cdk-rds-sql 2.1.1 → 2.1.2

package/node_modules/aws-sdk/clients/ec2.d.ts

@@ -252,6 +252,14 @@ declare class EC2 extends Service {
    * Attaches a network interface to an instance.
    */
   attachNetworkInterface(callback?: (err: AWSError, data: EC2.Types.AttachNetworkInterfaceResult) => void): Request<EC2.Types.AttachNetworkInterfaceResult, AWSError>;
+  /**
+   * A trust provider is a third-party entity that creates, maintains, and manages identity information for users and devices. One or more trust providers can be attached to an Amazon Web Services Verified Access instance.
+   */
+  attachVerifiedAccessTrustProvider(params: EC2.Types.AttachVerifiedAccessTrustProviderRequest, callback?: (err: AWSError, data: EC2.Types.AttachVerifiedAccessTrustProviderResult) => void): Request<EC2.Types.AttachVerifiedAccessTrustProviderResult, AWSError>;
+  /**
+   * A trust provider is a third-party entity that creates, maintains, and manages identity information for users and devices. One or more trust providers can be attached to an Amazon Web Services Verified Access instance.
+   */
+  attachVerifiedAccessTrustProvider(callback?: (err: AWSError, data: EC2.Types.AttachVerifiedAccessTrustProviderResult) => void): Request<EC2.Types.AttachVerifiedAccessTrustProviderResult, AWSError>;
   /**
    * Attaches an EBS volume to a running or stopped instance and exposes it to the instance with the specified device name. Encrypted EBS volumes must be attached to instances that support Amazon EBS encryption. For more information, see Amazon EBS encryption in the Amazon Elastic Compute Cloud User Guide. After you attach an EBS volume, you must make it available. For more information, see Make an EBS volume available for use. If a volume has an Amazon Web Services Marketplace product code:   The volume can be attached only to a stopped instance.   Amazon Web Services Marketplace product codes are copied from the volume to the instance.   You must be subscribed to the product.   The instance type and operating system of the instance must support the product. For example, you can't detach a volume from a Windows instance and attach it to a Linux instance.   For more information, see Attach an Amazon EBS volume to an instance in the Amazon Elastic Compute Cloud User Guide.
    */
@@ -341,11 +349,11 @@ declare class EC2 extends Service {
    */
   cancelExportTask(callback?: (err: AWSError, data: {}) => void): Request<{}, AWSError>;
   /**
-   * Removes your Amazon Web Services account from the launch permissions for the specified AMI. For more information, see Cancel having an AMI shared with your Amazon Web Services account in the Amazon Elastic Compute Cloud User Guide.
+   * Removes your Amazon Web Services account from the launch permissions for the specified AMI. For more information, see Cancel having an AMI shared with your Amazon Web Services account in the Amazon EC2 User Guide.
    */
   cancelImageLaunchPermission(params: EC2.Types.CancelImageLaunchPermissionRequest, callback?: (err: AWSError, data: EC2.Types.CancelImageLaunchPermissionResult) => void): Request<EC2.Types.CancelImageLaunchPermissionResult, AWSError>;
   /**
-   * Removes your Amazon Web Services account from the launch permissions for the specified AMI. For more information, see Cancel having an AMI shared with your Amazon Web Services account in the Amazon Elastic Compute Cloud User Guide.
+   * Removes your Amazon Web Services account from the launch permissions for the specified AMI. For more information, see Cancel having an AMI shared with your Amazon Web Services account in the Amazon EC2 User Guide.
    */
   cancelImageLaunchPermission(callback?: (err: AWSError, data: EC2.Types.CancelImageLaunchPermissionResult) => void): Request<EC2.Types.CancelImageLaunchPermissionResult, AWSError>;
   /**
@@ -397,11 +405,11 @@ declare class EC2 extends Service {
    */
   copyFpgaImage(callback?: (err: AWSError, data: EC2.Types.CopyFpgaImageResult) => void): Request<EC2.Types.CopyFpgaImageResult, AWSError>;
   /**
-   * Initiates the copy of an AMI. You can copy an AMI from one Region to another, or from a Region to an Outpost. You can't copy an AMI from an Outpost to a Region, from one Outpost to another, or within the same Outpost. To copy an AMI to another partition, see CreateStoreImageTask. To copy an AMI from one Region to another, specify the source Region using the SourceRegion parameter, and specify the destination Region using its endpoint. Copies of encrypted backing snapshots for the AMI are encrypted. Copies of unencrypted backing snapshots remain unencrypted, unless you set Encrypted during the copy operation. You cannot create an unencrypted copy of an encrypted backing snapshot. To copy an AMI from a Region to an Outpost, specify the source Region using the SourceRegion parameter, and specify the ARN of the destination Outpost using DestinationOutpostArn. Backing snapshots copied to an Outpost are encrypted by default using the default encryption key for the Region, or a different key that you specify in the request using KmsKeyId. Outposts do not support unencrypted snapshots. For more information,  Amazon EBS local snapshots on Outposts in the Amazon Elastic Compute Cloud User Guide. For more information about the prerequisites and limits when copying an AMI, see Copy an AMI in the Amazon Elastic Compute Cloud User Guide.
+   * Initiates the copy of an AMI. You can copy an AMI from one Region to another, or from a Region to an Outpost. You can't copy an AMI from an Outpost to a Region, from one Outpost to another, or within the same Outpost. To copy an AMI to another partition, see CreateStoreImageTask. To copy an AMI from one Region to another, specify the source Region using the SourceRegion parameter, and specify the destination Region using its endpoint. Copies of encrypted backing snapshots for the AMI are encrypted. Copies of unencrypted backing snapshots remain unencrypted, unless you set Encrypted during the copy operation. You cannot create an unencrypted copy of an encrypted backing snapshot. To copy an AMI from a Region to an Outpost, specify the source Region using the SourceRegion parameter, and specify the ARN of the destination Outpost using DestinationOutpostArn. Backing snapshots copied to an Outpost are encrypted by default using the default encryption key for the Region, or a different key that you specify in the request using KmsKeyId. Outposts do not support unencrypted snapshots. For more information,  Amazon EBS local snapshots on Outposts in the Amazon EC2 User Guide. For more information about the prerequisites and limits when copying an AMI, see Copy an AMI in the Amazon EC2 User Guide.
    */
   copyImage(params: EC2.Types.CopyImageRequest, callback?: (err: AWSError, data: EC2.Types.CopyImageResult) => void): Request<EC2.Types.CopyImageResult, AWSError>;
   /**
-   * Initiates the copy of an AMI. You can copy an AMI from one Region to another, or from a Region to an Outpost. You can't copy an AMI from an Outpost to a Region, from one Outpost to another, or within the same Outpost. To copy an AMI to another partition, see CreateStoreImageTask. To copy an AMI from one Region to another, specify the source Region using the SourceRegion parameter, and specify the destination Region using its endpoint. Copies of encrypted backing snapshots for the AMI are encrypted. Copies of unencrypted backing snapshots remain unencrypted, unless you set Encrypted during the copy operation. You cannot create an unencrypted copy of an encrypted backing snapshot. To copy an AMI from a Region to an Outpost, specify the source Region using the SourceRegion parameter, and specify the ARN of the destination Outpost using DestinationOutpostArn. Backing snapshots copied to an Outpost are encrypted by default using the default encryption key for the Region, or a different key that you specify in the request using KmsKeyId. Outposts do not support unencrypted snapshots. For more information,  Amazon EBS local snapshots on Outposts in the Amazon Elastic Compute Cloud User Guide. For more information about the prerequisites and limits when copying an AMI, see Copy an AMI in the Amazon Elastic Compute Cloud User Guide.
+   * Initiates the copy of an AMI. You can copy an AMI from one Region to another, or from a Region to an Outpost. You can't copy an AMI from an Outpost to a Region, from one Outpost to another, or within the same Outpost. To copy an AMI to another partition, see CreateStoreImageTask. To copy an AMI from one Region to another, specify the source Region using the SourceRegion parameter, and specify the destination Region using its endpoint. Copies of encrypted backing snapshots for the AMI are encrypted. Copies of unencrypted backing snapshots remain unencrypted, unless you set Encrypted during the copy operation. You cannot create an unencrypted copy of an encrypted backing snapshot. To copy an AMI from a Region to an Outpost, specify the source Region using the SourceRegion parameter, and specify the ARN of the destination Outpost using DestinationOutpostArn. Backing snapshots copied to an Outpost are encrypted by default using the default encryption key for the Region, or a different key that you specify in the request using KmsKeyId. Outposts do not support unencrypted snapshots. For more information,  Amazon EBS local snapshots on Outposts in the Amazon EC2 User Guide. For more information about the prerequisites and limits when copying an AMI, see Copy an AMI in the Amazon EC2 User Guide.
    */
   copyImage(callback?: (err: AWSError, data: EC2.Types.CopyImageResult) => void): Request<EC2.Types.CopyImageResult, AWSError>;
   /**
@@ -741,11 +749,11 @@ declare class EC2 extends Service {
    */
   createReservedInstancesListing(callback?: (err: AWSError, data: EC2.Types.CreateReservedInstancesListingResult) => void): Request<EC2.Types.CreateReservedInstancesListingResult, AWSError>;
   /**
-   * Starts a task that restores an AMI from an Amazon S3 object that was previously created by using CreateStoreImageTask. To use this API, you must have the required permissions. For more information, see Permissions for storing and restoring AMIs using Amazon S3 in the Amazon Elastic Compute Cloud User Guide. For more information, see Store and restore an AMI using Amazon S3 in the Amazon Elastic Compute Cloud User Guide.
+   * Starts a task that restores an AMI from an Amazon S3 object that was previously created by using CreateStoreImageTask. To use this API, you must have the required permissions. For more information, see Permissions for storing and restoring AMIs using Amazon S3 in the Amazon EC2 User Guide. For more information, see Store and restore an AMI using Amazon S3 in the Amazon EC2 User Guide.
    */
   createRestoreImageTask(params: EC2.Types.CreateRestoreImageTaskRequest, callback?: (err: AWSError, data: EC2.Types.CreateRestoreImageTaskResult) => void): Request<EC2.Types.CreateRestoreImageTaskResult, AWSError>;
   /**
-   * Starts a task that restores an AMI from an Amazon S3 object that was previously created by using CreateStoreImageTask. To use this API, you must have the required permissions. For more information, see Permissions for storing and restoring AMIs using Amazon S3 in the Amazon Elastic Compute Cloud User Guide. For more information, see Store and restore an AMI using Amazon S3 in the Amazon Elastic Compute Cloud User Guide.
+   * Starts a task that restores an AMI from an Amazon S3 object that was previously created by using CreateStoreImageTask. To use this API, you must have the required permissions. For more information, see Permissions for storing and restoring AMIs using Amazon S3 in the Amazon EC2 User Guide. For more information, see Store and restore an AMI using Amazon S3 in the Amazon EC2 User Guide.
    */
   createRestoreImageTask(callback?: (err: AWSError, data: EC2.Types.CreateRestoreImageTaskResult) => void): Request<EC2.Types.CreateRestoreImageTaskResult, AWSError>;
   /**
@@ -797,11 +805,11 @@ declare class EC2 extends Service {
    */
   createSpotDatafeedSubscription(callback?: (err: AWSError, data: EC2.Types.CreateSpotDatafeedSubscriptionResult) => void): Request<EC2.Types.CreateSpotDatafeedSubscriptionResult, AWSError>;
   /**
-   * Stores an AMI as a single object in an Amazon S3 bucket. To use this API, you must have the required permissions. For more information, see Permissions for storing and restoring AMIs using Amazon S3 in the Amazon Elastic Compute Cloud User Guide. For more information, see Store and restore an AMI using Amazon S3 in the Amazon Elastic Compute Cloud User Guide.
+   * Stores an AMI as a single object in an Amazon S3 bucket. To use this API, you must have the required permissions. For more information, see Permissions for storing and restoring AMIs using Amazon S3 in the Amazon EC2 User Guide. For more information, see Store and restore an AMI using Amazon S3 in the Amazon EC2 User Guide.
    */
   createStoreImageTask(params: EC2.Types.CreateStoreImageTaskRequest, callback?: (err: AWSError, data: EC2.Types.CreateStoreImageTaskResult) => void): Request<EC2.Types.CreateStoreImageTaskResult, AWSError>;
   /**
-   * Stores an AMI as a single object in an Amazon S3 bucket. To use this API, you must have the required permissions. For more information, see Permissions for storing and restoring AMIs using Amazon S3 in the Amazon Elastic Compute Cloud User Guide. For more information, see Store and restore an AMI using Amazon S3 in the Amazon Elastic Compute Cloud User Guide.
+   * Stores an AMI as a single object in an Amazon S3 bucket. To use this API, you must have the required permissions. For more information, see Permissions for storing and restoring AMIs using Amazon S3 in the Amazon EC2 User Guide. For more information, see Store and restore an AMI using Amazon S3 in the Amazon EC2 User Guide.
    */
   createStoreImageTask(callback?: (err: AWSError, data: EC2.Types.CreateStoreImageTaskResult) => void): Request<EC2.Types.CreateStoreImageTaskResult, AWSError>;
   /**
@@ -948,6 +956,38 @@ declare class EC2 extends Service {
    * Attaches the specified VPC to the specified transit gateway. If you attach a VPC with a CIDR range that overlaps the CIDR range of a VPC that is already attached, the new VPC CIDR range is not propagated to the default propagation route table. To send VPC traffic to an attached transit gateway, add a route to the VPC route table using CreateRoute.
    */
   createTransitGatewayVpcAttachment(callback?: (err: AWSError, data: EC2.Types.CreateTransitGatewayVpcAttachmentResult) => void): Request<EC2.Types.CreateTransitGatewayVpcAttachmentResult, AWSError>;
+  /**
+   * An Amazon Web Services Verified Access endpoint is where you define your application along with an optional endpoint-level access policy.
+   */
+  createVerifiedAccessEndpoint(params: EC2.Types.CreateVerifiedAccessEndpointRequest, callback?: (err: AWSError, data: EC2.Types.CreateVerifiedAccessEndpointResult) => void): Request<EC2.Types.CreateVerifiedAccessEndpointResult, AWSError>;
+  /**
+   * An Amazon Web Services Verified Access endpoint is where you define your application along with an optional endpoint-level access policy.
+   */
+  createVerifiedAccessEndpoint(callback?: (err: AWSError, data: EC2.Types.CreateVerifiedAccessEndpointResult) => void): Request<EC2.Types.CreateVerifiedAccessEndpointResult, AWSError>;
+  /**
+   * An Amazon Web Services Verified Access group is a collection of Amazon Web Services Verified Access endpoints who's associated applications have similar security requirements. Each instance within an Amazon Web Services Verified Access group shares an Amazon Web Services Verified Access policy. For example, you can group all Amazon Web Services Verified Access instances associated with “sales” applications together and use one common Amazon Web Services Verified Access policy.
+   */
+  createVerifiedAccessGroup(params: EC2.Types.CreateVerifiedAccessGroupRequest, callback?: (err: AWSError, data: EC2.Types.CreateVerifiedAccessGroupResult) => void): Request<EC2.Types.CreateVerifiedAccessGroupResult, AWSError>;
+  /**
+   * An Amazon Web Services Verified Access group is a collection of Amazon Web Services Verified Access endpoints who's associated applications have similar security requirements. Each instance within an Amazon Web Services Verified Access group shares an Amazon Web Services Verified Access policy. For example, you can group all Amazon Web Services Verified Access instances associated with “sales” applications together and use one common Amazon Web Services Verified Access policy.
+   */
+  createVerifiedAccessGroup(callback?: (err: AWSError, data: EC2.Types.CreateVerifiedAccessGroupResult) => void): Request<EC2.Types.CreateVerifiedAccessGroupResult, AWSError>;
+  /**
+   * An Amazon Web Services Verified Access instance is a regional entity that evaluates application requests and grants access only when your security requirements are met.
+   */
+  createVerifiedAccessInstance(params: EC2.Types.CreateVerifiedAccessInstanceRequest, callback?: (err: AWSError, data: EC2.Types.CreateVerifiedAccessInstanceResult) => void): Request<EC2.Types.CreateVerifiedAccessInstanceResult, AWSError>;
+  /**
+   * An Amazon Web Services Verified Access instance is a regional entity that evaluates application requests and grants access only when your security requirements are met.
+   */
+  createVerifiedAccessInstance(callback?: (err: AWSError, data: EC2.Types.CreateVerifiedAccessInstanceResult) => void): Request<EC2.Types.CreateVerifiedAccessInstanceResult, AWSError>;
+  /**
+   * A trust provider is a third-party entity that creates, maintains, and manages identity information for users and devices. When an application request is made, the identity information sent by the trust provider will be evaluated by Amazon Web Services Verified Access, before allowing or denying the application request.
+   */
+  createVerifiedAccessTrustProvider(params: EC2.Types.CreateVerifiedAccessTrustProviderRequest, callback?: (err: AWSError, data: EC2.Types.CreateVerifiedAccessTrustProviderResult) => void): Request<EC2.Types.CreateVerifiedAccessTrustProviderResult, AWSError>;
+  /**
+   * A trust provider is a third-party entity that creates, maintains, and manages identity information for users and devices. When an application request is made, the identity information sent by the trust provider will be evaluated by Amazon Web Services Verified Access, before allowing or denying the application request.
+   */
+  createVerifiedAccessTrustProvider(callback?: (err: AWSError, data: EC2.Types.CreateVerifiedAccessTrustProviderResult) => void): Request<EC2.Types.CreateVerifiedAccessTrustProviderResult, AWSError>;
   /**
    * Creates an EBS volume that can be attached to an instance in the same Availability Zone. You can create a new empty volume or restore a volume from an EBS snapshot. Any Amazon Web Services Marketplace product codes from the snapshot are propagated to the volume. You can create encrypted volumes. Encrypted volumes must be attached to instances that support Amazon EBS encryption. Volumes that are created from encrypted snapshots are also automatically encrypted. For more information, see Amazon EBS encryption in the Amazon Elastic Compute Cloud User Guide. You can tag your volumes during creation. For more information, see Tag your Amazon EC2 resources in the Amazon Elastic Compute Cloud User Guide. For more information, see Create an Amazon EBS volume in the Amazon Elastic Compute Cloud User Guide.
    */
@@ -1492,6 +1532,38 @@ declare class EC2 extends Service {
    * Deletes the specified VPC attachment.
    */
   deleteTransitGatewayVpcAttachment(callback?: (err: AWSError, data: EC2.Types.DeleteTransitGatewayVpcAttachmentResult) => void): Request<EC2.Types.DeleteTransitGatewayVpcAttachmentResult, AWSError>;
+  /**
+   * Delete an Amazon Web Services Verified Access endpoint.
+   */
+  deleteVerifiedAccessEndpoint(params: EC2.Types.DeleteVerifiedAccessEndpointRequest, callback?: (err: AWSError, data: EC2.Types.DeleteVerifiedAccessEndpointResult) => void): Request<EC2.Types.DeleteVerifiedAccessEndpointResult, AWSError>;
+  /**
+   * Delete an Amazon Web Services Verified Access endpoint.
+   */
+  deleteVerifiedAccessEndpoint(callback?: (err: AWSError, data: EC2.Types.DeleteVerifiedAccessEndpointResult) => void): Request<EC2.Types.DeleteVerifiedAccessEndpointResult, AWSError>;
+  /**
+   * Delete an Amazon Web Services Verified Access group.
+   */
+  deleteVerifiedAccessGroup(params: EC2.Types.DeleteVerifiedAccessGroupRequest, callback?: (err: AWSError, data: EC2.Types.DeleteVerifiedAccessGroupResult) => void): Request<EC2.Types.DeleteVerifiedAccessGroupResult, AWSError>;
+  /**
+   * Delete an Amazon Web Services Verified Access group.
+   */
+  deleteVerifiedAccessGroup(callback?: (err: AWSError, data: EC2.Types.DeleteVerifiedAccessGroupResult) => void): Request<EC2.Types.DeleteVerifiedAccessGroupResult, AWSError>;
+  /**
+   * Delete an Amazon Web Services Verified Access instance.
+   */
+  deleteVerifiedAccessInstance(params: EC2.Types.DeleteVerifiedAccessInstanceRequest, callback?: (err: AWSError, data: EC2.Types.DeleteVerifiedAccessInstanceResult) => void): Request<EC2.Types.DeleteVerifiedAccessInstanceResult, AWSError>;
+  /**
+   * Delete an Amazon Web Services Verified Access instance.
+   */
+  deleteVerifiedAccessInstance(callback?: (err: AWSError, data: EC2.Types.DeleteVerifiedAccessInstanceResult) => void): Request<EC2.Types.DeleteVerifiedAccessInstanceResult, AWSError>;
+  /**
+   * Delete an Amazon Web Services Verified Access trust provider.
+   */
+  deleteVerifiedAccessTrustProvider(params: EC2.Types.DeleteVerifiedAccessTrustProviderRequest, callback?: (err: AWSError, data: EC2.Types.DeleteVerifiedAccessTrustProviderResult) => void): Request<EC2.Types.DeleteVerifiedAccessTrustProviderResult, AWSError>;
+  /**
+   * Delete an Amazon Web Services Verified Access trust provider.
+   */
+  deleteVerifiedAccessTrustProvider(callback?: (err: AWSError, data: EC2.Types.DeleteVerifiedAccessTrustProviderResult) => void): Request<EC2.Types.DeleteVerifiedAccessTrustProviderResult, AWSError>;
   /**
    * Deletes the specified EBS volume. The volume must be in the available state (not attached to an instance). The volume can remain in the deleting state for several minutes. For more information, see Delete an Amazon EBS volume in the Amazon Elastic Compute Cloud User Guide.
    */
@@ -1589,11 +1661,11 @@ declare class EC2 extends Service {
    */
   deprovisionPublicIpv4PoolCidr(callback?: (err: AWSError, data: EC2.Types.DeprovisionPublicIpv4PoolCidrResult) => void): Request<EC2.Types.DeprovisionPublicIpv4PoolCidrResult, AWSError>;
   /**
-   * Deregisters the specified AMI. After you deregister an AMI, it can't be used to launch new instances. If you deregister an AMI that matches a Recycle Bin retention rule, the AMI is retained in the Recycle Bin for the specified retention period. For more information, see Recycle Bin in the Amazon Elastic Compute Cloud User Guide. When you deregister an AMI, it doesn't affect any instances that you've already launched from the AMI. You'll continue to incur usage costs for those instances until you terminate them. When you deregister an Amazon EBS-backed AMI, it doesn't affect the snapshot that was created for the root volume of the instance during the AMI creation process. When you deregister an instance store-backed AMI, it doesn't affect the files that you uploaded to Amazon S3 when you created the AMI.
+   * Deregisters the specified AMI. After you deregister an AMI, it can't be used to launch new instances. If you deregister an AMI that matches a Recycle Bin retention rule, the AMI is retained in the Recycle Bin for the specified retention period. For more information, see Recycle Bin in the Amazon EC2 User Guide. When you deregister an AMI, it doesn't affect any instances that you've already launched from the AMI. You'll continue to incur usage costs for those instances until you terminate them. When you deregister an Amazon EBS-backed AMI, it doesn't affect the snapshot that was created for the root volume of the instance during the AMI creation process. When you deregister an instance store-backed AMI, it doesn't affect the files that you uploaded to Amazon S3 when you created the AMI.
    */
   deregisterImage(params: EC2.Types.DeregisterImageRequest, callback?: (err: AWSError, data: {}) => void): Request<{}, AWSError>;
   /**
-   * Deregisters the specified AMI. After you deregister an AMI, it can't be used to launch new instances. If you deregister an AMI that matches a Recycle Bin retention rule, the AMI is retained in the Recycle Bin for the specified retention period. For more information, see Recycle Bin in the Amazon Elastic Compute Cloud User Guide. When you deregister an AMI, it doesn't affect any instances that you've already launched from the AMI. You'll continue to incur usage costs for those instances until you terminate them. When you deregister an Amazon EBS-backed AMI, it doesn't affect the snapshot that was created for the root volume of the instance during the AMI creation process. When you deregister an instance store-backed AMI, it doesn't affect the files that you uploaded to Amazon S3 when you created the AMI.
+   * Deregisters the specified AMI. After you deregister an AMI, it can't be used to launch new instances. If you deregister an AMI that matches a Recycle Bin retention rule, the AMI is retained in the Recycle Bin for the specified retention period. For more information, see Recycle Bin in the Amazon EC2 User Guide. When you deregister an AMI, it doesn't affect any instances that you've already launched from the AMI. You'll continue to incur usage costs for those instances until you terminate them. When you deregister an Amazon EBS-backed AMI, it doesn't affect the snapshot that was created for the root volume of the instance during the AMI creation process. When you deregister an instance store-backed AMI, it doesn't affect the files that you uploaded to Amazon S3 when you created the AMI.
