diff --git a/clients/client-ec2/README.md b/clients/client-ec2/README.md
index 860dadb6425cd..ae3450a5aa0d0 100644
--- a/clients/client-ec2/README.md
+++ b/clients/client-ec2/README.md
@@ -396,6 +396,14 @@ AssociateInstanceEventWindow
 
 [Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-ec2/classes/associateinstanceeventwindowcommand.html) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-ec2/interfaces/associateinstanceeventwindowcommandinput.html) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-ec2/interfaces/associateinstanceeventwindowcommandoutput.html)
 
+</details>
+<details>
+<summary>
+AssociateIpamByoasn
+</summary>
+
+[Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-ec2/classes/associateipambyoasncommand.html) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-ec2/interfaces/associateipambyoasncommandinput.html) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-ec2/interfaces/associateipambyoasncommandoutput.html)
+
 </details>
 <details>
 <summary>
@@ -1916,6 +1924,14 @@ DeprovisionByoipCidr
 
 [Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-ec2/classes/deprovisionbyoipcidrcommand.html) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-ec2/interfaces/deprovisionbyoipcidrcommandinput.html) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-ec2/interfaces/deprovisionbyoipcidrcommandoutput.html)
 
+</details>
+<details>
+<summary>
+DeprovisionIpamByoasn
+</summary>
+
+[Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-ec2/classes/deprovisionipambyoasncommand.html) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-ec2/interfaces/deprovisionipambyoasncommandinput.html) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-ec2/interfaces/deprovisionipambyoasncommandoutput.html)
+
 </details>
 <details>
 <summary>
@@ -2412,6 +2428,14 @@ DescribeInternetGateways
 
 [Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-ec2/classes/describeinternetgatewayscommand.html) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-ec2/interfaces/describeinternetgatewayscommandinput.html) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-ec2/interfaces/describeinternetgatewayscommandoutput.html)
 
+</details>
+<details>
+<summary>
+DescribeIpamByoasn
+</summary>
+
+[Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-ec2/classes/describeipambyoasncommand.html) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-ec2/interfaces/describeipambyoasncommandinput.html) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-ec2/interfaces/describeipambyoasncommandoutput.html)
+
 </details>
 <details>
 <summary>
@@ -3356,6 +3380,14 @@ DisassociateInstanceEventWindow
 
 [Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-ec2/classes/disassociateinstanceeventwindowcommand.html) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-ec2/interfaces/disassociateinstanceeventwindowcommandinput.html) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-ec2/interfaces/disassociateinstanceeventwindowcommandoutput.html)
 
+</details>
+<details>
+<summary>
+DisassociateIpamByoasn
+</summary>
+
+[Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-ec2/classes/disassociateipambyoasncommand.html) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-ec2/interfaces/disassociateipambyoasncommandinput.html) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-ec2/interfaces/disassociateipambyoasncommandoutput.html)
+
 </details>
 <details>
 <summary>
@@ -3740,6 +3772,14 @@ GetIpamDiscoveredAccounts
 
 [Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-ec2/classes/getipamdiscoveredaccountscommand.html) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-ec2/interfaces/getipamdiscoveredaccountscommandinput.html) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-ec2/interfaces/getipamdiscoveredaccountscommandoutput.html)
 
+</details>
+<details>
+<summary>
+GetIpamDiscoveredPublicAddresses
+</summary>
+
+[Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-ec2/classes/getipamdiscoveredpublicaddressescommand.html) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-ec2/interfaces/getipamdiscoveredpublicaddressescommandinput.html) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-ec2/interfaces/getipamdiscoveredpublicaddressescommandoutput.html)
+
 </details>
 <details>
 <summary>
@@ -4580,6 +4620,14 @@ ProvisionByoipCidr
 
 [Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-ec2/classes/provisionbyoipcidrcommand.html) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-ec2/interfaces/provisionbyoipcidrcommandinput.html) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-ec2/interfaces/provisionbyoipcidrcommandoutput.html)
 
+</details>
+<details>
+<summary>
+ProvisionIpamByoasn
+</summary>
+
+[Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-ec2/classes/provisionipambyoasncommand.html) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-ec2/interfaces/provisionipambyoasncommandinput.html) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-ec2/interfaces/provisionipambyoasncommandoutput.html)
+
 </details>
 <details>
 <summary>
diff --git a/clients/client-ec2/src/EC2.ts b/clients/client-ec2/src/EC2.ts
index 871b74ecc9714..3aaebedbd5717 100644
--- a/clients/client-ec2/src/EC2.ts
+++ b/clients/client-ec2/src/EC2.ts
@@ -107,6 +107,11 @@ import {
   AssociateInstanceEventWindowCommandInput,
   AssociateInstanceEventWindowCommandOutput,
 } from "./commands/AssociateInstanceEventWindowCommand";
+import {
+  AssociateIpamByoasnCommand,
+  AssociateIpamByoasnCommandInput,
+  AssociateIpamByoasnCommandOutput,
+} from "./commands/AssociateIpamByoasnCommand";
 import {
   AssociateIpamResourceDiscoveryCommand,
   AssociateIpamResourceDiscoveryCommandInput,
@@ -1013,6 +1018,11 @@ import {
   DeprovisionByoipCidrCommandInput,
   DeprovisionByoipCidrCommandOutput,
 } from "./commands/DeprovisionByoipCidrCommand";
+import {
+  DeprovisionIpamByoasnCommand,
+  DeprovisionIpamByoasnCommandInput,
+  DeprovisionIpamByoasnCommandOutput,
+} from "./commands/DeprovisionIpamByoasnCommand";
 import {
   DeprovisionIpamPoolCidrCommand,
   DeprovisionIpamPoolCidrCommandInput,
@@ -1323,6 +1333,11 @@ import {
   DescribeInternetGatewaysCommandInput,
   DescribeInternetGatewaysCommandOutput,
 } from "./commands/DescribeInternetGatewaysCommand";
+import {
+  DescribeIpamByoasnCommand,
+  DescribeIpamByoasnCommandInput,
+  DescribeIpamByoasnCommandOutput,
+} from "./commands/DescribeIpamByoasnCommand";
 import {
   DescribeIpamPoolsCommand,
   DescribeIpamPoolsCommandInput,
@@ -1913,6 +1928,11 @@ import {
   DisassociateInstanceEventWindowCommandInput,
   DisassociateInstanceEventWindowCommandOutput,
 } from "./commands/DisassociateInstanceEventWindowCommand";
+import {
+  DisassociateIpamByoasnCommand,
+  DisassociateIpamByoasnCommandInput,
+  DisassociateIpamByoasnCommandOutput,
+} from "./commands/DisassociateIpamByoasnCommand";
 import {
   DisassociateIpamResourceDiscoveryCommand,
   DisassociateIpamResourceDiscoveryCommandInput,
@@ -2145,6 +2165,11 @@ import {
   GetIpamDiscoveredAccountsCommandInput,
   GetIpamDiscoveredAccountsCommandOutput,
 } from "./commands/GetIpamDiscoveredAccountsCommand";
+import {
+  GetIpamDiscoveredPublicAddressesCommand,
+  GetIpamDiscoveredPublicAddressesCommandInput,
+  GetIpamDiscoveredPublicAddressesCommandOutput,
+} from "./commands/GetIpamDiscoveredPublicAddressesCommand";
 import {
   GetIpamDiscoveredResourceCidrsCommand,
   GetIpamDiscoveredResourceCidrsCommandInput,
@@ -2654,6 +2679,11 @@ import {
   ProvisionByoipCidrCommandInput,
   ProvisionByoipCidrCommandOutput,
 } from "./commands/ProvisionByoipCidrCommand";
+import {
+  ProvisionIpamByoasnCommand,
+  ProvisionIpamByoasnCommandInput,
+  ProvisionIpamByoasnCommandOutput,
+} from "./commands/ProvisionIpamByoasnCommand";
 import {
   ProvisionIpamPoolCidrCommand,
   ProvisionIpamPoolCidrCommandInput,
@@ -3003,6 +3033,7 @@ const commands = {
   AssociateEnclaveCertificateIamRoleCommand,
   AssociateIamInstanceProfileCommand,
   AssociateInstanceEventWindowCommand,
+  AssociateIpamByoasnCommand,
   AssociateIpamResourceDiscoveryCommand,
   AssociateNatGatewayAddressCommand,
   AssociateRouteTableCommand,
@@ -3193,6 +3224,7 @@ const commands = {
   DeleteVpnConnectionRouteCommand,
   DeleteVpnGatewayCommand,
   DeprovisionByoipCidrCommand,
+  DeprovisionIpamByoasnCommand,
   DeprovisionIpamPoolCidrCommand,
   DeprovisionPublicIpv4PoolCidrCommand,
   DeregisterImageCommand,
@@ -3255,6 +3287,7 @@ const commands = {
   DescribeInstanceTypeOfferingsCommand,
   DescribeInstanceTypesCommand,
   DescribeInternetGatewaysCommand,
+  DescribeIpamByoasnCommand,
   DescribeIpamPoolsCommand,
   DescribeIpamResourceDiscoveriesCommand,
   DescribeIpamResourceDiscoveryAssociationsCommand,
@@ -3373,6 +3406,7 @@ const commands = {
   DisassociateEnclaveCertificateIamRoleCommand,
   DisassociateIamInstanceProfileCommand,
   DisassociateInstanceEventWindowCommand,
+  DisassociateIpamByoasnCommand,
   DisassociateIpamResourceDiscoveryCommand,
   DisassociateNatGatewayAddressCommand,
   DisassociateRouteTableCommand,
@@ -3421,6 +3455,7 @@ const commands = {
   GetInstanceUefiDataCommand,
   GetIpamAddressHistoryCommand,
   GetIpamDiscoveredAccountsCommand,
+  GetIpamDiscoveredPublicAddressesCommand,
   GetIpamDiscoveredResourceCidrsCommand,
   GetIpamPoolAllocationsCommand,
   GetIpamPoolCidrsCommand,
@@ -3526,6 +3561,7 @@ const commands = {
   MoveAddressToVpcCommand,
   MoveByoipCidrToIpamCommand,
   ProvisionByoipCidrCommand,
+  ProvisionIpamByoasnCommand,
   ProvisionIpamPoolCidrCommand,
   ProvisionPublicIpv4PoolCidrCommand,
   PurchaseCapacityBlockCommand,
@@ -3942,6 +3978,23 @@ export interface EC2 {
     cb: (err: any, data?: AssociateInstanceEventWindowCommandOutput) => void
   ): void;
 
+  /**
+   * @see {@link AssociateIpamByoasnCommand}
+   */
+  associateIpamByoasn(
+    args: AssociateIpamByoasnCommandInput,
+    options?: __HttpHandlerOptions
+  ): Promise<AssociateIpamByoasnCommandOutput>;
+  associateIpamByoasn(
+    args: AssociateIpamByoasnCommandInput,
+    cb: (err: any, data?: AssociateIpamByoasnCommandOutput) => void
+  ): void;
+  associateIpamByoasn(
+    args: AssociateIpamByoasnCommandInput,
+    options: __HttpHandlerOptions,
+    cb: (err: any, data?: AssociateIpamByoasnCommandOutput) => void
+  ): void;
+
   /**
    * @see {@link AssociateIpamResourceDiscoveryCommand}
    */
@@ -6998,6 +7051,23 @@ export interface EC2 {
     cb: (err: any, data?: DeprovisionByoipCidrCommandOutput) => void
   ): void;
 
+  /**
+   * @see {@link DeprovisionIpamByoasnCommand}
+   */
+  deprovisionIpamByoasn(
+    args: DeprovisionIpamByoasnCommandInput,
+    options?: __HttpHandlerOptions
+  ): Promise<DeprovisionIpamByoasnCommandOutput>;
+  deprovisionIpamByoasn(
+    args: DeprovisionIpamByoasnCommandInput,
+    cb: (err: any, data?: DeprovisionIpamByoasnCommandOutput) => void
+  ): void;
+  deprovisionIpamByoasn(
+    args: DeprovisionIpamByoasnCommandInput,
+    options: __HttpHandlerOptions,
+    cb: (err: any, data?: DeprovisionIpamByoasnCommandOutput) => void
+  ): void;
+
   /**
    * @see {@link DeprovisionIpamPoolCidrCommand}
    */
@@ -8037,6 +8107,23 @@ export interface EC2 {
     cb: (err: any, data?: DescribeInternetGatewaysCommandOutput) => void
   ): void;
 
+  /**
+   * @see {@link DescribeIpamByoasnCommand}
+   */
+  describeIpamByoasn(
+    args: DescribeIpamByoasnCommandInput,
+    options?: __HttpHandlerOptions
+  ): Promise<DescribeIpamByoasnCommandOutput>;
+  describeIpamByoasn(
+    args: DescribeIpamByoasnCommandInput,
+    cb: (err: any, data?: DescribeIpamByoasnCommandOutput) => void
+  ): void;
+  describeIpamByoasn(
+    args: DescribeIpamByoasnCommandInput,
+    options: __HttpHandlerOptions,
+    cb: (err: any, data?: DescribeIpamByoasnCommandOutput) => void
+  ): void;
+
   /**
    * @see {@link DescribeIpamPoolsCommand}
    */
@@ -10004,6 +10091,23 @@ export interface EC2 {
     cb: (err: any, data?: DisassociateInstanceEventWindowCommandOutput) => void
   ): void;
 
+  /**
+   * @see {@link DisassociateIpamByoasnCommand}
+   */
+  disassociateIpamByoasn(
+    args: DisassociateIpamByoasnCommandInput,
+    options?: __HttpHandlerOptions
+  ): Promise<DisassociateIpamByoasnCommandOutput>;
+  disassociateIpamByoasn(
+    args: DisassociateIpamByoasnCommandInput,
+    cb: (err: any, data?: DisassociateIpamByoasnCommandOutput) => void
+  ): void;
+  disassociateIpamByoasn(
+    args: DisassociateIpamByoasnCommandInput,
+    options: __HttpHandlerOptions,
+    cb: (err: any, data?: DisassociateIpamByoasnCommandOutput) => void
+  ): void;
+
   /**
    * @see {@link DisassociateIpamResourceDiscoveryCommand}
    */
@@ -10805,6 +10909,23 @@ export interface EC2 {
     cb: (err: any, data?: GetIpamDiscoveredAccountsCommandOutput) => void
   ): void;
 
+  /**
+   * @see {@link GetIpamDiscoveredPublicAddressesCommand}
+   */
+  getIpamDiscoveredPublicAddresses(
+    args: GetIpamDiscoveredPublicAddressesCommandInput,
+    options?: __HttpHandlerOptions
+  ): Promise<GetIpamDiscoveredPublicAddressesCommandOutput>;
+  getIpamDiscoveredPublicAddresses(
+    args: GetIpamDiscoveredPublicAddressesCommandInput,
+    cb: (err: any, data?: GetIpamDiscoveredPublicAddressesCommandOutput) => void
+  ): void;
+  getIpamDiscoveredPublicAddresses(
+    args: GetIpamDiscoveredPublicAddressesCommandInput,
+    options: __HttpHandlerOptions,
+    cb: (err: any, data?: GetIpamDiscoveredPublicAddressesCommandOutput) => void
+  ): void;
+
   /**
    * @see {@link GetIpamDiscoveredResourceCidrsCommand}
    */
@@ -12524,6 +12645,23 @@ export interface EC2 {
     cb: (err: any, data?: ProvisionByoipCidrCommandOutput) => void
   ): void;
 
+  /**
+   * @see {@link ProvisionIpamByoasnCommand}
+   */
+  provisionIpamByoasn(
+    args: ProvisionIpamByoasnCommandInput,
+    options?: __HttpHandlerOptions
+  ): Promise<ProvisionIpamByoasnCommandOutput>;
+  provisionIpamByoasn(
+    args: ProvisionIpamByoasnCommandInput,
+    cb: (err: any, data?: ProvisionIpamByoasnCommandOutput) => void
+  ): void;
+  provisionIpamByoasn(
+    args: ProvisionIpamByoasnCommandInput,
+    options: __HttpHandlerOptions,
+    cb: (err: any, data?: ProvisionIpamByoasnCommandOutput) => void
+  ): void;
+
   /**
    * @see {@link ProvisionIpamPoolCidrCommand}
    */
diff --git a/clients/client-ec2/src/EC2Client.ts b/clients/client-ec2/src/EC2Client.ts
index e85972b3bf312..748b5375ded2b 100644
--- a/clients/client-ec2/src/EC2Client.ts
+++ b/clients/client-ec2/src/EC2Client.ts
@@ -122,6 +122,10 @@ import {
   AssociateInstanceEventWindowCommandInput,
   AssociateInstanceEventWindowCommandOutput,
 } from "./commands/AssociateInstanceEventWindowCommand";
+import {
+  AssociateIpamByoasnCommandInput,
+  AssociateIpamByoasnCommandOutput,
+} from "./commands/AssociateIpamByoasnCommand";
 import {
   AssociateIpamResourceDiscoveryCommandInput,
   AssociateIpamResourceDiscoveryCommandOutput,
@@ -720,6 +724,10 @@ import {
   DeprovisionByoipCidrCommandInput,
   DeprovisionByoipCidrCommandOutput,
 } from "./commands/DeprovisionByoipCidrCommand";
+import {
+  DeprovisionIpamByoasnCommandInput,
+  DeprovisionIpamByoasnCommandOutput,
+} from "./commands/DeprovisionIpamByoasnCommand";
 import {
   DeprovisionIpamPoolCidrCommandInput,
   DeprovisionIpamPoolCidrCommandOutput,
@@ -935,6 +943,7 @@ import {
   DescribeInternetGatewaysCommandInput,
   DescribeInternetGatewaysCommandOutput,
 } from "./commands/DescribeInternetGatewaysCommand";
+import { DescribeIpamByoasnCommandInput, DescribeIpamByoasnCommandOutput } from "./commands/DescribeIpamByoasnCommand";
 import { DescribeIpamPoolsCommandInput, DescribeIpamPoolsCommandOutput } from "./commands/DescribeIpamPoolsCommand";
 import {
   DescribeIpamResourceDiscoveriesCommandInput,
@@ -1362,6 +1371,10 @@ import {
   DisassociateInstanceEventWindowCommandInput,
   DisassociateInstanceEventWindowCommandOutput,
 } from "./commands/DisassociateInstanceEventWindowCommand";
+import {
+  DisassociateIpamByoasnCommandInput,
+  DisassociateIpamByoasnCommandOutput,
+} from "./commands/DisassociateIpamByoasnCommand";
 import {
   DisassociateIpamResourceDiscoveryCommandInput,
   DisassociateIpamResourceDiscoveryCommandOutput,
@@ -1536,6 +1549,10 @@ import {
   GetIpamDiscoveredAccountsCommandInput,
   GetIpamDiscoveredAccountsCommandOutput,
 } from "./commands/GetIpamDiscoveredAccountsCommand";
+import {
+  GetIpamDiscoveredPublicAddressesCommandInput,
+  GetIpamDiscoveredPublicAddressesCommandOutput,
+} from "./commands/GetIpamDiscoveredPublicAddressesCommand";
 import {
   GetIpamDiscoveredResourceCidrsCommandInput,
   GetIpamDiscoveredResourceCidrsCommandOutput,
@@ -1890,6 +1907,10 @@ import {
   MoveByoipCidrToIpamCommandOutput,
 } from "./commands/MoveByoipCidrToIpamCommand";
 import { ProvisionByoipCidrCommandInput, ProvisionByoipCidrCommandOutput } from "./commands/ProvisionByoipCidrCommand";
+import {
+  ProvisionIpamByoasnCommandInput,
+  ProvisionIpamByoasnCommandOutput,
+} from "./commands/ProvisionIpamByoasnCommand";
 import {
   ProvisionIpamPoolCidrCommandInput,
   ProvisionIpamPoolCidrCommandOutput,
@@ -2144,6 +2165,7 @@ export type ServiceInputTypes =
   | AssociateEnclaveCertificateIamRoleCommandInput
   | AssociateIamInstanceProfileCommandInput
   | AssociateInstanceEventWindowCommandInput
+  | AssociateIpamByoasnCommandInput
   | AssociateIpamResourceDiscoveryCommandInput
   | AssociateNatGatewayAddressCommandInput
   | AssociateRouteTableCommandInput
@@ -2334,6 +2356,7 @@ export type ServiceInputTypes =
   | DeleteVpnConnectionRouteCommandInput
   | DeleteVpnGatewayCommandInput
   | DeprovisionByoipCidrCommandInput
+  | DeprovisionIpamByoasnCommandInput
   | DeprovisionIpamPoolCidrCommandInput
   | DeprovisionPublicIpv4PoolCidrCommandInput
   | DeregisterImageCommandInput
@@ -2396,6 +2419,7 @@ export type ServiceInputTypes =
   | DescribeInstanceTypesCommandInput
   | DescribeInstancesCommandInput
   | DescribeInternetGatewaysCommandInput
+  | DescribeIpamByoasnCommandInput
   | DescribeIpamPoolsCommandInput
   | DescribeIpamResourceDiscoveriesCommandInput
   | DescribeIpamResourceDiscoveryAssociationsCommandInput
@@ -2514,6 +2538,7 @@ export type ServiceInputTypes =
   | DisassociateEnclaveCertificateIamRoleCommandInput
   | DisassociateIamInstanceProfileCommandInput
   | DisassociateInstanceEventWindowCommandInput
+  | DisassociateIpamByoasnCommandInput
   | DisassociateIpamResourceDiscoveryCommandInput
   | DisassociateNatGatewayAddressCommandInput
   | DisassociateRouteTableCommandInput
@@ -2562,6 +2587,7 @@ export type ServiceInputTypes =
   | GetInstanceUefiDataCommandInput
   | GetIpamAddressHistoryCommandInput
   | GetIpamDiscoveredAccountsCommandInput
+  | GetIpamDiscoveredPublicAddressesCommandInput
   | GetIpamDiscoveredResourceCidrsCommandInput
   | GetIpamPoolAllocationsCommandInput
   | GetIpamPoolCidrsCommandInput
@@ -2667,6 +2693,7 @@ export type ServiceInputTypes =
   | MoveAddressToVpcCommandInput
   | MoveByoipCidrToIpamCommandInput
   | ProvisionByoipCidrCommandInput
+  | ProvisionIpamByoasnCommandInput
   | ProvisionIpamPoolCidrCommandInput
   | ProvisionPublicIpv4PoolCidrCommandInput
   | PurchaseCapacityBlockCommandInput
@@ -2758,6 +2785,7 @@ export type ServiceOutputTypes =
   | AssociateEnclaveCertificateIamRoleCommandOutput
   | AssociateIamInstanceProfileCommandOutput
   | AssociateInstanceEventWindowCommandOutput
+  | AssociateIpamByoasnCommandOutput
   | AssociateIpamResourceDiscoveryCommandOutput
   | AssociateNatGatewayAddressCommandOutput
   | AssociateRouteTableCommandOutput
@@ -2948,6 +2976,7 @@ export type ServiceOutputTypes =
   | DeleteVpnConnectionRouteCommandOutput
   | DeleteVpnGatewayCommandOutput
   | DeprovisionByoipCidrCommandOutput
+  | DeprovisionIpamByoasnCommandOutput
   | DeprovisionIpamPoolCidrCommandOutput
   | DeprovisionPublicIpv4PoolCidrCommandOutput
   | DeregisterImageCommandOutput
@@ -3010,6 +3039,7 @@ export type ServiceOutputTypes =
   | DescribeInstanceTypesCommandOutput
   | DescribeInstancesCommandOutput
   | DescribeInternetGatewaysCommandOutput
+  | DescribeIpamByoasnCommandOutput
   | DescribeIpamPoolsCommandOutput
   | DescribeIpamResourceDiscoveriesCommandOutput
   | DescribeIpamResourceDiscoveryAssociationsCommandOutput
@@ -3128,6 +3158,7 @@ export type ServiceOutputTypes =
   | DisassociateEnclaveCertificateIamRoleCommandOutput
   | DisassociateIamInstanceProfileCommandOutput
   | DisassociateInstanceEventWindowCommandOutput
+  | DisassociateIpamByoasnCommandOutput
   | DisassociateIpamResourceDiscoveryCommandOutput
   | DisassociateNatGatewayAddressCommandOutput
   | DisassociateRouteTableCommandOutput
@@ -3176,6 +3207,7 @@ export type ServiceOutputTypes =
   | GetInstanceUefiDataCommandOutput
   | GetIpamAddressHistoryCommandOutput
   | GetIpamDiscoveredAccountsCommandOutput
+  | GetIpamDiscoveredPublicAddressesCommandOutput
   | GetIpamDiscoveredResourceCidrsCommandOutput
   | GetIpamPoolAllocationsCommandOutput
   | GetIpamPoolCidrsCommandOutput
@@ -3281,6 +3313,7 @@ export type ServiceOutputTypes =
   | MoveAddressToVpcCommandOutput
   | MoveByoipCidrToIpamCommandOutput
   | ProvisionByoipCidrCommandOutput
+  | ProvisionIpamByoasnCommandOutput
   | ProvisionIpamPoolCidrCommandOutput
   | ProvisionPublicIpv4PoolCidrCommandOutput
   | PurchaseCapacityBlockCommandOutput
diff --git a/clients/client-ec2/src/commands/AdvertiseByoipCidrCommand.ts b/clients/client-ec2/src/commands/AdvertiseByoipCidrCommand.ts
index 4766fbb0feaf3..dba0f2a88c53a 100644
--- a/clients/client-ec2/src/commands/AdvertiseByoipCidrCommand.ts
+++ b/clients/client-ec2/src/commands/AdvertiseByoipCidrCommand.ts
@@ -56,6 +56,7 @@ export interface AdvertiseByoipCidrCommandOutput extends AdvertiseByoipCidrResul
  * const client = new EC2Client(config);
  * const input = { // AdvertiseByoipCidrRequest
  *   Cidr: "STRING_VALUE", // required
+ *   Asn: "STRING_VALUE",
  *   DryRun: true || false,
  * };
  * const command = new AdvertiseByoipCidrCommand(input);
@@ -64,6 +65,14 @@ export interface AdvertiseByoipCidrCommandOutput extends AdvertiseByoipCidrResul
  * //   ByoipCidr: { // ByoipCidr
  * //     Cidr: "STRING_VALUE",
  * //     Description: "STRING_VALUE",
+ * //     AsnAssociations: [ // AsnAssociationSet
+ * //       { // AsnAssociation
+ * //         Asn: "STRING_VALUE",
+ * //         Cidr: "STRING_VALUE",
+ * //         StatusMessage: "STRING_VALUE",
+ * //         State: "disassociated" || "failed-disassociation" || "failed-association" || "pending-disassociation" || "pending-association" || "associated",
+ * //       },
+ * //     ],
  * //     StatusMessage: "STRING_VALUE",
  * //     State: "advertised" || "deprovisioned" || "failed-deprovision" || "failed-provision" || "pending-deprovision" || "pending-provision" || "provisioned" || "provisioned-not-publicly-advertisable",
  * //   },
diff --git a/clients/client-ec2/src/commands/AllocateIpamPoolCidrCommand.ts b/clients/client-ec2/src/commands/AllocateIpamPoolCidrCommand.ts
index 50cd48a661b15..f1357dab18dbc 100644
--- a/clients/client-ec2/src/commands/AllocateIpamPoolCidrCommand.ts
+++ b/clients/client-ec2/src/commands/AllocateIpamPoolCidrCommand.ts
@@ -56,6 +56,9 @@ export interface AllocateIpamPoolCidrCommandOutput extends AllocateIpamPoolCidrR
  *   ClientToken: "STRING_VALUE",
  *   Description: "STRING_VALUE",
  *   PreviewNextCidr: true || false,
+ *   AllowedCidrs: [ // IpamPoolAllocationAllowedCidrs
+ *     "STRING_VALUE",
+ *   ],
  *   DisallowedCidrs: [ // IpamPoolAllocationDisallowedCidrs
  *     "STRING_VALUE",
  *   ],
@@ -68,7 +71,7 @@ export interface AllocateIpamPoolCidrCommandOutput extends AllocateIpamPoolCidrR
  * //     IpamPoolAllocationId: "STRING_VALUE",
  * //     Description: "STRING_VALUE",
  * //     ResourceId: "STRING_VALUE",
- * //     ResourceType: "ipam-pool" || "vpc" || "ec2-public-ipv4-pool" || "custom",
+ * //     ResourceType: "ipam-pool" || "vpc" || "ec2-public-ipv4-pool" || "custom" || "subnet",
  * //     ResourceRegion: "STRING_VALUE",
  * //     ResourceOwner: "STRING_VALUE",
  * //   },
diff --git a/clients/client-ec2/src/commands/AssociateIpamByoasnCommand.ts b/clients/client-ec2/src/commands/AssociateIpamByoasnCommand.ts
new file mode 100644
index 0000000000000..77cad7612c19f
--- /dev/null
+++ b/clients/client-ec2/src/commands/AssociateIpamByoasnCommand.ts
@@ -0,0 +1,149 @@
+// smithy-typescript generated code
+import { EndpointParameterInstructions, getEndpointPlugin } from "@smithy/middleware-endpoint";
+import { getSerdePlugin } from "@smithy/middleware-serde";
+import { HttpRequest as __HttpRequest, HttpResponse as __HttpResponse } from "@smithy/protocol-http";
+import { Command as $Command } from "@smithy/smithy-client";
+import {
+  FinalizeHandlerArguments,
+  Handler,
+  HandlerExecutionContext,
+  HttpHandlerOptions as __HttpHandlerOptions,
+  MetadataBearer as __MetadataBearer,
+  MiddlewareStack,
+  SerdeContext as __SerdeContext,
+  SMITHY_CONTEXT_KEY,
+} from "@smithy/types";
+
+import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
+import { AssociateIpamByoasnRequest, AssociateIpamByoasnResult } from "../models/models_0";
+import { de_AssociateIpamByoasnCommand, se_AssociateIpamByoasnCommand } from "../protocols/Aws_ec2";
+
+/**
+ * @public
+ */
+export { __MetadataBearer, $Command };
+/**
+ * @public
+ *
+ * The input for {@link AssociateIpamByoasnCommand}.
+ */
+export interface AssociateIpamByoasnCommandInput extends AssociateIpamByoasnRequest {}
+/**
+ * @public
+ *
+ * The output of {@link AssociateIpamByoasnCommand}.
+ */
+export interface AssociateIpamByoasnCommandOutput extends AssociateIpamByoasnResult, __MetadataBearer {}
+
+/**
+ * @public
+ * <p>Associates your Autonomous System Number (ASN) with a BYOIP CIDR that you own in the same Amazon Web Services Region.
+ *             For more information, see <a href="https://docs.aws.amazon.com/vpc/latest/ipam/tutorials-byoasn.html">Tutorial: Bring your ASN to IPAM</a> in the <i>Amazon VPC IPAM guide</i>.</p>
+ *          <p>After the association succeeds, the ASN is eligible for
+ *             advertisement. You can view the association with <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeByoipCidrs.html">DescribeByoipCidrs</a>. You can advertise the CIDR with <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_AdvertiseByoipCidr.html">AdvertiseByoipCidr</a>.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { EC2Client, AssociateIpamByoasnCommand } from "@aws-sdk/client-ec2"; // ES Modules import
+ * // const { EC2Client, AssociateIpamByoasnCommand } = require("@aws-sdk/client-ec2"); // CommonJS import
+ * const client = new EC2Client(config);
+ * const input = { // AssociateIpamByoasnRequest
+ *   DryRun: true || false,
+ *   Asn: "STRING_VALUE", // required
+ *   Cidr: "STRING_VALUE", // required
+ * };
+ * const command = new AssociateIpamByoasnCommand(input);
+ * const response = await client.send(command);
+ * // { // AssociateIpamByoasnResult
+ * //   AsnAssociation: { // AsnAssociation
+ * //     Asn: "STRING_VALUE",
+ * //     Cidr: "STRING_VALUE",
+ * //     StatusMessage: "STRING_VALUE",
+ * //     State: "disassociated" || "failed-disassociation" || "failed-association" || "pending-disassociation" || "pending-association" || "associated",
+ * //   },
+ * // };
+ *
+ * ```
+ *
+ * @param AssociateIpamByoasnCommandInput - {@link AssociateIpamByoasnCommandInput}
+ * @returns {@link AssociateIpamByoasnCommandOutput}
+ * @see {@link AssociateIpamByoasnCommandInput} for command's `input` shape.
+ * @see {@link AssociateIpamByoasnCommandOutput} for command's `response` shape.
+ * @see {@link EC2ClientResolvedConfig | config} for EC2Client's `config` shape.
+ *
+ * @throws {@link EC2ServiceException}
+ * <p>Base exception class for all service exceptions from EC2 service.</p>
+ *
+ */
+export class AssociateIpamByoasnCommand extends $Command<
+  AssociateIpamByoasnCommandInput,
+  AssociateIpamByoasnCommandOutput,
+  EC2ClientResolvedConfig
+> {
+  public static getEndpointParameterInstructions(): EndpointParameterInstructions {
+    return {
+      UseFIPS: { type: "builtInParams", name: "useFipsEndpoint" },
+      Endpoint: { type: "builtInParams", name: "endpoint" },
+      Region: { type: "builtInParams", name: "region" },
+      UseDualStack: { type: "builtInParams", name: "useDualstackEndpoint" },
+    };
+  }
+
+  /**
+   * @public
+   */
+  constructor(readonly input: AssociateIpamByoasnCommandInput) {
+    super();
+  }
+
+  /**
+   * @internal
+   */
+  resolveMiddleware(
+    clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>,
+    configuration: EC2ClientResolvedConfig,
+    options?: __HttpHandlerOptions
+  ): Handler<AssociateIpamByoasnCommandInput, AssociateIpamByoasnCommandOutput> {
+    this.middlewareStack.use(getSerdePlugin(configuration, this.serialize, this.deserialize));
+    this.middlewareStack.use(
+      getEndpointPlugin(configuration, AssociateIpamByoasnCommand.getEndpointParameterInstructions())
+    );
+
+    const stack = clientStack.concat(this.middlewareStack);
+
+    const { logger } = configuration;
+    const clientName = "EC2Client";
+    const commandName = "AssociateIpamByoasnCommand";
+    const handlerExecutionContext: HandlerExecutionContext = {
+      logger,
+      clientName,
+      commandName,
+      inputFilterSensitiveLog: (_: any) => _,
+      outputFilterSensitiveLog: (_: any) => _,
+      [SMITHY_CONTEXT_KEY]: {
+        service: "AmazonEC2",
+        operation: "AssociateIpamByoasn",
+      },
+    };
+    const { requestHandler } = configuration;
+    return stack.resolve(
+      (request: FinalizeHandlerArguments<any>) =>
+        requestHandler.handle(request.request as __HttpRequest, options || {}),
+      handlerExecutionContext
+    );
+  }
+
+  /**
+   * @internal
+   */
+  private serialize(input: AssociateIpamByoasnCommandInput, context: __SerdeContext): Promise<__HttpRequest> {
+    return se_AssociateIpamByoasnCommand(input, context);
+  }
+
+  /**
+   * @internal
+   */
+  private deserialize(output: __HttpResponse, context: __SerdeContext): Promise<AssociateIpamByoasnCommandOutput> {
+    return de_AssociateIpamByoasnCommand(output, context);
+  }
+}
diff --git a/clients/client-ec2/src/commands/AssociateSubnetCidrBlockCommand.ts b/clients/client-ec2/src/commands/AssociateSubnetCidrBlockCommand.ts
index 958a1809583b8..28c0898749e38 100644
--- a/clients/client-ec2/src/commands/AssociateSubnetCidrBlockCommand.ts
+++ b/clients/client-ec2/src/commands/AssociateSubnetCidrBlockCommand.ts
@@ -38,7 +38,7 @@ export interface AssociateSubnetCidrBlockCommandOutput extends AssociateSubnetCi
 /**
  * @public
  * <p>Associates a CIDR block with your subnet. You can only associate a single IPv6 CIDR
- *             block with your subnet. An IPv6 CIDR block must have a prefix length of /64.</p>
+ *             block with your subnet.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
@@ -46,8 +46,10 @@ export interface AssociateSubnetCidrBlockCommandOutput extends AssociateSubnetCi
  * // const { EC2Client, AssociateSubnetCidrBlockCommand } = require("@aws-sdk/client-ec2"); // CommonJS import
  * const client = new EC2Client(config);
  * const input = { // AssociateSubnetCidrBlockRequest
- *   Ipv6CidrBlock: "STRING_VALUE", // required
+ *   Ipv6CidrBlock: "STRING_VALUE",
  *   SubnetId: "STRING_VALUE", // required
+ *   Ipv6IpamPoolId: "STRING_VALUE",
+ *   Ipv6NetmaskLength: Number("int"),
  * };
  * const command = new AssociateSubnetCidrBlockCommand(input);
  * const response = await client.send(command);
diff --git a/clients/client-ec2/src/commands/AssociateTrunkInterfaceCommand.ts b/clients/client-ec2/src/commands/AssociateTrunkInterfaceCommand.ts
index a6424ecff7a35..baa0005d682db 100644
--- a/clients/client-ec2/src/commands/AssociateTrunkInterfaceCommand.ts
+++ b/clients/client-ec2/src/commands/AssociateTrunkInterfaceCommand.ts
@@ -37,11 +37,7 @@ export interface AssociateTrunkInterfaceCommandOutput extends AssociateTrunkInte
 
 /**
  * @public
- * <note>
- *             <p>This API action is currently in <b>limited preview only</b>.
- *                 If you are interested in using this feature, contact your account manager.</p>
- *          </note>
- *          <p>Associates a branch network interface with a trunk network interface.</p>
+ * <p>Associates a branch network interface with a trunk network interface.</p>
  *          <p>Before you create the association, run the <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateNetworkInterface.html">create-network-interface</a> command and set
  *             <code>--interface-type</code> to <code>trunk</code>. You must also create a network interface for each branch network interface that you want to associate with the trunk network interface.</p>
  * @example
diff --git a/clients/client-ec2/src/commands/AssociateVpcCidrBlockCommand.ts b/clients/client-ec2/src/commands/AssociateVpcCidrBlockCommand.ts
index 51ccbf44ec0ab..20f2dc1d840fd 100644
--- a/clients/client-ec2/src/commands/AssociateVpcCidrBlockCommand.ts
+++ b/clients/client-ec2/src/commands/AssociateVpcCidrBlockCommand.ts
@@ -39,8 +39,7 @@ export interface AssociateVpcCidrBlockCommandOutput extends AssociateVpcCidrBloc
  * @public
  * <p>Associates a CIDR block with your VPC. You can associate a secondary IPv4 CIDR block,
  *             an Amazon-provided IPv6 CIDR block, or an IPv6 CIDR block from an IPv6 address pool that
- *             you provisioned through bring your own IP addresses (<a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-byoip.html">BYOIP</a>). The IPv6 CIDR block size is fixed
- *             at /56.</p>
+ *             you provisioned through bring your own IP addresses (<a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-byoip.html">BYOIP</a>). </p>
  *          <p>You must specify one of the following in the request: an IPv4 CIDR block, an IPv6
  *             pool, or an Amazon-provided IPv6 CIDR block.</p>
  *          <p>For more information about associating CIDR blocks with your VPC and applicable
diff --git a/clients/client-ec2/src/commands/CreateCarrierGatewayCommand.ts b/clients/client-ec2/src/commands/CreateCarrierGatewayCommand.ts
index faf37b76c5ec4..97aa71302c196 100644
--- a/clients/client-ec2/src/commands/CreateCarrierGatewayCommand.ts
+++ b/clients/client-ec2/src/commands/CreateCarrierGatewayCommand.ts
@@ -15,7 +15,8 @@ import {
 } from "@smithy/types";
 
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
-import { CreateCarrierGatewayRequest, CreateCarrierGatewayResult } from "../models/models_0";
+import { CreateCarrierGatewayRequest } from "../models/models_0";
+import { CreateCarrierGatewayResult } from "../models/models_1";
 import { de_CreateCarrierGatewayCommand, se_CreateCarrierGatewayCommand } from "../protocols/Aws_ec2";
 
 /**
diff --git a/clients/client-ec2/src/commands/CreateIpamCommand.ts b/clients/client-ec2/src/commands/CreateIpamCommand.ts
index 8a4fbf812e9d3..373737dc818c1 100644
--- a/clients/client-ec2/src/commands/CreateIpamCommand.ts
+++ b/clients/client-ec2/src/commands/CreateIpamCommand.ts
@@ -69,6 +69,7 @@ export interface CreateIpamCommandOutput extends CreateIpamResult, __MetadataBea
  *     },
  *   ],
  *   ClientToken: "STRING_VALUE",
+ *   Tier: "free" || "advanced",
  * };
  * const command = new CreateIpamCommand(input);
  * const response = await client.send(command);
@@ -97,6 +98,8 @@ export interface CreateIpamCommandOutput extends CreateIpamResult, __MetadataBea
  * //     DefaultResourceDiscoveryId: "STRING_VALUE",
  * //     DefaultResourceDiscoveryAssociationId: "STRING_VALUE",
  * //     ResourceDiscoveryAssociationCount: Number("int"),
+ * //     StateMessage: "STRING_VALUE",
+ * //     Tier: "free" || "advanced",
  * //   },
  * // };
  *
diff --git a/clients/client-ec2/src/commands/CreateIpamPoolCommand.ts b/clients/client-ec2/src/commands/CreateIpamPoolCommand.ts
index 258af916ea4d6..e933b8fd85219 100644
--- a/clients/client-ec2/src/commands/CreateIpamPoolCommand.ts
+++ b/clients/client-ec2/src/commands/CreateIpamPoolCommand.ts
@@ -78,6 +78,12 @@ export interface CreateIpamPoolCommandOutput extends CreateIpamPoolResult, __Met
  *   ClientToken: "STRING_VALUE",
  *   AwsService: "ec2",
  *   PublicIpSource: "amazon" || "byoip",
+ *   SourceResource: { // IpamPoolSourceResourceRequest
+ *     ResourceId: "STRING_VALUE",
+ *     ResourceType: "vpc",
+ *     ResourceRegion: "STRING_VALUE",
+ *     ResourceOwner: "STRING_VALUE",
+ *   },
  * };
  * const command = new CreateIpamPoolCommand(input);
  * const response = await client.send(command);
@@ -116,6 +122,12 @@ export interface CreateIpamPoolCommandOutput extends CreateIpamPoolResult, __Met
  * //     ],
  * //     AwsService: "ec2",
  * //     PublicIpSource: "amazon" || "byoip",
+ * //     SourceResource: { // IpamPoolSourceResource
+ * //       ResourceId: "STRING_VALUE",
+ * //       ResourceType: "vpc",
+ * //       ResourceRegion: "STRING_VALUE",
+ * //       ResourceOwner: "STRING_VALUE",
+ * //     },
  * //   },
  * // };
  *
diff --git a/clients/client-ec2/src/commands/CreateLaunchTemplateCommand.ts b/clients/client-ec2/src/commands/CreateLaunchTemplateCommand.ts
index cb1d6d30a1dbb..23106ba559aa3 100644
--- a/clients/client-ec2/src/commands/CreateLaunchTemplateCommand.ts
+++ b/clients/client-ec2/src/commands/CreateLaunchTemplateCommand.ts
@@ -133,6 +133,11 @@ export interface CreateLaunchTemplateCommandOutput extends CreateLaunchTemplateR
  *             EnaSrdUdpEnabled: true || false,
  *           },
  *         },
+ *         ConnectionTrackingSpecification: { // ConnectionTrackingSpecificationRequest
+ *           TcpEstablishedTimeout: Number("int"),
+ *           UdpStreamTimeout: Number("int"),
+ *           UdpTimeout: Number("int"),
+ *         },
  *       },
  *     ],
  *     ImageId: "STRING_VALUE",
diff --git a/clients/client-ec2/src/commands/CreateLaunchTemplateVersionCommand.ts b/clients/client-ec2/src/commands/CreateLaunchTemplateVersionCommand.ts
index 37d5f1f3d56e4..fa2226e196895 100644
--- a/clients/client-ec2/src/commands/CreateLaunchTemplateVersionCommand.ts
+++ b/clients/client-ec2/src/commands/CreateLaunchTemplateVersionCommand.ts
@@ -135,6 +135,11 @@ export interface CreateLaunchTemplateVersionCommandOutput extends CreateLaunchTe
  *             EnaSrdUdpEnabled: true || false,
  *           },
  *         },
+ *         ConnectionTrackingSpecification: { // ConnectionTrackingSpecificationRequest
+ *           TcpEstablishedTimeout: Number("int"),
+ *           UdpStreamTimeout: Number("int"),
+ *           UdpTimeout: Number("int"),
+ *         },
  *       },
  *     ],
  *     ImageId: "STRING_VALUE",
@@ -392,6 +397,11 @@ export interface CreateLaunchTemplateVersionCommandOutput extends CreateLaunchTe
  * //               EnaSrdUdpEnabled: true || false,
  * //             },
  * //           },
+ * //           ConnectionTrackingSpecification: { // ConnectionTrackingSpecification
+ * //             TcpEstablishedTimeout: Number("int"),
+ * //             UdpTimeout: Number("int"),
+ * //             UdpStreamTimeout: Number("int"),
+ * //           },
  * //         },
  * //       ],
  * //       ImageId: "STRING_VALUE",
diff --git a/clients/client-ec2/src/commands/CreateNetworkInterfaceCommand.ts b/clients/client-ec2/src/commands/CreateNetworkInterfaceCommand.ts
index a2a02479c26f8..3f4f803cccfbb 100644
--- a/clients/client-ec2/src/commands/CreateNetworkInterfaceCommand.ts
+++ b/clients/client-ec2/src/commands/CreateNetworkInterfaceCommand.ts
@@ -15,7 +15,8 @@ import {
 } from "@smithy/types";
 
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
-import { CreateNetworkInterfaceRequest, CreateNetworkInterfaceResult } from "../models/models_1";
+import { CreateNetworkInterfaceRequest } from "../models/models_1";
+import { CreateNetworkInterfaceResult } from "../models/models_2";
 import { de_CreateNetworkInterfaceCommand, se_CreateNetworkInterfaceCommand } from "../protocols/Aws_ec2";
 
 /**
@@ -97,6 +98,11 @@ export interface CreateNetworkInterfaceCommandOutput extends CreateNetworkInterf
  *   ],
  *   ClientToken: "STRING_VALUE",
  *   EnablePrimaryIpv6: true || false,
+ *   ConnectionTrackingSpecification: { // ConnectionTrackingSpecificationRequest
+ *     TcpEstablishedTimeout: Number("int"),
+ *     UdpStreamTimeout: Number("int"),
+ *     UdpTimeout: Number("int"),
+ *   },
  * };
  * const command = new CreateNetworkInterfaceCommand(input);
  * const response = await client.send(command);
@@ -128,6 +134,11 @@ export interface CreateNetworkInterfaceCommandOutput extends CreateNetworkInterf
  * //       },
  * //     },
  * //     AvailabilityZone: "STRING_VALUE",
+ * //     ConnectionTrackingConfiguration: { // ConnectionTrackingConfiguration
+ * //       TcpEstablishedTimeout: Number("int"),
+ * //       UdpStreamTimeout: Number("int"),
+ * //       UdpTimeout: Number("int"),
+ * //     },
  * //     Description: "STRING_VALUE",
  * //     Groups: [ // GroupIdentifierList
  * //       { // GroupIdentifier
diff --git a/clients/client-ec2/src/commands/CreateNetworkInterfacePermissionCommand.ts b/clients/client-ec2/src/commands/CreateNetworkInterfacePermissionCommand.ts
index f28ba7c9af407..793eaad62d6bd 100644
--- a/clients/client-ec2/src/commands/CreateNetworkInterfacePermissionCommand.ts
+++ b/clients/client-ec2/src/commands/CreateNetworkInterfacePermissionCommand.ts
@@ -15,7 +15,7 @@ import {
 } from "@smithy/types";
 
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
-import { CreateNetworkInterfacePermissionRequest, CreateNetworkInterfacePermissionResult } from "../models/models_1";
+import { CreateNetworkInterfacePermissionRequest, CreateNetworkInterfacePermissionResult } from "../models/models_2";
 import {
   de_CreateNetworkInterfacePermissionCommand,
   se_CreateNetworkInterfacePermissionCommand,
diff --git a/clients/client-ec2/src/commands/CreateSubnetCommand.ts b/clients/client-ec2/src/commands/CreateSubnetCommand.ts
index c922e33580446..c10143a73b669 100644
--- a/clients/client-ec2/src/commands/CreateSubnetCommand.ts
+++ b/clients/client-ec2/src/commands/CreateSubnetCommand.ts
@@ -46,8 +46,8 @@ export interface CreateSubnetCommandOutput extends CreateSubnetResult, __Metadat
  *          <p>The allowed size for an IPv4 subnet is between a /28 netmask (16 IP addresses) and
  *             a /16 netmask (65,536 IP addresses). Amazon Web Services reserves both the first four and
  *             the last IPv4 address in each subnet's CIDR block. They're not available for your use.</p>
- *          <p>If you've associated an IPv6 CIDR block with your VPC, you can associate an IPv6 CIDR block
- *             with a subnet when you create it. The allowed block size for an IPv6 subnet is a /64 netmask.</p>
+ *          <p>If you've associated an IPv6 CIDR block with your VPC, you can associate an IPv6 CIDR
+ *             block with a subnet when you create it. </p>
  *          <p>If you add more than one subnet to a VPC, they're set up in a star topology with a
  *             logical router in the middle.</p>
  *          <p>When you stop an instance in a subnet, it retains its private IPv4 address. It's
@@ -80,6 +80,10 @@ export interface CreateSubnetCommandOutput extends CreateSubnetResult, __Metadat
  *   VpcId: "STRING_VALUE", // required
  *   DryRun: true || false,
  *   Ipv6Native: true || false,
+ *   Ipv4IpamPoolId: "STRING_VALUE",
+ *   Ipv4NetmaskLength: Number("int"),
+ *   Ipv6IpamPoolId: "STRING_VALUE",
+ *   Ipv6NetmaskLength: Number("int"),
  * };
  * const command = new CreateSubnetCommand(input);
  * const response = await client.send(command);
diff --git a/clients/client-ec2/src/commands/CreateVpcCommand.ts b/clients/client-ec2/src/commands/CreateVpcCommand.ts
index e5135ae1fd0f6..1a8c505a29196 100644
--- a/clients/client-ec2/src/commands/CreateVpcCommand.ts
+++ b/clients/client-ec2/src/commands/CreateVpcCommand.ts
@@ -39,9 +39,10 @@ export interface CreateVpcCommandOutput extends CreateVpcResult, __MetadataBeare
  * @public
  * <p>Creates a VPC with the specified CIDR blocks. For more information, see <a href="https://docs.aws.amazon.com/vpc/latest/userguide/vpc-ip-addressing.html">IP addressing for your VPCs and subnets</a> in the
  *         <i>Amazon VPC User Guide</i>.</p>
- *          <p>You can optionally request an IPv6 CIDR block for the VPC. You can request an Amazon-provided
- *            IPv6 CIDR block from Amazon's pool of IPv6 addresses, or an IPv6 CIDR block from an IPv6 address
- *            pool that you provisioned through bring your own IP addresses (<a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-byoip.html">BYOIP</a>).</p>
+ *          <p>You can optionally request an IPv6 CIDR block for the VPC. You can request an
+ *             Amazon-provided IPv6 CIDR block from Amazon's pool of IPv6 addresses or an IPv6 CIDR
+ *             block from an IPv6 address pool that you provisioned through bring your own IP addresses
+ *                 (<a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-byoip.html">BYOIP</a>).</p>
  *          <p>By default, each instance that you launch in the VPC has the default DHCP options, which
  * 			include only a default DNS server that we provide (AmazonProvidedDNS). For more
  * 			information, see <a href="https://docs.aws.amazon.com/vpc/latest/userguide/VPC_DHCP_Options.html">DHCP option sets</a> in the <i>Amazon VPC User Guide</i>.</p>
diff --git a/clients/client-ec2/src/commands/DeleteIpamCommand.ts b/clients/client-ec2/src/commands/DeleteIpamCommand.ts
index 3679c7102ad90..7223d99d5f049 100644
--- a/clients/client-ec2/src/commands/DeleteIpamCommand.ts
+++ b/clients/client-ec2/src/commands/DeleteIpamCommand.ts
@@ -78,6 +78,8 @@ export interface DeleteIpamCommandOutput extends DeleteIpamResult, __MetadataBea
  * //     DefaultResourceDiscoveryId: "STRING_VALUE",
  * //     DefaultResourceDiscoveryAssociationId: "STRING_VALUE",
  * //     ResourceDiscoveryAssociationCount: Number("int"),
+ * //     StateMessage: "STRING_VALUE",
+ * //     Tier: "free" || "advanced",
  * //   },
  * // };
  *
diff --git a/clients/client-ec2/src/commands/DeleteIpamPoolCommand.ts b/clients/client-ec2/src/commands/DeleteIpamPoolCommand.ts
index da80604ae3e46..f51d655aa540b 100644
--- a/clients/client-ec2/src/commands/DeleteIpamPoolCommand.ts
+++ b/clients/client-ec2/src/commands/DeleteIpamPoolCommand.ts
@@ -54,6 +54,7 @@ export interface DeleteIpamPoolCommandOutput extends DeleteIpamPoolResult, __Met
  * const input = { // DeleteIpamPoolRequest
  *   DryRun: true || false,
  *   IpamPoolId: "STRING_VALUE", // required
+ *   Cascade: true || false,
  * };
  * const command = new DeleteIpamPoolCommand(input);
  * const response = await client.send(command);
@@ -92,6 +93,12 @@ export interface DeleteIpamPoolCommandOutput extends DeleteIpamPoolResult, __Met
  * //     ],
  * //     AwsService: "ec2",
  * //     PublicIpSource: "amazon" || "byoip",
+ * //     SourceResource: { // IpamPoolSourceResource
+ * //       ResourceId: "STRING_VALUE",
+ * //       ResourceType: "vpc",
+ * //       ResourceRegion: "STRING_VALUE",
+ * //       ResourceOwner: "STRING_VALUE",
+ * //     },
  * //   },
  * // };
  *
diff --git a/clients/client-ec2/src/commands/DeleteNatGatewayCommand.ts b/clients/client-ec2/src/commands/DeleteNatGatewayCommand.ts
index d0fdca8493cf7..95653995e6a83 100644
--- a/clients/client-ec2/src/commands/DeleteNatGatewayCommand.ts
+++ b/clients/client-ec2/src/commands/DeleteNatGatewayCommand.ts
@@ -15,7 +15,8 @@ import {
 } from "@smithy/types";
 
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
-import { DeleteNatGatewayRequest, DeleteNatGatewayResult } from "../models/models_2";
+import { DeleteNatGatewayRequest } from "../models/models_2";
+import { DeleteNatGatewayResult } from "../models/models_3";
 import { de_DeleteNatGatewayCommand, se_DeleteNatGatewayCommand } from "../protocols/Aws_ec2";
 
 /**
diff --git a/clients/client-ec2/src/commands/DeleteNetworkAclCommand.ts b/clients/client-ec2/src/commands/DeleteNetworkAclCommand.ts
index 8928d8cf6cecd..7cfa358193ac1 100644
--- a/clients/client-ec2/src/commands/DeleteNetworkAclCommand.ts
+++ b/clients/client-ec2/src/commands/DeleteNetworkAclCommand.ts
@@ -15,7 +15,7 @@ import {
 } from "@smithy/types";
 
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
-import { DeleteNetworkAclRequest } from "../models/models_2";
+import { DeleteNetworkAclRequest } from "../models/models_3";
 import { de_DeleteNetworkAclCommand, se_DeleteNetworkAclCommand } from "../protocols/Aws_ec2";
 
 /**
diff --git a/clients/client-ec2/src/commands/DeleteNetworkAclEntryCommand.ts b/clients/client-ec2/src/commands/DeleteNetworkAclEntryCommand.ts
index 1d272486b8534..1028c54ba754b 100644
--- a/clients/client-ec2/src/commands/DeleteNetworkAclEntryCommand.ts
+++ b/clients/client-ec2/src/commands/DeleteNetworkAclEntryCommand.ts
@@ -15,7 +15,7 @@ import {
 } from "@smithy/types";
 
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
-import { DeleteNetworkAclEntryRequest } from "../models/models_2";
+import { DeleteNetworkAclEntryRequest } from "../models/models_3";
 import { de_DeleteNetworkAclEntryCommand, se_DeleteNetworkAclEntryCommand } from "../protocols/Aws_ec2";
 
 /**
diff --git a/clients/client-ec2/src/commands/DeleteNetworkInsightsAccessScopeAnalysisCommand.ts b/clients/client-ec2/src/commands/DeleteNetworkInsightsAccessScopeAnalysisCommand.ts
index 7c93ab3f952b0..8885cf15afd13 100644
--- a/clients/client-ec2/src/commands/DeleteNetworkInsightsAccessScopeAnalysisCommand.ts
+++ b/clients/client-ec2/src/commands/DeleteNetworkInsightsAccessScopeAnalysisCommand.ts
@@ -18,7 +18,7 @@ import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "
 import {
   DeleteNetworkInsightsAccessScopeAnalysisRequest,
   DeleteNetworkInsightsAccessScopeAnalysisResult,
-} from "../models/models_2";
+} from "../models/models_3";
 import {
   de_DeleteNetworkInsightsAccessScopeAnalysisCommand,
   se_DeleteNetworkInsightsAccessScopeAnalysisCommand,
diff --git a/clients/client-ec2/src/commands/DeleteNetworkInsightsAccessScopeCommand.ts b/clients/client-ec2/src/commands/DeleteNetworkInsightsAccessScopeCommand.ts
index 370ded497d4ca..1a927a5f35515 100644
--- a/clients/client-ec2/src/commands/DeleteNetworkInsightsAccessScopeCommand.ts
+++ b/clients/client-ec2/src/commands/DeleteNetworkInsightsAccessScopeCommand.ts
@@ -15,7 +15,7 @@ import {
 } from "@smithy/types";
 
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
-import { DeleteNetworkInsightsAccessScopeRequest, DeleteNetworkInsightsAccessScopeResult } from "../models/models_2";
+import { DeleteNetworkInsightsAccessScopeRequest, DeleteNetworkInsightsAccessScopeResult } from "../models/models_3";
 import {
   de_DeleteNetworkInsightsAccessScopeCommand,
   se_DeleteNetworkInsightsAccessScopeCommand,
diff --git a/clients/client-ec2/src/commands/DeleteNetworkInsightsAnalysisCommand.ts b/clients/client-ec2/src/commands/DeleteNetworkInsightsAnalysisCommand.ts
index 7c8eb9ad8596a..cae20de39d280 100644
--- a/clients/client-ec2/src/commands/DeleteNetworkInsightsAnalysisCommand.ts
+++ b/clients/client-ec2/src/commands/DeleteNetworkInsightsAnalysisCommand.ts
@@ -15,7 +15,7 @@ import {
 } from "@smithy/types";
 
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
-import { DeleteNetworkInsightsAnalysisRequest, DeleteNetworkInsightsAnalysisResult } from "../models/models_2";
+import { DeleteNetworkInsightsAnalysisRequest, DeleteNetworkInsightsAnalysisResult } from "../models/models_3";
 import { de_DeleteNetworkInsightsAnalysisCommand, se_DeleteNetworkInsightsAnalysisCommand } from "../protocols/Aws_ec2";
 
 /**
diff --git a/clients/client-ec2/src/commands/DeleteNetworkInsightsPathCommand.ts b/clients/client-ec2/src/commands/DeleteNetworkInsightsPathCommand.ts
index dc36145951c1b..b5039aad489ba 100644
--- a/clients/client-ec2/src/commands/DeleteNetworkInsightsPathCommand.ts
+++ b/clients/client-ec2/src/commands/DeleteNetworkInsightsPathCommand.ts
@@ -15,7 +15,7 @@ import {
 } from "@smithy/types";
 
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
-import { DeleteNetworkInsightsPathRequest, DeleteNetworkInsightsPathResult } from "../models/models_2";
+import { DeleteNetworkInsightsPathRequest, DeleteNetworkInsightsPathResult } from "../models/models_3";
 import { de_DeleteNetworkInsightsPathCommand, se_DeleteNetworkInsightsPathCommand } from "../protocols/Aws_ec2";
 
