm that was invoked by the maintenance window task.
+     */
+    TriggeredAlarms?: AlarmStateInformationList;
   }
   export type MaintenanceWindowExecutionTaskIdentityList = MaintenanceWindowExecutionTaskIdentity[];
   export type MaintenanceWindowExecutionTaskInvocationId = string;
@@ -6764,6 +6850,10 @@ declare namespace SSM {
      * The specification for whether tasks should continue to run after the cutoff time specified in the maintenance windows is reached. 
      */
     CutoffBehavior?: MaintenanceWindowTaskCutoffBehavior;
+    /**
+     * The details for the CloudWatch alarm applied to your maintenance window task.
+     */
+    AlarmConfiguration?: AlarmConfiguration;
   }
   export type MaintenanceWindowTaskArn = string;
   export type MaintenanceWindowTaskCutoffBehavior = "CONTINUE_TASK"|"CANCEL_TASK"|string;
@@ -8111,6 +8201,10 @@ declare namespace SSM {
      * Indicates whether tasks should continue to run after the cutoff time specified in the maintenance windows is reached.     CONTINUE_TASK: When the cutoff time is reached, any tasks that are running continue. The default value.    CANCEL_TASK:   For Automation, Lambda, Step Functions tasks: When the cutoff time is reached, any task invocations that are already running continue, but no new task invocations are started.   For Run Command tasks: When the cutoff time is reached, the system sends a CancelCommand operation that attempts to cancel the command associated with the task. However, there is no guarantee that the command will be terminated and the underlying process stopped.   The status for tasks that are not completed is TIMED_OUT.  
      */
     CutoffBehavior?: MaintenanceWindowTaskCutoffBehavior;
+    /**
+     * The CloudWatch alarm you want to apply to your maintenance window task.
+     */
+    AlarmConfiguration?: AlarmConfiguration;
   }
   export interface RegisterTaskWithMaintenanceWindowResult {
     /**
@@ -8586,6 +8680,10 @@ declare namespace SSM {
      * Enables Amazon Web Services Systems Manager to send Run Command output to Amazon CloudWatch Logs. Run Command is a capability of Amazon Web Services Systems Manager.
      */
     CloudWatchOutputConfig?: CloudWatchOutputConfig;
+    /**
+     * The CloudWatch alarm you want to apply to your command.
+     */
+    AlarmConfiguration?: AlarmConfiguration;
   }
   export interface SendCommandResult {
     /**
@@ -8797,6 +8895,10 @@ declare namespace SSM {
      * Optional metadata that you assign to a resource. You can specify a maximum of five tags for an automation. Tags enable you to categorize a resource in different ways, such as by purpose, owner, or environment. For example, you might want to tag an automation to identify an environment or operating system. In this case, you could specify the following key-value pairs:    Key=environment,Value=test     Key=OS,Value=Windows     To add tags to an existing automation, use the AddTagsToResource operation. 
      */
     Tags?: TagList;
+    /**
+     * The CloudWatch alarm you want to apply to your automation.
+     */
+    AlarmConfiguration?: AlarmConfiguration;
   }
   export interface StartAutomationExecutionResult {
     /**
@@ -9189,6 +9291,7 @@ declare namespace SSM {
      * A key-value mapping of document parameters to target resources. Both Targets and TargetMaps can't be specified together.
      */
     TargetMaps?: TargetMaps;
+    AlarmConfiguration?: AlarmConfiguration;
   }
   export interface UpdateAssociationResult {
     /**
@@ -9509,6 +9612,10 @@ declare namespace SSM {
      * Indicates whether tasks should continue to run after the cutoff time specified in the maintenance windows is reached.     CONTINUE_TASK: When the cutoff time is reached, any tasks that are running continue. The default value.    CANCEL_TASK:   For Automation, Lambda, Step Functions tasks: When the cutoff time is reached, any task invocations that are already running continue, but no new task invocations are started.   For Run Command tasks: When the cutoff time is reached, the system sends a CancelCommand operation that attempts to cancel the command associated with the task. However, there is no guarantee that the command will be terminated and the underlying process stopped.   The status for tasks that are not completed is TIMED_OUT.  
      */
     CutoffBehavior?: MaintenanceWindowTaskCutoffBehavior;
+    /**
+     * The CloudWatch alarm you want to apply to your maintenance window task.