    */
   deregisterImage(callback?: (err: AWSError, data: {}) => void): Request<{}, AWSError>;
   /**
@@ -1668,6 +1740,14 @@ declare class EC2 extends Service {
    * Describes the Availability Zones, Local Zones, and Wavelength Zones that are available to you. If there is an event impacting a zone, you can use this request to view the state and any provided messages for that zone. For more information about Availability Zones, Local Zones, and Wavelength Zones, see Regions and zones in the Amazon Elastic Compute Cloud User Guide.
    */
   describeAvailabilityZones(callback?: (err: AWSError, data: EC2.Types.DescribeAvailabilityZonesResult) => void): Request<EC2.Types.DescribeAvailabilityZonesResult, AWSError>;
+  /**
+   * Describes the current Infrastructure Performance metric subscriptions.
+   */
+  describeAwsNetworkPerformanceMetricSubscriptions(params: EC2.Types.DescribeAwsNetworkPerformanceMetricSubscriptionsRequest, callback?: (err: AWSError, data: EC2.Types.DescribeAwsNetworkPerformanceMetricSubscriptionsResult) => void): Request<EC2.Types.DescribeAwsNetworkPerformanceMetricSubscriptionsResult, AWSError>;
+  /**
+   * Describes the current Infrastructure Performance metric subscriptions.
+   */
+  describeAwsNetworkPerformanceMetricSubscriptions(callback?: (err: AWSError, data: EC2.Types.DescribeAwsNetworkPerformanceMetricSubscriptionsResult) => void): Request<EC2.Types.DescribeAwsNetworkPerformanceMetricSubscriptionsResult, AWSError>;
   /**
    * Describes the specified bundle tasks or all of your bundle tasks.  Completed bundle tasks are listed for only a limited time. If your bundle task is no longer in the list, you can still register an AMI from it. Just use RegisterImage with the Amazon S3 bucket name and image manifest name you provided to the bundle task. 
    */
@@ -2437,11 +2517,11 @@ declare class EC2 extends Service {
    */
   describeStaleSecurityGroups(callback?: (err: AWSError, data: EC2.Types.DescribeStaleSecurityGroupsResult) => void): Request<EC2.Types.DescribeStaleSecurityGroupsResult, AWSError>;
   /**
-   * Describes the progress of the AMI store tasks. You can describe the store tasks for specified AMIs. If you don't specify the AMIs, you get a paginated list of store tasks from the last 31 days. For each AMI task, the response indicates if the task is InProgress, Completed, or Failed. For tasks InProgress, the response shows the estimated progress as a percentage. Tasks are listed in reverse chronological order. Currently, only tasks from the past 31 days can be viewed. To use this API, you must have the required permissions. For more information, see Permissions for storing and restoring AMIs using Amazon S3 in the Amazon Elastic Compute Cloud User Guide. For more information, see Store and restore an AMI using Amazon S3 in the Amazon Elastic Compute Cloud User Guide.
+   * Describes the progress of the AMI store tasks. You can describe the store tasks for specified AMIs. If you don't specify the AMIs, you get a paginated list of store tasks from the last 31 days. For each AMI task, the response indicates if the task is InProgress, Completed, or Failed. For tasks InProgress, the response shows the estimated progress as a percentage. Tasks are listed in reverse chronological order. Currently, only tasks from the past 31 days can be viewed. To use this API, you must have the required permissions. For more information, see Permissions for storing and restoring AMIs using Amazon S3 in the Amazon EC2 User Guide. For more information, see Store and restore an AMI using Amazon S3 in the Amazon EC2 User Guide.
    */
   describeStoreImageTasks(params: EC2.Types.DescribeStoreImageTasksRequest, callback?: (err: AWSError, data: EC2.Types.DescribeStoreImageTasksResult) => void): Request<EC2.Types.DescribeStoreImageTasksResult, AWSError>;
   /**
-   * Describes the progress of the AMI store tasks. You can describe the store tasks for specified AMIs. If you don't specify the AMIs, you get a paginated list of store tasks from the last 31 days. For each AMI task, the response indicates if the task is InProgress, Completed, or Failed. For tasks InProgress, the response shows the estimated progress as a percentage. Tasks are listed in reverse chronological order. Currently, only tasks from the past 31 days can be viewed. To use this API, you must have the required permissions. For more information, see Permissions for storing and restoring AMIs using Amazon S3 in the Amazon Elastic Compute Cloud User Guide. For more information, see Store and restore an AMI using Amazon S3 in the Amazon Elastic Compute Cloud User Guide.
+   * Describes the progress of the AMI store tasks. You can describe the store tasks for specified AMIs. If you don't specify the AMIs, you get a paginated list of store tasks from the last 31 days. For each AMI task, the response indicates if the task is InProgress, Completed, or Failed. For tasks InProgress, the response shows the estimated progress as a percentage. Tasks are listed in reverse chronological order. Currently, only tasks from the past 31 days can be viewed. To use this API, you must have the required permissions. For more information, see Permissions for storing and restoring AMIs using Amazon S3 in the Amazon EC2 User Guide. For more information, see Store and restore an AMI using Amazon S3 in the Amazon EC2 User Guide.
    */
   describeStoreImageTasks(callback?: (err: AWSError, data: EC2.Types.DescribeStoreImageTasksResult) => void): Request<EC2.Types.DescribeStoreImageTasksResult, AWSError>;
   /**
@@ -2572,6 +2652,46 @@ declare class EC2 extends Service {
    *  This API action is currently in limited preview only. If you are interested in using this feature, contact your account manager.  Describes one or more network interface trunk associations.
    */
   describeTrunkInterfaceAssociations(callback?: (err: AWSError, data: EC2.Types.DescribeTrunkInterfaceAssociationsResult) => void): Request<EC2.Types.DescribeTrunkInterfaceAssociationsResult, AWSError>;
+  /**
+   * Describe Amazon Web Services Verified Access endpoints.
+   */
+  describeVerifiedAccessEndpoints(params: EC2.Types.DescribeVerifiedAccessEndpointsRequest, callback?: (err: AWSError, data: EC2.Types.DescribeVerifiedAccessEndpointsResult) => void): Request<EC2.Types.DescribeVerifiedAccessEndpointsResult, AWSError>;
+  /**
+   * Describe Amazon Web Services Verified Access endpoints.
+   */
+  describeVerifiedAccessEndpoints(callback?: (err: AWSError, data: EC2.Types.DescribeVerifiedAccessEndpointsResult) => void): Request<EC2.Types.DescribeVerifiedAccessEndpointsResult, AWSError>;
+  /**
+   * Describe details of existing Verified Access groups.
+   */
+  describeVerifiedAccessGroups(params: EC2.Types.DescribeVerifiedAccessGroupsRequest, callback?: (err: AWSError, data: EC2.Types.DescribeVerifiedAccessGroupsResult) => void): Request<EC2.Types.DescribeVerifiedAccessGroupsResult, AWSError>;
+  /**
+   * Describe details of existing Verified Access groups.
+   */
+  describeVerifiedAccessGroups(callback?: (err: AWSError, data: EC2.Types.DescribeVerifiedAccessGroupsResult) => void): Request<EC2.Types.DescribeVerifiedAccessGroupsResult, AWSError>;
+  /**
+   * Describes the current logging configuration for the Amazon Web Services Verified Access instances.
+   */
+  describeVerifiedAccessInstanceLoggingConfigurations(params: EC2.Types.DescribeVerifiedAccessInstanceLoggingConfigurationsRequest, callback?: (err: AWSError, data: EC2.Types.DescribeVerifiedAccessInstanceLoggingConfigurationsResult) => void): Request<EC2.Types.DescribeVerifiedAccessInstanceLoggingConfigurationsResult, AWSError>;
+  /**
+   * Describes the current logging configuration for the Amazon Web Services Verified Access instances.
+   */
+  describeVerifiedAccessInstanceLoggingConfigurations(callback?: (err: AWSError, data: EC2.Types.DescribeVerifiedAccessInstanceLoggingConfigurationsResult) => void): Request<EC2.Types.DescribeVerifiedAccessInstanceLoggingConfigurationsResult, AWSError>;
+  /**
+   * Describe Verified Access instances.
+   */
+  describeVerifiedAccessInstances(params: EC2.Types.DescribeVerifiedAccessInstancesRequest, callback?: (err: AWSError, data: EC2.Types.DescribeVerifiedAccessInstancesResult) => void): Request<EC2.Types.DescribeVerifiedAccessInstancesResult, AWSError>;
+  /**
+   * Describe Verified Access instances.
+   */
+  describeVerifiedAccessInstances(callback?: (err: AWSError, data: EC2.Types.DescribeVerifiedAccessInstancesResult) => void): Request<EC2.Types.DescribeVerifiedAccessInstancesResult, AWSError>;
+  /**
+   * Describe details of existing Verified Access trust providers.
+   */
+  describeVerifiedAccessTrustProviders(params: EC2.Types.DescribeVerifiedAccessTrustProvidersRequest, callback?: (err: AWSError, data: EC2.Types.DescribeVerifiedAccessTrustProvidersResult) => void): Request<EC2.Types.DescribeVerifiedAccessTrustProvidersResult, AWSError>;
+  /**
+   * Describe details of existing Verified Access trust providers.
+   */
+  describeVerifiedAccessTrustProviders(callback?: (err: AWSError, data: EC2.Types.DescribeVerifiedAccessTrustProvidersResult) => void): Request<EC2.Types.DescribeVerifiedAccessTrustProvidersResult, AWSError>;
   /**
    * Describes the specified attribute of the specified volume. You can specify only one attribute at a time. For more information about EBS volumes, see Amazon EBS volumes in the Amazon Elastic Compute Cloud User Guide.
    */
@@ -2732,6 +2852,14 @@ declare class EC2 extends Service {
    * Detaches a network interface from an instance.
    */
   detachNetworkInterface(callback?: (err: AWSError, data: {}) => void): Request<{}, AWSError>;
+  /**
+   * Detach a trust provider from an Amazon Web Services Verified Access instance.
+   */
+  detachVerifiedAccessTrustProvider(params: EC2.Types.DetachVerifiedAccessTrustProviderRequest, callback?: (err: AWSError, data: EC2.Types.DetachVerifiedAccessTrustProviderResult) => void): Request<EC2.Types.DetachVerifiedAccessTrustProviderResult, AWSError>;
+  /**
+   * Detach a trust provider from an Amazon Web Services Verified Access instance.
+   */
+  detachVerifiedAccessTrustProvider(callback?: (err: AWSError, data: EC2.Types.DetachVerifiedAccessTrustProviderResult) => void): Request<EC2.Types.DetachVerifiedAccessTrustProviderResult, AWSError>;
   /**
    * Detaches an EBS volume from an instance. Make sure to unmount any file systems on the device within your operating system before detaching the volume. Failure to do so can result in the volume becoming stuck in the busy state while detaching. If this happens, detachment can be delayed indefinitely until you unmount the volume, force detachment, reboot the instance, or all three. If an EBS volume is the root device of an instance, it can't be detached while the instance is running. To detach the root volume, stop the instance first. When a volume with an Amazon Web Services Marketplace product code is detached from an instance, the product code is no longer associated with the instance. For more information, see Detach an Amazon EBS volume in the Amazon Elastic Compute Cloud User Guide.
    */
@@ -2756,6 +2884,14 @@ declare class EC2 extends Service {
    * Disables Elastic IP address transfer. For more information, see Transfer Elastic IP addresses in the Amazon Virtual Private Cloud User Guide.
    */
   disableAddressTransfer(callback?: (err: AWSError, data: EC2.Types.DisableAddressTransferResult) => void): Request<EC2.Types.DisableAddressTransferResult, AWSError>;
+  /**
+   * Disables Infrastructure Performance metric subscriptions.
+   */
+  disableAwsNetworkPerformanceMetricSubscription(params: EC2.Types.DisableAwsNetworkPerformanceMetricSubscriptionRequest, callback?: (err: AWSError, data: EC2.Types.DisableAwsNetworkPerformanceMetricSubscriptionResult) => void): Request<EC2.Types.DisableAwsNetworkPerformanceMetricSubscriptionResult, AWSError>;
+  /**
+   * Disables Infrastructure Performance metric subscriptions.
+   */
+  disableAwsNetworkPerformanceMetricSubscription(callback?: (err: AWSError, data: EC2.Types.DisableAwsNetworkPerformanceMetricSubscriptionResult) => void): Request<EC2.Types.DisableAwsNetworkPerformanceMetricSubscriptionResult, AWSError>;
   /**
    * Disables EBS encryption by default for your account in the current Region. After you disable encryption by default, you can still create encrypted volumes by enabling encryption when you create each volume. Disabling encryption by default does not change the encryption status of your existing volumes. For more information, see Amazon EBS encryption in the Amazon Elastic Compute Cloud User Guide.
    */
@@ -2781,11 +2917,11 @@ declare class EC2 extends Service {
    */
   disableFastSnapshotRestores(callback?: (err: AWSError, data: EC2.Types.DisableFastSnapshotRestoresResult) => void): Request<EC2.Types.DisableFastSnapshotRestoresResult, AWSError>;
   /**
-   * Cancels the deprecation of the specified AMI. For more information, see Deprecate an AMI in the Amazon Elastic Compute Cloud User Guide.
+   * Cancels the deprecation of the specified AMI. For more information, see Deprecate an AMI in the Amazon EC2 User Guide.
    */
   disableImageDeprecation(params: EC2.Types.DisableImageDeprecationRequest, callback?: (err: AWSError, data: EC2.Types.DisableImageDeprecationResult) => void): Request<EC2.Types.DisableImageDeprecationResult, AWSError>;
   /**
-   * Cancels the deprecation of the specified AMI. For more information, see Deprecate an AMI in the Amazon Elastic Compute Cloud User Guide.
+   * Cancels the deprecation of the specified AMI. For more information, see Deprecate an AMI in the Amazon EC2 User Guide.
    */
   disableImageDeprecation(callback?: (err: AWSError, data: EC2.Types.DisableImageDeprecationResult) => void): Request<EC2.Types.DisableImageDeprecationResult, AWSError>;
   /**
@@ -2940,6 +3076,14 @@ declare class EC2 extends Service {
    * Enables Elastic IP address transfer. For more information, see Transfer Elastic IP addresses in the Amazon Virtual Private Cloud User Guide.
    */
   enableAddressTransfer(callback?: (err: AWSError, data: EC2.Types.EnableAddressTransferResult) => void): Request<EC2.Types.EnableAddressTransferResult, AWSError>;
+  /**
+   * Enables Infrastructure Performance subscriptions.
+   */
+  enableAwsNetworkPerformanceMetricSubscription(params: EC2.Types.EnableAwsNetworkPerformanceMetricSubscriptionRequest, callback?: (err: AWSError, data: EC2.Types.EnableAwsNetworkPerformanceMetricSubscriptionResult) => void): Request<EC2.Types.EnableAwsNetworkPerformanceMetricSubscriptionResult, AWSError>;
+  /**
+   * Enables Infrastructure Performance subscriptions.
+   */
+  enableAwsNetworkPerformanceMetricSubscription(callback?: (err: AWSError, data: EC2.Types.EnableAwsNetworkPerformanceMetricSubscriptionResult) => void): Request<EC2.Types.EnableAwsNetworkPerformanceMetricSubscriptionResult, AWSError>;
   /**
    * Enables EBS encryption by default for your account in the current Region. After you enable encryption by default, the EBS volumes that you create are always encrypted, either using the default KMS key or the KMS key that you specified when you created each volume. For more information, see Amazon EBS encryption in the Amazon Elastic Compute Cloud User Guide. You can specify the default KMS key for encryption by default using ModifyEbsDefaultKmsKeyId or ResetEbsDefaultKmsKeyId. Enabling encryption by default has no effect on the encryption status of your existing volumes. After you enable encryption by default, you can no longer launch instances using instance types that do not support encryption. For more information, see Supported instance types.
    */
@@ -2965,11 +3109,11 @@ declare class EC2 extends Service {
    */
   enableFastSnapshotRestores(callback?: (err: AWSError, data: EC2.Types.EnableFastSnapshotRestoresResult) => void): Request<EC2.Types.EnableFastSnapshotRestoresResult, AWSError>;
   /**
-   * Enables deprecation of the specified AMI at the specified date and time. For more information, see Deprecate an AMI in the Amazon Elastic Compute Cloud User Guide.
+   * Enables deprecation of the specified AMI at the specified date and time. For more information, see Deprecate an AMI in the Amazon EC2 User Guide.
    */
   enableImageDeprecation(params: EC2.Types.EnableImageDeprecationRequest, callback?: (err: AWSError, data: EC2.Types.EnableImageDeprecationResult) => void): Request<EC2.Types.EnableImageDeprecationResult, AWSError>;
   /**
-   * Enables deprecation of the specified AMI at the specified date and time. For more information, see Deprecate an AMI in the Amazon Elastic Compute Cloud User Guide.
+   * Enables deprecation of the specified AMI at the specified date and time. For more information, see Deprecate an AMI in the Amazon EC2 User Guide.
    */
   enableImageDeprecation(callback?: (err: AWSError, data: EC2.Types.EnableImageDeprecationResult) => void): Request<EC2.Types.EnableImageDeprecationResult, AWSError>;
   /**
@@ -2980,6 +3124,14 @@ declare class EC2 extends Service {
    * Enable an Organizations member account as the IPAM admin account. You cannot select the Organizations management account as the IPAM admin account. For more information, see Enable integration with Organizations in the Amazon VPC IPAM User Guide. 
    */
   enableIpamOrganizationAdminAccount(callback?: (err: AWSError, data: EC2.Types.EnableIpamOrganizationAdminAccountResult) => void): Request<EC2.Types.EnableIpamOrganizationAdminAccountResult, AWSError>;
+  /**
+   * Establishes a trust relationship between Reachability Analyzer and Organizations. This operation must be performed by the management account for the organization. After you establish a trust relationship, a user in the management account or a delegated administrator account can run a cross-account analysis using resources from the member accounts.
+   */
+  enableReachabilityAnalyzerOrganizationSharing(params: EC2.Types.EnableReachabilityAnalyzerOrganizationSharingRequest, callback?: (err: AWSError, data: EC2.Types.EnableReachabilityAnalyzerOrganizationSharingResult) => void): Request<EC2.Types.EnableReachabilityAnalyzerOrganizationSharingResult, AWSError>;
+  /**
+   * Establishes a trust relationship between Reachability Analyzer and Organizations. This operation must be performed by the management account for the organization. After you establish a trust relationship, a user in the management account or a delegated administrator account can run a cross-account analysis using resources from the member accounts.
+   */
+  enableReachabilityAnalyzerOrganizationSharing(callback?: (err: AWSError, data: EC2.Types.EnableReachabilityAnalyzerOrganizationSharingResult) => void): Request<EC2.Types.EnableReachabilityAnalyzerOrganizationSharingResult, AWSError>;
   /**
    * Enables access to the EC2 serial console of all instances for your account. By default, access to the EC2 serial console is disabled for your account. For more information, see Manage account access to the EC2 serial console in the Amazon EC2 User Guide.
    */
@@ -3076,6 +3228,14 @@ declare class EC2 extends Service {
    * Gets information about the IPv6 CIDR block associations for a specified IPv6 address pool.
    */
   getAssociatedIpv6PoolCidrs(callback?: (err: AWSError, data: EC2.Types.GetAssociatedIpv6PoolCidrsResult) => void): Request<EC2.Types.GetAssociatedIpv6PoolCidrsResult, AWSError>;
+  /**
+   * Gets network performance data.
+   */
+  getAwsNetworkPerformanceData(params: EC2.Types.GetAwsNetworkPerformanceDataRequest, callback?: (err: AWSError, data: EC2.Types.GetAwsNetworkPerformanceDataResult) => void): Request<EC2.Types.GetAwsNetworkPerformanceDataResult, AWSError>;
+  /**
+   * Gets network performance data.
+   */
+  getAwsNetworkPerformanceData(callback?: (err: AWSError, data: EC2.Types.GetAwsNetworkPerformanceDataResult) => void): Request<EC2.Types.GetAwsNetworkPerformanceDataResult, AWSError>;
   /**
    * Gets usage information about a Capacity Reservation. If the Capacity Reservation is shared, it shows usage information for the Capacity Reservation owner and each Amazon Web Services account that is currently using the shared capacity. If the Capacity Reservation is not shared, it shows only the Capacity Reservation owner's usage.
    */
@@ -3340,6 +3500,22 @@ declare class EC2 extends Service {
    * Gets information about the route table propagations for the specified transit gateway route table.
    */
   getTransitGatewayRouteTablePropagations(callback?: (err: AWSError, data: EC2.Types.GetTransitGatewayRouteTablePropagationsResult) => void): Request<EC2.Types.GetTransitGatewayRouteTablePropagationsResult, AWSError>;
+  /**
+   * Get the Verified Access policy associated with the endpoint.
+   */
+  getVerifiedAccessEndpointPolicy(params: EC2.Types.GetVerifiedAccessEndpointPolicyRequest, callback?: (err: AWSError, data: EC2.Types.GetVerifiedAccessEndpointPolicyResult) => void): Request<EC2.Types.GetVerifiedAccessEndpointPolicyResult, AWSError>;
+  /**
+   * Get the Verified Access policy associated with the endpoint.
+   */
+  getVerifiedAccessEndpointPolicy(callback?: (err: AWSError, data: EC2.Types.GetVerifiedAccessEndpointPolicyResult) => void): Request<EC2.Types.GetVerifiedAccessEndpointPolicyResult, AWSError>;
+  /**
+   * Shows the contents of the Verified Access policy associated with the group.
+   */
+  getVerifiedAccessGroupPolicy(params: EC2.Types.GetVerifiedAccessGroupPolicyRequest, callback?: (err: AWSError, data: EC2.Types.GetVerifiedAccessGroupPolicyResult) => void): Request<EC2.Types.GetVerifiedAccessGroupPolicyResult, AWSError>;
+  /**
+   * Shows the contents of the Verified Access policy associated with the group.
+   */
+  getVerifiedAccessGroupPolicy(callback?: (err: AWSError, data: EC2.Types.GetVerifiedAccessGroupPolicyResult) => void): Request<EC2.Types.GetVerifiedAccessGroupPolicyResult, AWSError>;
   /**
    * Download an Amazon Web Services-provided sample configuration file to be used with the customer gateway device specified for your Site-to-Site VPN connection.
    */
@@ -3405,11 +3581,11 @@ declare class EC2 extends Service {
    */
   importVolume(callback?: (err: AWSError, data: EC2.Types.ImportVolumeResult) => void): Request<EC2.Types.ImportVolumeResult, AWSError>;
   /**
-   * Lists one or more AMIs that are currently in the Recycle Bin. For more information, see Recycle Bin in the Amazon Elastic Compute Cloud User Guide.
+   * Lists one or more AMIs that are currently in the Recycle Bin. For more information, see Recycle Bin in the Amazon EC2 User Guide.
    */
   listImagesInRecycleBin(params: EC2.Types.ListImagesInRecycleBinRequest, callback?: (err: AWSError, data: EC2.Types.ListImagesInRecycleBinResult) => void): Request<EC2.Types.ListImagesInRecycleBinResult, AWSError>;
   /**
-   * Lists one or more AMIs that are currently in the Recycle Bin. For more information, see Recycle Bin in the Amazon Elastic Compute Cloud User Guide.
+   * Lists one or more AMIs that are currently in the Recycle Bin. For more information, see Recycle Bin in the Amazon EC2 User Guide.
    */
   listImagesInRecycleBin(callback?: (err: AWSError, data: EC2.Types.ListImagesInRecycleBinResult) => void): Request<EC2.Types.ListImagesInRecycleBinResult, AWSError>;
   /**
@@ -3756,6 +3932,62 @@ declare class EC2 extends Service {
    * Modifies the specified VPC attachment.
    */
   modifyTransitGatewayVpcAttachment(callback?: (err: AWSError, data: EC2.Types.ModifyTransitGatewayVpcAttachmentResult) => void): Request<EC2.Types.ModifyTransitGatewayVpcAttachmentResult, AWSError>;
+  /**
+   * Modifies the configuration of an Amazon Web Services Verified Access endpoint.
+   */
+  modifyVerifiedAccessEndpoint(params: EC2.Types.ModifyVerifiedAccessEndpointRequest, callback?: (err: AWSError, data: EC2.Types.ModifyVerifiedAccessEndpointResult) => void): Request<EC2.Types.ModifyVerifiedAccessEndpointResult, AWSError>;
+  /**
+   * Modifies the configuration of an Amazon Web Services Verified Access endpoint.
+   */
+  modifyVerifiedAccessEndpoint(callback?: (err: AWSError, data: EC2.Types.ModifyVerifiedAccessEndpointResult) => void): Request<EC2.Types.ModifyVerifiedAccessEndpointResult, AWSError>;
+  /**
+   * Modifies the specified Verified Access endpoint policy.