 /**
diff --git a/clients/client-ec2/src/commands/DeprovisionByoipCidrCommand.ts b/clients/client-ec2/src/commands/DeprovisionByoipCidrCommand.ts
index 2f6d1c0304f17..2d4880b167e20 100644
--- a/clients/client-ec2/src/commands/DeprovisionByoipCidrCommand.ts
+++ b/clients/client-ec2/src/commands/DeprovisionByoipCidrCommand.ts
@@ -57,6 +57,14 @@ export interface DeprovisionByoipCidrCommandOutput extends DeprovisionByoipCidrR
  * //   ByoipCidr: { // ByoipCidr
  * //     Cidr: "STRING_VALUE",
  * //     Description: "STRING_VALUE",
+ * //     AsnAssociations: [ // AsnAssociationSet
+ * //       { // AsnAssociation
+ * //         Asn: "STRING_VALUE",
+ * //         Cidr: "STRING_VALUE",
+ * //         StatusMessage: "STRING_VALUE",
+ * //         State: "disassociated" || "failed-disassociation" || "failed-association" || "pending-disassociation" || "pending-association" || "associated",
+ * //       },
+ * //     ],
  * //     StatusMessage: "STRING_VALUE",
  * //     State: "advertised" || "deprovisioned" || "failed-deprovision" || "failed-provision" || "pending-deprovision" || "pending-provision" || "provisioned" || "provisioned-not-publicly-advertisable",
  * //   },
diff --git a/clients/client-ec2/src/commands/DeprovisionIpamByoasnCommand.ts b/clients/client-ec2/src/commands/DeprovisionIpamByoasnCommand.ts
new file mode 100644
index 0000000000000..a4606e388c56b
--- /dev/null
+++ b/clients/client-ec2/src/commands/DeprovisionIpamByoasnCommand.ts
@@ -0,0 +1,147 @@
+// smithy-typescript generated code
+import { EndpointParameterInstructions, getEndpointPlugin } from "@smithy/middleware-endpoint";
+import { getSerdePlugin } from "@smithy/middleware-serde";
+import { HttpRequest as __HttpRequest, HttpResponse as __HttpResponse } from "@smithy/protocol-http";
+import { Command as $Command } from "@smithy/smithy-client";
+import {
+  FinalizeHandlerArguments,
+  Handler,
+  HandlerExecutionContext,
+  HttpHandlerOptions as __HttpHandlerOptions,
+  MetadataBearer as __MetadataBearer,
+  MiddlewareStack,
+  SerdeContext as __SerdeContext,
+  SMITHY_CONTEXT_KEY,
+} from "@smithy/types";
+
+import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
+import { DeprovisionIpamByoasnRequest, DeprovisionIpamByoasnResult } from "../models/models_3";
+import { de_DeprovisionIpamByoasnCommand, se_DeprovisionIpamByoasnCommand } from "../protocols/Aws_ec2";
+
+/**
+ * @public
+ */
+export { __MetadataBearer, $Command };
+/**
+ * @public
+ *
+ * The input for {@link DeprovisionIpamByoasnCommand}.
+ */
+export interface DeprovisionIpamByoasnCommandInput extends DeprovisionIpamByoasnRequest {}
+/**
+ * @public
+ *
+ * The output of {@link DeprovisionIpamByoasnCommand}.
+ */
+export interface DeprovisionIpamByoasnCommandOutput extends DeprovisionIpamByoasnResult, __MetadataBearer {}
+
+/**
+ * @public
+ * <p>Deprovisions your Autonomous System Number (ASN) from your Amazon Web Services account. This action can only be called after any BYOIP CIDR associations are removed from your Amazon Web Services account with <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DisassociateIpamByoasn.html">DisassociateIpamByoasn</a>.
+ *             For more information, see <a href="https://docs.aws.amazon.com/vpc/latest/ipam/tutorials-byoasn.html">Tutorial: Bring your ASN to IPAM</a> in the <i>Amazon VPC IPAM guide</i>.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { EC2Client, DeprovisionIpamByoasnCommand } from "@aws-sdk/client-ec2"; // ES Modules import
+ * // const { EC2Client, DeprovisionIpamByoasnCommand } = require("@aws-sdk/client-ec2"); // CommonJS import
+ * const client = new EC2Client(config);
+ * const input = { // DeprovisionIpamByoasnRequest
+ *   DryRun: true || false,
+ *   IpamId: "STRING_VALUE", // required
+ *   Asn: "STRING_VALUE", // required
+ * };
+ * const command = new DeprovisionIpamByoasnCommand(input);
+ * const response = await client.send(command);
+ * // { // DeprovisionIpamByoasnResult
+ * //   Byoasn: { // Byoasn
+ * //     Asn: "STRING_VALUE",
+ * //     IpamId: "STRING_VALUE",
+ * //     StatusMessage: "STRING_VALUE",
+ * //     State: "deprovisioned" || "failed-deprovision" || "failed-provision" || "pending-deprovision" || "pending-provision" || "provisioned",
+ * //   },
+ * // };
+ *
+ * ```
+ *
+ * @param DeprovisionIpamByoasnCommandInput - {@link DeprovisionIpamByoasnCommandInput}
+ * @returns {@link DeprovisionIpamByoasnCommandOutput}
+ * @see {@link DeprovisionIpamByoasnCommandInput} for command's `input` shape.
+ * @see {@link DeprovisionIpamByoasnCommandOutput} for command's `response` shape.
+ * @see {@link EC2ClientResolvedConfig | config} for EC2Client's `config` shape.
+ *
+ * @throws {@link EC2ServiceException}
+ * <p>Base exception class for all service exceptions from EC2 service.</p>
+ *
+ */
+export class DeprovisionIpamByoasnCommand extends $Command<
+  DeprovisionIpamByoasnCommandInput,
+  DeprovisionIpamByoasnCommandOutput,
+  EC2ClientResolvedConfig
+> {
+  public static getEndpointParameterInstructions(): EndpointParameterInstructions {
+    return {
+      UseFIPS: { type: "builtInParams", name: "useFipsEndpoint" },
+      Endpoint: { type: "builtInParams", name: "endpoint" },
+      Region: { type: "builtInParams", name: "region" },
+      UseDualStack: { type: "builtInParams", name: "useDualstackEndpoint" },
+    };
+  }
+
+  /**
+   * @public
+   */
+  constructor(readonly input: DeprovisionIpamByoasnCommandInput) {
+    super();
+  }
+
+  /**
+   * @internal
+   */
+  resolveMiddleware(
+    clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>,
+    configuration: EC2ClientResolvedConfig,
+    options?: __HttpHandlerOptions
+  ): Handler<DeprovisionIpamByoasnCommandInput, DeprovisionIpamByoasnCommandOutput> {
+    this.middlewareStack.use(getSerdePlugin(configuration, this.serialize, this.deserialize));
+    this.middlewareStack.use(
+      getEndpointPlugin(configuration, DeprovisionIpamByoasnCommand.getEndpointParameterInstructions())
+    );
+
+    const stack = clientStack.concat(this.middlewareStack);
+
+    const { logger } = configuration;
+    const clientName = "EC2Client";
+    const commandName = "DeprovisionIpamByoasnCommand";
+    const handlerExecutionContext: HandlerExecutionContext = {
+      logger,
+      clientName,
+      commandName,
+      inputFilterSensitiveLog: (_: any) => _,
+      outputFilterSensitiveLog: (_: any) => _,
+      [SMITHY_CONTEXT_KEY]: {
+        service: "AmazonEC2",
+        operation: "DeprovisionIpamByoasn",
+      },
+    };
+    const { requestHandler } = configuration;
+    return stack.resolve(
+      (request: FinalizeHandlerArguments<any>) =>
+        requestHandler.handle(request.request as __HttpRequest, options || {}),
+      handlerExecutionContext
+    );
+  }
+
+  /**
+   * @internal
+   */
+  private serialize(input: DeprovisionIpamByoasnCommandInput, context: __SerdeContext): Promise<__HttpRequest> {
+    return se_DeprovisionIpamByoasnCommand(input, context);
+  }
+
+  /**
+   * @internal
+   */
+  private deserialize(output: __HttpResponse, context: __SerdeContext): Promise<DeprovisionIpamByoasnCommandOutput> {
+    return de_DeprovisionIpamByoasnCommand(output, context);
+  }
+}
diff --git a/clients/client-ec2/src/commands/DescribeByoipCidrsCommand.ts b/clients/client-ec2/src/commands/DescribeByoipCidrsCommand.ts
index 142a1049a9460..a555a89133539 100644
--- a/clients/client-ec2/src/commands/DescribeByoipCidrsCommand.ts
+++ b/clients/client-ec2/src/commands/DescribeByoipCidrsCommand.ts
@@ -58,6 +58,14 @@ export interface DescribeByoipCidrsCommandOutput extends DescribeByoipCidrsResul
  * //     { // ByoipCidr
  * //       Cidr: "STRING_VALUE",
  * //       Description: "STRING_VALUE",
+ * //       AsnAssociations: [ // AsnAssociationSet
+ * //         { // AsnAssociation
+ * //           Asn: "STRING_VALUE",
+ * //           Cidr: "STRING_VALUE",
+ * //           StatusMessage: "STRING_VALUE",
+ * //           State: "disassociated" || "failed-disassociation" || "failed-association" || "pending-disassociation" || "pending-association" || "associated",
+ * //         },
+ * //       ],
  * //       StatusMessage: "STRING_VALUE",
  * //       State: "advertised" || "deprovisioned" || "failed-deprovision" || "failed-provision" || "pending-deprovision" || "pending-provision" || "provisioned" || "provisioned-not-publicly-advertisable",
  * //     },
diff --git a/clients/client-ec2/src/commands/DescribeImportSnapshotTasksCommand.ts b/clients/client-ec2/src/commands/DescribeImportSnapshotTasksCommand.ts
index f6c08cf5d13f6..3825882eacfec 100644
--- a/clients/client-ec2/src/commands/DescribeImportSnapshotTasksCommand.ts
+++ b/clients/client-ec2/src/commands/DescribeImportSnapshotTasksCommand.ts
@@ -15,11 +15,11 @@ import {
 } from "@smithy/types";
 
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
+import { DescribeImportSnapshotTasksRequest } from "../models/models_3";
 import {
-  DescribeImportSnapshotTasksRequest,
   DescribeImportSnapshotTasksResult,
   DescribeImportSnapshotTasksResultFilterSensitiveLog,
-} from "../models/models_3";
+} from "../models/models_4";
 import { de_DescribeImportSnapshotTasksCommand, se_DescribeImportSnapshotTasksCommand } from "../protocols/Aws_ec2";
 
 /**
diff --git a/clients/client-ec2/src/commands/DescribeInstanceAttributeCommand.ts b/clients/client-ec2/src/commands/DescribeInstanceAttributeCommand.ts
index 26a8991d05876..4af90f86071d2 100644
--- a/clients/client-ec2/src/commands/DescribeInstanceAttributeCommand.ts
+++ b/clients/client-ec2/src/commands/DescribeInstanceAttributeCommand.ts
@@ -15,7 +15,7 @@ import {
 } from "@smithy/types";
 
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
-import { DescribeInstanceAttributeRequest, InstanceAttribute } from "../models/models_3";
+import { DescribeInstanceAttributeRequest, InstanceAttribute } from "../models/models_4";
 import { de_DescribeInstanceAttributeCommand, se_DescribeInstanceAttributeCommand } from "../protocols/Aws_ec2";
 
 /**
diff --git a/clients/client-ec2/src/commands/DescribeInstanceConnectEndpointsCommand.ts b/clients/client-ec2/src/commands/DescribeInstanceConnectEndpointsCommand.ts
index 6fd7f1138bb6a..767e2086ffabf 100644
--- a/clients/client-ec2/src/commands/DescribeInstanceConnectEndpointsCommand.ts
+++ b/clients/client-ec2/src/commands/DescribeInstanceConnectEndpointsCommand.ts
@@ -15,7 +15,7 @@ import {
 } from "@smithy/types";
 
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
-import { DescribeInstanceConnectEndpointsRequest, DescribeInstanceConnectEndpointsResult } from "../models/models_3";
+import { DescribeInstanceConnectEndpointsRequest, DescribeInstanceConnectEndpointsResult } from "../models/models_4";
 import {
   de_DescribeInstanceConnectEndpointsCommand,
   se_DescribeInstanceConnectEndpointsCommand,
diff --git a/clients/client-ec2/src/commands/DescribeInstanceCreditSpecificationsCommand.ts b/clients/client-ec2/src/commands/DescribeInstanceCreditSpecificationsCommand.ts
index 154d24be2750e..f1e1461db28c5 100644
--- a/clients/client-ec2/src/commands/DescribeInstanceCreditSpecificationsCommand.ts
+++ b/clients/client-ec2/src/commands/DescribeInstanceCreditSpecificationsCommand.ts
@@ -18,7 +18,7 @@ import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "
 import {
   DescribeInstanceCreditSpecificationsRequest,
   DescribeInstanceCreditSpecificationsResult,
-} from "../models/models_3";
+} from "../models/models_4";
 import {
   de_DescribeInstanceCreditSpecificationsCommand,
   se_DescribeInstanceCreditSpecificationsCommand,
diff --git a/clients/client-ec2/src/commands/DescribeInstancesCommand.ts b/clients/client-ec2/src/commands/DescribeInstancesCommand.ts
index 860577f122a8f..552a2b4baca08 100644
--- a/clients/client-ec2/src/commands/DescribeInstancesCommand.ts
+++ b/clients/client-ec2/src/commands/DescribeInstancesCommand.ts
@@ -235,6 +235,11 @@ export interface DescribeInstancesCommandOutput extends DescribeInstancesResult,
  * //                   Ipv6Prefix: "STRING_VALUE",
  * //                 },
  * //               ],
+ * //               ConnectionTrackingConfiguration: { // ConnectionTrackingSpecificationResponse
+ * //                 TcpEstablishedTimeout: Number("int"),
+ * //                 UdpStreamTimeout: Number("int"),
+ * //                 UdpTimeout: Number("int"),
+ * //               },
  * //             },
  * //           ],
  * //           OutpostArn: "STRING_VALUE",
diff --git a/clients/client-ec2/src/commands/DescribeIpamByoasnCommand.ts b/clients/client-ec2/src/commands/DescribeIpamByoasnCommand.ts
new file mode 100644
index 0000000000000..ff7ed796abb6c
--- /dev/null
+++ b/clients/client-ec2/src/commands/DescribeIpamByoasnCommand.ts
@@ -0,0 +1,149 @@
+// smithy-typescript generated code
+import { EndpointParameterInstructions, getEndpointPlugin } from "@smithy/middleware-endpoint";
+import { getSerdePlugin } from "@smithy/middleware-serde";
+import { HttpRequest as __HttpRequest, HttpResponse as __HttpResponse } from "@smithy/protocol-http";
+import { Command as $Command } from "@smithy/smithy-client";
+import {
+  FinalizeHandlerArguments,
+  Handler,
+  HandlerExecutionContext,
+  HttpHandlerOptions as __HttpHandlerOptions,
+  MetadataBearer as __MetadataBearer,
+  MiddlewareStack,
+  SerdeContext as __SerdeContext,
+  SMITHY_CONTEXT_KEY,
+} from "@smithy/types";
+
+import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
+import { DescribeIpamByoasnRequest, DescribeIpamByoasnResult } from "../models/models_4";
+import { de_DescribeIpamByoasnCommand, se_DescribeIpamByoasnCommand } from "../protocols/Aws_ec2";
+
+/**
+ * @public
+ */
+export { __MetadataBearer, $Command };
+/**
+ * @public
+ *
+ * The input for {@link DescribeIpamByoasnCommand}.
+ */
+export interface DescribeIpamByoasnCommandInput extends DescribeIpamByoasnRequest {}
+/**
+ * @public
+ *
+ * The output of {@link DescribeIpamByoasnCommand}.
+ */
+export interface DescribeIpamByoasnCommandOutput extends DescribeIpamByoasnResult, __MetadataBearer {}
+
+/**
+ * @public
+ * <p>Describes your Autonomous System Numbers (ASNs), their provisioning statuses, and the BYOIP CIDRs with which they are associated. For more information, see <a href="https://docs.aws.amazon.com/vpc/latest/ipam/tutorials-byoasn.html">Tutorial: Bring your ASN to IPAM</a> in the <i>Amazon VPC IPAM guide</i>.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { EC2Client, DescribeIpamByoasnCommand } from "@aws-sdk/client-ec2"; // ES Modules import
+ * // const { EC2Client, DescribeIpamByoasnCommand } = require("@aws-sdk/client-ec2"); // CommonJS import
+ * const client = new EC2Client(config);
+ * const input = { // DescribeIpamByoasnRequest
+ *   DryRun: true || false,
+ *   MaxResults: Number("int"),
+ *   NextToken: "STRING_VALUE",
+ * };
+ * const command = new DescribeIpamByoasnCommand(input);
+ * const response = await client.send(command);
+ * // { // DescribeIpamByoasnResult
+ * //   Byoasns: [ // ByoasnSet
+ * //     { // Byoasn
+ * //       Asn: "STRING_VALUE",
+ * //       IpamId: "STRING_VALUE",
+ * //       StatusMessage: "STRING_VALUE",
+ * //       State: "deprovisioned" || "failed-deprovision" || "failed-provision" || "pending-deprovision" || "pending-provision" || "provisioned",
+ * //     },
+ * //   ],
+ * //   NextToken: "STRING_VALUE",
+ * // };
+ *
+ * ```
+ *
+ * @param DescribeIpamByoasnCommandInput - {@link DescribeIpamByoasnCommandInput}
+ * @returns {@link DescribeIpamByoasnCommandOutput}
+ * @see {@link DescribeIpamByoasnCommandInput} for command's `input` shape.
+ * @see {@link DescribeIpamByoasnCommandOutput} for command's `response` shape.
+ * @see {@link EC2ClientResolvedConfig | config} for EC2Client's `config` shape.
+ *
+ * @throws {@link EC2ServiceException}
+ * <p>Base exception class for all service exceptions from EC2 service.</p>
+ *
+ */
+export class DescribeIpamByoasnCommand extends $Command<
+  DescribeIpamByoasnCommandInput,
+  DescribeIpamByoasnCommandOutput,
+  EC2ClientResolvedConfig
+> {
+  public static getEndpointParameterInstructions(): EndpointParameterInstructions {
+    return {
+      UseFIPS: { type: "builtInParams", name: "useFipsEndpoint" },
+      Endpoint: { type: "builtInParams", name: "endpoint" },
+      Region: { type: "builtInParams", name: "region" },
+      UseDualStack: { type: "builtInParams", name: "useDualstackEndpoint" },
+    };
+  }
+
+  /**
+   * @public
+   */
+  constructor(readonly input: DescribeIpamByoasnCommandInput) {
+    super();
+  }
+
+  /**
+   * @internal
+   */
+  resolveMiddleware(
+    clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>,
+    configuration: EC2ClientResolvedConfig,
+    options?: __HttpHandlerOptions
+  ): Handler<DescribeIpamByoasnCommandInput, DescribeIpamByoasnCommandOutput> {
+    this.middlewareStack.use(getSerdePlugin(configuration, this.serialize, this.deserialize));
+    this.middlewareStack.use(
+      getEndpointPlugin(configuration, DescribeIpamByoasnCommand.getEndpointParameterInstructions())
+    );
+
+    const stack = clientStack.concat(this.middlewareStack);
+
+    const { logger } = configuration;
+    const clientName = "EC2Client";
+    const commandName = "DescribeIpamByoasnCommand";
+    const handlerExecutionContext: HandlerExecutionContext = {
+      logger,
+      clientName,
+      commandName,
+      inputFilterSensitiveLog: (_: any) => _,
+      outputFilterSensitiveLog: (_: any) => _,
+      [SMITHY_CONTEXT_KEY]: {
+        service: "AmazonEC2",
+        operation: "DescribeIpamByoasn",
+      },
+    };
+    const { requestHandler } = configuration;
+    return stack.resolve(
+      (request: FinalizeHandlerArguments<any>) =>
+        requestHandler.handle(request.request as __HttpRequest, options || {}),
+      handlerExecutionContext
+    );
+  }
+
+  /**
+   * @internal
+   */
+  private serialize(input: DescribeIpamByoasnCommandInput, context: __SerdeContext): Promise<__HttpRequest> {
+    return se_DescribeIpamByoasnCommand(input, context);
+  }
+
+  /**
+   * @internal
+   */
+  private deserialize(output: __HttpResponse, context: __SerdeContext): Promise<DescribeIpamByoasnCommandOutput> {
+    return de_DescribeIpamByoasnCommand(output, context);
+  }
+}
diff --git a/clients/client-ec2/src/commands/DescribeIpamPoolsCommand.ts b/clients/client-ec2/src/commands/DescribeIpamPoolsCommand.ts
index 7fdcf0fa28047..7bdc35dd9cdf6 100644
--- a/clients/client-ec2/src/commands/DescribeIpamPoolsCommand.ts
+++ b/clients/client-ec2/src/commands/DescribeIpamPoolsCommand.ts
@@ -99,6 +99,12 @@ export interface DescribeIpamPoolsCommandOutput extends DescribeIpamPoolsResult,
  * //       ],
  * //       AwsService: "ec2",
  * //       PublicIpSource: "amazon" || "byoip",
+ * //       SourceResource: { // IpamPoolSourceResource
+ * //         ResourceId: "STRING_VALUE",
+ * //         ResourceType: "vpc",
+ * //         ResourceRegion: "STRING_VALUE",
+ * //         ResourceOwner: "STRING_VALUE",
+ * //       },
  * //     },
  * //   ],
  * // };
diff --git a/clients/client-ec2/src/commands/DescribeIpamsCommand.ts b/clients/client-ec2/src/commands/DescribeIpamsCommand.ts
index 20a289cb933f7..fca9426309206 100644
--- a/clients/client-ec2/src/commands/DescribeIpamsCommand.ts
+++ b/clients/client-ec2/src/commands/DescribeIpamsCommand.ts
@@ -91,6 +91,8 @@ export interface DescribeIpamsCommandOutput extends DescribeIpamsResult, __Metad
  * //       DefaultResourceDiscoveryId: "STRING_VALUE",
  * //       DefaultResourceDiscoveryAssociationId: "STRING_VALUE",
  * //       ResourceDiscoveryAssociationCount: Number("int"),
+ * //       StateMessage: "STRING_VALUE",
+ * //       Tier: "free" || "advanced",
  * //     },
  * //   ],
  * // };
diff --git a/clients/client-ec2/src/commands/DescribeLaunchTemplateVersionsCommand.ts b/clients/client-ec2/src/commands/DescribeLaunchTemplateVersionsCommand.ts
index 7230ca102ac1b..01207ea342d3e 100644
--- a/clients/client-ec2/src/commands/DescribeLaunchTemplateVersionsCommand.ts
+++ b/clients/client-ec2/src/commands/DescribeLaunchTemplateVersionsCommand.ts
@@ -161,6 +161,11 @@ export interface DescribeLaunchTemplateVersionsCommandOutput
  * //                 EnaSrdUdpEnabled: true || false,
  * //               },
  * //             },
+ * //             ConnectionTrackingSpecification: { // ConnectionTrackingSpecification
+ * //               TcpEstablishedTimeout: Number("int"),
+ * //               UdpTimeout: Number("int"),
+ * //               UdpStreamTimeout: Number("int"),
+ * //             },
  * //           },
  * //         ],
  * //         ImageId: "STRING_VALUE",
diff --git a/clients/client-ec2/src/commands/DescribeNetworkInterfacesCommand.ts b/clients/client-ec2/src/commands/DescribeNetworkInterfacesCommand.ts
index fdd3f563d5241..c4c77982fa7d6 100644
--- a/clients/client-ec2/src/commands/DescribeNetworkInterfacesCommand.ts
+++ b/clients/client-ec2/src/commands/DescribeNetworkInterfacesCommand.ts
@@ -95,6 +95,11 @@ export interface DescribeNetworkInterfacesCommandOutput extends DescribeNetworkI
  * //         },
  * //       },
  * //       AvailabilityZone: "STRING_VALUE",
+ * //       ConnectionTrackingConfiguration: { // ConnectionTrackingConfiguration
+ * //         TcpEstablishedTimeout: Number("int"),
+ * //         UdpStreamTimeout: Number("int"),
+ * //         UdpTimeout: Number("int"),
+ * //       },
  * //       Description: "STRING_VALUE",
  * //       Groups: [ // GroupIdentifierList
  * //         { // GroupIdentifier
diff --git a/clients/client-ec2/src/commands/DescribeSpotFleetRequestsCommand.ts b/clients/client-ec2/src/commands/DescribeSpotFleetRequestsCommand.ts
index ea18e84dd6754..2e565c5bc1ba2 100644
--- a/clients/client-ec2/src/commands/DescribeSpotFleetRequestsCommand.ts
+++ b/clients/client-ec2/src/commands/DescribeSpotFleetRequestsCommand.ts
@@ -167,6 +167,11 @@ export interface DescribeSpotFleetRequestsCommandOutput extends DescribeSpotFlee
  * //                     EnaSrdUdpEnabled: true || false,
  * //                   },
  * //                 },
+ * //                 ConnectionTrackingSpecification: { // ConnectionTrackingSpecificationRequest
+ * //                   TcpEstablishedTimeout: Number("int"),
+ * //                   UdpStreamTimeout: Number("int"),
+ * //                   UdpTimeout: Number("int"),
+ * //                 },
  * //               },
  * //             ],
  * //             Placement: { // SpotPlacement
diff --git a/clients/client-ec2/src/commands/DescribeSpotInstanceRequestsCommand.ts b/clients/client-ec2/src/commands/DescribeSpotInstanceRequestsCommand.ts
index 7296317c26ae1..76b26d4052c6f 100644
--- a/clients/client-ec2/src/commands/DescribeSpotInstanceRequestsCommand.ts
+++ b/clients/client-ec2/src/commands/DescribeSpotInstanceRequestsCommand.ts
@@ -180,6 +180,11 @@ export interface DescribeSpotInstanceRequestsCommandOutput
  * //                 EnaSrdUdpEnabled: true || false,
  * //               },
  * //             },
+ * //             ConnectionTrackingSpecification: { // ConnectionTrackingSpecificationRequest
+ * //               TcpEstablishedTimeout: Number("int"),
+ * //               UdpStreamTimeout: Number("int"),
+ * //               UdpTimeout: Number("int"),
+ * //             },
  * //           },
  * //         ],
  * //         Placement: { // SpotPlacement
diff --git a/clients/client-ec2/src/commands/DescribeTagsCommand.ts b/clients/client-ec2/src/commands/DescribeTagsCommand.ts
index 84364763eb2ba..527a184d185fd 100644
--- a/clients/client-ec2/src/commands/DescribeTagsCommand.ts
+++ b/clients/client-ec2/src/commands/DescribeTagsCommand.ts
@@ -15,7 +15,7 @@ import {
 } from "@smithy/types";
 
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
-import { DescribeTagsRequest, DescribeTagsResult } from "../models/models_4";
+import { DescribeTagsRequest, DescribeTagsResult } from "../models/models_5";
 import { de_DescribeTagsCommand, se_DescribeTagsCommand } from "../protocols/Aws_ec2";
 
 /**
diff --git a/clients/client-ec2/src/commands/DescribeTrafficMirrorFiltersCommand.ts b/clients/client-ec2/src/commands/DescribeTrafficMirrorFiltersCommand.ts
index ed894d70eca25..89c80d1af8297 100644
--- a/clients/client-ec2/src/commands/DescribeTrafficMirrorFiltersCommand.ts
+++ b/clients/client-ec2/src/commands/DescribeTrafficMirrorFiltersCommand.ts
@@ -15,7 +15,7 @@ import {
 } from "@smithy/types";
 
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
-import { DescribeTrafficMirrorFiltersRequest, DescribeTrafficMirrorFiltersResult } from "../models/models_4";
+import { DescribeTrafficMirrorFiltersRequest, DescribeTrafficMirrorFiltersResult } from "../models/models_5";
 import { de_DescribeTrafficMirrorFiltersCommand, se_DescribeTrafficMirrorFiltersCommand } from "../protocols/Aws_ec2";
 
 /**
diff --git a/clients/client-ec2/src/commands/DescribeTrafficMirrorSessionsCommand.ts b/clients/client-ec2/src/commands/DescribeTrafficMirrorSessionsCommand.ts
index 4218c2de866c0..a2bf2fd2ba717 100644
--- a/clients/client-ec2/src/commands/DescribeTrafficMirrorSessionsCommand.ts
+++ b/clients/client-ec2/src/commands/DescribeTrafficMirrorSessionsCommand.ts
@@ -15,7 +15,7 @@ import {
 } from "@smithy/types";
 
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
-import { DescribeTrafficMirrorSessionsRequest, DescribeTrafficMirrorSessionsResult } from "../models/models_4";
+import { DescribeTrafficMirrorSessionsRequest, DescribeTrafficMirrorSessionsResult } from "../models/models_5";
 import { de_DescribeTrafficMirrorSessionsCommand, se_DescribeTrafficMirrorSessionsCommand } from "../protocols/Aws_ec2";
 
 /**
diff --git a/clients/client-ec2/src/commands/DescribeTrafficMirrorTargetsCommand.ts b/clients/client-ec2/src/commands/DescribeTrafficMirrorTargetsCommand.ts
index 1fe3853eea3d1..f8a4b68152699 100644
--- a/clients/client-ec2/src/commands/DescribeTrafficMirrorTargetsCommand.ts
+++ b/clients/client-ec2/src/commands/DescribeTrafficMirrorTargetsCommand.ts
@@ -15,7 +15,7 @@ import {
 } from "@smithy/types";
 
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
-import { DescribeTrafficMirrorTargetsRequest, DescribeTrafficMirrorTargetsResult } from "../models/models_4";
+import { DescribeTrafficMirrorTargetsRequest, DescribeTrafficMirrorTargetsResult } from "../models/models_5";
 import { de_DescribeTrafficMirrorTargetsCommand, se_DescribeTrafficMirrorTargetsCommand } from "../protocols/Aws_ec2";
 
 /**
diff --git a/clients/client-ec2/src/commands/DescribeTransitGatewayAttachmentsCommand.ts b/clients/client-ec2/src/commands/DescribeTransitGatewayAttachmentsCommand.ts
index 6cba32a8741ae..6adfd5b76b05a 100644
--- a/clients/client-ec2/src/commands/DescribeTransitGatewayAttachmentsCommand.ts
+++ b/clients/client-ec2/src/commands/DescribeTransitGatewayAttachmentsCommand.ts
@@ -15,7 +15,7 @@ import {
 } from "@smithy/types";
 
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
-import { DescribeTransitGatewayAttachmentsRequest, DescribeTransitGatewayAttachmentsResult } from "../models/models_4";
+import { DescribeTransitGatewayAttachmentsRequest, DescribeTransitGatewayAttachmentsResult } from "../models/models_5";
 import {
   de_DescribeTransitGatewayAttachmentsCommand,
   se_DescribeTransitGatewayAttachmentsCommand,
diff --git a/clients/client-ec2/src/commands/DescribeTransitGatewayConnectPeersCommand.ts b/clients/client-ec2/src/commands/DescribeTransitGatewayConnectPeersCommand.ts
index 119b36447f4e6..9346be32e05c5 100644
--- a/clients/client-ec2/src/commands/DescribeTransitGatewayConnectPeersCommand.ts
+++ b/clients/client-ec2/src/commands/DescribeTransitGatewayConnectPeersCommand.ts
@@ -18,7 +18,7 @@ import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "
 import {
   DescribeTransitGatewayConnectPeersRequest,
   DescribeTransitGatewayConnectPeersResult,
-} from "../models/models_4";
+} from "../models/models_5";
 import {
   de_DescribeTransitGatewayConnectPeersCommand,
   se_DescribeTransitGatewayConnectPeersCommand,
diff --git a/clients/client-ec2/src/commands/DescribeTransitGatewayConnectsCommand.ts b/clients/client-ec2/src/commands/DescribeTransitGatewayConnectsCommand.ts
index 5e248f55ec1c9..7786b1c3fb0a6 100644
--- a/clients/client-ec2/src/commands/DescribeTransitGatewayConnectsCommand.ts
+++ b/clients/client-ec2/src/commands/DescribeTransitGatewayConnectsCommand.ts
@@ -15,7 +15,7 @@ import {
 } from "@smithy/types";
 
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
-import { DescribeTransitGatewayConnectsRequest, DescribeTransitGatewayConnectsResult } from "../models/models_4";
+import { DescribeTransitGatewayConnectsRequest, DescribeTransitGatewayConnectsResult } from "../models/models_5";
 import {
   de_DescribeTransitGatewayConnectsCommand,
   se_DescribeTransitGatewayConnectsCommand,
diff --git a/clients/client-ec2/src/commands/DescribeTransitGatewayMulticastDomainsCommand.ts b/clients/client-ec2/src/commands/DescribeTransitGatewayMulticastDomainsCommand.ts
index 805ffa3564cf3..e39e6380a86ce 100644
--- a/clients/client-ec2/src/commands/DescribeTransitGatewayMulticastDomainsCommand.ts
+++ b/clients/client-ec2/src/commands/DescribeTransitGatewayMulticastDomainsCommand.ts
@@ -15,8 +15,10 @@ import {
 } from "@smithy/types";
 
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
-import { DescribeTransitGatewayMulticastDomainsRequest } from "../models/models_4";
-import { DescribeTransitGatewayMulticastDomainsResult } from "../models/models_5";
+import {
+  DescribeTransitGatewayMulticastDomainsRequest,
+  DescribeTransitGatewayMulticastDomainsResult,
+} from "../models/models_5";
 import {
   de_DescribeTransitGatewayMulticastDomainsCommand,
   se_DescribeTransitGatewayMulticastDomainsCommand,
diff --git a/clients/client-ec2/src/commands/DescribeTrunkInterfaceAssociationsCommand.ts b/clients/client-ec2/src/commands/DescribeTrunkInterfaceAssociationsCommand.ts
index 31671812c1fac..b4b0ed48dbf5c 100644
--- a/clients/client-ec2/src/commands/DescribeTrunkInterfaceAssociationsCommand.ts
+++ b/clients/client-ec2/src/commands/DescribeTrunkInterfaceAssociationsCommand.ts
@@ -45,11 +45,7 @@ export interface DescribeTrunkInterfaceAssociationsCommandOutput
 
 /**
  * @public
- * <note>
- *             <p>This API action is currently in <b>limited preview only</b>.
- *                 If you are interested in using this feature, contact your account manager.</p>
- *          </note>
- *          <p>Describes one or more network interface trunk associations.</p>
+ * <p>Describes one or more network interface trunk associations.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
diff --git a/clients/client-ec2/src/commands/DisassociateIpamByoasnCommand.ts b/clients/client-ec2/src/commands/DisassociateIpamByoasnCommand.ts
new file mode 100644
index 0000000000000..c0bb8a06d7f44
--- /dev/null
+++ b/clients/client-ec2/src/commands/DisassociateIpamByoasnCommand.ts
@@ -0,0 +1,147 @@
+// smithy-typescript generated code
+import { EndpointParameterInstructions, getEndpointPlugin } from "@smithy/middleware-endpoint";
+import { getSerdePlugin } from "@smithy/middleware-serde";
+import { HttpRequest as __HttpRequest, HttpResponse as __HttpResponse } from "@smithy/protocol-http";
+import { Command as $Command } from "@smithy/smithy-client";
+import {
+  FinalizeHandlerArguments,
+  Handler,
+  HandlerExecutionContext,
+  HttpHandlerOptions as __HttpHandlerOptions,
+  MetadataBearer as __MetadataBearer,
+  MiddlewareStack,
+  SerdeContext as __SerdeContext,
+  SMITHY_CONTEXT_KEY,
+} from "@smithy/types";
+
+import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
+import { DisassociateIpamByoasnRequest, DisassociateIpamByoasnResult } from "../models/models_5";
+import { de_DisassociateIpamByoasnCommand, se_DisassociateIpamByoasnCommand } from "../protocols/Aws_ec2";
+
+/**
+ * @public
+ */
+export { __MetadataBearer, $Command };
+/**
+ * @public
+ *
+ * The input for {@link DisassociateIpamByoasnCommand}.
+ */
+export interface DisassociateIpamByoasnCommandInput extends DisassociateIpamByoasnRequest {}
+/**
+ * @public
+ *
+ * The output of {@link DisassociateIpamByoasnCommand}.
+ */
+export interface DisassociateIpamByoasnCommandOutput extends DisassociateIpamByoasnResult, __MetadataBearer {}
+
+/**
+ * @public
+ * <p>Remove the association between your Autonomous System Number (ASN) and your BYOIP CIDR. You may want to use this action to disassociate an ASN from a CIDR or if you want to swap ASNs.
+ *             For more information, see <a href="https://docs.aws.amazon.com/vpc/latest/ipam/tutorials-byoasn.html">Tutorial: Bring your ASN to IPAM</a> in the <i>Amazon VPC IPAM guide</i>.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { EC2Client, DisassociateIpamByoasnCommand } from "@aws-sdk/client-ec2"; // ES Modules import
+ * // const { EC2Client, DisassociateIpamByoasnCommand } = require("@aws-sdk/client-ec2"); // CommonJS import
+ * const client = new EC2Client(config);
+ * const input = { // DisassociateIpamByoasnRequest
+ *   DryRun: true || false,
+ *   Asn: "STRING_VALUE", // required
+ *   Cidr: "STRING_VALUE", // required
+ * };
+ * const command = new DisassociateIpamByoasnCommand(input);
+ * const response = await client.send(command);
+ * // { // DisassociateIpamByoasnResult
+ * //   AsnAssociation: { // AsnAssociation
+ * //     Asn: "STRING_VALUE",
+ * //     Cidr: "STRING_VALUE",
+ * //     StatusMessage: "STRING_VALUE",
+ * //     State: "disassociated" || "failed-disassociation" || "failed-association" || "pending-disassociation" || "pending-association" || "associated",
+ * //   },
+ * // };
+ *
+ * ```
+ *
+ * @param DisassociateIpamByoasnCommandInput - {@link DisassociateIpamByoasnCommandInput}
+ * @returns {@link DisassociateIpamByoasnCommandOutput}
+ * @see {@link DisassociateIpamByoasnCommandInput} for command's `input` shape.
+ * @see {@link DisassociateIpamByoasnCommandOutput} for command's `response` shape.
+ * @see {@link EC2ClientResolvedConfig | config} for EC2Client's `config` shape.
+ *
+ * @throws {@link EC2ServiceException}
+ * <p>Base exception class for all service exceptions from EC2 service.</p>
+ *
+ */
+export class DisassociateIpamByoasnCommand extends $Command<
+  DisassociateIpamByoasnCommandInput,
+  DisassociateIpamByoasnCommandOutput,
+  EC2ClientResolvedConfig
+> {
+  public static getEndpointParameterInstructions(): EndpointParameterInstructions {
+    return {
+      UseFIPS: { type: "builtInParams", name: "useFipsEndpoint" },
+      Endpoint: { type: "builtInParams", name: "endpoint" },
+      Region: { type: "builtInParams", name: "region" },
+      UseDualStack: { type: "builtInParams", name: "useDualstackEndpoint" },
+    };
+  }
+
+  /**
+   * @public
+   */
+  constructor(readonly input: DisassociateIpamByoasnCommandInput) {
+    super();
+  }
+
+  /**
+   * @internal
+   */
+  resolveMiddleware(
+    clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>,
+    configuration: EC2ClientResolvedConfig,
+    options?: __HttpHandlerOptions
+  ): Handler<DisassociateIpamByoasnCommandInput, DisassociateIpamByoasnCommandOutput> {
+    this.middlewareStack.use(getSerdePlugin(configuration, this.serialize, this.deserialize));
+    this.middlewareStack.use(
+      getEndpointPlugin(configuration, DisassociateIpamByoasnCommand.getEndpointParameterInstructions())
+    );
+
+    const stack = clientStack.concat(this.middlewareStack);
+
+    const { logger } = configuration;
+    const clientName = "EC2Client";
+    const commandName = "DisassociateIpamByoasnCommand";
+    const handlerExecutionContext: HandlerExecutionContext = {
+      logger,
+      clientName,
+      commandName,
+      inputFilterSensitiveLog: (_: any) => _,
+      outputFilterSensitiveLog: (_: any) => _,
+      [SMITHY_CONTEXT_KEY]: {
+        service: "AmazonEC2",
+        operation: "DisassociateIpamByoasn",
+      },
+    };
+    const { requestHandler } = configuration;
+    return stack.resolve(
+      (request: FinalizeHandlerArguments<any>) =>
+        requestHandler.handle(request.request as __HttpRequest, options || {}),
+      handlerExecutionContext
+    );
+  }
+
+  /**
+   * @internal
+   */
+  private serialize(input: DisassociateIpamByoasnCommandInput, context: __SerdeContext): Promise<__HttpRequest> {
+    return se_DisassociateIpamByoasnCommand(input, context);
+  }
+
+  /**
+   * @internal
+   */
+  private deserialize(output: __HttpResponse, context: __SerdeContext): Promise<DisassociateIpamByoasnCommandOutput> {
+    return de_DisassociateIpamByoasnCommand(output, context);
+  }
+}
diff --git a/clients/client-ec2/src/commands/DisassociateTrunkInterfaceCommand.ts b/clients/client-ec2/src/commands/DisassociateTrunkInterfaceCommand.ts
index 28848d4387e41..a57577b397a7b 100644
--- a/clients/client-ec2/src/commands/DisassociateTrunkInterfaceCommand.ts
+++ b/clients/client-ec2/src/commands/DisassociateTrunkInterfaceCommand.ts
@@ -37,11 +37,7 @@ export interface DisassociateTrunkInterfaceCommandOutput extends DisassociateTru
 
 /**
  * @public
- * <note>
- *             <p>This API action is currently in <b>limited preview only</b>.
- *                 If you are interested in using this feature, contact your account manager.</p>
- *          </note>
- *          <p>Removes an association between a branch network interface with a trunk network interface.</p>
+ * <p>Removes an association between a branch network interface with a trunk network interface.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
diff --git a/clients/client-ec2/src/commands/GetIpamDiscoveredPublicAddressesCommand.ts b/clients/client-ec2/src/commands/GetIpamDiscoveredPublicAddressesCommand.ts
new file mode 100644
index 0000000000000..dc465da57d57b
--- /dev/null
+++ b/clients/client-ec2/src/commands/GetIpamDiscoveredPublicAddressesCommand.ts
@@ -0,0 +1,198 @@
+// smithy-typescript generated code
+import { EndpointParameterInstructions, getEndpointPlugin } from "@smithy/middleware-endpoint";
+import { getSerdePlugin } from "@smithy/middleware-serde";
+import { HttpRequest as __HttpRequest, HttpResponse as __HttpResponse } from "@smithy/protocol-http";
+import { Command as $Command } from "@smithy/smithy-client";
+import {
+  FinalizeHandlerArguments,
+  Handler,
+  HandlerExecutionContext,
+  HttpHandlerOptions as __HttpHandlerOptions,
+  MetadataBearer as __MetadataBearer,
+  MiddlewareStack,
+  SerdeContext as __SerdeContext,
+  SMITHY_CONTEXT_KEY,
+} from "@smithy/types";
+
+import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
+import { GetIpamDiscoveredPublicAddressesRequest, GetIpamDiscoveredPublicAddressesResult } from "../models/models_5";
+import {
+  de_GetIpamDiscoveredPublicAddressesCommand,
+  se_GetIpamDiscoveredPublicAddressesCommand,
+} from "../protocols/Aws_ec2";
+
+/**
+ * @public
+ */
+export { __MetadataBearer, $Command };
+/**
+ * @public
+ *
+ * The input for {@link GetIpamDiscoveredPublicAddressesCommand}.
+ */
+export interface GetIpamDiscoveredPublicAddressesCommandInput extends GetIpamDiscoveredPublicAddressesRequest {}
+/**
+ * @public
+ *
+ * The output of {@link GetIpamDiscoveredPublicAddressesCommand}.
+ */
+export interface GetIpamDiscoveredPublicAddressesCommandOutput
+  extends GetIpamDiscoveredPublicAddressesResult,
+    __MetadataBearer {}
+
+/**
+ * @public
+ * <p>Gets the public IP addresses that have been discovered by IPAM.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { EC2Client, GetIpamDiscoveredPublicAddressesCommand } from "@aws-sdk/client-ec2"; // ES Modules import
+ * // const { EC2Client, GetIpamDiscoveredPublicAddressesCommand } = require("@aws-sdk/client-ec2"); // CommonJS import
+ * const client = new EC2Client(config);
+ * const input = { // GetIpamDiscoveredPublicAddressesRequest
+ *   DryRun: true || false,
+ *   IpamResourceDiscoveryId: "STRING_VALUE", // required
+ *   AddressRegion: "STRING_VALUE", // required
+ *   Filters: [ // FilterList
+ *     { // Filter
+ *       Name: "STRING_VALUE",
+ *       Values: [ // ValueStringList
+ *         "STRING_VALUE",
+ *       ],
+ *     },
+ *   ],
+ *   NextToken: "STRING_VALUE",
+ *   MaxResults: Number("int"),
+ * };
+ * const command = new GetIpamDiscoveredPublicAddressesCommand(input);
+ * const response = await client.send(command);
+ * // { // GetIpamDiscoveredPublicAddressesResult
+ * //   IpamDiscoveredPublicAddresses: [ // IpamDiscoveredPublicAddressSet
+ * //     { // IpamDiscoveredPublicAddress
+ * //       IpamResourceDiscoveryId: "STRING_VALUE",
+ * //       AddressRegion: "STRING_VALUE",
+ * //       Address: "STRING_VALUE",
+ * //       AddressOwnerId: "STRING_VALUE",
+ * //       AddressAllocationId: "STRING_VALUE",
+ * //       AssociationStatus: "associated" || "disassociated",
+ * //       AddressType: "service-managed-ip" || "service-managed-byoip" || "amazon-owned-eip" || "byoip" || "ec2-public-ip",
+ * //       Service: "nat-gateway" || "database-migration-service" || "redshift" || "elastic-container-service" || "relational-database-service" || "site-to-site-vpn" || "load-balancer" || "global-accelerator" || "other",
+ * //       ServiceResource: "STRING_VALUE",
+ * //       VpcId: "STRING_VALUE",
+ * //       SubnetId: "STRING_VALUE",
+ * //       PublicIpv4PoolId: "STRING_VALUE",
+ * //       NetworkInterfaceId: "STRING_VALUE",
+ * //       NetworkInterfaceDescription: "STRING_VALUE",
+ * //       InstanceId: "STRING_VALUE",
+ * //       Tags: { // IpamPublicAddressTags
+ * //         EipTags: [ // IpamPublicAddressTagList
+ * //           { // IpamPublicAddressTag
+ * //             Key: "STRING_VALUE",
+ * //             Value: "STRING_VALUE",
+ * //           },
+ * //         ],
+ * //       },
+ * //       NetworkBorderGroup: "STRING_VALUE",
+ * //       SecurityGroups: [ // IpamPublicAddressSecurityGroupList
+ * //         { // IpamPublicAddressSecurityGroup
+ * //           GroupName: "STRING_VALUE",
+ * //           GroupId: "STRING_VALUE",
+ * //         },
+ * //       ],
+ * //       SampleTime: new Date("TIMESTAMP"),
+ * //     },
+ * //   ],
+ * //   OldestSampleTime: new Date("TIMESTAMP"),
+ * //   NextToken: "STRING_VALUE",
+ * // };
+ *
+ * ```
+ *
+ * @param GetIpamDiscoveredPublicAddressesCommandInput - {@link GetIpamDiscoveredPublicAddressesCommandInput}
+ * @returns {@link GetIpamDiscoveredPublicAddressesCommandOutput}
+ * @see {@link GetIpamDiscoveredPublicAddressesCommandInput} for command's `input` shape.
+ * @see {@link GetIpamDiscoveredPublicAddressesCommandOutput} for command's `response` shape.
+ * @see {@link EC2ClientResolvedConfig | config} for EC2Client's `config` shape.
+ *
+ * @throws {@link EC2ServiceException}
+ * <p>Base exception class for all service exceptions from EC2 service.</p>
+ *
+ */
+export class GetIpamDiscoveredPublicAddressesCommand extends $Command<
+  GetIpamDiscoveredPublicAddressesCommandInput,
+  GetIpamDiscoveredPublicAddressesCommandOutput,
+  EC2ClientResolvedConfig
+> {
+  public static getEndpointParameterInstructions(): EndpointParameterInstructions {
+    return {
+      UseFIPS: { type: "builtInParams", name: "useFipsEndpoint" },
+      Endpoint: { type: "builtInParams", name: "endpoint" },
+      Region: { type: "builtInParams", name: "region" },
+      UseDualStack: { type: "builtInParams", name: "useDualstackEndpoint" },
+    };
+  }
+
+  /**
+   * @public
+   */
+  constructor(readonly input: GetIpamDiscoveredPublicAddressesCommandInput) {
+    super();
+  }
+
+  /**
+   * @internal
+   */
+  resolveMiddleware(
+    clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>,
+    configuration: EC2ClientResolvedConfig,
+    options?: __HttpHandlerOptions
+  ): Handler<GetIpamDiscoveredPublicAddressesCommandInput, GetIpamDiscoveredPublicAddressesCommandOutput> {
+    this.middlewareStack.use(getSerdePlugin(configuration, this.serialize, this.deserialize));
+    this.middlewareStack.use(
+      getEndpointPlugin(configuration, GetIpamDiscoveredPublicAddressesCommand.getEndpointParameterInstructions())
+    );
+
+    const stack = clientStack.concat(this.middlewareStack);
+
+    const { logger } = configuration;
+    const clientName = "EC2Client";
+    const commandName = "GetIpamDiscoveredPublicAddressesCommand";
+    const handlerExecutionContext: HandlerExecutionContext = {
+      logger,
+      clientName,
+      commandName,
+      inputFilterSensitiveLog: (_: any) => _,
+      outputFilterSensitiveLog: (_: any) => _,
+      [SMITHY_CONTEXT_KEY]: {
+        service: "AmazonEC2",
+        operation: "GetIpamDiscoveredPublicAddresses",
+      },
+    };
+    const { requestHandler } = configuration;
+    return stack.resolve(
+      (request: FinalizeHandlerArguments<any>) =>
+        requestHandler.handle(request.request as __HttpRequest, options || {}),
+      handlerExecutionContext
+    );
+  }
+
+  /**
+   * @internal
+   */
+  private serialize(
+    input: GetIpamDiscoveredPublicAddressesCommandInput,
+    context: __SerdeContext
+  ): Promise<__HttpRequest> {
+    return se_GetIpamDiscoveredPublicAddressesCommand(input, context);
+  }
+
+  /**
+   * @internal
+   */
+  private deserialize(
+    output: __HttpResponse,
+    context: __SerdeContext
+  ): Promise<GetIpamDiscoveredPublicAddressesCommandOutput> {
+    return de_GetIpamDiscoveredPublicAddressesCommand(output, context);
+  }
+}
diff --git a/clients/client-ec2/src/commands/GetIpamDiscoveredResourceCidrsCommand.ts b/clients/client-ec2/src/commands/GetIpamDiscoveredResourceCidrsCommand.ts
index 2a45aed577c45..710225322fb7f 100644
--- a/clients/client-ec2/src/commands/GetIpamDiscoveredResourceCidrsCommand.ts
+++ b/clients/client-ec2/src/commands/GetIpamDiscoveredResourceCidrsCommand.ts
@@ -74,7 +74,7 @@ export interface GetIpamDiscoveredResourceCidrsCommandOutput
  * //       ResourceId: "STRING_VALUE",
  * //       ResourceOwnerId: "STRING_VALUE",
  * //       ResourceCidr: "STRING_VALUE",
- * //       ResourceType: "vpc" || "subnet" || "eip" || "public-ipv4-pool" || "ipv6-pool",
+ * //       ResourceType: "vpc" || "subnet" || "eip" || "public-ipv4-pool" || "ipv6-pool" || "eni",
  * //       ResourceTags: [ // IpamResourceTagList
  * //         { // IpamResourceTag
  * //           Key: "STRING_VALUE",
diff --git a/clients/client-ec2/src/commands/GetIpamPoolAllocationsCommand.ts b/clients/client-ec2/src/commands/GetIpamPoolAllocationsCommand.ts
index 13e64bb22676e..b7fb6bd93e3c1 100644
--- a/clients/client-ec2/src/commands/GetIpamPoolAllocationsCommand.ts
+++ b/clients/client-ec2/src/commands/GetIpamPoolAllocationsCommand.ts
@@ -71,7 +71,7 @@ export interface GetIpamPoolAllocationsCommandOutput extends GetIpamPoolAllocati
  * //       IpamPoolAllocationId: "STRING_VALUE",
  * //       Description: "STRING_VALUE",
  * //       ResourceId: "STRING_VALUE",
- * //       ResourceType: "ipam-pool" || "vpc" || "ec2-public-ipv4-pool" || "custom",
+ * //       ResourceType: "ipam-pool" || "vpc" || "ec2-public-ipv4-pool" || "custom" || "subnet",
  * //       ResourceRegion: "STRING_VALUE",
  * //       ResourceOwner: "STRING_VALUE",
  * //     },
diff --git a/clients/client-ec2/src/commands/GetIpamResourceCidrsCommand.ts b/clients/client-ec2/src/commands/GetIpamResourceCidrsCommand.ts
index 8d11cf04c3599..41502030bdc51 100644
--- a/clients/client-ec2/src/commands/GetIpamResourceCidrsCommand.ts
+++ b/clients/client-ec2/src/commands/GetIpamResourceCidrsCommand.ts
@@ -15,7 +15,7 @@ import {
 } from "@smithy/types";
 
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
-import { GetIpamResourceCidrsRequest, GetIpamResourceCidrsResult } from "../models/models_5";
+import { GetIpamResourceCidrsRequest, GetIpamResourceCidrsResult } from "../models/models_6";
 import { de_GetIpamResourceCidrsCommand, se_GetIpamResourceCidrsCommand } from "../protocols/Aws_ec2";
 
 /**
@@ -59,7 +59,7 @@ export interface GetIpamResourceCidrsCommandOutput extends GetIpamResourceCidrsR
  *   IpamScopeId: "STRING_VALUE", // required
  *   IpamPoolId: "STRING_VALUE",
  *   ResourceId: "STRING_VALUE",
- *   ResourceType: "vpc" || "subnet" || "eip" || "public-ipv4-pool" || "ipv6-pool",
+ *   ResourceType: "vpc" || "subnet" || "eip" || "public-ipv4-pool" || "ipv6-pool" || "eni",
  *   ResourceTag: { // RequestIpamResourceTag
  *     Key: "STRING_VALUE",
  *     Value: "STRING_VALUE",
@@ -80,7 +80,7 @@ export interface GetIpamResourceCidrsCommandOutput extends GetIpamResourceCidrsR
  * //       ResourceId: "STRING_VALUE",
  * //       ResourceName: "STRING_VALUE",
  * //       ResourceCidr: "STRING_VALUE",
- * //       ResourceType: "vpc" || "subnet" || "eip" || "public-ipv4-pool" || "ipv6-pool",
+ * //       ResourceType: "vpc" || "subnet" || "eip" || "public-ipv4-pool" || "ipv6-pool" || "eni",
  * //       ResourceTags: [ // IpamResourceTagList
  * //         { // IpamResourceTag
  * //           Key: "STRING_VALUE",
diff --git a/clients/client-ec2/src/commands/GetLaunchTemplateDataCommand.ts b/clients/client-ec2/src/commands/GetLaunchTemplateDataCommand.ts
index 2476caec91ca8..9aaf310eef5df 100644
--- a/clients/client-ec2/src/commands/GetLaunchTemplateDataCommand.ts
+++ b/clients/client-ec2/src/commands/GetLaunchTemplateDataCommand.ts
@@ -19,7 +19,7 @@ import {
   GetLaunchTemplateDataRequest,
   GetLaunchTemplateDataResult,
   GetLaunchTemplateDataResultFilterSensitiveLog,
-} from "../models/models_5";
+} from "../models/models_6";
 import { de_GetLaunchTemplateDataCommand, se_GetLaunchTemplateDataCommand } from "../protocols/Aws_ec2";
 
 /**
@@ -134,6 +134,11 @@ export interface GetLaunchTemplateDataCommandOutput extends GetLaunchTemplateDat
  * //             EnaSrdUdpEnabled: true || false,
  * //           },
  * //         },
+ * //         ConnectionTrackingSpecification: { // ConnectionTrackingSpecification
+ * //           TcpEstablishedTimeout: Number("int"),
+ * //           UdpTimeout: Number("int"),
+ * //           UdpStreamTimeout: Number("int"),
+ * //         },
  * //       },
  * //     ],
  * //     ImageId: "STRING_VALUE",
diff --git a/clients/client-ec2/src/commands/GetManagedPrefixListAssociationsCommand.ts b/clients/client-ec2/src/commands/GetManagedPrefixListAssociationsCommand.ts
index a1354cd46457c..ed8d6a7b8da15 100644
--- a/clients/client-ec2/src/commands/GetManagedPrefixListAssociationsCommand.ts
+++ b/clients/client-ec2/src/commands/GetManagedPrefixListAssociationsCommand.ts
@@ -15,7 +15,7 @@ import {
 } from "@smithy/types";
 
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
-import { GetManagedPrefixListAssociationsRequest, GetManagedPrefixListAssociationsResult } from "../models/models_5";
+import { GetManagedPrefixListAssociationsRequest, GetManagedPrefixListAssociationsResult } from "../models/models_6";
 import {
   de_GetManagedPrefixListAssociationsCommand,
   se_GetManagedPrefixListAssociationsCommand,
diff --git a/clients/client-ec2/src/commands/GetManagedPrefixListEntriesCommand.ts b/clients/client-ec2/src/commands/GetManagedPrefixListEntriesCommand.ts
index 04347897f90d1..d36969e887e78 100644
--- a/clients/client-ec2/src/commands/GetManagedPrefixListEntriesCommand.ts
+++ b/clients/client-ec2/src/commands/GetManagedPrefixListEntriesCommand.ts
@@ -15,7 +15,7 @@ import {
 } from "@smithy/types";
 
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
-import { GetManagedPrefixListEntriesRequest, GetManagedPrefixListEntriesResult } from "../models/models_5";
+import { GetManagedPrefixListEntriesRequest, GetManagedPrefixListEntriesResult } from "../models/models_6";
 import { de_GetManagedPrefixListEntriesCommand, se_GetManagedPrefixListEntriesCommand } from "../protocols/Aws_ec2";
 
 /**
diff --git a/clients/client-ec2/src/commands/GetNetworkInsightsAccessScopeAnalysisFindingsCommand.ts b/clients/client-ec2/src/commands/GetNetworkInsightsAccessScopeAnalysisFindingsCommand.ts
index 93d2d697293d9..80bc2af64c662 100644
--- a/clients/client-ec2/src/commands/GetNetworkInsightsAccessScopeAnalysisFindingsCommand.ts
+++ b/clients/client-ec2/src/commands/GetNetworkInsightsAccessScopeAnalysisFindingsCommand.ts
@@ -18,7 +18,7 @@ import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "
 import {
   GetNetworkInsightsAccessScopeAnalysisFindingsRequest,
   GetNetworkInsightsAccessScopeAnalysisFindingsResult,
-} from "../models/models_5";
+} from "../models/models_6";
 import {
   de_GetNetworkInsightsAccessScopeAnalysisFindingsCommand,
   se_GetNetworkInsightsAccessScopeAnalysisFindingsCommand,
diff --git a/clients/client-ec2/src/commands/GetNetworkInsightsAccessScopeContentCommand.ts b/clients/client-ec2/src/commands/GetNetworkInsightsAccessScopeContentCommand.ts
index f5baffd78f4b4..287602aa3faef 100644
--- a/clients/client-ec2/src/commands/GetNetworkInsightsAccessScopeContentCommand.ts
+++ b/clients/client-ec2/src/commands/GetNetworkInsightsAccessScopeContentCommand.ts
@@ -18,7 +18,7 @@ import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "
 import {
   GetNetworkInsightsAccessScopeContentRequest,
   GetNetworkInsightsAccessScopeContentResult,
-} from "../models/models_5";
+} from "../models/models_6";
 import {
   de_GetNetworkInsightsAccessScopeContentCommand,
   se_GetNetworkInsightsAccessScopeContentCommand,
diff --git a/clients/client-ec2/src/commands/GetPasswordDataCommand.ts b/clients/client-ec2/src/commands/GetPasswordDataCommand.ts
index e2c4470f95ba2..f63a09a98af88 100644
--- a/clients/client-ec2/src/commands/GetPasswordDataCommand.ts
+++ b/clients/client-ec2/src/commands/GetPasswordDataCommand.ts
@@ -19,7 +19,7 @@ import {
   GetPasswordDataRequest,
   GetPasswordDataResult,
   GetPasswordDataResultFilterSensitiveLog,
-} from "../models/models_5";
+} from "../models/models_6";
 import { de_GetPasswordDataCommand, se_GetPasswordDataCommand } from "../protocols/Aws_ec2";
 
 /**
diff --git a/clients/client-ec2/src/commands/GetReservedInstancesExchangeQuoteCommand.ts b/clients/client-ec2/src/commands/GetReservedInstancesExchangeQuoteCommand.ts
index 03badde9ad33c..9e2931c935439 100644
--- a/clients/client-ec2/src/commands/GetReservedInstancesExchangeQuoteCommand.ts
+++ b/clients/client-ec2/src/commands/GetReservedInstancesExchangeQuoteCommand.ts
@@ -15,7 +15,7 @@ import {
 } from "@smithy/types";
 
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
-import { GetReservedInstancesExchangeQuoteRequest, GetReservedInstancesExchangeQuoteResult } from "../models/models_5";
+import { GetReservedInstancesExchangeQuoteRequest, GetReservedInstancesExchangeQuoteResult } from "../models/models_6";
 import {
   de_GetReservedInstancesExchangeQuoteCommand,
   se_GetReservedInstancesExchangeQuoteCommand,
diff --git a/clients/client-ec2/src/commands/GetSecurityGroupsForVpcCommand.ts b/clients/client-ec2/src/commands/GetSecurityGroupsForVpcCommand.ts
index 98a56ece29a3d..3968a065b21d5 100644
--- a/clients/client-ec2/src/commands/GetSecurityGroupsForVpcCommand.ts
+++ b/clients/client-ec2/src/commands/GetSecurityGroupsForVpcCommand.ts
@@ -15,7 +15,7 @@ import {
 } from "@smithy/types";
 
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
-import { GetSecurityGroupsForVpcRequest, GetSecurityGroupsForVpcResult } from "../models/models_5";
+import { GetSecurityGroupsForVpcRequest, GetSecurityGroupsForVpcResult } from "../models/models_6";
 import { de_GetSecurityGroupsForVpcCommand, se_GetSecurityGroupsForVpcCommand } from "../protocols/Aws_ec2";
 
 /**
diff --git a/clients/client-ec2/src/commands/GetSerialConsoleAccessStatusCommand.ts b/clients/client-ec2/src/commands/GetSerialConsoleAccessStatusCommand.ts
index 886af949a7840..03e93a5700b55 100644
--- a/clients/client-ec2/src/commands/GetSerialConsoleAccessStatusCommand.ts
+++ b/clients/client-ec2/src/commands/GetSerialConsoleAccessStatusCommand.ts
@@ -15,7 +15,7 @@ import {
 } from "@smithy/types";
 
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
-import { GetSerialConsoleAccessStatusRequest, GetSerialConsoleAccessStatusResult } from "../models/models_5";
+import { GetSerialConsoleAccessStatusRequest, GetSerialConsoleAccessStatusResult } from "../models/models_6";
 import { de_GetSerialConsoleAccessStatusCommand, se_GetSerialConsoleAccessStatusCommand } from "../protocols/Aws_ec2";
 