+     */
+    AlarmConfiguration?: AlarmConfiguration;
   }
   export interface UpdateMaintenanceWindowTaskResult {
     /**
@@ -9567,6 +9674,10 @@ declare namespace SSM {
      * The specification for whether tasks should continue to run after the cutoff time specified in the maintenance windows is reached. 
      */
     CutoffBehavior?: MaintenanceWindowTaskCutoffBehavior;
+    /**
+     * The details for the CloudWatch alarm you applied to your maintenance window task.
+     */
+    AlarmConfiguration?: AlarmConfiguration;
   }
   export interface UpdateManagedInstanceRoleRequest {
     /**

package/node_modules/aws-sdk/clients/wafv2.d.ts

@@ -577,7 +577,7 @@ declare namespace WAFV2 {
      */
     IPAddressVersion: IPAddressVersion;
     /**
-     * Contains an array of strings that specifies zero or more IP addresses or blocks of IP addresses in Classless Inter-Domain Routing (CIDR) notation. WAF supports all IPv4 and IPv6 CIDR ranges except for /0.  Example address strings:    To configure WAF to allow, block, or count requests that originated from the IP address 192.0.2.44, specify 192.0.2.44/32.   To configure WAF to allow, block, or count requests that originated from IP addresses from 192.0.2.0 to 192.0.2.255, specify 192.0.2.0/24.   To configure WAF to allow, block, or count requests that originated from the IP address 1111:0000:0000:0000:0000:0000:0000:0111, specify 1111:0000:0000:0000:0000:0000:0000:0111/128.   To configure WAF to allow, block, or count requests that originated from IP addresses 1111:0000:0000:0000:0000:0000:0000:0000 to 1111:0000:0000:0000:ffff:ffff:ffff:ffff, specify 1111:0000:0000:0000:0000:0000:0000:0000/64.   For more information about CIDR notation, see the Wikipedia entry Classless Inter-Domain Routing. Example JSON Addresses specifications:    Empty array: "Addresses": []    Array with one address: "Addresses": ["192.0.2.44/32"]    Array with three addresses: "Addresses": ["192.0.2.44/32", "192.0.2.0/24", "192.0.0.0/16"]    INVALID specification: "Addresses": [""] INVALID   
+     * Contains an array of strings that specifies zero or more IP addresses or blocks of IP addresses. All addresses must be specified using Classless Inter-Domain Routing (CIDR) notation. WAF supports all IPv4 and IPv6 CIDR ranges except for /0.  Example address strings:    To configure WAF to allow, block, or count requests that originated from the IP address 192.0.2.44, specify 192.0.2.44/32.   To configure WAF to allow, block, or count requests that originated from IP addresses from 192.0.2.0 to 192.0.2.255, specify 192.0.2.0/24.   To configure WAF to allow, block, or count requests that originated from the IP address 1111:0000:0000:0000:0000:0000:0000:0111, specify 1111:0000:0000:0000:0000:0000:0000:0111/128.   To configure WAF to allow, block, or count requests that originated from IP addresses 1111:0000:0000:0000:0000:0000:0000:0000 to 1111:0000:0000:0000:ffff:ffff:ffff:ffff, specify 1111:0000:0000:0000:0000:0000:0000:0000/64.   For more information about CIDR notation, see the Wikipedia entry Classless Inter-Domain Routing. Example JSON Addresses specifications:    Empty array: "Addresses": []    Array with one address: "Addresses": ["192.0.2.44/32"]    Array with three addresses: "Addresses": ["192.0.2.44/32", "192.0.2.0/24", "192.0.0.0/16"]    INVALID specification: "Addresses": [""] INVALID   
      */
     Addresses: IPAddresses;
     /**
@@ -1024,7 +1024,7 @@ declare namespace WAFV2 {
   export type FirewallManagerRuleGroups = FirewallManagerRuleGroup[];
   export interface FirewallManagerStatement {
     /**
-     * A rule statement used to run the rules that are defined in a managed rule group. To use this, provide the vendor name and the name of the rule group in this statement. You can retrieve the required names by calling ListAvailableManagedRuleGroups. You cannot nest a ManagedRuleGroupStatement, for example for use inside a NotStatement or OrStatement. It can only be referenced as a top-level statement within a rule.