+   */
+  modifyVerifiedAccessEndpointPolicy(params: EC2.Types.ModifyVerifiedAccessEndpointPolicyRequest, callback?: (err: AWSError, data: EC2.Types.ModifyVerifiedAccessEndpointPolicyResult) => void): Request<EC2.Types.ModifyVerifiedAccessEndpointPolicyResult, AWSError>;
+  /**
+   * Modifies the specified Verified Access endpoint policy.
+   */
+  modifyVerifiedAccessEndpointPolicy(callback?: (err: AWSError, data: EC2.Types.ModifyVerifiedAccessEndpointPolicyResult) => void): Request<EC2.Types.ModifyVerifiedAccessEndpointPolicyResult, AWSError>;
+  /**
+   * Modifies the specified Verified Access group configuration.
+   */
+  modifyVerifiedAccessGroup(params: EC2.Types.ModifyVerifiedAccessGroupRequest, callback?: (err: AWSError, data: EC2.Types.ModifyVerifiedAccessGroupResult) => void): Request<EC2.Types.ModifyVerifiedAccessGroupResult, AWSError>;
+  /**
+   * Modifies the specified Verified Access group configuration.
+   */
+  modifyVerifiedAccessGroup(callback?: (err: AWSError, data: EC2.Types.ModifyVerifiedAccessGroupResult) => void): Request<EC2.Types.ModifyVerifiedAccessGroupResult, AWSError>;
+  /**
+   * Modifies the specified Verified Access group policy.
+   */
+  modifyVerifiedAccessGroupPolicy(params: EC2.Types.ModifyVerifiedAccessGroupPolicyRequest, callback?: (err: AWSError, data: EC2.Types.ModifyVerifiedAccessGroupPolicyResult) => void): Request<EC2.Types.ModifyVerifiedAccessGroupPolicyResult, AWSError>;
+  /**
+   * Modifies the specified Verified Access group policy.
+   */
+  modifyVerifiedAccessGroupPolicy(callback?: (err: AWSError, data: EC2.Types.ModifyVerifiedAccessGroupPolicyResult) => void): Request<EC2.Types.ModifyVerifiedAccessGroupPolicyResult, AWSError>;
+  /**
+   * Modifies the configuration of the specified Verified Access instance.
+   */
+  modifyVerifiedAccessInstance(params: EC2.Types.ModifyVerifiedAccessInstanceRequest, callback?: (err: AWSError, data: EC2.Types.ModifyVerifiedAccessInstanceResult) => void): Request<EC2.Types.ModifyVerifiedAccessInstanceResult, AWSError>;
+  /**
+   * Modifies the configuration of the specified Verified Access instance.
+   */
+  modifyVerifiedAccessInstance(callback?: (err: AWSError, data: EC2.Types.ModifyVerifiedAccessInstanceResult) => void): Request<EC2.Types.ModifyVerifiedAccessInstanceResult, AWSError>;
+  /**
+   * Modifies the logging configuration for the specified Amazon Web Services Verified Access instance.
+   */
+  modifyVerifiedAccessInstanceLoggingConfiguration(params: EC2.Types.ModifyVerifiedAccessInstanceLoggingConfigurationRequest, callback?: (err: AWSError, data: EC2.Types.ModifyVerifiedAccessInstanceLoggingConfigurationResult) => void): Request<EC2.Types.ModifyVerifiedAccessInstanceLoggingConfigurationResult, AWSError>;
+  /**
+   * Modifies the logging configuration for the specified Amazon Web Services Verified Access instance.
+   */
+  modifyVerifiedAccessInstanceLoggingConfiguration(callback?: (err: AWSError, data: EC2.Types.ModifyVerifiedAccessInstanceLoggingConfigurationResult) => void): Request<EC2.Types.ModifyVerifiedAccessInstanceLoggingConfigurationResult, AWSError>;
+  /**
+   * Modifies the configuration of the specified Amazon Web Services Verified Access trust provider.
+   */
+  modifyVerifiedAccessTrustProvider(params: EC2.Types.ModifyVerifiedAccessTrustProviderRequest, callback?: (err: AWSError, data: EC2.Types.ModifyVerifiedAccessTrustProviderResult) => void): Request<EC2.Types.ModifyVerifiedAccessTrustProviderResult, AWSError>;
+  /**
+   * Modifies the configuration of the specified Amazon Web Services Verified Access trust provider.
+   */
+  modifyVerifiedAccessTrustProvider(callback?: (err: AWSError, data: EC2.Types.ModifyVerifiedAccessTrustProviderResult) => void): Request<EC2.Types.ModifyVerifiedAccessTrustProviderResult, AWSError>;
   /**
    * You can modify several parameters of an existing EBS volume, including volume size, volume type, and IOPS capacity. If your EBS volume is attached to a current-generation EC2 instance type, you might be able to apply these changes without stopping the instance or detaching the volume from it. For more information about modifying EBS volumes, see Amazon EBS Elastic Volumes (Linux instances) or Amazon EBS Elastic Volumes (Windows instances). When you complete a resize operation on your volume, you need to extend the volume's file-system size to take advantage of the new storage capacity. For more information, see Extend a Linux file system or Extend a Windows file system.  You can use CloudWatch Events to check the status of a modification to an EBS volume. For information about CloudWatch Events, see the Amazon CloudWatch Events User Guide. You can also track the status of a modification using DescribeVolumesModifications. For information about tracking status changes using either method, see Monitor the progress of volume modifications. With previous-generation instance types, resizing an EBS volume might require detaching and reattaching the volume or stopping and restarting the instance. After modifying a volume, you must wait at least six hours and ensure that the volume is in the in-use or available state before you can modify the same volume. This is sometimes referred to as a cooldown period.
    */
@@ -3949,11 +4181,11 @@ declare class EC2 extends Service {
    */
   rebootInstances(callback?: (err: AWSError, data: {}) => void): Request<{}, AWSError>;
   /**
-   * Registers an AMI. When you're creating an AMI, this is the final step you must complete before you can launch an instance from the AMI. For more information about creating AMIs, see Create your own AMI in the Amazon Elastic Compute Cloud User Guide.  For Amazon EBS-backed instances, CreateImage creates and registers the AMI in a single request, so you don't have to register the AMI yourself. We recommend that you always use CreateImage unless you have a specific reason to use RegisterImage.  If needed, you can deregister an AMI at any time. Any modifications you make to an AMI backed by an instance store volume invalidates its registration. If you make changes to an image, deregister the previous image and register the new image.  Register a snapshot of a root device volume  You can use RegisterImage to create an Amazon EBS-backed Linux AMI from a snapshot of a root device volume. You specify the snapshot using a block device mapping. You can't set the encryption state of the volume using the block device mapping. If the snapshot is encrypted, or encryption by default is enabled, the root volume of an instance launched from the AMI is encrypted. For more information, see Create a Linux AMI from a snapshot and Use encryption with Amazon EBS-backed AMIs in the Amazon Elastic Compute Cloud User Guide.  Amazon Web Services Marketplace product codes  If any snapshots have Amazon Web Services Marketplace product codes, they are copied to the new AMI. Windows and some Linux distributions, such as Red Hat Enterprise Linux (RHEL) and SUSE Linux Enterprise Server (SLES), use the Amazon EC2 billing product code associated with an AMI to verify the subscription status for package updates. To create a new AMI for operating systems that require a billing product code, instead of registering the AMI, do the following to preserve the billing product code association:   Launch an instance from an existing AMI with that billing product code.   Customize the instance.   Create an AMI from the instance using CreateImage.   If you purchase a Reserved Instance to apply to an On-Demand Instance that was launched from an AMI with a billing product code, make sure that the Reserved Instance has the matching billing product code. If you purchase a Reserved Instance without the matching billing product code, the Reserved Instance will not be applied to the On-Demand Instance. For information about how to obtain the platform details and billing information of an AMI, see Understand AMI billing information in the Amazon Elastic Compute Cloud User Guide.
+   * Registers an AMI. When you're creating an AMI, this is the final step you must complete before you can launch an instance from the AMI. For more information about creating AMIs, see Create your own AMI in the Amazon Elastic Compute Cloud User Guide.  For Amazon EBS-backed instances, CreateImage creates and registers the AMI in a single request, so you don't have to register the AMI yourself. We recommend that you always use CreateImage unless you have a specific reason to use RegisterImage.  If needed, you can deregister an AMI at any time. Any modifications you make to an AMI backed by an instance store volume invalidates its registration. If you make changes to an image, deregister the previous image and register the new image.  Register a snapshot of a root device volume  You can use RegisterImage to create an Amazon EBS-backed Linux AMI from a snapshot of a root device volume. You specify the snapshot using a block device mapping. You can't set the encryption state of the volume using the block device mapping. If the snapshot is encrypted, or encryption by default is enabled, the root volume of an instance launched from the AMI is encrypted. For more information, see Create a Linux AMI from a snapshot and Use encryption with Amazon EBS-backed AMIs in the Amazon Elastic Compute Cloud User Guide.  Amazon Web Services Marketplace product codes  If any snapshots have Amazon Web Services Marketplace product codes, they are copied to the new AMI. Windows and some Linux distributions, such as Red Hat Enterprise Linux (RHEL) and SUSE Linux Enterprise Server (SLES), use the Amazon EC2 billing product code associated with an AMI to verify the subscription status for package updates. To create a new AMI for operating systems that require a billing product code, instead of registering the AMI, do the following to preserve the billing product code association:   Launch an instance from an existing AMI with that billing product code.   Customize the instance.   Create an AMI from the instance using CreateImage.   If you purchase a Reserved Instance to apply to an On-Demand Instance that was launched from an AMI with a billing product code, make sure that the Reserved Instance has the matching billing product code. If you purchase a Reserved Instance without the matching billing product code, the Reserved Instance will not be applied to the On-Demand Instance. For information about how to obtain the platform details and billing information of an AMI, see Understand AMI billing information in the Amazon EC2 User Guide.
    */
   registerImage(params: EC2.Types.RegisterImageRequest, callback?: (err: AWSError, data: EC2.Types.RegisterImageResult) => void): Request<EC2.Types.RegisterImageResult, AWSError>;
   /**
-   * Registers an AMI. When you're creating an AMI, this is the final step you must complete before you can launch an instance from the AMI. For more information about creating AMIs, see Create your own AMI in the Amazon Elastic Compute Cloud User Guide.  For Amazon EBS-backed instances, CreateImage creates and registers the AMI in a single request, so you don't have to register the AMI yourself. We recommend that you always use CreateImage unless you have a specific reason to use RegisterImage.  If needed, you can deregister an AMI at any time. Any modifications you make to an AMI backed by an instance store volume invalidates its registration. If you make changes to an image, deregister the previous image and register the new image.  Register a snapshot of a root device volume  You can use RegisterImage to create an Amazon EBS-backed Linux AMI from a snapshot of a root device volume. You specify the snapshot using a block device mapping. You can't set the encryption state of the volume using the block device mapping. If the snapshot is encrypted, or encryption by default is enabled, the root volume of an instance launched from the AMI is encrypted. For more information, see Create a Linux AMI from a snapshot and Use encryption with Amazon EBS-backed AMIs in the Amazon Elastic Compute Cloud User Guide.  Amazon Web Services Marketplace product codes  If any snapshots have Amazon Web Services Marketplace product codes, they are copied to the new AMI. Windows and some Linux distributions, such as Red Hat Enterprise Linux (RHEL) and SUSE Linux Enterprise Server (SLES), use the Amazon EC2 billing product code associated with an AMI to verify the subscription status for package updates. To create a new AMI for operating systems that require a billing product code, instead of registering the AMI, do the following to preserve the billing product code association:   Launch an instance from an existing AMI with that billing product code.   Customize the instance.   Create an AMI from the instance using CreateImage.   If you purchase a Reserved Instance to apply to an On-Demand Instance that was launched from an AMI with a billing product code, make sure that the Reserved Instance has the matching billing product code. If you purchase a Reserved Instance without the matching billing product code, the Reserved Instance will not be applied to the On-Demand Instance. For information about how to obtain the platform details and billing information of an AMI, see Understand AMI billing information in the Amazon Elastic Compute Cloud User Guide.
+   * Registers an AMI. When you're creating an AMI, this is the final step you must complete before you can launch an instance from the AMI. For more information about creating AMIs, see Create your own AMI in the Amazon Elastic Compute Cloud User Guide.  For Amazon EBS-backed instances, CreateImage creates and registers the AMI in a single request, so you don't have to register the AMI yourself. We recommend that you always use CreateImage unless you have a specific reason to use RegisterImage.  If needed, you can deregister an AMI at any time. Any modifications you make to an AMI backed by an instance store volume invalidates its registration. If you make changes to an image, deregister the previous image and register the new image.  Register a snapshot of a root device volume  You can use RegisterImage to create an Amazon EBS-backed Linux AMI from a snapshot of a root device volume. You specify the snapshot using a block device mapping. You can't set the encryption state of the volume using the block device mapping. If the snapshot is encrypted, or encryption by default is enabled, the root volume of an instance launched from the AMI is encrypted. For more information, see Create a Linux AMI from a snapshot and Use encryption with Amazon EBS-backed AMIs in the Amazon Elastic Compute Cloud User Guide.  Amazon Web Services Marketplace product codes  If any snapshots have Amazon Web Services Marketplace product codes, they are copied to the new AMI. Windows and some Linux distributions, such as Red Hat Enterprise Linux (RHEL) and SUSE Linux Enterprise Server (SLES), use the Amazon EC2 billing product code associated with an AMI to verify the subscription status for package updates. To create a new AMI for operating systems that require a billing product code, instead of registering the AMI, do the following to preserve the billing product code association:   Launch an instance from an existing AMI with that billing product code.   Customize the instance.   Create an AMI from the instance using CreateImage.   If you purchase a Reserved Instance to apply to an On-Demand Instance that was launched from an AMI with a billing product code, make sure that the Reserved Instance has the matching billing product code. If you purchase a Reserved Instance without the matching billing product code, the Reserved Instance will not be applied to the On-Demand Instance. For information about how to obtain the platform details and billing information of an AMI, see Understand AMI billing information in the Amazon EC2 User Guide.
    */
   registerImage(callback?: (err: AWSError, data: EC2.Types.RegisterImageResult) => void): Request<EC2.Types.RegisterImageResult, AWSError>;
   /**
@@ -4181,11 +4413,11 @@ declare class EC2 extends Service {
    */
   restoreAddressToClassic(callback?: (err: AWSError, data: EC2.Types.RestoreAddressToClassicResult) => void): Request<EC2.Types.RestoreAddressToClassicResult, AWSError>;
   /**
-   * Restores an AMI from the Recycle Bin. For more information, see Recycle Bin in the Amazon Elastic Compute Cloud User Guide.
+   * Restores an AMI from the Recycle Bin. For more information, see Recycle Bin in the Amazon EC2 User Guide.
    */
   restoreImageFromRecycleBin(params: EC2.Types.RestoreImageFromRecycleBinRequest, callback?: (err: AWSError, data: EC2.Types.RestoreImageFromRecycleBinResult) => void): Request<EC2.Types.RestoreImageFromRecycleBinResult, AWSError>;
   /**
-   * Restores an AMI from the Recycle Bin. For more information, see Recycle Bin in the Amazon Elastic Compute Cloud User Guide.
+   * Restores an AMI from the Recycle Bin. For more information, see Recycle Bin in the Amazon EC2 User Guide.
    */
   restoreImageFromRecycleBin(callback?: (err: AWSError, data: EC2.Types.RestoreImageFromRecycleBinResult) => void): Request<EC2.Types.RestoreImageFromRecycleBinResult, AWSError>;
   /**
@@ -4767,6 +4999,9 @@ declare namespace EC2 {
     DryRun?: Boolean;
   }
   export interface AcceptTransitGatewayMulticastDomainAssociationsResult {
+    /**
+     * Information about the multicast domain associations.
+     */
     Associations?: TransitGatewayMulticastDomainAssociations;
   }
   export interface AcceptTransitGatewayPeeringAttachmentRequest {
@@ -4829,7 +5064,7 @@ declare namespace EC2 {
     /**
      * The ID of the VPC peering connection. You must specify this parameter in the request.
      */
-    VpcPeeringConnectionId?: VpcPeeringConnectionId;
+    VpcPeeringConnectionId?: VpcPeeringConnectionIdWithResolver;
   }
   export interface AcceptVpcPeeringConnectionResult {
     /**
@@ -6035,6 +6270,10 @@ declare namespace EC2 {
      * The index of the network card. Some instance types support multiple network cards. The primary network interface must be assigned to network card index 0. The default is network card index 0.
      */
     NetworkCardIndex?: Integer;
+    /**
+     * Configures ENA Express for the network interface that this action attaches to the instance.
+     */
+    EnaSrdSpecification?: EnaSrdSpecification;
   }
   export interface AttachNetworkInterfaceResult {
     /**
@@ -6046,6 +6285,34 @@ declare namespace EC2 {
      */
     NetworkCardIndex?: Integer;
   }
+  export interface AttachVerifiedAccessTrustProviderRequest {
+    /**
+     * The ID of the Amazon Web Services Verified Access instance.
+     */
+    VerifiedAccessInstanceId: VerifiedAccessInstanceId;
+    /**
+     * The ID of the Amazon Web Services Verified Access trust provider.
+     */
+    VerifiedAccessTrustProviderId: VerifiedAccessTrustProviderId;
+    /**
+     * A unique, case-sensitive token that you provide to ensure idempotency of your modification request. For more information, see Ensuring Idempotency.
+     */
+    ClientToken?: String;
+    /**
+     * Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.
+     */
+    DryRun?: Boolean;
+  }
+  export interface AttachVerifiedAccessTrustProviderResult {
+    /**
+     * The ID of the Amazon Web Services Verified Access trust provider.
+     */
+    VerifiedAccessTrustProvider?: VerifiedAccessTrustProvider;
+    /**
+     * The ID of the Amazon Web Services Verified Access instance.
+     */
+    VerifiedAccessInstance?: VerifiedAccessInstance;
+  }
   export interface AttachVolumeRequest {
     /**
      * The device name (for example, /dev/sdh or xvdh).
@@ -6084,6 +6351,22 @@ declare namespace EC2 {
      */
     VpcAttachment?: VpcAttachment;
   }
+  export interface AttachmentEnaSrdSpecification {
+    /**
+     * Indicates whether ENA Express is enabled for the network interface that's attached to the instance.
+     */
+    EnaSrdEnabled?: Boolean;
+    /**
+     * ENA Express configuration for UDP network traffic.
+     */
+    EnaSrdUdpSpecification?: AttachmentEnaSrdUdpSpecification;
+  }
+  export interface AttachmentEnaSrdUdpSpecification {
+    /**
+     * Indicates whether UDP traffic to and from the instance uses ENA Express. To specify this setting, you must first enable ENA Express.
+     */
+    EnaSrdUdpEnabled?: Boolean;
+  }
   export type AttachmentStatus = "attaching"|"attached"|"detaching"|"detached"|string;
   export interface AttributeBooleanValue {
     /**
@@ -6987,6 +7270,7 @@ declare namespace EC2 {
   export type CarrierGatewayMaxResults = number;
   export type CarrierGatewaySet = CarrierGateway[];
   export type CarrierGatewayState = "pending"|"available"|"deleting"|"deleted"|string;
+  export type CertificateArn = string;
   export interface CertificateAuthentication {
     /**
      * The ARN of the client certificate. 
@@ -7668,7 +7952,7 @@ declare namespace EC2 {
      */
     Description?: String;
     /**
-     * Specifies whether the destination snapshots of the copied image should be encrypted. You can encrypt a copy of an unencrypted snapshot, but you cannot create an unencrypted copy of an encrypted snapshot. The default KMS key for Amazon EBS is used unless you specify a non-default Key Management Service (KMS) KMS key using KmsKeyId. For more information, see Amazon EBS encryption in the Amazon Elastic Compute Cloud User Guide.
+     * Specifies whether the destination snapshots of the copied image should be encrypted. You can encrypt a copy of an unencrypted snapshot, but you cannot create an unencrypted copy of an encrypted snapshot. The default KMS key for Amazon EBS is used unless you specify a non-default Key Management Service (KMS) KMS key using KmsKeyId. For more information, see Amazon EBS encryption in the Amazon EC2 User Guide.
      */
     Encrypted?: Boolean;
     /**
@@ -7688,7 +7972,7 @@ declare namespace EC2 {
      */
     SourceRegion: String;
     /**
-     * The Amazon Resource Name (ARN) of the Outpost to which to copy the AMI. Only specify this parameter when copying an AMI from an Amazon Web Services Region to an Outpost. The AMI must be in the Region of the destination Outpost. You cannot copy an AMI from an Outpost to a Region, from one Outpost to another, or within the same Outpost. For more information, see  Copy AMIs from an Amazon Web Services Region to an Outpost in the Amazon Elastic Compute Cloud User Guide.
+     * The Amazon Resource Name (ARN) of the Outpost to which to copy the AMI. Only specify this parameter when copying an AMI from an Amazon Web Services Region to an Outpost. The AMI must be in the Region of the destination Outpost. You cannot copy an AMI from an Outpost to a Region, from one Outpost to another, or within the same Outpost. For more information, see  Copy AMIs from an Amazon Web Services Region to an Outpost in the Amazon EC2 User Guide.
      */
     DestinationOutpostArn?: String;
     /**
@@ -8119,6 +8403,9 @@ declare namespace EC2 {
     DryRun?: Boolean;
   }
   export interface CreateCoipPoolResult {
+    /**
+     * Information about the CoIP address pool.
+     */
     CoipPool?: CoipPool;
   }
   export interface CreateCustomerGatewayRequest {
@@ -8844,6 +9131,9 @@ declare namespace EC2 {
     DryRun?: Boolean;
   }
   export interface CreateLocalGatewayRouteTableResult {
+    /**
+     * Information about the local gateway route table.
+     */
     LocalGatewayRouteTable?: LocalGatewayRouteTable;
   }
   export interface CreateLocalGatewayRouteTableVirtualInterfaceGroupAssociationRequest {
@@ -8865,6 +9155,9 @@ declare namespace EC2 {
     DryRun?: Boolean;
   }
   export interface CreateLocalGatewayRouteTableVirtualInterfaceGroupAssociationResult {
+    /**
+     * Information about the local gateway route table virtual interface group association.
+     */
     LocalGatewayRouteTableVirtualInterfaceGroupAssociation?: LocalGatewayRouteTableVirtualInterfaceGroupAssociation;
   }
   export interface CreateLocalGatewayRouteTableVpcAssociationRequest {
@@ -10173,6 +10466,243 @@ declare namespace EC2 {
      */
     TransitGatewayVpcAttachment?: TransitGatewayVpcAttachment;
   }
+  export interface CreateVerifiedAccessEndpointEniOptions {
+    /**
+     * The ID of the network interface.
+     */
+    NetworkInterfaceId?: NetworkInterfaceId;
+    /**
+     * The IP protocol.
+     */
+    Protocol?: VerifiedAccessEndpointProtocol;
+    /**
+     * The IP port number.
+     */
+    Port?: VerifiedAccessEndpointPortNumber;
+  }
+  export interface CreateVerifiedAccessEndpointLoadBalancerOptions {
+    /**
+     * The IP protocol.
+     */
+    Protocol?: VerifiedAccessEndpointProtocol;
+    /**
+     * The IP port number.
+     */
+    Port?: VerifiedAccessEndpointPortNumber;
+    /**
+     * The ARN of the load balancer.
+     */
+    LoadBalancerArn?: LoadBalancerArn;
+    /**
+     * The IDs of the subnets.
+     */
+    SubnetIds?: CreateVerifiedAccessEndpointSubnetIdList;
+  }
+  export interface CreateVerifiedAccessEndpointRequest {
+    /**
+     * The ID of the Verified Access group to associate the endpoint with.
+     */
+    VerifiedAccessGroupId: VerifiedAccessGroupId;
+    /**
+     * The type of Amazon Web Services Verified Access endpoint to create.
+     */
+    EndpointType: VerifiedAccessEndpointType;
+    /**
+     * The Amazon Web Services network component Verified Access attaches to.
+     */
+    AttachmentType: VerifiedAccessEndpointAttachmentType;
+    /**
+     * The ARN of the public TLS/SSL certificate in Amazon Web Services Certificate Manager to associate with the endpoint. The CN in the certificate must match the DNS name your end users will use to reach your application.
+     */
+    DomainCertificateArn: CertificateArn;
+    /**
+     * The DNS name for users to reach your application.
+     */
+    ApplicationDomain: String;
+    /**
+     * A custom identifier that gets prepended to a DNS name that is generated for the endpoint.
+     */
+    EndpointDomainPrefix: String;
+    /**
+     * The Amazon EC2 security groups to associate with the Amazon Web Services Verified Access endpoint.
+     */
+    SecurityGroupIds?: SecurityGroupIdList;
+    /**
+     * The load balancer details if creating the Amazon Web Services Verified Access endpoint as load-balancertype.