 /**
diff --git a/clients/client-ec2/src/commands/ModifyIpamCommand.ts b/clients/client-ec2/src/commands/ModifyIpamCommand.ts
index b6d4643cb401e..4cad5b2bf4428 100644
--- a/clients/client-ec2/src/commands/ModifyIpamCommand.ts
+++ b/clients/client-ec2/src/commands/ModifyIpamCommand.ts
@@ -59,6 +59,7 @@ export interface ModifyIpamCommandOutput extends ModifyIpamResult, __MetadataBea
  *       RegionName: "STRING_VALUE",
  *     },
  *   ],
+ *   Tier: "free" || "advanced",
  * };
  * const command = new ModifyIpamCommand(input);
  * const response = await client.send(command);
@@ -87,6 +88,8 @@ export interface ModifyIpamCommandOutput extends ModifyIpamResult, __MetadataBea
  * //     DefaultResourceDiscoveryId: "STRING_VALUE",
  * //     DefaultResourceDiscoveryAssociationId: "STRING_VALUE",
  * //     ResourceDiscoveryAssociationCount: Number("int"),
+ * //     StateMessage: "STRING_VALUE",
+ * //     Tier: "free" || "advanced",
  * //   },
  * // };
  *
diff --git a/clients/client-ec2/src/commands/ModifyIpamPoolCommand.ts b/clients/client-ec2/src/commands/ModifyIpamPoolCommand.ts
index d9c5099248a07..07eac6a754790 100644
--- a/clients/client-ec2/src/commands/ModifyIpamPoolCommand.ts
+++ b/clients/client-ec2/src/commands/ModifyIpamPoolCommand.ts
@@ -105,6 +105,12 @@ export interface ModifyIpamPoolCommandOutput extends ModifyIpamPoolResult, __Met
  * //     ],
  * //     AwsService: "ec2",
  * //     PublicIpSource: "amazon" || "byoip",
+ * //     SourceResource: { // IpamPoolSourceResource
+ * //       ResourceId: "STRING_VALUE",
+ * //       ResourceType: "vpc",
+ * //       ResourceRegion: "STRING_VALUE",
+ * //       ResourceOwner: "STRING_VALUE",
+ * //     },
  * //   },
  * // };
  *
diff --git a/clients/client-ec2/src/commands/ModifyIpamResourceCidrCommand.ts b/clients/client-ec2/src/commands/ModifyIpamResourceCidrCommand.ts
index 978f09ed7b0a0..b7111bb370577 100644
--- a/clients/client-ec2/src/commands/ModifyIpamResourceCidrCommand.ts
+++ b/clients/client-ec2/src/commands/ModifyIpamResourceCidrCommand.ts
@@ -66,7 +66,7 @@ export interface ModifyIpamResourceCidrCommandOutput extends ModifyIpamResourceC
  * //     ResourceId: "STRING_VALUE",
  * //     ResourceName: "STRING_VALUE",
  * //     ResourceCidr: "STRING_VALUE",
- * //     ResourceType: "vpc" || "subnet" || "eip" || "public-ipv4-pool" || "ipv6-pool",
+ * //     ResourceType: "vpc" || "subnet" || "eip" || "public-ipv4-pool" || "ipv6-pool" || "eni",
  * //     ResourceTags: [ // IpamResourceTagList
  * //       { // IpamResourceTag
  * //         Key: "STRING_VALUE",
diff --git a/clients/client-ec2/src/commands/ModifyNetworkInterfaceAttributeCommand.ts b/clients/client-ec2/src/commands/ModifyNetworkInterfaceAttributeCommand.ts
index 7add82a504462..84feb5a4c6c28 100644
--- a/clients/client-ec2/src/commands/ModifyNetworkInterfaceAttributeCommand.ts
+++ b/clients/client-ec2/src/commands/ModifyNetworkInterfaceAttributeCommand.ts
@@ -72,6 +72,11 @@ export interface ModifyNetworkInterfaceAttributeCommandOutput extends __Metadata
  *     },
  *   },
  *   EnablePrimaryIpv6: true || false,
+ *   ConnectionTrackingSpecification: { // ConnectionTrackingSpecificationRequest
+ *     TcpEstablishedTimeout: Number("int"),
+ *     UdpStreamTimeout: Number("int"),
+ *     UdpTimeout: Number("int"),
+ *   },
  * };
  * const command = new ModifyNetworkInterfaceAttributeCommand(input);
  * const response = await client.send(command);
diff --git a/clients/client-ec2/src/commands/MoveByoipCidrToIpamCommand.ts b/clients/client-ec2/src/commands/MoveByoipCidrToIpamCommand.ts
index ccc869066fe1b..8b105a67330a7 100644
--- a/clients/client-ec2/src/commands/MoveByoipCidrToIpamCommand.ts
+++ b/clients/client-ec2/src/commands/MoveByoipCidrToIpamCommand.ts
@@ -57,6 +57,14 @@ export interface MoveByoipCidrToIpamCommandOutput extends MoveByoipCidrToIpamRes
  * //   ByoipCidr: { // ByoipCidr
  * //     Cidr: "STRING_VALUE",
  * //     Description: "STRING_VALUE",
+ * //     AsnAssociations: [ // AsnAssociationSet
+ * //       { // AsnAssociation
+ * //         Asn: "STRING_VALUE",
+ * //         Cidr: "STRING_VALUE",
+ * //         StatusMessage: "STRING_VALUE",
+ * //         State: "disassociated" || "failed-disassociation" || "failed-association" || "pending-disassociation" || "pending-association" || "associated",
+ * //       },
+ * //     ],
  * //     StatusMessage: "STRING_VALUE",
  * //     State: "advertised" || "deprovisioned" || "failed-deprovision" || "failed-provision" || "pending-deprovision" || "pending-provision" || "provisioned" || "provisioned-not-publicly-advertisable",
  * //   },
diff --git a/clients/client-ec2/src/commands/ProvisionByoipCidrCommand.ts b/clients/client-ec2/src/commands/ProvisionByoipCidrCommand.ts
index 1b07995ca2a41..bba2ae9178563 100644
--- a/clients/client-ec2/src/commands/ProvisionByoipCidrCommand.ts
+++ b/clients/client-ec2/src/commands/ProvisionByoipCidrCommand.ts
@@ -83,6 +83,14 @@ export interface ProvisionByoipCidrCommandOutput extends ProvisionByoipCidrResul
  * //   ByoipCidr: { // ByoipCidr
  * //     Cidr: "STRING_VALUE",
  * //     Description: "STRING_VALUE",
+ * //     AsnAssociations: [ // AsnAssociationSet
+ * //       { // AsnAssociation
+ * //         Asn: "STRING_VALUE",
+ * //         Cidr: "STRING_VALUE",
+ * //         StatusMessage: "STRING_VALUE",
+ * //         State: "disassociated" || "failed-disassociation" || "failed-association" || "pending-disassociation" || "pending-association" || "associated",
+ * //       },
+ * //     ],
  * //     StatusMessage: "STRING_VALUE",
  * //     State: "advertised" || "deprovisioned" || "failed-deprovision" || "failed-provision" || "pending-deprovision" || "pending-provision" || "provisioned" || "provisioned-not-publicly-advertisable",
  * //   },
diff --git a/clients/client-ec2/src/commands/ProvisionIpamByoasnCommand.ts b/clients/client-ec2/src/commands/ProvisionIpamByoasnCommand.ts
new file mode 100644
index 0000000000000..0989fbc257c26
--- /dev/null
+++ b/clients/client-ec2/src/commands/ProvisionIpamByoasnCommand.ts
@@ -0,0 +1,150 @@
+// smithy-typescript generated code
+import { EndpointParameterInstructions, getEndpointPlugin } from "@smithy/middleware-endpoint";
+import { getSerdePlugin } from "@smithy/middleware-serde";
+import { HttpRequest as __HttpRequest, HttpResponse as __HttpResponse } from "@smithy/protocol-http";
+import { Command as $Command } from "@smithy/smithy-client";
+import {
+  FinalizeHandlerArguments,
+  Handler,
+  HandlerExecutionContext,
+  HttpHandlerOptions as __HttpHandlerOptions,
+  MetadataBearer as __MetadataBearer,
+  MiddlewareStack,
+  SerdeContext as __SerdeContext,
+  SMITHY_CONTEXT_KEY,
+} from "@smithy/types";
+
+import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
+import { ProvisionIpamByoasnRequest, ProvisionIpamByoasnResult } from "../models/models_6";
+import { de_ProvisionIpamByoasnCommand, se_ProvisionIpamByoasnCommand } from "../protocols/Aws_ec2";
+
+/**
+ * @public
+ */
+export { __MetadataBearer, $Command };
+/**
+ * @public
+ *
+ * The input for {@link ProvisionIpamByoasnCommand}.
+ */
+export interface ProvisionIpamByoasnCommandInput extends ProvisionIpamByoasnRequest {}
+/**
+ * @public
+ *
+ * The output of {@link ProvisionIpamByoasnCommand}.
+ */
+export interface ProvisionIpamByoasnCommandOutput extends ProvisionIpamByoasnResult, __MetadataBearer {}
+
+/**
+ * @public
+ * <p>Provisions your Autonomous System Number (ASN) for use in your Amazon Web Services account. This action requires authorization context for Amazon to bring the ASN to an Amazon Web Services account. For more information, see <a href="https://docs.aws.amazon.com/vpc/latest/ipam/tutorials-byoasn.html">Tutorial: Bring your ASN to IPAM</a> in the <i>Amazon VPC IPAM guide</i>.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { EC2Client, ProvisionIpamByoasnCommand } from "@aws-sdk/client-ec2"; // ES Modules import
+ * // const { EC2Client, ProvisionIpamByoasnCommand } = require("@aws-sdk/client-ec2"); // CommonJS import
+ * const client = new EC2Client(config);
+ * const input = { // ProvisionIpamByoasnRequest
+ *   DryRun: true || false,
+ *   IpamId: "STRING_VALUE", // required
+ *   Asn: "STRING_VALUE", // required
+ *   AsnAuthorizationContext: { // AsnAuthorizationContext
+ *     Message: "STRING_VALUE", // required
+ *     Signature: "STRING_VALUE", // required
+ *   },
+ * };
+ * const command = new ProvisionIpamByoasnCommand(input);
+ * const response = await client.send(command);
+ * // { // ProvisionIpamByoasnResult
+ * //   Byoasn: { // Byoasn
+ * //     Asn: "STRING_VALUE",
+ * //     IpamId: "STRING_VALUE",
+ * //     StatusMessage: "STRING_VALUE",
+ * //     State: "deprovisioned" || "failed-deprovision" || "failed-provision" || "pending-deprovision" || "pending-provision" || "provisioned",
+ * //   },
+ * // };
+ *
+ * ```
+ *
+ * @param ProvisionIpamByoasnCommandInput - {@link ProvisionIpamByoasnCommandInput}
+ * @returns {@link ProvisionIpamByoasnCommandOutput}
+ * @see {@link ProvisionIpamByoasnCommandInput} for command's `input` shape.
+ * @see {@link ProvisionIpamByoasnCommandOutput} for command's `response` shape.
+ * @see {@link EC2ClientResolvedConfig | config} for EC2Client's `config` shape.
+ *
+ * @throws {@link EC2ServiceException}
+ * <p>Base exception class for all service exceptions from EC2 service.</p>
+ *
+ */
+export class ProvisionIpamByoasnCommand extends $Command<
+  ProvisionIpamByoasnCommandInput,
+  ProvisionIpamByoasnCommandOutput,
+  EC2ClientResolvedConfig
+> {
+  public static getEndpointParameterInstructions(): EndpointParameterInstructions {
+    return {
+      UseFIPS: { type: "builtInParams", name: "useFipsEndpoint" },
+      Endpoint: { type: "builtInParams", name: "endpoint" },
+      Region: { type: "builtInParams", name: "region" },
+      UseDualStack: { type: "builtInParams", name: "useDualstackEndpoint" },
+    };
+  }
+
+  /**
+   * @public
+   */
+  constructor(readonly input: ProvisionIpamByoasnCommandInput) {
+    super();
+  }
+
+  /**
+   * @internal
+   */
+  resolveMiddleware(
+    clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>,
+    configuration: EC2ClientResolvedConfig,
+    options?: __HttpHandlerOptions
+  ): Handler<ProvisionIpamByoasnCommandInput, ProvisionIpamByoasnCommandOutput> {
+    this.middlewareStack.use(getSerdePlugin(configuration, this.serialize, this.deserialize));
+    this.middlewareStack.use(
+      getEndpointPlugin(configuration, ProvisionIpamByoasnCommand.getEndpointParameterInstructions())
+    );
+
+    const stack = clientStack.concat(this.middlewareStack);
+
+    const { logger } = configuration;
+    const clientName = "EC2Client";
+    const commandName = "ProvisionIpamByoasnCommand";
+    const handlerExecutionContext: HandlerExecutionContext = {
+      logger,
+      clientName,
+      commandName,
+      inputFilterSensitiveLog: (_: any) => _,
+      outputFilterSensitiveLog: (_: any) => _,
+      [SMITHY_CONTEXT_KEY]: {
+        service: "AmazonEC2",
+        operation: "ProvisionIpamByoasn",
+      },
+    };
+    const { requestHandler } = configuration;
+    return stack.resolve(
+      (request: FinalizeHandlerArguments<any>) =>
+        requestHandler.handle(request.request as __HttpRequest, options || {}),
+      handlerExecutionContext
+    );
+  }
+
+  /**
+   * @internal
+   */
+  private serialize(input: ProvisionIpamByoasnCommandInput, context: __SerdeContext): Promise<__HttpRequest> {
+    return se_ProvisionIpamByoasnCommand(input, context);
+  }
+
+  /**
+   * @internal
+   */
+  private deserialize(output: __HttpResponse, context: __SerdeContext): Promise<ProvisionIpamByoasnCommandOutput> {
+    return de_ProvisionIpamByoasnCommand(output, context);
+  }
+}
diff --git a/clients/client-ec2/src/commands/RejectTransitGatewayMulticastDomainAssociationsCommand.ts b/clients/client-ec2/src/commands/RejectTransitGatewayMulticastDomainAssociationsCommand.ts
index a9ab1b1ccfa27..e0a4837372ed6 100644
--- a/clients/client-ec2/src/commands/RejectTransitGatewayMulticastDomainAssociationsCommand.ts
+++ b/clients/client-ec2/src/commands/RejectTransitGatewayMulticastDomainAssociationsCommand.ts
@@ -18,7 +18,7 @@ import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "
 import {
   RejectTransitGatewayMulticastDomainAssociationsRequest,
   RejectTransitGatewayMulticastDomainAssociationsResult,
-} from "../models/models_6";
+} from "../models/models_7";
 import {
   de_RejectTransitGatewayMulticastDomainAssociationsCommand,
   se_RejectTransitGatewayMulticastDomainAssociationsCommand,
diff --git a/clients/client-ec2/src/commands/RejectTransitGatewayPeeringAttachmentCommand.ts b/clients/client-ec2/src/commands/RejectTransitGatewayPeeringAttachmentCommand.ts
index d4b1cae77cad4..b05c41dadcdc2 100644
--- a/clients/client-ec2/src/commands/RejectTransitGatewayPeeringAttachmentCommand.ts
+++ b/clients/client-ec2/src/commands/RejectTransitGatewayPeeringAttachmentCommand.ts
@@ -18,7 +18,7 @@ import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "
 import {
   RejectTransitGatewayPeeringAttachmentRequest,
   RejectTransitGatewayPeeringAttachmentResult,
-} from "../models/models_6";
+} from "../models/models_7";
 import {
   de_RejectTransitGatewayPeeringAttachmentCommand,
   se_RejectTransitGatewayPeeringAttachmentCommand,
diff --git a/clients/client-ec2/src/commands/RejectTransitGatewayVpcAttachmentCommand.ts b/clients/client-ec2/src/commands/RejectTransitGatewayVpcAttachmentCommand.ts
index 674017be396eb..72c7e39d7aa2b 100644
--- a/clients/client-ec2/src/commands/RejectTransitGatewayVpcAttachmentCommand.ts
+++ b/clients/client-ec2/src/commands/RejectTransitGatewayVpcAttachmentCommand.ts
@@ -15,7 +15,7 @@ import {
 } from "@smithy/types";
 
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
-import { RejectTransitGatewayVpcAttachmentRequest, RejectTransitGatewayVpcAttachmentResult } from "../models/models_6";
+import { RejectTransitGatewayVpcAttachmentRequest, RejectTransitGatewayVpcAttachmentResult } from "../models/models_7";
 import {
   de_RejectTransitGatewayVpcAttachmentCommand,
   se_RejectTransitGatewayVpcAttachmentCommand,
diff --git a/clients/client-ec2/src/commands/RejectVpcEndpointConnectionsCommand.ts b/clients/client-ec2/src/commands/RejectVpcEndpointConnectionsCommand.ts
index a3792352d032e..cf22b291b69d6 100644
--- a/clients/client-ec2/src/commands/RejectVpcEndpointConnectionsCommand.ts
+++ b/clients/client-ec2/src/commands/RejectVpcEndpointConnectionsCommand.ts
@@ -15,7 +15,7 @@ import {
 } from "@smithy/types";
 
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
-import { RejectVpcEndpointConnectionsRequest, RejectVpcEndpointConnectionsResult } from "../models/models_6";
+import { RejectVpcEndpointConnectionsRequest, RejectVpcEndpointConnectionsResult } from "../models/models_7";
 import { de_RejectVpcEndpointConnectionsCommand, se_RejectVpcEndpointConnectionsCommand } from "../protocols/Aws_ec2";
 
 /**
diff --git a/clients/client-ec2/src/commands/RejectVpcPeeringConnectionCommand.ts b/clients/client-ec2/src/commands/RejectVpcPeeringConnectionCommand.ts
index edc43d2c0d97f..c0a221bb17287 100644
--- a/clients/client-ec2/src/commands/RejectVpcPeeringConnectionCommand.ts
+++ b/clients/client-ec2/src/commands/RejectVpcPeeringConnectionCommand.ts
@@ -15,7 +15,7 @@ import {
 } from "@smithy/types";
 
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
-import { RejectVpcPeeringConnectionRequest, RejectVpcPeeringConnectionResult } from "../models/models_6";
+import { RejectVpcPeeringConnectionRequest, RejectVpcPeeringConnectionResult } from "../models/models_7";
 import { de_RejectVpcPeeringConnectionCommand, se_RejectVpcPeeringConnectionCommand } from "../protocols/Aws_ec2";
 
 /**
diff --git a/clients/client-ec2/src/commands/ReleaseAddressCommand.ts b/clients/client-ec2/src/commands/ReleaseAddressCommand.ts
index 22425c3df91e9..67fbb02d68a04 100644
--- a/clients/client-ec2/src/commands/ReleaseAddressCommand.ts
+++ b/clients/client-ec2/src/commands/ReleaseAddressCommand.ts
@@ -15,7 +15,7 @@ import {
 } from "@smithy/types";
 
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
-import { ReleaseAddressRequest } from "../models/models_6";
+import { ReleaseAddressRequest } from "../models/models_7";
 import { de_ReleaseAddressCommand, se_ReleaseAddressCommand } from "../protocols/Aws_ec2";
 
 /**
diff --git a/clients/client-ec2/src/commands/ReleaseHostsCommand.ts b/clients/client-ec2/src/commands/ReleaseHostsCommand.ts
index fd90e34c2a689..1c3b0dc309218 100644
--- a/clients/client-ec2/src/commands/ReleaseHostsCommand.ts
+++ b/clients/client-ec2/src/commands/ReleaseHostsCommand.ts
@@ -15,7 +15,7 @@ import {
 } from "@smithy/types";
 
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
-import { ReleaseHostsRequest, ReleaseHostsResult } from "../models/models_6";
+import { ReleaseHostsRequest, ReleaseHostsResult } from "../models/models_7";
 import { de_ReleaseHostsCommand, se_ReleaseHostsCommand } from "../protocols/Aws_ec2";
 
 /**
diff --git a/clients/client-ec2/src/commands/ReleaseIpamPoolAllocationCommand.ts b/clients/client-ec2/src/commands/ReleaseIpamPoolAllocationCommand.ts
index 1c581159b1e7e..6f93317993a95 100644
--- a/clients/client-ec2/src/commands/ReleaseIpamPoolAllocationCommand.ts
+++ b/clients/client-ec2/src/commands/ReleaseIpamPoolAllocationCommand.ts
@@ -15,7 +15,7 @@ import {
 } from "@smithy/types";
 
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
-import { ReleaseIpamPoolAllocationRequest, ReleaseIpamPoolAllocationResult } from "../models/models_6";
+import { ReleaseIpamPoolAllocationRequest, ReleaseIpamPoolAllocationResult } from "../models/models_7";
 import { de_ReleaseIpamPoolAllocationCommand, se_ReleaseIpamPoolAllocationCommand } from "../protocols/Aws_ec2";
 
 /**
diff --git a/clients/client-ec2/src/commands/ReplaceIamInstanceProfileAssociationCommand.ts b/clients/client-ec2/src/commands/ReplaceIamInstanceProfileAssociationCommand.ts
index 2cb1f2b05b137..4e69c9296efa7 100644
--- a/clients/client-ec2/src/commands/ReplaceIamInstanceProfileAssociationCommand.ts
+++ b/clients/client-ec2/src/commands/ReplaceIamInstanceProfileAssociationCommand.ts
@@ -18,7 +18,7 @@ import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "
 import {
   ReplaceIamInstanceProfileAssociationRequest,
   ReplaceIamInstanceProfileAssociationResult,
-} from "../models/models_6";
+} from "../models/models_7";
 import {
   de_ReplaceIamInstanceProfileAssociationCommand,
   se_ReplaceIamInstanceProfileAssociationCommand,
diff --git a/clients/client-ec2/src/commands/ReplaceNetworkAclAssociationCommand.ts b/clients/client-ec2/src/commands/ReplaceNetworkAclAssociationCommand.ts
index a82bc723aab3c..ef038e2268b5f 100644
--- a/clients/client-ec2/src/commands/ReplaceNetworkAclAssociationCommand.ts
+++ b/clients/client-ec2/src/commands/ReplaceNetworkAclAssociationCommand.ts
@@ -15,7 +15,7 @@ import {
 } from "@smithy/types";
 
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
-import { ReplaceNetworkAclAssociationRequest, ReplaceNetworkAclAssociationResult } from "../models/models_6";
+import { ReplaceNetworkAclAssociationRequest, ReplaceNetworkAclAssociationResult } from "../models/models_7";
 import { de_ReplaceNetworkAclAssociationCommand, se_ReplaceNetworkAclAssociationCommand } from "../protocols/Aws_ec2";
 
 /**
diff --git a/clients/client-ec2/src/commands/ReplaceNetworkAclEntryCommand.ts b/clients/client-ec2/src/commands/ReplaceNetworkAclEntryCommand.ts
index fe31db022dfdb..c95fea2af1523 100644
--- a/clients/client-ec2/src/commands/ReplaceNetworkAclEntryCommand.ts
+++ b/clients/client-ec2/src/commands/ReplaceNetworkAclEntryCommand.ts
@@ -15,7 +15,7 @@ import {
 } from "@smithy/types";
 
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
-import { ReplaceNetworkAclEntryRequest } from "../models/models_6";
+import { ReplaceNetworkAclEntryRequest } from "../models/models_7";
 import { de_ReplaceNetworkAclEntryCommand, se_ReplaceNetworkAclEntryCommand } from "../protocols/Aws_ec2";
 
 /**
diff --git a/clients/client-ec2/src/commands/ReplaceRouteCommand.ts b/clients/client-ec2/src/commands/ReplaceRouteCommand.ts
index 8cb60b20ad953..ebb40b7add729 100644
--- a/clients/client-ec2/src/commands/ReplaceRouteCommand.ts
+++ b/clients/client-ec2/src/commands/ReplaceRouteCommand.ts
@@ -15,7 +15,7 @@ import {
 } from "@smithy/types";
 
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
-import { ReplaceRouteRequest } from "../models/models_6";
+import { ReplaceRouteRequest } from "../models/models_7";
 import { de_ReplaceRouteCommand, se_ReplaceRouteCommand } from "../protocols/Aws_ec2";
 
 /**
diff --git a/clients/client-ec2/src/commands/ReplaceRouteTableAssociationCommand.ts b/clients/client-ec2/src/commands/ReplaceRouteTableAssociationCommand.ts
index cdfe6fedd46a5..90e3a5deb5db1 100644
--- a/clients/client-ec2/src/commands/ReplaceRouteTableAssociationCommand.ts
+++ b/clients/client-ec2/src/commands/ReplaceRouteTableAssociationCommand.ts
@@ -15,7 +15,7 @@ import {
 } from "@smithy/types";
 
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
-import { ReplaceRouteTableAssociationRequest, ReplaceRouteTableAssociationResult } from "../models/models_6";
+import { ReplaceRouteTableAssociationRequest, ReplaceRouteTableAssociationResult } from "../models/models_7";
 import { de_ReplaceRouteTableAssociationCommand, se_ReplaceRouteTableAssociationCommand } from "../protocols/Aws_ec2";
 
 /**
diff --git a/clients/client-ec2/src/commands/ReplaceTransitGatewayRouteCommand.ts b/clients/client-ec2/src/commands/ReplaceTransitGatewayRouteCommand.ts
index 6311ee3ac34d1..0b6c86a28bdb3 100644
--- a/clients/client-ec2/src/commands/ReplaceTransitGatewayRouteCommand.ts
+++ b/clients/client-ec2/src/commands/ReplaceTransitGatewayRouteCommand.ts
@@ -15,7 +15,7 @@ import {
 } from "@smithy/types";
 
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
-import { ReplaceTransitGatewayRouteRequest, ReplaceTransitGatewayRouteResult } from "../models/models_6";
+import { ReplaceTransitGatewayRouteRequest, ReplaceTransitGatewayRouteResult } from "../models/models_7";
 import { de_ReplaceTransitGatewayRouteCommand, se_ReplaceTransitGatewayRouteCommand } from "../protocols/Aws_ec2";
 
 /**
diff --git a/clients/client-ec2/src/commands/ReplaceVpnTunnelCommand.ts b/clients/client-ec2/src/commands/ReplaceVpnTunnelCommand.ts
index 62ce61cb7cb9f..0ae9a3382b4f8 100644
--- a/clients/client-ec2/src/commands/ReplaceVpnTunnelCommand.ts
+++ b/clients/client-ec2/src/commands/ReplaceVpnTunnelCommand.ts
@@ -15,7 +15,7 @@ import {
 } from "@smithy/types";
 
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
-import { ReplaceVpnTunnelRequest, ReplaceVpnTunnelResult } from "../models/models_6";
+import { ReplaceVpnTunnelRequest, ReplaceVpnTunnelResult } from "../models/models_7";
 import { de_ReplaceVpnTunnelCommand, se_ReplaceVpnTunnelCommand } from "../protocols/Aws_ec2";
 
 /**
diff --git a/clients/client-ec2/src/commands/ReportInstanceStatusCommand.ts b/clients/client-ec2/src/commands/ReportInstanceStatusCommand.ts
index 56ffdadf75dc2..4387aa790752e 100644
--- a/clients/client-ec2/src/commands/ReportInstanceStatusCommand.ts
+++ b/clients/client-ec2/src/commands/ReportInstanceStatusCommand.ts
@@ -15,7 +15,7 @@ import {
 } from "@smithy/types";
 
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
-import { ReportInstanceStatusRequest } from "../models/models_6";
+import { ReportInstanceStatusRequest } from "../models/models_7";
 import { de_ReportInstanceStatusCommand, se_ReportInstanceStatusCommand } from "../protocols/Aws_ec2";
 
 /**
diff --git a/clients/client-ec2/src/commands/RequestSpotFleetCommand.ts b/clients/client-ec2/src/commands/RequestSpotFleetCommand.ts
index 840a9f9c21d2f..e065b25bba0e0 100644
--- a/clients/client-ec2/src/commands/RequestSpotFleetCommand.ts
+++ b/clients/client-ec2/src/commands/RequestSpotFleetCommand.ts
@@ -19,7 +19,7 @@ import {
   RequestSpotFleetRequest,
   RequestSpotFleetRequestFilterSensitiveLog,
   RequestSpotFleetResponse,
-} from "../models/models_6";
+} from "../models/models_7";
 import { de_RequestSpotFleetCommand, se_RequestSpotFleetCommand } from "../protocols/Aws_ec2";
 
 /**
@@ -177,6 +177,11 @@ export interface RequestSpotFleetCommandOutput extends RequestSpotFleetResponse,
  *                 EnaSrdUdpEnabled: true || false,
  *               },
  *             },
+ *             ConnectionTrackingSpecification: { // ConnectionTrackingSpecificationRequest
+ *               TcpEstablishedTimeout: Number("int"),
+ *               UdpStreamTimeout: Number("int"),
+ *               UdpTimeout: Number("int"),
+ *             },
  *           },
  *         ],
  *         Placement: { // SpotPlacement
diff --git a/clients/client-ec2/src/commands/RequestSpotInstancesCommand.ts b/clients/client-ec2/src/commands/RequestSpotInstancesCommand.ts
index 2bd827d902310..210ef491375db 100644
--- a/clients/client-ec2/src/commands/RequestSpotInstancesCommand.ts
+++ b/clients/client-ec2/src/commands/RequestSpotInstancesCommand.ts
@@ -151,6 +151,11 @@ export interface RequestSpotInstancesCommandOutput extends RequestSpotInstancesR
  *             EnaSrdUdpEnabled: true || false,
  *           },
  *         },
+ *         ConnectionTrackingSpecification: { // ConnectionTrackingSpecificationRequest
+ *           TcpEstablishedTimeout: Number("int"),
+ *           UdpStreamTimeout: Number("int"),
+ *           UdpTimeout: Number("int"),
+ *         },
  *       },
  *     ],
  *     Placement: { // SpotPlacement
@@ -278,6 +283,11 @@ export interface RequestSpotInstancesCommandOutput extends RequestSpotInstancesR
  * //                 EnaSrdUdpEnabled: true || false,
  * //               },
  * //             },
+ * //             ConnectionTrackingSpecification: { // ConnectionTrackingSpecificationRequest
+ * //               TcpEstablishedTimeout: Number("int"),
+ * //               UdpStreamTimeout: Number("int"),
+ * //               UdpTimeout: Number("int"),
+ * //             },
  * //           },
  * //         ],
  * //         Placement: { // SpotPlacement
diff --git a/clients/client-ec2/src/commands/RunInstancesCommand.ts b/clients/client-ec2/src/commands/RunInstancesCommand.ts
index 2499a3ff0247d..4ce5160c54a87 100644
--- a/clients/client-ec2/src/commands/RunInstancesCommand.ts
+++ b/clients/client-ec2/src/commands/RunInstancesCommand.ts
@@ -205,6 +205,11 @@ export interface RunInstancesCommandOutput extends Reservation, __MetadataBearer
  *           EnaSrdUdpEnabled: true || false,
  *         },
  *       },
+ *       ConnectionTrackingSpecification: { // ConnectionTrackingSpecificationRequest
+ *         TcpEstablishedTimeout: Number("int"),
+ *         UdpStreamTimeout: Number("int"),
+ *         UdpTimeout: Number("int"),
+ *       },
  *     },
  *   ],
  *   PrivateIpAddress: "STRING_VALUE",
@@ -447,6 +452,11 @@ export interface RunInstancesCommandOutput extends Reservation, __MetadataBearer
  * //               Ipv6Prefix: "STRING_VALUE",
  * //             },
  * //           ],
+ * //           ConnectionTrackingConfiguration: { // ConnectionTrackingSpecificationResponse
+ * //             TcpEstablishedTimeout: Number("int"),
+ * //             UdpStreamTimeout: Number("int"),
+ * //             UdpTimeout: Number("int"),
+ * //           },
  * //         },
  * //       ],
  * //       OutpostArn: "STRING_VALUE",
diff --git a/clients/client-ec2/src/commands/WithdrawByoipCidrCommand.ts b/clients/client-ec2/src/commands/WithdrawByoipCidrCommand.ts
index a22e07a860c36..4d41a7ad63f54 100644
--- a/clients/client-ec2/src/commands/WithdrawByoipCidrCommand.ts
+++ b/clients/client-ec2/src/commands/WithdrawByoipCidrCommand.ts
@@ -58,6 +58,14 @@ export interface WithdrawByoipCidrCommandOutput extends WithdrawByoipCidrResult,
  * //   ByoipCidr: { // ByoipCidr
  * //     Cidr: "STRING_VALUE",
  * //     Description: "STRING_VALUE",
+ * //     AsnAssociations: [ // AsnAssociationSet
+ * //       { // AsnAssociation
+ * //         Asn: "STRING_VALUE",
+ * //         Cidr: "STRING_VALUE",
+ * //         StatusMessage: "STRING_VALUE",
+ * //         State: "disassociated" || "failed-disassociation" || "failed-association" || "pending-disassociation" || "pending-association" || "associated",
+ * //       },
+ * //     ],
  * //     StatusMessage: "STRING_VALUE",
  * //     State: "advertised" || "deprovisioned" || "failed-deprovision" || "failed-provision" || "pending-deprovision" || "pending-provision" || "provisioned" || "provisioned-not-publicly-advertisable",
  * //   },
diff --git a/clients/client-ec2/src/commands/index.ts b/clients/client-ec2/src/commands/index.ts
index 306fb89e73df0..7edd514ff566c 100644
--- a/clients/client-ec2/src/commands/index.ts
+++ b/clients/client-ec2/src/commands/index.ts
@@ -20,6 +20,7 @@ export * from "./AssociateDhcpOptionsCommand";
 export * from "./AssociateEnclaveCertificateIamRoleCommand";
 export * from "./AssociateIamInstanceProfileCommand";
 export * from "./AssociateInstanceEventWindowCommand";
+export * from "./AssociateIpamByoasnCommand";
 export * from "./AssociateIpamResourceDiscoveryCommand";
 export * from "./AssociateNatGatewayAddressCommand";
 export * from "./AssociateRouteTableCommand";
@@ -210,6 +211,7 @@ export * from "./DeleteVpnConnectionCommand";
 export * from "./DeleteVpnConnectionRouteCommand";
 export * from "./DeleteVpnGatewayCommand";
 export * from "./DeprovisionByoipCidrCommand";
+export * from "./DeprovisionIpamByoasnCommand";
 export * from "./DeprovisionIpamPoolCidrCommand";
 export * from "./DeprovisionPublicIpv4PoolCidrCommand";
 export * from "./DeregisterImageCommand";
@@ -272,6 +274,7 @@ export * from "./DescribeInstanceTypeOfferingsCommand";
 export * from "./DescribeInstanceTypesCommand";
 export * from "./DescribeInstancesCommand";
 export * from "./DescribeInternetGatewaysCommand";
+export * from "./DescribeIpamByoasnCommand";
 export * from "./DescribeIpamPoolsCommand";
 export * from "./DescribeIpamResourceDiscoveriesCommand";
 export * from "./DescribeIpamResourceDiscoveryAssociationsCommand";
@@ -390,6 +393,7 @@ export * from "./DisassociateClientVpnTargetNetworkCommand";
 export * from "./DisassociateEnclaveCertificateIamRoleCommand";
 export * from "./DisassociateIamInstanceProfileCommand";
 export * from "./DisassociateInstanceEventWindowCommand";
+export * from "./DisassociateIpamByoasnCommand";
 export * from "./DisassociateIpamResourceDiscoveryCommand";
 export * from "./DisassociateNatGatewayAddressCommand";
 export * from "./DisassociateRouteTableCommand";
@@ -438,6 +442,7 @@ export * from "./GetInstanceTypesFromInstanceRequirementsCommand";
 export * from "./GetInstanceUefiDataCommand";
 export * from "./GetIpamAddressHistoryCommand";
 export * from "./GetIpamDiscoveredAccountsCommand";
+export * from "./GetIpamDiscoveredPublicAddressesCommand";
 export * from "./GetIpamDiscoveredResourceCidrsCommand";
 export * from "./GetIpamPoolAllocationsCommand";
 export * from "./GetIpamPoolCidrsCommand";
@@ -543,6 +548,7 @@ export * from "./MonitorInstancesCommand";
 export * from "./MoveAddressToVpcCommand";
 export * from "./MoveByoipCidrToIpamCommand";
 export * from "./ProvisionByoipCidrCommand";
+export * from "./ProvisionIpamByoasnCommand";
 export * from "./ProvisionIpamPoolCidrCommand";
 export * from "./ProvisionPublicIpv4PoolCidrCommand";
 export * from "./PurchaseCapacityBlockCommand";
diff --git a/clients/client-ec2/src/models/models_0.ts b/clients/client-ec2/src/models/models_0.ts
index 3865e3e162955..57ab2d2c9cc50 100644
--- a/clients/client-ec2/src/models/models_0.ts
+++ b/clients/client-ec2/src/models/models_0.ts
@@ -2937,6 +2937,12 @@ export interface AdvertiseByoipCidrRequest {
    */
   Cidr: string | undefined;
 
+  /**
+   * @public
+   * <p>The public 2-byte or 4-byte ASN that you want to advertise.</p>
+   */
+  Asn?: string;
+
   /**
    * @public
    * <p>Checks whether you have the required permissions for the action, without actually making the request,
@@ -2946,6 +2952,54 @@ export interface AdvertiseByoipCidrRequest {
   DryRun?: boolean;
 }
 
+/**
+ * @public
+ * @enum
+ */
+export const AsnAssociationState = {
+  associated: "associated",
+  disassociated: "disassociated",
+  failed_association: "failed-association",
+  failed_disassociation: "failed-disassociation",
+  pending_association: "pending-association",
+  pending_disassociation: "pending-disassociation",
+} as const;
+
+/**
+ * @public
+ */
+export type AsnAssociationState = (typeof AsnAssociationState)[keyof typeof AsnAssociationState];
+
+/**
+ * @public
+ * <p>An Autonomous System Number (ASN) and BYOIP CIDR association.</p>
+ */
+export interface AsnAssociation {
+  /**
+   * @public
+   * <p>The association's ASN.</p>
+   */
+  Asn?: string;
+
+  /**
+   * @public
+   * <p>The association's CIDR.</p>
+   */
+  Cidr?: string;
+
+  /**
+   * @public
+   * <p>The association's status message.</p>
+   */
+  StatusMessage?: string;
+
+  /**
+   * @public
+   * <p>The association's state.</p>
+   */
+  State?: AsnAssociationState;
+}
+
 /**
  * @public
  * @enum
@@ -2984,6 +3038,12 @@ export interface ByoipCidr {
    */
   Description?: string;
 
+  /**
+   * @public
+   * <p>The BYOIP CIDR associations with ASNs.</p>
+   */
+  AsnAssociations?: AsnAssociation[];
+
   /**
    * @public
    * <p>Upon success, contains the ID of the address pool. Otherwise, contains an error message.</p>
@@ -3369,6 +3429,12 @@ export interface AllocateIpamPoolCidrRequest {
    */
   PreviewNextCidr?: boolean;
 
+  /**
+   * @public
+   * <p>Include a particular CIDR range that can be returned by the pool. Allowed CIDRs are only allowed if using netmask length for allocation.</p>
+   */
+  AllowedCidrs?: string[];
+
   /**
    * @public
    * <p>Exclude a particular CIDR range from being returned by the pool. Disallowed CIDRs are only allowed if using netmask length for allocation.</p>
@@ -3384,6 +3450,7 @@ export const IpamPoolAllocationResourceType = {
   custom: "custom",
   ec2_public_ipv4_pool: "ec2-public-ipv4-pool",
   ipam_pool: "ipam-pool",
+  subnet: "subnet",
   vpc: "vpc",
 } as const;
 
@@ -4425,6 +4492,42 @@ export interface AssociateInstanceEventWindowResult {
   InstanceEventWindow?: InstanceEventWindow;
 }
 
+/**
+ * @public
+ */
+export interface AssociateIpamByoasnRequest {
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
+
+  /**
+   * @public
+   * <p>A public 2-byte or 4-byte ASN.</p>
+   */
+  Asn: string | undefined;
+
+  /**
+   * @public
+   * <p>The BYOIP CIDR you want to associate with an ASN.</p>
+   */
+  Cidr: string | undefined;
+}
+
+/**
+ * @public
+ */
+export interface AssociateIpamByoasnResult {
+  /**
+   * @public
+   * <p>The ASN and BYOIP CIDR association.</p>
+   */
+  AsnAssociation?: AsnAssociation;
+}
+
 /**
  * @public
  */
@@ -4771,16 +4874,27 @@ export interface AssociateRouteTableResult {
 export interface AssociateSubnetCidrBlockRequest {
   /**
    * @public
-   * <p>The IPv6 CIDR block for your subnet. The subnet must have a /64 prefix
-   *             length.</p>
+   * <p>The IPv6 CIDR block for your subnet.</p>
    */
-  Ipv6CidrBlock: string | undefined;
+  Ipv6CidrBlock?: string;
 
   /**
    * @public
    * <p>The ID of your subnet.</p>
    */
   SubnetId: string | undefined;
+
+  /**
+   * @public
+   * <p>An IPv6 IPAM pool ID.</p>
+   */
+  Ipv6IpamPoolId?: string;
+
+  /**
+   * @public
+   * <p>An IPv6 netmask length.</p>
+   */
+  Ipv6NetmaskLength?: number;
 }
 
 /**
@@ -5124,11 +5238,7 @@ export type InterfaceProtocolType = (typeof InterfaceProtocolType)[keyof typeof
 
 /**
  * @public
- * <note>
- *             <p>Currently available in <b>limited preview only</b>.
- *                 If you are interested in using this feature, contact your account manager.</p>
- *          </note>
- *          <p>Information about an association between a branch network interface with a trunk network interface.</p>
+ * <p>Information about an association between a branch network interface with a trunk network interface.</p>
  */
 export interface TrunkInterfaceAssociation {
   /**
@@ -5199,7 +5309,8 @@ export interface AssociateTrunkInterfaceResult {
 export interface AssociateVpcCidrBlockRequest {
   /**
    * @public
-   * <p>Requests an Amazon-provided IPv6 CIDR block with a /56 prefix length for the VPC. You cannot specify the range of IPv6 addresses, or the size of the CIDR block.</p>
+   * <p>Requests an Amazon-provided IPv6 CIDR block with a /56 prefix length for the VPC. You
+   *             cannot specify the range of IPv6 addresses or the size of the CIDR block.</p>
    */
   AmazonProvidedIpv6CidrBlock?: boolean;
 
@@ -9565,81 +9676,6 @@ export interface CreateCarrierGatewayRequest {
   ClientToken?: string;
 }
 
-/**
- * @public
- * @enum
- */
-export const CarrierGatewayState = {
-  available: "available",
-  deleted: "deleted",
-  deleting: "deleting",
-  pending: "pending",
-} as const;
-
-/**
- * @public
- */
-export type CarrierGatewayState = (typeof CarrierGatewayState)[keyof typeof CarrierGatewayState];
-
-/**
- * @public
- * <p>Describes a carrier gateway.</p>
- */
-export interface CarrierGateway {
-  /**
-   * @public
-   * <p>The ID of the carrier gateway.</p>
-   */
-  CarrierGatewayId?: string;
-
-  /**
-   * @public
-   * <p>The ID of the VPC associated with the carrier gateway.</p>
-   */
-  VpcId?: string;
-
-  /**
-   * @public
-   * <p>The state of the carrier gateway.</p>
-   */
-  State?: CarrierGatewayState;
-
-  /**
-   * @public
-   * <p>The Amazon Web Services account ID of the owner of the carrier gateway.</p>
-   */
-  OwnerId?: string;
-
-  /**
-   * @public
-   * <p>The tags assigned to the carrier gateway.</p>
-   */
-  Tags?: Tag[];
-}
-
-/**
- * @public
- */
-export interface CreateCarrierGatewayResult {
-  /**
-   * @public
-   * <p>Information about the carrier gateway.</p>
-   */
-  CarrierGateway?: CarrierGateway;
-}
-
-/**
- * @public
- * <p>Describes the Active Directory to be used for client authentication.</p>
- */
-export interface DirectoryServiceAuthenticationRequest {
-  /**
-   * @public
-   * <p>The ID of the Active Directory to be used for authentication.</p>
-   */
-  DirectoryId?: string;
-}
-
 /**
  * @internal
  */
diff --git a/clients/client-ec2/src/models/models_1.ts b/clients/client-ec2/src/models/models_1.ts
index 10ecbb5002e4b..1684c86706e01 100644
--- a/clients/client-ec2/src/models/models_1.ts
+++ b/clients/client-ec2/src/models/models_1.ts
@@ -16,9 +16,7 @@ import {
   AddPrefixListEntry,
   AddressFamily,
   AttachmentStatus,
-  DirectoryServiceAuthenticationRequest,
   InstanceEventWindow,
-  Ipv4PrefixSpecification,
   NatGatewayAddress,
   PortRange,
   Protocol,
@@ -32,6 +30,81 @@ import {
   WeekDay,
 } from "./models_0";
 
+/**
+ * @public
+ * @enum
+ */
+export const CarrierGatewayState = {
+  available: "available",
+  deleted: "deleted",
+  deleting: "deleting",
+  pending: "pending",
+} as const;
+
+/**
+ * @public
+ */
+export type CarrierGatewayState = (typeof CarrierGatewayState)[keyof typeof CarrierGatewayState];
+
+/**
+ * @public
+ * <p>Describes a carrier gateway.</p>
+ */
+export interface CarrierGateway {
+  /**
+   * @public
+   * <p>The ID of the carrier gateway.</p>
+   */
+  CarrierGatewayId?: string;
+
+  /**
+   * @public
+   * <p>The ID of the VPC associated with the carrier gateway.</p>
+   */
+  VpcId?: string;
+
+  /**
+   * @public
+   * <p>The state of the carrier gateway.</p>
+   */
+  State?: CarrierGatewayState;
+
+  /**
+   * @public
+   * <p>The Amazon Web Services account ID of the owner of the carrier gateway.</p>
+   */
+  OwnerId?: string;
+
+  /**
+   * @public
+   * <p>The tags assigned to the carrier gateway.</p>
+   */
+  Tags?: Tag[];
+}
+
+/**
+ * @public
+ */
+export interface CreateCarrierGatewayResult {
+  /**
+   * @public
+   * <p>Information about the carrier gateway.</p>
+   */
+  CarrierGateway?: CarrierGateway;
+}
+
+/**
+ * @public
+ * <p>Describes the Active Directory to be used for client authentication.</p>
+ */
+export interface DirectoryServiceAuthenticationRequest {
+  /**
+   * @public
+   * <p>The ID of the Active Directory to be used for authentication.</p>
+   */
+  DirectoryId?: string;
+}
+
 /**
  * @public
  * <p>The IAM SAML identity provider used for federated authentication.</p>
@@ -4890,6 +4963,20 @@ export interface CreateInternetGatewayResult {
   InternetGateway?: InternetGateway;
 }
 
+/**
+ * @public
+ * @enum
+ */
+export const IpamTier = {
+  advanced: "advanced",
+  free: "free",
+} as const;
+
+/**
+ * @public
+ */
+export type IpamTier = (typeof IpamTier)[keyof typeof IpamTier];
+
 /**
  * @public
  */
@@ -4928,6 +5015,12 @@ export interface CreateIpamRequest {
    * <p>A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html">Ensuring Idempotency</a>.</p>
    */
   ClientToken?: string;
+
+  /**
+   * @public
+   * <p>IPAM is offered in a Free Tier and an Advanced Tier. For more information about the features available in each tier and the costs associated with the tiers, see <a href="http://aws.amazon.com/vpc/pricing/">Amazon VPC pricing > IPAM tab</a>.</p>
+   */
+  Tier?: IpamTier;
 }
 
 /**
@@ -5058,6 +5151,18 @@ export interface Ipam {
    * <p>The IPAM's resource discovery association count.</p>
    */
   ResourceDiscoveryAssociationCount?: number;
+
+  /**
+   * @public
+   * <p>The state message.</p>
+   */
+  StateMessage?: string;
+
+  /**
+   * @public
+   * <p>IPAM is offered in a Free Tier and an Advanced Tier. For more information about the features available in each tier and the costs associated with the tiers, see <a href="http://aws.amazon.com/vpc/pricing/">Amazon VPC pricing > IPAM tab</a>.</p>
+   */
+  Tier?: IpamTier;
 }
 
 /**
@@ -5116,6 +5221,49 @@ export const IpamPoolPublicIpSource = {
  */
 export type IpamPoolPublicIpSource = (typeof IpamPoolPublicIpSource)[keyof typeof IpamPoolPublicIpSource];
 
+/**
+ * @public
+ * @enum
+ */
+export const IpamPoolSourceResourceType = {
+  vpc: "vpc",
+} as const;
+
+/**
+ * @public
+ */
+export type IpamPoolSourceResourceType = (typeof IpamPoolSourceResourceType)[keyof typeof IpamPoolSourceResourceType];
+
+/**
+ * @public
+ * <p>The resource used to provision CIDRs to a resource planning pool.</p>
+ */
+export interface IpamPoolSourceResourceRequest {
+  /**
+   * @public
+   * <p>The source resource ID.</p>
+   */
+  ResourceId?: string;
+
+  /**
+   * @public
+   * <p>The source resource type.</p>
+   */
+  ResourceType?: IpamPoolSourceResourceType;
+
+  /**
+   * @public
+   * <p>The source resource Region.</p>
+   */
+  ResourceRegion?: string;
+
+  /**
+   * @public
+   * <p>The source resource owner.</p>
+   */
+  ResourceOwner?: string;
+}
+
 /**
  * @public
  */
@@ -5230,6 +5378,12 @@ export interface CreateIpamPoolRequest {
    *          By default, you can add only one Amazon-provided IPv6 CIDR block to a top-level IPv6 pool if PublicIpSource is <code>amazon</code>. For information on increasing the default limit, see <a href="https://docs.aws.amazon.com/vpc/latest/ipam/quotas-ipam.html"> Quotas for your IPAM</a> in the <i>Amazon VPC IPAM User Guide</i>.</p>
    */
   PublicIpSource?: IpamPoolPublicIpSource;
+
+  /**
+   * @public
+   * <p>The resource used to provision CIDRs to a resource planning pool.</p>
+   */
+  SourceResource?: IpamPoolSourceResourceRequest;
 }
 
 /**
@@ -5265,6 +5419,36 @@ export const IpamScopeType = {
  */
 export type IpamScopeType = (typeof IpamScopeType)[keyof typeof IpamScopeType];
 
+/**
+ * @public
+ * <p>The resource used to provision CIDRs to a resource planning pool.</p>
+ */
+export interface IpamPoolSourceResource {
+  /**
+   * @public
+   * <p>The source resource ID.</p>
+   */
+  ResourceId?: string;
+
+  /**
+   * @public
+   * <p>The source resource type.</p>
+   */
+  ResourceType?: IpamPoolSourceResourceType;
+
+  /**
+   * @public
+   * <p>The source resource Region.</p>
+   */
+  ResourceRegion?: string;
+
+  /**
+   * @public
+   * <p>The source resource owner.</p>
+   */
+  ResourceOwner?: string;
+}
+
 /**
  * @public
  * @enum
@@ -5363,7 +5547,7 @@ export interface IpamPool {
 
   /**
    * @public
-   * <p>A message related to the failed creation of an IPAM pool.</p>
+   * <p>The state message.</p>
    */
   StateMessage?: string;
 
@@ -5442,6 +5626,12 @@ export interface IpamPool {
    *          By default, you can add only one Amazon-provided IPv6 CIDR block to a top-level IPv6 pool. For information on increasing the default limit, see <a href="https://docs.aws.amazon.com/vpc/latest/ipam/quotas-ipam.html"> Quotas for your IPAM</a> in the <i>Amazon VPC IPAM User Guide</i>.</p>
    */
   PublicIpSource?: IpamPoolPublicIpSource;
+
+  /**
+   * @public
+   * <p>The resource used to provision CIDRs to a resource planning pool.</p>
+   */
+  SourceResource?: IpamPoolSourceResource;
 }
 
 /**
@@ -6565,6 +6755,37 @@ export interface LaunchTemplatesMonitoringRequest {
   Enabled?: boolean;
 }
 
+/**
+ * @public
+ * <p>A security group connection tracking specification request that enables you to set the idle timeout for connection tracking on an Elastic network interface. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-connection-tracking.html#connection-tracking-timeouts">Connection tracking timeouts</a> in the <i>Amazon Elastic Compute Cloud User Guide</i>.</p>
+ */
+export interface ConnectionTrackingSpecificationRequest {
+  /**
+   * @public
+   * <p>Timeout (in seconds) for idle TCP
+   * 						connections in an established state. Min: 60 seconds. Max: 432000 seconds (5
+   * 						days). Default: 432000 seconds. Recommended: Less than 432000 seconds.</p>
+   */
+  TcpEstablishedTimeout?: number;
+
+  /**
+   * @public
+   * <p>Timeout (in seconds) for idle UDP
+   * 						flows classified as streams which have seen more than one request-response
+   * 						transaction. Min: 60 seconds. Max: 180 seconds (3 minutes). Default: 180
+   * 						seconds.</p>
+   */
+  UdpStreamTimeout?: number;
+
+  /**
+   * @public
+   * <p>Timeout (in seconds) for idle UDP flows that
+   * 						have seen traffic only in a single direction or a single request-response
+   * 						transaction. Min: 30 seconds. Max: 60 seconds. Default: 30 seconds.</p>
+   */
+  UdpTimeout?: number;
+}
+
 /**
  * @public
  * <p>Configures ENA Express for UDP network traffic from your launch template.</p>
@@ -6808,6 +7029,12 @@ export interface LaunchTemplateInstanceNetworkInterfaceSpecificationRequest {
    * <p>Configure ENA Express settings for your launch template.</p>
    */
   EnaSrdSpecification?: EnaSrdSpecificationRequest;
+
+  /**
+   * @public
+   * <p>A security group connection tracking specification that enables you to set the timeout for connection tracking on an Elastic network interface. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-connection-tracking.html#connection-tracking-timeouts">Connection tracking timeouts</a> in the <i>Amazon Elastic Compute Cloud User Guide</i>.</p>
+   */
+  ConnectionTrackingSpecification?: ConnectionTrackingSpecificationRequest;
 }
 
 /**
@@ -7943,6 +8170,37 @@ export interface LaunchTemplatesMonitoring {
   Enabled?: boolean;
 }
 
+/**
+ * @public
+ * <p>A security group connection tracking specification that enables you to set the idle timeout for connection tracking on an Elastic network interface. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-connection-tracking.html#connection-tracking-timeouts">Connection tracking timeouts</a> in the <i>Amazon Elastic Compute Cloud User Guide</i>.</p>
+ */
+export interface ConnectionTrackingSpecification {
+  /**
+   * @public
+   * <p>Timeout (in seconds) for idle TCP
+   * 						connections in an established state. Min: 60 seconds. Max: 432000 seconds (5
+   * 						days). Default: 432000 seconds. Recommended: Less than 432000 seconds.</p>
+   */
+  TcpEstablishedTimeout?: number;
+
+  /**
+   * @public
+   * <p>Timeout (in seconds) for idle UDP flows that
+   * 						have seen traffic only in a single direction or a single request-response
+   * 						transaction. Min: 30 seconds. Max: 60 seconds. Default: 30 seconds.</p>
+   */
+  UdpTimeout?: number;
+
+  /**
+   * @public
+   * <p>Timeout (in seconds) for idle UDP
+   * 						flows classified as streams which have seen more than one request-response
+   * 						transaction. Min: 60 seconds. Max: 180 seconds (3 minutes). Default: 180
+   * 						seconds.</p>
+   */
+  UdpStreamTimeout?: number;
+}
+
 /**
  * @public
  * <p>ENA Express is compatible with both TCP and UDP transport protocols. When it's enabled, TCP traffic
@@ -8169,6 +8427,12 @@ export interface LaunchTemplateInstanceNetworkInterfaceSpecification {
    * <p>Contains the ENA Express settings for instances launched from your launch template.</p>
    */
   EnaSrdSpecification?: LaunchTemplateEnaSrdSpecification;
+
+  /**
+   * @public
+   * <p>A security group connection tracking specification that enables you to set the timeout for connection tracking on an Elastic network interface. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-connection-tracking.html#connection-tracking-timeouts">Connection tracking timeouts</a> in the <i>Amazon Elastic Compute Cloud User Guide</i>.</p>
+   */
+  ConnectionTrackingSpecification?: ConnectionTrackingSpecification;
 }
 
 /**
@@ -10421,6 +10685,12 @@ export interface CreateNetworkInterfaceRequest {
    *             address.</p>
    */
   EnablePrimaryIpv6?: boolean;
+
+  /**
+   * @public
+   * <p>A connection tracking specification for the network interface.</p>
+   */
+  ConnectionTrackingSpecification?: ConnectionTrackingSpecificationRequest;
 }
 
 /**
@@ -10577,6 +10847,37 @@ export interface NetworkInterfaceAttachment {
   EnaSrdSpecification?: AttachmentEnaSrdSpecification;
 }
 
+/**
+ * @public
+ * <p>A security group connection tracking configuration that enables you to set the idle timeout for connection tracking on an Elastic network interface. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-connection-tracking.html#connection-tracking-timeouts">Connection tracking timeouts</a> in the <i>Amazon Elastic Compute Cloud User Guide</i>.</p>
+ */
+export interface ConnectionTrackingConfiguration {
+  /**
+   * @public
+   * <p>Timeout (in seconds) for idle TCP
+   * 						connections in an established state. Min: 60 seconds. Max: 432000 seconds (5
+   * 						days). Default: 432000 seconds. Recommended: Less than 432000 seconds.</p>
+   */
+  TcpEstablishedTimeout?: number;
+
+  /**
+   * @public
+   * <p>Timeout (in seconds) for idle UDP
+   * 						flows classified as streams which have seen more than one request-response
+   * 						transaction. Min: 60 seconds. Max: 180 seconds (3 minutes). Default: 180
+   * 						seconds.</p>
+   */
+  UdpStreamTimeout?: number;
+
+  /**
+   * @public
+   * <p>Timeout (in seconds) for idle UDP flows that
+   * 						have seen traffic only in a single direction or a single request-response
+   * 						transaction. Min: 30 seconds. Max: 60 seconds. Default: 30 seconds.</p>
+   */
+  UdpTimeout?: number;
+}
+
 /**
  * @public
  * <p>Describes a security group.</p>
@@ -10642,389 +10943,6 @@ export interface NetworkInterfaceIpv6Address {
   IsPrimaryIpv6?: boolean;
 }
 
-/**
- * @public
- * <p>Describes the IPv6 prefix.</p>
- */
-export interface Ipv6PrefixSpecification {
-  /**
-   * @public
-   * <p>The IPv6 prefix.</p>
-   */
-  Ipv6Prefix?: string;
-}
-
-/**
- * @public
- * <p>Describes the private IPv4 address of a network interface.</p>
- */
-export interface NetworkInterfacePrivateIpAddress {
-  /**
-   * @public
-   * <p>The association information for an Elastic IP address (IPv4) associated with the network interface.</p>
-   */
-  Association?: NetworkInterfaceAssociation;
-
-  /**
-   * @public
-   * <p>Indicates whether this IPv4 address is the primary private IPv4 address of the network interface.</p>
-   */
-  Primary?: boolean;
-
-  /**
-   * @public
-   * <p>The private DNS name.</p>
-   */
-  PrivateDnsName?: string;
-
-  /**
-   * @public
-   * <p>The private IPv4 address.</p>
-   */
-  PrivateIpAddress?: string;
-}
-
-/**
- * @public
- * @enum
- */
-export const NetworkInterfaceStatus = {
-  associated: "associated",
-  attaching: "attaching",
-  available: "available",
-  detaching: "detaching",
-  in_use: "in-use",
-} as const;
-
-/**
- * @public
- */
-export type NetworkInterfaceStatus = (typeof NetworkInterfaceStatus)[keyof typeof NetworkInterfaceStatus];
-
-/**
- * @public
- * <p>Describes a network interface.</p>
- */
-export interface NetworkInterface {
-  /**
-   * @public
-   * <p>The association information for an Elastic IP address (IPv4) associated with the network interface.</p>
-   */
-  Association?: NetworkInterfaceAssociation;
-
-  /**
-   * @public
-   * <p>The network interface attachment.</p>
-   */
-  Attachment?: NetworkInterfaceAttachment;
-
-  /**
-   * @public
-   * <p>The Availability Zone.</p>
-   */
-  AvailabilityZone?: string;
-
-  /**
-   * @public
-   * <p>A description.</p>
-   */
-  Description?: string;
-
-  /**
-   * @public
-   * <p>Any security groups for the network interface.</p>
-   */
-  Groups?: GroupIdentifier[];
-
-  /**
-   * @public
-   * <p>The type of network interface.</p>
-   */
-  InterfaceType?: NetworkInterfaceType;
-
-  /**
-   * @public
-   * <p>The IPv6 addresses associated with the network interface.</p>
-   */
-  Ipv6Addresses?: NetworkInterfaceIpv6Address[];
-
-  /**
-   * @public
-   * <p>The MAC address.</p>
-   */
-  MacAddress?: string;
-
-  /**
-   * @public
-   * <p>The ID of the network interface.</p>
-   */
-  NetworkInterfaceId?: string;
-
-  /**
-   * @public
-   * <p>The Amazon Resource Name (ARN) of the Outpost.</p>
-   */
-  OutpostArn?: string;
-
-  /**
-   * @public
-   * <p>The Amazon Web Services account ID of the owner of the network interface.</p>
-   */
-  OwnerId?: string;
-
-  /**
-   * @public
-   * <p>The private DNS name.</p>
-   */
-  PrivateDnsName?: string;
-
-  /**
-   * @public
-   * <p>The IPv4 address of the network interface within the subnet.</p>
-   */
-  PrivateIpAddress?: string;
-
-  /**
-   * @public
-   * <p>The private IPv4 addresses associated with the network interface.</p>
-   */
-  PrivateIpAddresses?: NetworkInterfacePrivateIpAddress[];
-
-  /**
-   * @public
-   * <p>The IPv4 prefixes that are assigned to the network interface.</p>
-   */
-  Ipv4Prefixes?: Ipv4PrefixSpecification[];
-
-  /**
-   * @public
-   * <p>The IPv6 prefixes that are assigned to the network interface.</p>
-   */
-  Ipv6Prefixes?: Ipv6PrefixSpecification[];
-
-  /**
-   * @public
-   * <p>The alias or Amazon Web Services account ID of the principal or service that created the network interface.</p>
-   */
-  RequesterId?: string;
-
-  /**
-   * @public
-   * <p>Indicates whether the network interface is being managed by Amazon Web Services.</p>
-   */
-  RequesterManaged?: boolean;
-
-  /**
-   * @public
-   * <p>Indicates whether source/destination checking is enabled.</p>
-   */
-  SourceDestCheck?: boolean;
-
-  /**
-   * @public
-   * <p>The status of the network interface.</p>
-   */
-  Status?: NetworkInterfaceStatus;
-
-  /**
-   * @public
-   * <p>The ID of the subnet.</p>
-   */
-  SubnetId?: string;
-
-  /**
-   * @public
-   * <p>Any tags assigned to the network interface.</p>
-   */
-  TagSet?: Tag[];
-
-  /**
-   * @public
-   * <p>The ID of the VPC.</p>
-   */
-  VpcId?: string;
-
-  /**
-   * @public
-   * <p>Indicates whether a network interface with an IPv6 address is unreachable from the
-   *             public internet. If the value is <code>true</code>, inbound traffic from the internet
-   *             is dropped and you cannot assign an elastic IP address to the network interface. The
-   *             network interface is reachable from peered VPCs and resources connected through a
-   *             transit gateway, including on-premises networks.</p>
-   */
-  DenyAllIgwTraffic?: boolean;
-
-  /**
-   * @public
-   * <p>Indicates whether this is an IPv6 only network interface.</p>
-   */
-  Ipv6Native?: boolean;
-
-  /**
-   * @public
-   * <p>The IPv6 globally unique address associated with the network interface.</p>
-   */
-  Ipv6Address?: string;
-}
-
-/**
- * @public
- */
-export interface CreateNetworkInterfaceResult {
-  /**
-   * @public
-   * <p>Information about the network interface.</p>
-   */
-  NetworkInterface?: NetworkInterface;
-
-  /**
-   * @public
-   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
-   */
-  ClientToken?: string;
-}
-
-/**
- * @public
- * @enum
- */
-export const InterfacePermissionType = {
-  EIP_ASSOCIATE: "EIP-ASSOCIATE",
-  INSTANCE_ATTACH: "INSTANCE-ATTACH",
-} as const;
-
-/**
- * @public
- */
-export type InterfacePermissionType = (typeof InterfacePermissionType)[keyof typeof InterfacePermissionType];
-
-/**
- * @public
- * <p>Contains the parameters for CreateNetworkInterfacePermission.</p>
- */
-export interface CreateNetworkInterfacePermissionRequest {
-  /**
-   * @public
-   * <p>The ID of the network interface.</p>
-   */
-  NetworkInterfaceId: string | undefined;
-
-  /**
-   * @public
-   * <p>The Amazon Web Services account ID.</p>
-   */
-  AwsAccountId?: string;
-
-  /**
-   * @public
-   * <p>The Amazon Web Service. Currently not supported.</p>
-   */
-  AwsService?: string;
-
-  /**
-   * @public
-   * <p>The type of permission to grant.</p>
-   */
-  Permission: InterfacePermissionType | undefined;
-
-  /**
-   * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   * 			and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   * 			Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-   */
-  DryRun?: boolean;
-}
-
-/**
- * @public
- * @enum
- */
-export const NetworkInterfacePermissionStateCode = {
-  granted: "granted",
-  pending: "pending",
-  revoked: "revoked",
-  revoking: "revoking",
-} as const;
-
-/**
- * @public
- */
-export type NetworkInterfacePermissionStateCode =
-  (typeof NetworkInterfacePermissionStateCode)[keyof typeof NetworkInterfacePermissionStateCode];
-
-/**
- * @public
- * <p>Describes the state of a network interface permission.</p>
- */
-export interface NetworkInterfacePermissionState {
-  /**
-   * @public
-   * <p>The state of the permission.</p>
-   */
-  State?: NetworkInterfacePermissionStateCode;
-
-  /**
-   * @public
-   * <p>A status message, if applicable.</p>
-   */
-  StatusMessage?: string;
-}
-
-/**
- * @public
- * <p>Describes a permission for a network interface.</p>
- */
-export interface NetworkInterfacePermission {
-  /**
-   * @public
-   * <p>The ID of the network interface permission.</p>
-   */
-  NetworkInterfacePermissionId?: string;
-
-  /**
-   * @public
-   * <p>The ID of the network interface.</p>
-   */
-  NetworkInterfaceId?: string;
-
-  /**
-   * @public
-   * <p>The Amazon Web Services account ID.</p>
-   */
-  AwsAccountId?: string;
-
-  /**
-   * @public
-   * <p>The Amazon Web Service.</p>
-   */
-  AwsService?: string;
-
-  /**
-   * @public
-   * <p>The type of permission.</p>
-   */
-  Permission?: InterfacePermissionType;
-
-  /**
-   * @public
-   * <p>Information about the state of the permission.</p>
-   */
-  PermissionState?: NetworkInterfacePermissionState;
-}
-
-/**
- * @public
- * <p>Contains the output of CreateNetworkInterfacePermission.</p>
- */
-export interface CreateNetworkInterfacePermissionResult {
-  /**
-   * @public
-   * <p>Information about the permission for the network interface.</p>
-   */
-  InterfacePermission?: NetworkInterfacePermission;
-}
-
 /**
  * @internal
  */
diff --git a/clients/client-ec2/src/models/models_2.ts b/clients/client-ec2/src/models/models_2.ts
index 367ca4ac8d101..2c43fdabf1784 100644
--- a/clients/client-ec2/src/models/models_2.ts
+++ b/clients/client-ec2/src/models/models_2.ts
@@ -3,12 +3,12 @@ import { SENSITIVE_STRING } from "@smithy/smithy-client";
 
 import {
   ApplianceModeSupportValue,
-  CarrierGateway,
   CurrencyCodeValues,
   DeviceTrustProviderType,
   DnsSupportValue,
   DynamicRoutingValue,
   InstanceEventWindowState,
+  Ipv4PrefixSpecification,
   Ipv6SupportValue,
   ReservedInstancesListing,
   RouteTableAssociationState,
@@ -30,12 +30,15 @@ import {
   VpcPeeringConnection,
 } from "./models_0";
 import {
+  CarrierGateway,
   ClientVpnEndpointStatus,
   ClientVpnRouteStatus,
   CoipCidr,
   CoipPool,
+  ConnectionTrackingConfiguration,
   Ec2InstanceConnectEndpoint,
   GatewayType,
+  GroupIdentifier,
   Ipam,
   IpamPool,
   IpamResourceDiscovery,
@@ -46,12 +49,405 @@ import {
   LocalGatewayRouteTableVirtualInterfaceGroupAssociation,
   LocalGatewayRouteTableVpcAssociation,
   ManagedPrefixList,
+  NetworkInterfaceAssociation,
+  NetworkInterfaceAttachment,
+  NetworkInterfaceIpv6Address,
+  NetworkInterfaceType,
   Subnet,
   Tenancy,
   VolumeType,
   Vpc,
 } from "./models_1";
 