+     * A rule statement used to run the rules that are defined in a managed rule group. To use this, provide the vendor name and the name of the rule group in this statement. You can retrieve the required names by calling ListAvailableManagedRuleGroups. You cannot nest a ManagedRuleGroupStatement, for example for use inside a NotStatement or OrStatement. It can only be referenced as a top-level statement within a rule.  You are charged additional fees when you use the WAF Bot Control managed rule group AWSManagedRulesBotControlRuleSet or the WAF Fraud Control account takeover prevention (ATP) managed rule group AWSManagedRulesATPRuleSet. For more information, see WAF Pricing. 
      */
     ManagedRuleGroupStatement?: ManagedRuleGroupStatement;
     /**
@@ -1413,7 +1413,7 @@ declare namespace WAFV2 {
      */
     IPAddressVersion: IPAddressVersion;
     /**
-     * Contains an array of strings that specifies zero or more IP addresses or blocks of IP addresses in Classless Inter-Domain Routing (CIDR) notation. WAF supports all IPv4 and IPv6 CIDR ranges except for /0.  Example address strings:    To configure WAF to allow, block, or count requests that originated from the IP address 192.0.2.44, specify 192.0.2.44/32.   To configure WAF to allow, block, or count requests that originated from IP addresses from 192.0.2.0 to 192.0.2.255, specify 192.0.2.0/24.   To configure WAF to allow, block, or count requests that originated from the IP address 1111:0000:0000:0000:0000:0000:0000:0111, specify 1111:0000:0000:0000:0000:0000:0000:0111/128.   To configure WAF to allow, block, or count requests that originated from IP addresses 1111:0000:0000:0000:0000:0000:0000:0000 to 1111:0000:0000:0000:ffff:ffff:ffff:ffff, specify 1111:0000:0000:0000:0000:0000:0000:0000/64.   For more information about CIDR notation, see the Wikipedia entry Classless Inter-Domain Routing. Example JSON Addresses specifications:    Empty array: "Addresses": []    Array with one address: "Addresses": ["192.0.2.44/32"]    Array with three addresses: "Addresses": ["192.0.2.44/32", "192.0.2.0/24", "192.0.0.0/16"]    INVALID specification: "Addresses": [""] INVALID   
+     * Contains an array of strings that specifies zero or more IP addresses or blocks of IP addresses. All addresses must be specified using Classless Inter-Domain Routing (CIDR) notation. WAF supports all IPv4 and IPv6 CIDR ranges except for /0.  Example address strings:    To configure WAF to allow, block, or count requests that originated from the IP address 192.0.2.44, specify 192.0.2.44/32.   To configure WAF to allow, block, or count requests that originated from IP addresses from 192.0.2.0 to 192.0.2.255, specify 192.0.2.0/24.   To configure WAF to allow, block, or count requests that originated from the IP address 1111:0000:0000:0000:0000:0000:0000:0111, specify 1111:0000:0000:0000:0000:0000:0000:0111/128.   To configure WAF to allow, block, or count requests that originated from IP addresses 1111:0000:0000:0000:0000:0000:0000:0000 to 1111:0000:0000:0000:ffff:ffff:ffff:ffff, specify 1111:0000:0000:0000:0000:0000:0000:0000/64.   For more information about CIDR notation, see the Wikipedia entry Classless Inter-Domain Routing. Example JSON Addresses specifications:    Empty array: "Addresses": []    Array with one address: "Addresses": ["192.0.2.44/32"]    Array with three addresses: "Addresses": ["192.0.2.44/32", "192.0.2.0/24", "192.0.0.0/16"]    INVALID specification: "Addresses": [""] INVALID   
      */
     Addresses: IPAddresses;
   }
@@ -1722,7 +1722,7 @@ declare namespace WAFV2 {
      */
     WebACLArn: ResourceArn;
     /**
-     * Used for web ACLs that are scoped for regional applications. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, or an Amazon Cognito user pool. 
+     * Used for web ACLs that are scoped for regional applications. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, or an Amazon Cognito user pool.   If you don't provide a resource type, the call uses the resource type APPLICATION_LOAD_BALANCER.   Default: APPLICATION_LOAD_BALANCER 
      */
     ResourceType?: ResourceType;
   }
@@ -2293,7 +2293,7 @@ declare namespace WAFV2 {
      */
     Allow?: AllowAction;
     /**
-     * Instructs WAF to count the web request and allow it.