+     */
+    LoadBalancerOptions?: CreateVerifiedAccessEndpointLoadBalancerOptions;
+    /**
+     * The network interface details if creating the Amazon Web Services Verified Access endpoint as network-interfacetype.
+     */
+    NetworkInterfaceOptions?: CreateVerifiedAccessEndpointEniOptions;
+    /**
+     * A description for the Amazon Web Services Verified Access endpoint.
+     */
+    Description?: String;
+    /**
+     * The Amazon Web Services Verified Access policy document.
+     */
+    PolicyDocument?: String;
+    /**
+     * The tags to assign to the Amazon Web Services Verified Access endpoint.
+     */
+    TagSpecifications?: TagSpecificationList;
+    /**
+     * A unique, case-sensitive token that you provide to ensure idempotency of your modification request. For more information, see Ensuring Idempotency.
+     */
+    ClientToken?: String;
+    /**
+     * Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.
+     */
+    DryRun?: Boolean;
+  }
+  export interface CreateVerifiedAccessEndpointResult {
+    /**
+     * The ID of the Amazon Web Services Verified Access endpoint.
+     */
+    VerifiedAccessEndpoint?: VerifiedAccessEndpoint;
+  }
+  export type CreateVerifiedAccessEndpointSubnetIdList = SubnetId[];
+  export interface CreateVerifiedAccessGroupRequest {
+    /**
+     * The ID of the Amazon Web Services Verified Access instance.
+     */
+    VerifiedAccessInstanceId: VerifiedAccessInstanceId;
+    /**
+     * A description for the Amazon Web Services Verified Access group.
+     */
+    Description?: String;
+    /**
+     * The Amazon Web Services Verified Access policy document.
+     */
+    PolicyDocument?: String;
+    /**
+     * The tags to assign to the Amazon Web Services Verified Access group.
+     */
+    TagSpecifications?: TagSpecificationList;
+    /**
+     * A unique, case-sensitive token that you provide to ensure idempotency of your modification request. For more information, see Ensuring Idempotency.
+     */
+    ClientToken?: String;
+    /**
+     * Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.
+     */
+    DryRun?: Boolean;
+  }
+  export interface CreateVerifiedAccessGroupResult {
+    /**
+     * The ID of the Verified Access group.
+     */
+    VerifiedAccessGroup?: VerifiedAccessGroup;
+  }
+  export interface CreateVerifiedAccessInstanceRequest {
+    /**
+     * A description for the Amazon Web Services Verified Access instance.
+     */
+    Description?: String;
+    /**
+     * The tags to assign to the Amazon Web Services Verified Access instance.
+     */
+    TagSpecifications?: TagSpecificationList;
+    /**
+     * A unique, case-sensitive token that you provide to ensure idempotency of your modification request. For more information, see Ensuring Idempotency.
+     */
+    ClientToken?: String;
+    /**
+     * Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.
+     */
+    DryRun?: Boolean;
+  }
+  export interface CreateVerifiedAccessInstanceResult {
+    /**
+     * The ID of the Amazon Web Services Verified Access instance.
+     */
+    VerifiedAccessInstance?: VerifiedAccessInstance;
+  }
+  export interface CreateVerifiedAccessTrustProviderDeviceOptions {
+    /**
+     * The ID of the tenant application with the device-identity provider.
+     */
+    TenantId?: String;
+  }
+  export interface CreateVerifiedAccessTrustProviderOidcOptions {
+    /**
+     * The OIDC issuer.
+     */
+    Issuer?: String;
+    /**
+     * The OIDC authorization endpoint.
+     */
+    AuthorizationEndpoint?: String;
+    /**
+     * The OIDC token endpoint.
+     */
+    TokenEndpoint?: String;
+    /**
+     * The OIDC user info endpoint.
+     */
+    UserInfoEndpoint?: String;
+    /**
+     * The client identifier.
+     */
+    ClientId?: String;
+    /**
+     * The client secret.
+     */
+    ClientSecret?: String;
+    /**
+     * OpenID Connect (OIDC) scopes are used by an application during authentication to authorize access to a user's details. Each scope returns a specific set of user attributes.
+     */
+    Scope?: String;
+  }
+  export interface CreateVerifiedAccessTrustProviderRequest {
+    /**
+     * The type of trust provider can be either user or device-based.
+     */
+    TrustProviderType: TrustProviderType;
+    /**
+     * The type of user-based trust provider.
+     */
+    UserTrustProviderType?: UserTrustProviderType;
+    /**
+     * The type of device-based trust provider.
+     */
+    DeviceTrustProviderType?: DeviceTrustProviderType;
+    /**
+     * The OpenID Connect details for an oidc-type, user-identity based trust provider.
+     */
+    OidcOptions?: CreateVerifiedAccessTrustProviderOidcOptions;
+    /**
+     * The options for device identity based trust providers.
+     */
+    DeviceOptions?: CreateVerifiedAccessTrustProviderDeviceOptions;
+    /**
+     * The identifier to be used when working with policy rules.
+     */
+    PolicyReferenceName: String;
+    /**
+     * A description for the Amazon Web Services Verified Access trust provider.
+     */
+    Description?: String;
+    /**
+     * The tags to assign to the Amazon Web Services Verified Access trust provider.
+     */
+    TagSpecifications?: TagSpecificationList;
+    /**
+     * A unique, case-sensitive token that you provide to ensure idempotency of your modification request. For more information, see Ensuring Idempotency.
+     */
+    ClientToken?: String;
+    /**
+     * Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.
+     */
+    DryRun?: Boolean;
+  }
+  export interface CreateVerifiedAccessTrustProviderResult {
+    /**
+     * The ID of the Amazon Web Services Verified Access trust provider.
+     */
+    VerifiedAccessTrustProvider?: VerifiedAccessTrustProvider;
+  }
   export interface CreateVolumePermission {
     /**
      * The group to be added or removed. The possible value is all.
@@ -10607,6 +11137,64 @@ declare namespace EC2 {
   export type CustomerGatewayList = CustomerGateway[];
   export type DITMaxResults = number;
   export type DITOMaxResults = number;
+  export type DataQueries = DataQuery[];
+  export interface DataQuery {
+    /**
+     * A user-defined ID associated with a data query that's returned in the dataResponse identifying the query. For example, if you set the Id to MyQuery01in the query, the dataResponse identifies the query as MyQuery01.
+     */
+    Id?: String;
+    /**
+     * The Region or Availability Zone that's the source for the data query. For example, us-east-1.
+     */
+    Source?: String;
+    /**
+     * The Region or Availability Zone that's the target for the data query. For example, eu-north-1.
+     */
+    Destination?: String;
+    /**
+     * The aggregation metric used for the data query. Currently only aggregation-latency is supported, indicating network latency.
+     */
+    Metric?: MetricType;
+    /**
+     * Metric data aggregations over specified periods of time. The following are the supported Infrastructure Performance statistics:    p50 - The median value of the metric aggregated over a specified start and end time. For example, a metric of five_minutes is the median of all the data points gathered within those five minutes.  
+     */
+    Statistic?: StatisticType;
+    /**
+     * The aggregation period used for the data query.
+     */
+    Period?: PeriodType;
+  }
+  export interface DataResponse {
+    /**
+     * The ID passed in the DataQuery.
+     */
+    Id?: String;
+    /**
+     * The Region or Availability Zone that's the source for the data query. For example, us-east-1.
+     */
+    Source?: String;
+    /**
+     * The Region or Availability Zone that's the destination for the data query. For example, eu-west-1.
+     */
+    Destination?: String;
+    /**
+     * The metric used for the network performance request. Currently only aggregate-latency is supported, showing network latency during a specified period. 
+     */
+    Metric?: MetricType;
+    /**
+     * The statistic used for the network performance request.
+     */
+    Statistic?: StatisticType;
+    /**
+     * The period used for the network performance request.
+     */
+    Period?: PeriodType;
+    /**
+     * A list of MetricPoint objects.
+     */
+    MetricPoints?: MetricPoints;
+  }
+  export type DataResponses = DataResponse[];
   export type DatafeedSubscriptionState = "Active"|"Inactive"|string;
   export type DateTime = Date;
   export type DedicatedHostFlag = boolean;
@@ -10704,6 +11292,9 @@ declare namespace EC2 {
     DryRun?: Boolean;
   }
   export interface DeleteCoipPoolResult {
+    /**
+     * Information about the CoIP address pool.
+     */
     CoipPool?: CoipPool;
   }
   export interface DeleteCustomerGatewayRequest {
@@ -11044,6 +11635,9 @@ declare namespace EC2 {
     DryRun?: Boolean;
   }
   export interface DeleteLocalGatewayRouteTableResult {
+    /**
+     * Information about the local gateway route table.
+     */
     LocalGatewayRouteTable?: LocalGatewayRouteTable;
   }
   export interface DeleteLocalGatewayRouteTableVirtualInterfaceGroupAssociationRequest {
@@ -11057,6 +11651,9 @@ declare namespace EC2 {
     DryRun?: Boolean;
   }
   export interface DeleteLocalGatewayRouteTableVirtualInterfaceGroupAssociationResult {
+    /**
+     * Information about the association.
+     */
     LocalGatewayRouteTableVirtualInterfaceGroupAssociation?: LocalGatewayRouteTableVirtualInterfaceGroupAssociation;
   }
   export interface DeleteLocalGatewayRouteTableVpcAssociationRequest {
@@ -11637,6 +12234,86 @@ declare namespace EC2 {
      */
     TransitGatewayVpcAttachment?: TransitGatewayVpcAttachment;
   }
+  export interface DeleteVerifiedAccessEndpointRequest {
+    /**
+     * The ID of the Amazon Web Services Verified Access endpoint.
+     */
+    VerifiedAccessEndpointId: VerifiedAccessEndpointId;
+    /**
+     * A unique, case-sensitive token that you provide to ensure idempotency of your modification request. For more information, see Ensuring Idempotency.
+     */
+    ClientToken?: String;
+    /**
+     * Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.
+     */
+    DryRun?: Boolean;
+  }
+  export interface DeleteVerifiedAccessEndpointResult {
+    /**
+     * The ID of the Amazon Web Services Verified Access endpoint.
+     */
+    VerifiedAccessEndpoint?: VerifiedAccessEndpoint;
+  }
+  export interface DeleteVerifiedAccessGroupRequest {
+    /**
+     * The ID of the Amazon Web Services Verified Access group.
+     */
+    VerifiedAccessGroupId: VerifiedAccessGroupId;
+    /**
+     * A unique, case-sensitive token that you provide to ensure idempotency of your modification request. For more information, see Ensuring Idempotency.
+     */
+    ClientToken?: String;
+    /**
+     * Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.
+     */
+    DryRun?: Boolean;
+  }
+  export interface DeleteVerifiedAccessGroupResult {
+    /**
+     * The ID of the Amazon Web Services Verified Access group.
+     */
+    VerifiedAccessGroup?: VerifiedAccessGroup;
+  }
+  export interface DeleteVerifiedAccessInstanceRequest {
+    /**
+     * The ID of the Amazon Web Services Verified Access instance.
+     */
+    VerifiedAccessInstanceId: VerifiedAccessInstanceId;
+    /**
+     * Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.
+     */
+    DryRun?: Boolean;
+    /**
+     * A unique, case-sensitive token that you provide to ensure idempotency of your modification request. For more information, see Ensuring Idempotency.
+     */
+    ClientToken?: String;
+  }
+  export interface DeleteVerifiedAccessInstanceResult {
+    /**
+     * The ID of the Amazon Web Services Verified Access instance.
+     */
+    VerifiedAccessInstance?: VerifiedAccessInstance;
+  }
+  export interface DeleteVerifiedAccessTrustProviderRequest {
+    /**
+     * The ID of the Amazon Web Services Verified Access trust provider.
+     */
+    VerifiedAccessTrustProviderId: VerifiedAccessTrustProviderId;
+    /**
+     * Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.
+     */
+    DryRun?: Boolean;
+    /**
+     * A unique, case-sensitive token that you provide to ensure idempotency of your modification request. For more information, see Ensuring Idempotency.
+     */
+    ClientToken?: String;
+  }
+  export interface DeleteVerifiedAccessTrustProviderResult {
+    /**
+     * The ID of the Amazon Web Services Verified Access trust provider.
+     */
+    VerifiedAccessTrustProvider?: VerifiedAccessTrustProvider;
+  }
   export interface DeleteVolumeRequest {
     /**
      * The ID of the volume.
@@ -12041,6 +12718,34 @@ declare namespace EC2 {
      */
     AvailabilityZones?: AvailabilityZoneList;
   }
+  export interface DescribeAwsNetworkPerformanceMetricSubscriptionsRequest {
+    /**
+     * The maximum number of results to return with a single call. To retrieve the remaining results, make another call with the returned nextToken value.
+     */
+    MaxResults?: MaxResultsParam;
+    /**
+     * The token for the next page of results.
+     */
+    NextToken?: String;
+    /**
+     * One or more filters.
+     */
+    Filters?: FilterList;
+    /**
+     * Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.
+     */
+    DryRun?: Boolean;
+  }
+  export interface DescribeAwsNetworkPerformanceMetricSubscriptionsResult {
+    /**
+     * The token to use to retrieve the next page of results. This value is null when there are no more results to return.
+     */
+    NextToken?: String;
+    /**
+     * Describes the current Infrastructure Performance subscriptions.
+     */
+    Subscriptions?: SubscriptionList;
+  }
   export interface DescribeBundleTasksRequest {
     /**
      * The bundle task IDs. Default: Describes all your bundle tasks.
@@ -13191,12 +13896,24 @@ declare namespace EC2 {
      * Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.
      */
     DryRun?: Boolean;
+    /**
+     * The maximum number of results to return with a single call. To retrieve the remaining results, make another call with the returned nextToken value.
+     */
+    MaxResults?: Integer;
+    /**
+     * The token for the next page of results.
+     */
+    NextToken?: String;
   }
   export interface DescribeImagesResult {
     /**
      * Information about the images.
      */
     Images?: ImageList;
+    /**
+     * The token to use to retrieve the next page of results. This value is null when there are no more results to return.
+     */
+    NextToken?: String;
   }
   export interface DescribeImportImageTasksRequest {
     /**
@@ -15718,6 +16435,183 @@ declare namespace EC2 {
      */
     NextToken?: String;
   }
+  export type DescribeVerifiedAccessEndpointsMaxResults = number;
+  export interface DescribeVerifiedAccessEndpointsRequest {
+    /**
+     * The ID of the Amazon Web Services Verified Access endpoint.
+     */
+    VerifiedAccessEndpointIds?: VerifiedAccessEndpointIdList;
+    /**
+     * The ID of the Amazon Web Services Verified Access instance.
+     */
+    VerifiedAccessInstanceId?: VerifiedAccessInstanceId;
+    /**
+     * The ID of the Amazon Web Services Verified Access group.
+     */
+    VerifiedAccessGroupId?: VerifiedAccessGroupId;
+    /**
+     * The maximum number of results to return with a single call. To retrieve the remaining results, make another call with the returned nextToken value.
+     */
+    MaxResults?: DescribeVerifiedAccessEndpointsMaxResults;
+    /**
+     * The token for the next page of results.
+     */
+    NextToken?: NextToken;
+    /**
+     * One or more filters. Filter names and values are case-sensitive.
+     */
+    Filters?: FilterList;
+    /**
+     * Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.
+     */
+    DryRun?: Boolean;
+  }
+  export interface DescribeVerifiedAccessEndpointsResult {
+    /**
+     * The ID of the Amazon Web Services Verified Access endpoint.
+     */
+    VerifiedAccessEndpoints?: VerifiedAccessEndpointList;
+    /**
+     * The token to use to retrieve the next page of results. This value is null when there are no more results to return.
+     */
+    NextToken?: NextToken;
+  }
+  export type DescribeVerifiedAccessGroupMaxResults = number;
+  export interface DescribeVerifiedAccessGroupsRequest {
+    /**
+     * The ID of the Amazon Web Services Verified Access groups.
+     */
+    VerifiedAccessGroupIds?: VerifiedAccessGroupIdList;
+    /**
+     * The ID of the Amazon Web Services Verified Access instance.
+     */
+    VerifiedAccessInstanceId?: VerifiedAccessInstanceId;
+    /**
+     * The maximum number of results to return with a single call. To retrieve the remaining results, make another call with the returned nextToken value.
+     */
+    MaxResults?: DescribeVerifiedAccessGroupMaxResults;
+    /**
+     * The token for the next page of results.
+     */
+    NextToken?: NextToken;
+    /**
+     * One or more filters. Filter names and values are case-sensitive.
+     */
+    Filters?: FilterList;
+    /**
+     * Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.
+     */
+    DryRun?: Boolean;
+  }
+  export interface DescribeVerifiedAccessGroupsResult {
+    /**
+     * The ID of the Verified Access group.
+     */
+    VerifiedAccessGroups?: VerifiedAccessGroupList;
+    /**
+     * The token to use to retrieve the next page of results. This value is null when there are no more results to return.
+     */
+    NextToken?: NextToken;
+  }
+  export type DescribeVerifiedAccessInstanceLoggingConfigurationsMaxResults = number;
+  export interface DescribeVerifiedAccessInstanceLoggingConfigurationsRequest {
+    /**
+     * The IDs of the Amazon Web Services Verified Access instances.
+     */
+    VerifiedAccessInstanceIds?: VerifiedAccessInstanceIdList;
+    /**
+     * The maximum number of results to return with a single call. To retrieve the remaining results, make another call with the returned nextToken value.
+     */
+    MaxResults?: DescribeVerifiedAccessInstanceLoggingConfigurationsMaxResults;
+    /**
+     * The token for the next page of results.
+     */
+    NextToken?: NextToken;
+    /**
+     * One or more filters. Filter names and values are case-sensitive.
+     */
+    Filters?: FilterList;
+    /**
+     * Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.
+     */
+    DryRun?: Boolean;
+  }
+  export interface DescribeVerifiedAccessInstanceLoggingConfigurationsResult {
+    /**
+     * The current logging configuration for the Amazon Web Services Verified Access instances.
+     */
+    LoggingConfigurations?: VerifiedAccessInstanceLoggingConfigurationList;
+    /**
+     * The token to use to retrieve the next page of results. This value is null when there are no more results to return.
+     */
+    NextToken?: NextToken;
+  }
+  export type DescribeVerifiedAccessInstancesMaxResults = number;
+  export interface DescribeVerifiedAccessInstancesRequest {
+    /**
+     * The IDs of the Amazon Web Services Verified Access instances.
+     */
+    VerifiedAccessInstanceIds?: VerifiedAccessInstanceIdList;
+    /**
+     * The maximum number of results to return with a single call. To retrieve the remaining results, make another call with the returned nextToken value.
+     */
+    MaxResults?: DescribeVerifiedAccessInstancesMaxResults;
+    /**
+     * The token for the next page of results.
+     */
+    NextToken?: NextToken;
+    /**
+     * One or more filters. Filter names and values are case-sensitive.
+     */
+    Filters?: FilterList;
+    /**
+     * Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.
+     */
+    DryRun?: Boolean;
+  }
+  export interface DescribeVerifiedAccessInstancesResult {
+    /**
+     * The IDs of the Amazon Web Services Verified Access instances.
+     */
+    VerifiedAccessInstances?: VerifiedAccessInstanceList;
+    /**
+     * The token to use to retrieve the next page of results. This value is null when there are no more results to return.
+     */
+    NextToken?: NextToken;
+  }
+  export type DescribeVerifiedAccessTrustProvidersMaxResults = number;
+  export interface DescribeVerifiedAccessTrustProvidersRequest {
+    /**
+     * The IDs of the Amazon Web Services Verified Access trust providers.
+     */
+    VerifiedAccessTrustProviderIds?: VerifiedAccessTrustProviderIdList;
+    /**
+     * The maximum number of results to return with a single call. To retrieve the remaining results, make another call with the returned nextToken value.
+     */
+    MaxResults?: DescribeVerifiedAccessTrustProvidersMaxResults;
+    /**
+     * The token for the next page of results.
+     */
+    NextToken?: NextToken;
+    /**
+     * One or more filters. Filter names and values are case-sensitive.
+     */
+    Filters?: FilterList;
+    /**
+     * Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.
+     */
+    DryRun?: Boolean;
+  }
+  export interface DescribeVerifiedAccessTrustProvidersResult {
+    /**
+     * The IDs of the Amazon Web Services Verified Access trust providers.
+     */
+    VerifiedAccessTrustProviders?: VerifiedAccessTrustProviderList;
+    /**
+     * The token to use to retrieve the next page of results. This value is null when there are no more results to return.
+     */
+    NextToken?: NextToken;
+  }
   export interface DescribeVolumeAttributeRequest {
     /**
      * The attribute of the volume. This parameter is required.
@@ -16054,7 +16948,7 @@ declare namespace EC2 {
      */
     ServiceNames?: ValueStringList;
     /**
-     * One or more filters.    service-name - The name of the service.    service-type - The type of service (Interface | Gateway).    supported-ip-address-types - The IP address type (ipv4 | ipv6).    tag:&lt;key&gt; - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value. For example, to find all resources that have a tag with the key Owner and the value TeamA, specify tag:Owner for the filter name and TeamA for the filter value.    tag-key - The key of a tag assigned to the resource. Use this filter to find all resources assigned a tag with a specific key, regardless of the tag value.  
+     * One or more filters.    owner - The ID or alias of the Amazon Web Services account that owns the service.    service-name - The name of the service.    service-type - The type of service (Interface | Gateway | GatewayLoadBalancer).    supported-ip-address-types - The IP address type (ipv4 | ipv6).    tag:&lt;key&gt; - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value. For example, to find all resources that have a tag with the key Owner and the value TeamA, specify tag:Owner for the filter name and TeamA for the filter value.    tag-key - The key of a tag assigned to the resource. Use this filter to find all resources assigned a tag with a specific key, regardless of the tag value.  
      */
     Filters?: FilterList;
     /**
@@ -16090,7 +16984,7 @@ declare namespace EC2 {
      */
     VpcEndpointIds?: VpcEndpointIdList;
     /**
-     * One or more filters.    ip-address-type - The IP address type (ipv4 | ipv6).    service-name - The name of the service.    vpc-id - The ID of the VPC in which the endpoint resides.    vpc-endpoint-id - The ID of the endpoint.    vpc-endpoint-state - The state of the endpoint (pendingAcceptance | pending | available | deleting | deleted | rejected | failed).    vpc-endpoint-type - The type of VPC endpoint (Interface | Gateway | GatewayLoadBalancer).    tag:&lt;key&gt; - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value. For example, to find all resources that have a tag with the key Owner and the value TeamA, specify tag:Owner for the filter name and TeamA for the filter value.    tag-key - The key of a tag assigned to the resource. Use this filter to find all resources assigned a tag with a specific key, regardless of the tag value.  
+     * One or more filters.    ip-address-type - The IP address type (ipv4 | ipv6).    service-name - The name of the service.    tag:&lt;key&gt; - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value. For example, to find all resources that have a tag with the key Owner and the value TeamA, specify tag:Owner for the filter name and TeamA for the filter value.    tag-key - The key of a tag assigned to the resource. Use this filter to find all resources assigned a tag with a specific key, regardless of the tag value.    vpc-id - The ID of the VPC in which the endpoint resides.    vpc-endpoint-id - The ID of the endpoint.    vpc-endpoint-state - The state of the endpoint (pendingAcceptance | pending | available | deleting | deleted | rejected | failed).    vpc-endpoint-type - The type of VPC endpoint (Interface | Gateway | GatewayLoadBalancer).  
      */
     Filters?: FilterList;
     /**
@@ -16295,6 +17189,34 @@ declare namespace EC2 {
      */
     Force?: Boolean;
   }
+  export interface DetachVerifiedAccessTrustProviderRequest {
+    /**
+     * The ID of the Amazon Web Services Verified Access instance.
+     */
+    VerifiedAccessInstanceId: VerifiedAccessInstanceId;
+    /**
+     * The ID of the Amazon Web Services Verified Access trust provider.
+     */
+    VerifiedAccessTrustProviderId: VerifiedAccessTrustProviderId;
+    /**
+     * A unique, case-sensitive token that you provide to ensure idempotency of your modification request. For more information, see Ensuring Idempotency.
+     */
+    ClientToken?: String;
+    /**
+     * Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.
+     */
+    DryRun?: Boolean;
+  }
+  export interface DetachVerifiedAccessTrustProviderResult {
+    /**
+     * The ID of the Amazon Web Services Verified Access trust provider.
+     */
+    VerifiedAccessTrustProvider?: VerifiedAccessTrustProvider;
+    /**
+     * The ID of the Amazon Web Services Verified Access instance.
+     */
+    VerifiedAccessInstance?: VerifiedAccessInstance;
+  }
   export interface DetachVolumeRequest {
     /**
      * The device name.
@@ -16307,11 +17229,11 @@ declare namespace EC2 {
     /**
      * The ID of the instance. If you are detaching a Multi-Attach enabled volume, you must specify an instance ID.