+/**
+ * @public
+ * <p>Describes the IPv6 prefix.</p>
+ */
+export interface Ipv6PrefixSpecification {
+  /**
+   * @public
+   * <p>The IPv6 prefix.</p>
+   */
+  Ipv6Prefix?: string;
+}
+
+/**
+ * @public
+ * <p>Describes the private IPv4 address of a network interface.</p>
+ */
+export interface NetworkInterfacePrivateIpAddress {
+  /**
+   * @public
+   * <p>The association information for an Elastic IP address (IPv4) associated with the network interface.</p>
+   */
+  Association?: NetworkInterfaceAssociation;
+
+  /**
+   * @public
+   * <p>Indicates whether this IPv4 address is the primary private IPv4 address of the network interface.</p>
+   */
+  Primary?: boolean;
+
+  /**
+   * @public
+   * <p>The private DNS name.</p>
+   */
+  PrivateDnsName?: string;
+
+  /**
+   * @public
+   * <p>The private IPv4 address.</p>
+   */
+  PrivateIpAddress?: string;
+}
+
+/**
+ * @public
+ * @enum
+ */
+export const NetworkInterfaceStatus = {
+  associated: "associated",
+  attaching: "attaching",
+  available: "available",
+  detaching: "detaching",
+  in_use: "in-use",
+} as const;
+
+/**
+ * @public
+ */
+export type NetworkInterfaceStatus = (typeof NetworkInterfaceStatus)[keyof typeof NetworkInterfaceStatus];
+
+/**
+ * @public
+ * <p>Describes a network interface.</p>
+ */
+export interface NetworkInterface {
+  /**
+   * @public
+   * <p>The association information for an Elastic IP address (IPv4) associated with the network interface.</p>
+   */
+  Association?: NetworkInterfaceAssociation;
+
+  /**
+   * @public
+   * <p>The network interface attachment.</p>
+   */
+  Attachment?: NetworkInterfaceAttachment;
+
+  /**
+   * @public
+   * <p>The Availability Zone.</p>
+   */
+  AvailabilityZone?: string;
+
+  /**
+   * @public
+   * <p>A security group connection tracking configuration that enables you to set the timeout for connection tracking on an Elastic network interface. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-connection-tracking.html#connection-tracking-timeouts">Connection tracking timeouts</a> in the <i>Amazon Elastic Compute Cloud User Guide</i>.</p>
+   */
+  ConnectionTrackingConfiguration?: ConnectionTrackingConfiguration;
+
+  /**
+   * @public
+   * <p>A description.</p>
+   */
+  Description?: string;
+
+  /**
+   * @public
+   * <p>Any security groups for the network interface.</p>
+   */
+  Groups?: GroupIdentifier[];
+
+  /**
+   * @public
+   * <p>The type of network interface.</p>
+   */
+  InterfaceType?: NetworkInterfaceType;
+
+  /**
+   * @public
+   * <p>The IPv6 addresses associated with the network interface.</p>
+   */
+  Ipv6Addresses?: NetworkInterfaceIpv6Address[];
+
+  /**
+   * @public
+   * <p>The MAC address.</p>
+   */
+  MacAddress?: string;
+
+  /**
+   * @public
+   * <p>The ID of the network interface.</p>
+   */
+  NetworkInterfaceId?: string;
+
+  /**
+   * @public
+   * <p>The Amazon Resource Name (ARN) of the Outpost.</p>
+   */
+  OutpostArn?: string;
+
+  /**
+   * @public
+   * <p>The Amazon Web Services account ID of the owner of the network interface.</p>
+   */
+  OwnerId?: string;
+
+  /**
+   * @public
+   * <p>The private DNS name.</p>
+   */
+  PrivateDnsName?: string;
+
+  /**
+   * @public
+   * <p>The IPv4 address of the network interface within the subnet.</p>
+   */
+  PrivateIpAddress?: string;
+
+  /**
+   * @public
+   * <p>The private IPv4 addresses associated with the network interface.</p>
+   */
+  PrivateIpAddresses?: NetworkInterfacePrivateIpAddress[];
+
+  /**
+   * @public
+   * <p>The IPv4 prefixes that are assigned to the network interface.</p>
+   */
+  Ipv4Prefixes?: Ipv4PrefixSpecification[];
+
+  /**
+   * @public
+   * <p>The IPv6 prefixes that are assigned to the network interface.</p>
+   */
+  Ipv6Prefixes?: Ipv6PrefixSpecification[];
+
+  /**
+   * @public
+   * <p>The alias or Amazon Web Services account ID of the principal or service that created the network interface.</p>
+   */
+  RequesterId?: string;
+
+  /**
+   * @public
+   * <p>Indicates whether the network interface is being managed by Amazon Web Services.</p>
+   */
+  RequesterManaged?: boolean;
+
+  /**
+   * @public
+   * <p>Indicates whether source/destination checking is enabled.</p>
+   */
+  SourceDestCheck?: boolean;
+
+  /**
+   * @public
+   * <p>The status of the network interface.</p>
+   */
+  Status?: NetworkInterfaceStatus;
+
+  /**
+   * @public
+   * <p>The ID of the subnet.</p>
+   */
+  SubnetId?: string;
+
+  /**
+   * @public
+   * <p>Any tags assigned to the network interface.</p>
+   */
+  TagSet?: Tag[];
+
+  /**
+   * @public
+   * <p>The ID of the VPC.</p>
+   */
+  VpcId?: string;
+
+  /**
+   * @public
+   * <p>Indicates whether a network interface with an IPv6 address is unreachable from the
+   *             public internet. If the value is <code>true</code>, inbound traffic from the internet
+   *             is dropped and you cannot assign an elastic IP address to the network interface. The
+   *             network interface is reachable from peered VPCs and resources connected through a
+   *             transit gateway, including on-premises networks.</p>
+   */
+  DenyAllIgwTraffic?: boolean;
+
+  /**
+   * @public
+   * <p>Indicates whether this is an IPv6 only network interface.</p>
+   */
+  Ipv6Native?: boolean;
+
+  /**
+   * @public
+   * <p>The IPv6 globally unique address associated with the network interface.</p>
+   */
+  Ipv6Address?: string;
+}
+
+/**
+ * @public
+ */
+export interface CreateNetworkInterfaceResult {
+  /**
+   * @public
+   * <p>Information about the network interface.</p>
+   */
+  NetworkInterface?: NetworkInterface;
+
+  /**
+   * @public
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
+   */
+  ClientToken?: string;
+}
+
+/**
+ * @public
+ * @enum
+ */
+export const InterfacePermissionType = {
+  EIP_ASSOCIATE: "EIP-ASSOCIATE",
+  INSTANCE_ATTACH: "INSTANCE-ATTACH",
+} as const;
+
+/**
+ * @public
+ */
+export type InterfacePermissionType = (typeof InterfacePermissionType)[keyof typeof InterfacePermissionType];
+
+/**
+ * @public
+ * <p>Contains the parameters for CreateNetworkInterfacePermission.</p>
+ */
+export interface CreateNetworkInterfacePermissionRequest {
+  /**
+   * @public
+   * <p>The ID of the network interface.</p>
+   */
+  NetworkInterfaceId: string | undefined;
+
+  /**
+   * @public
+   * <p>The Amazon Web Services account ID.</p>
+   */
+  AwsAccountId?: string;
+
+  /**
+   * @public
+   * <p>The Amazon Web Service. Currently not supported.</p>
+   */
+  AwsService?: string;
+
+  /**
+   * @public
+   * <p>The type of permission to grant.</p>
+   */
+  Permission: InterfacePermissionType | undefined;
+
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   * 			and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   * 			Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
+}
+
+/**
+ * @public
+ * @enum
+ */
+export const NetworkInterfacePermissionStateCode = {
+  granted: "granted",
+  pending: "pending",
+  revoked: "revoked",
+  revoking: "revoking",
+} as const;
+
+/**
+ * @public
+ */
+export type NetworkInterfacePermissionStateCode =
+  (typeof NetworkInterfacePermissionStateCode)[keyof typeof NetworkInterfacePermissionStateCode];
+
+/**
+ * @public
+ * <p>Describes the state of a network interface permission.</p>
+ */
+export interface NetworkInterfacePermissionState {
+  /**
+   * @public
+   * <p>The state of the permission.</p>
+   */
+  State?: NetworkInterfacePermissionStateCode;
+
+  /**
+   * @public
+   * <p>A status message, if applicable.</p>
+   */
+  StatusMessage?: string;
+}
+
+/**
+ * @public
+ * <p>Describes a permission for a network interface.</p>
+ */
+export interface NetworkInterfacePermission {
+  /**
+   * @public
+   * <p>The ID of the network interface permission.</p>
+   */
+  NetworkInterfacePermissionId?: string;
+
+  /**
+   * @public
+   * <p>The ID of the network interface.</p>
+   */
+  NetworkInterfaceId?: string;
+
+  /**
+   * @public
+   * <p>The Amazon Web Services account ID.</p>
+   */
+  AwsAccountId?: string;
+
+  /**
+   * @public
+   * <p>The Amazon Web Service.</p>
+   */
+  AwsService?: string;
+
+  /**
+   * @public
+   * <p>The type of permission.</p>
+   */
+  Permission?: InterfacePermissionType;
+
+  /**
+   * @public
+   * <p>Information about the state of the permission.</p>
+   */
+  PermissionState?: NetworkInterfacePermissionState;
+}
+
+/**
+ * @public
+ * <p>Contains the output of CreateNetworkInterfacePermission.</p>
+ */
+export interface CreateNetworkInterfacePermissionResult {
+  /**
+   * @public
+   * <p>Information about the permission for the network interface.</p>
+   */
+  InterfacePermission?: NetworkInterfacePermission;
+}
+
 /**
  * @public
  * @enum
@@ -1670,9 +2066,8 @@ export interface CreateSubnetRequest {
 
   /**
    * @public
-   * <p>The IPv6 network range for the subnet, in CIDR notation. The subnet size must use a
-   *             /64 prefix length.</p>
-   *          <p>This parameter is required for an IPv6 only subnet.</p>
+   * <p>The IPv6 network range for the subnet, in CIDR notation. This parameter is required
+   *             for an IPv6 only subnet.</p>
    */
   Ipv6CidrBlock?: string;
 
@@ -1702,6 +2097,30 @@ export interface CreateSubnetRequest {
    * <p>Indicates whether to create an IPv6 only subnet.</p>
    */
   Ipv6Native?: boolean;
+
+  /**
+   * @public
+   * <p>An IPv4 IPAM pool ID for the subnet.</p>
+   */
+  Ipv4IpamPoolId?: string;
+
+  /**
+   * @public
+   * <p>An IPv4 netmask length for the subnet.</p>
+   */
+  Ipv4NetmaskLength?: number;
+
+  /**
+   * @public
+   * <p>An IPv6 IPAM pool ID for the subnet.</p>
+   */
+  Ipv6IpamPoolId?: string;
+
+  /**
+   * @public
+   * <p>An IPv6 netmask length for the subnet.</p>
+   */
+  Ipv6NetmaskLength?: number;
 }
 
 /**
@@ -8122,6 +8541,16 @@ export interface DeleteIpamPoolRequest {
    * <p>The ID of the pool to delete.</p>
    */
   IpamPoolId: string | undefined;
+
+  /**
+   * @public
+   * <p>Enables you to quickly delete an IPAM pool and all resources within that pool, including
+   *          provisioned CIDRs, allocations, and other pools.</p>
+   *          <important>
+   *             <p>You can only use this option to delete pools in the private scope or pools in the public scope with a source resource. A source resource is a resource used to provision CIDRs to a resource planning pool.</p>
+   *          </important>
+   */
+  Cascade?: boolean;
 }
 
 /**
@@ -8611,187 +9040,6 @@ export interface DeleteNatGatewayRequest {
   NatGatewayId: string | undefined;
 }
 
-/**
- * @public
- */
-export interface DeleteNatGatewayResult {
-  /**
-   * @public
-   * <p>The ID of the NAT gateway.</p>
-   */
-  NatGatewayId?: string;
-}
-
-/**
- * @public
- */
-export interface DeleteNetworkAclRequest {
-  /**
-   * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-   */
-  DryRun?: boolean;
-
-  /**
-   * @public
-   * <p>The ID of the network ACL.</p>
-   */
-  NetworkAclId: string | undefined;
-}
-
-/**
- * @public
- */
-export interface DeleteNetworkAclEntryRequest {
-  /**
-   * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-   */
-  DryRun?: boolean;
-
-  /**
-   * @public
-   * <p>Indicates whether the rule is an egress rule.</p>
-   */
-  Egress: boolean | undefined;
-
-  /**
-   * @public
-   * <p>The ID of the network ACL.</p>
-   */
-  NetworkAclId: string | undefined;
-
-  /**
-   * @public
-   * <p>The rule number of the entry to delete.</p>
-   */
-  RuleNumber: number | undefined;
-}
-
-/**
- * @public
- */
-export interface DeleteNetworkInsightsAccessScopeRequest {
-  /**
-   * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-   */
-  DryRun?: boolean;
-
-  /**
-   * @public
-   * <p>The ID of the Network Access Scope.</p>
-   */
-  NetworkInsightsAccessScopeId: string | undefined;
-}
-
-/**
- * @public
- */
-export interface DeleteNetworkInsightsAccessScopeResult {
-  /**
-   * @public
-   * <p>The ID of the Network Access Scope.</p>
-   */
-  NetworkInsightsAccessScopeId?: string;
-}
-
-/**
- * @public
- */
-export interface DeleteNetworkInsightsAccessScopeAnalysisRequest {
-  /**
-   * @public
-   * <p>The ID of the Network Access Scope analysis.</p>
-   */
-  NetworkInsightsAccessScopeAnalysisId: string | undefined;
-
-  /**
-   * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-   */
-  DryRun?: boolean;
-}
-
-/**
- * @public
- */
-export interface DeleteNetworkInsightsAccessScopeAnalysisResult {
-  /**
-   * @public
-   * <p>The ID of the Network Access Scope analysis.</p>
-   */
-  NetworkInsightsAccessScopeAnalysisId?: string;
-}
-
-/**
- * @public
- */
-export interface DeleteNetworkInsightsAnalysisRequest {
-  /**
-   * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-   */
-  DryRun?: boolean;
-
-  /**
-   * @public
-   * <p>The ID of the network insights analysis.</p>
-   */
-  NetworkInsightsAnalysisId: string | undefined;
-}
-
-/**
- * @public
- */
-export interface DeleteNetworkInsightsAnalysisResult {
-  /**
-   * @public
-   * <p>The ID of the network insights analysis.</p>
-   */
-  NetworkInsightsAnalysisId?: string;
-}
-
-/**
- * @public
- */
-export interface DeleteNetworkInsightsPathRequest {
-  /**
-   * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-   */
-  DryRun?: boolean;
-
-  /**
-   * @public
-   * <p>The ID of the path.</p>
-   */
-  NetworkInsightsPathId: string | undefined;
-}
-
-/**
- * @public
- */
-export interface DeleteNetworkInsightsPathResult {
-  /**
-   * @public
-   * <p>The ID of the path.</p>
-   */
-  NetworkInsightsPathId?: string;
-}
-
 /**
  * @internal
  */
diff --git a/clients/client-ec2/src/models/models_3.ts b/clients/client-ec2/src/models/models_3.ts
index 064dcd64641c8..be786ae79b1df 100644
--- a/clients/client-ec2/src/models/models_3.ts
+++ b/clients/client-ec2/src/models/models_3.ts
@@ -13,7 +13,6 @@ import {
   AllocationState,
   AllowsMultipleInstanceTypes,
   AssociationStatus,
-  AttachmentStatus,
   AutoPlacement,
   BundleTask,
   BundleTaskFilterSensitiveLog,
@@ -21,7 +20,6 @@ import {
   CapacityReservation,
   CapacityReservationFleetState,
   CapacityReservationTenancy,
-  CarrierGateway,
   ClientVpnAuthorizationRuleStatus,
   CurrencyCodeValues,
   FleetCapacityReservation,
@@ -41,6 +39,7 @@ import {
 import {
   AttributeValue,
   BlockDeviceMapping,
+  CarrierGateway,
   ClientVpnAuthenticationType,
   ClientVpnEndpointStatus,
   ClientVpnRouteStatus,
@@ -50,7 +49,6 @@ import {
   DestinationFileFormat,
   DhcpOptions,
   DiskImageFormat,
-  Ec2InstanceConnectEndpoint,
   EgressOnlyInternetGateway,
   ExportTask,
   FleetCapacityReservationUsageStrategy,
@@ -88,6 +86,187 @@ import {
   VerifiedAccessGroup,
 } from "./models_2";
 
+/**
+ * @public
+ */
+export interface DeleteNatGatewayResult {
+  /**
+   * @public
+   * <p>The ID of the NAT gateway.</p>
+   */
+  NatGatewayId?: string;
+}
+
+/**
+ * @public
+ */
+export interface DeleteNetworkAclRequest {
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
+
+  /**
+   * @public
+   * <p>The ID of the network ACL.</p>
+   */
+  NetworkAclId: string | undefined;
+}
+
+/**
+ * @public
+ */
+export interface DeleteNetworkAclEntryRequest {
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
+
+  /**
+   * @public
+   * <p>Indicates whether the rule is an egress rule.</p>
+   */
+  Egress: boolean | undefined;
+
+  /**
+   * @public
+   * <p>The ID of the network ACL.</p>
+   */
+  NetworkAclId: string | undefined;
+
+  /**
+   * @public
+   * <p>The rule number of the entry to delete.</p>
+   */
+  RuleNumber: number | undefined;
+}
+
+/**
+ * @public
+ */
+export interface DeleteNetworkInsightsAccessScopeRequest {
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
+
+  /**
+   * @public
+   * <p>The ID of the Network Access Scope.</p>
+   */
+  NetworkInsightsAccessScopeId: string | undefined;
+}
+
+/**
+ * @public
+ */
+export interface DeleteNetworkInsightsAccessScopeResult {
+  /**
+   * @public
+   * <p>The ID of the Network Access Scope.</p>
+   */
+  NetworkInsightsAccessScopeId?: string;
+}
+
+/**
+ * @public
+ */
+export interface DeleteNetworkInsightsAccessScopeAnalysisRequest {
+  /**
+   * @public
+   * <p>The ID of the Network Access Scope analysis.</p>
+   */
+  NetworkInsightsAccessScopeAnalysisId: string | undefined;
+
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
+}
+
+/**
+ * @public
+ */
+export interface DeleteNetworkInsightsAccessScopeAnalysisResult {
+  /**
+   * @public
+   * <p>The ID of the Network Access Scope analysis.</p>
+   */
+  NetworkInsightsAccessScopeAnalysisId?: string;
+}
+
+/**
+ * @public
+ */
+export interface DeleteNetworkInsightsAnalysisRequest {
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
+
+  /**
+   * @public
+   * <p>The ID of the network insights analysis.</p>
+   */
+  NetworkInsightsAnalysisId: string | undefined;
+}
+
+/**
+ * @public
+ */
+export interface DeleteNetworkInsightsAnalysisResult {
+  /**
+   * @public
+   * <p>The ID of the network insights analysis.</p>
+   */
+  NetworkInsightsAnalysisId?: string;
+}
+
+/**
+ * @public
+ */
+export interface DeleteNetworkInsightsPathRequest {
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
+
+  /**
+   * @public
+   * <p>The ID of the path.</p>
+   */
+  NetworkInsightsPathId: string | undefined;
+}
+
+/**
+ * @public
+ */
+export interface DeleteNetworkInsightsPathResult {
+  /**
+   * @public
+   * <p>The ID of the path.</p>
+   */
+  NetworkInsightsPathId?: string;
+}
+
 /**
  * @public
  * <p>Contains the parameters for DeleteNetworkInterface.</p>
@@ -1356,6 +1535,90 @@ export interface DeprovisionByoipCidrResult {
   ByoipCidr?: ByoipCidr;
 }
 
+/**
+ * @public
+ */
+export interface DeprovisionIpamByoasnRequest {
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
+
+  /**
+   * @public
+   * <p>The IPAM ID.</p>
+   */
+  IpamId: string | undefined;
+
+  /**
+   * @public
+   * <p>An ASN.</p>
+   */
+  Asn: string | undefined;
+}
+
+/**
+ * @public
+ * @enum
+ */
+export const AsnState = {
+  deprovisioned: "deprovisioned",
+  failed_deprovision: "failed-deprovision",
+  failed_provision: "failed-provision",
+  pending_deprovision: "pending-deprovision",
+  pending_provision: "pending-provision",
+  provisioned: "provisioned",
+} as const;
+
+/**
+ * @public
+ */
+export type AsnState = (typeof AsnState)[keyof typeof AsnState];
+
+/**
+ * @public
+ * <p>The Autonomous System Number (ASN) and BYOIP CIDR association.</p>
+ */
+export interface Byoasn {
+  /**
+   * @public
+   * <p>A public 2-byte or 4-byte ASN.</p>
+   */
+  Asn?: string;
+
+  /**
+   * @public
+   * <p>An IPAM ID.</p>
+   */
+  IpamId?: string;
+
+  /**
+   * @public
+   * <p>The status message.</p>
+   */
+  StatusMessage?: string;
+
+  /**
+   * @public
+   * <p>The provisioning state of the BYOASN.</p>
+   */
+  State?: AsnState;
+}
+
+/**
+ * @public
+ */
+export interface DeprovisionIpamByoasnResult {
+  /**
+   * @public
+   * <p>An ASN and BYOIP CIDR association.</p>
+   */
+  Byoasn?: Byoasn;
+}
+
 /**
  * @public
  */
@@ -9096,580 +9359,32 @@ export interface DescribeImportSnapshotTasksRequest {
 }
 
 /**
- * @public
- * <p>Details about the import snapshot task.</p>
+ * @internal
  */
-export interface SnapshotTaskDetail {
-  /**
-   * @public
-   * <p>The description of the snapshot.</p>
-   */
-  Description?: string;
-
-  /**
-   * @public
-   * <p>The size of the disk in the snapshot, in GiB.</p>
-   */
-  DiskImageSize?: number;
+export const DeleteVerifiedAccessTrustProviderResultFilterSensitiveLog = (
+  obj: DeleteVerifiedAccessTrustProviderResult
+): any => ({
+  ...obj,
+  ...(obj.VerifiedAccessTrustProvider && {
+    VerifiedAccessTrustProvider: VerifiedAccessTrustProviderFilterSensitiveLog(obj.VerifiedAccessTrustProvider),
+  }),
+});
 
-  /**
-   * @public
-   * <p>Indicates whether the snapshot is encrypted.</p>
-   */
-  Encrypted?: boolean;
+/**
+ * @internal
+ */
+export const DescribeBundleTasksResultFilterSensitiveLog = (obj: DescribeBundleTasksResult): any => ({
+  ...obj,
+  ...(obj.BundleTasks && { BundleTasks: obj.BundleTasks.map((item) => BundleTaskFilterSensitiveLog(item)) }),
+});
 
-  /**
-   * @public
-   * <p>The format of the disk image from which the snapshot is created.</p>
-   */
-  Format?: string;
-
-  /**
-   * @public
-   * <p>The identifier for the KMS key that was used to create the encrypted snapshot.</p>
-   */
-  KmsKeyId?: string;
-
-  /**
-   * @public
-   * <p>The percentage of completion for the import snapshot task.</p>
-   */
-  Progress?: string;
-
-  /**
-   * @public
-   * <p>The snapshot ID of the disk being imported.</p>
-   */
-  SnapshotId?: string;
-
-  /**
-   * @public
-   * <p>A brief status for the import snapshot task.</p>
-   */
-  Status?: string;
-
-  /**
-   * @public
-   * <p>A detailed status message for the import snapshot task.</p>
-   */
-  StatusMessage?: string;
-
-  /**
-   * @public
-   * <p>The URL of the disk image from which the snapshot is created.</p>
-   */
-  Url?: string;
-
-  /**
-   * @public
-   * <p>The Amazon S3 bucket for the disk image.</p>
-   */
-  UserBucket?: UserBucketDetails;
-}
-
-/**
- * @public
- * <p>Describes an import snapshot task.</p>
- */
-export interface ImportSnapshotTask {
-  /**
-   * @public
-   * <p>A description of the import snapshot task.</p>
-   */
-  Description?: string;
-
-  /**
-   * @public
-   * <p>The ID of the import snapshot task.</p>
-   */
-  ImportTaskId?: string;
-
-  /**
-   * @public
-   * <p>Describes an import snapshot task.</p>
-   */
-  SnapshotTaskDetail?: SnapshotTaskDetail;
-
-  /**
-   * @public
-   * <p>The tags for the import snapshot task.</p>
-   */
-  Tags?: Tag[];
-}
-
-/**
- * @public
- */
-export interface DescribeImportSnapshotTasksResult {
-  /**
-   * @public
-   * <p>A list of zero or more import snapshot tasks that are currently active or were completed or canceled in the
-   *    previous 7 days.</p>
-   */
-  ImportSnapshotTasks?: ImportSnapshotTask[];
-
-  /**
-   * @public
-   * <p>The token to use to get the next page of results. This value is <code>null</code> when there are no more results
-   *    to return.</p>
-   */
-  NextToken?: string;
-}
-
-/**
- * @public
- * @enum
- */
-export const InstanceAttributeName = {
-  blockDeviceMapping: "blockDeviceMapping",
-  disableApiStop: "disableApiStop",
-  disableApiTermination: "disableApiTermination",
-  ebsOptimized: "ebsOptimized",
-  enaSupport: "enaSupport",
-  enclaveOptions: "enclaveOptions",
-  groupSet: "groupSet",
-  instanceInitiatedShutdownBehavior: "instanceInitiatedShutdownBehavior",
-  instanceType: "instanceType",
-  kernel: "kernel",
-  productCodes: "productCodes",
-  ramdisk: "ramdisk",
-  rootDeviceName: "rootDeviceName",
-  sourceDestCheck: "sourceDestCheck",
-  sriovNetSupport: "sriovNetSupport",
-  userData: "userData",
-} as const;
-
-/**
- * @public
- */
-export type InstanceAttributeName = (typeof InstanceAttributeName)[keyof typeof InstanceAttributeName];
-
-/**
- * @public
- */
-export interface DescribeInstanceAttributeRequest {
-  /**
-   * @public
-   * <p>The instance attribute.</p>
-   *          <p>Note: The <code>enaSupport</code> attribute is not supported at this time.</p>
-   */
-  Attribute: InstanceAttributeName | undefined;
-
-  /**
-   * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-   */
-  DryRun?: boolean;
-
-  /**
-   * @public
-   * <p>The ID of the instance.</p>
-   */
-  InstanceId: string | undefined;
-}
-
-/**
- * @public
- * <p>Describes a parameter used to set up an EBS volume in a block device mapping.</p>
- */
-export interface EbsInstanceBlockDevice {
-  /**
-   * @public
-   * <p>The time stamp when the attachment initiated.</p>
-   */
-  AttachTime?: Date;
-
-  /**
-   * @public
-   * <p>Indicates whether the volume is deleted on instance termination.</p>
-   */
-  DeleteOnTermination?: boolean;
-
-  /**
-   * @public
-   * <p>The attachment state.</p>
-   */
-  Status?: AttachmentStatus;
-
-  /**
-   * @public
-   * <p>The ID of the EBS volume.</p>
-   */
-  VolumeId?: string;
-}
-
-/**
- * @public
- * <p>Describes a block device mapping.</p>
- */
-export interface InstanceBlockDeviceMapping {
-  /**
-   * @public
-   * <p>The device name (for example, <code>/dev/sdh</code> or <code>xvdh</code>).</p>
-   */
-  DeviceName?: string;
-
-  /**
-   * @public
-   * <p>Parameters used to automatically set up EBS volumes when the instance is
-   *             launched.</p>
-   */
-  Ebs?: EbsInstanceBlockDevice;
-}
-
-/**
- * @public
- * <p>Describes a value for a resource attribute that is a Boolean value.</p>
- */
-export interface AttributeBooleanValue {
-  /**
-   * @public
-   * <p>The attribute value. The valid values are <code>true</code> or <code>false</code>.</p>
-   */
-  Value?: boolean;
-}
-
-/**
- * @public
- * <p>Indicates whether the instance is enabled for Amazon Web Services Nitro
- *             Enclaves.</p>
- */
-export interface EnclaveOptions {
-  /**
-   * @public
-   * <p>If this parameter is set to <code>true</code>, the instance is enabled for Amazon Web Services Nitro Enclaves; otherwise, it is not enabled for Amazon Web Services Nitro
-   *             Enclaves.</p>
-   */
-  Enabled?: boolean;
-}
-
-/**
- * @public
- * <p>Describes an instance attribute.</p>
- */
-export interface InstanceAttribute {
-  /**
-   * @public
-   * <p>The security groups associated with the instance.</p>
-   */
-  Groups?: GroupIdentifier[];
-
-  /**
-   * @public
-   * <p>The block device mapping of the instance.</p>
-   */
-  BlockDeviceMappings?: InstanceBlockDeviceMapping[];
-
-  /**
-   * @public
-   * <p>If the value is <code>true</code>, you can't terminate the instance through the Amazon
-   *             EC2 console, CLI, or API; otherwise, you can.</p>
-   */
-  DisableApiTermination?: AttributeBooleanValue;
-
-  /**
-   * @public
-   * <p>Indicates whether enhanced networking with ENA is enabled.</p>
-   */
-  EnaSupport?: AttributeBooleanValue;
-
-  /**
-   * @public
-   * <p>To enable the instance for Amazon Web Services Nitro Enclaves, set this parameter to
-   *                 <code>true</code>; otherwise, set it to <code>false</code>.</p>
-   */
-  EnclaveOptions?: EnclaveOptions;
-
-  /**
-   * @public
-   * <p>Indicates whether the instance is optimized for Amazon EBS I/O.</p>
-   */
-  EbsOptimized?: AttributeBooleanValue;
-
-  /**
-   * @public
-   * <p>The ID of the instance.</p>
-   */
-  InstanceId?: string;
-
-  /**
-   * @public
-   * <p>Indicates whether an instance stops or terminates when you initiate shutdown from the
-   *             instance (using the operating system command for system shutdown).</p>
-   */
-  InstanceInitiatedShutdownBehavior?: AttributeValue;
-
-  /**
-   * @public
-   * <p>The instance type.</p>
-   */
-  InstanceType?: AttributeValue;
-
-  /**
-   * @public
-   * <p>The kernel ID.</p>
-   */
-  KernelId?: AttributeValue;
-
-  /**
-   * @public
-   * <p>A list of product codes.</p>
-   */
-  ProductCodes?: ProductCode[];
-
-  /**
-   * @public
-   * <p>The RAM disk ID.</p>
-   */
-  RamdiskId?: AttributeValue;
-
-  /**
-   * @public
-   * <p>The device name of the root device volume (for example,
-   *             <code>/dev/sda1</code>).</p>
-   */
-  RootDeviceName?: AttributeValue;
-
-  /**
-   * @public
-   * <p>Enable or disable source/destination checks, which ensure that the instance is either
-   *             the source or the destination of any traffic that it receives. If the value is
-   *                 <code>true</code>, source/destination checks are enabled; otherwise, they are
-   *             disabled. The default value is <code>true</code>. You must disable source/destination
-   *             checks if the instance runs services such as network address translation, routing, or
-   *             firewalls.</p>
-   */
-  SourceDestCheck?: AttributeBooleanValue;
-
-  /**
-   * @public
-   * <p>Indicates whether enhanced networking with the Intel 82599 Virtual Function interface
-   *             is enabled.</p>
-   */
-  SriovNetSupport?: AttributeValue;
-
-  /**
-   * @public
-   * <p>The user data.</p>
-   */
-  UserData?: AttributeValue;
-
-  /**
-   * @public
-   * <p>To enable the instance for Amazon Web Services Stop Protection, set this parameter to
-   *                 <code>true</code>; otherwise, set it to <code>false</code>.</p>
-   */
-  DisableApiStop?: AttributeBooleanValue;
-}
-
-/**
- * @public
- */
-export interface DescribeInstanceConnectEndpointsRequest {
-  /**
-   * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *             and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *             Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-   */
-  DryRun?: boolean;
-
-  /**
-   * @public
-   * <p>The maximum number of items to return for this request.
-   *          To get the next page of items, make another request with the token returned in the output.
-   * 	        For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
-   */
-  MaxResults?: number;
-
-  /**
-   * @public
-   * <p>The token returned from a previous paginated request. Pagination continues from the end of the items returned by the previous request.</p>
-   */
-  NextToken?: string;
-
-  /**
-   * @public
-   * <p>One or more filters.</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>instance-connect-endpoint-id</code> - The ID of the EC2 Instance Connect Endpoint.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>state</code> - The state of the EC2 Instance Connect Endpoint (<code>create-in-progress</code> | <code>create-complete</code> | <code>create-failed</code> |
-   *                     <code>delete-in-progress</code> | <code>delete-complete</code> | <code>delete-failed</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>subnet-id</code> - The ID of the subnet in which the EC2 Instance
-   *                     Connect Endpoint was created.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>tag</code>:<key> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value.
-   *     For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>tag-key</code> - The key of a tag assigned to the resource. Use this filter to find all resources assigned a tag with a specific key, regardless of the tag value.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>tag-value</code> - The value of a tag assigned to the resource. Use this filter to find all resources
-   *                     that have a tag with a specific value, regardless of tag key.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>vpc-id</code> - The ID of the VPC in which the EC2 Instance Connect
-   *                     Endpoint was created.</p>
-   *             </li>
-   *          </ul>
-   */
-  Filters?: Filter[];
-
-  /**
-   * @public
-   * <p>One or more EC2 Instance Connect Endpoint IDs.</p>
-   */
-  InstanceConnectEndpointIds?: string[];
-}
-
-/**
- * @public
- */
-export interface DescribeInstanceConnectEndpointsResult {
-  /**
-   * @public
-   * <p>Information about the EC2 Instance Connect Endpoints.</p>
-   */
-  InstanceConnectEndpoints?: Ec2InstanceConnectEndpoint[];
-
-  /**
-   * @public
-   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there
-   *          are no more items to return.</p>
-   */
-  NextToken?: string;
-}
-
-/**
- * @public
- */
-export interface DescribeInstanceCreditSpecificationsRequest {
-  /**
-   * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-   */
-  DryRun?: boolean;
-
-  /**
-   * @public
-   * <p>The filters.</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>instance-id</code> - The ID of the instance.</p>
-   *             </li>
-   *          </ul>
-   */
-  Filters?: Filter[];
-
-  /**
-   * @public
-   * <p>The instance IDs.</p>
-   *          <p>Default: Describes all your instances.</p>
-   *          <p>Constraints: Maximum 1000 explicitly specified instance IDs.</p>
-   */
-  InstanceIds?: string[];
-
-  /**
-   * @public
-   * <p>The maximum number of items to return for this request.
-   *          To get the next page of items, make another request with the token returned in the output.
-   * 	        For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
-   *          <p>You cannot specify this parameter and the instance IDs
-   *             parameter in the same call.</p>
-   */
-  MaxResults?: number;
-
-  /**
-   * @public
-   * <p>The token returned from a previous paginated request. Pagination continues from the end of the items returned by the previous request.</p>
-   */
-  NextToken?: string;
-}
-
-/**
- * @public
- * <p>Describes the credit option for CPU usage of a burstable performance instance. </p>
- */
-export interface InstanceCreditSpecification {
-  /**
-   * @public
-   * <p>The ID of the instance.</p>
-   */
-  InstanceId?: string;
-
-  /**
-   * @public
-   * <p>The credit option for CPU usage of the instance.</p>
-   *          <p>Valid values: <code>standard</code> | <code>unlimited</code>
-   *          </p>
-   */
-  CpuCredits?: string;
-}
-
-/**
- * @public
- */
-export interface DescribeInstanceCreditSpecificationsResult {
-  /**
-   * @public
-   * <p>Information about the credit option for CPU usage of an instance.</p>
-   */
-  InstanceCreditSpecifications?: InstanceCreditSpecification[];
-
-  /**
-   * @public
-   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there
-   *          are no more items to return.</p>
-   */
-  NextToken?: string;
-}
-
-/**
- * @internal
- */
-export const DeleteVerifiedAccessTrustProviderResultFilterSensitiveLog = (
-  obj: DeleteVerifiedAccessTrustProviderResult
-): any => ({
-  ...obj,
-  ...(obj.VerifiedAccessTrustProvider && {
-    VerifiedAccessTrustProvider: VerifiedAccessTrustProviderFilterSensitiveLog(obj.VerifiedAccessTrustProvider),
-  }),
-});
-
-/**
- * @internal
- */
-export const DescribeBundleTasksResultFilterSensitiveLog = (obj: DescribeBundleTasksResult): any => ({
-  ...obj,
-  ...(obj.BundleTasks && { BundleTasks: obj.BundleTasks.map((item) => BundleTaskFilterSensitiveLog(item)) }),
-});
-
-/**
- * @internal
- */
-export const DiskImageDescriptionFilterSensitiveLog = (obj: DiskImageDescription): any => ({
-  ...obj,
-  ...(obj.ImportManifestUrl && { ImportManifestUrl: SENSITIVE_STRING }),
-});
+/**
+ * @internal
+ */
+export const DiskImageDescriptionFilterSensitiveLog = (obj: DiskImageDescription): any => ({
+  ...obj,
+  ...(obj.ImportManifestUrl && { ImportManifestUrl: SENSITIVE_STRING }),
+});
 
 /**
  * @internal
@@ -9738,29 +9453,3 @@ export const ImportImageTaskFilterSensitiveLog = (obj: ImportImageTask): any =>
 export const DescribeImportImageTasksResultFilterSensitiveLog = (obj: DescribeImportImageTasksResult): any => ({
   ...obj,
 });
-
-/**
- * @internal
- */
-export const SnapshotTaskDetailFilterSensitiveLog = (obj: SnapshotTaskDetail): any => ({
-  ...obj,
-  ...(obj.Url && { Url: SENSITIVE_STRING }),
-});
-
-/**
- * @internal
- */
-export const ImportSnapshotTaskFilterSensitiveLog = (obj: ImportSnapshotTask): any => ({
-  ...obj,
-  ...(obj.SnapshotTaskDetail && { SnapshotTaskDetail: SnapshotTaskDetailFilterSensitiveLog(obj.SnapshotTaskDetail) }),
-});
-
-/**
- * @internal
- */
-export const DescribeImportSnapshotTasksResultFilterSensitiveLog = (obj: DescribeImportSnapshotTasksResult): any => ({
-  ...obj,
-  ...(obj.ImportSnapshotTasks && {
-    ImportSnapshotTasks: obj.ImportSnapshotTasks.map((item) => ImportSnapshotTaskFilterSensitiveLog(item)),
-  }),
-});
diff --git a/clients/client-ec2/src/models/models_4.ts b/clients/client-ec2/src/models/models_4.ts
index e18eef3b4a20d..564a16f447d87 100644
--- a/clients/client-ec2/src/models/models_4.ts
+++ b/clients/client-ec2/src/models/models_4.ts
@@ -22,9 +22,6 @@ import {
   SecurityGroupRule,
   Tag,
   TagSpecification,
-  TransitGatewayAssociationState,
-  TransitGatewayAttachmentResourceType,
-  TransitGatewayAttachmentState,
   UserIdGroupPair,
 } from "./models_0";
 import {
@@ -33,6 +30,8 @@ import {
   BlockDeviceMapping,
   CapacityReservationPreference,
   CapacityReservationTargetResponse,
+  ConnectionTrackingSpecificationRequest,
+  Ec2InstanceConnectEndpoint,
   EnaSrdSpecificationRequest,
   FleetLaunchTemplateSpecification,
   FleetType,
@@ -60,10 +59,7 @@ import {
   NetworkAcl,
   NetworkInsightsAccessScope,
   NetworkInsightsPath,
-  NetworkInterface,
   NetworkInterfaceAttachment,
-  NetworkInterfacePermission,
-  NetworkInterfaceStatus,
   Placement,
   PlatformValues,
   PrivateIpAddressSpecification,
@@ -74,6 +70,9 @@ import {
   Tenancy,
 } from "./models_1";
 import {
+  NetworkInterface,
+  NetworkInterfacePermission,
+  NetworkInterfaceStatus,
   PlacementGroup,
   ReplaceRootVolumeTask,
   RouteTable,
@@ -82,58 +81,183 @@ import {
   SpotDatafeedSubscription,
   SpotInstanceStateFault,
   StorageTier,
-  TrafficMirrorFilter,
-  TrafficMirrorSession,
-  TrafficMirrorTarget,
-  TransitGatewayConnect,
-  TransitGatewayConnectPeer,
 } from "./models_2";
 import {
   ArchitectureValues,
-  AttributeBooleanValue,
   BootModeValues,
+  Byoasn,
   DeviceType,
-  EnclaveOptions,
   EventInformation,
   Filter,
   HypervisorType,
   IdFormat,
-  InstanceBlockDeviceMapping,
   InstanceTagNotificationAttribute,
   PermissionGroup,
   ProductCode,
+  UserBucketDetails,
   VirtualizationType,
 } from "./models_3";
 
 /**
  * @public
+ * <p>Details about the import snapshot task.</p>
  */
-export interface DescribeInstanceEventNotificationAttributesRequest {
+export interface SnapshotTaskDetail {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The description of the snapshot.</p>
    */
-  DryRun?: boolean;
+  Description?: string;
+
+  /**
+   * @public
+   * <p>The size of the disk in the snapshot, in GiB.</p>
+   */
+  DiskImageSize?: number;
+
+  /**
+   * @public
+   * <p>Indicates whether the snapshot is encrypted.</p>
+   */
+  Encrypted?: boolean;
+
+  /**
+   * @public
+   * <p>The format of the disk image from which the snapshot is created.</p>
+   */
+  Format?: string;
+
+  /**
+   * @public
+   * <p>The identifier for the KMS key that was used to create the encrypted snapshot.</p>
+   */
+  KmsKeyId?: string;
+
+  /**
+   * @public
+   * <p>The percentage of completion for the import snapshot task.</p>
+   */
+  Progress?: string;
+
+  /**
+   * @public
+   * <p>The snapshot ID of the disk being imported.</p>
+   */
+  SnapshotId?: string;
+
+  /**
+   * @public
+   * <p>A brief status for the import snapshot task.</p>
+   */
+  Status?: string;
+
+  /**
+   * @public
+   * <p>A detailed status message for the import snapshot task.</p>
+   */
+  StatusMessage?: string;
+
+  /**
+   * @public
+   * <p>The URL of the disk image from which the snapshot is created.</p>
+   */
+  Url?: string;
+
+  /**
+   * @public
+   * <p>The Amazon S3 bucket for the disk image.</p>
+   */
+  UserBucket?: UserBucketDetails;
 }
 
 /**
  * @public
+ * <p>Describes an import snapshot task.</p>
  */
-export interface DescribeInstanceEventNotificationAttributesResult {
+export interface ImportSnapshotTask {
   /**
    * @public
-   * <p>Information about the registered tag keys.</p>
+   * <p>A description of the import snapshot task.</p>
    */
-  InstanceTagAttribute?: InstanceTagNotificationAttribute;
+  Description?: string;
+
+  /**
+   * @public
+   * <p>The ID of the import snapshot task.</p>
+   */
+  ImportTaskId?: string;
+
+  /**
+   * @public
+   * <p>Describes an import snapshot task.</p>
+   */
+  SnapshotTaskDetail?: SnapshotTaskDetail;
+
+  /**
+   * @public
+   * <p>The tags for the import snapshot task.</p>
+   */
+  Tags?: Tag[];
 }
 
 /**
  * @public
- * <para>Describe instance event windows by InstanceEventWindow.</para>
  */
-export interface DescribeInstanceEventWindowsRequest {
+export interface DescribeImportSnapshotTasksResult {
+  /**
+   * @public
+   * <p>A list of zero or more import snapshot tasks that are currently active or were completed or canceled in the
+   *    previous 7 days.</p>
+   */
+  ImportSnapshotTasks?: ImportSnapshotTask[];
+
+  /**
+   * @public
+   * <p>The token to use to get the next page of results. This value is <code>null</code> when there are no more results
+   *    to return.</p>
+   */
+  NextToken?: string;
+}
+
+/**
+ * @public
+ * @enum
+ */
+export const InstanceAttributeName = {
+  blockDeviceMapping: "blockDeviceMapping",
+  disableApiStop: "disableApiStop",
+  disableApiTermination: "disableApiTermination",
+  ebsOptimized: "ebsOptimized",
+  enaSupport: "enaSupport",
+  enclaveOptions: "enclaveOptions",
+  groupSet: "groupSet",
+  instanceInitiatedShutdownBehavior: "instanceInitiatedShutdownBehavior",
+  instanceType: "instanceType",
+  kernel: "kernel",
+  productCodes: "productCodes",
+  ramdisk: "ramdisk",
+  rootDeviceName: "rootDeviceName",
+  sourceDestCheck: "sourceDestCheck",
+  sriovNetSupport: "sriovNetSupport",
+  userData: "userData",
+} as const;
+
+/**
+ * @public
+ */
+export type InstanceAttributeName = (typeof InstanceAttributeName)[keyof typeof InstanceAttributeName];
+
+/**
+ * @public
+ */
+export interface DescribeInstanceAttributeRequest {
+  /**
+   * @public
+   * <p>The instance attribute.</p>
+   *          <p>Note: The <code>enaSupport</code> attribute is not supported at this time.</p>
+   */
+  Attribute: InstanceAttributeName | undefined;
+
   /**
    * @public
    * <p>Checks whether you have the required permissions for the action, without actually making the request,
@@ -144,416 +268,833 @@ export interface DescribeInstanceEventWindowsRequest {
 
   /**
    * @public
-   * <p>The IDs of the event windows.</p>
+   * <p>The ID of the instance.</p>
    */
-  InstanceEventWindowIds?: string[];
+  InstanceId: string | undefined;
+}
 
+/**
+ * @public
+ * <p>Describes a parameter used to set up an EBS volume in a block device mapping.</p>
+ */
+export interface EbsInstanceBlockDevice {
   /**
    * @public
-   * <p>One or more filters.</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>dedicated-host-id</code> - The event windows associated with the specified
-   *             Dedicated Host ID.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>event-window-name</code> - The event windows associated with the specified
-   *             names. </p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>instance-id</code> - The event windows associated with the specified instance
-   *                ID.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>instance-tag</code> - The event windows associated with the specified tag and
-   *                value.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>instance-tag-key</code> - The event windows associated with the specified tag
-   *                key, regardless of the value.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>instance-tag-value</code> - The event windows associated with the specified tag
-   *                value, regardless of the key.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>tag:<key></code> - The key/value combination of a tag assigned to the
-   *                event window. Use the tag key in the filter name and the tag value as the filter
-   *                value. For example, to find all resources that have a tag with the key
-   *                   <code>Owner</code> and the value <code>CMX</code>, specify <code>tag:Owner</code>
-   *                for the filter name and <code>CMX</code> for the filter value. </p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>tag-key</code> - The key of a tag assigned to the event window. Use this filter
-   *                to find all event windows that have a tag with a specific key, regardless of the tag
-   *                value. </p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>tag-value</code> - The value of a tag assigned to the event window. Use this
-   *                filter to find all event windows that have a tag with a specific value, regardless of
-   *                the tag key. </p>
-   *             </li>
-   *          </ul>
+   * <p>The time stamp when the attachment initiated.</p>
    */
-  Filters?: Filter[];
+  AttachTime?: Date;
 
   /**
    * @public
-   * <p>The maximum number of results to return in a single call. To retrieve the remaining
-   *          results, make another call with the returned <code>NextToken</code> value. This value can
-   *          be between 20 and 500. You cannot specify this parameter and the event window IDs parameter
-   *          in the same call.</p>
+   * <p>Indicates whether the volume is deleted on instance termination.</p>
    */
-  MaxResults?: number;
+  DeleteOnTermination?: boolean;
 
   /**
    * @public
-   * <p>The token to request the next page of results.</p>
+   * <p>The attachment state.</p>
    */
-  NextToken?: string;
+  Status?: AttachmentStatus;
+
+  /**
+   * @public
+   * <p>The ID of the EBS volume.</p>
+   */
+  VolumeId?: string;
 }
 
 /**
  * @public
+ * <p>Describes a block device mapping.</p>
  */
-export interface DescribeInstanceEventWindowsResult {
+export interface InstanceBlockDeviceMapping {
   /**
    * @public
-   * <p>Information about the event windows.</p>
+   * <p>The device name (for example, <code>/dev/sdh</code> or <code>xvdh</code>).</p>
    */
-  InstanceEventWindows?: InstanceEventWindow[];
+  DeviceName?: string;
 
   /**
    * @public
-   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return. </p>
+   * <p>Parameters used to automatically set up EBS volumes when the instance is
+   *             launched.</p>
    */
-  NextToken?: string;
+  Ebs?: EbsInstanceBlockDevice;
 }
 