+     * Instructs WAF to count the web request and then continue evaluating the request using the remaining rules in the web ACL.
      */
     Count?: CountAction;
     /**
@@ -2533,7 +2533,7 @@ declare namespace WAFV2 {
      */
     NotStatement?: NotStatement;
     /**
-     * A rule statement used to run the rules that are defined in a managed rule group. To use this, provide the vendor name and the name of the rule group in this statement. You can retrieve the required names by calling ListAvailableManagedRuleGroups. You cannot nest a ManagedRuleGroupStatement, for example for use inside a NotStatement or OrStatement. It can only be referenced as a top-level statement within a rule.
+     * A rule statement used to run the rules that are defined in a managed rule group. To use this, provide the vendor name and the name of the rule group in this statement. You can retrieve the required names by calling ListAvailableManagedRuleGroups. You cannot nest a ManagedRuleGroupStatement, for example for use inside a NotStatement or OrStatement. It can only be referenced as a top-level statement within a rule.  You are charged additional fees when you use the WAF Bot Control managed rule group AWSManagedRulesBotControlRuleSet or the WAF Fraud Control account takeover prevention (ATP) managed rule group AWSManagedRulesATPRuleSet. For more information, see WAF Pricing. 
      */
     ManagedRuleGroupStatement?: ManagedRuleGroupStatement;
     /**
@@ -2639,7 +2639,7 @@ declare namespace WAFV2 {
      */
     Description?: EntityDescription;
     /**
-     * Contains an array of strings that specifies zero or more IP addresses or blocks of IP addresses in Classless Inter-Domain Routing (CIDR) notation. WAF supports all IPv4 and IPv6 CIDR ranges except for /0.  Example address strings:    To configure WAF to allow, block, or count requests that originated from the IP address 192.0.2.44, specify 192.0.2.44/32.   To configure WAF to allow, block, or count requests that originated from IP addresses from 192.0.2.0 to 192.0.2.255, specify 192.0.2.0/24.   To configure WAF to allow, block, or count requests that originated from the IP address 1111:0000:0000:0000:0000:0000:0000:0111, specify 1111:0000:0000:0000:0000:0000:0000:0111/128.   To configure WAF to allow, block, or count requests that originated from IP addresses 1111:0000:0000:0000:0000:0000:0000:0000 to 1111:0000:0000:0000:ffff:ffff:ffff:ffff, specify 1111:0000:0000:0000:0000:0000:0000:0000/64.   For more information about CIDR notation, see the Wikipedia entry Classless Inter-Domain Routing. Example JSON Addresses specifications:    Empty array: "Addresses": []    Array with one address: "Addresses": ["192.0.2.44/32"]    Array with three addresses: "Addresses": ["192.0.2.44/32", "192.0.2.0/24", "192.0.0.0/16"]    INVALID specification: "Addresses": [""] INVALID   
+     * Contains an array of strings that specifies zero or more IP addresses or blocks of IP addresses. All addresses must be specified using Classless Inter-Domain Routing (CIDR) notation. WAF supports all IPv4 and IPv6 CIDR ranges except for /0.  Example address strings:    To configure WAF to allow, block, or count requests that originated from the IP address 192.0.2.44, specify 192.0.2.44/32.   To configure WAF to allow, block, or count requests that originated from IP addresses from 192.0.2.0 to 192.0.2.255, specify 192.0.2.0/24.   To configure WAF to allow, block, or count requests that originated from the IP address 1111:0000:0000:0000:0000:0000:0000:0111, specify 1111:0000:0000:0000:0000:0000:0000:0111/128.   To configure WAF to allow, block, or count requests that originated from IP addresses 1111:0000:0000:0000:0000:0000:0000:0000 to 1111:0000:0000:0000:ffff:ffff:ffff:ffff, specify 1111:0000:0000:0000:0000:0000:0000:0000/64.   For more information about CIDR notation, see the Wikipedia entry Classless Inter-Domain Routing. Example JSON Addresses specifications:    Empty array: "Addresses": []    Array with one address: "Addresses": ["192.0.2.44/32"]    Array with three addresses: "Addresses": ["192.0.2.44/32", "192.0.2.0/24", "192.0.0.0/16"]    INVALID specification: "Addresses": [""] INVALID   
      */
     Addresses: IPAddresses;
     /**