      */
-    InstanceId?: InstanceId;
+    InstanceId?: InstanceIdForResolver;
     /**
      * The ID of the volume.
      */
-    VolumeId: VolumeId;
+    VolumeId: VolumeIdWithResolver;
     /**
      * Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.
      */
@@ -16331,6 +17253,13 @@ declare namespace EC2 {
      */
     DryRun?: Boolean;
   }
+  export interface DeviceOptions {
+    /**
+     * The ID of the tenant application with the device-identity provider.
+     */
+    TenantId?: String;
+  }
+  export type DeviceTrustProviderType = "jamf"|"crowdstrike"|string;
   export type DeviceType = "ebs"|"instance-store"|string;
   export interface DhcpConfiguration {
     /**
@@ -16393,6 +17322,34 @@ declare namespace EC2 {
      */
     AddressTransfer?: AddressTransfer;
   }
+  export interface DisableAwsNetworkPerformanceMetricSubscriptionRequest {
+    /**
+     * The source Region or Availability Zone that the metric subscription is disabled for. For example, us-east-1.
+     */
+    Source?: String;
+    /**
+     * The target Region or Availability Zone that the metric subscription is disabled for. For example, eu-north-1.
+     */
+    Destination?: String;
+    /**
+     * The metric used for the disabled subscription.
+     */
+    Metric?: MetricType;
+    /**
+     * The statistic used for the disabled subscription. 
+     */
+    Statistic?: StatisticType;
+    /**
+     * Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.
+     */
+    DryRun?: Boolean;
+  }
+  export interface DisableAwsNetworkPerformanceMetricSubscriptionResult {
+    /**
+     * Indicates whether the unsubscribe action was successful.
+     */
+    Output?: Boolean;
+  }
   export interface DisableEbsEncryptionByDefaultRequest {
     /**
      * Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.
@@ -17254,6 +18211,23 @@ declare namespace EC2 {
   export type ElasticInferenceAcceleratorCount = number;
   export type ElasticInferenceAccelerators = ElasticInferenceAccelerator[];
   export type ElasticIpAssociationId = string;
+  export interface EnaSrdSpecification {
+    /**
+     * Indicates whether ENA Express is enabled for the network interface.
+     */
+    EnaSrdEnabled?: Boolean;
+    /**
+     * Configures ENA Express for UDP network traffic.
+     */
+    EnaSrdUdpSpecification?: EnaSrdUdpSpecification;
+  }
+  export type EnaSrdSupported = boolean;
+  export interface EnaSrdUdpSpecification {
+    /**
+     * Indicates whether UDP traffic uses ENA Express. To specify this setting, you must first enable ENA Express.
+     */
+    EnaSrdUdpEnabled?: Boolean;
+  }
   export type EnaSupport = "unsupported"|"supported"|"required"|string;
   export interface EnableAddressTransferRequest {
     /**
@@ -17275,6 +18249,34 @@ declare namespace EC2 {
      */
     AddressTransfer?: AddressTransfer;
   }
+  export interface EnableAwsNetworkPerformanceMetricSubscriptionRequest {
+    /**
+     * The source Region or Availability Zone that the metric subscription is enabled for. For example, us-east-1.
+     */
+    Source?: String;
+    /**
+     * The target Region or Availability Zone that the metric subscription is enabled for. For example, eu-west-1.
+     */
+    Destination?: String;
+    /**
+     * The metric used for the enabled subscription.
+     */
+    Metric?: MetricType;
+    /**
+     * The statistic used for the enabled subscription.
+     */
+    Statistic?: StatisticType;
+    /**
+     * Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.
+     */
+    DryRun?: Boolean;
+  }
+  export interface EnableAwsNetworkPerformanceMetricSubscriptionResult {
+    /**
+     * Indicates whether the subscribe action was successful.
+     */
+    Output?: Boolean;
+  }
   export interface EnableEbsEncryptionByDefaultRequest {
     /**
      * Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.
@@ -17490,6 +18492,18 @@ declare namespace EC2 {
      */
     Success?: Boolean;
   }
+  export interface EnableReachabilityAnalyzerOrganizationSharingRequest {
+    /**
+     * Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.
+     */
+    DryRun?: Boolean;
+  }
+  export interface EnableReachabilityAnalyzerOrganizationSharingResult {
+    /**
+     * Returns true if the request succeeds; otherwise, returns an error.
+     */
+    ReturnValue?: Boolean;
+  }
   export interface EnableSerialConsoleAccessRequest {
     /**
      * Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.
@@ -18653,6 +19667,7 @@ declare namespace EC2 {
      * Indicates whether data retention support is enabled for the AFI.
      */
     DataRetentionSupport?: Boolean;
+    InstanceTypes?: InstanceTypesList;
   }
   export interface FpgaImageAttribute {
     /**
@@ -18749,6 +19764,42 @@ declare namespace EC2 {
      */
     NextToken?: String;
   }
+  export interface GetAwsNetworkPerformanceDataRequest {
+    /**
+     * A list of network performance data queries.
+     */
+    DataQueries?: DataQueries;
+    /**
+     * The starting time for the performance data request. The starting time must be formatted as yyyy-mm-ddThh:mm:ss. For example, 2022-06-10T12:00:00.000Z.
+     */
+    StartTime?: MillisecondDateTime;
+    /**
+     * The ending time for the performance data request. The end time must be formatted as yyyy-mm-ddThh:mm:ss. For example, 2022-06-12T12:00:00.000Z.
+     */
+    EndTime?: MillisecondDateTime;
+    /**
+     * The maximum number of results to return with a single call. To retrieve the remaining results, make another call with the returned nextToken value.
+     */
+    MaxResults?: Integer;
+    /**
+     * The token for the next page of results.
+     */
+    NextToken?: String;
+    /**
+     * Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.
+     */
+    DryRun?: Boolean;
+  }
+  export interface GetAwsNetworkPerformanceDataResult {
+    /**
+     * The list of data responses.
+     */
+    DataResponses?: DataResponses;
+    /**
+     * The token to use to retrieve the next page of results. This value is null when there are no more results to return.
+     */
+    NextToken?: String;
+  }
   export interface GetCapacityReservationUsageRequest {
     /**
      * The ID of the Capacity Reservation.
@@ -19750,6 +20801,46 @@ declare namespace EC2 {
      */
     NextToken?: String;
   }
+  export interface GetVerifiedAccessEndpointPolicyRequest {
+    /**
+     * The ID of the Amazon Web Services Verified Access endpoint.
+     */
+    VerifiedAccessEndpointId: VerifiedAccessEndpointId;
+    /**
+     * Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.
+     */
+    DryRun?: Boolean;
+  }
+  export interface GetVerifiedAccessEndpointPolicyResult {
+    /**
+     * The status of the Verified Access policy.
+     */
+    PolicyEnabled?: Boolean;
+    /**
+     * The Amazon Web Services Verified Access policy document.
+     */
+    PolicyDocument?: String;
+  }
+  export interface GetVerifiedAccessGroupPolicyRequest {
+    /**
+     * The ID of the Amazon Web Services Verified Access group.
+     */
+    VerifiedAccessGroupId: VerifiedAccessGroupId;
+    /**
+     * Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.
+     */
+    DryRun?: Boolean;
+  }
+  export interface GetVerifiedAccessGroupPolicyResult {
+    /**
+     * The status of the Verified Access policy.
+     */
+    PolicyEnabled?: Boolean;
+    /**
+     * The Amazon Web Services Verified Access policy document.
+     */
+    PolicyDocument?: String;
+  }
   export interface GetVpnConnectionDeviceSampleConfigurationRequest {
     /**
      * The VpnConnectionId specifies the Site-to-Site VPN connection used for the sample configuration.
@@ -20228,7 +21319,7 @@ declare namespace EC2 {
      */
     Platform?: PlatformValues;
     /**
-     * The platform details associated with the billing code of the AMI. For more information, see Understand AMI billing information in the Amazon Elastic Compute Cloud User Guide.
+     * The platform details associated with the billing code of the AMI. For more information, see Understand AMI billing information in the Amazon EC2 User Guide.
      */
     PlatformDetails?: String;
     /**
@@ -20296,11 +21387,11 @@ declare namespace EC2 {
      */
     VirtualizationType?: VirtualizationType;
     /**
-     * The boot mode of the image. For more information, see Boot modes in the Amazon Elastic Compute Cloud User Guide.
+     * The boot mode of the image. For more information, see Boot modes in the Amazon EC2 User Guide.
      */
     BootMode?: BootModeValues;
     /**
-     * If the image is configured for NitroTPM support, the value is v2.0. For more information, see NitroTPM in the Amazon Elastic Compute Cloud User Guide.
+     * If the image is configured for NitroTPM support, the value is v2.0. For more information, see NitroTPM in the Amazon EC2 User Guide.
      */
     TpmSupport?: TpmSupportValues;
     /**
@@ -20308,7 +21399,7 @@ declare namespace EC2 {
      */
     DeprecationTime?: String;
     /**
-     * If v2.0, it indicates that IMDSv2 is specified in the AMI. Instances launched from this AMI will have HttpTokens automatically set to required so that, by default, the instance requires that IMDSv2 is used when requesting instance metadata. In addition, HttpPutResponseHopLimit is set to 2. For more information, see Configure the AMI in the Amazon Elastic Compute Cloud User Guide.
+     * If v2.0, it indicates that IMDSv2 is specified in the AMI. Instances launched from this AMI will have HttpTokens automatically set to required so that, by default, the instance requires that IMDSv2 is used when requesting instance metadata. In addition, HttpPutResponseHopLimit is set to 2. For more information, see Configure the AMI in the Amazon EC2 User Guide.
      */
     ImdsSupport?: ImdsSupportValues;
   }
@@ -20354,7 +21445,7 @@ declare namespace EC2 {
      */
     TpmSupport?: AttributeValue;
     /**
-     * Base64 representation of the non-volatile UEFI variable store. To retrieve the UEFI data, use the GetInstanceUefiData command. You can inspect and modify the UEFI data by using the python-uefivars tool on GitHub. For more information, see UEFI Secure Boot in the Amazon Elastic Compute Cloud User Guide.
+     * Base64 representation of the non-volatile UEFI variable store. To retrieve the UEFI data, use the GetInstanceUefiData command. You can inspect and modify the UEFI data by using the python-uefivars tool on GitHub. For more information, see UEFI Secure Boot in the Amazon EC2 User Guide.
      */
     UefiData?: AttributeValue;
     /**
@@ -20362,7 +21453,7 @@ declare namespace EC2 {
      */
     LastLaunchedTime?: AttributeValue;
     /**
-     * If v2.0, it indicates that IMDSv2 is specified in the AMI. Instances launched from this AMI will have HttpTokens automatically set to required so that, by default, the instance requires that IMDSv2 is used when requesting instance metadata. In addition, HttpPutResponseHopLimit is set to 2. For more information, see Configure the AMI in the Amazon Elastic Compute Cloud User Guide.
+     * If v2.0, it indicates that IMDSv2 is specified in the AMI. Instances launched from this AMI will have HttpTokens automatically set to required so that, by default, the instance requires that IMDSv2 is used when requesting instance metadata. In addition, HttpPutResponseHopLimit is set to 2. For more information, see Configure the AMI in the Amazon EC2 User Guide.
      */
     ImdsSupport?: AttributeValue;
   }
@@ -21500,6 +22591,7 @@ declare namespace EC2 {
   export type InstanceGenerationSet = InstanceGeneration[];
   export type InstanceHealthStatus = "healthy"|"unhealthy"|string;
   export type InstanceId = string;
+  export type InstanceIdForResolver = string;
   export type InstanceIdList = InstanceId[];
   export type InstanceIdSet = InstanceId[];
   export type InstanceIdStringList = InstanceId[];
@@ -22199,7 +23291,7 @@ declare namespace EC2 {
      */
     IncludeAllTagsOfInstance?: Boolean;
   }
-  export type InstanceType = "a1.medium"|"a1.large"|"a1.xlarge"|"a1.2xlarge"|"a1.4xlarge"|"a1.metal"|"c1.medium"|"c1.xlarge"|"c3.large"|"c3.xlarge"|"c3.2xlarge"|"c3.4xlarge"|"c3.8xlarge"|"c4.large"|"c4.xlarge"|"c4.2xlarge"|"c4.4xlarge"|"c4.8xlarge"|"c5.large"|"c5.xlarge"|"c5.2xlarge"|"c5.4xlarge"|"c5.9xlarge"|"c5.12xlarge"|"c5.18xlarge"|"c5.24xlarge"|"c5.metal"|"c5a.large"|"c5a.xlarge"|"c5a.2xlarge"|"c5a.4xlarge"|"c5a.8xlarge"|"c5a.12xlarge"|"c5a.16xlarge"|"c5a.24xlarge"|"c5ad.large"|"c5ad.xlarge"|"c5ad.2xlarge"|"c5ad.4xlarge"|"c5ad.8xlarge"|"c5ad.12xlarge"|"c5ad.16xlarge"|"c5ad.24xlarge"|"c5d.large"|"c5d.xlarge"|"c5d.2xlarge"|"c5d.4xlarge"|"c5d.9xlarge"|"c5d.12xlarge"|"c5d.18xlarge"|"c5d.24xlarge"|"c5d.metal"|"c5n.large"|"c5n.xlarge"|"c5n.2xlarge"|"c5n.4xlarge"|"c5n.9xlarge"|"c5n.18xlarge"|"c5n.metal"|"c6g.medium"|"c6g.large"|"c6g.xlarge"|"c6g.2xlarge"|"c6g.4xlarge"|"c6g.8xlarge"|"c6g.12xlarge"|"c6g.16xlarge"|"c6g.metal"|"c6gd.medium"|"c6gd.large"|"c6gd.xlarge"|"c6gd.2xlarge"|"c6gd.4xlarge"|"c6gd.8xlarge"|"c6gd.12xlarge"|"c6gd.16xlarge"|"c6gd.metal"|"c6gn.medium"|"c6gn.large"|"c6gn.xlarge"|"c6gn.2xlarge"|"c6gn.4xlarge"|"c6gn.8xlarge"|"c6gn.12xlarge"|"c6gn.16xlarge"|"c6i.large"|"c6i.xlarge"|"c6i.2xlarge"|"c6i.4xlarge"|"c6i.8xlarge"|"c6i.12xlarge"|"c6i.16xlarge"|"c6i.24xlarge"|"c6i.32xlarge"|"c6i.metal"|"cc1.4xlarge"|"cc2.8xlarge"|"cg1.4xlarge"|"cr1.8xlarge"|"d2.xlarge"|"d2.2xlarge"|"d2.4xlarge"|"d2.8xlarge"|"d3.xlarge"|"d3.2xlarge"|"d3.4xlarge"|"d3.8xlarge"|"d3en.xlarge"|"d3en.2xlarge"|"d3en.4xlarge"|"d3en.6xlarge"|"d3en.8xlarge"|"d3en.12xlarge"|"dl1.24xlarge"|"f1.2xlarge"|"f1.4xlarge"|"f1.16xlarge"|"g2.2xlarge"|"g2.8xlarge"|"g3.4xlarge"|"g3.8xlarge"|"g3.16xlarge"|"g3s.xlarge"|"g4ad.xlarge"|"g4ad.2xlarge"|"g4ad.4xlarge"|"g4ad.8xlarge"|"g4ad.16xlarge"|"g4dn.xlarge"|"g4dn.2xlarge"|"g4dn.4xlarge"|"g4dn.8xlarge"|"g4dn.12xlarge"|"g4dn.16xlarge"|"g4dn.metal"|"g5.xlarge"|"g5.2xlarge"|"g5.4xlarge"|"g5.8xlarge"|"g5.12xlarge"|"g5.16xlarge"|"g5.24xlarge"|"g5.48xlarge"|"g5g.xlarge"|"g5g.2xlarge"|"g5g.4xlarge"|"g5g.8xlarge"|"g5g.16xlarge"|"g5g.metal"|"hi1.4xlarge"|"hpc6a.48xlarge"|"hs1.8xlarge"|"h1.2xlarge"|"h1.4xlarge"|"h1.8xlarge"|"h1.16xlarge"|"i2.xlarge"|"i2.2xlarge"|"i2.4xlarge"|"i2.8xlarge"|"i3.large"|"i3.xlarge"|"i3.2xlarge"|"i3.4xlarge"|"i3.8xlarge"|"i3.16xlarge"|"i3.metal"|"i3en.large"|"i3en.xlarge"|"i3en.2xlarge"|"i3en.3xlarge"|"i3en.6xlarge"|"i3en.12xlarge"|"i3en.24xlarge"|"i3en.metal"|"im4gn.large"|"im4gn.xlarge"|"im4gn.2xlarge"|"im4gn.4xlarge"|"im4gn.8xlarge"|"im4gn.16xlarge"|"inf1.xlarge"|"inf1.2xlarge"|"inf1.6xlarge"|"inf1.24xlarge"|"is4gen.medium"|"is4gen.large"|"is4gen.xlarge"|"is4gen.2xlarge"|"is4gen.4xlarge"|"is4gen.8xlarge"|"m1.small"|"m1.medium"|"m1.large"|"m1.xlarge"|"m2.xlarge"|"m2.2xlarge"|"m2.4xlarge"|"m3.medium"|"m3.large"|"m3.xlarge"|"m3.2xlarge"|"m4.large"|"m4.xlarge"|"m4.2xlarge"|"m4.4xlarge"|"m4.10xlarge"|"m4.16xlarge"|"m5.large"|"m5.xlarge"|"m5.2xlarge"|"m5.4xlarge"|"m5.8xlarge"|"m5.12xlarge"|"m5.16xlarge"|"m5.24xlarge"|"m5.metal"|"m5a.large"|"m5a.xlarge"|"m5a.2xlarge"|"m5a.4xlarge"|"m5a.8xlarge"|"m5a.12xlarge"|"m5a.16xlarge"|"m5a.24xlarge"|"m5ad.large"|"m5ad.xlarge"|"m5ad.2xlarge"|"m5ad.4xlarge"|"m5ad.8xlarge"|"m5ad.12xlarge"|"m5ad.16xlarge"|"m5ad.24xlarge"|"m5d.large"|"m5d.xlarge"|"m5d.2xlarge"|"m5d.4xlarge"|"m5d.8xlarge"|"m5d.12xlarge"|"m5d.16xlarge"|"m5d.24xlarge"|"m5d.metal"|"m5dn.large"|"m5dn.xlarge"|"m5dn.2xlarge"|"m5dn.4xlarge"|"m5dn.8xlarge"|"m5dn.12xlarge"|"m5dn.16xlarge"|"m5dn.24xlarge"|"m5dn.metal"|"m5n.large"|"m5n.xlarge"|"m5n.2xlarge"|"m5n.4xlarge"|"m5n.8xlarge"|"m5n.12xlarge"|"m5n.16xlarge"|"m5n.24xlarge"|"m5n.metal"|"m5zn.large"|"m5zn.xlarge"|"m5zn.2xlarge"|"m5zn.3xlarge"|"m5zn.6xlarge"|"m5zn.12xlarge"|"m5zn.metal"|"m6a.large"|"m6a.xlarge"|"m6a.2xlarge"|"m6a.4xlarge"|"m6a.8xlarge"|"m6a.12xlarge"|"m6a.16xlarge"|"m6a.24xlarge"|"m6a.32xlarge"|"m6a.48xlarge"|"m6g.metal"|"m6g.medium"|"m6g.large"|"m6g.xlarge"|"m6g.2xlarge"|"m6g.4xlarge"|"m6g.8xlarge"|"m6g.12xlarge"|"m6g.16xlarge"|"m6gd.metal"|"m6gd.medium"|"m6gd.large"|"m6gd.xlarge"|"m6gd.2xlarge"|"m6gd.4xlarge"|"m6gd.8xlarge"|"m6gd.12xlarge"|"m6gd.16xlarge"|"m6i.large"|"m6i.xlarge"|"m6i.2xlarge"|"m6i.4xlarge"|"m6i.8xlarge"|"m6i.12xlarge"|"m6i.16xlarge"|"m6i.24xlarge"|"m6i.32xlarge"|"m6i.metal"|"mac1.metal"|"p2.xlarge"|"p2.8xlarge"|"p2.16xlarge"|"p3.2xlarge"|"p3.8xlarge"|"p3.16xlarge"|"p3dn.24xlarge"|"p4d.24xlarge"|"r3.large"|"r3.xlarge"|"r3.2xlarge"|"r3.4xlarge"|"r3.8xlarge"|"r4.large"|"r4.xlarge"|"r4.2xlarge"|"r4.4xlarge"|"r4.8xlarge"|"r4.16xlarge"|"r5.large"|"r5.xlarge"|"r5.2xlarge"|"r5.4xlarge"|"r5.8xlarge"|"r5.12xlarge"|"r5.16xlarge"|"r5.24xlarge"|"r5.metal"|"r5a.large"|"r5a.xlarge"|"r5a.2xlarge"|"r5a.4xlarge"|"r5a.8xlarge"|"r5a.12xlarge"|"r5a.16xlarge"|"r5a.24xlarge"|"r5ad.large"|"r5ad.xlarge"|"r5ad.2xlarge"|"r5ad.4xlarge"|"r5ad.8xlarge"|"r5ad.12xlarge"|"r5ad.16xlarge"|"r5ad.24xlarge"|"r5b.large"|"r5b.xlarge"|"r5b.2xlarge"|"r5b.4xlarge"|"r5b.8xlarge"|"r5b.12xlarge"|"r5b.16xlarge"|"r5b.24xlarge"|"r5b.metal"|"r5d.large"|"r5d.xlarge"|"r5d.2xlarge"|"r5d.4xlarge"|"r5d.8xlarge"|"r5d.12xlarge"|"r5d.16xlarge"|"r5d.24xlarge"|"r5d.metal"|"r5dn.large"|"r5dn.xlarge"|"r5dn.2xlarge"|"r5dn.4xlarge"|"r5dn.8xlarge"|"r5dn.12xlarge"|"r5dn.16xlarge"|"r5dn.24xlarge"|"r5dn.metal"|"r5n.large"|"r5n.xlarge"|"r5n.2xlarge"|"r5n.4xlarge"|"r5n.8xlarge"|"r5n.12xlarge"|"r5n.16xlarge"|"r5