 /**
  * @public
+ * <p>Describes a value for a resource attribute that is a Boolean value.</p>
  */
-export interface DescribeInstancesRequest {
+export interface AttributeBooleanValue {
   /**
    * @public
-   * <p>The filters.</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>affinity</code> - The affinity setting for an instance running on a
-   *                     Dedicated Host (<code>default</code> | <code>host</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>architecture</code> - The instance architecture (<code>i386</code> |
-   *                         <code>x86_64</code> | <code>arm64</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>availability-zone</code> - The Availability Zone of the instance.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>block-device-mapping.attach-time</code> - The attach time for an EBS
-   *                     volume mapped to the instance, for example,
-   *                         <code>2022-09-15T17:15:20.000Z</code>.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>block-device-mapping.delete-on-termination</code> - A Boolean that
-   *                     indicates whether the EBS volume is deleted on instance termination.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>block-device-mapping.device-name</code> - The device name specified in
-   *                     the block device mapping (for example, <code>/dev/sdh</code> or
-   *                         <code>xvdh</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>block-device-mapping.status</code> - The status for the EBS volume
-   *                         (<code>attaching</code> | <code>attached</code> | <code>detaching</code> |
-   *                         <code>detached</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>block-device-mapping.volume-id</code> - The volume ID of the EBS
-   *                     volume.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>boot-mode</code> - The boot mode that was specified by the AMI
-   *                         (<code>legacy-bios</code> | <code>uefi</code> |
-   *                     <code>uefi-preferred</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>capacity-reservation-id</code> - The ID of the Capacity Reservation into which the
-   *                     instance was launched.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>capacity-reservation-specification.capacity-reservation-preference</code>
-   *                     - The instance's Capacity Reservation preference (<code>open</code> | <code>none</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>capacity-reservation-specification.capacity-reservation-target.capacity-reservation-id</code>
-   *                     - The ID of the targeted Capacity Reservation.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>capacity-reservation-specification.capacity-reservation-target.capacity-reservation-resource-group-arn</code>
-   *                     - The ARN of the targeted Capacity Reservation group.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>client-token</code> - The idempotency token you provided when you
-   *                     launched the instance.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>current-instance-boot-mode</code> - The boot mode that is used to launch
-   *                     the instance at launch or start (<code>legacy-bios</code> |
-   *                     <code>uefi</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>dns-name</code> - The public DNS name of the instance.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>ebs-optimized</code> - A Boolean that indicates whether the instance is
-   *                     optimized for Amazon EBS I/O.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>ena-support</code> - A Boolean that indicates whether the instance is
-   *                     enabled for enhanced networking with ENA.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>enclave-options.enabled</code> - A Boolean that indicates whether the
-   *                     instance is enabled for Amazon Web Services Nitro Enclaves.</p>
-   *             </li>
+   * <p>The attribute value. The valid values are <code>true</code> or <code>false</code>.</p>
+   */
+  Value?: boolean;
+}
+
+/**
+ * @public
+ * <p>Indicates whether the instance is enabled for Amazon Web Services Nitro
+ *             Enclaves.</p>
+ */
+export interface EnclaveOptions {
+  /**
+   * @public
+   * <p>If this parameter is set to <code>true</code>, the instance is enabled for Amazon Web Services Nitro Enclaves; otherwise, it is not enabled for Amazon Web Services Nitro
+   *             Enclaves.</p>
+   */
+  Enabled?: boolean;
+}
+
+/**
+ * @public
+ * <p>Describes an instance attribute.</p>
+ */
+export interface InstanceAttribute {
+  /**
+   * @public
+   * <p>The security groups associated with the instance.</p>
+   */
+  Groups?: GroupIdentifier[];
+
+  /**
+   * @public
+   * <p>The block device mapping of the instance.</p>
+   */
+  BlockDeviceMappings?: InstanceBlockDeviceMapping[];
+
+  /**
+   * @public
+   * <p>If the value is <code>true</code>, you can't terminate the instance through the Amazon
+   *             EC2 console, CLI, or API; otherwise, you can.</p>
+   */
+  DisableApiTermination?: AttributeBooleanValue;
+
+  /**
+   * @public
+   * <p>Indicates whether enhanced networking with ENA is enabled.</p>
+   */
+  EnaSupport?: AttributeBooleanValue;
+
+  /**
+   * @public
+   * <p>To enable the instance for Amazon Web Services Nitro Enclaves, set this parameter to
+   *                 <code>true</code>; otherwise, set it to <code>false</code>.</p>
+   */
+  EnclaveOptions?: EnclaveOptions;
+
+  /**
+   * @public
+   * <p>Indicates whether the instance is optimized for Amazon EBS I/O.</p>
+   */
+  EbsOptimized?: AttributeBooleanValue;
+
+  /**
+   * @public
+   * <p>The ID of the instance.</p>
+   */
+  InstanceId?: string;
+
+  /**
+   * @public
+   * <p>Indicates whether an instance stops or terminates when you initiate shutdown from the
+   *             instance (using the operating system command for system shutdown).</p>
+   */
+  InstanceInitiatedShutdownBehavior?: AttributeValue;
+
+  /**
+   * @public
+   * <p>The instance type.</p>
+   */
+  InstanceType?: AttributeValue;
+
+  /**
+   * @public
+   * <p>The kernel ID.</p>
+   */
+  KernelId?: AttributeValue;
+
+  /**
+   * @public
+   * <p>A list of product codes.</p>
+   */
+  ProductCodes?: ProductCode[];
+
+  /**
+   * @public
+   * <p>The RAM disk ID.</p>
+   */
+  RamdiskId?: AttributeValue;
+
+  /**
+   * @public
+   * <p>The device name of the root device volume (for example,
+   *             <code>/dev/sda1</code>).</p>
+   */
+  RootDeviceName?: AttributeValue;
+
+  /**
+   * @public
+   * <p>Enable or disable source/destination checks, which ensure that the instance is either
+   *             the source or the destination of any traffic that it receives. If the value is
+   *                 <code>true</code>, source/destination checks are enabled; otherwise, they are
+   *             disabled. The default value is <code>true</code>. You must disable source/destination
+   *             checks if the instance runs services such as network address translation, routing, or
+   *             firewalls.</p>
+   */
+  SourceDestCheck?: AttributeBooleanValue;
+
+  /**
+   * @public
+   * <p>Indicates whether enhanced networking with the Intel 82599 Virtual Function interface
+   *             is enabled.</p>
+   */
+  SriovNetSupport?: AttributeValue;
+
+  /**
+   * @public
+   * <p>The user data.</p>
+   */
+  UserData?: AttributeValue;
+
+  /**
+   * @public
+   * <p>To enable the instance for Amazon Web Services Stop Protection, set this parameter to
+   *                 <code>true</code>; otherwise, set it to <code>false</code>.</p>
+   */
+  DisableApiStop?: AttributeBooleanValue;
+}
+
+/**
+ * @public
+ */
+export interface DescribeInstanceConnectEndpointsRequest {
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *             and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *             Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
+
+  /**
+   * @public
+   * <p>The maximum number of items to return for this request.
+   *          To get the next page of items, make another request with the token returned in the output.
+   * 	        For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
+   */
+  MaxResults?: number;
+
+  /**
+   * @public
+   * <p>The token returned from a previous paginated request. Pagination continues from the end of the items returned by the previous request.</p>
+   */
+  NextToken?: string;
+
+  /**
+   * @public
+   * <p>One or more filters.</p>
+   *          <ul>
    *             <li>
    *                <p>
-   *                   <code>hibernation-options.configured</code> - A Boolean that indicates whether
-   *                     the instance is enabled for hibernation. A value of <code>true</code> means that
-   *                     the instance is enabled for hibernation.</p>
+   *                   <code>instance-connect-endpoint-id</code> - The ID of the EC2 Instance Connect Endpoint.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>host-id</code> - The ID of the Dedicated Host on which the instance is
-   *                     running, if applicable.</p>
+   *                   <code>state</code> - The state of the EC2 Instance Connect Endpoint (<code>create-in-progress</code> | <code>create-complete</code> | <code>create-failed</code> |
+   *                     <code>delete-in-progress</code> | <code>delete-complete</code> | <code>delete-failed</code>).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>hypervisor</code> - The hypervisor type of the instance
-   *                         (<code>ovm</code> | <code>xen</code>). The value <code>xen</code> is used
-   *                     for both Xen and Nitro hypervisors.</p>
+   *                   <code>subnet-id</code> - The ID of the subnet in which the EC2 Instance
+   *                     Connect Endpoint was created.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>iam-instance-profile.arn</code> - The instance profile associated with
-   *                     the instance. Specified as an ARN.</p>
+   *                   <code>tag</code>:<key> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value.
+   *     For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>iam-instance-profile.id</code> - The instance profile associated with
-   *                     the instance. Specified as an ID.</p>
+   *                   <code>tag-key</code> - The key of a tag assigned to the resource. Use this filter to find all resources assigned a tag with a specific key, regardless of the tag value.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>iam-instance-profile.name</code> - The instance profile associated with
-   *                     the instance. Specified as an name.</p>
+   *                   <code>tag-value</code> - The value of a tag assigned to the resource. Use this filter to find all resources
+   *                     that have a tag with a specific value, regardless of tag key.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>image-id</code> - The ID of the image used to launch the
-   *                     instance.</p>
+   *                   <code>vpc-id</code> - The ID of the VPC in which the EC2 Instance Connect
+   *                     Endpoint was created.</p>
    *             </li>
+   *          </ul>
+   */
+  Filters?: Filter[];
+
+  /**
+   * @public
+   * <p>One or more EC2 Instance Connect Endpoint IDs.</p>
+   */
+  InstanceConnectEndpointIds?: string[];
+}
+
+/**
+ * @public
+ */
+export interface DescribeInstanceConnectEndpointsResult {
+  /**
+   * @public
+   * <p>Information about the EC2 Instance Connect Endpoints.</p>
+   */
+  InstanceConnectEndpoints?: Ec2InstanceConnectEndpoint[];
+
+  /**
+   * @public
+   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there
+   *          are no more items to return.</p>
+   */
+  NextToken?: string;
+}
+
+/**
+ * @public
+ */
+export interface DescribeInstanceCreditSpecificationsRequest {
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
+
+  /**
+   * @public
+   * <p>The filters.</p>
+   *          <ul>
    *             <li>
    *                <p>
    *                   <code>instance-id</code> - The ID of the instance.</p>
    *             </li>
+   *          </ul>
+   */
+  Filters?: Filter[];
+
+  /**
+   * @public
+   * <p>The instance IDs.</p>
+   *          <p>Default: Describes all your instances.</p>
+   *          <p>Constraints: Maximum 1000 explicitly specified instance IDs.</p>
+   */
+  InstanceIds?: string[];
+
+  /**
+   * @public
+   * <p>The maximum number of items to return for this request.
+   *          To get the next page of items, make another request with the token returned in the output.
+   * 	        For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
+   *          <p>You cannot specify this parameter and the instance IDs
+   *             parameter in the same call.</p>
+   */
+  MaxResults?: number;
+
+  /**
+   * @public
+   * <p>The token returned from a previous paginated request. Pagination continues from the end of the items returned by the previous request.</p>
+   */
+  NextToken?: string;
+}
+
+/**
+ * @public
+ * <p>Describes the credit option for CPU usage of a burstable performance instance. </p>
+ */
+export interface InstanceCreditSpecification {
+  /**
+   * @public
+   * <p>The ID of the instance.</p>
+   */
+  InstanceId?: string;
+
+  /**
+   * @public
+   * <p>The credit option for CPU usage of the instance.</p>
+   *          <p>Valid values: <code>standard</code> | <code>unlimited</code>
+   *          </p>
+   */
+  CpuCredits?: string;
+}
+
+/**
+ * @public
+ */
+export interface DescribeInstanceCreditSpecificationsResult {
+  /**
+   * @public
+   * <p>Information about the credit option for CPU usage of an instance.</p>
+   */
+  InstanceCreditSpecifications?: InstanceCreditSpecification[];
+
+  /**
+   * @public
+   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there
+   *          are no more items to return.</p>
+   */
+  NextToken?: string;
+}
+
+/**
+ * @public
+ */
+export interface DescribeInstanceEventNotificationAttributesRequest {
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
+}
+
+/**
+ * @public
+ */
+export interface DescribeInstanceEventNotificationAttributesResult {
+  /**
+   * @public
+   * <p>Information about the registered tag keys.</p>
+   */
+  InstanceTagAttribute?: InstanceTagNotificationAttribute;
+}
+
+/**
+ * @public
+ * <para>Describe instance event windows by InstanceEventWindow.</para>
+ */
+export interface DescribeInstanceEventWindowsRequest {
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
+
+  /**
+   * @public
+   * <p>The IDs of the event windows.</p>
+   */
+  InstanceEventWindowIds?: string[];
+
+  /**
+   * @public
+   * <p>One or more filters.</p>
+   *          <ul>
    *             <li>
    *                <p>
-   *                   <code>instance-lifecycle</code> - Indicates whether this is a Spot Instance, a Scheduled Instance, or
-   *                      a Capacity Block (<code>spot</code> | <code>scheduled</code> | <code>capacity-block</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>instance-state-code</code> - The state of the instance, as a 16-bit
-   *                     unsigned integer. The high byte is used for internal purposes and should be
-   *                     ignored. The low byte is set based on the state represented. The valid values
-   *                     are: 0 (pending), 16 (running), 32 (shutting-down), 48 (terminated), 64
-   *                     (stopping), and 80 (stopped).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>instance-state-name</code> - The state of the instance
-   *                         (<code>pending</code> | <code>running</code> | <code>shutting-down</code> |
-   *                         <code>terminated</code> | <code>stopping</code> |
-   *                     <code>stopped</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>instance-type</code> - The type of instance (for example,
-   *                         <code>t2.micro</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>instance.group-id</code> - The ID of the security group for the
-   *                     instance. </p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>instance.group-name</code> - The name of the security group for the
-   *                     instance. </p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>ip-address</code> - The public IPv4 address of the instance.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>ipv6-address</code> - The IPv6 address of the instance.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>kernel-id</code> - The kernel ID.</p>
+   *                   <code>dedicated-host-id</code> - The event windows associated with the specified
+   *             Dedicated Host ID.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>key-name</code> - The name of the key pair used when the instance was
-   *                     launched.</p>
+   *                   <code>event-window-name</code> - The event windows associated with the specified
+   *             names. </p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>launch-index</code> - When launching multiple instances, this is the
-   *                     index for the instance in the launch group (for example, 0, 1, 2, and so on).
-   *                 </p>
+   *                   <code>instance-id</code> - The event windows associated with the specified instance
+   *                ID.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>launch-time</code> - The time when the instance was launched, in the ISO
-   *                     8601 format in the UTC time zone (YYYY-MM-DDThh:mm:ss.sssZ), for example,
-   *                         <code>2021-09-29T11:04:43.305Z</code>. You can use a wildcard
-   *                         (<code>*</code>), for example, <code>2021-09-29T*</code>, which matches an
-   *                     entire day.</p>
+   *                   <code>instance-tag</code> - The event windows associated with the specified tag and
+   *                value.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>maintenance-options.auto-recovery</code> - The current automatic
-   *                     recovery behavior of the instance (<code>disabled</code> | <code>default</code>).</p>
+   *                   <code>instance-tag-key</code> - The event windows associated with the specified tag
+   *                key, regardless of the value.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>metadata-options.http-endpoint</code> - The status of access to the HTTP
-   *                     metadata endpoint on your instance (<code>enabled</code> |
-   *                     <code>disabled</code>)</p>
+   *                   <code>instance-tag-value</code> - The event windows associated with the specified tag
+   *                value, regardless of the key.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>metadata-options.http-protocol-ipv4</code> - Indicates whether the IPv4
-   *                     endpoint is enabled (<code>disabled</code> | <code>enabled</code>).</p>
+   *                   <code>tag:<key></code> - The key/value combination of a tag assigned to the
+   *                event window. Use the tag key in the filter name and the tag value as the filter
+   *                value. For example, to find all resources that have a tag with the key
+   *                   <code>Owner</code> and the value <code>CMX</code>, specify <code>tag:Owner</code>
+   *                for the filter name and <code>CMX</code> for the filter value. </p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>metadata-options.http-protocol-ipv6</code> - Indicates whether the IPv6
-   *                     endpoint is enabled (<code>disabled</code> | <code>enabled</code>).</p>
+   *                   <code>tag-key</code> - The key of a tag assigned to the event window. Use this filter
+   *                to find all event windows that have a tag with a specific key, regardless of the tag
+   *                value. </p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>metadata-options.http-put-response-hop-limit</code> - The HTTP metadata
-   *                     request put response hop limit (integer, possible values <code>1</code> to
-   *                         <code>64</code>)</p>
+   *                   <code>tag-value</code> - The value of a tag assigned to the event window. Use this
+   *                filter to find all event windows that have a tag with a specific value, regardless of
+   *                the tag key. </p>
    *             </li>
+   *          </ul>
+   */
+  Filters?: Filter[];
+
+  /**
+   * @public
+   * <p>The maximum number of results to return in a single call. To retrieve the remaining
+   *          results, make another call with the returned <code>NextToken</code> value. This value can
+   *          be between 20 and 500. You cannot specify this parameter and the event window IDs parameter
+   *          in the same call.</p>
+   */
+  MaxResults?: number;
+
+  /**
+   * @public
+   * <p>The token to request the next page of results.</p>
+   */
+  NextToken?: string;
+}
+
+/**
+ * @public
+ */
+export interface DescribeInstanceEventWindowsResult {
+  /**
+   * @public
+   * <p>Information about the event windows.</p>
+   */
+  InstanceEventWindows?: InstanceEventWindow[];
+
+  /**
+   * @public
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return. </p>
+   */
+  NextToken?: string;
+}
+
+/**
+ * @public
+ */
+export interface DescribeInstancesRequest {
+  /**
+   * @public
+   * <p>The filters.</p>
+   *          <ul>
    *             <li>
    *                <p>
-   *                   <code>metadata-options.http-tokens</code> - The metadata request authorization
-   *                     state (<code>optional</code> | <code>required</code>)</p>
+   *                   <code>affinity</code> - The affinity setting for an instance running on a
+   *                     Dedicated Host (<code>default</code> | <code>host</code>).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>metadata-options.instance-metadata-tags</code> - The status of access to
-   *                     instance tags from the instance metadata (<code>enabled</code> |
-   *                         <code>disabled</code>)</p>
+   *                   <code>architecture</code> - The instance architecture (<code>i386</code> |
+   *                         <code>x86_64</code> | <code>arm64</code>).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>metadata-options.state</code> - The state of the metadata option changes
-   *                         (<code>pending</code> | <code>applied</code>).</p>
+   *                   <code>availability-zone</code> - The Availability Zone of the instance.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>monitoring-state</code> - Indicates whether detailed monitoring is
-   *                     enabled (<code>disabled</code> | <code>enabled</code>).</p>
+   *                   <code>block-device-mapping.attach-time</code> - The attach time for an EBS
+   *                     volume mapped to the instance, for example,
+   *                         <code>2022-09-15T17:15:20.000Z</code>.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>network-interface.addresses.association.allocation-id</code> - The allocation ID.</p>
+   *                   <code>block-device-mapping.delete-on-termination</code> - A Boolean that
+   *                     indicates whether the EBS volume is deleted on instance termination.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>network-interface.addresses.association.association-id</code> - The association ID.</p>
+   *                   <code>block-device-mapping.device-name</code> - The device name specified in
+   *                     the block device mapping (for example, <code>/dev/sdh</code> or
+   *                         <code>xvdh</code>).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>network-interface.addresses.association.carrier-ip</code> - The carrier IP address.</p>
+   *                   <code>block-device-mapping.status</code> - The status for the EBS volume
+   *                         (<code>attaching</code> | <code>attached</code> | <code>detaching</code> |
+   *                         <code>detached</code>).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>network-interface.addresses.association.customer-owned-ip</code> - The customer-owned IP address.</p>
+   *                   <code>block-device-mapping.volume-id</code> - The volume ID of the EBS
+   *                     volume.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>network-interface.addresses.association.ip-owner-id</code> - The owner
-   *                     ID of the private IPv4 address associated with the network interface.</p>
+   *                   <code>boot-mode</code> - The boot mode that was specified by the AMI
+   *                         (<code>legacy-bios</code> | <code>uefi</code> |
+   *                     <code>uefi-preferred</code>).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>network-interface.addresses.association.public-dns-name</code> - The public DNS name.</p>
+   *                   <code>capacity-reservation-id</code> - The ID of the Capacity Reservation into which the
+   *                     instance was launched.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>network-interface.addresses.association.public-ip</code> - The ID of the
-   *                     association of an Elastic IP address (IPv4) with a network interface.</p>
+   *                   <code>capacity-reservation-specification.capacity-reservation-preference</code>
+   *                     - The instance's Capacity Reservation preference (<code>open</code> | <code>none</code>).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>network-interface.addresses.primary</code> - Specifies whether the IPv4
-   *                     address of the network interface is the primary private IPv4 address.</p>
+   *                   <code>capacity-reservation-specification.capacity-reservation-target.capacity-reservation-id</code>
+   *                     - The ID of the targeted Capacity Reservation.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>network-interface.addresses.private-dns-name</code> - The private DNS name.</p>
+   *                   <code>capacity-reservation-specification.capacity-reservation-target.capacity-reservation-resource-group-arn</code>
+   *                     - The ARN of the targeted Capacity Reservation group.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>network-interface.addresses.private-ip-address</code> - The private IPv4
-   *                     address associated with the network interface.</p>
+   *                   <code>client-token</code> - The idempotency token you provided when you
+   *                     launched the instance.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>network-interface.association.allocation-id</code> - The allocation ID
-   *                     returned when you allocated the Elastic IP address (IPv4) for your network
-   *                     interface.</p>
+   *                   <code>current-instance-boot-mode</code> - The boot mode that is used to launch
+   *                     the instance at launch or start (<code>legacy-bios</code> |
+   *                     <code>uefi</code>).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>network-interface.association.association-id</code> - The association ID
-   *                     returned when the network interface was associated with an IPv4 address.</p>
+   *                   <code>dns-name</code> - The public DNS name of the instance.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>ebs-optimized</code> - A Boolean that indicates whether the instance is
+   *                     optimized for Amazon EBS I/O.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>ena-support</code> - A Boolean that indicates whether the instance is
+   *                     enabled for enhanced networking with ENA.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>enclave-options.enabled</code> - A Boolean that indicates whether the
+   *                     instance is enabled for Amazon Web Services Nitro Enclaves.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>hibernation-options.configured</code> - A Boolean that indicates whether
+   *                     the instance is enabled for hibernation. A value of <code>true</code> means that
+   *                     the instance is enabled for hibernation.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>host-id</code> - The ID of the Dedicated Host on which the instance is
+   *                     running, if applicable.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>hypervisor</code> - The hypervisor type of the instance
+   *                         (<code>ovm</code> | <code>xen</code>). The value <code>xen</code> is used
+   *                     for both Xen and Nitro hypervisors.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>iam-instance-profile.arn</code> - The instance profile associated with
+   *                     the instance. Specified as an ARN.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>iam-instance-profile.id</code> - The instance profile associated with
+   *                     the instance. Specified as an ID.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>iam-instance-profile.name</code> - The instance profile associated with
+   *                     the instance. Specified as an name.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>image-id</code> - The ID of the image used to launch the
+   *                     instance.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>instance-id</code> - The ID of the instance.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>instance-lifecycle</code> - Indicates whether this is a Spot Instance, a Scheduled Instance, or
+   *                      a Capacity Block (<code>spot</code> | <code>scheduled</code> | <code>capacity-block</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>instance-state-code</code> - The state of the instance, as a 16-bit
+   *                     unsigned integer. The high byte is used for internal purposes and should be
+   *                     ignored. The low byte is set based on the state represented. The valid values
+   *                     are: 0 (pending), 16 (running), 32 (shutting-down), 48 (terminated), 64
+   *                     (stopping), and 80 (stopped).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>instance-state-name</code> - The state of the instance
+   *                         (<code>pending</code> | <code>running</code> | <code>shutting-down</code> |
+   *                         <code>terminated</code> | <code>stopping</code> |
+   *                     <code>stopped</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>instance-type</code> - The type of instance (for example,
+   *                         <code>t2.micro</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>instance.group-id</code> - The ID of the security group for the
+   *                     instance. </p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>instance.group-name</code> - The name of the security group for the
+   *                     instance. </p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>ip-address</code> - The public IPv4 address of the instance.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>ipv6-address</code> - The IPv6 address of the instance.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>kernel-id</code> - The kernel ID.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>key-name</code> - The name of the key pair used when the instance was
+   *                     launched.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>launch-index</code> - When launching multiple instances, this is the
+   *                     index for the instance in the launch group (for example, 0, 1, 2, and so on).
+   *                 </p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>launch-time</code> - The time when the instance was launched, in the ISO
+   *                     8601 format in the UTC time zone (YYYY-MM-DDThh:mm:ss.sssZ), for example,
+   *                         <code>2021-09-29T11:04:43.305Z</code>. You can use a wildcard
+   *                         (<code>*</code>), for example, <code>2021-09-29T*</code>, which matches an
+   *                     entire day.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>maintenance-options.auto-recovery</code> - The current automatic
+   *                     recovery behavior of the instance (<code>disabled</code> | <code>default</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>metadata-options.http-endpoint</code> - The status of access to the HTTP
+   *                     metadata endpoint on your instance (<code>enabled</code> |
+   *                     <code>disabled</code>)</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>metadata-options.http-protocol-ipv4</code> - Indicates whether the IPv4
+   *                     endpoint is enabled (<code>disabled</code> | <code>enabled</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>metadata-options.http-protocol-ipv6</code> - Indicates whether the IPv6
+   *                     endpoint is enabled (<code>disabled</code> | <code>enabled</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>metadata-options.http-put-response-hop-limit</code> - The HTTP metadata
+   *                     request put response hop limit (integer, possible values <code>1</code> to
+   *                         <code>64</code>)</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>metadata-options.http-tokens</code> - The metadata request authorization
+   *                     state (<code>optional</code> | <code>required</code>)</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>metadata-options.instance-metadata-tags</code> - The status of access to
+   *                     instance tags from the instance metadata (<code>enabled</code> |
+   *                         <code>disabled</code>)</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>metadata-options.state</code> - The state of the metadata option changes
+   *                         (<code>pending</code> | <code>applied</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>monitoring-state</code> - Indicates whether detailed monitoring is
+   *                     enabled (<code>disabled</code> | <code>enabled</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>network-interface.addresses.association.allocation-id</code> - The allocation ID.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>network-interface.addresses.association.association-id</code> - The association ID.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>network-interface.addresses.association.carrier-ip</code> - The carrier IP address.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>network-interface.addresses.association.customer-owned-ip</code> - The customer-owned IP address.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>network-interface.addresses.association.ip-owner-id</code> - The owner
+   *                     ID of the private IPv4 address associated with the network interface.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>network-interface.addresses.association.public-dns-name</code> - The public DNS name.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>network-interface.addresses.association.public-ip</code> - The ID of the
+   *                     association of an Elastic IP address (IPv4) with a network interface.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>network-interface.addresses.primary</code> - Specifies whether the IPv4
+   *                     address of the network interface is the primary private IPv4 address.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>network-interface.addresses.private-dns-name</code> - The private DNS name.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>network-interface.addresses.private-ip-address</code> - The private IPv4
+   *                     address associated with the network interface.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>network-interface.association.allocation-id</code> - The allocation ID
+   *                     returned when you allocated the Elastic IP address (IPv4) for your network
+   *                     interface.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>network-interface.association.association-id</code> - The association ID
+   *                     returned when the network interface was associated with an IPv4 address.</p>
    *             </li>
    *             <li>
    *                <p>
@@ -882,4029 +1423,3192 @@ export interface DescribeInstancesRequest {
    *                   <code>subnet-id</code> - The ID of the subnet for the instance.</p>
    *             </li>
    *             <li>
-   *                <p>
-   *                   <code>tag:<key></code> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value.
-   *     For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>tag-key</code> - The key of a tag assigned to the resource. Use this filter to find all resources that have a tag with a specific key, regardless of the tag value.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>tenancy</code> - The tenancy of an instance (<code>dedicated</code> |
-   *                         <code>default</code> | <code>host</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>tpm-support</code> - Indicates if the instance is configured for
-   *                     NitroTPM support (<code>v2.0</code>). </p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>usage-operation</code> - The usage operation value for the instance
-   *                         (<code>RunInstances</code> | <code>RunInstances:00g0</code> |
-   *                         <code>RunInstances:0010</code> | <code>RunInstances:1010</code> |
-   *                         <code>RunInstances:1014</code> | <code>RunInstances:1110</code> |
-   *                         <code>RunInstances:0014</code> | <code>RunInstances:0210</code> |
-   *                         <code>RunInstances:0110</code> | <code>RunInstances:0100</code> |
-   *                         <code>RunInstances:0004</code> | <code>RunInstances:0200</code> |
-   *                         <code>RunInstances:000g</code> | <code>RunInstances:0g00</code> |
-   *                         <code>RunInstances:0002</code> | <code>RunInstances:0800</code> |
-   *                         <code>RunInstances:0102</code> | <code>RunInstances:0006</code> |
-   *                         <code>RunInstances:0202</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>usage-operation-update-time</code> - The time that the usage operation
-   *                     was last updated, for example, <code>2022-09-15T17:15:20.000Z</code>.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>virtualization-type</code> - The virtualization type of the instance
-   *                         (<code>paravirtual</code> | <code>hvm</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>vpc-id</code> - The ID of the VPC that the instance is running in.</p>
-   *             </li>
-   *          </ul>
-   */
-  Filters?: Filter[];
-
-  /**
-   * @public
-   * <p>The instance IDs.</p>
-   *          <p>Default: Describes all your instances.</p>
-   */
-  InstanceIds?: string[];
-
-  /**
-   * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-   */
-  DryRun?: boolean;
-
-  /**
-   * @public
-   * <p>The maximum number of items to return for this request.
-   *          To get the next page of items, make another request with the token returned in the output.
-   * 	        For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
-   *          <p>You cannot specify this parameter and the instance IDs parameter in the same request.</p>
-   */
-  MaxResults?: number;
-
-  /**
-   * @public
-   * <p>The token returned from a previous paginated request. Pagination continues from the end of the items returned by the previous request.</p>
-   */
-  NextToken?: string;
-}
-
-/**
- * @public
- * <p>Describes the instance's Capacity Reservation targeting preferences. The action returns the
- *                 <code>capacityReservationPreference</code> response element if the instance is
- *             configured to run in On-Demand capacity, or if it is configured in run in any
- *                 <code>open</code> Capacity Reservation that has matching attributes (instance type, platform,
- *             Availability Zone). The action returns the <code>capacityReservationTarget</code>
- *             response element if the instance explicily targets a specific Capacity Reservation or Capacity Reservation group.</p>
- */
-export interface CapacityReservationSpecificationResponse {
-  /**
-   * @public
-   * <p>Describes the instance's Capacity Reservation preferences. Possible preferences include:</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>open</code> - The instance can run in any <code>open</code> Capacity Reservation that
-   *                     has matching attributes (instance type, platform, Availability Zone).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>none</code> - The instance avoids running in a Capacity Reservation even if one is
-   *                     available. The instance runs in On-Demand capacity.</p>
-   *             </li>
-   *          </ul>
-   */
-  CapacityReservationPreference?: CapacityReservationPreference;
-
-  /**
-   * @public
-   * <p>Information about the targeted Capacity Reservation or Capacity Reservation group.</p>
-   */
-  CapacityReservationTarget?: CapacityReservationTargetResponse;
-}
-
-/**
- * @public
- * <p>The CPU options for the instance.</p>
- */
-export interface CpuOptions {
-  /**
-   * @public
-   * <p>The number of CPU cores for the instance.</p>
-   */
-  CoreCount?: number;
-
-  /**
-   * @public
-   * <p>The number of threads per CPU core.</p>
-   */
-  ThreadsPerCore?: number;
-
-  /**
-   * @public
-   * <p>Indicates whether the instance is enabled for AMD SEV-SNP. For more information, see
-   *             <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/sev-snp.html">AMD SEV-SNP</a>.</p>
-   */
-  AmdSevSnp?: AmdSevSnpSpecification;
-}
-
-/**
- * @public
- * @enum
- */
-export const InstanceBootModeValues = {
-  legacy_bios: "legacy-bios",
-  uefi: "uefi",
-} as const;
-
-/**
- * @public
- */
-export type InstanceBootModeValues = (typeof InstanceBootModeValues)[keyof typeof InstanceBootModeValues];
-
-/**
- * @public
- * <p>Describes the association between an instance and an Elastic Graphics accelerator.</p>
- */
-export interface ElasticGpuAssociation {
-  /**
-   * @public
-   * <p>The ID of the Elastic Graphics accelerator.</p>
-   */
-  ElasticGpuId?: string;
-
-  /**
-   * @public
-   * <p>The ID of the association.</p>
-   */
-  ElasticGpuAssociationId?: string;
-
-  /**
-   * @public
-   * <p>The state of the association between the instance and the
-   *             Elastic Graphics accelerator.</p>
-   */
-  ElasticGpuAssociationState?: string;
-
-  /**
-   * @public
-   * <p>The time the Elastic Graphics accelerator was associated with the instance.</p>
-   */
-  ElasticGpuAssociationTime?: string;
-}
-
-/**
- * @public
- * <p>
- *             Describes the association between an instance and an elastic inference accelerator.
- *         </p>
- */
-export interface ElasticInferenceAcceleratorAssociation {
-  /**
-   * @public
-   * <p>
-   *             The Amazon Resource Name (ARN) of the elastic inference accelerator.
-   *         </p>
-   */
-  ElasticInferenceAcceleratorArn?: string;
-
-  /**
-   * @public
-   * <p>
-   *             The ID of the association.
-   *         </p>
-   */
-  ElasticInferenceAcceleratorAssociationId?: string;
-
-  /**
-   * @public
-   * <p>
-   *             The state of the elastic inference accelerator.
-   *         </p>
-   */
-  ElasticInferenceAcceleratorAssociationState?: string;
-
-  /**
-   * @public
-   * <p>
-   *             The time at which the elastic inference accelerator is associated with an instance.
-   *         </p>
-   */
-  ElasticInferenceAcceleratorAssociationTime?: Date;
-}
-
-/**
- * @public
- * <p>Indicates whether your instance is configured for hibernation. This parameter is valid
- *             only if the instance meets the <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/hibernating-prerequisites.html">hibernation
- *                 prerequisites</a>. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Hibernate.html">Hibernate your instance</a> in the
- *                 <i>Amazon EC2 User Guide</i>.</p>
- */
-export interface HibernationOptions {
-  /**
-   * @public
-   * <p>If <code>true</code>, your instance is enabled for hibernation; otherwise, it is not
-   *             enabled for hibernation.</p>
-   */
-  Configured?: boolean;
-}
-
-/**
- * @public
- * @enum
- */
-export const InstanceLifecycleType = {
-  capacity_block: "capacity-block",
-  scheduled: "scheduled",
-  spot: "spot",
-} as const;
-
-/**
- * @public
- */
-export type InstanceLifecycleType = (typeof InstanceLifecycleType)[keyof typeof InstanceLifecycleType];
-
-/**
- * @public
- * <p>Describes a license configuration.</p>
- */
-export interface LicenseConfiguration {
-  /**
-   * @public
-   * <p>The Amazon Resource Name (ARN) of the license configuration.</p>
-   */
-  LicenseConfigurationArn?: string;
-}
-
-/**
- * @public
- * @enum
- */
-export const InstanceAutoRecoveryState = {
-  default: "default",
-  disabled: "disabled",
-} as const;
-
-/**
- * @public
- */
-export type InstanceAutoRecoveryState = (typeof InstanceAutoRecoveryState)[keyof typeof InstanceAutoRecoveryState];
-
-/**
- * @public
- * <p>The maintenance options for the instance.</p>
- */
-export interface InstanceMaintenanceOptions {
-  /**
-   * @public
-   * <p>Provides information on the current automatic recovery behavior of your
-   *             instance.</p>
-   */
-  AutoRecovery?: InstanceAutoRecoveryState;
-}
-
-/**
- * @public
- * @enum
- */
-export const InstanceMetadataEndpointState = {
-  disabled: "disabled",
-  enabled: "enabled",
-} as const;
-
-/**
- * @public
- */
-export type InstanceMetadataEndpointState =
-  (typeof InstanceMetadataEndpointState)[keyof typeof InstanceMetadataEndpointState];
-
-/**
- * @public
- * @enum
- */
-export const InstanceMetadataProtocolState = {
-  disabled: "disabled",
-  enabled: "enabled",
-} as const;
-
-/**
- * @public
- */
-export type InstanceMetadataProtocolState =
-  (typeof InstanceMetadataProtocolState)[keyof typeof InstanceMetadataProtocolState];
-
-/**
- * @public
- * @enum
- */
-export const HttpTokensState = {
-  optional: "optional",
-  required: "required",
-} as const;
-
-/**
- * @public
- */
-export type HttpTokensState = (typeof HttpTokensState)[keyof typeof HttpTokensState];
-
-/**
- * @public
- * @enum
- */
-export const InstanceMetadataTagsState = {
-  disabled: "disabled",
-  enabled: "enabled",
-} as const;
-
-/**
- * @public
- */
-export type InstanceMetadataTagsState = (typeof InstanceMetadataTagsState)[keyof typeof InstanceMetadataTagsState];
-
-/**
- * @public
- * @enum
- */
-export const InstanceMetadataOptionsState = {
-  applied: "applied",
-  pending: "pending",
-} as const;
-
-/**
- * @public
- */
-export type InstanceMetadataOptionsState =
-  (typeof InstanceMetadataOptionsState)[keyof typeof InstanceMetadataOptionsState];
-
-/**
- * @public
- * <p>The metadata options for the instance.</p>
- */
-export interface InstanceMetadataOptionsResponse {
-  /**
-   * @public
-   * <p>The state of the metadata option changes.</p>
-   *          <p>
-   *             <code>pending</code> - The metadata options are being updated and the instance is not
-   *             ready to process metadata traffic with the new selection.</p>
-   *          <p>
-   *             <code>applied</code> - The metadata options have been successfully applied on the
-   *             instance.</p>
-   */
-  State?: InstanceMetadataOptionsState;
-
-  /**
-   * @public
-   * <p>IMDSv2 uses token-backed sessions. Indicates whether the use of HTTP tokens is
-   *                 <code>optional</code> (in other words, indicates whether the use of IMDSv2 is
-   *                 <code>optional</code>) or <code>required</code> (in other words, indicates whether
-   *             the use of IMDSv2 is <code>required</code>).</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>optional</code> - When IMDSv2 is optional, you can choose to retrieve instance metadata with or without
-   *             a session token in your request. If you retrieve the IAM role credentials
-   *             without a token, the IMDSv1 role credentials are returned. If you retrieve the IAM role credentials
-   *             using a valid session token, the IMDSv2 role credentials are returned.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>required</code> - When IMDSv2 is required, you must send a session token
-   *             with any instance metadata retrieval requests. In this state, retrieving the IAM role
-   *             credentials always returns IMDSv2 credentials; IMDSv1 credentials are not available.</p>
-   *             </li>
-   *          </ul>
-   *          <p>Default: <code>optional</code>
-   *          </p>
-   */
-  HttpTokens?: HttpTokensState;
-
-  /**
-   * @public
-   * <p>The desired HTTP PUT response hop limit for instance metadata requests. The larger the
-   *             number, the further instance metadata requests can travel.</p>
-   *          <p>Default: 1</p>
-   *          <p>Possible values: Integers from 1 to 64</p>
-   */
-  HttpPutResponseHopLimit?: number;
-
-  /**
-   * @public
-   * <p>Indicates whether the HTTP metadata endpoint on your instances is enabled or
-   *             disabled.</p>
-   *          <p>If the value is <code>disabled</code>, you cannot access your instance
-   *             metadata.</p>
-   */
-  HttpEndpoint?: InstanceMetadataEndpointState;
-
-  /**
-   * @public
-   * <p>Indicates whether the IPv6 endpoint for the instance metadata service is enabled or
-   *             disabled.</p>
-   */
-  HttpProtocolIpv6?: InstanceMetadataProtocolState;
-
-  /**
-   * @public
-   * <p>Indicates whether access to instance tags from the instance metadata is enabled or
-   *             disabled. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Using_Tags.html#work-with-tags-in-IMDS">Work with
-   *                 instance tags using the instance metadata</a>.</p>
-   */
-  InstanceMetadataTags?: InstanceMetadataTagsState;
-}
-
-/**
- * @public
- * @enum
- */
-export const MonitoringState = {
-  disabled: "disabled",
-  disabling: "disabling",
-  enabled: "enabled",
-  pending: "pending",
-} as const;
-
-/**
- * @public
- */
-export type MonitoringState = (typeof MonitoringState)[keyof typeof MonitoringState];
-
-/**
- * @public
- * <p>Describes the monitoring of an instance.</p>
- */
-export interface Monitoring {
-  /**
-   * @public
-   * <p>Indicates whether detailed monitoring is enabled. Otherwise, basic monitoring is
-   *             enabled.</p>
-   */
-  State?: MonitoringState;
-}
-
-/**
- * @public
- * <p>Describes association information for an Elastic IP address (IPv4).</p>
- */
-export interface InstanceNetworkInterfaceAssociation {
-  /**
-   * @public
-   * <p>The carrier IP address associated with the network interface.</p>
-   */
-  CarrierIp?: string;
-
-  /**
-   * @public
-   * <p>The customer-owned IP address associated with the network interface.</p>
-   */
-  CustomerOwnedIp?: string;
-
-  /**
-   * @public
-   * <p>The ID of the owner of the Elastic IP address.</p>
-   */
-  IpOwnerId?: string;
-
-  /**
-   * @public
-   * <p>The public DNS name.</p>
-   */
-  PublicDnsName?: string;
-
-  /**
-   * @public
-   * <p>The public IP address or Elastic IP address bound to the network interface.</p>
-   */
-  PublicIp?: string;
-}
-
-/**
- * @public
- * <p>ENA Express is compatible with both TCP and UDP transport protocols. When it's enabled, TCP traffic
- * 			automatically uses it. However, some UDP-based applications are designed to handle network packets that are
- * 			out of order, without a need for retransmission, such as live video broadcasting or other near-real-time
- * 			applications. For UDP traffic, you can specify whether to use ENA Express, based on your application
- * 			environment needs.</p>
- */
-export interface InstanceAttachmentEnaSrdUdpSpecification {
-  /**
-   * @public
-   * <p>Indicates whether UDP traffic to and from the instance uses ENA Express. To specify this setting,
-   * 			you must first enable ENA Express.</p>
-   */
-  EnaSrdUdpEnabled?: boolean;
-}
-
-/**
- * @public
- * <p>ENA Express uses Amazon Web Services Scalable Reliable Datagram (SRD) technology to increase the
- * 			maximum bandwidth used per stream and minimize tail latency of network traffic between EC2 instances.
- * 			With ENA Express, you can communicate between two EC2 instances in the same subnet within the same
- * 			account, or in different accounts. Both sending and receiving instances must have ENA Express enabled.</p>
- *          <p>To improve the reliability of network packet delivery, ENA Express reorders network packets on the
- * 			receiving end by default. However, some UDP-based applications are designed to handle network packets
- * 			that are out of order to reduce the overhead for packet delivery at the network layer. When ENA Express
- * 			is enabled, you can specify whether UDP network traffic uses it.</p>
- */
-export interface InstanceAttachmentEnaSrdSpecification {
-  /**
-   * @public
-   * <p>Indicates whether ENA Express is enabled for the network interface.</p>
-   */
-  EnaSrdEnabled?: boolean;
-
-  /**
-   * @public
-   * <p>Configures ENA Express for UDP network traffic.</p>
-   */
-  EnaSrdUdpSpecification?: InstanceAttachmentEnaSrdUdpSpecification;
-}
-
-/**
- * @public
- * <p>Describes a network interface attachment.</p>
- */
-export interface InstanceNetworkInterfaceAttachment {
-  /**
-   * @public
-   * <p>The time stamp when the attachment initiated.</p>
-   */
-  AttachTime?: Date;
-
-  /**
-   * @public
-   * <p>The ID of the network interface attachment.</p>
-   */
-  AttachmentId?: string;
-
-  /**
-   * @public
-   * <p>Indicates whether the network interface is deleted when the instance is terminated.</p>
-   */
-  DeleteOnTermination?: boolean;
-
-  /**
-   * @public
-   * <p>The index of the device on the instance for the network interface attachment.</p>
-   */
-  DeviceIndex?: number;
-
-  /**
-   * @public
-   * <p>The attachment state.</p>
-   */
-  Status?: AttachmentStatus;
-
-  /**
-   * @public
-   * <p>The index of the network card.</p>
-   */
-  NetworkCardIndex?: number;
-
-  /**
-   * @public
-   * <p>Contains the ENA Express settings for the network interface that's attached
-   * 			to the instance.</p>
-   */
-  EnaSrdSpecification?: InstanceAttachmentEnaSrdSpecification;
-}
-
-/**
- * @public
- * <p>Information about an IPv4 prefix.</p>
- */
-export interface InstanceIpv4Prefix {
-  /**
-   * @public
-   * <p>One or more IPv4 prefixes assigned to the network interface.</p>
-   */
-  Ipv4Prefix?: string;
-}
-
-/**
- * @public
- * <p>Information about an IPv6 prefix.</p>
- */
-export interface InstanceIpv6Prefix {
-  /**
-   * @public
-   * <p>One or more IPv6 prefixes assigned to the network interface.</p>
-   */
-  Ipv6Prefix?: string;
-}
-
-/**
- * @public
- * <p>Describes a private IPv4 address.</p>
- */
-export interface InstancePrivateIpAddress {
-  /**
-   * @public
-   * <p>The association information for an Elastic IP address for the network interface.</p>
-   */
-  Association?: InstanceNetworkInterfaceAssociation;
-
-  /**
-   * @public
-   * <p>Indicates whether this IPv4 address is the primary private IP address of the network interface.</p>
-   */
-  Primary?: boolean;
-
-  /**
-   * @public
-   * <p>The private IPv4 DNS name.</p>
-   */
-  PrivateDnsName?: string;
-
-  /**
-   * @public
-   * <p>The private IPv4 address of the network interface.</p>
-   */
-  PrivateIpAddress?: string;
-}
-
-/**
- * @public
- * <p>Describes a network interface.</p>
- */
-export interface InstanceNetworkInterface {
-  /**
-   * @public
-   * <p>The association information for an Elastic IPv4 associated with the network
-   *             interface.</p>
-   */
-  Association?: InstanceNetworkInterfaceAssociation;
-
-  /**
-   * @public
-   * <p>The network interface attachment.</p>
-   */
-  Attachment?: InstanceNetworkInterfaceAttachment;
-
-  /**
-   * @public
-   * <p>The description.</p>
-   */
-  Description?: string;
-
-  /**
-   * @public
-   * <p>The security groups.</p>
-   */
-  Groups?: GroupIdentifier[];
-
-  /**
-   * @public
-   * <p>The IPv6 addresses associated with the network interface.</p>
-   */
-  Ipv6Addresses?: InstanceIpv6Address[];
-
-  /**
-   * @public
-   * <p>The MAC address.</p>
-   */
-  MacAddress?: string;
-
-  /**
-   * @public
-   * <p>The ID of the network interface.</p>
-   */
-  NetworkInterfaceId?: string;
-
-  /**
-   * @public
-   * <p>The ID of the Amazon Web Services account that created the network interface.</p>
-   */
-  OwnerId?: string;
-
-  /**
-   * @public
-   * <p>The private DNS name.</p>
-   */
-  PrivateDnsName?: string;
-
-  /**
-   * @public
-   * <p>The IPv4 address of the network interface within the subnet.</p>
-   */
-  PrivateIpAddress?: string;
-
-  /**
-   * @public
-   * <p>The private IPv4 addresses associated with the network interface.</p>
-   */
-  PrivateIpAddresses?: InstancePrivateIpAddress[];
-
-  /**
-   * @public
-   * <p>Indicates whether source/destination checking is enabled.</p>
-   */
-  SourceDestCheck?: boolean;
-
-  /**
-   * @public
-   * <p>The status of the network interface.</p>
-   */
-  Status?: NetworkInterfaceStatus;
-
-  /**
-   * @public
-   * <p>The ID of the subnet.</p>
-   */
-  SubnetId?: string;
-
-  /**
-   * @public
-   * <p>The ID of the VPC.</p>
-   */
-  VpcId?: string;
-
-  /**
-   * @public
-   * <p>The type of network interface.</p>
-   *          <p>Valid values: <code>interface</code> | <code>efa</code> | <code>trunk</code>
-   *          </p>
-   */
-  InterfaceType?: string;
-
-  /**
-   * @public
-   * <p>The IPv4 delegated prefixes that are assigned to the network interface.</p>
-   */
-  Ipv4Prefixes?: InstanceIpv4Prefix[];
-
-  /**
-   * @public
-   * <p>The IPv6 delegated prefixes that are assigned to the network interface.</p>
-   */
-  Ipv6Prefixes?: InstanceIpv6Prefix[];
-}
-
-/**
- * @public
- * <p>Describes the options for instance hostnames.</p>
- */
-export interface PrivateDnsNameOptionsResponse {
-  /**
-   * @public
-   * <p>The type of hostname to assign to an instance.</p>
-   */
-  HostnameType?: HostnameType;
-
-  /**
-   * @public
-   * <p>Indicates whether to respond to DNS queries for instance hostnames with DNS A
-   *             records.</p>
-   */
-  EnableResourceNameDnsARecord?: boolean;
-
-  /**
-   * @public
-   * <p>Indicates whether to respond to DNS queries for instance hostnames with DNS AAAA
-   *             records.</p>
-   */
-  EnableResourceNameDnsAAAARecord?: boolean;
-}
-
-/**
- * @public
- * @enum
- */
-export const InstanceStateName = {
-  pending: "pending",
-  running: "running",
-  shutting_down: "shutting-down",
-  stopped: "stopped",
-  stopping: "stopping",
-  terminated: "terminated",
-} as const;
-
-/**
- * @public
- */
-export type InstanceStateName = (typeof InstanceStateName)[keyof typeof InstanceStateName];
-
-/**
- * @public
- * <p>Describes the current state of an instance.</p>
- */
-export interface InstanceState {
-  /**
-   * @public
-   * <p>The state of the instance as a 16-bit unsigned integer. </p>
-   *          <p>The high byte is all of the bits between 2^8 and (2^16)-1, which equals decimal values
-   *             between 256 and 65,535. These numerical values are used for internal purposes and should
-   *             be ignored.</p>
-   *          <p>The low byte is all of the bits between 2^0 and (2^8)-1, which equals decimal values
-   *             between 0 and 255. </p>
-   *          <p>The valid values for instance-state-code will all be in the range of the low byte and
-   *             they are:</p>
-   *          <ul>
+   *                <p>
+   *                   <code>tag:<key></code> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value.
+   *     For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
+   *             </li>
    *             <li>
    *                <p>
-   *                   <code>0</code> : <code>pending</code>
-   *                </p>
+   *                   <code>tag-key</code> - The key of a tag assigned to the resource. Use this filter to find all resources that have a tag with a specific key, regardless of the tag value.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>16</code> : <code>running</code>
-   *                </p>
+   *                   <code>tenancy</code> - The tenancy of an instance (<code>dedicated</code> |
+   *                         <code>default</code> | <code>host</code>).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>32</code> : <code>shutting-down</code>
-   *                </p>
+   *                   <code>tpm-support</code> - Indicates if the instance is configured for
+   *                     NitroTPM support (<code>v2.0</code>). </p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>48</code> : <code>terminated</code>
-   *                </p>
+   *                   <code>usage-operation</code> - The usage operation value for the instance
+   *                         (<code>RunInstances</code> | <code>RunInstances:00g0</code> |
+   *                         <code>RunInstances:0010</code> | <code>RunInstances:1010</code> |
+   *                         <code>RunInstances:1014</code> | <code>RunInstances:1110</code> |
+   *                         <code>RunInstances:0014</code> | <code>RunInstances:0210</code> |
+   *                         <code>RunInstances:0110</code> | <code>RunInstances:0100</code> |
+   *                         <code>RunInstances:0004</code> | <code>RunInstances:0200</code> |
+   *                         <code>RunInstances:000g</code> | <code>RunInstances:0g00</code> |
+   *                         <code>RunInstances:0002</code> | <code>RunInstances:0800</code> |
+   *                         <code>RunInstances:0102</code> | <code>RunInstances:0006</code> |
+   *                         <code>RunInstances:0202</code>).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>64</code> : <code>stopping</code>
-   *                </p>
+   *                   <code>usage-operation-update-time</code> - The time that the usage operation
+   *                     was last updated, for example, <code>2022-09-15T17:15:20.000Z</code>.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>80</code> : <code>stopped</code>
-   *                </p>
+   *                   <code>virtualization-type</code> - The virtualization type of the instance
+   *                         (<code>paravirtual</code> | <code>hvm</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>vpc-id</code> - The ID of the VPC that the instance is running in.</p>
    *             </li>
    *          </ul>
-   *          <p>You can ignore the high byte value by zeroing out all of the bits above 2^8 or 256 in
-   *             decimal.</p>
-   */
-  Code?: number;
-
-  /**
-   * @public
-   * <p>The current state of the instance.</p>
-   */
-  Name?: InstanceStateName;
-}
-
-/**
- * @public
- * <p>Describes an instance.</p>
- */
-export interface Instance {
-  /**
-   * @public
-   * <p>The AMI launch index, which can be used to find this instance in the launch
-   *             group.</p>
-   */
-  AmiLaunchIndex?: number;
-
-  /**
-   * @public
-   * <p>The ID of the AMI used to launch the instance.</p>
-   */
-  ImageId?: string;
-
-  /**
-   * @public
-   * <p>The ID of the instance.</p>
-   */
-  InstanceId?: string;
-
-  /**
-   * @public
-   * <p>The instance type.</p>
-   */
-  InstanceType?: _InstanceType;
-
-  /**
-   * @public
-   * <p>The kernel associated with this instance, if applicable.</p>
-   */
-  KernelId?: string;
-
-  /**
-   * @public
-   * <p>The name of the key pair, if this instance was launched with an associated key
-   *             pair.</p>
-   */
-  KeyName?: string;
-
-  /**
-   * @public
-   * <p>The time the instance was launched.</p>
-   */
-  LaunchTime?: Date;
-
-  /**
-   * @public
-   * <p>The monitoring for the instance.</p>
-   */
-  Monitoring?: Monitoring;
-
-  /**
-   * @public
-   * <p>The location where the instance launched, if applicable.</p>
-   */
-  Placement?: Placement;
-
-  /**
-   * @public
-   * <p>The value is <code>Windows</code> for Windows instances; otherwise blank.</p>
-   */
-  Platform?: PlatformValues;
-
-  /**
-   * @public
-   * <p>[IPv4 only] The private DNS hostname name assigned to the instance. This DNS hostname
-   *             can only be used inside the Amazon EC2 network. This name is not available until the
-   *             instance enters the <code>running</code> state. </p>
-   *          <p>The Amazon-provided DNS server resolves Amazon-provided private DNS
-   *             hostnames if you've enabled DNS resolution and DNS hostnames in your VPC. If you are not
-   *             using the Amazon-provided DNS server in your VPC, your custom domain name servers must
-   *             resolve the hostname as appropriate.</p>
-   */
-  PrivateDnsName?: string;
-
-  /**
-   * @public
-   * <p>The private IPv4 address assigned to the instance.</p>
    */
-  PrivateIpAddress?: string;
+  Filters?: Filter[];
 
   /**
    * @public
-   * <p>The product codes attached to this instance, if applicable.</p>
+   * <p>The instance IDs.</p>
+   *          <p>Default: Describes all your instances.</p>
    */
-  ProductCodes?: ProductCode[];
+  InstanceIds?: string[];
 
   /**
    * @public
-   * <p>[IPv4 only] The public DNS name assigned to the instance. This name is not available
-   *             until the instance enters the <code>running</code> state. This name is only
-   *             available if you've enabled DNS hostnames for your VPC.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  PublicDnsName?: string;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The public IPv4 address, or the Carrier IP address assigned to the instance, if
-   *             applicable.</p>
-   *          <p>A Carrier IP address only applies to an instance launched in a subnet associated with
-   *             a Wavelength Zone.</p>
+   * <p>The maximum number of items to return for this request.
+   *          To get the next page of items, make another request with the token returned in the output.
+   * 	        For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
+   *          <p>You cannot specify this parameter and the instance IDs parameter in the same request.</p>
    */
-  PublicIpAddress?: string;
+  MaxResults?: number;
 
   /**
    * @public
-   * <p>The RAM disk associated with this instance, if applicable.</p>
+   * <p>The token returned from a previous paginated request. Pagination continues from the end of the items returned by the previous request.</p>
    */
-  RamdiskId?: string;
+  NextToken?: string;
+}
 
+/**
+ * @public
+ * <p>Describes the instance's Capacity Reservation targeting preferences. The action returns the
+ *                 <code>capacityReservationPreference</code> response element if the instance is
+ *             configured to run in On-Demand capacity, or if it is configured in run in any
+ *                 <code>open</code> Capacity Reservation that has matching attributes (instance type, platform,
+ *             Availability Zone). The action returns the <code>capacityReservationTarget</code>
+ *             response element if the instance explicily targets a specific Capacity Reservation or Capacity Reservation group.</p>
+ */
+export interface CapacityReservationSpecificationResponse {
   /**
    * @public
-   * <p>The current state of the instance.</p>
+   * <p>Describes the instance's Capacity Reservation preferences. Possible preferences include:</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>open</code> - The instance can run in any <code>open</code> Capacity Reservation that
+   *                     has matching attributes (instance type, platform, Availability Zone).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>none</code> - The instance avoids running in a Capacity Reservation even if one is
+   *                     available. The instance runs in On-Demand capacity.</p>
+   *             </li>
+   *          </ul>
    */
-  State?: InstanceState;
+  CapacityReservationPreference?: CapacityReservationPreference;
 
   /**
    * @public
-   * <p>The reason for the most recent state transition. This might be an empty string.</p>
+   * <p>Information about the targeted Capacity Reservation or Capacity Reservation group.</p>
    */
-  StateTransitionReason?: string;
+  CapacityReservationTarget?: CapacityReservationTargetResponse;
+}
 
+/**
+ * @public
+ * <p>The CPU options for the instance.</p>
+ */
+export interface CpuOptions {
   /**
    * @public
-   * <p>The ID of the subnet in which the instance is running.</p>
+   * <p>The number of CPU cores for the instance.</p>
    */
-  SubnetId?: string;
+  CoreCount?: number;
 
   /**
    * @public
-   * <p>The ID of the VPC in which the instance is running.</p>
+   * <p>The number of threads per CPU core.</p>
    */
-  VpcId?: string;
+  ThreadsPerCore?: number;
 
   /**
    * @public
-   * <p>The architecture of the image.</p>
+   * <p>Indicates whether the instance is enabled for AMD SEV-SNP. For more information, see
+   *             <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/sev-snp.html">AMD SEV-SNP</a>.</p>
    */
-  Architecture?: ArchitectureValues;
+  AmdSevSnp?: AmdSevSnpSpecification;
+}
 
-  /**
-   * @public
-   * <p>Any block device mapping entries for the instance.</p>
-   */
-  BlockDeviceMappings?: InstanceBlockDeviceMapping[];
+/**
+ * @public
+ * @enum
+ */
+export const InstanceBootModeValues = {
+  legacy_bios: "legacy-bios",
+  uefi: "uefi",
+} as const;
 
-  /**
-   * @public
-   * <p>The idempotency token you provided when you launched the instance, if
-   *             applicable.</p>
-   */
-  ClientToken?: string;
+/**
+ * @public
+ */
+export type InstanceBootModeValues = (typeof InstanceBootModeValues)[keyof typeof InstanceBootModeValues];
 
+/**
+ * @public
+ * <p>Describes the association between an instance and an Elastic Graphics accelerator.</p>
+ */
+export interface ElasticGpuAssociation {
   /**
    * @public
-   * <p>Indicates whether the instance is optimized for Amazon EBS I/O. This optimization
-   *             provides dedicated throughput to Amazon EBS and an optimized configuration stack to
-   *             provide optimal I/O performance. This optimization isn't available with all instance
-   *             types. Additional usage charges apply when using an EBS Optimized instance.</p>
+   * <p>The ID of the Elastic Graphics accelerator.</p>
    */
-  EbsOptimized?: boolean;
+  ElasticGpuId?: string;
 
   /**
    * @public
-   * <p>Specifies whether enhanced networking with ENA is enabled.</p>
+   * <p>The ID of the association.</p>
    */
-  EnaSupport?: boolean;
+  ElasticGpuAssociationId?: string;
 
   /**
    * @public
-   * <p>The hypervisor type of the instance. The value <code>xen</code> is used for both Xen
-   *             and Nitro hypervisors.</p>
+   * <p>The state of the association between the instance and the
+   *             Elastic Graphics accelerator.</p>
    */
-  Hypervisor?: HypervisorType;
+  ElasticGpuAssociationState?: string;
 
   /**
    * @public
-   * <p>The IAM instance profile associated with the instance, if
-   *             applicable.</p>
+   * <p>The time the Elastic Graphics accelerator was associated with the instance.</p>
    */
-  IamInstanceProfile?: IamInstanceProfile;
+  ElasticGpuAssociationTime?: string;
+}
 
+/**
+ * @public
+ * <p>
+ *             Describes the association between an instance and an elastic inference accelerator.
+ *         </p>
+ */
+export interface ElasticInferenceAcceleratorAssociation {
   /**
    * @public
-   * <p>Indicates whether this is a Spot Instance or a Scheduled Instance.</p>
+   * <p>
+   *             The Amazon Resource Name (ARN) of the elastic inference accelerator.
+   *         </p>
    */
-  InstanceLifecycle?: InstanceLifecycleType;
+  ElasticInferenceAcceleratorArn?: string;
 
   /**
    * @public
-   * <p>The Elastic GPU associated with the instance.</p>
+   * <p>
+   *             The ID of the association.
+   *         </p>
    */
-  ElasticGpuAssociations?: ElasticGpuAssociation[];
+  ElasticInferenceAcceleratorAssociationId?: string;
 
   /**
    * @public
-   * <p>The elastic inference accelerator associated with the instance.</p>
+   * <p>
+   *             The state of the elastic inference accelerator.
+   *         </p>
    */
-  ElasticInferenceAcceleratorAssociations?: ElasticInferenceAcceleratorAssociation[];
+  ElasticInferenceAcceleratorAssociationState?: string;
 
   /**
    * @public
-   * <p>The network interfaces for the instance.</p>
+   * <p>
+   *             The time at which the elastic inference accelerator is associated with an instance.
+   *         </p>
    */
-  NetworkInterfaces?: InstanceNetworkInterface[];
+  ElasticInferenceAcceleratorAssociationTime?: Date;
+}
 
+/**
+ * @public
+ * <p>Indicates whether your instance is configured for hibernation. This parameter is valid
+ *             only if the instance meets the <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/hibernating-prerequisites.html">hibernation
+ *                 prerequisites</a>. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Hibernate.html">Hibernate your instance</a> in the
+ *                 <i>Amazon EC2 User Guide</i>.</p>
+ */
+export interface HibernationOptions {
   /**
    * @public
-   * <p>The Amazon Resource Name (ARN) of the Outpost.</p>
+   * <p>If <code>true</code>, your instance is enabled for hibernation; otherwise, it is not
+   *             enabled for hibernation.</p>
    */
-  OutpostArn?: string;
+  Configured?: boolean;
+}
+
+/**
+ * @public
+ * @enum
+ */
+export const InstanceLifecycleType = {
+  capacity_block: "capacity-block",
+  scheduled: "scheduled",
+  spot: "spot",
+} as const;
 
+/**
+ * @public
+ */
+export type InstanceLifecycleType = (typeof InstanceLifecycleType)[keyof typeof InstanceLifecycleType];
+
+/**
+ * @public
+ * <p>Describes a license configuration.</p>
+ */
+export interface LicenseConfiguration {
   /**
    * @public
-   * <p>The device name of the root device volume (for example,
-   *             <code>/dev/sda1</code>).</p>
+   * <p>The Amazon Resource Name (ARN) of the license configuration.</p>
    */
-  RootDeviceName?: string;
+  LicenseConfigurationArn?: string;
+}
 
+/**
+ * @public
+ * @enum
+ */
+export const InstanceAutoRecoveryState = {
+  default: "default",
+  disabled: "disabled",
+} as const;
+
+/**
+ * @public
+ */
+export type InstanceAutoRecoveryState = (typeof InstanceAutoRecoveryState)[keyof typeof InstanceAutoRecoveryState];
+
+/**
+ * @public
+ * <p>The maintenance options for the instance.</p>
+ */
+export interface InstanceMaintenanceOptions {
   /**
    * @public
-   * <p>The root device type used by the AMI. The AMI can use an EBS volume or an instance
-   *             store volume.</p>
+   * <p>Provides information on the current automatic recovery behavior of your
+   *             instance.</p>
    */
-  RootDeviceType?: DeviceType;
+  AutoRecovery?: InstanceAutoRecoveryState;
+}
+
+/**
+ * @public
+ * @enum
+ */
+export const InstanceMetadataEndpointState = {
+  disabled: "disabled",
+  enabled: "enabled",
+} as const;
+
+/**
+ * @public
+ */
+export type InstanceMetadataEndpointState =
+  (typeof InstanceMetadataEndpointState)[keyof typeof InstanceMetadataEndpointState];
+
+/**
+ * @public
+ * @enum
+ */
+export const InstanceMetadataProtocolState = {
+  disabled: "disabled",
+  enabled: "enabled",
+} as const;
+
+/**
+ * @public
+ */
+export type InstanceMetadataProtocolState =
+  (typeof InstanceMetadataProtocolState)[keyof typeof InstanceMetadataProtocolState];
+
+/**
+ * @public
+ * @enum
+ */
+export const HttpTokensState = {
+  optional: "optional",
+  required: "required",
+} as const;
+
+/**
+ * @public
+ */
+export type HttpTokensState = (typeof HttpTokensState)[keyof typeof HttpTokensState];
+
+/**
+ * @public
+ * @enum
+ */
+export const InstanceMetadataTagsState = {
+  disabled: "disabled",
+  enabled: "enabled",
+} as const;
+
+/**
+ * @public
+ */
+export type InstanceMetadataTagsState = (typeof InstanceMetadataTagsState)[keyof typeof InstanceMetadataTagsState];
+
+/**
+ * @public
+ * @enum
+ */
+export const InstanceMetadataOptionsState = {
+  applied: "applied",
+  pending: "pending",
+} as const;
+
+/**
+ * @public
+ */
+export type InstanceMetadataOptionsState =
+  (typeof InstanceMetadataOptionsState)[keyof typeof InstanceMetadataOptionsState];
 
+/**
+ * @public
+ * <p>The metadata options for the instance.</p>
+ */
+export interface InstanceMetadataOptionsResponse {
   /**
    * @public
-   * <p>The security groups for the instance.</p>
+   * <p>The state of the metadata option changes.</p>
+   *          <p>
+   *             <code>pending</code> - The metadata options are being updated and the instance is not
+   *             ready to process metadata traffic with the new selection.</p>
+   *          <p>
+   *             <code>applied</code> - The metadata options have been successfully applied on the
+   *             instance.</p>
    */
-  SecurityGroups?: GroupIdentifier[];
+  State?: InstanceMetadataOptionsState;
 
   /**
    * @public
-   * <p>Indicates whether source/destination checking is enabled.</p>
+   * <p>IMDSv2 uses token-backed sessions. Indicates whether the use of HTTP tokens is
+   *                 <code>optional</code> (in other words, indicates whether the use of IMDSv2 is
+   *                 <code>optional</code>) or <code>required</code> (in other words, indicates whether
+   *             the use of IMDSv2 is <code>required</code>).</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>optional</code> - When IMDSv2 is optional, you can choose to retrieve instance metadata with or without
+   *             a session token in your request. If you retrieve the IAM role credentials
+   *             without a token, the IMDSv1 role credentials are returned. If you retrieve the IAM role credentials
+   *             using a valid session token, the IMDSv2 role credentials are returned.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>required</code> - When IMDSv2 is required, you must send a session token
+   *             with any instance metadata retrieval requests. In this state, retrieving the IAM role
+   *             credentials always returns IMDSv2 credentials; IMDSv1 credentials are not available.</p>
+   *             </li>
+   *          </ul>
+   *          <p>Default: <code>optional</code>
+   *          </p>
    */
-  SourceDestCheck?: boolean;
+  HttpTokens?: HttpTokensState;
 
   /**
    * @public
-   * <p>If the request is a Spot Instance request, the ID of the request.</p>
+   * <p>The desired HTTP PUT response hop limit for instance metadata requests. The larger the
+   *             number, the further instance metadata requests can travel.</p>
+   *          <p>Default: 1</p>
+   *          <p>Possible values: Integers from 1 to 64</p>
    */
-  SpotInstanceRequestId?: string;
+  HttpPutResponseHopLimit?: number;
 
   /**
    * @public
-   * <p>Specifies whether enhanced networking with the Intel 82599 Virtual Function interface
-   *             is enabled.</p>
+   * <p>Indicates whether the HTTP metadata endpoint on your instances is enabled or
+   *             disabled.</p>
+   *          <p>If the value is <code>disabled</code>, you cannot access your instance
+   *             metadata.</p>
    */
-  SriovNetSupport?: string;
+  HttpEndpoint?: InstanceMetadataEndpointState;
 
   /**
    * @public
-   * <p>The reason for the most recent state transition.</p>
+   * <p>Indicates whether the IPv6 endpoint for the instance metadata service is enabled or
+   *             disabled.</p>
    */
-  StateReason?: StateReason;
+  HttpProtocolIpv6?: InstanceMetadataProtocolState;
 
   /**
    * @public
-   * <p>Any tags assigned to the instance.</p>
+   * <p>Indicates whether access to instance tags from the instance metadata is enabled or
+   *             disabled. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Using_Tags.html#work-with-tags-in-IMDS">Work with
+   *                 instance tags using the instance metadata</a>.</p>
    */
-  Tags?: Tag[];
+  InstanceMetadataTags?: InstanceMetadataTagsState;
+}
+
+/**
+ * @public
+ * @enum
+ */
+export const MonitoringState = {
+  disabled: "disabled",
+  disabling: "disabling",
+  enabled: "enabled",
+  pending: "pending",
+} as const;
 
-  /**
-   * @public
-   * <p>The virtualization type of the instance.</p>
-   */
-  VirtualizationType?: VirtualizationType;
+/**
+ * @public
+ */
+export type MonitoringState = (typeof MonitoringState)[keyof typeof MonitoringState];
 
+/**
+ * @public
+ * <p>Describes the monitoring of an instance.</p>
+ */
+export interface Monitoring {
   /**
    * @public
-   * <p>The CPU options for the instance.</p>
+   * <p>Indicates whether detailed monitoring is enabled. Otherwise, basic monitoring is
+   *             enabled.</p>
    */
-  CpuOptions?: CpuOptions;
+  State?: MonitoringState;
+}
 
+/**
+ * @public
+ * <p>Describes association information for an Elastic IP address (IPv4).</p>
+ */
+export interface InstanceNetworkInterfaceAssociation {
   /**
    * @public
-   * <p>The ID of the Capacity Reservation.</p>
+   * <p>The carrier IP address associated with the network interface.</p>
    */
-  CapacityReservationId?: string;
+  CarrierIp?: string;
 
   /**
    * @public
-   * <p>Information about the Capacity Reservation targeting option.</p>
+   * <p>The customer-owned IP address associated with the network interface.</p>
    */
-  CapacityReservationSpecification?: CapacityReservationSpecificationResponse;
+  CustomerOwnedIp?: string;
 
   /**
    * @public
-   * <p>Indicates whether the instance is enabled for hibernation.</p>
+   * <p>The ID of the owner of the Elastic IP address.</p>
    */
-  HibernationOptions?: HibernationOptions;
+  IpOwnerId?: string;
 
   /**
    * @public
-   * <p>The license configurations for the instance.</p>
+   * <p>The public DNS name.</p>
    */
-  Licenses?: LicenseConfiguration[];
+  PublicDnsName?: string;
 
   /**
    * @public
-   * <p>The metadata options for the instance.</p>
+   * <p>The public IP address or Elastic IP address bound to the network interface.</p>
    */
-  MetadataOptions?: InstanceMetadataOptionsResponse;
+  PublicIp?: string;
+}
 
+/**
+ * @public
+ * <p>ENA Express is compatible with both TCP and UDP transport protocols. When it's enabled, TCP traffic
+ * 			automatically uses it. However, some UDP-based applications are designed to handle network packets that are
+ * 			out of order, without a need for retransmission, such as live video broadcasting or other near-real-time
+ * 			applications. For UDP traffic, you can specify whether to use ENA Express, based on your application
+ * 			environment needs.</p>
+ */
+export interface InstanceAttachmentEnaSrdUdpSpecification {
   /**
    * @public
-   * <p>Indicates whether the instance is enabled for Amazon Web Services Nitro
-   *             Enclaves.</p>
+   * <p>Indicates whether UDP traffic to and from the instance uses ENA Express. To specify this setting,
+   * 			you must first enable ENA Express.</p>
    */
-  EnclaveOptions?: EnclaveOptions;
+  EnaSrdUdpEnabled?: boolean;
+}
 
+/**
+ * @public
+ * <p>ENA Express uses Amazon Web Services Scalable Reliable Datagram (SRD) technology to increase the
+ * 			maximum bandwidth used per stream and minimize tail latency of network traffic between EC2 instances.
+ * 			With ENA Express, you can communicate between two EC2 instances in the same subnet within the same
+ * 			account, or in different accounts. Both sending and receiving instances must have ENA Express enabled.</p>
+ *          <p>To improve the reliability of network packet delivery, ENA Express reorders network packets on the
+ * 			receiving end by default. However, some UDP-based applications are designed to handle network packets
+ * 			that are out of order to reduce the overhead for packet delivery at the network layer. When ENA Express
+ * 			is enabled, you can specify whether UDP network traffic uses it.</p>
+ */
+export interface InstanceAttachmentEnaSrdSpecification {
   /**
    * @public
-   * <p>The boot mode that was specified by the AMI. If the value is <code>uefi-preferred</code>,
-   *             the AMI supports both UEFI and Legacy BIOS. The <code>currentInstanceBootMode</code> parameter
-   *             is the boot mode that is used to boot the instance at launch or start.</p>
-   *          <note>
-   *             <p>The operating system contained in the AMI must be configured to support the specified boot mode.</p>
-   *          </note>
-   *          <p>For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ami-boot.html">Boot modes</a> in the
-   *                 <i>Amazon EC2 User Guide</i>.</p>
+   * <p>Indicates whether ENA Express is enabled for the network interface.</p>
    */
-  BootMode?: BootModeValues;
+  EnaSrdEnabled?: boolean;
 
   /**
    * @public
-   * <p>The platform details value for the instance. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/billing-info-fields.html">AMI
-   *                 billing information fields</a> in the
-   *             <i>Amazon EC2 User Guide</i>.</p>
+   * <p>Configures ENA Express for UDP network traffic.</p>
    */
-  PlatformDetails?: string;
+  EnaSrdUdpSpecification?: InstanceAttachmentEnaSrdUdpSpecification;
+}
 
+/**
+ * @public
+ * <p>Describes a network interface attachment.</p>
+ */
+export interface InstanceNetworkInterfaceAttachment {
   /**
    * @public
-   * <p>The usage operation value for the instance. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/billing-info-fields.html">AMI
-   *                 billing information fields</a> in the
-   *             <i>Amazon EC2 User Guide</i>.</p>
+   * <p>The time stamp when the attachment initiated.</p>
    */
-  UsageOperation?: string;
+  AttachTime?: Date;
 
   /**
    * @public
-   * <p>The time that the usage operation was last updated.</p>
+   * <p>The ID of the network interface attachment.</p>
    */
-  UsageOperationUpdateTime?: Date;
+  AttachmentId?: string;
 
   /**
    * @public
-   * <p>The options for the instance hostname.</p>
+   * <p>Indicates whether the network interface is deleted when the instance is terminated.</p>
    */
-  PrivateDnsNameOptions?: PrivateDnsNameOptionsResponse;
+  DeleteOnTermination?: boolean;
 
   /**
    * @public
-   * <p>The IPv6 address assigned to the instance.</p>
+   * <p>The index of the device on the instance for the network interface attachment.</p>
    */
-  Ipv6Address?: string;
+  DeviceIndex?: number;
 
   /**
    * @public
-   * <p>If the instance is configured for NitroTPM support, the value is <code>v2.0</code>.
-   *             For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/nitrotpm.html">NitroTPM</a> in the
-   *                 <i>Amazon EC2 User Guide</i>.</p>
+   * <p>The attachment state.</p>
    */
-  TpmSupport?: string;
+  Status?: AttachmentStatus;
 
   /**
    * @public
-   * <p>Provides information on the recovery and maintenance options of your instance.</p>
+   * <p>The index of the network card.</p>
    */
-  MaintenanceOptions?: InstanceMaintenanceOptions;
+  NetworkCardIndex?: number;
 
   /**
    * @public
-   * <p>The boot mode that is used to boot the instance at launch or start. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ami-boot.html">Boot modes</a> in the
-   *             <i>Amazon EC2 User Guide</i>.</p>
+   * <p>Contains the ENA Express settings for the network interface that's attached
+   * 			to the instance.</p>
    */
-  CurrentInstanceBootMode?: InstanceBootModeValues;
+  EnaSrdSpecification?: InstanceAttachmentEnaSrdSpecification;
 }
 
 /**
  * @public
- * <p>Describes a launch request for one or more instances, and includes owner, requester,
- *             and security group information that applies to all instances in the launch
- *             request.</p>
+ * <p>A security group connection tracking specification response that enables you to set the idle timeout for connection tracking on an Elastic network interface. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-connection-tracking.html#connection-tracking-timeouts">Connection tracking timeouts</a> in the <i>Amazon Elastic Compute Cloud User Guide</i>.</p>
  */
-export interface Reservation {
-  /**
-   * @public
-   * <p>Not supported.</p>
-   */
-  Groups?: GroupIdentifier[];
-
-  /**
-   * @public
-   * <p>The instances.</p>
-   */
-  Instances?: Instance[];
-
+export interface ConnectionTrackingSpecificationResponse {
   /**
    * @public
-   * <p>The ID of the Amazon Web Services account that owns the reservation.</p>
+   * <p>Timeout (in seconds) for idle TCP
+   * 						connections in an established state. Min: 60 seconds. Max: 432000 seconds (5
+   * 						days). Default: 432000 seconds. Recommended: Less than 432000 seconds.</p>
    */
-  OwnerId?: string;
+  TcpEstablishedTimeout?: number;
 
   /**
    * @public
-   * <p>The ID of the requester that launched the instances on your behalf (for example,
-   *                 Amazon Web Services Management Console or Auto Scaling).</p>
+   * <p>Timeout (in seconds) for idle UDP
+   * 						flows classified as streams which have seen more than one request-response
+   * 						transaction. Min: 60 seconds. Max: 180 seconds (3 minutes). Default: 180
+   * 						seconds.</p>
    */
-  RequesterId?: string;
+  UdpStreamTimeout?: number;
 
   /**
    * @public
-   * <p>The ID of the reservation.</p>
+   * <p>Timeout (in seconds) for idle UDP flows that
+   * 						have seen traffic only in a single direction or a single request-response
+   * 						transaction. Min: 30 seconds. Max: 60 seconds. Default: 30 seconds.</p>
    */
-  ReservationId?: string;
+  UdpTimeout?: number;
 }
 
 /**
  * @public
+ * <p>Information about an IPv4 prefix.</p>
  */
-export interface DescribeInstancesResult {
+export interface InstanceIpv4Prefix {
   /**
    * @public
-   * <p>Information about the reservations.</p>
+   * <p>One or more IPv4 prefixes assigned to the network interface.</p>
    */
-  Reservations?: Reservation[];
+  Ipv4Prefix?: string;
+}
 
+/**
+ * @public
+ * <p>Information about an IPv6 prefix.</p>
+ */
+export interface InstanceIpv6Prefix {
   /**
    * @public
-   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there
-   *          are no more items to return.</p>
+   * <p>One or more IPv6 prefixes assigned to the network interface.</p>
    */
-  NextToken?: string;
+  Ipv6Prefix?: string;
 }
 
 /**
  * @public
+ * <p>Describes a private IPv4 address.</p>
  */
-export interface DescribeInstanceStatusRequest {
+export interface InstancePrivateIpAddress {
   /**
    * @public
-   * <p>The filters.</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>availability-zone</code> - The Availability Zone of the instance.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>event.code</code> - The code for the scheduled event
-   *                         (<code>instance-reboot</code> | <code>system-reboot</code> |
-   *                         <code>system-maintenance</code> | <code>instance-retirement</code> |
-   *                         <code>instance-stop</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>event.description</code> - A description of the event.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>event.instance-event-id</code> - The ID of the event whose date and time
-   *                     you are modifying.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>event.not-after</code> - The latest end time for the scheduled event
-   *                     (for example, <code>2014-09-15T17:15:20.000Z</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>event.not-before</code> - The earliest start time for the scheduled
-   *                     event (for example, <code>2014-09-15T17:15:20.000Z</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>event.not-before-deadline</code> - The deadline for starting the event
-   *                     (for example, <code>2014-09-15T17:15:20.000Z</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>instance-state-code</code> - The code for the instance state, as a
-   *                     16-bit unsigned integer. The high byte is used for internal purposes and should
-   *                     be ignored. The low byte is set based on the state represented. The valid values
-   *                     are 0 (pending), 16 (running), 32 (shutting-down), 48 (terminated), 64
-   *                     (stopping), and 80 (stopped).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>instance-state-name</code> - The state of the instance
-   *                         (<code>pending</code> | <code>running</code> | <code>shutting-down</code> |
-   *                         <code>terminated</code> | <code>stopping</code> |
-   *                     <code>stopped</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>instance-status.reachability</code> - Filters on instance status where
-   *                     the name is <code>reachability</code> (<code>passed</code> | <code>failed</code>
-   *                     | <code>initializing</code> | <code>insufficient-data</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>instance-status.status</code> - The status of the instance
-   *                         (<code>ok</code> | <code>impaired</code> | <code>initializing</code> |
-   *                         <code>insufficient-data</code> | <code>not-applicable</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>system-status.reachability</code> - Filters on system status where the
-   *                     name is <code>reachability</code> (<code>passed</code> | <code>failed</code> |
-   *                         <code>initializing</code> | <code>insufficient-data</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>system-status.status</code> - The system status of the instance
-   *                         (<code>ok</code> | <code>impaired</code> | <code>initializing</code> |
-   *                         <code>insufficient-data</code> | <code>not-applicable</code>).</p>
-   *             </li>
-   *          </ul>
+   * <p>The association information for an Elastic IP address for the network interface.</p>
+   */
+  Association?: InstanceNetworkInterfaceAssociation;
+
+  /**
+   * @public
+   * <p>Indicates whether this IPv4 address is the primary private IP address of the network interface.</p>
    */
-  Filters?: Filter[];
+  Primary?: boolean;
 
   /**
    * @public
-   * <p>The instance IDs.</p>
-   *          <p>Default: Describes all your instances.</p>
-   *          <p>Constraints: Maximum 100 explicitly specified instance IDs.</p>
+   * <p>The private IPv4 DNS name.</p>
    */
-  InstanceIds?: string[];
+  PrivateDnsName?: string;
 
   /**
    * @public
-   * <p>The maximum number of items to return for this request.
-   *          To get the next page of items, make another request with the token returned in the output.
-   * 	        For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
-   *          <p>You cannot specify this parameter and the instance IDs parameter in the same request.</p>
+   * <p>The private IPv4 address of the network interface.</p>
    */
-  MaxResults?: number;
+  PrivateIpAddress?: string;
+}
 
+/**
+ * @public
+ * <p>Describes a network interface.</p>
+ */
+export interface InstanceNetworkInterface {
   /**
    * @public
-   * <p>The token returned from a previous paginated request. Pagination continues from the end of the items returned by the previous request.</p>
+   * <p>The association information for an Elastic IPv4 associated with the network
+   *             interface.</p>
    */
-  NextToken?: string;
+  Association?: InstanceNetworkInterfaceAssociation;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The network interface attachment.</p>
    */
-  DryRun?: boolean;
+  Attachment?: InstanceNetworkInterfaceAttachment;
 
   /**
    * @public
-   * <p>When <code>true</code>, includes the health status for all instances. When
-   *                 <code>false</code>, includes the health status for running instances only.</p>
-   *          <p>Default: <code>false</code>
-   *          </p>
+   * <p>The description.</p>
    */
-  IncludeAllInstances?: boolean;
-}
+  Description?: string;
 
-/**
- * @public
- * @enum
- */
-export const EventCode = {
-  instance_reboot: "instance-reboot",
-  instance_retirement: "instance-retirement",
-  instance_stop: "instance-stop",
-  system_maintenance: "system-maintenance",
-  system_reboot: "system-reboot",
-} as const;
+  /**
+   * @public
+   * <p>The security groups.</p>
+   */
+  Groups?: GroupIdentifier[];
 
-/**
- * @public
- */
-export type EventCode = (typeof EventCode)[keyof typeof EventCode];
+  /**
+   * @public
+   * <p>The IPv6 addresses associated with the network interface.</p>
+   */
+  Ipv6Addresses?: InstanceIpv6Address[];
 
-/**
- * @public
- * <p>Describes a scheduled event for an instance.</p>
- */
-export interface InstanceStatusEvent {
   /**
    * @public
-   * <p>The ID of the event.</p>
+   * <p>The MAC address.</p>
    */
-  InstanceEventId?: string;
+  MacAddress?: string;
 
   /**
    * @public
-   * <p>The event code.</p>
+   * <p>The ID of the network interface.</p>
    */
-  Code?: EventCode;
+  NetworkInterfaceId?: string;
 
   /**
    * @public
-   * <p>A description of the event.</p>
-   *          <p>After a scheduled event is completed, it can still be described for up to a week. If
-   *             the event has been completed, this description starts with the following text:
-   *             [Completed].</p>
+   * <p>The ID of the Amazon Web Services account that created the network interface.</p>
    */
-  Description?: string;
+  OwnerId?: string;
 
   /**
    * @public
-   * <p>The latest scheduled end time for the event.</p>
+   * <p>The private DNS name.</p>
    */
-  NotAfter?: Date;
+  PrivateDnsName?: string;
 
   /**
    * @public
-   * <p>The earliest scheduled start time for the event.</p>
+   * <p>The IPv4 address of the network interface within the subnet.</p>
    */
-  NotBefore?: Date;
+  PrivateIpAddress?: string;
 
   /**
    * @public
-   * <p>The deadline for starting the event.</p>
+   * <p>The private IPv4 addresses associated with the network interface.</p>
    */
-  NotBeforeDeadline?: Date;
-}
+  PrivateIpAddresses?: InstancePrivateIpAddress[];
 
-/**
- * @public
- * @enum
- */
-export const StatusName = {
-  reachability: "reachability",
-} as const;
+  /**
+   * @public
+   * <p>Indicates whether source/destination checking is enabled.</p>
+   */
+  SourceDestCheck?: boolean;
 
-/**
- * @public
- */
-export type StatusName = (typeof StatusName)[keyof typeof StatusName];
+  /**
+   * @public
+   * <p>The status of the network interface.</p>
+   */
+  Status?: NetworkInterfaceStatus;
 
-/**
- * @public
- * @enum
- */
-export const StatusType = {
-  failed: "failed",
-  initializing: "initializing",
-  insufficient_data: "insufficient-data",
-  passed: "passed",
-} as const;
+  /**
+   * @public
+   * <p>The ID of the subnet.</p>
+   */
+  SubnetId?: string;
 
-/**
- * @public
- */
-export type StatusType = (typeof StatusType)[keyof typeof StatusType];
+  /**
+   * @public
+   * <p>The ID of the VPC.</p>
+   */
+  VpcId?: string;
+
+  /**
+   * @public
+   * <p>The type of network interface.</p>
+   *          <p>Valid values: <code>interface</code> | <code>efa</code> | <code>trunk</code>
+   *          </p>
+   */
+  InterfaceType?: string;
+
+  /**
+   * @public
+   * <p>The IPv4 delegated prefixes that are assigned to the network interface.</p>
+   */
+  Ipv4Prefixes?: InstanceIpv4Prefix[];
+
+  /**
+   * @public
+   * <p>The IPv6 delegated prefixes that are assigned to the network interface.</p>
+   */
+  Ipv6Prefixes?: InstanceIpv6Prefix[];
+
+  /**
+   * @public
+   * <p>A security group connection tracking configuration that enables you to set the timeout for connection tracking on an Elastic network interface. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-connection-tracking.html#connection-tracking-timeouts">Connection tracking timeouts</a> in the <i>Amazon Elastic Compute Cloud User Guide</i>.</p>
+   */
+  ConnectionTrackingConfiguration?: ConnectionTrackingSpecificationResponse;
+}
 
 /**
  * @public
- * <p>Describes the instance status.</p>
+ * <p>Describes the options for instance hostnames.</p>
  */
-export interface InstanceStatusDetails {
+export interface PrivateDnsNameOptionsResponse {
   /**
    * @public
-   * <p>The time when a status check failed. For an instance that was launched and impaired,
-   *             this is the time when the instance was launched.</p>
+   * <p>The type of hostname to assign to an instance.</p>
    */
-  ImpairedSince?: Date;
+  HostnameType?: HostnameType;
 
   /**
    * @public
-   * <p>The type of instance status.</p>
+   * <p>Indicates whether to respond to DNS queries for instance hostnames with DNS A
+   *             records.</p>
    */
-  Name?: StatusName;
+  EnableResourceNameDnsARecord?: boolean;
 
   /**
    * @public
-   * <p>The status.</p>
+   * <p>Indicates whether to respond to DNS queries for instance hostnames with DNS AAAA
+   *             records.</p>
    */
-  Status?: StatusType;
+  EnableResourceNameDnsAAAARecord?: boolean;
 }
 
 /**
  * @public
  * @enum
  */
-export const SummaryStatus = {
-  impaired: "impaired",
-  initializing: "initializing",
-  insufficient_data: "insufficient-data",
-  not_applicable: "not-applicable",
-  ok: "ok",
+export const InstanceStateName = {
+  pending: "pending",
+  running: "running",
+  shutting_down: "shutting-down",
+  stopped: "stopped",
+  stopping: "stopping",
+  terminated: "terminated",
 } as const;
 
-/**
- * @public
- */
-export type SummaryStatus = (typeof SummaryStatus)[keyof typeof SummaryStatus];
+/**
+ * @public
+ */
+export type InstanceStateName = (typeof InstanceStateName)[keyof typeof InstanceStateName];
+
+/**
+ * @public
+ * <p>Describes the current state of an instance.</p>
+ */
+export interface InstanceState {
+  /**
+   * @public
+   * <p>The state of the instance as a 16-bit unsigned integer. </p>
+   *          <p>The high byte is all of the bits between 2^8 and (2^16)-1, which equals decimal values
+   *             between 256 and 65,535. These numerical values are used for internal purposes and should
+   *             be ignored.</p>
+   *          <p>The low byte is all of the bits between 2^0 and (2^8)-1, which equals decimal values
+   *             between 0 and 255. </p>
+   *          <p>The valid values for instance-state-code will all be in the range of the low byte and
+   *             they are:</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>0</code> : <code>pending</code>
+   *                </p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>16</code> : <code>running</code>
+   *                </p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>32</code> : <code>shutting-down</code>
+   *                </p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>48</code> : <code>terminated</code>
+   *                </p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>64</code> : <code>stopping</code>
+   *                </p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>80</code> : <code>stopped</code>
+   *                </p>
+   *             </li>
+   *          </ul>
+   *          <p>You can ignore the high byte value by zeroing out all of the bits above 2^8 or 256 in
+   *             decimal.</p>
+   */
+  Code?: number;
+
+  /**
+   * @public
+   * <p>The current state of the instance.</p>
+   */
+  Name?: InstanceStateName;
+}
 
 /**
  * @public
- * <p>Describes the status of an instance.</p>
+ * <p>Describes an instance.</p>
  */
-export interface InstanceStatusSummary {
+export interface Instance {
   /**
    * @public
-   * <p>The system instance health or application instance health.</p>
+   * <p>The AMI launch index, which can be used to find this instance in the launch
+   *             group.</p>
    */
-  Details?: InstanceStatusDetails[];
+  AmiLaunchIndex?: number;
 
   /**
    * @public
-   * <p>The status.</p>
+   * <p>The ID of the AMI used to launch the instance.</p>
    */
-  Status?: SummaryStatus;
-}
+  ImageId?: string;
 
-/**
- * @public
- * <p>Describes the status of an instance.</p>
- */
-export interface InstanceStatus {
   /**
    * @public
-   * <p>The Availability Zone of the instance.</p>
+   * <p>The ID of the instance.</p>
    */
-  AvailabilityZone?: string;
+  InstanceId?: string;
 
   /**
    * @public
-   * <p>The Amazon Resource Name (ARN) of the Outpost.</p>
+   * <p>The instance type.</p>
    */
-  OutpostArn?: string;
+  InstanceType?: _InstanceType;
 
   /**
    * @public
-   * <p>Any scheduled events associated with the instance.</p>
+   * <p>The kernel associated with this instance, if applicable.</p>
    */
-  Events?: InstanceStatusEvent[];
+  KernelId?: string;
 
   /**
    * @public
-   * <p>The ID of the instance.</p>
+   * <p>The name of the key pair, if this instance was launched with an associated key
+   *             pair.</p>
    */
-  InstanceId?: string;
+  KeyName?: string;
 
   /**
    * @public
-   * <p>The intended state of the instance. <a>DescribeInstanceStatus</a> requires
-   *             that an instance be in the <code>running</code> state.</p>
+   * <p>The time the instance was launched.</p>
    */
-  InstanceState?: InstanceState;
+  LaunchTime?: Date;
 
   /**
    * @public
-   * <p>Reports impaired functionality that stems from issues internal to the instance, such
-   *             as impaired reachability.</p>
+   * <p>The monitoring for the instance.</p>
    */
-  InstanceStatus?: InstanceStatusSummary;
+  Monitoring?: Monitoring;
 
   /**
    * @public
-   * <p>Reports impaired functionality that stems from issues related to the systems that
-   *             support an instance, such as hardware failures and network connectivity problems.</p>
+   * <p>The location where the instance launched, if applicable.</p>
    */
-  SystemStatus?: InstanceStatusSummary;
-}
+  Placement?: Placement;
 
-/**
- * @public
- */
-export interface DescribeInstanceStatusResult {
   /**
    * @public
-   * <p>Information about the status of the instances.</p>
+   * <p>The platform. This value is <code>windows</code> for Windows instances; otherwise, it is empty.</p>
    */
-  InstanceStatuses?: InstanceStatus[];
+  Platform?: PlatformValues;
 
   /**
    * @public
-   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there
-   *          are no more items to return.</p>
+   * <p>[IPv4 only] The private DNS hostname name assigned to the instance. This DNS hostname
+   *             can only be used inside the Amazon EC2 network. This name is not available until the
+   *             instance enters the <code>running</code> state. </p>
+   *          <p>The Amazon-provided DNS server resolves Amazon-provided private DNS
+   *             hostnames if you've enabled DNS resolution and DNS hostnames in your VPC. If you are not
+   *             using the Amazon-provided DNS server in your VPC, your custom domain name servers must
+   *             resolve the hostname as appropriate.</p>
    */
-  NextToken?: string;
-}
+  PrivateDnsName?: string;
 
-/**
- * @public
- */
-export interface DescribeInstanceTopologyRequest {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The private IPv4 address assigned to the instance.</p>
    */
-  DryRun?: boolean;
+  PrivateIpAddress?: string;
 
   /**
    * @public
-   * <p>The token returned from a previous paginated request. Pagination continues from the end of the items returned by the previous request.</p>
+   * <p>The product codes attached to this instance, if applicable.</p>
    */
-  NextToken?: string;
+  ProductCodes?: ProductCode[];
 
   /**
    * @public
-   * <p>The maximum number of items to return for this request.
-   *          To get the next page of items, make another request with the token returned in the output.
-   * 	        For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
-   *          <p>You can't specify this parameter and the instance IDs parameter in the same request.</p>
-   *          <p>Default: <code>20</code>
-   *          </p>
+   * <p>[IPv4 only] The public DNS name assigned to the instance. This name is not available
+   *             until the instance enters the <code>running</code> state. This name is only
+   *             available if you've enabled DNS hostnames for your VPC.</p>
    */
-  MaxResults?: number;
+  PublicDnsName?: string;
 
   /**
    * @public
-   * <p>The instance IDs.</p>
-   *          <p>Default: Describes all your instances.</p>
-   *          <p>Constraints: Maximum 100 explicitly specified instance IDs.</p>
+   * <p>The public IPv4 address, or the Carrier IP address assigned to the instance, if
+   *             applicable.</p>
+   *          <p>A Carrier IP address only applies to an instance launched in a subnet associated with
+   *             a Wavelength Zone.</p>
    */
-  InstanceIds?: string[];
+  PublicIpAddress?: string;
 
   /**
    * @public
-   * <p>The name of the placement group that each instance is in.</p>
-   *          <p>Constraints: Maximum 100 explicitly specified placement group names.</p>
+   * <p>The RAM disk associated with this instance, if applicable.</p>
    */
-  GroupNames?: string[];
+  RamdiskId?: string;
 
   /**
    * @public
-   * <p>The filters.</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>availability-zone</code> - The name of the Availability Zone (for
-   *                     example, <code>us-west-2a</code>) or Local Zone (for example,
-   *                         <code>us-west-2-lax-1b</code>) that the instance is in.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>instance-type</code> - The instance type (for example,
-   *                         <code>p4d.24xlarge</code>) or instance family (for example,
-   *                         <code>p4d*</code>). You can use the <code>*</code> wildcard to match zero or
-   *                     more characters, or the <code>?</code> wildcard to match zero or one
-   *                     character.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>zone-id</code> - The ID of the Availability Zone (for example,
-   *                         <code>usw2-az2</code>) or Local Zone (for example,
-   *                         <code>usw2-lax1-az1</code>) that the instance is in.</p>
-   *             </li>
-   *          </ul>
+   * <p>The current state of the instance.</p>
    */
-  Filters?: Filter[];
-}
+  State?: InstanceState;
 
-/**
- * @public
- * <p>Information about the instance topology.</p>
- */
-export interface InstanceTopology {
   /**
    * @public
-   * <p>The instance ID.</p>
+   * <p>The reason for the most recent state transition. This might be an empty string.</p>
    */
-  InstanceId?: string;
+  StateTransitionReason?: string;
 
   /**
    * @public
-   * <p>The instance type.</p>
+   * <p>The ID of the subnet in which the instance is running.</p>
    */
-  InstanceType?: string;
+  SubnetId?: string;
 
   /**
    * @public
-   * <p>The name of the placement group that the instance is in.</p>
+   * <p>The ID of the VPC in which the instance is running.</p>
    */
-  GroupName?: string;
+  VpcId?: string;
 
   /**
    * @public
-   * <p>The network nodes. The nodes are hashed based on your account. Instances from
-   *             different accounts running under the same droplet will return a different hashed list of
-   *             strings.</p>
+   * <p>The architecture of the image.</p>
    */
-  NetworkNodes?: string[];
+  Architecture?: ArchitectureValues;
 
   /**
    * @public
-   * <p>The name of the Availability Zone or Local Zone that the instance is in.</p>
+   * <p>Any block device mapping entries for the instance.</p>
    */
-  AvailabilityZone?: string;
+  BlockDeviceMappings?: InstanceBlockDeviceMapping[];
 
   /**
    * @public
-   * <p>The ID of the Availability Zone or Local Zone that the instance is in.</p>
+   * <p>The idempotency token you provided when you launched the instance, if
+   *             applicable.</p>
    */
-  ZoneId?: string;
-}
+  ClientToken?: string;
 
-/**
- * @public
- */
-export interface DescribeInstanceTopologyResult {
   /**
    * @public
-   * <p>Information about the topology of each instance.</p>
+   * <p>Indicates whether the instance is optimized for Amazon EBS I/O. This optimization
+   *             provides dedicated throughput to Amazon EBS and an optimized configuration stack to
+   *             provide optimal I/O performance. This optimization isn't available with all instance
+   *             types. Additional usage charges apply when using an EBS Optimized instance.</p>
    */
-  Instances?: InstanceTopology[];
+  EbsOptimized?: boolean;
 
   /**
    * @public
-   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there
-   *          are no more items to return.</p>
+   * <p>Specifies whether enhanced networking with ENA is enabled.</p>
    */
-  NextToken?: string;
-}
+  EnaSupport?: boolean;
 
-/**
- * @public
- * @enum
- */
-export const LocationType = {
-  availability_zone: "availability-zone",
-  availability_zone_id: "availability-zone-id",
-  outpost: "outpost",
-  region: "region",
-} as const;
+  /**
+   * @public
+   * <p>The hypervisor type of the instance. The value <code>xen</code> is used for both Xen
+   *             and Nitro hypervisors.</p>
+   */
+  Hypervisor?: HypervisorType;
 
-/**
- * @public
- */
-export type LocationType = (typeof LocationType)[keyof typeof LocationType];
+  /**
+   * @public
+   * <p>The IAM instance profile associated with the instance, if
+   *             applicable.</p>
+   */
+  IamInstanceProfile?: IamInstanceProfile;
 
-/**
- * @public
- */
-export interface DescribeInstanceTypeOfferingsRequest {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *          and provides an error response. If you have the required permissions, the error response is
-   *          <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>Indicates whether this is a Spot Instance or a Scheduled Instance.</p>
    */
-  DryRun?: boolean;
+  InstanceLifecycle?: InstanceLifecycleType;
 
   /**
    * @public
-   * <p>The location type.</p>
+   * <p>The Elastic GPU associated with the instance.</p>
    */
-  LocationType?: LocationType;
+  ElasticGpuAssociations?: ElasticGpuAssociation[];
 
   /**
    * @public
-   * <p>One or more filters. Filter names and values are case-sensitive.</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>location</code> - This depends on the location type. For example, if the location type is
-   *       <code>region</code> (default), the location is the Region code (for example, <code>us-east-2</code>.)</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>instance-type</code> - The instance type. For example,
-   *      <code>c5.2xlarge</code>.</p>
-   *             </li>
-   *          </ul>
+   * <p>The elastic inference accelerator associated with the instance.</p>
+   */
+  ElasticInferenceAcceleratorAssociations?: ElasticInferenceAcceleratorAssociation[];
+
+  /**
+   * @public
+   * <p>The network interfaces for the instance.</p>
    */
-  Filters?: Filter[];
+  NetworkInterfaces?: InstanceNetworkInterface[];
 
   /**
    * @public
-   * <p>The maximum number of items to return for this request.
-   *          To get the next page of items, make another request with the token returned in the output.
-   * 	        For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
+   * <p>The Amazon Resource Name (ARN) of the Outpost.</p>
    */
-  MaxResults?: number;
+  OutpostArn?: string;
 
   /**
    * @public
-   * <p>The token returned from a previous paginated request. Pagination continues from the end of the items returned by the previous request.</p>
+   * <p>The device name of the root device volume (for example,
+   *             <code>/dev/sda1</code>).</p>
    */
-  NextToken?: string;
-}
+  RootDeviceName?: string;
 
-/**
- * @public
- * <p>The instance types offered.</p>
- */
-export interface InstanceTypeOffering {
   /**
    * @public
-   * <p>The instance type. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html">Instance types</a> in the <i>Amazon EC2 User Guide</i>.</p>
+   * <p>The root device type used by the AMI. The AMI can use an EBS volume or an instance
+   *             store volume.</p>
    */
-  InstanceType?: _InstanceType;
+  RootDeviceType?: DeviceType;
 
   /**
    * @public
-   * <p>The location type.</p>
+   * <p>The security groups for the instance.</p>
    */
-  LocationType?: LocationType;
+  SecurityGroups?: GroupIdentifier[];
 
   /**
    * @public
-   * <p>The identifier for the location. This depends on the location type. For example, if the location type is
-   *     <code>region</code>, the location is the Region code (for example, <code>us-east-2</code>.)</p>
+   * <p>Indicates whether source/destination checking is enabled.</p>
    */
-  Location?: string;
-}
+  SourceDestCheck?: boolean;
 
-/**
- * @public
- */
-export interface DescribeInstanceTypeOfferingsResult {
   /**
    * @public
-   * <p>The instance types offered.</p>
+   * <p>If the request is a Spot Instance request, the ID of the request.</p>
    */
-  InstanceTypeOfferings?: InstanceTypeOffering[];
+  SpotInstanceRequestId?: string;
 
   /**
    * @public
-   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there
-   *          are no more items to return.</p>
+   * <p>Specifies whether enhanced networking with the Intel 82599 Virtual Function interface
+   *             is enabled.</p>
    */
-  NextToken?: string;
-}
+  SriovNetSupport?: string;
 
-/**
- * @public
- */
-export interface DescribeInstanceTypesRequest {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *          and provides an error response. If you have the required permissions, the error response is
-   *          <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The reason for the most recent state transition.</p>
    */
-  DryRun?: boolean;
+  StateReason?: StateReason;
 
   /**
    * @public
-   * <p>The instance types. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html">Instance types</a> in the <i>Amazon EC2 User Guide</i>.</p>
+   * <p>Any tags assigned to the instance.</p>
    */
-  InstanceTypes?: _InstanceType[];
+  Tags?: Tag[];
 
   /**
    * @public
-   * <p>One or more filters. Filter names and values are case-sensitive.</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>auto-recovery-supported</code> - Indicates whether Amazon CloudWatch action based recovery is supported  (<code>true</code> | <code>false</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>bare-metal</code> - Indicates whether it is a bare metal instance type  (<code>true</code> | <code>false</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>burstable-performance-supported</code> - Indicates whether the instance type is a
-   *      burstable performance T instance type  (<code>true</code> | <code>false</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>current-generation</code> - Indicates whether this instance type is the latest
-   *      generation instance type of an instance family  (<code>true</code> | <code>false</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>ebs-info.ebs-optimized-info.baseline-bandwidth-in-mbps</code> - The baseline
-   *                     bandwidth performance for an EBS-optimized instance type, in Mbps.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>ebs-info.ebs-optimized-info.baseline-iops</code> - The baseline input/output storage
-   *      operations per second for an EBS-optimized instance type.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>ebs-info.ebs-optimized-info.baseline-throughput-in-mbps</code> - The baseline
-   *      throughput performance for an EBS-optimized instance type, in MB/s.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>ebs-info.ebs-optimized-info.maximum-bandwidth-in-mbps</code> - The maximum bandwidth
-   *                     performance for an EBS-optimized instance type, in Mbps.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>ebs-info.ebs-optimized-info.maximum-iops</code> - The maximum input/output storage
-   *                     operations per second for an EBS-optimized instance type.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>ebs-info.ebs-optimized-info.maximum-throughput-in-mbps</code> - The maximum
-   *      throughput performance for an EBS-optimized instance type, in MB/s.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>ebs-info.ebs-optimized-support</code> - Indicates whether the instance type is
-   *      EBS-optimized (<code>supported</code> | <code>unsupported</code> |
-   *      <code>default</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>ebs-info.encryption-support</code> - Indicates whether EBS encryption is supported
-   *       (<code>supported</code> | <code>unsupported</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>ebs-info.nvme-support</code> - Indicates whether non-volatile memory express (NVMe)
-   *      is supported for EBS volumes (<code>required</code> | <code>supported</code> | <code>unsupported</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>free-tier-eligible</code> - Indicates whether the instance type is eligible to use
-   *      in the free tier  (<code>true</code> | <code>false</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>hibernation-supported</code> - Indicates whether On-Demand hibernation is supported  (<code>true</code> | <code>false</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>hypervisor</code> - The hypervisor (<code>nitro</code> | <code>xen</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>instance-storage-info.disk.count</code> - The number of local disks.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>instance-storage-info.disk.size-in-gb</code> - The storage size of each instance storage disk, in
-   *      GB.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>instance-storage-info.disk.type</code> - The storage technology for the local
-   *      instance storage disks (<code>hdd</code> | <code>ssd</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>instance-storage-info.encryption-support</code> - Indicates whether data is encrypted at rest
-   *      (<code>required</code> | <code>supported</code> | <code>unsupported</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>instance-storage-info.nvme-support</code> - Indicates whether non-volatile memory
-   *      express (NVMe) is supported for instance store (<code>required</code> | <code>supported</code> |
-   *      <code>unsupported</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>instance-storage-info.total-size-in-gb</code> - The total amount of storage available from all local
-   *      instance storage, in GB.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>instance-storage-supported</code> - Indicates whether the instance type has local
-   *      instance storage  (<code>true</code> | <code>false</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>instance-type</code> - The instance type (for example <code>c5.2xlarge</code> or
-   *      c5*).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>memory-info.size-in-mib</code> - The memory size.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>network-info.efa-info.maximum-efa-interfaces</code> - The maximum number of Elastic
-   *      Fabric Adapters (EFAs) per instance.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>network-info.efa-supported</code> - Indicates whether the instance type supports
-   *      Elastic Fabric Adapter (EFA)  (<code>true</code> | <code>false</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>network-info.ena-support</code> - Indicates whether Elastic Network Adapter (ENA) is
-   *      supported or required (<code>required</code> | <code>supported</code> |
-   *       <code>unsupported</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>network-info.encryption-in-transit-supported</code> - Indicates whether the instance type
-   *      automatically encrypts in-transit traffic between instances  (<code>true</code> | <code>false</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>network-info.ipv4-addresses-per-interface</code> - The maximum number of private IPv4 addresses per
-   *      network interface.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>network-info.ipv6-addresses-per-interface</code> - The maximum number of private IPv6 addresses per
-   *      network interface.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>network-info.ipv6-supported</code> - Indicates whether the instance type supports IPv6  (<code>true</code> | <code>false</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>network-info.maximum-network-cards</code> - The maximum number of network cards per
-   *      instance.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>network-info.maximum-network-interfaces</code> - The maximum number of network interfaces per instance.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>network-info.network-performance</code> - The network performance (for example, "25
-   *      Gigabit").</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>nitro-enclaves-support</code> - Indicates whether Nitro Enclaves is supported (<code>supported</code> |
-   *      <code>unsupported</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>nitro-tpm-support</code> - Indicates whether NitroTPM is supported (<code>supported</code> |
-   *      <code>unsupported</code>).</p>
-   *             </li>
+   * <p>The virtualization type of the instance.</p>
+   */
+  VirtualizationType?: VirtualizationType;
+
+  /**
+   * @public
+   * <p>The CPU options for the instance.</p>
+   */
+  CpuOptions?: CpuOptions;
+
+  /**
+   * @public
+   * <p>The ID of the Capacity Reservation.</p>
+   */
+  CapacityReservationId?: string;
+
+  /**
+   * @public
+   * <p>Information about the Capacity Reservation targeting option.</p>
+   */
+  CapacityReservationSpecification?: CapacityReservationSpecificationResponse;
+
+  /**
+   * @public
+   * <p>Indicates whether the instance is enabled for hibernation.</p>
+   */
+  HibernationOptions?: HibernationOptions;
+
+  /**
+   * @public
+   * <p>The license configurations for the instance.</p>
+   */
+  Licenses?: LicenseConfiguration[];
+
+  /**
+   * @public
+   * <p>The metadata options for the instance.</p>
+   */
+  MetadataOptions?: InstanceMetadataOptionsResponse;
+
+  /**
+   * @public
+   * <p>Indicates whether the instance is enabled for Amazon Web Services Nitro
+   *             Enclaves.</p>
+   */
+  EnclaveOptions?: EnclaveOptions;
+
+  /**
+   * @public
+   * <p>The boot mode that was specified by the AMI. If the value is <code>uefi-preferred</code>,
+   *             the AMI supports both UEFI and Legacy BIOS. The <code>currentInstanceBootMode</code> parameter
+   *             is the boot mode that is used to boot the instance at launch or start.</p>
+   *          <note>
+   *             <p>The operating system contained in the AMI must be configured to support the specified boot mode.</p>
+   *          </note>
+   *          <p>For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ami-boot.html">Boot modes</a> in the
+   *                 <i>Amazon EC2 User Guide</i>.</p>
+   */
+  BootMode?: BootModeValues;
+
+  /**
+   * @public
+   * <p>The platform details value for the instance. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/billing-info-fields.html">AMI
+   *                 billing information fields</a> in the
+   *             <i>Amazon EC2 User Guide</i>.</p>
+   */
+  PlatformDetails?: string;
+
+  /**
+   * @public
+   * <p>The usage operation value for the instance. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/billing-info-fields.html">AMI
+   *                 billing information fields</a> in the
+   *             <i>Amazon EC2 User Guide</i>.</p>
+   */
+  UsageOperation?: string;
+
+  /**
+   * @public
+   * <p>The time that the usage operation was last updated.</p>
+   */
+  UsageOperationUpdateTime?: Date;
+
+  /**
+   * @public
+   * <p>The options for the instance hostname.</p>
+   */
+  PrivateDnsNameOptions?: PrivateDnsNameOptionsResponse;
+
+  /**
+   * @public
+   * <p>The IPv6 address assigned to the instance.</p>
+   */
+  Ipv6Address?: string;
+
+  /**
+   * @public
+   * <p>If the instance is configured for NitroTPM support, the value is <code>v2.0</code>.
+   *             For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/nitrotpm.html">NitroTPM</a> in the
+   *                 <i>Amazon EC2 User Guide</i>.</p>
+   */
+  TpmSupport?: string;
+
+  /**
+   * @public
+   * <p>Provides information on the recovery and maintenance options of your instance.</p>
+   */
+  MaintenanceOptions?: InstanceMaintenanceOptions;
+
+  /**
+   * @public
+   * <p>The boot mode that is used to boot the instance at launch or start. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ami-boot.html">Boot modes</a> in the
+   *             <i>Amazon EC2 User Guide</i>.</p>
+   */
+  CurrentInstanceBootMode?: InstanceBootModeValues;
+}
+
+/**
+ * @public
+ * <p>Describes a launch request for one or more instances, and includes owner, requester,
+ *             and security group information that applies to all instances in the launch
+ *             request.</p>
+ */
+export interface Reservation {
+  /**
+   * @public
+   * <p>Not supported.</p>
+   */
+  Groups?: GroupIdentifier[];
+
+  /**
+   * @public
+   * <p>The instances.</p>
+   */
+  Instances?: Instance[];
+
+  /**
+   * @public
+   * <p>The ID of the Amazon Web Services account that owns the reservation.</p>
+   */
+  OwnerId?: string;
+
+  /**
+   * @public
+   * <p>The ID of the requester that launched the instances on your behalf (for example,
+   *                 Amazon Web Services Management Console or Auto Scaling).</p>
+   */
+  RequesterId?: string;
+
+  /**
+   * @public
+   * <p>The ID of the reservation.</p>
+   */
+  ReservationId?: string;
+}
+
+/**
+ * @public
+ */
+export interface DescribeInstancesResult {
+  /**
+   * @public
+   * <p>Information about the reservations.</p>
+   */
+  Reservations?: Reservation[];
+
+  /**
+   * @public
+   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there
+   *          are no more items to return.</p>
+   */
+  NextToken?: string;
+}
+
+/**
+ * @public
+ */
+export interface DescribeInstanceStatusRequest {
+  /**
+   * @public
+   * <p>The filters.</p>
+   *          <ul>
    *             <li>
    *                <p>
-   *                   <code>nitro-tpm-info.supported-versions</code> - The supported NitroTPM version (<code>2.0</code>).</p>
+   *                   <code>availability-zone</code> - The Availability Zone of the instance.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>processor-info.supported-architecture</code> - The CPU architecture
-   *       (<code>arm64</code> | <code>i386</code> | <code>x86_64</code>).</p>
+   *                   <code>event.code</code> - The code for the scheduled event
+   *                         (<code>instance-reboot</code> | <code>system-reboot</code> |
+   *                         <code>system-maintenance</code> | <code>instance-retirement</code> |
+   *                         <code>instance-stop</code>).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>processor-info.sustained-clock-speed-in-ghz</code> - The CPU clock speed, in GHz.</p>
+   *                   <code>event.description</code> - A description of the event.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>processor-info.supported-features</code> - The supported CPU features (<code>amd-sev-snp</code>).</p>
+   *                   <code>event.instance-event-id</code> - The ID of the event whose date and time
+   *                     you are modifying.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>supported-boot-mode</code> - The boot mode (<code>legacy-bios</code> |
-   *       <code>uefi</code>).</p>
+   *                   <code>event.not-after</code> - The latest end time for the scheduled event
+   *                     (for example, <code>2014-09-15T17:15:20.000Z</code>).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>supported-root-device-type</code> - The root device type (<code>ebs</code> |
-   *       <code>instance-store</code>).</p>
+   *                   <code>event.not-before</code> - The earliest start time for the scheduled
+   *                     event (for example, <code>2014-09-15T17:15:20.000Z</code>).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>supported-usage-class</code> - The usage class (<code>on-demand</code> |
-   *       <code>spot</code>).</p>
+   *                   <code>event.not-before-deadline</code> - The deadline for starting the event
+   *                     (for example, <code>2014-09-15T17:15:20.000Z</code>).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>supported-virtualization-type</code> - The virtualization type (<code>hvm</code> |
-   *       <code>paravirtual</code>).</p>
+   *                   <code>instance-state-code</code> - The code for the instance state, as a
+   *                     16-bit unsigned integer. The high byte is used for internal purposes and should
+   *                     be ignored. The low byte is set based on the state represented. The valid values
+   *                     are 0 (pending), 16 (running), 32 (shutting-down), 48 (terminated), 64
+   *                     (stopping), and 80 (stopped).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>vcpu-info.default-cores</code> - The default number of cores for the instance type.</p>
+   *                   <code>instance-state-name</code> - The state of the instance
+   *                         (<code>pending</code> | <code>running</code> | <code>shutting-down</code> |
+   *                         <code>terminated</code> | <code>stopping</code> |
+   *                     <code>stopped</code>).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>vcpu-info.default-threads-per-core</code> - The default number of threads per core for the instance
-   *      type.</p>
+   *                   <code>instance-status.reachability</code> - Filters on instance status where
+   *                     the name is <code>reachability</code> (<code>passed</code> | <code>failed</code>
+   *                     | <code>initializing</code> | <code>insufficient-data</code>).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>vcpu-info.default-vcpus</code> - The default number of vCPUs for the instance type.</p>
+   *                   <code>instance-status.status</code> - The status of the instance
+   *                         (<code>ok</code> | <code>impaired</code> | <code>initializing</code> |
+   *                         <code>insufficient-data</code> | <code>not-applicable</code>).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>vcpu-info.valid-cores</code> - The number of cores that can be configured for the instance type.</p>
+   *                   <code>system-status.reachability</code> - Filters on system status where the
+   *                     name is <code>reachability</code> (<code>passed</code> | <code>failed</code> |
+   *                         <code>initializing</code> | <code>insufficient-data</code>).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>vcpu-info.valid-threads-per-core</code> - The number of threads per core that can be configured for the instance type.
-   *         For example, "1" or "1,2".</p>
+   *                   <code>system-status.status</code> - The system status of the instance
+   *                         (<code>ok</code> | <code>impaired</code> | <code>initializing</code> |
+   *                         <code>insufficient-data</code> | <code>not-applicable</code>).</p>
    *             </li>
    *          </ul>
    */
-  Filters?: Filter[];
-
-  /**
-   * @public
-   * <p>The maximum number of items to return for this request.
-   *          To get the next page of items, make another request with the token returned in the output.
-   * 	        For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
-   */
-  MaxResults?: number;
-
-  /**
-   * @public
-   * <p>The token returned from a previous paginated request. Pagination continues from the end of the items returned by the previous request.</p>
-   */
-  NextToken?: string;
-}
-
-/**
- * @public
- * <p>Describes the optimized EBS performance for supported instance types.</p>
- */
-export interface EbsOptimizedInfo {
-  /**
-   * @public
-   * <p>The baseline bandwidth performance for an EBS-optimized instance type, in Mbps.</p>
-   */
-  BaselineBandwidthInMbps?: number;
+  Filters?: Filter[];
 
   /**
    * @public
-   * <p>The baseline throughput performance for an EBS-optimized instance type, in MB/s.</p>
+   * <p>The instance IDs.</p>
+   *          <p>Default: Describes all your instances.</p>
+   *          <p>Constraints: Maximum 100 explicitly specified instance IDs.</p>
    */
-  BaselineThroughputInMBps?: number;
+  InstanceIds?: string[];
 
   /**
    * @public
-   * <p>The baseline input/output storage operations per seconds for an EBS-optimized instance type.</p>
+   * <p>The maximum number of items to return for this request.
+   *          To get the next page of items, make another request with the token returned in the output.
+   * 	        For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
+   *          <p>You cannot specify this parameter and the instance IDs parameter in the same request.</p>
    */
-  BaselineIops?: number;
+  MaxResults?: number;
 
   /**
    * @public
-   * <p>The maximum bandwidth performance for an EBS-optimized instance type, in Mbps.</p>
+   * <p>The token returned from a previous paginated request. Pagination continues from the end of the items returned by the previous request.</p>
    */
-  MaximumBandwidthInMbps?: number;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The maximum throughput performance for an EBS-optimized instance type, in MB/s.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  MaximumThroughputInMBps?: number;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The maximum input/output storage operations per second for an EBS-optimized instance type.</p>
+   * <p>When <code>true</code>, includes the health status for all instances. When
+   *                 <code>false</code>, includes the health status for running instances only.</p>
+   *          <p>Default: <code>false</code>
+   *          </p>
    */
-  MaximumIops?: number;
+  IncludeAllInstances?: boolean;
 }
 
 /**
  * @public
  * @enum
  */
-export const EbsOptimizedSupport = {
-  default: "default",
-  supported: "supported",
-  unsupported: "unsupported",
-} as const;
-
-/**
- * @public
- */
-export type EbsOptimizedSupport = (typeof EbsOptimizedSupport)[keyof typeof EbsOptimizedSupport];
-
-/**
- * @public
- * @enum
- */
-export const EbsEncryptionSupport = {
-  supported: "supported",
-  unsupported: "unsupported",
+export const EventCode = {
+  instance_reboot: "instance-reboot",
+  instance_retirement: "instance-retirement",
+  instance_stop: "instance-stop",
+  system_maintenance: "system-maintenance",
+  system_reboot: "system-reboot",
 } as const;
 
 /**
  * @public
  */
-export type EbsEncryptionSupport = (typeof EbsEncryptionSupport)[keyof typeof EbsEncryptionSupport];
+export type EventCode = (typeof EventCode)[keyof typeof EventCode];
 
 /**
  * @public
- * @enum
+ * <p>Describes a scheduled event for an instance.</p>
  */
-export const EbsNvmeSupport = {
-  REQUIRED: "required",
-  SUPPORTED: "supported",
-  UNSUPPORTED: "unsupported",
-} as const;
+export interface InstanceStatusEvent {
+  /**
+   * @public
+   * <p>The ID of the event.</p>
+   */
+  InstanceEventId?: string;
 
-/**
- * @public
- */
-export type EbsNvmeSupport = (typeof EbsNvmeSupport)[keyof typeof EbsNvmeSupport];
+  /**
+   * @public
+   * <p>The event code.</p>
+   */
+  Code?: EventCode;
 
-/**
- * @public
- * <p>Describes the Amazon EBS features supported by the instance type.</p>
- */
-export interface EbsInfo {
   /**
    * @public
-   * <p>Indicates whether the instance type is Amazon EBS-optimized. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSOptimized.html">Amazon EBS-optimized
-   *     instances</a> in <i>Amazon EC2 User Guide</i>.</p>
+   * <p>A description of the event.</p>
+   *          <p>After a scheduled event is completed, it can still be described for up to a week. If
+   *             the event has been completed, this description starts with the following text:
+   *             [Completed].</p>
    */
-  EbsOptimizedSupport?: EbsOptimizedSupport;
+  Description?: string;
 
   /**
    * @public
-   * <p>Indicates whether Amazon EBS encryption is supported.</p>
+   * <p>The latest scheduled end time for the event.</p>
    */
-  EncryptionSupport?: EbsEncryptionSupport;
+  NotAfter?: Date;
 
   /**
    * @public
-   * <p>Describes the optimized EBS performance for the instance type.</p>
+   * <p>The earliest scheduled start time for the event.</p>
    */
-  EbsOptimizedInfo?: EbsOptimizedInfo;
+  NotBefore?: Date;
 
   /**
    * @public
-   * <p>Indicates whether non-volatile memory express (NVMe) is supported.</p>
+   * <p>The deadline for starting the event.</p>
    */
-  NvmeSupport?: EbsNvmeSupport;
+  NotBeforeDeadline?: Date;
 }
 
 /**
  * @public
- * <p>Describes the memory for the FPGA accelerator for the instance type.</p>
+ * @enum
  */
-export interface FpgaDeviceMemoryInfo {
-  /**
-   * @public
-   * <p>The size of the memory available to the FPGA accelerator, in MiB.</p>
-   */
-  SizeInMiB?: number;
-}
+export const StatusName = {
+  reachability: "reachability",
+} as const;
 
 /**
  * @public
- * <p>Describes the FPGA accelerator for the instance type.</p>
  */
-export interface FpgaDeviceInfo {
-  /**
-   * @public
-   * <p>The name of the FPGA accelerator.</p>
-   */
-  Name?: string;
+export type StatusName = (typeof StatusName)[keyof typeof StatusName];
+
+/**
+ * @public
+ * @enum
+ */
+export const StatusType = {
+  failed: "failed",
+  initializing: "initializing",
+  insufficient_data: "insufficient-data",
+  passed: "passed",
+} as const;
 
+/**
+ * @public
+ */
+export type StatusType = (typeof StatusType)[keyof typeof StatusType];
+
+/**
+ * @public
+ * <p>Describes the instance status.</p>
+ */
+export interface InstanceStatusDetails {
   /**
    * @public
-   * <p>The manufacturer of the FPGA accelerator.</p>
+   * <p>The time when a status check failed. For an instance that was launched and impaired,
+   *             this is the time when the instance was launched.</p>
    */
-  Manufacturer?: string;
+  ImpairedSince?: Date;
 
   /**
    * @public
-   * <p>The count of FPGA accelerators for the instance type.</p>
+   * <p>The type of instance status.</p>
    */
-  Count?: number;
+  Name?: StatusName;
 
   /**
    * @public
-   * <p>Describes the memory for the FPGA accelerator for the instance type.</p>
+   * <p>The status.</p>
    */
-  MemoryInfo?: FpgaDeviceMemoryInfo;
+  Status?: StatusType;
 }
 
 /**
  * @public
- * <p>Describes the FPGAs for the instance type.</p>
+ * @enum
  */
-export interface FpgaInfo {
-  /**
-   * @public
-   * <p>Describes the FPGAs for the instance type.</p>
-   */
-  Fpgas?: FpgaDeviceInfo[];
-
-  /**
-   * @public
-   * <p>The total memory of all FPGA accelerators for the instance type.</p>
-   */
-  TotalFpgaMemoryInMiB?: number;
-}
+export const SummaryStatus = {
+  impaired: "impaired",
+  initializing: "initializing",
+  insufficient_data: "insufficient-data",
+  not_applicable: "not-applicable",
+  ok: "ok",
+} as const;
 
 /**
  * @public
- * <p>Describes the memory available to the GPU accelerator.</p>
  */
-export interface GpuDeviceMemoryInfo {
-  /**
-   * @public
-   * <p>The size of the memory available to the GPU accelerator, in MiB.</p>
-   */
-  SizeInMiB?: number;
-}
+export type SummaryStatus = (typeof SummaryStatus)[keyof typeof SummaryStatus];
 
 /**
  * @public
- * <p>Describes the GPU accelerators for the instance type.</p>
+ * <p>Describes the status of an instance.</p>
  */
-export interface GpuDeviceInfo {
-  /**
-   * @public
-   * <p>The name of the GPU accelerator.</p>
-   */
-  Name?: string;
-
-  /**
-   * @public
-   * <p>The manufacturer of the GPU accelerator.</p>
-   */
-  Manufacturer?: string;
-
+export interface InstanceStatusSummary {
   /**
    * @public
-   * <p>The number of GPUs for the instance type.</p>
+   * <p>The system instance health or application instance health.</p>
    */
-  Count?: number;
+  Details?: InstanceStatusDetails[];
 
   /**
    * @public
-   * <p>Describes the memory available to the GPU accelerator.</p>
+   * <p>The status.</p>
    */
-  MemoryInfo?: GpuDeviceMemoryInfo;
+  Status?: SummaryStatus;
 }
 
 /**
  * @public
- * <p>Describes the GPU accelerators for the instance type.</p>
+ * <p>Describes the status of an instance.</p>
  */
-export interface GpuInfo {
+export interface InstanceStatus {
   /**
    * @public
-   * <p>Describes the GPU accelerators for the instance type.</p>
+   * <p>The Availability Zone of the instance.</p>
    */
-  Gpus?: GpuDeviceInfo[];
+  AvailabilityZone?: string;
 
   /**
    * @public
-   * <p>The total size of the memory for the GPU accelerators for the instance type, in MiB.</p>
+   * <p>The Amazon Resource Name (ARN) of the Outpost.</p>
    */
-  TotalGpuMemoryInMiB?: number;
-}
-
-/**
- * @public
- * @enum
- */
-export const InstanceTypeHypervisor = {
-  NITRO: "nitro",
-  XEN: "xen",
-} as const;
-
-/**
- * @public
- */
-export type InstanceTypeHypervisor = (typeof InstanceTypeHypervisor)[keyof typeof InstanceTypeHypervisor];
+  OutpostArn?: string;
 
-/**
- * @public
- * <p>Describes the memory available to the inference accelerator.</p>
- */
-export interface InferenceDeviceMemoryInfo {
   /**
    * @public
-   * <p>The size of the memory available to the inference accelerator, in MiB.</p>
+   * <p>Any scheduled events associated with the instance.</p>
    */
-  SizeInMiB?: number;
-}
+  Events?: InstanceStatusEvent[];
 
-/**
- * @public
- * <p>Describes the Inference accelerators for the instance type.</p>
- */
-export interface InferenceDeviceInfo {
   /**
    * @public
-   * <p>The number of Inference accelerators for the instance type.</p>
+   * <p>The ID of the instance.</p>
    */
-  Count?: number;
+  InstanceId?: string;
 
   /**
    * @public
-   * <p>The name of the Inference accelerator.</p>
+   * <p>The intended state of the instance. <a>DescribeInstanceStatus</a> requires
+   *             that an instance be in the <code>running</code> state.</p>
    */
-  Name?: string;
+  InstanceState?: InstanceState;
 
   /**
    * @public
-   * <p>The manufacturer of the Inference accelerator.</p>
+   * <p>Reports impaired functionality that stems from issues internal to the instance, such
+   *             as impaired reachability.</p>
    */
-  Manufacturer?: string;
+  InstanceStatus?: InstanceStatusSummary;
 
   /**
    * @public
-   * <p>Describes the memory available to the inference accelerator.</p>
+   * <p>Reports impaired functionality that stems from issues related to the systems that
+   *             support an instance, such as hardware failures and network connectivity problems.</p>
    */
-  MemoryInfo?: InferenceDeviceMemoryInfo;
+  SystemStatus?: InstanceStatusSummary;
 }
 
 /**
  * @public
- * <p>Describes the Inference accelerators for the instance type.</p>
  */
-export interface InferenceAcceleratorInfo {
+export interface DescribeInstanceStatusResult {
   /**
    * @public
-   * <p>Describes the Inference accelerators for the instance type.</p>
+   * <p>Information about the status of the instances.</p>
    */
-  Accelerators?: InferenceDeviceInfo[];
+  InstanceStatuses?: InstanceStatus[];
 
   /**
    * @public
-   * <p>The total size of the memory for the inference accelerators for the instance type, in MiB.</p>
+   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there
+   *          are no more items to return.</p>
    */
-  TotalInferenceMemoryInMiB?: number;
+  NextToken?: string;
 }
 
-/**
- * @public
- * @enum
- */
-export const DiskType = {
-  hdd: "hdd",
-  ssd: "ssd",
-} as const;
-
 /**
  * @public
  */
-export type DiskType = (typeof DiskType)[keyof typeof DiskType];
+export interface DescribeInstanceTopologyRequest {
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
 
-/**
- * @public
- * <p>Describes a disk.</p>
- */
-export interface DiskInfo {
   /**
    * @public
-   * <p>The size of the disk in GB.</p>
+   * <p>The token returned from a previous paginated request. Pagination continues from the end of the items returned by the previous request.</p>
    */
-  SizeInGB?: number;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The number of disks with this configuration.</p>
+   * <p>The maximum number of items to return for this request.
+   *          To get the next page of items, make another request with the token returned in the output.
+   * 	        For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
+   *          <p>You can't specify this parameter and the instance IDs parameter in the same request.</p>
+   *          <p>Default: <code>20</code>
+   *          </p>
    */
-  Count?: number;
+  MaxResults?: number;
 
   /**
    * @public
-   * <p>The type of disk.</p>
+   * <p>The instance IDs.</p>
+   *          <p>Default: Describes all your instances.</p>
+   *          <p>Constraints: Maximum 100 explicitly specified instance IDs.</p>
    */
-  Type?: DiskType;
-}
+  InstanceIds?: string[];
 
-/**
- * @public
- * @enum
- */
-export const InstanceStorageEncryptionSupport = {
-  required: "required",
-  unsupported: "unsupported",
-} as const;
+  /**
+   * @public
+   * <p>The name of the placement group that each instance is in.</p>
+   *          <p>Constraints: Maximum 100 explicitly specified placement group names.</p>
+   */
+  GroupNames?: string[];
 
-/**
- * @public
- */
-export type InstanceStorageEncryptionSupport =
-  (typeof InstanceStorageEncryptionSupport)[keyof typeof InstanceStorageEncryptionSupport];
+  /**
+   * @public
+   * <p>The filters.</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>availability-zone</code> - The name of the Availability Zone (for
+   *                     example, <code>us-west-2a</code>) or Local Zone (for example,
+   *                         <code>us-west-2-lax-1b</code>) that the instance is in.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>instance-type</code> - The instance type (for example,
+   *                         <code>p4d.24xlarge</code>) or instance family (for example,
+   *                         <code>p4d*</code>). You can use the <code>*</code> wildcard to match zero or
+   *                     more characters, or the <code>?</code> wildcard to match zero or one
+   *                     character.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>zone-id</code> - The ID of the Availability Zone (for example,
+   *                         <code>usw2-az2</code>) or Local Zone (for example,
+   *                         <code>usw2-lax1-az1</code>) that the instance is in.</p>
+   *             </li>
+   *          </ul>
+   */
+  Filters?: Filter[];
+}
 
 /**
  * @public
- * @enum
+ * <p>Information about the instance topology.</p>
  */
-export const EphemeralNvmeSupport = {
-  REQUIRED: "required",
-  SUPPORTED: "supported",
-  UNSUPPORTED: "unsupported",
-} as const;
+export interface InstanceTopology {
+  /**
+   * @public
+   * <p>The instance ID.</p>
+   */
+  InstanceId?: string;
 
-/**
- * @public
- */
-export type EphemeralNvmeSupport = (typeof EphemeralNvmeSupport)[keyof typeof EphemeralNvmeSupport];
+  /**
+   * @public
+   * <p>The instance type.</p>
+   */
+  InstanceType?: string;
 
-/**
- * @public
- * <p>Describes the instance store features that are supported by the instance type.</p>
- */
-export interface InstanceStorageInfo {
   /**
    * @public
-   * <p>The total size of the disks, in GB.</p>
+   * <p>The name of the placement group that the instance is in.</p>
    */
-  TotalSizeInGB?: number;
+  GroupName?: string;
 
   /**
    * @public
-   * <p>Describes the disks that are available for the instance type.</p>
+   * <p>The network nodes. The nodes are hashed based on your account. Instances from
+   *             different accounts running under the same droplet will return a different hashed list of
+   *             strings.</p>
    */
-  Disks?: DiskInfo[];
+  NetworkNodes?: string[];
 
   /**
    * @public
-   * <p>Indicates whether non-volatile memory express (NVMe) is supported.</p>
+   * <p>The name of the Availability Zone or Local Zone that the instance is in.</p>
    */
-  NvmeSupport?: EphemeralNvmeSupport;
+  AvailabilityZone?: string;
 
   /**
    * @public
-   * <p>Indicates whether data is encrypted at rest.</p>
+   * <p>The ID of the Availability Zone or Local Zone that the instance is in.</p>
    */
-  EncryptionSupport?: InstanceStorageEncryptionSupport;
+  ZoneId?: string;
 }
 
 /**
  * @public
- * <p>Describes the memory for the instance type.</p>
  */
-export interface MemoryInfo {
+export interface DescribeInstanceTopologyResult {
   /**
    * @public
-   * <p>The size of the memory, in MiB.</p>
+   * <p>Information about the topology of each instance.</p>
    */
-  SizeInMiB?: number;
-}
+  Instances?: InstanceTopology[];
 
-/**
- * @public
- * <p>Describes the Elastic Fabric Adapters for the instance type.</p>
- */
-export interface EfaInfo {
   /**
    * @public
-   * <p>The maximum number of Elastic Fabric Adapters for the instance type.</p>
+   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there
+   *          are no more items to return.</p>
    */
-  MaximumEfaInterfaces?: number;
+  NextToken?: string;
 }
 
 /**
  * @public
  * @enum
  */
-export const EnaSupport = {
-  required: "required",
-  supported: "supported",
-  unsupported: "unsupported",
+export const LocationType = {
+  availability_zone: "availability-zone",
+  availability_zone_id: "availability-zone-id",
+  outpost: "outpost",
+  region: "region",
 } as const;
 
 /**
  * @public
  */
-export type EnaSupport = (typeof EnaSupport)[keyof typeof EnaSupport];
+export type LocationType = (typeof LocationType)[keyof typeof LocationType];
 
 /**
  * @public
- * <p>Describes the network card support of the instance type.</p>
  */
-export interface NetworkCardInfo {
+export interface DescribeInstanceTypeOfferingsRequest {
   /**
    * @public
-   * <p>The index of the network card.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *          and provides an error response. If you have the required permissions, the error response is
+   *          <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  NetworkCardIndex?: number;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The network performance of the network card.</p>
+   * <p>The location type.</p>
    */
-  NetworkPerformance?: string;
+  LocationType?: LocationType;
 
   /**
    * @public
-   * <p>The maximum number of network interfaces for the network card.</p>
+   * <p>One or more filters. Filter names and values are case-sensitive.</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>location</code> - This depends on the location type. For example, if the location type is
+   *       <code>region</code> (default), the location is the Region code (for example, <code>us-east-2</code>.)</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>instance-type</code> - The instance type. For example,
+   *      <code>c5.2xlarge</code>.</p>
+   *             </li>
+   *          </ul>
    */
-  MaximumNetworkInterfaces?: number;
+  Filters?: Filter[];
 
   /**
    * @public
-   * <p>The baseline network performance of the network card, in Gbps.</p>
+   * <p>The maximum number of items to return for this request.
+   *          To get the next page of items, make another request with the token returned in the output.
+   * 	        For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
    */
-  BaselineBandwidthInGbps?: number;
+  MaxResults?: number;
 
   /**
    * @public
-   * <p>The peak (burst) network performance of the network card, in Gbps.</p>
+   * <p>The token returned from a previous paginated request. Pagination continues from the end of the items returned by the previous request.</p>
    */
-  PeakBandwidthInGbps?: number;
+  NextToken?: string;
 }
 
 /**
- * @public
- * <p>Describes the networking features of the instance type.</p>
- */
-export interface NetworkInfo {
-  /**
-   * @public
-   * <p>The network performance.</p>
-   */
-  NetworkPerformance?: string;
-
-  /**
-   * @public
-   * <p>The maximum number of network interfaces for the instance type.</p>
-   */
-  MaximumNetworkInterfaces?: number;
-
-  /**
-   * @public
-   * <p>The maximum number of physical network cards that can be allocated to the instance.</p>
-   */
-  MaximumNetworkCards?: number;
-
+ * @public
+ * <p>The instance types offered.</p>
+ */
+export interface InstanceTypeOffering {
   /**
    * @public
-   * <p>The index of the default network card, starting at 0.</p>
+   * <p>The instance type. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html">Instance types</a> in the <i>Amazon EC2 User Guide</i>.</p>
    */
-  DefaultNetworkCardIndex?: number;
+  InstanceType?: _InstanceType;
 
   /**
    * @public
-   * <p>Describes the network cards for the instance type.</p>
+   * <p>The location type.</p>
    */
-  NetworkCards?: NetworkCardInfo[];
+  LocationType?: LocationType;
 
   /**
    * @public
-   * <p>The maximum number of IPv4 addresses per network interface.</p>
+   * <p>The identifier for the location. This depends on the location type. For example, if the location type is
+   *     <code>region</code>, the location is the Region code (for example, <code>us-east-2</code>.)</p>
    */
-  Ipv4AddressesPerInterface?: number;
+  Location?: string;
+}
 