n.24xlarge"|"r5n.metal"|"r6g.medium"|"r6g.large"|"r6g.xlarge"|"r6g.2xlarge"|"r6g.4xlarge"|"r6g.8xlarge"|"r6g.12xlarge"|"r6g.16xlarge"|"r6g.metal"|"r6gd.medium"|"r6gd.large"|"r6gd.xlarge"|"r6gd.2xlarge"|"r6gd.4xlarge"|"r6gd.8xlarge"|"r6gd.12xlarge"|"r6gd.16xlarge"|"r6gd.metal"|"r6i.large"|"r6i.xlarge"|"r6i.2xlarge"|"r6i.4xlarge"|"r6i.8xlarge"|"r6i.12xlarge"|"r6i.16xlarge"|"r6i.24xlarge"|"r6i.32xlarge"|"r6i.metal"|"t1.micro"|"t2.nano"|"t2.micro"|"t2.small"|"t2.medium"|"t2.large"|"t2.xlarge"|"t2.2xlarge"|"t3.nano"|"t3.micro"|"t3.small"|"t3.medium"|"t3.large"|"t3.xlarge"|"t3.2xlarge"|"t3a.nano"|"t3a.micro"|"t3a.small"|"t3a.medium"|"t3a.large"|"t3a.xlarge"|"t3a.2xlarge"|"t4g.nano"|"t4g.micro"|"t4g.small"|"t4g.medium"|"t4g.large"|"t4g.xlarge"|"t4g.2xlarge"|"u-6tb1.56xlarge"|"u-6tb1.112xlarge"|"u-9tb1.112xlarge"|"u-12tb1.112xlarge"|"u-6tb1.metal"|"u-9tb1.metal"|"u-12tb1.metal"|"u-18tb1.metal"|"u-24tb1.metal"|"vt1.3xlarge"|"vt1.6xlarge"|"vt1.24xlarge"|"x1.16xlarge"|"x1.32xlarge"|"x1e.xlarge"|"x1e.2xlarge"|"x1e.4xlarge"|"x1e.8xlarge"|"x1e.16xlarge"|"x1e.32xlarge"|"x2iezn.2xlarge"|"x2iezn.4xlarge"|"x2iezn.6xlarge"|"x2iezn.8xlarge"|"x2iezn.12xlarge"|"x2iezn.metal"|"x2gd.medium"|"x2gd.large"|"x2gd.xlarge"|"x2gd.2xlarge"|"x2gd.4xlarge"|"x2gd.8xlarge"|"x2gd.12xlarge"|"x2gd.16xlarge"|"x2gd.metal"|"z1d.large"|"z1d.xlarge"|"z1d.2xlarge"|"z1d.3xlarge"|"z1d.6xlarge"|"z1d.12xlarge"|"z1d.metal"|"x2idn.16xlarge"|"x2idn.24xlarge"|"x2idn.32xlarge"|"x2iedn.xlarge"|"x2iedn.2xlarge"|"x2iedn.4xlarge"|"x2iedn.8xlarge"|"x2iedn.16xlarge"|"x2iedn.24xlarge"|"x2iedn.32xlarge"|"c6a.large"|"c6a.xlarge"|"c6a.2xlarge"|"c6a.4xlarge"|"c6a.8xlarge"|"c6a.12xlarge"|"c6a.16xlarge"|"c6a.24xlarge"|"c6a.32xlarge"|"c6a.48xlarge"|"c6a.metal"|"m6a.metal"|"i4i.large"|"i4i.xlarge"|"i4i.2xlarge"|"i4i.4xlarge"|"i4i.8xlarge"|"i4i.16xlarge"|"i4i.32xlarge"|"i4i.metal"|"x2idn.metal"|"x2iedn.metal"|"c7g.medium"|"c7g.large"|"c7g.xlarge"|"c7g.2xlarge"|"c7g.4xlarge"|"c7g.8xlarge"|"c7g.12xlarge"|"c7g.16xlarge"|"mac2.metal"|"c6id.large"|"c6id.xlarge"|"c6id.2xlarge"|"c6id.4xlarge"|"c6id.8xlarge"|"c6id.12xlarge"|"c6id.16xlarge"|"c6id.24xlarge"|"c6id.32xlarge"|"c6id.metal"|"m6id.large"|"m6id.xlarge"|"m6id.2xlarge"|"m6id.4xlarge"|"m6id.8xlarge"|"m6id.12xlarge"|"m6id.16xlarge"|"m6id.24xlarge"|"m6id.32xlarge"|"m6id.metal"|"r6id.large"|"r6id.xlarge"|"r6id.2xlarge"|"r6id.4xlarge"|"r6id.8xlarge"|"r6id.12xlarge"|"r6id.16xlarge"|"r6id.24xlarge"|"r6id.32xlarge"|"r6id.metal"|"r6a.large"|"r6a.xlarge"|"r6a.2xlarge"|"r6a.4xlarge"|"r6a.8xlarge"|"r6a.12xlarge"|"r6a.16xlarge"|"r6a.24xlarge"|"r6a.32xlarge"|"r6a.48xlarge"|"r6a.metal"|"p4de.24xlarge"|"u-3tb1.56xlarge"|"u-18tb1.112xlarge"|"u-24tb1.112xlarge"|"trn1.2xlarge"|"trn1.32xlarge"|string;
+  export type InstanceType = "a1.medium"|"a1.large"|"a1.xlarge"|"a1.2xlarge"|"a1.4xlarge"|"a1.metal"|"c1.medium"|"c1.xlarge"|"c3.large"|"c3.xlarge"|"c3.2xlarge"|"c3.4xlarge"|"c3.8xlarge"|"c4.large"|"c4.xlarge"|"c4.2xlarge"|"c4.4xlarge"|"c4.8xlarge"|"c5.large"|"c5.xlarge"|"c5.2xlarge"|"c5.4xlarge"|"c5.9xlarge"|"c5.12xlarge"|"c5.18xlarge"|"c5.24xlarge"|"c5.metal"|"c5a.large"|"c5a.xlarge"|"c5a.2xlarge"|"c5a.4xlarge"|"c5a.8xlarge"|"c5a.12xlarge"|"c5a.16xlarge"|"c5a.24xlarge"|"c5ad.large"|"c5ad.xlarge"|"c5ad.2xlarge"|"c5ad.4xlarge"|"c5ad.8xlarge"|"c5ad.12xlarge"|"c5ad.16xlarge"|"c5ad.24xlarge"|"c5d.large"|"c5d.xlarge"|"c5d.2xlarge"|"c5d.4xlarge"|"c5d.9xlarge"|"c5d.12xlarge"|"c5d.18xlarge"|"c5d.24xlarge"|"c5d.metal"|"c5n.large"|"c5n.xlarge"|"c5n.2xlarge"|"c5n.4xlarge"|"c5n.9xlarge"|"c5n.18xlarge"|"c5n.metal"|"c6g.medium"|"c6g.large"|"c6g.xlarge"|"c6g.2xlarge"|"c6g.4xlarge"|"c6g.8xlarge"|"c6g.12xlarge"|"c6g.16xlarge"|"c6g.metal"|"c6gd.medium"|"c6gd.large"|"c6gd.xlarge"|"c6gd.2xlarge"|"c6gd.4xlarge"|"c6gd.8xlarge"|"c6gd.12xlarge"|"c6gd.16xlarge"|"c6gd.metal"|"c6gn.medium"|"c6gn.large"|"c6gn.xlarge"|"c6gn.2xlarge"|"c6gn.4xlarge"|"c6gn.8xlarge"|"c6gn.12xlarge"|"c6gn.16xlarge"|"c6i.large"|"c6i.xlarge"|"c6i.2xlarge"|"c6i.4xlarge"|"c6i.8xlarge"|"c6i.12xlarge"|"c6i.16xlarge"|"c6i.24xlarge"|"c6i.32xlarge"|"c6i.metal"|"cc1.4xlarge"|"cc2.8xlarge"|"cg1.4xlarge"|"cr1.8xlarge"|"d2.xlarge"|"d2.2xlarge"|"d2.4xlarge"|"d2.8xlarge"|"d3.xlarge"|"d3.2xlarge"|"d3.4xlarge"|"d3.8xlarge"|"d3en.xlarge"|"d3en.2xlarge"|"d3en.4xlarge"|"d3en.6xlarge"|"d3en.8xlarge"|"d3en.12xlarge"|"dl1.24xlarge"|"f1.2xlarge"|"f1.4xlarge"|"f1.16xlarge"|"g2.2xlarge"|"g2.8xlarge"|"g3.4xlarge"|"g3.8xlarge"|"g3.16xlarge"|"g3s.xlarge"|"g4ad.xlarge"|"g4ad.2xlarge"|"g4ad.4xlarge"|"g4ad.8xlarge"|"g4ad.16xlarge"|"g4dn.xlarge"|"g4dn.2xlarge"|"g4dn.4xlarge"|"g4dn.8xlarge"|"g4dn.12xlarge"|"g4dn.16xlarge"|"g4dn.metal"|"g5.xlarge"|"g5.2xlarge"|"g5.4xlarge"|"g5.8xlarge"|"g5.12xlarge"|"g5.16xlarge"|"g5.24xlarge"|"g5.48xlarge"|"g5g.xlarge"|"g5g.2xlarge"|"g5g.4xlarge"|"g5g.8xlarge"|"g5g.16xlarge"|"g5g.metal"|"hi1.4xlarge"|"hpc6a.48xlarge"|"hs1.8xlarge"|"h1.2xlarge"|"h1.4xlarge"|"h1.8xlarge"|"h1.16xlarge"|"i2.xlarge"|"i2.2xlarge"|"i2.4xlarge"|"i2.8xlarge"|"i3.large"|"i3.xlarge"|"i3.2xlarge"|"i3.4xlarge"|"i3.8xlarge"|"i3.16xlarge"|"i3.metal"|"i3en.large"|"i3en.xlarge"|"i3en.2xlarge"|"i3en.3xlarge"|"i3en.6xlarge"|"i3en.12xlarge"|"i3en.24xlarge"|"i3en.metal"|"im4gn.large"|"im4gn.xlarge"|"im4gn.2xlarge"|"im4gn.4xlarge"|"im4gn.8xlarge"|"im4gn.16xlarge"|"inf1.xlarge"|"inf1.2xlarge"|"inf1.6xlarge"|"inf1.24xlarge"|"is4gen.medium"|"is4gen.large"|"is4gen.xlarge"|"is4gen.2xlarge"|"is4gen.4xlarge"|"is4gen.8xlarge"|"m1.small"|"m1.medium"|"m1.large"|"m1.xlarge"|"m2.xlarge"|"m2.2xlarge"|"m2.4xlarge"|"m3.medium"|"m3.large"|"m3.xlarge"|"m3.2xlarge"|"m4.large"|"m4.xlarge"|"m4.2xlarge"|"m4.4xlarge"|"m4.10xlarge"|"m4.16xlarge"|"m5.large"|"m5.xlarge"|"m5.2xlarge"|"m5.4xlarge"|"m5.8xlarge"|"m5.12xlarge"|"m5.16xlarge"|"m5.24xlarge"|"m5.metal"|"m5a.large"|"m5a.xlarge"|"m5a.2xlarge"|"m5a.4xlarge"|"m5a.8xlarge"|"m5a.12xlarge"|"m5a.16xlarge"|"m5a.24xlarge"|"m5ad.large"|"m5ad.xlarge"|"m5ad.2xlarge"|"m5ad.4xlarge"|"m5ad.8xlarge"|"m5ad.12xlarge"|"m5ad.16xlarge"|"m5ad.24xlarge"|"m5d.large"|"m5d.xlarge"|"m5d.2xlarge"|"m5d.4xlarge"|"m5d.8xlarge"|"m5d.12xlarge"|"m5d.16xlarge"|"m5d.24xlarge"|"m5d.metal"|"m5dn.large"|"m5dn.xlarge"|"m5dn.2xlarge"|"m5dn.4xlarge"|"m5dn.8xlarge"|"m5dn.12xlarge"|"m5dn.16xlarge"|"m5dn.24xlarge"|"m5dn.metal"|"m5n.large"|"m5n.xlarge"|"m5n.2xlarge"|"m5n.4xlarge"|"m5n.8xlarge"|"m5n.12xlarge"|"m5n.16xlarge"|"m5n.24xlarge"|"m5n.metal"|"m5zn.large"|"m5zn.xlarge"|"m5zn.2xlarge"|"m5zn.3xlarge"|"m5zn.6xlarge"|"m5zn.12xlarge"|"m5zn.metal"|"m6a.large"|"m6a.xlarge"|"m6a.2xlarge"|"m6a.4xlarge"|"m6a.8xlarge"|"m6a.12xlarge"|"m6a.16xlarge"|"m6a.24xlarge"|"m6a.32xlarge"|"m6a.48xlarge"|"m6g.metal"|"m6g.medium"|"m6g.large"|"m6g.xlarge"|"m6g.2xlarge"|"m6g.4xlarge"|"m6g.8xlarge"|"m6g.12xlarge"|"m6g.16xlarge"|"m6gd.metal"|"m6gd.medium"|"m6gd.large"|"m6gd.xlarge"|"m6gd.2xlarge"|"m6gd.4xlarge"|"m6gd.8xlarge"|"m6gd.12xlarge"|"m6gd.16xlarge"|"m6i.large"|"m6i.xlarge"|"m6i.2xlarge"|"m6i.4xlarge"|"m6i.8xlarge"|"m6i.12xlarge"|"m6i.16xlarge"|"m6i.24xlarge"|"m6i.32xlarge"|"m6i.metal"|"mac1.metal"|"p2.xlarge"|"p2.8xlarge"|"p2.16xlarge"|"p3.2xlarge"|"p3.8xlarge"|"p3.16xlarge"|"p3dn.24xlarge"|"p4d.24xlarge"|"r3.large"|"r3.xlarge"|"r3.2xlarge"|"r3.4xlarge"|"r3.8xlarge"|"r4.large"|"r4.xlarge"|"r4.2xlarge"|"r4.4xlarge"|"r4.8xlarge"|"r4.16xlarge"|"r5.large"|"r5.xlarge"|"r5.2xlarge"|"r5.4xlarge"|"r5.8xlarge"|"r5.12xlarge"|"r5.16xlarge"|"r5.24xlarge"|"r5.metal"|"r5a.large"|"r5a.xlarge"|"r5a.2xlarge"|"r5a.4xlarge"|"r5a.8xlarge"|"r5a.12xlarge"|"r5a.16xlarge"|"r5a.24xlarge"|"r5ad.large"|"r5ad.xlarge"|"r5ad.2xlarge"|"r5ad.4xlarge"|"r5ad.8xlarge"|"r5ad.12xlarge"|"r5ad.16xlarge"|"r5ad.24xlarge"|"r5b.large"|"r5b.xlarge"|"r5b.2xlarge"|"r5b.4xlarge"|"r5b.8xlarge"|"r5b.12xlarge"|"r5b.16xlarge"|"r5b.24xlarge"|"r5b.metal"|"r5d.large"|"r5d.xlarge"|"r5d.2xlarge"|"r5d.4xlarge"|"r5d.8xlarge"|"r5d.12xlarge"|"r5d.16xlarge"|"r5d.24xlarge"|"r5d.metal"|"r5dn.large"|"r5dn.xlarge"|"r5dn.2xlarge"|"r5dn.4xlarge"|"r5dn.8xlarge"|"r5dn.12xlarge"|"r5dn.16xlarge"|"r5dn.24xlarge"|"r5dn.metal"|"r5n.large"|"r5n.xlarge"|"r5n.2xlarge"|"r5n.4xlarge"|"r5n.8xlarge"|"r5n.12xlarge"|"r5n.16xlarge"|"r5n.24xlarge"|"r5n.metal"|"r6g.medium"|"r6g.large"|"r6g.xlarge"|"r6g.2xlarge"|"r6g.4xlarge"|"r6g.8xlarge"|"r6g.12xlarge"|"r6g.16xlarge"|"r6g.metal"|"r6gd.medium"|"r6gd.large"|"r6gd.xlarge"|"r6gd.2xlarge"|"r6gd.4xlarge"|"r6gd.8xlarge"|"r6gd.12xlarge"|"r6gd.16xlarge"|"r6gd.metal"|"r6i.large"|"r6i.xlarge"|"r6i.2xlarge"|"r6i.4xlarge"|"r6i.8xlarge"|"r6i.12xlarge"|"r6i.16xlarge"|"r6i.24xlarge"|"r6i.32xlarge"|"r6i.metal"|"t1.micro"|"t2.nano"|"t2.micro"|"t2.small"|"t2.medium"|"t2.large"|"t2.xlarge"|"t2.2xlarge"|"t3.nano"|"t3.micro"|"t3.small"|"t3.medium"|"t3.large"|"t3.xlarge"|"t3.2xlarge"|"t3a.nano"|"t3a.micro"|"t3a.small"|"t3a.medium"|"t3a.large"|"t3a.xlarge"|"t3a.2xlarge"|"t4g.nano"|"t4g.micro"|"t4g.small"|"t4g.medium"|"t4g.large"|"t4g.xlarge"|"t4g.2xlarge"|"u-6tb1.56xlarge"|"u-6tb1.112xlarge"|"u-9tb1.112xlarge"|"u-12tb1.112xlarge"|"u-6tb1.metal"|"u-9tb1.metal"|"u-12tb1.metal"|"u-18tb1.metal"|"u-24tb1.metal"|"vt1.3xlarge"|"vt1.6xlarge"|"vt1.24xlarge"|"x1.16xlarge"|"x1.32xlarge"|"x1e.xlarge"|"x1e.2xlarge"|"x1e.4xlarge"|"x1e.8xlarge"|"x1e.16xlarge"|"x1e.32xlarge"|"x2iezn.2xlarge"|"x2iezn.4xlarge"|"x2iezn.6xlarge"|"x2iezn.8xlarge"|"x2iezn.12xlarge"|"x2iezn.metal"|"x2gd.medium"|"x2gd.large"|"x2gd.xlarge"|"x2gd.2xlarge"|"x2gd.4xlarge"|"x2gd.8xlarge"|"x2gd.12xlarge"|"x2gd.16xlarge"|"x2gd.metal"|"z1d.large"|"z1d.xlarge"|"z1d.2xlarge"|"z1d.3xlarge"|"z1d.6xlarge"|"z1d.12xlarge"|"z1d.metal"|"x2idn.16xlarge"|"x2idn.24xlarge"|"x2idn.32xlarge"|"x2iedn.xlarge"|"x2iedn.2xlarge"|"x2iedn.4xlarge"|"x2iedn.8xlarge"|"x2iedn.16xlarge"|"x2iedn.24xlarge"|"x2iedn.32xlarge"|"c6a.large"|"c6a.xlarge"|"c6a.2xlarge"|"c6a.4xlarge"|"c6a.8xlarge"|"c6a.12xlarge"|"c6a.16xlarge"|"c6a.24xlarge"|"c6a.32xlarge"|"c6a.48xlarge"|"c6a.metal"|"m6a.metal"|"i4i.large"|"i4i.xlarge"|"i4i.2xlarge"|"i4i.4xlarge"|"i4i.8xlarge"|"i4i.16xlarge"|"i4i.32xlarge"|"i4i.metal"|"x2idn.metal"|"x2iedn.metal"|"c7g.medium"|"c7g.large"|"c7g.xlarge"|"c7g.2xlarge"|"c7g.4xlarge"|"c7g.8xlarge"|"c7g.12xlarge"|"c7g.16xlarge"|"mac2.metal"|"c6id.large"|"c6id.xlarge"|"c6id.2xlarge"|"c6id.4xlarge"|"c6id.8xlarge"|"c6id.12xlarge"|"c6id.16xlarge"|"c6id.24xlarge"|"c6id.32xlarge"|"c6id.metal"|"m6id.large"|"m6id.xlarge"|"m6id.2xlarge"|"m6id.4xlarge"|"m6id.8xlarge"|"m6id.12xlarge"|"m6id.16xlarge"|"m6id.24xlarge"|"m6id.32xlarge"|"m6id.metal"|"r6id.large"|"r6id.xlarge"|"r6id.2xlarge"|"r6id.4xlarge"|"r6id.8xlarge"|"r6id.12xlarge"|"r6id.16xlarge"|"r6id.24xlarge"|"r6id.32xlarge"|"r6id.metal"|"r6a.large"|"r6a.xlarge"|"r6a.2xlarge"|"r6a.4xlarge"|"r6a.8xlarge"|"r6a.12xlarge"|"r6a.16xlarge"|"r6a.24xlarge"|"r6a.32xlarge"|"r6a.48xlarge"|"r6a.metal"|"p4de.24xlarge"|"u-3tb1.56xlarge"|"u-18tb1.112xlarge"|"u-24tb1.112xlarge"|"trn1.2xlarge"|"trn1.32xlarge"|"hpc6id.32xlarge"|string;
   export type InstanceTypeHypervisor = "nitro"|"xen"|string;
   export interface InstanceTypeInfo {
     /**
@@ -22324,6 +23416,7 @@ declare namespace EC2 {
   }
   export type InstanceTypeOfferingsList = InstanceTypeOffering[];
   export type InstanceTypes = String[];
+  export type InstanceTypesList = String[];
   export interface InstanceUsage {
     /**
      * The ID of the Amazon Web Services account that is making use of the Capacity Reservation.
@@ -23947,6 +25040,7 @@ declare namespace EC2 {
   }
   export type ListingState = "available"|"sold"|"cancelled"|"pending"|string;
   export type ListingStatus = "active"|"pending"|"cancelled"|"closed"|string;
+  export type LoadBalancerArn = string;
   export interface LoadBalancersConfig {
     /**
      * The Classic Load Balancers.
@@ -24091,6 +25185,9 @@ declare namespace EC2 {
      * The mode of the local gateway route table.
      */
     Mode?: LocalGatewayRouteTableMode;
+    /**
+     * Information about the state change.
+     */
     StateReason?: StateReason;
   }
   export type LocalGatewayRouteTableIdSet = LocalGatewayRoutetableId[];
@@ -24294,6 +25391,7 @@ declare namespace EC2 {
   export type MaxIpv6AddrPerInterface = number;
   export type MaxNetworkInterfaces = number;
   export type MaxResults = number;
+  export type MaxResultsParam = number;
   export type MaximumBandwidthInMbps = number;
   export type MaximumEfaInterfaces = number;
   export type MaximumIops = number;
@@ -24347,6 +25445,23 @@ declare namespace EC2 {
     Max?: Integer;
   }
   export type MemorySize = number;
+  export interface MetricPoint {
+    /**
+     * The start date for the metric point. The starting date for the metric point. The starting time must be formatted as yyyy-mm-ddThh:mm:ss. For example, 2022-06-10T12:00:00.000Z.
+     */
+    StartDate?: MillisecondDateTime;
+    /**
+     * The end date for the metric point. The ending time must be formatted as yyyy-mm-ddThh:mm:ss. For example, 2022-06-12T12:00:00.000Z.
+     */
+    EndDate?: MillisecondDateTime;
+    Value?: Float;
+    /**
+     * The status of the metric point.
+     */
+    Status?: String;
+  }
+  export type MetricPoints = MetricPoint[];
+  export type MetricType = "aggregate-latency"|string;
   export type MillisecondDateTime = Date;
   export interface ModifyAddressAttributeRequest {
     /**
@@ -25192,6 +26307,9 @@ declare namespace EC2 {
     DryRun?: Boolean;
   }
   export interface ModifyLocalGatewayRouteResult {
+    /**
+     * Information about the local gateway route table.
+     */
     Route?: LocalGatewayRoute;
   }
   export interface ModifyManagedPrefixListRequest {
@@ -25232,7 +26350,7 @@ declare namespace EC2 {
   }
   export interface ModifyNetworkInterfaceAttributeRequest {
     /**
-     * Information about the interface attachment. If modifying the 'delete on termination' attribute, you must specify the ID of the interface attachment.
+     * Information about the interface attachment. If modifying the delete on termination attribute, you must specify the ID of the interface attachment.
      */
     Attachment?: NetworkInterfaceAttachmentChanges;
     /**
@@ -25255,6 +26373,10 @@ declare namespace EC2 {
      * Enable or disable source/destination checks, which ensure that the instance is either the source or the destination of any traffic that it receives. If the value is true, source/destination checks are enabled; otherwise, they are disabled. The default value is true. You must disable source/destination checks if the instance runs services such as network address translation, routing, or firewalls.
      */
     SourceDestCheck?: AttributeBooleanValue;
+    /**
+     * Updates the ENA Express configuration for the network interface that’s attached to the instance.
+     */
+    EnaSrdSpecification?: EnaSrdSpecification;
   }
   export interface ModifyPrivateDnsNameOptionsRequest {
     /**
@@ -25669,6 +26791,9 @@ declare namespace EC2 {
     DryRun?: Boolean;
   }
   export interface ModifyTransitGatewayResult {
+    /**
+     * Information about the transit gateway.
+     */
     TransitGateway?: TransitGateway;
   }
   export interface ModifyTransitGatewayVpcAttachmentRequest {
@@ -25713,6 +26838,241 @@ declare namespace EC2 {
      */
     TransitGatewayVpcAttachment?: TransitGatewayVpcAttachment;
   }
+  export interface ModifyVerifiedAccessEndpointEniOptions {
+    /**
+     * The IP protocol.
+     */
+    Protocol?: VerifiedAccessEndpointProtocol;
+    /**
+     * The IP port number.
+     */
+    Port?: VerifiedAccessEndpointPortNumber;
+  }
+  export interface ModifyVerifiedAccessEndpointLoadBalancerOptions {
+    /**
+     * The IDs of the subnets.
+     */
+    SubnetIds?: ModifyVerifiedAccessEndpointSubnetIdList;
+    /**
+     * The IP protocol.
+     */
+    Protocol?: VerifiedAccessEndpointProtocol;
+    /**
+     * The IP port number.
+     */
+    Port?: VerifiedAccessEndpointPortNumber;
+  }
+  export interface ModifyVerifiedAccessEndpointPolicyRequest {
+    /**
+     * The ID of the Amazon Web Services Verified Access endpoint.
+     */
+    VerifiedAccessEndpointId: VerifiedAccessEndpointId;
+    /**
+     * The status of the Verified Access policy.
+     */
+    PolicyEnabled: Boolean;
+    /**
+     * The Amazon Web Services Verified Access policy document.
+     */
+    PolicyDocument?: String;
+    /**
+     * A unique, case-sensitive token that you provide to ensure idempotency of your modification request. For more information, see Ensuring Idempotency.
+     */
+    ClientToken?: String;
+    /**
+     * Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.
+     */
+    DryRun?: Boolean;
+  }
+  export interface ModifyVerifiedAccessEndpointPolicyResult {
+    /**
+     * The status of the Verified Access policy.
+     */
+    PolicyEnabled?: Boolean;
+    /**
+     * The Amazon Web Services Verified Access policy document.
+     */
+    PolicyDocument?: String;
+  }
+  export interface ModifyVerifiedAccessEndpointRequest {
+    /**
+     * The ID of the Amazon Web Services Verified Access endpoint.
+     */
+    VerifiedAccessEndpointId: VerifiedAccessEndpointId;
+    /**
+     * The ID of the Amazon Web Services Verified Access group.
+     */
+    VerifiedAccessGroupId?: VerifiedAccessGroupId;
+    /**
+     * The load balancer details if creating the Amazon Web Services Verified Access endpoint as load-balancertype.
+     */
+    LoadBalancerOptions?: ModifyVerifiedAccessEndpointLoadBalancerOptions;
+    /**
+     * The network interface options.
+     */
+    NetworkInterfaceOptions?: ModifyVerifiedAccessEndpointEniOptions;
+    /**
+     * A description for the Amazon Web Services Verified Access endpoint.
+     */
+    Description?: String;
+    /**
+     * A unique, case-sensitive token that you provide to ensure idempotency of your modification request. For more information, see Ensuring Idempotency.
+     */
+    ClientToken?: String;
+    /**
+     * Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.
+     */
+    DryRun?: Boolean;
+  }
+  export interface ModifyVerifiedAccessEndpointResult {
+    /**
+     * The Amazon Web Services Verified Access endpoint details.
+     */
+    VerifiedAccessEndpoint?: VerifiedAccessEndpoint;
+  }
+  export type ModifyVerifiedAccessEndpointSubnetIdList = SubnetId[];
+  export interface ModifyVerifiedAccessGroupPolicyRequest {
+    /**
+     * The ID of the Amazon Web Services Verified Access group.
+     */
+    VerifiedAccessGroupId: VerifiedAccessGroupId;
+    /**
+     * The status of the Verified Access policy.
+     */
+    PolicyEnabled: Boolean;
+    /**
+     * The Amazon Web Services Verified Access policy document.
+     */
+    PolicyDocument?: String;
+    /**
+     * A unique, case-sensitive token that you provide to ensure idempotency of your modification request. For more information, see Ensuring Idempotency.
+     */
+    ClientToken?: String;
+    /**
+     * Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.
+     */
+    DryRun?: Boolean;
+  }
+  export interface ModifyVerifiedAccessGroupPolicyResult {
+    /**
+     * The status of the Verified Access policy.
+     */
+    PolicyEnabled?: Boolean;
+    /**
+     * The Amazon Web Services Verified Access policy document.
+     */
+    PolicyDocument?: String;
+  }
+  export interface ModifyVerifiedAccessGroupRequest {
+    /**
+     * The ID of the Amazon Web Services Verified Access group.
+     */
+    VerifiedAccessGroupId: VerifiedAccessGroupId;
+    /**
+     * The ID of the Amazon Web Services Verified Access instance.
+     */
+    VerifiedAccessInstanceId?: VerifiedAccessInstanceId;
+    /**
+     * A description for the Amazon Web Services Verified Access group.
+     */
+    Description?: String;
+    /**
+     * A unique, case-sensitive token that you provide to ensure idempotency of your modification request. For more information, see Ensuring Idempotency.
+     */
+    ClientToken?: String;
+    /**
+     * Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.
+     */
+    DryRun?: Boolean;
+  }
+  export interface ModifyVerifiedAccessGroupResult {
+    /**
+     * Details of Amazon Web Services Verified Access group.
+     */
+    VerifiedAccessGroup?: VerifiedAccessGroup;
+  }
+  export interface ModifyVerifiedAccessInstanceLoggingConfigurationRequest {
+    /**
+     * The ID of the Amazon Web Services Verified Access instance.
+     */
+    VerifiedAccessInstanceId: VerifiedAccessInstanceId;
+    /**
+     * The configuration options for Amazon Web Services Verified Access instances.
+     */
+    AccessLogs: VerifiedAccessLogOptions;
+    /**
+     * Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.
+     */
+    DryRun?: Boolean;
+    /**
+     * A unique, case-sensitive token that you provide to ensure idempotency of your modification request. For more information, see Ensuring Idempotency.
+     */
+    ClientToken?: String;
+  }
+  export interface ModifyVerifiedAccessInstanceLoggingConfigurationResult {
+    /**
+     * The logging configuration for Amazon Web Services Verified Access instance.
+     */
+    LoggingConfiguration?: VerifiedAccessInstanceLoggingConfiguration;
+  }
+  export interface ModifyVerifiedAccessInstanceRequest {
+    /**
+     * The ID of the Amazon Web Services Verified Access instance.
+     */
+    VerifiedAccessInstanceId: VerifiedAccessInstanceId;
+    /**
+     * A description for the Amazon Web Services Verified Access instance.
+     */
+    Description?: String;
+    /**
+     * Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.
+     */
+    DryRun?: Boolean;
+    /**
+     * A unique, case-sensitive token that you provide to ensure idempotency of your modification request. For more information, see Ensuring Idempotency.
+     */
+    ClientToken?: String;
+  }
+  export interface ModifyVerifiedAccessInstanceResult {
+    /**
+     * The ID of the Amazon Web Services Verified Access instance.
+     */
+    VerifiedAccessInstance?: VerifiedAccessInstance;
+  }
+  export interface ModifyVerifiedAccessTrustProviderOidcOptions {
+    /**
+     * OpenID Connect (OIDC) scopes are used by an application during authentication to authorize access to a user's details. Each scope returns a specific set of user attributes.
+     */
+    Scope?: String;
+  }
+  export interface ModifyVerifiedAccessTrustProviderRequest {
+    /**
+     * The ID of the Amazon Web Services Verified Access trust provider.
+     */
+    VerifiedAccessTrustProviderId: VerifiedAccessTrustProviderId;
+    /**
+     * The OpenID Connect details for an oidc-type, user-identity based trust provider.
+     */
+    OidcOptions?: ModifyVerifiedAccessTrustProviderOidcOptions;
+    /**
+     * A description for the Amazon Web Services Verified Access trust provider.
+     */
+    Description?: String;
+    /**
+     * Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.
+     */
+    DryRun?: Boolean;
+    /**
+     * A unique, case-sensitive token that you provide to ensure idempotency of your modification request. For more information, see Ensuring Idempotency.
+     */
+    ClientToken?: String;
+  }
+  export interface ModifyVerifiedAccessTrustProviderResult {
+    /**
+     * The ID of the Amazon Web Services Verified Access trust provider.
+     */
+    VerifiedAccessTrustProvider?: VerifiedAccessTrustProvider;
+  }
   export interface ModifyVolumeAttributeRequest {
     /**
      * Indicates whether the volume should be auto-enabled for I/O operations.
@@ -26040,6 +27400,9 @@ declare namespace EC2 {
     DryRun?: Boolean;
   }
   export interface ModifyVpnConnectionOptionsResult {
+    /**
+     * Information about the VPN connection.
+     */
     VpnConnection?: VpnConnection;
   }
   export interface ModifyVpnConnectionRequest {
@@ -26065,6 +27428,9 @@ declare namespace EC2 {
     DryRun?: Boolean;
   }
   export interface ModifyVpnConnectionResult {
+    /**
+     * Information about the VPN connection.
+     */
     VpnConnection?: VpnConnection;
   }
   export interface ModifyVpnTunnelCertificateRequest {
@@ -26082,6 +27448,9 @@ declare namespace EC2 {
     DryRun?: Boolean;
   }
   export interface ModifyVpnTunnelCertificateResult {
+    /**
+     * Information about the VPN connection.
+     */
     VpnConnection?: VpnConnection;
   }
   export interface ModifyVpnTunnelOptionsRequest {
@@ -26103,6 +27472,9 @@ declare namespace EC2 {
     DryRun?: Boolean;
   }
   export interface ModifyVpnTunnelOptionsResult {
+    /**
+     * Information about the VPN connection.
+     */
     VpnConnection?: VpnConnection;
   }
   export interface ModifyVpnTunnelOptionsSpecification {
@@ -26506,6 +27878,10 @@ declare namespace EC2 {
      * Indicates whether the instance type automatically encrypts in-transit traffic between instances.
      */
     EncryptionInTransitSupported?: EncryptionInTransitSupported;
+    /**
+     * Indicates whether the instance type supports ENA Express. ENA Express uses Amazon Web Services Scalable Reliable Datagram (SRD) technology to increase the maximum bandwidth used per stream and minimize tail latency of network traffic between EC2 instances.
+     */
+    EnaSrdSupported?: EnaSrdSupported;
   }
   export interface NetworkInsightsAccessScope {
     /**
@@ -26608,6 +27984,10 @@ declare namespace EC2 {
      * The ID of the path.
      */
     NetworkInsightsPathId?: NetworkInsightsPathId;
+    /**
+     * The member accounts that contain resources that the path can traverse.
+     */
+    AdditionalAccounts?: ValueStringList;
     /**
      * The Amazon Resource Names (ARN) of the Amazon Web Services resources that the path must traverse.
      */
@@ -26648,6 +28028,10 @@ declare namespace EC2 {
      * Potential intermediate components.
      */
     AlternatePathHints?: AlternatePathHintList;
+    /**
+     * Potential intermediate accounts.
+     */
+    SuggestedAccounts?: ValueStringList;
     /**
      * The tags.
      */
@@ -26678,6 +28062,14 @@ declare namespace EC2 {
      * The Amazon Web Services resource that is the destination of the path.
      */
     Destination?: String;
+    /**
+     * The Amazon Resource Name (ARN) of the source.
+     */
+    SourceArn?: ResourceArn;
+    /**
+     * The Amazon Resource Name (ARN) of the destination.
+     */
+    DestinationArn?: ResourceArn;
     /**
      * The IP address of the Amazon Web Services resource that is the source of the path.
      */
@@ -26872,6 +28264,10 @@ declare namespace EC2 {
      * The attachment state.
      */
     Status?: AttachmentStatus;
+    /**
+     * Configures ENA Express for the network interface that this action attaches to the instance.
+     */
+    EnaSrdSpecification?: AttachmentEnaSrdSpecification;
   }
   export interface NetworkInterfaceAttachmentChanges {
     /**
@@ -26989,6 +28385,36 @@ declare namespace EC2 {
   export type OfferingClassType = "standard"|"convertible"|string;
   export type OfferingId = string;
   export type OfferingTypeValues = "Heavy Utilization"|"Medium Utilization"|"Light Utilization"|"No Upfront"|"Partial Upfront"|"All Upfront"|string;
+  export interface OidcOptions {
+    /**
+     * The OIDC issuer.
+     */
+    Issuer?: String;
+    /**
+     * The OIDC authorization endpoint.
+     */
+    AuthorizationEndpoint?: String;
+    /**
+     * The OIDC token endpoint.
+     */
+    TokenEndpoint?: String;
+    /**
+     * The OIDC user info endpoint.
+     */
+    UserInfoEndpoint?: String;
+    /**
+     * The client identifier.
+     */
+    ClientId?: String;
+    /**
+     * The client secret.
+     */
+    ClientSecret?: String;
+    /**
+     * The OpenID Connect (OIDC) scope specified.
+     */
+    Scope?: String;
+  }
   export type OnDemandAllocationStrategy = "lowestPrice"|"prioritized"|string;
   export interface OnDemandOptions {
     /**
@@ -27275,6 +28701,7 @@ declare namespace EC2 {
      */
     Region?: String;
   }
+  export type PeriodType = "five-minutes"|"fifteen-minutes"|"one-hour"|"three-hours"|"one-day"|"one-week"|string;
   export type PermissionGroup = "all"|string;
   export type Phase1DHGroupNumbersList = Phase1DHGroupNumbersListValue[];
   export interface Phase1DHGroupNumbersListValue {
@@ -27362,39 +28789,39 @@ declare namespace EC2 {
   }
   export interface Placement {
     /**
-     * The Availability Zone of the instance. If not specified, an Availability Zone will be automatically chosen for you based on the load balancing criteria for the Region. This parameter is not supported by CreateFleet.
+     * The Availability Zone of the instance. If not specified, an Availability Zone will be automatically chosen for you based on the load balancing criteria for the Region. This parameter is not supported for CreateFleet.
      */
     AvailabilityZone?: String;
     /**
-     * The affinity setting for the instance on the Dedicated Host. This parameter is not supported for the ImportInstance command. This parameter is not supported by CreateFleet.
+     * The affinity setting for the instance on the Dedicated Host. This parameter is not supported for CreateFleet or ImportInstance.
      */
     Affinity?: String;
     /**
-     * The name of the placement group the instance is in.
+     * The name of the placement group that the instance is in. If you specify GroupName, you can't specify GroupId.
      */
     GroupName?: PlacementGroupName;
     /**
-     * The number of the partition that the instance is in. Valid only if the placement group strategy is set to partition. This parameter is not supported by CreateFleet.
+     * The number of the partition that the instance is in. Valid only if the placement group strategy is set to partition. This parameter is not supported for CreateFleet.
      */
     PartitionNumber?: Integer;
     /**
-     * The ID of the Dedicated Host on which the instance resides. This parameter is not supported for the ImportInstance command. This parameter is not supported by CreateFleet.
+     * The ID of the Dedicated Host on which the instance resides. This parameter is not supported for CreateFleet or ImportInstance.
      */
     HostId?: String;
     /**
-     * The tenancy of the instance (if the instance is running in a VPC). An instance with a tenancy of dedicated runs on single-tenant hardware. The host tenancy is not supported for the ImportInstance command. This parameter is not supported by CreateFleet. T3 instances that use the unlimited CPU credit option do not support host tenancy.
+     * The tenancy of the instance (if the instance is running in a VPC). An instance with a tenancy of dedicated runs on single-tenant hardware. This parameter is not supported for CreateFleet. The host tenancy is not supported for ImportInstance or for T3 instances that are configured for the unlimited CPU credit option.
      */
     Tenancy?: Tenancy;
     /**
-     * Reserved for future use. This parameter is not supported by CreateFleet.
+     * Reserved for future use.
      */
     SpreadDomain?: String;
     /**
-     * The ARN of the host resource group in which to launch the instances. If you specify a host resource group ARN, omit the Tenancy parameter or set it to host. This parameter is not supported by CreateFleet.
+     * The ARN of the host resource group in which to launch the instances. If you specify this parameter, either omit the Tenancy parameter or set it to host. This parameter is not supported for CreateFleet.
      */
     HostResourceGroupArn?: String;
     /**
-     * The Group Id of the placement group.
+     * The ID of the placement group that the instance is in. If you specify GroupId, you can't specify GroupName.
      */
     GroupId?: PlacementGroupId;
   }
@@ -27428,7 +28855,7 @@ declare namespace EC2 {
      */
     GroupArn?: String;
     /**
-     *  The spread level for the placement group. Only Outpost placement groups can be spread across hosts. 
+     * The spread level for the placement group. Only Outpost placement groups can be spread across hosts.
      */
     SpreadLevel?: SpreadLevel;
   }
@@ -28094,7 +29521,7 @@ declare namespace EC2 {
      */
     Architecture?: ArchitectureValues;
     /**
-     * The block device mapping entries. If you specify an Amazon EBS volume using the ID of an Amazon EBS snapshot, you can't specify the encryption state of the volume. If you create an AMI on an Outpost, then all backing snapshots must be on the same Outpost or in the Region of that Outpost. AMIs on an Outpost that include local snapshots can be used to launch instances on the same Outpost only. For more information,  Amazon EBS local snapshots on Outposts in the Amazon Elastic Compute Cloud User Guide.
+     * The block device mapping entries. If you specify an Amazon EBS volume using the ID of an Amazon EBS snapshot, you can't specify the encryption state of the volume. If you create an AMI on an Outpost, then all backing snapshots must be on the same Outpost or in the Region of that Outpost. AMIs on an Outpost that include local snapshots can be used to launch instances on the same Outpost only. For more information, Amazon EBS local snapshots on Outposts in the Amazon EC2 User Guide.
      */
     BlockDeviceMappings?: BlockDeviceMappingRequestList;
     /**
@@ -28118,7 +29545,7 @@ declare namespace EC2 {
      */
     Name: String;
     /**
-     * The billing product codes. Your account must be authorized to specify billing product codes. Otherwise, you can use the Amazon Web Services Marketplace to bill for the use of an AMI.
+     * The billing product codes. Your account must be authorized to specify billing product codes. If your account is not authorized to specify billing product codes, you can publish AMIs that include billable software and list them on the Amazon Web Services Marketplace. You must first register as a seller on the Amazon Web Services Marketplace. For more information, see Getting started as a seller and AMI-based products in the Amazon Web Services Marketplace Seller Guide.
      */
     BillingProducts?: BillingProductList;
     /**
@@ -28138,19 +29565,19 @@ declare namespace EC2 {
      */
     VirtualizationType?: String;
     /**
-     * The boot mode of the AMI. For more information, see Boot modes in the Amazon Elastic Compute Cloud User Guide.
+     * The boot mode of the AMI. For more information, see Boot modes in the Amazon EC2 User Guide.
      */
     BootMode?: BootModeValues;
     /**
-     * Set to v2.0 to enable Trusted Platform Module (TPM) support. For more information, see NitroTPM in the Amazon Elastic Compute Cloud User Guide.
+     * Set to v2.0 to enable Trusted Platform Module (TPM) support. For more information, see NitroTPM in the Amazon EC2 User Guide.
      */
     TpmSupport?: TpmSupportValues;
     /**
-     * Base64 representation of the non-volatile UEFI variable store. To retrieve the UEFI data, use the GetInstanceUefiData command. You can inspect and modify the UEFI data by using the python-uefivars tool on GitHub. For more information, see UEFI Secure Boot in the Amazon Elastic Compute Cloud User Guide.
+     * Base64 representation of the non-volatile UEFI variable store. To retrieve the UEFI data, use the GetInstanceUefiData command. You can inspect and modify the UEFI data by using the python-uefivars tool on GitHub. For more information, see UEFI Secure Boot in the Amazon EC2 User Guide.
      */
     UefiData?: StringType;
     /**
-     * Set to v2.0 to indicate that IMDSv2 is specified in the AMI. Instances launched from this AMI will have HttpTokens automatically set to required so that, by default, the instance requires that IMDSv2 is used when requesting instance metadata. In addition, HttpPutResponseHopLimit is set to 2. For more information, see Configure the AMI in the Amazon Elastic Compute Cloud User Guide.  If you set the value to v2.0, make sure that your AMI software can support IMDSv2. 
+     * Set to v2.0 to indicate that IMDSv2 is specified in the AMI. Instances launched from this AMI will have HttpTokens automatically set to required so that, by default, the instance requires that IMDSv2 is used when requesting instance metadata. In addition, HttpPutResponseHopLimit is set to 2. For more information, see Configure the AMI in the Amazon EC2 User Guide.  If you set the value to v2.0, make sure that your AMI software can support IMDSv2. 
      */
     ImdsSupport?: ImdsSupportValues;
   }
@@ -28253,6 +29680,9 @@ declare namespace EC2 {
     DryRun?: Boolean;
   }
   export interface RejectTransitGatewayMulticastDomainAssociationsResult {
+    /**
+     * Information about the multicast domain associations.
+     */
     Associations?: TransitGatewayMulticastDomainAssociations;
   }
   export interface RejectTransitGatewayPeeringAttachmentRequest {
@@ -29447,7 +30877,7 @@ declare namespace EC2 {
      */
     ResourceTypes?: ValueStringList;
   }
-  export type ResourceType = "capacity-reservation"|"client-vpn-endpoint"|"customer-gateway"|"carrier-gateway"|"coip-pool"|"dedicated-host"|"dhcp-options"|"egress-only-internet-gateway"|"elastic-ip"|"elastic-gpu"|"export-image-task"|"export-instance-task"|"fleet"|"fpga-image"|"host-reservation"|"image"|"import-image-task"|"import-snapshot-task"|"instance"|"instance-event-window"|"internet-gateway"|"ipam"|"ipam-pool"|"ipam-scope"|"ipv4pool-ec2"|"ipv6pool-ec2"|"key-pair"|"launch-template"|"local-gateway"|"local-gateway-route-table"|"local-gateway-virtual-interface"|"local-gateway-virtual-interface-group"|"local-gateway-route-table-vpc-association"|"local-gateway-route-table-virtual-interface-group-association"|"natgateway"|"network-acl"|"network-interface"|"network-insights-analysis"|"network-insights-path"|"network-insights-access-scope"|"network-insights-access-scope-analysis"|"placement-group"|"prefix-list"|"replace-root-volume-task"|"reserved-instances"|"route-table"|"security-group"|"security-group-rule"|"snapshot"|"spot-fleet-request"|"spot-instances-request"|"subnet"|"subnet-cidr-reservation"|"traffic-mirror-filter"|"traffic-mirror-session"|"traffic-mirror-target"|"transit-gateway"|"transit-gateway-attachment"|"transit-gateway-connect-peer"|"transit-gateway-multicast-domain"|"transit-gateway-policy-table"|"transit-gateway-route-table"|"transit-gateway-route-table-announcement"|"volume"|"vpc"|"vpc-endpoint"|"vpc-endpoint-connection"|"vpc-endpoint-service"|"vpc-endpoint-service-permission"|"vpc-peering-connection"|"vpn-connection"|"vpn-gateway"|"vpc-flow-log"|"capacity-reservation-fleet"|"traffic-mirror-filter-rule"|"vpc-endpoint-connection-device-type"|"vpn-connection-device-type"|string;
+  export type ResourceType = "capacity-reservation"|"client-vpn-endpoint"|"customer-gateway"|"carrier-gateway"|"coip-pool"|"dedicated-host"|"dhcp-options"|"egress-only-internet-gateway"|"elastic-ip"|"elastic-gpu"|"export-image-task"|"export-instance-task"|"fleet"|"fpga-image"|"host-reservation"|"image"|"import-image-task"|"import-snapshot-task"|"instance"|"instance-event-window"|"internet-gateway"|"ipam"|"ipam-pool"|"ipam-scope"|"ipv4pool-ec2"|"ipv6pool-ec2"|"key-pair"|"launch-template"|"local-gateway"|"local-gateway-route-table"|"local-gateway-virtual-interface"|"local-gateway-virtual-interface-group"|"local-gateway-route-table-vpc-association"|"local-gateway-route-table-virtual-interface-group-association"|"natgateway"|"network-acl"|"network-interface"|"network-insights-analysis"|"network-insights-path"|"network-insights-access-scope"|"network-insights-access-scope-analysis"|"placement-group"|"prefix-list"|"replace-root-volume-task"|"reserved-instances"|"route-table"|"security-group"|"security-group-rule"|"snapshot"|"spot-fleet-request"|"spot-instances-request"|"subnet"|"subnet-cidr-reservation"|"traffic-mirror-filter"|"traffic-mirror-session"|"traffic-mirror-target"|"transit-gateway"|"transit-gateway-attachment"|"transit-gateway-connect-peer"|"transit-gateway-multicast-domain"|"transit-gateway-policy-table"|"transit-gateway-route-table"|"transit-gateway-route-table-announcement"|"volume"|"vpc"|"vpc-endpoint"|"vpc-endpoint-connection"|"vpc-endpoint-service"|"vpc-endpoint-service-permission"|"vpc-peering-connection"|"vpn-connection"|"vpn-gateway"|"vpc-flow-log"|"capacity-reservation-fleet"|"traffic-mirror-filter-rule"|"vpc-endpoint-connection-device-type"|"verified-access-instance"|"verified-access-group"|"verified-access-endpoint"|"verified-access-policy"|"verified-access-trust-provider"|"vpn-connection-device-type"|"vpc-block-public-access-exclusion"|string;
   export interface ResponseError {
     /**
      * The error code.