+/**
+ * @public
+ */
+export interface DescribeInstanceTypeOfferingsResult {
   /**
    * @public
-   * <p>The maximum number of IPv6 addresses per network interface.</p>
+   * <p>The instance types offered.</p>
    */
-  Ipv6AddressesPerInterface?: number;
+  InstanceTypeOfferings?: InstanceTypeOffering[];
 
   /**
    * @public
-   * <p>Indicates whether IPv6 is supported.</p>
+   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there
+   *          are no more items to return.</p>
    */
-  Ipv6Supported?: boolean;
+  NextToken?: string;
+}
 
+/**
+ * @public
+ */
+export interface DescribeInstanceTypesRequest {
   /**
    * @public
-   * <p>Indicates whether Elastic Network Adapter (ENA) is supported.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *          and provides an error response. If you have the required permissions, the error response is
+   *          <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  EnaSupport?: EnaSupport;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>Indicates whether Elastic Fabric Adapter (EFA) is supported.</p>
+   * <p>The instance types. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html">Instance types</a> in the <i>Amazon EC2 User Guide</i>.</p>
    */
-  EfaSupported?: boolean;
+  InstanceTypes?: _InstanceType[];
 
   /**
    * @public
-   * <p>Describes the Elastic Fabric Adapters for the instance type.</p>
+   * <p>One or more filters. Filter names and values are case-sensitive.</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>auto-recovery-supported</code> - Indicates whether Amazon CloudWatch action based recovery is supported  (<code>true</code> | <code>false</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>bare-metal</code> - Indicates whether it is a bare metal instance type  (<code>true</code> | <code>false</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>burstable-performance-supported</code> - Indicates whether the instance type is a
+   *      burstable performance T instance type  (<code>true</code> | <code>false</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>current-generation</code> - Indicates whether this instance type is the latest
+   *      generation instance type of an instance family  (<code>true</code> | <code>false</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>ebs-info.ebs-optimized-info.baseline-bandwidth-in-mbps</code> - The baseline
+   *                     bandwidth performance for an EBS-optimized instance type, in Mbps.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>ebs-info.ebs-optimized-info.baseline-iops</code> - The baseline input/output storage
+   *      operations per second for an EBS-optimized instance type.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>ebs-info.ebs-optimized-info.baseline-throughput-in-mbps</code> - The baseline
+   *      throughput performance for an EBS-optimized instance type, in MB/s.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>ebs-info.ebs-optimized-info.maximum-bandwidth-in-mbps</code> - The maximum bandwidth
+   *                     performance for an EBS-optimized instance type, in Mbps.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>ebs-info.ebs-optimized-info.maximum-iops</code> - The maximum input/output storage
+   *                     operations per second for an EBS-optimized instance type.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>ebs-info.ebs-optimized-info.maximum-throughput-in-mbps</code> - The maximum
+   *      throughput performance for an EBS-optimized instance type, in MB/s.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>ebs-info.ebs-optimized-support</code> - Indicates whether the instance type is
+   *      EBS-optimized (<code>supported</code> | <code>unsupported</code> |
+   *      <code>default</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>ebs-info.encryption-support</code> - Indicates whether EBS encryption is supported
+   *       (<code>supported</code> | <code>unsupported</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>ebs-info.nvme-support</code> - Indicates whether non-volatile memory express (NVMe)
+   *      is supported for EBS volumes (<code>required</code> | <code>supported</code> | <code>unsupported</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>free-tier-eligible</code> - Indicates whether the instance type is eligible to use
+   *      in the free tier  (<code>true</code> | <code>false</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>hibernation-supported</code> - Indicates whether On-Demand hibernation is supported  (<code>true</code> | <code>false</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>hypervisor</code> - The hypervisor (<code>nitro</code> | <code>xen</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>instance-storage-info.disk.count</code> - The number of local disks.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>instance-storage-info.disk.size-in-gb</code> - The storage size of each instance storage disk, in
+   *      GB.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>instance-storage-info.disk.type</code> - The storage technology for the local
+   *      instance storage disks (<code>hdd</code> | <code>ssd</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>instance-storage-info.encryption-support</code> - Indicates whether data is encrypted at rest
+   *      (<code>required</code> | <code>supported</code> | <code>unsupported</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>instance-storage-info.nvme-support</code> - Indicates whether non-volatile memory
+   *      express (NVMe) is supported for instance store (<code>required</code> | <code>supported</code> |
+   *      <code>unsupported</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>instance-storage-info.total-size-in-gb</code> - The total amount of storage available from all local
+   *      instance storage, in GB.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>instance-storage-supported</code> - Indicates whether the instance type has local
+   *      instance storage  (<code>true</code> | <code>false</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>instance-type</code> - The instance type (for example <code>c5.2xlarge</code> or
+   *      c5*).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>memory-info.size-in-mib</code> - The memory size.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>network-info.efa-info.maximum-efa-interfaces</code> - The maximum number of Elastic
+   *      Fabric Adapters (EFAs) per instance.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>network-info.efa-supported</code> - Indicates whether the instance type supports
+   *      Elastic Fabric Adapter (EFA)  (<code>true</code> | <code>false</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>network-info.ena-support</code> - Indicates whether Elastic Network Adapter (ENA) is
+   *      supported or required (<code>required</code> | <code>supported</code> |
+   *       <code>unsupported</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>network-info.encryption-in-transit-supported</code> - Indicates whether the instance type
+   *      automatically encrypts in-transit traffic between instances  (<code>true</code> | <code>false</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>network-info.ipv4-addresses-per-interface</code> - The maximum number of private IPv4 addresses per
+   *      network interface.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>network-info.ipv6-addresses-per-interface</code> - The maximum number of private IPv6 addresses per
+   *      network interface.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>network-info.ipv6-supported</code> - Indicates whether the instance type supports IPv6  (<code>true</code> | <code>false</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>network-info.maximum-network-cards</code> - The maximum number of network cards per
+   *      instance.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>network-info.maximum-network-interfaces</code> - The maximum number of network interfaces per instance.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>network-info.network-performance</code> - The network performance (for example, "25
+   *      Gigabit").</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>nitro-enclaves-support</code> - Indicates whether Nitro Enclaves is supported (<code>supported</code> |
+   *      <code>unsupported</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>nitro-tpm-support</code> - Indicates whether NitroTPM is supported (<code>supported</code> |
+   *      <code>unsupported</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>nitro-tpm-info.supported-versions</code> - The supported NitroTPM version (<code>2.0</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>processor-info.supported-architecture</code> - The CPU architecture
+   *       (<code>arm64</code> | <code>i386</code> | <code>x86_64</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>processor-info.sustained-clock-speed-in-ghz</code> - The CPU clock speed, in GHz.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>processor-info.supported-features</code> - The supported CPU features (<code>amd-sev-snp</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>supported-boot-mode</code> - The boot mode (<code>legacy-bios</code> |
+   *       <code>uefi</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>supported-root-device-type</code> - The root device type (<code>ebs</code> |
+   *       <code>instance-store</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>supported-usage-class</code> - The usage class (<code>on-demand</code> |
+   *       <code>spot</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>supported-virtualization-type</code> - The virtualization type (<code>hvm</code> |
+   *       <code>paravirtual</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>vcpu-info.default-cores</code> - The default number of cores for the instance type.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>vcpu-info.default-threads-per-core</code> - The default number of threads per core for the instance
+   *      type.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>vcpu-info.default-vcpus</code> - The default number of vCPUs for the instance type.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>vcpu-info.valid-cores</code> - The number of cores that can be configured for the instance type.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>vcpu-info.valid-threads-per-core</code> - The number of threads per core that can be configured for the instance type.
+   *         For example, "1" or "1,2".</p>
+   *             </li>
+   *          </ul>
    */
-  EfaInfo?: EfaInfo;
+  Filters?: Filter[];
 
   /**
    * @public
-   * <p>Indicates whether the instance type automatically encrypts in-transit traffic between instances.</p>
+   * <p>The maximum number of items to return for this request.
+   *          To get the next page of items, make another request with the token returned in the output.
+   * 	        For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
    */
-  EncryptionInTransitSupported?: boolean;
+  MaxResults?: number;
 
   /**
    * @public
-   * <p>Indicates whether the instance type supports ENA Express. ENA Express uses Amazon Web Services Scalable
-   *     Reliable Datagram (SRD) technology to increase the maximum bandwidth used per stream and
-   *     minimize tail latency of network traffic between EC2 instances.</p>
+   * <p>The token returned from a previous paginated request. Pagination continues from the end of the items returned by the previous request.</p>
    */
-  EnaSrdSupported?: boolean;
+  NextToken?: string;
 }
 
 /**
  * @public
- * @enum
- */
-export const NitroEnclavesSupport = {
-  SUPPORTED: "supported",
-  UNSUPPORTED: "unsupported",
-} as const;
-
-/**
- * @public
- */
-export type NitroEnclavesSupport = (typeof NitroEnclavesSupport)[keyof typeof NitroEnclavesSupport];
-
-/**
- * @public
- * <p>Describes the supported NitroTPM versions for the instance type.</p>
+ * <p>Describes the optimized EBS performance for supported instance types.</p>
  */
-export interface NitroTpmInfo {
+export interface EbsOptimizedInfo {
   /**
    * @public
-   * <p>Indicates the supported NitroTPM versions.</p>
+   * <p>The baseline bandwidth performance for an EBS-optimized instance type, in Mbps.</p>
    */
-  SupportedVersions?: string[];
-}
-
-/**
- * @public
- * @enum
- */
-export const NitroTpmSupport = {
-  SUPPORTED: "supported",
-  UNSUPPORTED: "unsupported",
-} as const;
-
-/**
- * @public
- */
-export type NitroTpmSupport = (typeof NitroTpmSupport)[keyof typeof NitroTpmSupport];
-
-/**
- * @public
- * @enum
- */
-export const PlacementGroupStrategy = {
-  cluster: "cluster",
-  partition: "partition",
-  spread: "spread",
-} as const;
-
-/**
- * @public
- */
-export type PlacementGroupStrategy = (typeof PlacementGroupStrategy)[keyof typeof PlacementGroupStrategy];
+  BaselineBandwidthInMbps?: number;
 
-/**
- * @public
- * <p>Describes the placement group support of the instance type.</p>
- */
-export interface PlacementGroupInfo {
   /**
    * @public
-   * <p>The supported placement group types.</p>
+   * <p>The baseline throughput performance for an EBS-optimized instance type, in MB/s.</p>
    */
-  SupportedStrategies?: PlacementGroupStrategy[];
-}
-
-/**
- * @public
- * @enum
- */
-export const ArchitectureType = {
-  arm64: "arm64",
-  arm64_mac: "arm64_mac",
-  i386: "i386",
-  x86_64: "x86_64",
-  x86_64_mac: "x86_64_mac",
-} as const;
-
-/**
- * @public
- */
-export type ArchitectureType = (typeof ArchitectureType)[keyof typeof ArchitectureType];
-
-/**
- * @public
- * @enum
- */
-export const SupportedAdditionalProcessorFeature = {
-  AMD_SEV_SNP: "amd-sev-snp",
-} as const;
+  BaselineThroughputInMBps?: number;
 
-/**
- * @public
- */
-export type SupportedAdditionalProcessorFeature =
-  (typeof SupportedAdditionalProcessorFeature)[keyof typeof SupportedAdditionalProcessorFeature];
+  /**
+   * @public
+   * <p>The baseline input/output storage operations per seconds for an EBS-optimized instance type.</p>
+   */
+  BaselineIops?: number;
 
-/**
- * @public
- * <p>Describes the processor used by the instance type.</p>
- */
-export interface ProcessorInfo {
   /**
    * @public
-   * <p>The architectures supported by the instance type.</p>
+   * <p>The maximum bandwidth performance for an EBS-optimized instance type, in Mbps.</p>
    */
-  SupportedArchitectures?: ArchitectureType[];
+  MaximumBandwidthInMbps?: number;
 
   /**
    * @public
-   * <p>The speed of the processor, in GHz.</p>
+   * <p>The maximum throughput performance for an EBS-optimized instance type, in MB/s.</p>
    */
-  SustainedClockSpeedInGhz?: number;
+  MaximumThroughputInMBps?: number;
 
   /**
    * @public
-   * <p>Indicates whether the instance type supports AMD SEV-SNP. If the request returns
-   *    <code>amd-sev-snp</code>, AMD SEV-SNP is supported. Otherwise, it is not supported.
-   *    For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/sev-snp.html">
-   *     AMD SEV-SNP</a>.</p>
+   * <p>The maximum input/output storage operations per second for an EBS-optimized instance type.</p>
    */
-  SupportedFeatures?: SupportedAdditionalProcessorFeature[];
+  MaximumIops?: number;
 }
 
 /**
  * @public
  * @enum
  */
-export const BootModeType = {
-  legacy_bios: "legacy-bios",
-  uefi: "uefi",
+export const EbsOptimizedSupport = {
+  default: "default",
+  supported: "supported",
+  unsupported: "unsupported",
 } as const;
 
 /**
  * @public
  */
-export type BootModeType = (typeof BootModeType)[keyof typeof BootModeType];
+export type EbsOptimizedSupport = (typeof EbsOptimizedSupport)[keyof typeof EbsOptimizedSupport];
 
 /**
  * @public
  * @enum
  */
-export const RootDeviceType = {
-  ebs: "ebs",
-  instance_store: "instance-store",
+export const EbsEncryptionSupport = {
+  supported: "supported",
+  unsupported: "unsupported",
 } as const;
 
 /**
  * @public
  */
-export type RootDeviceType = (typeof RootDeviceType)[keyof typeof RootDeviceType];
+export type EbsEncryptionSupport = (typeof EbsEncryptionSupport)[keyof typeof EbsEncryptionSupport];
 
 /**
  * @public
  * @enum
  */
-export const UsageClassType = {
-  capacity_block: "capacity-block",
-  on_demand: "on-demand",
-  spot: "spot",
+export const EbsNvmeSupport = {
+  REQUIRED: "required",
+  SUPPORTED: "supported",
+  UNSUPPORTED: "unsupported",
 } as const;
 
 /**
  * @public
- */
-export type UsageClassType = (typeof UsageClassType)[keyof typeof UsageClassType];
-
-/**
- * @public
- * <p>Describes the vCPU configurations for the instance type.</p>
- */
-export interface VCpuInfo {
-  /**
-   * @public
-   * <p>The default number of vCPUs for the instance type.</p>
-   */
-  DefaultVCpus?: number;
-
-  /**
-   * @public
-   * <p>The default number of cores for the instance type.</p>
-   */
-  DefaultCores?: number;
-
-  /**
-   * @public
-   * <p>The default number of threads per core for the instance type.</p>
-   */
-  DefaultThreadsPerCore?: number;
-
-  /**
-   * @public
-   * <p>The valid number of cores that can be configured for the instance type.</p>
-   */
-  ValidCores?: number[];
-
-  /**
-   * @public
-   * <p>The valid number of threads per core that can be configured for the instance type.</p>
-   */
-  ValidThreadsPerCore?: number[];
-}
-
-/**
- * @public
- * <p>Describes the instance type.</p>
- */
-export interface InstanceTypeInfo {
-  /**
-   * @public
-   * <p>The instance type. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html">Instance types</a> in the <i>Amazon EC2 User Guide</i>.</p>
-   */
-  InstanceType?: _InstanceType;
-
-  /**
-   * @public
-   * <p>Indicates whether the instance type is current generation.</p>
-   */
-  CurrentGeneration?: boolean;
-
-  /**
-   * @public
-   * <p>Indicates whether the instance type is eligible for the free tier.</p>
-   */
-  FreeTierEligible?: boolean;
-
-  /**
-   * @public
-   * <p>Indicates whether the instance type is offered for spot or On-Demand.</p>
-   */
-  SupportedUsageClasses?: UsageClassType[];
+ */
+export type EbsNvmeSupport = (typeof EbsNvmeSupport)[keyof typeof EbsNvmeSupport];
 
+/**
+ * @public
+ * <p>Describes the Amazon EBS features supported by the instance type.</p>
+ */
+export interface EbsInfo {
   /**
    * @public
-   * <p>The supported root device types.</p>
+   * <p>Indicates whether the instance type is Amazon EBS-optimized. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSOptimized.html">Amazon EBS-optimized
+   *     instances</a> in <i>Amazon EC2 User Guide</i>.</p>
    */
-  SupportedRootDeviceTypes?: RootDeviceType[];
+  EbsOptimizedSupport?: EbsOptimizedSupport;
 
   /**
    * @public
-   * <p>The supported virtualization types.</p>
+   * <p>Indicates whether Amazon EBS encryption is supported.</p>
    */
-  SupportedVirtualizationTypes?: VirtualizationType[];
+  EncryptionSupport?: EbsEncryptionSupport;
 
   /**
    * @public
-   * <p>Indicates whether the instance is a bare metal instance type.</p>
+   * <p>Describes the optimized EBS performance for the instance type.</p>
    */
-  BareMetal?: boolean;
+  EbsOptimizedInfo?: EbsOptimizedInfo;
 
   /**
    * @public
-   * <p>The hypervisor for the instance type.</p>
+   * <p>Indicates whether non-volatile memory express (NVMe) is supported.</p>
    */
-  Hypervisor?: InstanceTypeHypervisor;
+  NvmeSupport?: EbsNvmeSupport;
+}
 
+/**
+ * @public
+ * <p>Describes the memory for the FPGA accelerator for the instance type.</p>
+ */
+export interface FpgaDeviceMemoryInfo {
   /**
    * @public
-   * <p>Describes the processor.</p>
+   * <p>The size of the memory available to the FPGA accelerator, in MiB.</p>
    */
-  ProcessorInfo?: ProcessorInfo;
+  SizeInMiB?: number;
+}
 
+/**
+ * @public
+ * <p>Describes the FPGA accelerator for the instance type.</p>
+ */
+export interface FpgaDeviceInfo {
   /**
    * @public
-   * <p>Describes the vCPU configurations for the instance type.</p>
+   * <p>The name of the FPGA accelerator.</p>
    */
-  VCpuInfo?: VCpuInfo;
+  Name?: string;
 
   /**
    * @public
-   * <p>Describes the memory for the instance type.</p>
+   * <p>The manufacturer of the FPGA accelerator.</p>
    */
-  MemoryInfo?: MemoryInfo;
+  Manufacturer?: string;
 
   /**
    * @public
-   * <p>Indicates whether instance storage is supported.</p>
+   * <p>The count of FPGA accelerators for the instance type.</p>
    */
-  InstanceStorageSupported?: boolean;
+  Count?: number;
 
   /**
    * @public
-   * <p>Describes the instance storage for the instance type.</p>
+   * <p>Describes the memory for the FPGA accelerator for the instance type.</p>
    */
-  InstanceStorageInfo?: InstanceStorageInfo;
+  MemoryInfo?: FpgaDeviceMemoryInfo;
+}
 
+/**
+ * @public
+ * <p>Describes the FPGAs for the instance type.</p>
+ */
+export interface FpgaInfo {
   /**
    * @public
-   * <p>Describes the Amazon EBS settings for the instance type.</p>
+   * <p>Describes the FPGAs for the instance type.</p>
    */
-  EbsInfo?: EbsInfo;
+  Fpgas?: FpgaDeviceInfo[];
 
   /**
    * @public
-   * <p>Describes the network settings for the instance type.</p>
+   * <p>The total memory of all FPGA accelerators for the instance type.</p>
    */
-  NetworkInfo?: NetworkInfo;
+  TotalFpgaMemoryInMiB?: number;
+}
 
+/**
+ * @public
+ * <p>Describes the memory available to the GPU accelerator.</p>
+ */
+export interface GpuDeviceMemoryInfo {
   /**
    * @public
-   * <p>Describes the GPU accelerator settings for the instance type.</p>
+   * <p>The size of the memory available to the GPU accelerator, in MiB.</p>
    */
-  GpuInfo?: GpuInfo;
+  SizeInMiB?: number;
+}
 
+/**
+ * @public
+ * <p>Describes the GPU accelerators for the instance type.</p>
+ */
+export interface GpuDeviceInfo {
   /**
    * @public
-   * <p>Describes the FPGA accelerator settings for the instance type.</p>
+   * <p>The name of the GPU accelerator.</p>
    */
-  FpgaInfo?: FpgaInfo;
+  Name?: string;
 
   /**
    * @public
-   * <p>Describes the placement group settings for the instance type.</p>
+   * <p>The manufacturer of the GPU accelerator.</p>
    */
-  PlacementGroupInfo?: PlacementGroupInfo;
+  Manufacturer?: string;
 
   /**
    * @public
-   * <p>Describes the Inference accelerator settings for the instance type.</p>
+   * <p>The number of GPUs for the instance type.</p>
    */
-  InferenceAcceleratorInfo?: InferenceAcceleratorInfo;
+  Count?: number;
 
   /**
    * @public
-   * <p>Indicates whether On-Demand hibernation is supported.</p>
+   * <p>Describes the memory available to the GPU accelerator.</p>
    */
-  HibernationSupported?: boolean;
+  MemoryInfo?: GpuDeviceMemoryInfo;
+}
 
+/**
+ * @public
+ * <p>Describes the GPU accelerators for the instance type.</p>
+ */
+export interface GpuInfo {
   /**
    * @public
-   * <p>Indicates whether the instance type is a burstable performance T instance
-   *    type. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/burstable-performance-instances.html">Burstable
-   *     performance instances</a>.</p>
+   * <p>Describes the GPU accelerators for the instance type.</p>
    */
-  BurstablePerformanceSupported?: boolean;
+  Gpus?: GpuDeviceInfo[];
 
   /**
    * @public
-   * <p>Indicates whether Dedicated Hosts are supported on the instance type.</p>
+   * <p>The total size of the memory for the GPU accelerators for the instance type, in MiB.</p>
    */
-  DedicatedHostsSupported?: boolean;
+  TotalGpuMemoryInMiB?: number;
+}
+
+/**
+ * @public
+ * @enum
+ */
+export const InstanceTypeHypervisor = {
+  NITRO: "nitro",
+  XEN: "xen",
+} as const;
 
+/**
+ * @public
+ */
+export type InstanceTypeHypervisor = (typeof InstanceTypeHypervisor)[keyof typeof InstanceTypeHypervisor];
+
+/**
+ * @public
+ * <p>Describes the memory available to the inference accelerator.</p>
+ */
+export interface InferenceDeviceMemoryInfo {
   /**
    * @public
-   * <p>Indicates whether Amazon CloudWatch action based recovery is supported.</p>
+   * <p>The size of the memory available to the inference accelerator, in MiB.</p>
    */
-  AutoRecoverySupported?: boolean;
+  SizeInMiB?: number;
+}
 
+/**
+ * @public
+ * <p>Describes the Inference accelerators for the instance type.</p>
+ */
+export interface InferenceDeviceInfo {
   /**
    * @public
-   * <p>The supported boot modes. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ami-boot.html">Boot modes</a> in the
-   *    <i>Amazon EC2 User Guide</i>.</p>
+   * <p>The number of Inference accelerators for the instance type.</p>
    */
-  SupportedBootModes?: BootModeType[];
+  Count?: number;
 
   /**
    * @public
-   * <p>Indicates whether Nitro Enclaves is supported.</p>
+   * <p>The name of the Inference accelerator.</p>
    */
-  NitroEnclavesSupport?: NitroEnclavesSupport;
+  Name?: string;
 
   /**
    * @public
-   * <p>Indicates whether NitroTPM is supported.</p>
+   * <p>The manufacturer of the Inference accelerator.</p>
    */
-  NitroTpmSupport?: NitroTpmSupport;
+  Manufacturer?: string;
 
   /**
    * @public
-   * <p>Describes the supported NitroTPM versions for the instance type.</p>
+   * <p>Describes the memory available to the inference accelerator.</p>
    */
-  NitroTpmInfo?: NitroTpmInfo;
+  MemoryInfo?: InferenceDeviceMemoryInfo;
 }
 
 /**
  * @public
+ * <p>Describes the Inference accelerators for the instance type.</p>
  */
-export interface DescribeInstanceTypesResult {
+export interface InferenceAcceleratorInfo {
   /**
    * @public
-   * <p>The instance type. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html">Instance types</a> in the <i>Amazon EC2 User Guide</i>.</p>
+   * <p>Describes the Inference accelerators for the instance type.</p>
    */
-  InstanceTypes?: InstanceTypeInfo[];
+  Accelerators?: InferenceDeviceInfo[];
 
   /**
    * @public
-   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there
-   *          are no more items to return.</p>
+   * <p>The total size of the memory for the inference accelerators for the instance type, in MiB.</p>
    */
-  NextToken?: string;
+  TotalInferenceMemoryInMiB?: number;
 }
 
 /**
  * @public
+ * @enum
  */
-export interface DescribeInternetGatewaysRequest {
-  /**
-   * @public
-   * <p>The filters.</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>attachment.state</code> - The current state of the attachment between the gateway
-   *                     and the VPC (<code>available</code>). Present only if a VPC is attached.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>attachment.vpc-id</code> - The ID of an attached VPC.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>internet-gateway-id</code> - The ID of the Internet gateway.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>owner-id</code> - The ID of the Amazon Web Services account that owns the internet gateway.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>tag</code>:<key> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value.
-   *     For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>tag-key</code> - The key of a tag assigned to the resource. Use this filter to find all resources assigned a tag with a specific key, regardless of the tag value.</p>
-   *             </li>
-   *          </ul>
-   */
-  Filters?: Filter[];
+export const DiskType = {
+  hdd: "hdd",
+  ssd: "ssd",
+} as const;
 
-  /**
-   * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-   */
-  DryRun?: boolean;
+/**
+ * @public
+ */
+export type DiskType = (typeof DiskType)[keyof typeof DiskType];
 
+/**
+ * @public
+ * <p>Describes a disk.</p>
+ */
+export interface DiskInfo {
   /**
    * @public
-   * <p>The IDs of the internet gateways.</p>
-   *          <p>Default: Describes all your internet gateways.</p>
+   * <p>The size of the disk in GB.</p>
    */
-  InternetGatewayIds?: string[];
+  SizeInGB?: number;
 
   /**
    * @public
-   * <p>The token returned from a previous paginated request. Pagination continues from the end of the items returned by the previous request.</p>
+   * <p>The number of disks with this configuration.</p>
    */
-  NextToken?: string;
+  Count?: number;
 
   /**
    * @public
-   * <p>The maximum number of items to return for this request.
-   * 	To get the next page of items, make another request with the token returned in the output.
-   * 	For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
+   * <p>The type of disk.</p>
    */
-  MaxResults?: number;
+  Type?: DiskType;
 }
 
+/**
+ * @public
+ * @enum
+ */
+export const InstanceStorageEncryptionSupport = {
+  required: "required",
+  unsupported: "unsupported",
+} as const;
+
 /**
  * @public
  */
-export interface DescribeInternetGatewaysResult {
-  /**
-   * @public
-   * <p>Information about one or more internet gateways.</p>
-   */
-  InternetGateways?: InternetGateway[];
+export type InstanceStorageEncryptionSupport =
+  (typeof InstanceStorageEncryptionSupport)[keyof typeof InstanceStorageEncryptionSupport];
 
-  /**
-   * @public
-   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there are no more items to return.</p>
-   */
-  NextToken?: string;
-}
+/**
+ * @public
+ * @enum
+ */
+export const EphemeralNvmeSupport = {
+  REQUIRED: "required",
+  SUPPORTED: "supported",
+  UNSUPPORTED: "unsupported",
+} as const;
 
 /**
  * @public
  */
-export interface DescribeIpamPoolsRequest {
-  /**
-   * @public
-   * <p>A check for whether you have the required permissions for the action without actually making the request
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-   */
-  DryRun?: boolean;
+export type EphemeralNvmeSupport = (typeof EphemeralNvmeSupport)[keyof typeof EphemeralNvmeSupport];
 
+/**
+ * @public
+ * <p>Describes the instance store features that are supported by the instance type.</p>
+ */
+export interface InstanceStorageInfo {
   /**
    * @public
-   * <p>One or more filters for the request. For more information about filtering, see <a href="https://docs.aws.amazon.com/cli/latest/userguide/cli-usage-filter.html">Filtering CLI output</a>.</p>
+   * <p>The total size of the disks, in GB.</p>
    */
-  Filters?: Filter[];
+  TotalSizeInGB?: number;
 
   /**
    * @public
-   * <p>The maximum number of results to return in the request.</p>
+   * <p>Describes the disks that are available for the instance type.</p>
    */
-  MaxResults?: number;
+  Disks?: DiskInfo[];
 
   /**
    * @public
-   * <p>The token for the next page of results.</p>
+   * <p>Indicates whether non-volatile memory express (NVMe) is supported.</p>
    */
-  NextToken?: string;
+  NvmeSupport?: EphemeralNvmeSupport;
 
   /**
    * @public
-   * <p>The IDs of the IPAM pools you would like information on.</p>
+   * <p>Indicates whether data is encrypted at rest.</p>
    */
-  IpamPoolIds?: string[];
+  EncryptionSupport?: InstanceStorageEncryptionSupport;
 }
 
 /**
  * @public
+ * <p>Describes the memory for the instance type.</p>
  */
-export interface DescribeIpamPoolsResult {
+export interface MemoryInfo {
   /**
    * @public
-   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
+   * <p>The size of the memory, in MiB.</p>
    */
-  NextToken?: string;
+  SizeInMiB?: number;
+}
 
+/**
+ * @public
+ * <p>Describes the Elastic Fabric Adapters for the instance type.</p>
+ */
+export interface EfaInfo {
   /**
    * @public
-   * <p>Information about the IPAM pools.</p>
+   * <p>The maximum number of Elastic Fabric Adapters for the instance type.</p>
    */
-  IpamPools?: IpamPool[];
+  MaximumEfaInterfaces?: number;
 }
 
 /**
  * @public
+ * @enum
  */
-export interface DescribeIpamResourceDiscoveriesRequest {
+export const EnaSupport = {
+  required: "required",
+  supported: "supported",
+  unsupported: "unsupported",
+} as const;
+
+/**
+ * @public
+ */
+export type EnaSupport = (typeof EnaSupport)[keyof typeof EnaSupport];
+
+/**
+ * @public
+ * <p>Describes the network card support of the instance type.</p>
+ */
+export interface NetworkCardInfo {
   /**
    * @public
-   * <p>A check for whether you have the required permissions for the action without actually making the request
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The index of the network card.</p>
    */
-  DryRun?: boolean;
+  NetworkCardIndex?: number;
 
   /**
    * @public
-   * <p>The IPAM resource discovery IDs.</p>
+   * <p>The network performance of the network card.</p>
    */
-  IpamResourceDiscoveryIds?: string[];
+  NetworkPerformance?: string;
 
   /**
    * @public
-   * <p>Specify the pagination token from a previous request to retrieve the next page of results.</p>
+   * <p>The maximum number of network interfaces for the network card.</p>
    */
-  NextToken?: string;
+  MaximumNetworkInterfaces?: number;
 
   /**
    * @public
-   * <p>The maximum number of resource discoveries to return in one page of results.</p>
+   * <p>The baseline network performance of the network card, in Gbps.</p>
    */
-  MaxResults?: number;
+  BaselineBandwidthInGbps?: number;
 
   /**
    * @public
-   * <p>The resource discovery filters.</p>
+   * <p>The peak (burst) network performance of the network card, in Gbps.</p>
    */
-  Filters?: Filter[];
+  PeakBandwidthInGbps?: number;
 }
 
 /**
  * @public
+ * <p>Describes the networking features of the instance type.</p>
  */
-export interface DescribeIpamResourceDiscoveriesResult {
-  /**
-   * @public
-   * <p>The resource discoveries.</p>
-   */
-  IpamResourceDiscoveries?: IpamResourceDiscovery[];
-
+export interface NetworkInfo {
   /**
    * @public
-   * <p>Specify the pagination token from a previous request to retrieve the next page of results.</p>
+   * <p>The network performance.</p>
    */
-  NextToken?: string;
-}
+  NetworkPerformance?: string;
 
-/**
- * @public
- */
-export interface DescribeIpamResourceDiscoveryAssociationsRequest {
   /**
    * @public
-   * <p>A check for whether you have the required permissions for the action without actually making the request
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The maximum number of network interfaces for the instance type.</p>
    */
-  DryRun?: boolean;
+  MaximumNetworkInterfaces?: number;
 
   /**
    * @public
-   * <p>The resource discovery association IDs.</p>
+   * <p>The maximum number of physical network cards that can be allocated to the instance.</p>
    */
-  IpamResourceDiscoveryAssociationIds?: string[];
+  MaximumNetworkCards?: number;
 
   /**
    * @public
-   * <p>Specify the pagination token from a previous request to retrieve the next page of results.</p>
+   * <p>The index of the default network card, starting at 0.</p>
    */
-  NextToken?: string;
+  DefaultNetworkCardIndex?: number;
 
   /**
    * @public
-   * <p>The maximum number of resource discovery associations to return in one page of results.</p>
+   * <p>Describes the network cards for the instance type.</p>
    */
-  MaxResults?: number;
+  NetworkCards?: NetworkCardInfo[];
 
   /**
    * @public
-   * <p>The resource discovery association filters.</p>
+   * <p>The maximum number of IPv4 addresses per network interface.</p>
    */
-  Filters?: Filter[];
-}
+  Ipv4AddressesPerInterface?: number;
 
-/**
- * @public
- */
-export interface DescribeIpamResourceDiscoveryAssociationsResult {
   /**
    * @public
-   * <p>The resource discovery associations.</p>
+   * <p>The maximum number of IPv6 addresses per network interface.</p>
    */
-  IpamResourceDiscoveryAssociations?: IpamResourceDiscoveryAssociation[];
+  Ipv6AddressesPerInterface?: number;
 
   /**
    * @public
-   * <p>Specify the pagination token from a previous request to retrieve the next page of results.</p>
+   * <p>Indicates whether IPv6 is supported.</p>
    */
-  NextToken?: string;
-}
+  Ipv6Supported?: boolean;
 
-/**
- * @public
- */
-export interface DescribeIpamsRequest {
   /**
    * @public
-   * <p>A check for whether you have the required permissions for the action without actually making the request
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>Indicates whether Elastic Network Adapter (ENA) is supported.</p>
    */
-  DryRun?: boolean;
+  EnaSupport?: EnaSupport;
 
   /**
    * @public
-   * <p>One or more filters for the request. For more information about filtering, see <a href="https://docs.aws.amazon.com/cli/latest/userguide/cli-usage-filter.html">Filtering CLI output</a>.</p>
+   * <p>Indicates whether Elastic Fabric Adapter (EFA) is supported.</p>
    */
-  Filters?: Filter[];
+  EfaSupported?: boolean;
 
   /**
    * @public
-   * <p>The maximum number of results to return in the request.</p>
+   * <p>Describes the Elastic Fabric Adapters for the instance type.</p>
    */
-  MaxResults?: number;
+  EfaInfo?: EfaInfo;
 
   /**
    * @public
-   * <p>The token for the next page of results.</p>
+   * <p>Indicates whether the instance type automatically encrypts in-transit traffic between instances.</p>
    */
-  NextToken?: string;
+  EncryptionInTransitSupported?: boolean;
 
   /**
    * @public
-   * <p>The IDs of the IPAMs you want information on.</p>
+   * <p>Indicates whether the instance type supports ENA Express. ENA Express uses Amazon Web Services Scalable
+   *     Reliable Datagram (SRD) technology to increase the maximum bandwidth used per stream and
+   *     minimize tail latency of network traffic between EC2 instances.</p>
    */
-  IpamIds?: string[];
+  EnaSrdSupported?: boolean;
 }
 
 /**
  * @public
+ * @enum
  */
-export interface DescribeIpamsResult {
-  /**
-   * @public
-   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
-   */
-  NextToken?: string;
+export const NitroEnclavesSupport = {
+  SUPPORTED: "supported",
+  UNSUPPORTED: "unsupported",
+} as const;
 
-  /**
-   * @public
-   * <p>Information about the IPAMs.</p>
-   */
-  Ipams?: Ipam[];
-}
+/**
+ * @public
+ */
+export type NitroEnclavesSupport = (typeof NitroEnclavesSupport)[keyof typeof NitroEnclavesSupport];
 
 /**
  * @public
+ * <p>Describes the supported NitroTPM versions for the instance type.</p>
  */
-export interface DescribeIpamScopesRequest {
+export interface NitroTpmInfo {
   /**
    * @public
-   * <p>A check for whether you have the required permissions for the action without actually making the request
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>Indicates the supported NitroTPM versions.</p>
    */
-  DryRun?: boolean;
+  SupportedVersions?: string[];
+}
 
-  /**
-   * @public
-   * <p>One or more filters for the request. For more information about filtering, see <a href="https://docs.aws.amazon.com/cli/latest/userguide/cli-usage-filter.html">Filtering CLI output</a>.</p>
-   */
-  Filters?: Filter[];
+/**
+ * @public
+ * @enum
+ */
+export const NitroTpmSupport = {
+  SUPPORTED: "supported",
+  UNSUPPORTED: "unsupported",
+} as const;
 
-  /**
-   * @public
-   * <p>The maximum number of results to return in the request.</p>
-   */
-  MaxResults?: number;
+/**
+ * @public
+ */
+export type NitroTpmSupport = (typeof NitroTpmSupport)[keyof typeof NitroTpmSupport];
 
-  /**
-   * @public
-   * <p>The token for the next page of results.</p>
-   */
-  NextToken?: string;
+/**
+ * @public
+ * @enum
+ */
+export const PlacementGroupStrategy = {
+  cluster: "cluster",
+  partition: "partition",
+  spread: "spread",
+} as const;
+
+/**
+ * @public
+ */
+export type PlacementGroupStrategy = (typeof PlacementGroupStrategy)[keyof typeof PlacementGroupStrategy];
 
+/**
+ * @public
+ * <p>Describes the placement group support of the instance type.</p>
+ */
+export interface PlacementGroupInfo {
   /**
    * @public
-   * <p>The IDs of the scopes you want information on.</p>
+   * <p>The supported placement group types.</p>
    */
-  IpamScopeIds?: string[];
+  SupportedStrategies?: PlacementGroupStrategy[];
 }
 
 /**
  * @public
+ * @enum
  */
-export interface DescribeIpamScopesResult {
-  /**
-   * @public
-   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
-   */
-  NextToken?: string;
+export const ArchitectureType = {
+  arm64: "arm64",
+  arm64_mac: "arm64_mac",
+  i386: "i386",
+  x86_64: "x86_64",
+  x86_64_mac: "x86_64_mac",
+} as const;
 
-  /**
-   * @public
-   * <p>The scopes you want information on.</p>
-   */
-  IpamScopes?: IpamScope[];
-}
+/**
+ * @public
+ */
+export type ArchitectureType = (typeof ArchitectureType)[keyof typeof ArchitectureType];
 
 /**
  * @public
+ * @enum
  */
-export interface DescribeIpv6PoolsRequest {
-  /**
-   * @public
-   * <p>The IDs of the IPv6 address pools.</p>
-   */
-  PoolIds?: string[];
+export const SupportedAdditionalProcessorFeature = {
+  AMD_SEV_SNP: "amd-sev-snp",
+} as const;
 
-  /**
-   * @public
-   * <p>The token for the next page of results.</p>
-   */
-  NextToken?: string;
+/**
+ * @public
+ */
+export type SupportedAdditionalProcessorFeature =
+  (typeof SupportedAdditionalProcessorFeature)[keyof typeof SupportedAdditionalProcessorFeature];
 
+/**
+ * @public
+ * <p>Describes the processor used by the instance type.</p>
+ */
+export interface ProcessorInfo {
   /**
    * @public
-   * <p>The maximum number of results to return with a single call.
-   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
+   * <p>The architectures supported by the instance type.</p>
    */
-  MaxResults?: number;
+  SupportedArchitectures?: ArchitectureType[];
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The speed of the processor, in GHz.</p>
    */
-  DryRun?: boolean;
+  SustainedClockSpeedInGhz?: number;
 
   /**
    * @public
-   * <p>One or more filters.</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>tag</code>:<key> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value.
-   *     For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>tag-key</code> - The key of a tag assigned to the resource. Use this filter to find all resources assigned a tag with a specific key, regardless of the tag value.</p>
-   *             </li>
-   *          </ul>
+   * <p>Indicates whether the instance type supports AMD SEV-SNP. If the request returns
+   *    <code>amd-sev-snp</code>, AMD SEV-SNP is supported. Otherwise, it is not supported.
+   *    For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/sev-snp.html">
+   *     AMD SEV-SNP</a>.</p>
    */
-  Filters?: Filter[];
+  SupportedFeatures?: SupportedAdditionalProcessorFeature[];
 }
 
 /**
  * @public
- * <p>Describes a CIDR block for an address pool.</p>
+ * @enum
  */
-export interface PoolCidrBlock {
-  /**
-   * @public
-   * <p>The CIDR block.</p>
-   */
-  Cidr?: string;
-}
+export const BootModeType = {
+  legacy_bios: "legacy-bios",
+  uefi: "uefi",
+} as const;
 
 /**
  * @public
- * <p>Describes an IPv6 address pool.</p>
  */
-export interface Ipv6Pool {
-  /**
-   * @public
-   * <p>The ID of the address pool.</p>
-   */
-  PoolId?: string;
-
-  /**
-   * @public
-   * <p>The description for the address pool.</p>
-   */
-  Description?: string;
+export type BootModeType = (typeof BootModeType)[keyof typeof BootModeType];
 
-  /**
-   * @public
-   * <p>The CIDR blocks for the address pool.</p>
-   */
-  PoolCidrBlocks?: PoolCidrBlock[];
+/**
+ * @public
+ * @enum
+ */
+export const RootDeviceType = {
+  ebs: "ebs",
+  instance_store: "instance-store",
+} as const;
 
-  /**
-   * @public
-   * <p>Any tags for the address pool.</p>
-   */
-  Tags?: Tag[];
-}
+/**
+ * @public
+ */
+export type RootDeviceType = (typeof RootDeviceType)[keyof typeof RootDeviceType];
 
 /**
  * @public
+ * @enum
  */
-export interface DescribeIpv6PoolsResult {
-  /**
-   * @public
-   * <p>Information about the IPv6 address pools.</p>
-   */
-  Ipv6Pools?: Ipv6Pool[];
+export const UsageClassType = {
+  capacity_block: "capacity-block",
+  on_demand: "on-demand",
+  spot: "spot",
+} as const;
 
-  /**
-   * @public
-   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
-   */
-  NextToken?: string;
-}
+/**
+ * @public
+ */
+export type UsageClassType = (typeof UsageClassType)[keyof typeof UsageClassType];
 
 /**
  * @public
+ * <p>Describes the vCPU configurations for the instance type.</p>
  */
-export interface DescribeKeyPairsRequest {
+export interface VCpuInfo {
   /**
    * @public
-   * <p>The filters.</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>key-pair-id</code> - The ID of the key pair.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>fingerprint</code> - The fingerprint of the key pair.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>key-name</code> - The name of the key pair.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>tag-key</code> - The key of a tag assigned to the resource. Use this filter to find all resources assigned a tag with a specific key, regardless of the tag value.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>tag</code>:<key> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value.
-   *     For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
-   *             </li>
-   *          </ul>
+   * <p>The default number of vCPUs for the instance type.</p>
    */
-  Filters?: Filter[];
+  DefaultVCpus?: number;
 
   /**
    * @public
-   * <p>The key pair names.</p>
-   *          <p>Default: Describes all of your key pairs.</p>
+   * <p>The default number of cores for the instance type.</p>
    */
-  KeyNames?: string[];
+  DefaultCores?: number;
 
   /**
    * @public
-   * <p>The IDs of the key pairs.</p>
+   * <p>The default number of threads per core for the instance type.</p>
    */
-  KeyPairIds?: string[];
+  DefaultThreadsPerCore?: number;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The valid number of cores that can be configured for the instance type.</p>
    */
-  DryRun?: boolean;
+  ValidCores?: number[];
 
   /**
    * @public
-   * <p>If <code>true</code>, the public key material is included in the response.</p>
-   *          <p>Default: <code>false</code>
-   *          </p>
+   * <p>The valid number of threads per core that can be configured for the instance type.</p>
    */
-  IncludePublicKey?: boolean;
+  ValidThreadsPerCore?: number[];
 }
 
 /**
  * @public
- * <p>Describes a key pair.</p>
+ * <p>Describes the instance type.</p>
  */
-export interface KeyPairInfo {
+export interface InstanceTypeInfo {
   /**
    * @public
-   * <p>The ID of the key pair.</p>
+   * <p>The instance type. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html">Instance types</a> in the <i>Amazon EC2 User Guide</i>.</p>
    */
-  KeyPairId?: string;
+  InstanceType?: _InstanceType;
 
   /**
    * @public
-   * <p>If you used <a>CreateKeyPair</a> to create the key pair:</p>
-   *          <ul>
-   *             <li>
-   *                <p>For RSA key pairs, the key fingerprint is the SHA-1 digest of the DER encoded private key.</p>
-   *             </li>
-   *             <li>
-   *                <p>For ED25519 key pairs, the key fingerprint is the base64-encoded SHA-256 digest, which
-   *                    is the default for OpenSSH, starting with <a href="http://www.openssh.com/txt/release-6.8">OpenSSH 6.8</a>.</p>
-   *             </li>
-   *          </ul>
-   *          <p>If you used <a>ImportKeyPair</a> to provide Amazon Web Services the public key:</p>
-   *          <ul>
-   *             <li>
-   *                <p>For RSA key pairs, the key fingerprint is the MD5 public key fingerprint as specified in section 4 of RFC4716.</p>
-   *             </li>
-   *             <li>
-   *                <p>For ED25519 key pairs, the key fingerprint is the base64-encoded SHA-256
-   *                     digest, which is the default for OpenSSH, starting with <a href="http://www.openssh.com/txt/release-6.8">OpenSSH 6.8</a>.</p>
-   *             </li>
-   *          </ul>
+   * <p>Indicates whether the instance type is current generation.</p>
    */
-  KeyFingerprint?: string;
+  CurrentGeneration?: boolean;
 
   /**
    * @public
-   * <p>The name of the key pair.</p>
+   * <p>Indicates whether the instance type is eligible for the free tier.</p>
+   */
+  FreeTierEligible?: boolean;
+
+  /**
+   * @public
+   * <p>Indicates whether the instance type is offered for spot or On-Demand.</p>
    */
-  KeyName?: string;
+  SupportedUsageClasses?: UsageClassType[];
 
   /**
    * @public
-   * <p>The type of key pair.</p>
+   * <p>The supported root device types.</p>
    */
-  KeyType?: KeyType;
+  SupportedRootDeviceTypes?: RootDeviceType[];
 
   /**
    * @public
-   * <p>Any tags applied to the key pair.</p>
+   * <p>The supported virtualization types.</p>
    */
-  Tags?: Tag[];
+  SupportedVirtualizationTypes?: VirtualizationType[];
 
   /**
    * @public
-   * <p>The public key material.</p>
+   * <p>Indicates whether the instance is a bare metal instance type.</p>
    */
-  PublicKey?: string;
+  BareMetal?: boolean;
 
   /**
    * @public
-   * <p>If you used Amazon EC2 to create the key pair, this is the date and time when the key
-   *             was created, in <a href="https://www.iso.org/iso-8601-date-and-time-format.html">ISO
-   *                 8601 date-time format</a>, in the UTC time zone.</p>
-   *          <p>If you imported an existing key pair to Amazon EC2, this is the date and time the key
-   *             was imported, in <a href="https://www.iso.org/iso-8601-date-and-time-format.html">ISO
-   *                 8601 date-time format</a>, in the UTC time zone.</p>
+   * <p>The hypervisor for the instance type.</p>
    */
-  CreateTime?: Date;
-}
+  Hypervisor?: InstanceTypeHypervisor;
 
-/**
- * @public
- */
-export interface DescribeKeyPairsResult {
   /**
    * @public
-   * <p>Information about the key pairs.</p>
+   * <p>Describes the processor.</p>
    */
-  KeyPairs?: KeyPairInfo[];
-}
+  ProcessorInfo?: ProcessorInfo;
 
-/**
- * @public
- */
-export interface DescribeLaunchTemplatesRequest {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually
-   *             making the request, and provides an error response. If you have the required
-   *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
-   *                 <code>UnauthorizedOperation</code>.</p>
+   * <p>Describes the vCPU configurations for the instance type.</p>
    */
-  DryRun?: boolean;
+  VCpuInfo?: VCpuInfo;
 
   /**
    * @public
-   * <p>One or more launch template IDs.</p>
+   * <p>Describes the memory for the instance type.</p>
    */
-  LaunchTemplateIds?: string[];
+  MemoryInfo?: MemoryInfo;
 
   /**
    * @public
-   * <p>One or more launch template names.</p>
+   * <p>Indicates whether instance storage is supported.</p>
    */
-  LaunchTemplateNames?: string[];
+  InstanceStorageSupported?: boolean;
 
   /**
    * @public
-   * <p>One or more filters.</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>create-time</code> - The time the launch template was created.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>launch-template-name</code> - The name of the launch template.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>tag</code>:<key> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value.
-   *     For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>tag-key</code> - The key of a tag assigned to the resource. Use this filter to find all resources assigned a tag with a specific key, regardless of the tag value.</p>
-   *             </li>
-   *          </ul>
+   * <p>Describes the instance storage for the instance type.</p>
    */
-  Filters?: Filter[];
+  InstanceStorageInfo?: InstanceStorageInfo;
 
   /**
    * @public
-   * <p>The token to request the next page of results.</p>
+   * <p>Describes the Amazon EBS settings for the instance type.</p>
    */
-  NextToken?: string;
+  EbsInfo?: EbsInfo;
 
   /**
    * @public
-   * <p>The maximum number of results to return in a single call. To retrieve the remaining
-   *             results, make another call with the returned <code>NextToken</code> value. This value
-   *             can be between 1 and 200.</p>
+   * <p>Describes the network settings for the instance type.</p>
    */
-  MaxResults?: number;
-}
+  NetworkInfo?: NetworkInfo;
 
-/**
- * @public
- */
-export interface DescribeLaunchTemplatesResult {
   /**
    * @public
-   * <p>Information about the launch templates.</p>
+   * <p>Describes the GPU accelerator settings for the instance type.</p>
    */
-  LaunchTemplates?: LaunchTemplate[];
+  GpuInfo?: GpuInfo;
 
   /**
    * @public
-   * <p>The token to use to retrieve the next page of results. This value is <code>null</code>
-   *             when there are no more results to return.</p>
+   * <p>Describes the FPGA accelerator settings for the instance type.</p>
    */
-  NextToken?: string;
-}
+  FpgaInfo?: FpgaInfo;
 
-/**
- * @public
- */
-export interface DescribeLaunchTemplateVersionsRequest {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually
-   *             making the request, and provides an error response. If you have the required
-   *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
-   *                 <code>UnauthorizedOperation</code>.</p>
+   * <p>Describes the placement group settings for the instance type.</p>
    */
-  DryRun?: boolean;
+  PlacementGroupInfo?: PlacementGroupInfo;
 
   /**
    * @public
-   * <p>The ID of the launch template.</p>
-   *          <p>To describe one or more versions of a specified launch template, you must specify
-   *             either the <code>LaunchTemplateId</code> or the <code>LaunchTemplateName</code>, but not
-   *             both.</p>
-   *          <p>To describe all the latest or default launch template versions in your account, you
-   *             must omit this parameter.</p>
+   * <p>Describes the Inference accelerator settings for the instance type.</p>
    */
-  LaunchTemplateId?: string;
+  InferenceAcceleratorInfo?: InferenceAcceleratorInfo;
 
   /**
    * @public
-   * <p>The name of the launch template.</p>
-   *          <p>To describe one or more versions of a specified launch template, you must specify
-   *             either the <code>LaunchTemplateName</code> or the <code>LaunchTemplateId</code>, but not
-   *             both.</p>
-   *          <p>To describe all the latest or default launch template versions in your account, you
-   *             must omit this parameter.</p>
+   * <p>Indicates whether On-Demand hibernation is supported.</p>
    */
-  LaunchTemplateName?: string;
+  HibernationSupported?: boolean;
 
   /**
    * @public
-   * <p>One or more versions of the launch template. Valid values depend on whether you are
-   *             describing a specified launch template (by ID or name) or all launch templates in your
-   *             account.</p>
-   *          <p>To describe one or more versions of a specified launch template, valid values are
-   *                 <code>$Latest</code>, <code>$Default</code>, and numbers.</p>
-   *          <p>To describe all launch templates in your account that are defined as the latest
-   *             version, the valid value is <code>$Latest</code>. To describe all launch templates in
-   *             your account that are defined as the default version, the valid value is
-   *                 <code>$Default</code>. You can specify <code>$Latest</code> and
-   *                 <code>$Default</code> in the same request. You cannot specify numbers.</p>
+   * <p>Indicates whether the instance type is a burstable performance T instance
+   *    type. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/burstable-performance-instances.html">Burstable
+   *     performance instances</a>.</p>
    */
-  Versions?: string[];
+  BurstablePerformanceSupported?: boolean;
 
   /**
    * @public
-   * <p>The version number after which to describe launch template versions.</p>
+   * <p>Indicates whether Dedicated Hosts are supported on the instance type.</p>
    */
-  MinVersion?: string;
+  DedicatedHostsSupported?: boolean;
 
   /**
    * @public
-   * <p>The version number up to which to describe launch template versions.</p>
+   * <p>Indicates whether Amazon CloudWatch action based recovery is supported.</p>
    */
-  MaxVersion?: string;
+  AutoRecoverySupported?: boolean;
 
   /**
    * @public
-   * <p>The token to request the next page of results.</p>
+   * <p>The supported boot modes. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ami-boot.html">Boot modes</a> in the
+   *    <i>Amazon EC2 User Guide</i>.</p>
    */
-  NextToken?: string;
+  SupportedBootModes?: BootModeType[];
 
   /**
    * @public
-   * <p>The maximum number of results to return in a single call. To retrieve the remaining
-   *             results, make another call with the returned <code>NextToken</code> value. This value
-   *             can be between 1 and 200.</p>
+   * <p>Indicates whether Nitro Enclaves is supported.</p>
    */
-  MaxResults?: number;
+  NitroEnclavesSupport?: NitroEnclavesSupport;
 
   /**
    * @public
-   * <p>One or more filters.</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>create-time</code> - The time the launch template version was
-   *                     created.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>ebs-optimized</code> - A boolean that indicates whether the instance is
-   *                     optimized for Amazon EBS I/O.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>http-endpoint</code> - Indicates whether the HTTP metadata endpoint on
-   *                     your instances is enabled (<code>enabled</code> | <code>disabled</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>http-protocol-ipv4</code> - Indicates whether the IPv4 endpoint for the
-   *                     instance metadata service is enabled (<code>enabled</code> |
-   *                         <code>disabled</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>host-resource-group-arn</code> - The ARN of the host resource group in
-   *                     which to launch the instances.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>http-tokens</code> - The state of token usage for your instance metadata
-   *                     requests (<code>optional</code> | <code>required</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>iam-instance-profile</code> - The ARN of the IAM instance
-   *                     profile.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>image-id</code> - The ID of the AMI.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>instance-type</code> - The instance type.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>is-default-version</code> - A boolean that indicates whether the launch
-   *                     template version is the default version.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>kernel-id</code> - The kernel ID.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>license-configuration-arn</code> - The ARN of the license
-   *                     configuration.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>network-card-index</code> - The index of the network card.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>ram-disk-id</code> - The RAM disk ID.</p>
-   *             </li>
-   *          </ul>
+   * <p>Indicates whether NitroTPM is supported.</p>
    */
-  Filters?: Filter[];
+  NitroTpmSupport?: NitroTpmSupport;
 
   /**
    * @public
-   * <p>If <code>true</code>, and if a Systems Manager parameter is specified for <code>ImageId</code>,
-   *             the AMI ID is displayed in the response for <code>imageId</code>.</p>
-   *          <p>If <code>false</code>, and if a Systems Manager parameter is specified for <code>ImageId</code>,
-   *             the parameter is displayed in the response for <code>imageId</code>.</p>
-   *          <p> For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-launch-templates.html#use-an-ssm-parameter-instead-of-an-ami-id">Use a Systems
-   *             Manager parameter instead of an AMI ID</a> in the <i>Amazon Elastic Compute Cloud User Guide</i>.</p>
-   *          <p>Default: <code>false</code>
-   *          </p>
+   * <p>Describes the supported NitroTPM versions for the instance type.</p>
    */
-  ResolveAlias?: boolean;
+  NitroTpmInfo?: NitroTpmInfo;
 }
 
 /**
  * @public
  */
-export interface DescribeLaunchTemplateVersionsResult {
+export interface DescribeInstanceTypesResult {
   /**
    * @public
-   * <p>Information about the launch template versions.</p>
+   * <p>The instance type. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html">Instance types</a> in the <i>Amazon EC2 User Guide</i>.</p>
    */
-  LaunchTemplateVersions?: LaunchTemplateVersion[];
+  InstanceTypes?: InstanceTypeInfo[];
 
   /**
    * @public
-   * <p>The token to use to retrieve the next page of results. This value is <code>null</code>
-   *             when there are no more results to return.</p>
+   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there
+   *          are no more items to return.</p>
    */
   NextToken?: string;
 }
@@ -4912,41 +4616,36 @@ export interface DescribeLaunchTemplateVersionsResult {
 /**
  * @public
  */
-export interface DescribeLocalGatewayRouteTablesRequest {
-  /**
-   * @public
-   * <p>The IDs of the local gateway route tables.</p>
-   */
-  LocalGatewayRouteTableIds?: string[];
-
+export interface DescribeInternetGatewaysRequest {
   /**
    * @public
-   * <p>One or more filters.</p>
+   * <p>The filters.</p>
    *          <ul>
    *             <li>
    *                <p>
-   *                   <code>local-gateway-id</code> - The ID of a local gateway.</p>
+   *                   <code>attachment.state</code> - The current state of the attachment between the gateway
+   *                     and the VPC (<code>available</code>). Present only if a VPC is attached.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>local-gateway-route-table-arn</code> - The Amazon Resource Name (ARN) of the
-   *                local gateway route table.</p>
+   *                   <code>attachment.vpc-id</code> - The ID of an attached VPC.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>local-gateway-route-table-id</code> - The ID of a local gateway route table.</p>
+   *                   <code>internet-gateway-id</code> - The ID of the Internet gateway.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>outpost-arn</code> - The Amazon Resource Name (ARN) of the Outpost.</p>
+   *                   <code>owner-id</code> - The ID of the Amazon Web Services account that owns the internet gateway.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>owner-id</code> - The ID of the Amazon Web Services account that owns the local gateway route table.</p>
+   *                   <code>tag</code>:<key> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value.
+   *     For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>state</code> - The state of the local gateway route table.</p>
+   *                   <code>tag-key</code> - The key of a tag assigned to the resource. Use this filter to find all resources assigned a tag with a specific key, regardless of the tag value.</p>
    *             </li>
    *          </ul>
    */
@@ -4954,17 +4653,55 @@ export interface DescribeLocalGatewayRouteTablesRequest {
 
   /**
    * @public
-   * <p>The maximum number of results to return with a single call.
-   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
+
+  /**
+   * @public
+   * <p>The IDs of the internet gateways.</p>
+   *          <p>Default: Describes all your internet gateways.</p>
+   */
+  InternetGatewayIds?: string[];
+
+  /**
+   * @public
+   * <p>The token returned from a previous paginated request. Pagination continues from the end of the items returned by the previous request.</p>
+   */
+  NextToken?: string;
+
+  /**
+   * @public
+   * <p>The maximum number of items to return for this request.
+   * 	To get the next page of items, make another request with the token returned in the output.
+   * 	For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
    */
   MaxResults?: number;
+}
+
+/**
+ * @public
+ */
+export interface DescribeInternetGatewaysResult {
+  /**
+   * @public
+   * <p>Information about one or more internet gateways.</p>
+   */
+  InternetGateways?: InternetGateway[];
 
   /**
    * @public
-   * <p>The token for the next page of results.</p>
+   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there are no more items to return.</p>
    */
   NextToken?: string;
+}
 
+/**
+ * @public
+ */
+export interface DescribeIpamByoasnRequest {
   /**
    * @public
    * <p>Checks whether you have the required permissions for the action, without actually making the request,
@@ -4972,17 +4709,30 @@ export interface DescribeLocalGatewayRouteTablesRequest {
    *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
+
+  /**
+   * @public
+   * <p>The maximum number of results to return with a single call.
+   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
+   */
+  MaxResults?: number;
+
+  /**
+   * @public
+   * <p>The token for the next page of results.</p>
+   */
+  NextToken?: string;
 }
 
 /**
  * @public
  */
-export interface DescribeLocalGatewayRouteTablesResult {
+export interface DescribeIpamByoasnResult {
   /**
    * @public
-   * <p>Information about the local gateway route tables.</p>
+   * <p>ASN and BYOIP CIDR associations.</p>
    */
-  LocalGatewayRouteTables?: LocalGatewayRouteTable[];
+  Byoasns?: Byoasn[];
 
   /**
    * @public
@@ -4994,55 +4744,24 @@ export interface DescribeLocalGatewayRouteTablesResult {
 /**
  * @public
  */
-export interface DescribeLocalGatewayRouteTableVirtualInterfaceGroupAssociationsRequest {
+export interface DescribeIpamPoolsRequest {
   /**
    * @public
-   * <p>The IDs of the associations.</p>
+   * <p>A check for whether you have the required permissions for the action without actually making the request
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  LocalGatewayRouteTableVirtualInterfaceGroupAssociationIds?: string[];
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>One or more filters.</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>local-gateway-id</code> - The ID of a local gateway.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>local-gateway-route-table-arn</code> - The Amazon Resource Name (ARN) of the local
-   *                gateway route table for the virtual interface group.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>local-gateway-route-table-id</code> - The ID of the local gateway route table.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>local-gateway-route-table-virtual-interface-group-association-id</code> - The ID of the association.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>local-gateway-route-table-virtual-interface-group-id</code> - The ID of the virtual interface group.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>owner-id</code> - The ID of the Amazon Web Services account that owns the local gateway virtual
-   *                interface group association.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>state</code> - The state of the association.</p>
-   *             </li>
-   *          </ul>
+   * <p>One or more filters for the request. For more information about filtering, see <a href="https://docs.aws.amazon.com/cli/latest/userguide/cli-usage-filter.html">Filtering CLI output</a>.</p>
    */
   Filters?: Filter[];
 
   /**
    * @public
-   * <p>The maximum number of results to return with a single call.
-   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
+   * <p>The maximum number of results to return in the request.</p>
    */
   MaxResults?: number;
 
@@ -5054,113 +4773,132 @@ export interface DescribeLocalGatewayRouteTableVirtualInterfaceGroupAssociations
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The IDs of the IPAM pools you would like information on.</p>
    */
-  DryRun?: boolean;
+  IpamPoolIds?: string[];
 }
 
 /**
  * @public
  */
-export interface DescribeLocalGatewayRouteTableVirtualInterfaceGroupAssociationsResult {
+export interface DescribeIpamPoolsResult {
   /**
    * @public
-   * <p>Information about the associations.</p>
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
    */
-  LocalGatewayRouteTableVirtualInterfaceGroupAssociations?: LocalGatewayRouteTableVirtualInterfaceGroupAssociation[];
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
+   * <p>Information about the IPAM pools.</p>
    */
-  NextToken?: string;
+  IpamPools?: IpamPool[];
 }
 
 /**
  * @public
  */
-export interface DescribeLocalGatewayRouteTableVpcAssociationsRequest {
+export interface DescribeIpamResourceDiscoveriesRequest {
   /**
    * @public
-   * <p>The IDs of the associations.</p>
+   * <p>A check for whether you have the required permissions for the action without actually making the request
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  LocalGatewayRouteTableVpcAssociationIds?: string[];
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>One or more filters.</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>local-gateway-id</code> - The ID of a local gateway.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>local-gateway-route-table-arn</code> - The Amazon Resource Name (ARN) of the local
-   *                gateway route table for the association.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>local-gateway-route-table-id</code> - The ID of the local gateway route table.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>local-gateway-route-table-vpc-association-id</code> - The ID of the association.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>owner-id</code> - The ID of the Amazon Web Services account that owns the local gateway route table
-   *                for the association.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>state</code> - The state of the association.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>vpc-id</code> - The ID of the VPC.</p>
-   *             </li>
-   *          </ul>
+   * <p>The IPAM resource discovery IDs.</p>
    */
-  Filters?: Filter[];
+  IpamResourceDiscoveryIds?: string[];
 