@@ -30737,6 +32167,7 @@ declare namespace EC2 {
     VpcId?: String;
   }
   export type SecurityGroupId = string;
+  export type SecurityGroupIdList = SecurityGroupId[];
   export type SecurityGroupIdStringList = SecurityGroupId[];
   export interface SecurityGroupIdentifier {
     /**
@@ -31495,7 +32926,7 @@ declare namespace EC2 {
   }
   export interface SpotFleetRequestConfigData {
     /**
-     * The strategy that determines how to allocate the target Spot Instance capacity across the Spot Instance pools specified by the Spot Fleet launch configuration. For more information, see Allocation strategies for Spot Instances in the Amazon EC2 User Guide.  lowestPrice - Spot Fleet launches instances from the lowest-price Spot Instance pool that has available capacity. If the cheapest pool doesn't have available capacity, the Spot Instances come from the next cheapest pool that has available capacity. If a pool runs out of capacity before fulfilling your desired capacity, Spot Fleet will continue to fulfill your request by drawing from the next cheapest pool. To ensure that your desired capacity is met, you might receive Spot Instances from several pools.  diversified - Spot Fleet launches instances from all of the Spot Instance pools that you specify.  capacityOptimized (recommended) - Spot Fleet launches instances from Spot Instance pools with optimal capacity for the number of instances that are launching. To give certain instance types a higher chance of launching first, use capacityOptimizedPrioritized. Set a priority for each instance type by using the Priority parameter for LaunchTemplateOverrides. You can assign the same priority to different LaunchTemplateOverrides. EC2 implements the priorities on a best-effort basis, but optimizes for capacity first. capacityOptimizedPrioritized is supported only if your Spot Fleet uses a launch template. Note that if the OnDemandAllocationStrategy is set to prioritized, the same priority is applied when fulfilling On-Demand capacity. Default: lowestPrice 
+     * The strategy that determines how to allocate the target Spot Instance capacity across the Spot Instance pools specified by the Spot Fleet launch configuration. For more information, see Allocation strategies for Spot Instances in the Amazon EC2 User Guide.  priceCapacityOptimized (recommended)  Spot Fleet identifies the pools with the highest capacity availability for the number of instances that are launching. This means that we will request Spot Instances from the pools that we believe have the lowest chance of interruption in the near term. Spot Fleet then requests Spot Instances from the lowest priced of these pools.  capacityOptimized  Spot Fleet identifies the pools with the highest capacity availability for the number of instances that are launching. This means that we will request Spot Instances from the pools that we believe have the lowest chance of interruption in the near term. To give certain instance types a higher chance of launching first, use capacityOptimizedPrioritized. Set a priority for each instance type by using the Priority parameter for LaunchTemplateOverrides. You can assign the same priority to different LaunchTemplateOverrides. EC2 implements the priorities on a best-effort basis, but optimizes for capacity first. capacityOptimizedPrioritized is supported only if your Spot Fleet uses a launch template. Note that if the OnDemandAllocationStrategy is set to prioritized, the same priority is applied when fulfilling On-Demand capacity.  diversified  Spot Fleet requests instances from all of the Spot Instance pools that you specify.  lowestPrice  Spot Fleet requests instances from the lowest priced Spot Instance pool that has available capacity. If the lowest priced pool doesn't have available capacity, the Spot Instances come from the next lowest priced pool that has available capacity. If a pool runs out of capacity before fulfilling your desired capacity, Spot Fleet will continue to fulfill your request by drawing from the next lowest priced pool. To ensure that your desired capacity is met, you might receive Spot Instances from several pools. Because this strategy only considers instance price and not capacity availability, it might lead to high interruption rates.   Default: lowestPrice 
      */
     AllocationStrategy?: AllocationStrategy;
     /**
@@ -31751,7 +33182,7 @@ declare namespace EC2 {
   }
   export interface SpotOptions {
     /**
-     * The strategy that determines how to allocate the target Spot Instance capacity across the Spot Instance pools specified by the EC2 Fleet launch configuration. For more information, see Allocation strategies for Spot Instances in the Amazon EC2 User Guide.  lowest-price - EC2 Fleet launches instances from the lowest-price Spot Instance pool that has available capacity. If the cheapest pool doesn't have available capacity, the Spot Instances come from the next cheapest pool that has available capacity. If a pool runs out of capacity before fulfilling your desired capacity, EC2 Fleet will continue to fulfill your request by drawing from the next cheapest pool. To ensure that your desired capacity is met, you might receive Spot Instances from several pools.  diversified - EC2 Fleet launches instances from all of the Spot Instance pools that you specify.  capacity-optimized (recommended) - EC2 Fleet launches instances from Spot Instance pools with optimal capacity for the number of instances that are launching. To give certain instance types a higher chance of launching first, use capacity-optimized-prioritized. Set a priority for each instance type by using the Priority parameter for LaunchTemplateOverrides. You can assign the same priority to different LaunchTemplateOverrides. EC2 implements the priorities on a best-effort basis, but optimizes for capacity first. capacity-optimized-prioritized is supported only if your fleet uses a launch template. Note that if the On-Demand AllocationStrategy is set to prioritized, the same priority is applied when fulfilling On-Demand capacity. Default: lowest-price 
+     * The strategy that determines how to allocate the target Spot Instance capacity across the Spot Instance pools specified by the EC2 Fleet launch configuration. For more information, see Allocation strategies for Spot Instances in the Amazon EC2 User Guide.  price-capacity-optimized (recommended)  EC2 Fleet identifies the pools with the highest capacity availability for the number of instances that are launching. This means that we will request Spot Instances from the pools that we believe have the lowest chance of interruption in the near term. EC2 Fleet then requests Spot Instances from the lowest priced of these pools.  capacity-optimized  EC2 Fleet identifies the pools with the highest capacity availability for the number of instances that are launching. This means that we will request Spot Instances from the pools that we believe have the lowest chance of interruption in the near term. To give certain instance types a higher chance of launching first, use capacity-optimized-prioritized. Set a priority for each instance type by using the Priority parameter for LaunchTemplateOverrides. You can assign the same priority to different LaunchTemplateOverrides. EC2 implements the priorities on a best-effort basis, but optimizes for capacity first. capacity-optimized-prioritized is supported only if your EC2 Fleet uses a launch template. Note that if the On-Demand AllocationStrategy is set to prioritized, the same priority is applied when fulfilling On-Demand capacity.  diversified  EC2 Fleet requests instances from all of the Spot Instance pools that you specify.  lowest-price  EC2 Fleet requests instances from the lowest priced Spot Instance pool that has available capacity. If the lowest priced pool doesn't have available capacity, the Spot Instances come from the next lowest priced pool that has available capacity. If a pool runs out of capacity before fulfilling your desired capacity, EC2 Fleet will continue to fulfill your request by drawing from the next lowest priced pool. To ensure that your desired capacity is met, you might receive Spot Instances from several pools. Because this strategy only considers instance price and not capacity availability, it might lead to high interruption rates.   Default: lowest-price 
      */
     AllocationStrategy?: SpotAllocationStrategy;
     /**
@@ -31785,7 +33216,7 @@ declare namespace EC2 {
   }
   export interface SpotOptionsRequest {
     /**
-     * The strategy that determines how to allocate the target Spot Instance capacity across the Spot Instance pools specified by the EC2 Fleet launch configuration. For more information, see Allocation strategies for Spot Instances in the Amazon EC2 User Guide.  lowest-price - EC2 Fleet launches instances from the lowest-price Spot Instance pool that has available capacity. If the cheapest pool doesn't have available capacity, the Spot Instances come from the next cheapest pool that has available capacity. If a pool runs out of capacity before fulfilling your desired capacity, EC2 Fleet will continue to fulfill your request by drawing from the next cheapest pool. To ensure that your desired capacity is met, you might receive Spot Instances from several pools.  diversified - EC2 Fleet launches instances from all of the Spot Instance pools that you specify.  capacity-optimized (recommended) - EC2 Fleet launches instances from Spot Instance pools with optimal capacity for the number of instances that are launching. To give certain instance types a higher chance of launching first, use capacity-optimized-prioritized. Set a priority for each instance type by using the Priority parameter for LaunchTemplateOverrides. You can assign the same priority to different LaunchTemplateOverrides. EC2 implements the priorities on a best-effort basis, but optimizes for capacity first. capacity-optimized-prioritized is supported only if your fleet uses a launch template. Note that if the On-Demand AllocationStrategy is set to prioritized, the same priority is applied when fulfilling On-Demand capacity. Default: lowest-price 
+     * The strategy that determines how to allocate the target Spot Instance capacity across the Spot Instance pools specified by the EC2 Fleet launch configuration. For more information, see Allocation strategies for Spot Instances in the Amazon EC2 User Guide.  price-capacity-optimized (recommended)  EC2 Fleet identifies the pools with the highest capacity availability for the number of instances that are launching. This means that we will request Spot Instances from the pools that we believe have the lowest chance of interruption in the near term. EC2 Fleet then requests Spot Instances from the lowest priced of these pools.  capacity-optimized  EC2 Fleet identifies the pools with the highest capacity availability for the number of instances that are launching. This means that we will request Spot Instances from the pools that we believe have the lowest chance of interruption in the near term. To give certain instance types a higher chance of launching first, use capacity-optimized-prioritized. Set a priority for each instance type by using the Priority parameter for LaunchTemplateOverrides. You can assign the same priority to different LaunchTemplateOverrides. EC2 implements the priorities on a best-effort basis, but optimizes for capacity first. capacity-optimized-prioritized is supported only if your EC2 Fleet uses a launch template. Note that if the On-Demand AllocationStrategy is set to prioritized, the same priority is applied when fulfilling On-Demand capacity.  diversified  EC2 Fleet requests instances from all of the Spot Instance pools that you specify.  lowest-price  EC2 Fleet requests instances from the lowest priced Spot Instance pool that has available capacity. If the lowest priced pool doesn't have available capacity, the Spot Instances come from the next lowest priced pool that has available capacity. If a pool runs out of capacity before fulfilling your desired capacity, EC2 Fleet will continue to fulfill your request by drawing from the next lowest priced pool. To ensure that your desired capacity is met, you might receive Spot Instances from several pools. Because this strategy only considers instance price and not capacity availability, it might lead to high interruption rates.   Default: lowest-price 
      */
     AllocationStrategy?: SpotAllocationStrategy;
     /**
@@ -31975,6 +33406,10 @@ declare namespace EC2 {
      * The ID of the path.
      */
     NetworkInsightsPathId: NetworkInsightsPathId;
+    /**
+     * The member accounts that contain resources that the path can traverse.
+     */
+    AdditionalAccounts?: ValueStringList;
     /**
      * The Amazon Resource Names (ARN) of the resources that the path must traverse.
      */
@@ -32026,6 +33461,7 @@ declare namespace EC2 {
     Message?: String;
   }
   export type StaticSourcesSupportValue = "enable"|"disable"|string;
+  export type StatisticType = "p50"|string;
   export type Status = "MoveInProgress"|"InVpc"|"InClassic"|string;
   export type StatusName = "reachability"|string;
   export type StatusType = "passed"|"failed"|"insufficient-data"|"initializing"|string;
@@ -32265,6 +33701,29 @@ declare namespace EC2 {
   export type SubnetIpv6CidrBlockAssociationSet = SubnetIpv6CidrBlockAssociation[];
   export type SubnetList = Subnet[];
   export type SubnetState = "pending"|"available"|string;
+  export interface Subscription {
+    /**
+     * The Region or Availability Zone that's the source for the subscription. For example, us-east-1.
+     */
+    Source?: String;
+    /**
+     * The Region or Availability Zone that's the target for the subscription. For example, eu-west-1.
+     */
+    Destination?: String;
+    /**
+     * The metric used for the subscription.
+     */
+    Metric?: MetricType;
+    /**
+     * The statistic used for the subscription.
+     */
+    Statistic?: StatisticType;
+    /**
+     * The data aggregation time for the subscription.
+     */
+    Period?: PeriodType;
+  }
+  export type SubscriptionList = Subscription[];
   export interface SuccessfulInstanceCreditSpecificationItem {
     /**
      * The ID of the instance.
@@ -33769,6 +35228,7 @@ declare namespace EC2 {
   export type TrunkInterfaceAssociationId = string;
   export type TrunkInterfaceAssociationIdList = TrunkInterfaceAssociationId[];
   export type TrunkInterfaceAssociationList = TrunkInterfaceAssociation[];
+  export type TrustProviderType = "user"|"device"|string;
   export type TunnelInsideIpVersion = "ipv4"|"ipv6"|string;
   export interface TunnelOption {
     /**
@@ -34074,6 +35534,7 @@ declare namespace EC2 {
   export type UserIdGroupPairList = UserIdGroupPair[];
   export type UserIdGroupPairSet = UserIdGroupPair[];
   export type UserIdStringList = String[];
+  export type UserTrustProviderType = "iam-identity-center"|"oidc"|string;
   export type VCpuCount = number;
   export interface VCpuCountRange {
     /**
@@ -34113,7 +35574,7 @@ declare namespace EC2 {
      */
     ValidCores?: CoreCountList;
     /**
-     * The valid number of threads per core that can be configured for the instance type. 
+     * The valid number of threads per core that can be configured for the instance type.
      */
     ValidThreadsPerCore?: ThreadsPerCoreList;
   }
@@ -34134,6 +35595,411 @@ declare namespace EC2 {
     Errors?: ErrorSet;
   }
   export type ValueStringList = String[];
+  export interface VerifiedAccessEndpoint {
+    /**
+     * The ID of the Amazon Web Services Verified Access instance.
+     */
+    VerifiedAccessInstanceId?: String;
+    /**
+     * The ID of the Amazon Web Services Verified Access group.
+     */
+    VerifiedAccessGroupId?: String;
+    /**
+     * The ID of the Amazon Web Services Verified Access endpoint.
+     */
+    VerifiedAccessEndpointId?: String;
+    /**
+     * The DNS name for users to reach your application.
+     */
+    ApplicationDomain?: String;
+    /**
+     * The type of Amazon Web Services Verified Access endpoint. Incoming application requests will be sent to an IP address, load balancer or a network interface depending on the endpoint type specified.
+     */
+    EndpointType?: VerifiedAccessEndpointType;
+    /**
+     * The type of attachment used to provide connectivity between the Amazon Web Services Verified Access endpoint and the application.
+     */
+    AttachmentType?: VerifiedAccessEndpointAttachmentType;
+    /**
+     * The ARN of a public TLS/SSL certificate imported into or created with ACM.
+     */
+    DomainCertificateArn?: String;
+    /**
+     * A DNS name that is generated for the endpoint.
+     */
+    EndpointDomain?: String;
+    /**
+     * Returned if endpoint has a device trust provider attached.
+     */
+    DeviceValidationDomain?: String;
+    /**
+     * The IDs of the security groups for the endpoint.
+     */
+    SecurityGroupIds?: SecurityGroupIdList;
+    /**
+     * The load balancer details if creating the Amazon Web Services Verified Access endpoint as load-balancertype.
+     */
+    LoadBalancerOptions?: VerifiedAccessEndpointLoadBalancerOptions;
+    /**
+     * The options for network-interface type endpoint.
+     */
+    NetworkInterfaceOptions?: VerifiedAccessEndpointEniOptions;
+    /**
+     * The endpoint status.
+     */
+    Status?: VerifiedAccessEndpointStatus;
+    /**
+     * A description for the Amazon Web Services Verified Access endpoint.
+     */
+    Description?: String;
+    /**
+     * The creation time.
+     */
+    CreationTime?: String;
+    /**
+     * The last updated time.
+     */
+    LastUpdatedTime?: String;
+    /**
+     * The deletion time.
+     */
+    DeletionTime?: String;
+    /**
+     * The tags.
+     */
+    Tags?: TagList;
+  }
+  export type VerifiedAccessEndpointAttachmentType = "vpc"|string;
+  export interface VerifiedAccessEndpointEniOptions {
+    /**
+     * The ID of the network interface.
+     */
+    NetworkInterfaceId?: NetworkInterfaceId;
+    /**
+     * The IP protocol.
+     */
+    Protocol?: VerifiedAccessEndpointProtocol;
+    /**
+     * The IP port number.
+     */
+    Port?: VerifiedAccessEndpointPortNumber;
+  }
+  export type VerifiedAccessEndpointId = string;
+  export type VerifiedAccessEndpointIdList = VerifiedAccessEndpointId[];
+  export type VerifiedAccessEndpointList = VerifiedAccessEndpoint[];
+  export interface VerifiedAccessEndpointLoadBalancerOptions {
+    /**
+     * The IP protocol.
+     */
+    Protocol?: VerifiedAccessEndpointProtocol;
+    /**
+     * The IP port number.
+     */
+    Port?: VerifiedAccessEndpointPortNumber;
+    /**
+     * The ARN of the load balancer.
+     */
+    LoadBalancerArn?: String;
+    /**
+     * The IDs of the subnets.
+     */
+    SubnetIds?: VerifiedAccessEndpointSubnetIdList;
+  }
+  export type VerifiedAccessEndpointPortNumber = number;
+  export type VerifiedAccessEndpointProtocol = "http"|"https"|string;
+  export interface VerifiedAccessEndpointStatus {
+    /**
+     * The status code of the Verified Access endpoint.
+     */
+    Code?: VerifiedAccessEndpointStatusCode;
+    /**
+     * The status message of the Verified Access endpoint.
+     */
+    Message?: String;
+  }
+  export type VerifiedAccessEndpointStatusCode = "pending"|"active"|"updating"|"deleting"|"deleted"|string;
+  export type VerifiedAccessEndpointSubnetIdList = SubnetId[];
+  export type VerifiedAccessEndpointType = "load-balancer"|"network-interface"|string;
+  export interface VerifiedAccessGroup {
+    /**
+     * The ID of the Verified Access group.
+     */
+    VerifiedAccessGroupId?: String;
+    /**
+     * The ID of the Amazon Web Services Verified Access instance.
+     */
+    VerifiedAccessInstanceId?: String;
+    /**
+     * A description for the Amazon Web Services Verified Access group.
+     */
+    Description?: String;
+    /**
+     * The Amazon Web Services account number that owns the group.
+     */
+    Owner?: String;
+    /**
+     * The ARN of the Verified Access group.
+     */
+    VerifiedAccessGroupArn?: String;
+    /**
+     * The creation time.
+     */
+    CreationTime?: String;
+    /**
+     * The last updated time.
+     */
+    LastUpdatedTime?: String;
+    /**
+     * The deletion time.
+     */
+    DeletionTime?: String;
+    /**
+     * The tags.
+     */
+    Tags?: TagList;
+  }
+  export type VerifiedAccessGroupId = string;
+  export type VerifiedAccessGroupIdList = VerifiedAccessGroupId[];
+  export type VerifiedAccessGroupList = VerifiedAccessGroup[];
+  export interface VerifiedAccessInstance {
+    /**
+     * The ID of the Amazon Web Services Verified Access instance.
+     */
+    VerifiedAccessInstanceId?: String;
+    /**
+     * A description for the Amazon Web Services Verified Access instance.
+     */
+    Description?: String;
+    /**
+     * The IDs of the Amazon Web Services Verified Access trust providers.
+     */
+    VerifiedAccessTrustProviders?: VerifiedAccessTrustProviderCondensedList;
+    /**
+     * The creation time.
+     */
+    CreationTime?: String;
+    /**
+     * The last updated time.
+     */
+    LastUpdatedTime?: String;
+    /**
+     * The tags.
+     */
+    Tags?: TagList;
+  }
+  export type VerifiedAccessInstanceId = string;
+  export type VerifiedAccessInstanceIdList = VerifiedAccessInstanceId[];
+  export type VerifiedAccessInstanceList = VerifiedAccessInstance[];
+  export interface VerifiedAccessInstanceLoggingConfiguration {
+    /**
+     * The ID of the Amazon Web Services Verified Access instance.
+     */
+    VerifiedAccessInstanceId?: String;
+    /**
+     * Details about the logging options.
+     */
+    AccessLogs?: VerifiedAccessLogs;
+  }
+  export type VerifiedAccessInstanceLoggingConfigurationList = VerifiedAccessInstanceLoggingConfiguration[];
+  export interface VerifiedAccessLogCloudWatchLogsDestination {
+    /**
+     * Indicates whether logging is enabled.
+     */
+    Enabled?: Boolean;
+    /**
+     * The delivery status for access logs.
+     */
+    DeliveryStatus?: VerifiedAccessLogDeliveryStatus;
+    /**
+     * The ID of the CloudWatch Logs log group.
+     */
+    LogGroup?: String;
+  }
+  export interface VerifiedAccessLogCloudWatchLogsDestinationOptions {
+    /**
+     * Indicates whether logging is enabled.
+     */
+    Enabled: Boolean;
+    /**
+     * The ID of the CloudWatch Logs log group.
+     */
+    LogGroup?: String;
+  }
+  export interface VerifiedAccessLogDeliveryStatus {
+    /**
+     * The status code.
+     */
+    Code?: VerifiedAccessLogDeliveryStatusCode;
+    /**
+     * The status message.
+     */
+    Message?: String;
+  }
+  export type VerifiedAccessLogDeliveryStatusCode = "success"|"failed"|string;
+  export interface VerifiedAccessLogKinesisDataFirehoseDestination {
+    /**
+     * Indicates whether logging is enabled.
+     */
+    Enabled?: Boolean;
+    /**
+     * The delivery status.
+     */
+    DeliveryStatus?: VerifiedAccessLogDeliveryStatus;
+    /**
+     * The ID of the delivery stream.
+     */
+    DeliveryStream?: String;
+  }
+  export interface VerifiedAccessLogKinesisDataFirehoseDestinationOptions {
+    /**
+     * Indicates whether logging is enabled.
+     */
+    Enabled: Boolean;
+    /**
+     * The ID of the delivery stream.
+     */
+    DeliveryStream?: String;
+  }
+  export interface VerifiedAccessLogOptions {
+    /**
+     * Sends Verified Access logs to Amazon S3.
+     */
+    S3?: VerifiedAccessLogS3DestinationOptions;
+    /**
+     * Sends Verified Access logs to CloudWatch Logs.
+     */
+    CloudWatchLogs?: VerifiedAccessLogCloudWatchLogsDestinationOptions;
+    /**
+     * Sends Verified Access logs to Kinesis.
+     */
+    KinesisDataFirehose?: VerifiedAccessLogKinesisDataFirehoseDestinationOptions;
+  }
+  export interface VerifiedAccessLogS3Destination {
+    /**
+     * Indicates whether logging is enabled.
+     */
+    Enabled?: Boolean;
+    /**
+     * The delivery status.
+     */
+    DeliveryStatus?: VerifiedAccessLogDeliveryStatus;
+    /**
+     * The bucket name.
+     */
+    BucketName?: String;
+    /**
+     * The bucket prefix.
+     */
+    Prefix?: String;
+    /**
+     * The Amazon Web Services account number that owns the bucket.
+     */
+    BucketOwner?: String;
+  }
+  export interface VerifiedAccessLogS3DestinationOptions {
+    /**
+     * Indicates whether logging is enabled.
+     */
+    Enabled: Boolean;
+    /**
+     * The bucket name.
+     */
+    BucketName?: String;
+    /**
+     * The bucket prefix.
+     */
+    Prefix?: String;
+    /**
+     * The ID of the Amazon Web Services account that owns the Amazon S3 bucket.
+     */
+    BucketOwner?: String;
+  }
+  export interface VerifiedAccessLogs {
+    /**
+     * Amazon S3 logging options.
+     */
+    S3?: VerifiedAccessLogS3Destination;
+    /**
+     * CloudWatch Logs logging destination.
+     */
+    CloudWatchLogs?: VerifiedAccessLogCloudWatchLogsDestination;
+    /**
+     * Kinesis logging destination.
+     */
+    KinesisDataFirehose?: VerifiedAccessLogKinesisDataFirehoseDestination;
+  }
+  export interface VerifiedAccessTrustProvider {
+    /**
+     * The ID of the Amazon Web Services Verified Access trust provider.
+     */
+    VerifiedAccessTrustProviderId?: String;
+    /**
+     * A description for the Amazon Web Services Verified Access trust provider.
+     */
+    Description?: String;
+    /**
+     * The type of Verified Access trust provider.
+     */
+    TrustProviderType?: TrustProviderType;
+    /**
+     * The type of user-based trust provider.
+     */
+    UserTrustProviderType?: UserTrustProviderType;
+    /**
+     * The type of device-based trust provider.
+     */
+    DeviceTrustProviderType?: DeviceTrustProviderType;
+    /**
+     * The OpenID Connect details for an oidc-type, user-identity based trust provider.
+     */
+    OidcOptions?: OidcOptions;
+    /**
+     * The options for device-identity type trust provider.
+     */
+    DeviceOptions?: DeviceOptions;
+    /**
+     * The identifier to be used when working with policy rules.
+     */
+    PolicyReferenceName?: String;
+    /**
+     * The creation time.
+     */
+    CreationTime?: String;
+    /**
+     * The last updated time.
+     */
+    LastUpdatedTime?: String;
+    /**
+     * The tags.
+     */
+    Tags?: TagList;
+  }
+  export interface VerifiedAccessTrustProviderCondensed {
+    /**
+     * The ID of the trust provider.
+     */
+    VerifiedAccessTrustProviderId?: String;
+    /**
+     * The description of trust provider.
+     */
+    Description?: String;
+    /**
+     * The type of trust provider (user- or device-based).
+     */
+    TrustProviderType?: TrustProviderType;
+    /**
+     * The type of user-based trust provider.
+     */
+    UserTrustProviderType?: UserTrustProviderType;
+    /**
+     * The type of device-based trust provider.
+     */
+    DeviceTrustProviderType?: DeviceTrustProviderType;
+  }
+  export type VerifiedAccessTrustProviderCondensedList = VerifiedAccessTrustProviderCondensed[];
+  export type VerifiedAccessTrustProviderId = string;
+  export type VerifiedAccessTrustProviderIdList = VerifiedAccessTrustProviderId[];
+  export type VerifiedAccessTrustProviderList = VerifiedAccessTrustProvider[];
   export type VersionDescription = string;
   export type VersionStringList = String[];
   export interface VgwTelemetry {
@@ -34269,6 +36135,7 @@ declare namespace EC2 {
   }
   export type VolumeId = string;
   export type VolumeIdStringList = VolumeId[];
+  export type VolumeIdWithResolver = string;
   export type VolumeList = Volume[];
   export interface VolumeModification {
     /**
@@ -34737,6 +36604,7 @@ declare namespace EC2 {
   }
   export type VpcPeeringConnectionId = string;
   export type VpcPeeringConnectionIdList = VpcPeeringConnectionId[];
+  export type VpcPeeringConnectionIdWithResolver = string;
   export type VpcPeeringConnectionList = VpcPeeringConnection[];
   export interface VpcPeeringConnectionOptionsDescription {
     /**