   /**
    * @public
-   * <p>The maximum number of results to return with a single call.
-   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
+   * <p>Specify the pagination token from a previous request to retrieve the next page of results.</p>
+   */
+  NextToken?: string;
+
+  /**
+   * @public
+   * <p>The maximum number of resource discoveries to return in one page of results.</p>
    */
   MaxResults?: number;
 
   /**
    * @public
-   * <p>The token for the next page of results.</p>
+   * <p>The resource discovery filters.</p>
+   */
+  Filters?: Filter[];
+}
+
+/**
+ * @public
+ */
+export interface DescribeIpamResourceDiscoveriesResult {
+  /**
+   * @public
+   * <p>The resource discoveries.</p>
+   */
+  IpamResourceDiscoveries?: IpamResourceDiscovery[];
+
+  /**
+   * @public
+   * <p>Specify the pagination token from a previous request to retrieve the next page of results.</p>
    */
   NextToken?: string;
+}
 
+/**
+ * @public
+ */
+export interface DescribeIpamResourceDiscoveryAssociationsRequest {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   * <p>A check for whether you have the required permissions for the action without actually making the request
    *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
    *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
+
+  /**
+   * @public
+   * <p>The resource discovery association IDs.</p>
+   */
+  IpamResourceDiscoveryAssociationIds?: string[];
+
+  /**
+   * @public
+   * <p>Specify the pagination token from a previous request to retrieve the next page of results.</p>
+   */
+  NextToken?: string;
+
+  /**
+   * @public
+   * <p>The maximum number of resource discovery associations to return in one page of results.</p>
+   */
+  MaxResults?: number;
+
+  /**
+   * @public
+   * <p>The resource discovery association filters.</p>
+   */
+  Filters?: Filter[];
 }
 
 /**
  * @public
  */
-export interface DescribeLocalGatewayRouteTableVpcAssociationsResult {
+export interface DescribeIpamResourceDiscoveryAssociationsResult {
   /**
    * @public
-   * <p>Information about the associations.</p>
+   * <p>The resource discovery associations.</p>
    */
-  LocalGatewayRouteTableVpcAssociations?: LocalGatewayRouteTableVpcAssociation[];
+  IpamResourceDiscoveryAssociations?: IpamResourceDiscoveryAssociation[];
 
   /**
    * @public
-   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
+   * <p>Specify the pagination token from a previous request to retrieve the next page of results.</p>
    */
   NextToken?: string;
 }
@@ -5168,41 +4906,24 @@ export interface DescribeLocalGatewayRouteTableVpcAssociationsResult {
 /**
  * @public
  */
-export interface DescribeLocalGatewaysRequest {
+export interface DescribeIpamsRequest {
   /**
    * @public
-   * <p>The IDs of the local gateways.</p>
+   * <p>A check for whether you have the required permissions for the action without actually making the request
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  LocalGatewayIds?: string[];
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>One or more filters.</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>local-gateway-id</code> - The ID of a local gateway.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>outpost-arn</code> - The Amazon Resource Name (ARN) of the Outpost.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>owner-id</code> - The ID of the Amazon Web Services account that owns the local gateway.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>state</code> - The state of the association.</p>
-   *             </li>
-   *          </ul>
+   * <p>One or more filters for the request. For more information about filtering, see <a href="https://docs.aws.amazon.com/cli/latest/userguide/cli-usage-filter.html">Filtering CLI output</a>.</p>
    */
   Filters?: Filter[];
 
   /**
    * @public
-   * <p>The maximum number of results to return with a single call.
-   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
+   * <p>The maximum number of results to return in the request.</p>
    */
   MaxResults?: number;
 
@@ -5214,99 +4935,97 @@ export interface DescribeLocalGatewaysRequest {
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The IDs of the IPAMs you want information on.</p>
    */
-  DryRun?: boolean;
+  IpamIds?: string[];
 }
 
 /**
  * @public
- * <p>Describes a local gateway.</p>
  */
-export interface LocalGateway {
+export interface DescribeIpamsResult {
   /**
    * @public
-   * <p>The ID of the local gateway.</p>
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
    */
-  LocalGatewayId?: string;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The Amazon Resource Name (ARN) of the Outpost.</p>
+   * <p>Information about the IPAMs.</p>
    */
-  OutpostArn?: string;
+  Ipams?: Ipam[];
+}
 
+/**
+ * @public
+ */
+export interface DescribeIpamScopesRequest {
   /**
    * @public
-   * <p>The ID of the Amazon Web Services account that owns the local gateway.</p>
+   * <p>A check for whether you have the required permissions for the action without actually making the request
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  OwnerId?: string;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The state of the local gateway.</p>
+   * <p>One or more filters for the request. For more information about filtering, see <a href="https://docs.aws.amazon.com/cli/latest/userguide/cli-usage-filter.html">Filtering CLI output</a>.</p>
    */
-  State?: string;
+  Filters?: Filter[];
 
   /**
    * @public
-   * <p>The tags assigned to the local gateway.</p>
+   * <p>The maximum number of results to return in the request.</p>
    */
-  Tags?: Tag[];
+  MaxResults?: number;
+
+  /**
+   * @public
+   * <p>The token for the next page of results.</p>
+   */
+  NextToken?: string;
+
+  /**
+   * @public
+   * <p>The IDs of the scopes you want information on.</p>
+   */
+  IpamScopeIds?: string[];
 }
 
 /**
  * @public
  */
-export interface DescribeLocalGatewaysResult {
+export interface DescribeIpamScopesResult {
   /**
    * @public
-   * <p>Information about the local gateways.</p>
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
    */
-  LocalGateways?: LocalGateway[];
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
+   * <p>The scopes you want information on.</p>
    */
-  NextToken?: string;
+  IpamScopes?: IpamScope[];
 }
 
 /**
  * @public
  */
-export interface DescribeLocalGatewayVirtualInterfaceGroupsRequest {
+export interface DescribeIpv6PoolsRequest {
   /**
    * @public
-   * <p>The IDs of the virtual interface groups.</p>
+   * <p>The IDs of the IPv6 address pools.</p>
    */
-  LocalGatewayVirtualInterfaceGroupIds?: string[];
+  PoolIds?: string[];
 
   /**
    * @public
-   * <p>One or more filters.</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>local-gateway-id</code> - The ID of a local gateway.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>local-gateway-virtual-interface-group-id</code> - The ID of the virtual interface group.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>local-gateway-virtual-interface-id</code> - The ID of the virtual interface.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>owner-id</code> - The ID of the Amazon Web Services account that owns the local gateway virtual interface group.</p>
-   *             </li>
-   *          </ul>
+   * <p>The token for the next page of results.</p>
    */
-  Filters?: Filter[];
+  NextToken?: string;
 
   /**
    * @public
@@ -5315,12 +5034,6 @@ export interface DescribeLocalGatewayVirtualInterfaceGroupsRequest {
    */
   MaxResults?: number;
 
-  /**
-   * @public
-   * <p>The token for the next page of results.</p>
-   */
-  NextToken?: string;
-
   /**
    * @public
    * <p>Checks whether you have the required permissions for the action, without actually making the request,
@@ -5328,40 +5041,63 @@ export interface DescribeLocalGatewayVirtualInterfaceGroupsRequest {
    *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
+
+  /**
+   * @public
+   * <p>One or more filters.</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>tag</code>:<key> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value.
+   *     For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>tag-key</code> - The key of a tag assigned to the resource. Use this filter to find all resources assigned a tag with a specific key, regardless of the tag value.</p>
+   *             </li>
+   *          </ul>
+   */
+  Filters?: Filter[];
 }
 
 /**
  * @public
- * <p>Describes a local gateway virtual interface group.</p>
+ * <p>Describes a CIDR block for an address pool.</p>
  */
-export interface LocalGatewayVirtualInterfaceGroup {
+export interface PoolCidrBlock {
   /**
    * @public
-   * <p>The ID of the virtual interface group.</p>
+   * <p>The CIDR block.</p>
    */
-  LocalGatewayVirtualInterfaceGroupId?: string;
+  Cidr?: string;
+}
 
+/**
+ * @public
+ * <p>Describes an IPv6 address pool.</p>
+ */
+export interface Ipv6Pool {
   /**
    * @public
-   * <p>The IDs of the virtual interfaces.</p>
+   * <p>The ID of the address pool.</p>
    */
-  LocalGatewayVirtualInterfaceIds?: string[];
+  PoolId?: string;
 
   /**
    * @public
-   * <p>The ID of the local gateway.</p>
+   * <p>The description for the address pool.</p>
    */
-  LocalGatewayId?: string;
+  Description?: string;
 
   /**
    * @public
-   * <p>The ID of the Amazon Web Services account that owns the local gateway virtual interface group.</p>
+   * <p>The CIDR blocks for the address pool.</p>
    */
-  OwnerId?: string;
+  PoolCidrBlocks?: PoolCidrBlock[];
 
   /**
    * @public
-   * <p>The tags assigned to the virtual interface group.</p>
+   * <p>Any tags for the address pool.</p>
    */
   Tags?: Tag[];
 }
@@ -5369,12 +5105,12 @@ export interface LocalGatewayVirtualInterfaceGroup {
 /**
  * @public
  */
-export interface DescribeLocalGatewayVirtualInterfaceGroupsResult {
+export interface DescribeIpv6PoolsResult {
   /**
    * @public
-   * <p>The virtual interface groups.</p>
+   * <p>Information about the IPv6 address pools.</p>
    */
-  LocalGatewayVirtualInterfaceGroups?: LocalGatewayVirtualInterfaceGroup[];
+  Ipv6Pools?: Ipv6Pool[];
 
   /**
    * @public
@@ -5386,149 +5122,228 @@ export interface DescribeLocalGatewayVirtualInterfaceGroupsResult {
 /**
  * @public
  */
-export interface DescribeLocalGatewayVirtualInterfacesRequest {
-  /**
-   * @public
-   * <p>The IDs of the virtual interfaces.</p>
-   */
-  LocalGatewayVirtualInterfaceIds?: string[];
-
+export interface DescribeKeyPairsRequest {
   /**
    * @public
-   * <p>One or more filters.</p>
+   * <p>The filters.</p>
    *          <ul>
    *             <li>
    *                <p>
-   *                   <code>local-address</code> - The local address.</p>
+   *                   <code>key-pair-id</code> - The ID of the key pair.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>local-bgp-asn</code> - The Border Gateway Protocol (BGP) Autonomous System Number (ASN)
-   *                of the local gateway.</p>
+   *                   <code>fingerprint</code> - The fingerprint of the key pair.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>local-gateway-id</code> - The ID of the local gateway.</p>
+   *                   <code>key-name</code> - The name of the key pair.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>local-gateway-virtual-interface-id</code> - The ID of the virtual interface.</p>
+   *                   <code>tag-key</code> - The key of a tag assigned to the resource. Use this filter to find all resources assigned a tag with a specific key, regardless of the tag value.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>owner-id</code> - The ID of the Amazon Web Services account that owns the local gateway virtual interface.</p>
+   *                   <code>tag</code>:<key> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value.
+   *     For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
+   *             </li>
+   *          </ul>
+   */
+  Filters?: Filter[];
+
+  /**
+   * @public
+   * <p>The key pair names.</p>
+   *          <p>Default: Describes all of your key pairs.</p>
+   */
+  KeyNames?: string[];
+
+  /**
+   * @public
+   * <p>The IDs of the key pairs.</p>
+   */
+  KeyPairIds?: string[];
+
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
+
+  /**
+   * @public
+   * <p>If <code>true</code>, the public key material is included in the response.</p>
+   *          <p>Default: <code>false</code>
+   *          </p>
+   */
+  IncludePublicKey?: boolean;
+}
+
+/**
+ * @public
+ * <p>Describes a key pair.</p>
+ */
+export interface KeyPairInfo {
+  /**
+   * @public
+   * <p>The ID of the key pair.</p>
+   */
+  KeyPairId?: string;
+
+  /**
+   * @public
+   * <p>If you used <a>CreateKeyPair</a> to create the key pair:</p>
+   *          <ul>
+   *             <li>
+   *                <p>For RSA key pairs, the key fingerprint is the SHA-1 digest of the DER encoded private key.</p>
    *             </li>
    *             <li>
-   *                <p>
-   *                   <code>peer-address</code> - The peer address.</p>
+   *                <p>For ED25519 key pairs, the key fingerprint is the base64-encoded SHA-256 digest, which
+   *                    is the default for OpenSSH, starting with <a href="http://www.openssh.com/txt/release-6.8">OpenSSH 6.8</a>.</p>
    *             </li>
+   *          </ul>
+   *          <p>If you used <a>ImportKeyPair</a> to provide Amazon Web Services the public key:</p>
+   *          <ul>
    *             <li>
-   *                <p>
-   *                   <code>peer-bgp-asn</code> - The peer BGP ASN.</p>
+   *                <p>For RSA key pairs, the key fingerprint is the MD5 public key fingerprint as specified in section 4 of RFC4716.</p>
    *             </li>
    *             <li>
-   *                <p>
-   *                   <code>vlan</code> - The ID of the VLAN.</p>
+   *                <p>For ED25519 key pairs, the key fingerprint is the base64-encoded SHA-256
+   *                     digest, which is the default for OpenSSH, starting with <a href="http://www.openssh.com/txt/release-6.8">OpenSSH 6.8</a>.</p>
    *             </li>
    *          </ul>
    */
-  Filters?: Filter[];
+  KeyFingerprint?: string;
 
   /**
    * @public
-   * <p>The maximum number of results to return with a single call.
-   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
+   * <p>The name of the key pair.</p>
    */
-  MaxResults?: number;
+  KeyName?: string;
 
   /**
    * @public
-   * <p>The token for the next page of results.</p>
+   * <p>The type of key pair.</p>
    */
-  NextToken?: string;
+  KeyType?: KeyType;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>Any tags applied to the key pair.</p>
    */
-  DryRun?: boolean;
-}
+  Tags?: Tag[];
 
-/**
- * @public
- * <p>Describes a local gateway virtual interface.</p>
- */
-export interface LocalGatewayVirtualInterface {
   /**
    * @public
-   * <p>The ID of the virtual interface.</p>
+   * <p>The public key material.</p>
    */
-  LocalGatewayVirtualInterfaceId?: string;
+  PublicKey?: string;
 
   /**
    * @public
-   * <p>The ID of the local gateway.</p>
+   * <p>If you used Amazon EC2 to create the key pair, this is the date and time when the key
+   *             was created, in <a href="https://www.iso.org/iso-8601-date-and-time-format.html">ISO
+   *                 8601 date-time format</a>, in the UTC time zone.</p>
+   *          <p>If you imported an existing key pair to Amazon EC2, this is the date and time the key
+   *             was imported, in <a href="https://www.iso.org/iso-8601-date-and-time-format.html">ISO
+   *                 8601 date-time format</a>, in the UTC time zone.</p>
    */
-  LocalGatewayId?: string;
+  CreateTime?: Date;
+}
 
+/**
+ * @public
+ */
+export interface DescribeKeyPairsResult {
   /**
    * @public
-   * <p>The ID of the VLAN.</p>
+   * <p>Information about the key pairs.</p>
    */
-  Vlan?: number;
+  KeyPairs?: KeyPairInfo[];
+}
 
+/**
+ * @public
+ */
+export interface DescribeLaunchTemplatesRequest {
   /**
    * @public
-   * <p>The local address.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually
+   *             making the request, and provides an error response. If you have the required
+   *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
+   *                 <code>UnauthorizedOperation</code>.</p>
    */
-  LocalAddress?: string;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The peer address.</p>
+   * <p>One or more launch template IDs.</p>
    */
-  PeerAddress?: string;
+  LaunchTemplateIds?: string[];
 
   /**
    * @public
-   * <p>The Border Gateway Protocol (BGP) Autonomous System Number (ASN) of the local gateway.</p>
+   * <p>One or more launch template names.</p>
    */
-  LocalBgpAsn?: number;
+  LaunchTemplateNames?: string[];
 
   /**
    * @public
-   * <p>The peer BGP ASN.</p>
+   * <p>One or more filters.</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>create-time</code> - The time the launch template was created.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>launch-template-name</code> - The name of the launch template.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>tag</code>:<key> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value.
+   *     For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>tag-key</code> - The key of a tag assigned to the resource. Use this filter to find all resources assigned a tag with a specific key, regardless of the tag value.</p>
+   *             </li>
+   *          </ul>
    */
-  PeerBgpAsn?: number;
+  Filters?: Filter[];
 
   /**
    * @public
-   * <p>The ID of the Amazon Web Services account that owns the local gateway virtual interface.</p>
+   * <p>The token to request the next page of results.</p>
    */
-  OwnerId?: string;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The tags assigned to the virtual interface.</p>
+   * <p>The maximum number of results to return in a single call. To retrieve the remaining
+   *             results, make another call with the returned <code>NextToken</code> value. This value
+   *             can be between 1 and 200.</p>
    */
-  Tags?: Tag[];
+  MaxResults?: number;
 }
 
 /**
  * @public
  */
-export interface DescribeLocalGatewayVirtualInterfacesResult {
+export interface DescribeLaunchTemplatesResult {
   /**
    * @public
-   * <p>Information about the virtual interfaces.</p>
+   * <p>Information about the launch templates.</p>
    */
-  LocalGatewayVirtualInterfaces?: LocalGatewayVirtualInterface[];
+  LaunchTemplates?: LaunchTemplate[];
 
   /**
    * @public
-   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code>
+   *             when there are no more results to return.</p>
    */
   NextToken?: string;
 }
@@ -5536,169 +5351,181 @@ export interface DescribeLocalGatewayVirtualInterfacesResult {
 /**
  * @public
  */
-export interface DescribeLockedSnapshotsRequest {
+export interface DescribeLaunchTemplateVersionsRequest {
   /**
    * @public
-   * <p>The filters.</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>lock-state</code> - The state of the snapshot lock (<code>compliance-cooloff</code> |
-   *           <code>governance</code> | <code>compliance</code> | <code>expired</code>).</p>
-   *             </li>
-   *          </ul>
+   * <p>Checks whether you have the required permissions for the action, without actually
+   *             making the request, and provides an error response. If you have the required
+   *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
+   *                 <code>UnauthorizedOperation</code>.</p>
    */
-  Filters?: Filter[];
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The maximum number of items to return for this request.
-   * 	To get the next page of items, make another request with the token returned in the output.
-   * 	For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
+   * <p>The ID of the launch template.</p>
+   *          <p>To describe one or more versions of a specified launch template, you must specify
+   *             either the <code>LaunchTemplateId</code> or the <code>LaunchTemplateName</code>, but not
+   *             both.</p>
+   *          <p>To describe all the latest or default launch template versions in your account, you
+   *             must omit this parameter.</p>
    */
-  MaxResults?: number;
+  LaunchTemplateId?: string;
 
   /**
    * @public
-   * <p>The token returned from a previous paginated request.
-   *   Pagination continues from the end of the items returned by the previous request.</p>
+   * <p>The name of the launch template.</p>
+   *          <p>To describe one or more versions of a specified launch template, you must specify
+   *             either the <code>LaunchTemplateName</code> or the <code>LaunchTemplateId</code>, but not
+   *             both.</p>
+   *          <p>To describe all the latest or default launch template versions in your account, you
+   *             must omit this parameter.</p>
    */
-  NextToken?: string;
+  LaunchTemplateName?: string;
 
   /**
    * @public
-   * <p>The IDs of the snapshots for which to view the lock status.</p>
+   * <p>One or more versions of the launch template. Valid values depend on whether you are
+   *             describing a specified launch template (by ID or name) or all launch templates in your
+   *             account.</p>
+   *          <p>To describe one or more versions of a specified launch template, valid values are
+   *                 <code>$Latest</code>, <code>$Default</code>, and numbers.</p>
+   *          <p>To describe all launch templates in your account that are defined as the latest
+   *             version, the valid value is <code>$Latest</code>. To describe all launch templates in
+   *             your account that are defined as the default version, the valid value is
+   *                 <code>$Default</code>. You can specify <code>$Latest</code> and
+   *                 <code>$Default</code> in the same request. You cannot specify numbers.</p>
    */
-  SnapshotIds?: string[];
+  Versions?: string[];
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The version number after which to describe launch template versions.</p>
    */
-  DryRun?: boolean;
-}
-
-/**
- * @public
- * @enum
- */
-export const LockState = {
-  compliance: "compliance",
-  compliance_cooloff: "compliance-cooloff",
-  expired: "expired",
-  governance: "governance",
-} as const;
+  MinVersion?: string;
 
-/**
- * @public
- */
-export type LockState = (typeof LockState)[keyof typeof LockState];
+  /**
+   * @public
+   * <p>The version number up to which to describe launch template versions.</p>
+   */
+  MaxVersion?: string;
 
-/**
- * @public
- * <p>Information about a locked snapshot.</p>
- */
-export interface LockedSnapshotsInfo {
   /**
    * @public
-   * <p>The account ID of the Amazon Web Services account that owns the snapshot.</p>
+   * <p>The token to request the next page of results.</p>
    */
-  OwnerId?: string;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The ID of the snapshot.</p>
+   * <p>The maximum number of results to return in a single call. To retrieve the remaining
+   *             results, make another call with the returned <code>NextToken</code> value. This value
+   *             can be between 1 and 200.</p>
    */
-  SnapshotId?: string;
+  MaxResults?: number;
 
   /**
    * @public
-   * <p>The state of the snapshot lock. Valid states include:</p>
+   * <p>One or more filters.</p>
    *          <ul>
    *             <li>
    *                <p>
-   *                   <code>compliance-cooloff</code> - The snapshot has been locked in
-   *           compliance mode but it is still within the cooling-off period. The snapshot can't be
-   *           deleted, but it can be unlocked and the lock settings can be modified by users with
-   *           appropriate permissions.</p>
+   *                   <code>create-time</code> - The time the launch template version was
+   *                     created.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>ebs-optimized</code> - A boolean that indicates whether the instance is
+   *                     optimized for Amazon EBS I/O.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>http-endpoint</code> - Indicates whether the HTTP metadata endpoint on
+   *                     your instances is enabled (<code>enabled</code> | <code>disabled</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>http-protocol-ipv4</code> - Indicates whether the IPv4 endpoint for the
+   *                     instance metadata service is enabled (<code>enabled</code> |
+   *                         <code>disabled</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>host-resource-group-arn</code> - The ARN of the host resource group in
+   *                     which to launch the instances.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>http-tokens</code> - The state of token usage for your instance metadata
+   *                     requests (<code>optional</code> | <code>required</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>iam-instance-profile</code> - The ARN of the IAM instance
+   *                     profile.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>image-id</code> - The ID of the AMI.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>instance-type</code> - The instance type.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>is-default-version</code> - A boolean that indicates whether the launch
+   *                     template version is the default version.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>kernel-id</code> - The kernel ID.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>governance</code> - The snapshot is locked in governance mode. The
-   *           snapshot can't be deleted, but it can be unlocked and the lock settings can be
-   *           modified by users with appropriate permissions.</p>
+   *                   <code>license-configuration-arn</code> - The ARN of the license
+   *                     configuration.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>compliance</code> - The snapshot is locked in compliance mode and the
-   *           cooling-off period has expired. The snapshot can't be unlocked or deleted. The lock
-   *           duration can only be increased by users with appropriate permissions.</p>
+   *                   <code>network-card-index</code> - The index of the network card.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>expired</code> - The snapshot was locked in compliance or governance
-   *           mode but the lock duration has expired. The snapshot is not locked and can be deleted.</p>
+   *                   <code>ram-disk-id</code> - The RAM disk ID.</p>
    *             </li>
    *          </ul>
    */
-  LockState?: LockState;
-
-  /**
-   * @public
-   * <p>The period of time for which the snapshot is locked, in days.</p>
-   */
-  LockDuration?: number;
-
-  /**
-   * @public
-   * <p>The compliance mode cooling-off period, in hours.</p>
-   */
-  CoolOffPeriod?: number;
-
-  /**
-   * @public
-   * <p>The date and time at which the compliance mode cooling-off period expires, in the UTC time zone
-   *       (<code>YYYY-MM-DDThh:mm:ss.sssZ</code>).</p>
-   */
-  CoolOffPeriodExpiresOn?: Date;
-
-  /**
-   * @public
-   * <p>The date and time at which the snapshot was locked, in the UTC time zone (<code>YYYY-MM-DDThh:mm:ss.sssZ</code>).</p>
-   */
-  LockCreatedOn?: Date;
-
-  /**
-   * @public
-   * <p>The date and time at which the lock duration started, in the UTC time zone (<code>YYYY-MM-DDThh:mm:ss.sssZ</code>).</p>
-   *          <p>If you lock a snapshot that is in the <code>pending</code> state, the lock duration
-   *       starts only once the snapshot enters the <code>completed</code> state.</p>
-   */
-  LockDurationStartTime?: Date;
+  Filters?: Filter[];
 
   /**
    * @public
-   * <p>The date and time at which the lock will expire, in the UTC time zone (<code>YYYY-MM-DDThh:mm:ss.sssZ</code>).</p>
+   * <p>If <code>true</code>, and if a Systems Manager parameter is specified for <code>ImageId</code>,
+   *             the AMI ID is displayed in the response for <code>imageId</code>.</p>
+   *          <p>If <code>false</code>, and if a Systems Manager parameter is specified for <code>ImageId</code>,
+   *             the parameter is displayed in the response for <code>imageId</code>.</p>
+   *          <p> For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-launch-templates.html#use-an-ssm-parameter-instead-of-an-ami-id">Use a Systems
+   *             Manager parameter instead of an AMI ID</a> in the <i>Amazon Elastic Compute Cloud User Guide</i>.</p>
+   *          <p>Default: <code>false</code>
+   *          </p>
    */
-  LockExpiresOn?: Date;
+  ResolveAlias?: boolean;
 }
 
 /**
  * @public
  */
-export interface DescribeLockedSnapshotsResult {
+export interface DescribeLaunchTemplateVersionsResult {
   /**
    * @public
-   * <p>Information about the snapshots.</p>
+   * <p>Information about the launch template versions.</p>
    */
-  Snapshots?: LockedSnapshotsInfo[];
+  LaunchTemplateVersions?: LaunchTemplateVersion[];
 
   /**
    * @public
-   * <p>The token to include in another request to get the next page of items.
-   *   This value is <code>null</code> when there are no more items to return.</p>
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code>
+   *             when there are no more results to return.</p>
    */
   NextToken?: string;
 }
@@ -5706,14 +5533,12 @@ export interface DescribeLockedSnapshotsResult {
 /**
  * @public
  */
-export interface DescribeManagedPrefixListsRequest {
+export interface DescribeLocalGatewayRouteTablesRequest {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The IDs of the local gateway route tables.</p>
    */
-  DryRun?: boolean;
+  LocalGatewayRouteTableIds?: string[];
 
   /**
    * @public
@@ -5721,15 +5546,28 @@ export interface DescribeManagedPrefixListsRequest {
    *          <ul>
    *             <li>
    *                <p>
-   *                   <code>owner-id</code> - The ID of the prefix list owner.</p>
+   *                   <code>local-gateway-id</code> - The ID of a local gateway.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>prefix-list-id</code> - The ID of the prefix list.</p>
+   *                   <code>local-gateway-route-table-arn</code> - The Amazon Resource Name (ARN) of the
+   *                local gateway route table.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>prefix-list-name</code> - The name of the prefix list.</p>
+   *                   <code>local-gateway-route-table-id</code> - The ID of a local gateway route table.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>outpost-arn</code> - The Amazon Resource Name (ARN) of the Outpost.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>owner-id</code> - The ID of the Amazon Web Services account that owns the local gateway route table.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>state</code> - The state of the local gateway route table.</p>
    *             </li>
    *          </ul>
    */
@@ -5748,47 +5586,6 @@ export interface DescribeManagedPrefixListsRequest {
    */
   NextToken?: string;
 
-  /**
-   * @public
-   * <p>One or more prefix list IDs.</p>
-   */
-  PrefixListIds?: string[];
-}
-
-/**
- * @public
- */
-export interface DescribeManagedPrefixListsResult {
-  /**
-   * @public
-   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
-   */
-  NextToken?: string;
-
-  /**
-   * @public
-   * <p>Information about the prefix lists.</p>
-   */
-  PrefixLists?: ManagedPrefixList[];
-}
-
-/**
- * @public
- */
-export interface DescribeMovingAddressesRequest {
-  /**
-   * @public
-   * <p>One or more filters.</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>moving-status</code> - The status of the Elastic IP address
-   *           (<code>MovingToVpc</code> | <code>RestoringToClassic</code>).</p>
-   *             </li>
-   *          </ul>
-   */
-  Filters?: Filter[];
-
   /**
    * @public
    * <p>Checks whether you have the required permissions for the action, without actually making the request,
@@ -5796,74 +5593,17 @@ export interface DescribeMovingAddressesRequest {
    *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
-
-  /**
-   * @public
-   * <p>The maximum number of results to return for the request in a single page. The remaining
-   *       results of the initial request can be seen by sending another request with the returned
-   *       <code>NextToken</code> value. This value can be between 5 and 1000; if
-   *       <code>MaxResults</code> is given a value outside of this range, an error is returned.</p>
-   *          <p>Default: If no value is provided, the default is 1000.</p>
-   */
-  MaxResults?: number;
-
-  /**
-   * @public
-   * <p>The token for the next page of results.</p>
-   */
-  NextToken?: string;
-
-  /**
-   * @public
-   * <p>One or more Elastic IP addresses.</p>
-   */
-  PublicIps?: string[];
-}
-
-/**
- * @public
- * @enum
- */
-export const MoveStatus = {
-  movingToVpc: "movingToVpc",
-  restoringToClassic: "restoringToClassic",
-} as const;
-
-/**
- * @public
- */
-export type MoveStatus = (typeof MoveStatus)[keyof typeof MoveStatus];
-
-/**
- * @public
- * <note>
- *             <p>This action is deprecated.</p>
- *          </note>
- *          <p>Describes the status of a moving Elastic IP address.</p>
- */
-export interface MovingAddressStatus {
-  /**
-   * @public
-   * <p>The status of the Elastic IP address that's being moved or restored.</p>
-   */
-  MoveStatus?: MoveStatus;
-
-  /**
-   * @public
-   * <p>The Elastic IP address.</p>
-   */
-  PublicIp?: string;
 }
 
 /**
  * @public
  */
-export interface DescribeMovingAddressesResult {
+export interface DescribeLocalGatewayRouteTablesResult {
   /**
    * @public
-   * <p>The status for each Elastic IP address.</p>
+   * <p>Information about the local gateway route tables.</p>
    */
-  MovingAddressStatuses?: MovingAddressStatus[];
+  LocalGatewayRouteTables?: LocalGatewayRouteTable[];
 
   /**
    * @public
@@ -5875,83 +5615,86 @@ export interface DescribeMovingAddressesResult {
 /**
  * @public
  */
-export interface DescribeNatGatewaysRequest {
+export interface DescribeLocalGatewayRouteTableVirtualInterfaceGroupAssociationsRequest {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The IDs of the associations.</p>
    */
-  DryRun?: boolean;
+  LocalGatewayRouteTableVirtualInterfaceGroupAssociationIds?: string[];
 
   /**
    * @public
-   * <p>The filters.</p>
+   * <p>One or more filters.</p>
    *          <ul>
    *             <li>
    *                <p>
-   *                   <code>nat-gateway-id</code> - The ID of the NAT gateway.</p>
+   *                   <code>local-gateway-id</code> - The ID of a local gateway.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>state</code> - The state of the NAT gateway (<code>pending</code> |
-   *               <code>failed</code> | <code>available</code> | <code>deleting</code> | <code>deleted</code>).</p>
+   *                   <code>local-gateway-route-table-arn</code> - The Amazon Resource Name (ARN) of the local
+   *                gateway route table for the virtual interface group.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>subnet-id</code> - The ID of the subnet in which the NAT gateway resides.</p>
+   *                   <code>local-gateway-route-table-id</code> - The ID of the local gateway route table.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>tag</code>:<key> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value.
-   *     For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
+   *                   <code>local-gateway-route-table-virtual-interface-group-association-id</code> - The ID of the association.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>tag-key</code> - The key of a tag assigned to the resource. Use this filter to find all resources assigned a tag with a specific key, regardless of the tag value.</p>
+   *                   <code>local-gateway-route-table-virtual-interface-group-id</code> - The ID of the virtual interface group.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>vpc-id</code> - The ID of the VPC in which the NAT gateway resides.</p>
+   *                   <code>owner-id</code> - The ID of the Amazon Web Services account that owns the local gateway virtual
+   *                interface group association.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>state</code> - The state of the association.</p>
    *             </li>
    *          </ul>
    */
-  Filter?: Filter[];
+  Filters?: Filter[];
 
   /**
    * @public
-   * <p>The maximum number of items to return for this request.
-   * 	To get the next page of items, make another request with the token returned in the output.
-   * 	For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
+   * <p>The maximum number of results to return with a single call.
+   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
    */
   MaxResults?: number;
 
   /**
    * @public
-   * <p>The IDs of the NAT gateways.</p>
+   * <p>The token for the next page of results.</p>
    */
-  NatGatewayIds?: string[];
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The token returned from a previous paginated request. Pagination continues from the end of the items returned by the previous request.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  NextToken?: string;
+  DryRun?: boolean;
 }
 
 /**
  * @public
  */
-export interface DescribeNatGatewaysResult {
+export interface DescribeLocalGatewayRouteTableVirtualInterfaceGroupAssociationsResult {
   /**
    * @public
-   * <p>Information about the NAT gateways.</p>
+   * <p>Information about the associations.</p>
    */
-  NatGateways?: NatGateway[];
+  LocalGatewayRouteTableVirtualInterfaceGroupAssociations?: LocalGatewayRouteTableVirtualInterfaceGroupAssociation[];
 
   /**
    * @public
-   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there are no more items to return.</p>
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
    */
   NextToken?: string;
 }
@@ -5959,89 +5702,46 @@ export interface DescribeNatGatewaysResult {
 /**
  * @public
  */
-export interface DescribeNetworkAclsRequest {
+export interface DescribeLocalGatewayRouteTableVpcAssociationsRequest {
   /**
    * @public
-   * <p>The filters.</p>
+   * <p>The IDs of the associations.</p>
+   */
+  LocalGatewayRouteTableVpcAssociationIds?: string[];
+
+  /**
+   * @public
+   * <p>One or more filters.</p>
    *          <ul>
    *             <li>
    *                <p>
-   *                   <code>association.association-id</code> - The ID of an association ID for the ACL.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>association.network-acl-id</code> - The ID of the network ACL involved in the association.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>association.subnet-id</code> - The ID of the subnet involved in the association.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>default</code> - Indicates whether the ACL is the default network ACL for the VPC.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>entry.cidr</code> - The IPv4 CIDR range specified in the entry.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>entry.icmp.code</code> - The ICMP code specified in the entry, if any.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>entry.icmp.type</code> - The ICMP type specified in the entry, if any.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>entry.ipv6-cidr</code> - The IPv6 CIDR range specified in the entry.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>entry.port-range.from</code> - The start of the port range specified in the entry. </p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>entry.port-range.to</code> - The end of the port range specified in the entry. </p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>entry.protocol</code> - The protocol specified in the entry (<code>tcp</code> | <code>udp</code> | <code>icmp</code> or a protocol number).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>entry.rule-action</code> - Allows or denies the matching traffic (<code>allow</code> | <code>deny</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>entry.egress</code> - A Boolean that indicates the type of rule. Specify <code>true</code>
-   * 		                for egress rules, or <code>false</code> for ingress rules.</p>
+   *                   <code>local-gateway-id</code> - The ID of a local gateway.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>entry.rule-number</code> - The number of an entry (in other words, rule) in
-   *                     the set of ACL entries.</p>
+   *                   <code>local-gateway-route-table-arn</code> - The Amazon Resource Name (ARN) of the local
+   *                gateway route table for the association.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>network-acl-id</code> - The ID of the network ACL.</p>
+   *                   <code>local-gateway-route-table-id</code> - The ID of the local gateway route table.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>owner-id</code> - The ID of the Amazon Web Services account that owns the network ACL.</p>
+   *                   <code>local-gateway-route-table-vpc-association-id</code> - The ID of the association.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>tag</code>:<key> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value.
-   *     For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
+   *                   <code>owner-id</code> - The ID of the Amazon Web Services account that owns the local gateway route table
+   *                for the association.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>tag-key</code> - The key of a tag assigned to the resource. Use this filter to find all resources assigned a tag with a specific key, regardless of the tag value.</p>
+   *                   <code>state</code> - The state of the association.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>vpc-id</code> - The ID of the VPC for the network ACL.</p>
+   *                   <code>vpc-id</code> - The ID of the VPC.</p>
    *             </li>
    *          </ul>
    */
@@ -6049,47 +5749,39 @@ export interface DescribeNetworkAclsRequest {
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-   */
-  DryRun?: boolean;
-
-  /**
-   * @public
-   * <p>The IDs of the network ACLs.</p>
-   *          <p>Default: Describes all your network ACLs.</p>
+   * <p>The maximum number of results to return with a single call.
+   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
    */
-  NetworkAclIds?: string[];
+  MaxResults?: number;
 
   /**
    * @public
-   * <p>The token returned from a previous paginated request. Pagination continues from the end of the items returned by the previous request.</p>
+   * <p>The token for the next page of results.</p>
    */
   NextToken?: string;
 
   /**
    * @public
-   * <p>The maximum number of items to return for this request.
-   * 	To get the next page of items, make another request with the token returned in the output.
-   * 	For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  MaxResults?: number;
+  DryRun?: boolean;
 }
 
 /**
  * @public
  */
-export interface DescribeNetworkAclsResult {
+export interface DescribeLocalGatewayRouteTableVpcAssociationsResult {
   /**
    * @public
-   * <p>Information about one or more network ACLs.</p>
+   * <p>Information about the associations.</p>
    */
-  NetworkAcls?: NetworkAcl[];
+  LocalGatewayRouteTableVpcAssociations?: LocalGatewayRouteTableVpcAssociation[];
 
   /**
    * @public
-   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there are no more items to return.</p>
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
    */
   NextToken?: string;
 }
@@ -6097,157 +5789,200 @@ export interface DescribeNetworkAclsResult {
 /**
  * @public
  */
-export interface DescribeNetworkInsightsAccessScopeAnalysesRequest {
+export interface DescribeLocalGatewaysRequest {
   /**
    * @public
-   * <p>The IDs of the Network Access Scope analyses.</p>
+   * <p>The IDs of the local gateways.</p>
    */
-  NetworkInsightsAccessScopeAnalysisIds?: string[];
+  LocalGatewayIds?: string[];
 
   /**
    * @public
-   * <p>The ID of the Network Access Scope.</p>
+   * <p>One or more filters.</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>local-gateway-id</code> - The ID of a local gateway.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>outpost-arn</code> - The Amazon Resource Name (ARN) of the Outpost.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>owner-id</code> - The ID of the Amazon Web Services account that owns the local gateway.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>state</code> - The state of the association.</p>
+   *             </li>
+   *          </ul>
    */
-  NetworkInsightsAccessScopeId?: string;
+  Filters?: Filter[];
 
   /**
    * @public
-   * <p>Filters the results based on the start time. The analysis must have started on or after this time.</p>
+   * <p>The maximum number of results to return with a single call.
+   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
    */
-  AnalysisStartTimeBegin?: Date;
+  MaxResults?: number;
 
   /**
    * @public
-   * <p>Filters the results based on the start time. The analysis must have started on or before this time.</p>
+   * <p>The token for the next page of results.</p>
    */
-  AnalysisStartTimeEnd?: Date;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>There are no supported filters.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  Filters?: Filter[];
+  DryRun?: boolean;
+}
 
+/**
+ * @public
+ * <p>Describes a local gateway.</p>
+ */
+export interface LocalGateway {
   /**
    * @public
-   * <p>The maximum number of results to return with a single call.
-   *    To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
+   * <p>The ID of the local gateway.</p>
    */
-  MaxResults?: number;
+  LocalGatewayId?: string;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The Amazon Resource Name (ARN) of the Outpost.</p>
    */
-  DryRun?: boolean;
+  OutpostArn?: string;
 
   /**
    * @public
-   * <p>The token for the next page of results.</p>
+   * <p>The ID of the Amazon Web Services account that owns the local gateway.</p>
    */
-  NextToken?: string;
-}
-
-/**
- * @public
- * @enum
- */
-export const FindingsFound = {
-  false: "false",
-  true: "true",
-  unknown: "unknown",
-} as const;
+  OwnerId?: string;
 
-/**
- * @public
- */
-export type FindingsFound = (typeof FindingsFound)[keyof typeof FindingsFound];
+  /**
+   * @public
+   * <p>The state of the local gateway.</p>
+   */
+  State?: string;
 
-/**
- * @public
- * @enum
- */
-export const AnalysisStatus = {
-  failed: "failed",
-  running: "running",
-  succeeded: "succeeded",
-} as const;
+  /**
+   * @public
+   * <p>The tags assigned to the local gateway.</p>
+   */
+  Tags?: Tag[];
+}
 
 /**
  * @public
  */
-export type AnalysisStatus = (typeof AnalysisStatus)[keyof typeof AnalysisStatus];
+export interface DescribeLocalGatewaysResult {
+  /**
+   * @public
+   * <p>Information about the local gateways.</p>
+   */
+  LocalGateways?: LocalGateway[];
 
-/**
- * @public
- * <p>Describes a Network Access Scope analysis.</p>
- */
-export interface NetworkInsightsAccessScopeAnalysis {
   /**
    * @public
-   * <p>The ID of the Network Access Scope analysis.</p>
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
    */
-  NetworkInsightsAccessScopeAnalysisId?: string;
+  NextToken?: string;
+}
 
+/**
+ * @public
+ */
+export interface DescribeLocalGatewayVirtualInterfaceGroupsRequest {
   /**
    * @public
-   * <p>The Amazon Resource Name (ARN) of the Network Access Scope analysis.</p>
+   * <p>The IDs of the virtual interface groups.</p>
    */
-  NetworkInsightsAccessScopeAnalysisArn?: string;
+  LocalGatewayVirtualInterfaceGroupIds?: string[];
 
   /**
    * @public
-   * <p>The ID of the Network Access Scope.</p>
+   * <p>One or more filters.</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>local-gateway-id</code> - The ID of a local gateway.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>local-gateway-virtual-interface-group-id</code> - The ID of the virtual interface group.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>local-gateway-virtual-interface-id</code> - The ID of the virtual interface.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>owner-id</code> - The ID of the Amazon Web Services account that owns the local gateway virtual interface group.</p>
+   *             </li>
+   *          </ul>
    */
-  NetworkInsightsAccessScopeId?: string;
+  Filters?: Filter[];
 
   /**
    * @public
-   * <p>The status.</p>
+   * <p>The maximum number of results to return with a single call.
+   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
    */
-  Status?: AnalysisStatus;
+  MaxResults?: number;
 
   /**
    * @public
-   * <p>The status message.</p>
+   * <p>The token for the next page of results.</p>
    */
-  StatusMessage?: string;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The warning message.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  WarningMessage?: string;
+  DryRun?: boolean;
+}
 
+/**
+ * @public
+ * <p>Describes a local gateway virtual interface group.</p>
+ */
+export interface LocalGatewayVirtualInterfaceGroup {
   /**
    * @public
-   * <p>The analysis start date.</p>
+   * <p>The ID of the virtual interface group.</p>
    */
-  StartDate?: Date;
+  LocalGatewayVirtualInterfaceGroupId?: string;
 
   /**
    * @public
-   * <p>The analysis end date.</p>
+   * <p>The IDs of the virtual interfaces.</p>
    */
-  EndDate?: Date;
+  LocalGatewayVirtualInterfaceIds?: string[];
 
   /**
    * @public
-   * <p>Indicates whether there are findings.</p>
+   * <p>The ID of the local gateway.</p>
    */
-  FindingsFound?: FindingsFound;
+  LocalGatewayId?: string;
 
   /**
    * @public
-   * <p>The number of network interfaces analyzed.</p>
+   * <p>The ID of the Amazon Web Services account that owns the local gateway virtual interface group.</p>
    */
-  AnalyzedEniCount?: number;
+  OwnerId?: string;
 
   /**
    * @public
-   * <p>The tags.</p>
+   * <p>The tags assigned to the virtual interface group.</p>
    */
   Tags?: Tag[];
 }
@@ -6255,12 +5990,12 @@ export interface NetworkInsightsAccessScopeAnalysis {
 /**
  * @public
  */
-export interface DescribeNetworkInsightsAccessScopeAnalysesResult {
+export interface DescribeLocalGatewayVirtualInterfaceGroupsResult {
   /**
    * @public
-   * <p>The Network Access Scope analyses.</p>
+   * <p>The virtual interface groups.</p>
    */
-  NetworkInsightsAccessScopeAnalyses?: NetworkInsightsAccessScopeAnalysis[];
+  LocalGatewayVirtualInterfaceGroups?: LocalGatewayVirtualInterfaceGroup[];
 
   /**
    * @public
@@ -6272,237 +6007,319 @@ export interface DescribeNetworkInsightsAccessScopeAnalysesResult {
 /**
  * @public
  */
-export interface DescribeNetworkInsightsAccessScopesRequest {
+export interface DescribeLocalGatewayVirtualInterfacesRequest {
   /**
    * @public
-   * <p>The IDs of the Network Access Scopes.</p>
+   * <p>The IDs of the virtual interfaces.</p>
    */
-  NetworkInsightsAccessScopeIds?: string[];
+  LocalGatewayVirtualInterfaceIds?: string[];
 
   /**
    * @public
-   * <p>There are no supported filters.</p>
+   * <p>One or more filters.</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>local-address</code> - The local address.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>local-bgp-asn</code> - The Border Gateway Protocol (BGP) Autonomous System Number (ASN)
+   *                of the local gateway.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>local-gateway-id</code> - The ID of the local gateway.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>local-gateway-virtual-interface-id</code> - The ID of the virtual interface.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>owner-id</code> - The ID of the Amazon Web Services account that owns the local gateway virtual interface.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>peer-address</code> - The peer address.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>peer-bgp-asn</code> - The peer BGP ASN.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>vlan</code> - The ID of the VLAN.</p>
+   *             </li>
+   *          </ul>
    */
   Filters?: Filter[];
 
   /**
    * @public
    * <p>The maximum number of results to return with a single call.
-   *    To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
+   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
    */
   MaxResults?: number;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The token for the next page of results.</p>
    */
-  DryRun?: boolean;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The token for the next page of results.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  NextToken?: string;
+  DryRun?: boolean;
 }
 
 /**
  * @public
+ * <p>Describes a local gateway virtual interface.</p>
  */
-export interface DescribeNetworkInsightsAccessScopesResult {
-  /**
-   * @public
-   * <p>The Network Access Scopes.</p>
-   */
-  NetworkInsightsAccessScopes?: NetworkInsightsAccessScope[];
-
+export interface LocalGatewayVirtualInterface {
   /**
    * @public
-   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
+   * <p>The ID of the virtual interface.</p>
    */
-  NextToken?: string;
-}
+  LocalGatewayVirtualInterfaceId?: string;
 
-/**
- * @public
- */
-export interface DescribeNetworkInsightsAnalysesRequest {
   /**
    * @public
-   * <p>The ID of the network insights analyses. You must specify either analysis IDs or a path ID.</p>
+   * <p>The ID of the local gateway.</p>
    */
-  NetworkInsightsAnalysisIds?: string[];
+  LocalGatewayId?: string;
 
   /**
    * @public
-   * <p>The ID of the path. You must specify either a path ID or analysis IDs.</p>
+   * <p>The ID of the VLAN.</p>
    */
-  NetworkInsightsPathId?: string;
+  Vlan?: number;
 
   /**
    * @public
-   * <p>The time when the network insights analyses started.</p>
+   * <p>The local address.</p>
    */
-  AnalysisStartTime?: Date;
+  LocalAddress?: string;
 
   /**
    * @public
-   * <p>The time when the network insights analyses ended.</p>
+   * <p>The peer address.</p>
    */
-  AnalysisEndTime?: Date;
+  PeerAddress?: string;
 
   /**
    * @public
-   * <p>The filters. The following are the possible values:</p>
-   *          <ul>
-   *             <li>
-   *                <p>path-found - A Boolean value that indicates whether a feasible path is found.</p>
-   *             </li>
-   *             <li>
-   *                <p>status - The status of the analysis (running | succeeded | failed).</p>
-   *             </li>
-   *          </ul>
+   * <p>The Border Gateway Protocol (BGP) Autonomous System Number (ASN) of the local gateway.</p>
    */
-  Filters?: Filter[];
+  LocalBgpAsn?: number;
 
   /**
    * @public
-   * <p>The maximum number of results to return with a single call.
-   *    To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
+   * <p>The peer BGP ASN.</p>
    */
-  MaxResults?: number;
+  PeerBgpAsn?: number;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The ID of the Amazon Web Services account that owns the local gateway virtual interface.</p>
    */
-  DryRun?: boolean;
+  OwnerId?: string;
 
   /**
    * @public
-   * <p>The token for the next page of results.</p>
+   * <p>The tags assigned to the virtual interface.</p>
    */
-  NextToken?: string;
+  Tags?: Tag[];
 }
 
 /**
  * @public
- * <p>Describes a network insights analysis.</p>
  */
-export interface NetworkInsightsAnalysis {
+export interface DescribeLocalGatewayVirtualInterfacesResult {
   /**
    * @public
-   * <p>The ID of the network insights analysis.</p>
+   * <p>Information about the virtual interfaces.</p>
    */
-  NetworkInsightsAnalysisId?: string;
+  LocalGatewayVirtualInterfaces?: LocalGatewayVirtualInterface[];
 
   /**
    * @public
-   * <p>The Amazon Resource Name (ARN) of the network insights analysis.</p>
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
    */
-  NetworkInsightsAnalysisArn?: string;
+  NextToken?: string;
+}
 
+/**
+ * @public
+ */
+export interface DescribeLockedSnapshotsRequest {
   /**
    * @public
-   * <p>The ID of the path.</p>
+   * <p>The filters.</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>lock-state</code> - The state of the snapshot lock (<code>compliance-cooloff</code> |
+   *           <code>governance</code> | <code>compliance</code> | <code>expired</code>).</p>
+   *             </li>
+   *          </ul>
    */
-  NetworkInsightsPathId?: string;
+  Filters?: Filter[];
 
   /**
    * @public
-   * <p>The member accounts that contain resources that the path can traverse.</p>
+   * <p>The maximum number of items to return for this request.
+   * 	To get the next page of items, make another request with the token returned in the output.
+   * 	For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
    */
-  AdditionalAccounts?: string[];
+  MaxResults?: number;
 
   /**
    * @public
-   * <p>The Amazon Resource Names (ARN) of the resources that the path must traverse.</p>
+   * <p>The token returned from a previous paginated request.
+   *   Pagination continues from the end of the items returned by the previous request.</p>
    */
-  FilterInArns?: string[];
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The time the analysis started.</p>
+   * <p>The IDs of the snapshots for which to view the lock status.</p>
    */
-  StartDate?: Date;
+  SnapshotIds?: string[];
 
   /**
    * @public
-   * <p>The status of the network insights analysis.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  Status?: AnalysisStatus;
+  DryRun?: boolean;
+}
+
+/**
+ * @public
+ * @enum
+ */
+export const LockState = {
+  compliance: "compliance",
+  compliance_cooloff: "compliance-cooloff",
+  expired: "expired",
+  governance: "governance",
+} as const;
+
+/**
+ * @public
+ */
+export type LockState = (typeof LockState)[keyof typeof LockState];
 
+/**
+ * @public
+ * <p>Information about a locked snapshot.</p>
+ */
+export interface LockedSnapshotsInfo {
   /**
    * @public
-   * <p>The status message, if the status is <code>failed</code>.</p>
+   * <p>The account ID of the Amazon Web Services account that owns the snapshot.</p>
    */
-  StatusMessage?: string;
+  OwnerId?: string;
 
   /**
    * @public
-   * <p>The warning message.</p>
+   * <p>The ID of the snapshot.</p>
    */
-  WarningMessage?: string;
+  SnapshotId?: string;
 
   /**
    * @public
-   * <p>Indicates whether the destination is reachable from the source.</p>
+   * <p>The state of the snapshot lock. Valid states include:</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>compliance-cooloff</code> - The snapshot has been locked in
+   *           compliance mode but it is still within the cooling-off period. The snapshot can't be
+   *           deleted, but it can be unlocked and the lock settings can be modified by users with
+   *           appropriate permissions.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>governance</code> - The snapshot is locked in governance mode. The
+   *           snapshot can't be deleted, but it can be unlocked and the lock settings can be
+   *           modified by users with appropriate permissions.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>compliance</code> - The snapshot is locked in compliance mode and the
+   *           cooling-off period has expired. The snapshot can't be unlocked or deleted. The lock
+   *           duration can only be increased by users with appropriate permissions.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>expired</code> - The snapshot was locked in compliance or governance
+   *           mode but the lock duration has expired. The snapshot is not locked and can be deleted.</p>
+   *             </li>
+   *          </ul>
    */
-  NetworkPathFound?: boolean;
+  LockState?: LockState;
 
   /**
    * @public
-   * <p>The components in the path from source to destination.</p>
+   * <p>The period of time for which the snapshot is locked, in days.</p>
    */
-  ForwardPathComponents?: PathComponent[];
+  LockDuration?: number;
 
   /**
    * @public
-   * <p>The components in the path from destination to source.</p>
+   * <p>The compliance mode cooling-off period, in hours.</p>
    */
-  ReturnPathComponents?: PathComponent[];
+  CoolOffPeriod?: number;
 
   /**
    * @public
-   * <p>The explanations. For more information, see <a href="https://docs.aws.amazon.com/vpc/latest/reachability/explanation-codes.html">Reachability Analyzer explanation codes</a>.</p>
+   * <p>The date and time at which the compliance mode cooling-off period expires, in the UTC time zone
+   *       (<code>YYYY-MM-DDThh:mm:ss.sssZ</code>).</p>
    */
-  Explanations?: Explanation[];
+  CoolOffPeriodExpiresOn?: Date;
 
   /**
    * @public
-   * <p>Potential intermediate components.</p>
+   * <p>The date and time at which the snapshot was locked, in the UTC time zone (<code>YYYY-MM-DDThh:mm:ss.sssZ</code>).</p>
    */
-  AlternatePathHints?: AlternatePathHint[];
+  LockCreatedOn?: Date;
 
   /**
    * @public
-   * <p>Potential intermediate accounts.</p>
+   * <p>The date and time at which the lock duration started, in the UTC time zone (<code>YYYY-MM-DDThh:mm:ss.sssZ</code>).</p>
+   *          <p>If you lock a snapshot that is in the <code>pending</code> state, the lock duration
+   *       starts only once the snapshot enters the <code>completed</code> state.</p>
    */
-  SuggestedAccounts?: string[];
+  LockDurationStartTime?: Date;
 
   /**
    * @public
-   * <p>The tags.</p>
+   * <p>The date and time at which the lock will expire, in the UTC time zone (<code>YYYY-MM-DDThh:mm:ss.sssZ</code>).</p>
    */
-  Tags?: Tag[];
+  LockExpiresOn?: Date;
 }
 
 /**
  * @public
  */
-export interface DescribeNetworkInsightsAnalysesResult {
+export interface DescribeLockedSnapshotsResult {
   /**
    * @public
-   * <p>Information about the network insights analyses.</p>
+   * <p>Information about the snapshots.</p>
    */
-  NetworkInsightsAnalyses?: NetworkInsightsAnalysis[];
+  Snapshots?: LockedSnapshotsInfo[];
 
   /**
    * @public
-   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
+   * <p>The token to include in another request to get the next page of items.
+   *   This value is <code>null</code> when there are no more items to return.</p>
    */
   NextToken?: string;
 }
@@ -6510,49 +6327,30 @@ export interface DescribeNetworkInsightsAnalysesResult {
 /**
  * @public
  */
-export interface DescribeNetworkInsightsPathsRequest {
+export interface DescribeManagedPrefixListsRequest {
   /**
    * @public
-   * <p>The IDs of the paths.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  NetworkInsightsPathIds?: string[];
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The filters. The following are the possible values:</p>
+   * <p>One or more filters.</p>
    *          <ul>
    *             <li>
-   *                <p>destination - The ID of the resource.</p>
-   *             </li>
-   *             <li>
-   *                <p>filter-at-source.source-address - The source IPv4 address at the source.</p>
-   *             </li>
-   *             <li>
-   *                <p>filter-at-source.source-port-range - The source port range at the source.</p>
-   *             </li>
-   *             <li>
-   *                <p>filter-at-source.destination-address - The destination IPv4 address at the source.</p>
-   *             </li>
-   *             <li>
-   *                <p>filter-at-source.destination-port-range - The destination port range at the source.</p>
-   *             </li>
-   *             <li>
-   *                <p>filter-at-destination.source-address - The source IPv4 address at the destination.</p>
-   *             </li>
-   *             <li>
-   *                <p>filter-at-destination.source-port-range - The source port range at the destination.</p>
-   *             </li>
-   *             <li>
-   *                <p>filter-at-destination.destination-address - The destination IPv4 address at the destination.</p>
-   *             </li>
-   *             <li>
-   *                <p>filter-at-destination.destination-port-range - The destination port range at the destination.</p>
+   *                <p>
+   *                   <code>owner-id</code> - The ID of the prefix list owner.</p>
    *             </li>
    *             <li>
-   *                <p>protocol - The protocol.</p>
+   *                <p>
+   *                   <code>prefix-list-id</code> - The ID of the prefix list.</p>
    *             </li>
    *             <li>
-   *                <p>source - The ID of the resource.</p>
+   *                <p>
+   *                   <code>prefix-list-name</code> - The name of the prefix list.</p>
    *             </li>
    *          </ul>
    */
@@ -6561,356 +6359,297 @@ export interface DescribeNetworkInsightsPathsRequest {
   /**
    * @public
    * <p>The maximum number of results to return with a single call.
-   *    To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
+   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
    */
   MaxResults?: number;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The token for the next page of results.</p>
    */
-  DryRun?: boolean;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The token for the next page of results.</p>
+   * <p>One or more prefix list IDs.</p>
    */
-  NextToken?: string;
+  PrefixListIds?: string[];
 }
 
 /**
  * @public
  */
-export interface DescribeNetworkInsightsPathsResult {
+export interface DescribeManagedPrefixListsResult {
   /**
    * @public
-   * <p>Information about the paths.</p>
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
    */
-  NetworkInsightsPaths?: NetworkInsightsPath[];
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
+   * <p>Information about the prefix lists.</p>
    */
-  NextToken?: string;
+  PrefixLists?: ManagedPrefixList[];
 }
 
 /**
  * @public
- * @enum
- */
-export const NetworkInterfaceAttribute = {
-  attachment: "attachment",
-  description: "description",
-  groupSet: "groupSet",
-  sourceDestCheck: "sourceDestCheck",
-} as const;
-
-/**
- * @public
- */
-export type NetworkInterfaceAttribute = (typeof NetworkInterfaceAttribute)[keyof typeof NetworkInterfaceAttribute];
-
-/**
- * @public
- * <p>Contains the parameters for DescribeNetworkInterfaceAttribute.</p>
  */
-export interface DescribeNetworkInterfaceAttributeRequest {
+export interface DescribeMovingAddressesRequest {
   /**
    * @public
-   * <p>The attribute of the network interface. This parameter is required.</p>
+   * <p>One or more filters.</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>moving-status</code> - The status of the Elastic IP address
+   *           (<code>MovingToVpc</code> | <code>RestoringToClassic</code>).</p>
+   *             </li>
+   *          </ul>
    */
-  Attribute?: NetworkInterfaceAttribute;
+  Filters?: Filter[];
 
   /**
    * @public
    * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *        and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *        Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
 
   /**
    * @public
-   * <p>The ID of the network interface.</p>
+   * <p>The maximum number of results to return for the request in a single page. The remaining
+   *       results of the initial request can be seen by sending another request with the returned
+   *       <code>NextToken</code> value. This value can be between 5 and 1000; if
+   *       <code>MaxResults</code> is given a value outside of this range, an error is returned.</p>
+   *          <p>Default: If no value is provided, the default is 1000.</p>
    */
-  NetworkInterfaceId: string | undefined;
+  MaxResults?: number;
+
+  /**
+   * @public
+   * <p>The token for the next page of results.</p>
+   */
+  NextToken?: string;
+
+  /**
+   * @public
+   * <p>One or more Elastic IP addresses.</p>
+   */
+  PublicIps?: string[];
 }
 
 /**
  * @public
- * <p>Contains the output of DescribeNetworkInterfaceAttribute.</p>
+ * @enum
  */
-export interface DescribeNetworkInterfaceAttributeResult {
-  /**
-   * @public
-   * <p>The attachment (if any) of the network interface.</p>
-   */
-  Attachment?: NetworkInterfaceAttachment;
+export const MoveStatus = {
+  movingToVpc: "movingToVpc",
+  restoringToClassic: "restoringToClassic",
+} as const;
+
+/**
+ * @public
+ */
+export type MoveStatus = (typeof MoveStatus)[keyof typeof MoveStatus];
 
+/**
+ * @public
+ * <note>
+ *             <p>This action is deprecated.</p>
+ *          </note>
+ *          <p>Describes the status of a moving Elastic IP address.</p>
+ */
+export interface MovingAddressStatus {
   /**
    * @public
-   * <p>The description of the network interface.</p>
+   * <p>The status of the Elastic IP address that's being moved or restored.</p>
    */
-  Description?: AttributeValue;
+  MoveStatus?: MoveStatus;
 
   /**
    * @public
-   * <p>The security groups associated with the network interface.</p>
+   * <p>The Elastic IP address.</p>
    */
-  Groups?: GroupIdentifier[];
+  PublicIp?: string;
+}
 
+/**
+ * @public
+ */
+export interface DescribeMovingAddressesResult {
   /**
    * @public
-   * <p>The ID of the network interface.</p>
+   * <p>The status for each Elastic IP address.</p>
    */
-  NetworkInterfaceId?: string;
+  MovingAddressStatuses?: MovingAddressStatus[];
 
   /**
    * @public
-   * <p>Indicates whether source/destination checking is enabled.</p>
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
    */
-  SourceDestCheck?: AttributeBooleanValue;
+  NextToken?: string;
 }
 
 /**
  * @public
- * <p>Contains the parameters for DescribeNetworkInterfacePermissions.</p>
  */
-export interface DescribeNetworkInterfacePermissionsRequest {
+export interface DescribeNatGatewaysRequest {
   /**
    * @public
-   * <p>The network interface permission IDs.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  NetworkInterfacePermissionIds?: string[];
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>One or more filters.</p>
+   * <p>The filters.</p>
    *          <ul>
    *             <li>
    *                <p>
-   *                   <code>network-interface-permission.network-interface-permission-id</code> - The ID of the
-   * 				permission.</p>
+   *                   <code>nat-gateway-id</code> - The ID of the NAT gateway.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>network-interface-permission.network-interface-id</code> - The ID of
-   * 					the network interface.</p>
+   *                   <code>state</code> - The state of the NAT gateway (<code>pending</code> |
+   *               <code>failed</code> | <code>available</code> | <code>deleting</code> | <code>deleted</code>).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>network-interface-permission.aws-account-id</code> - The Amazon Web Services account ID.</p>
+   *                   <code>subnet-id</code> - The ID of the subnet in which the NAT gateway resides.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>network-interface-permission.aws-service</code> - The Amazon Web Service.</p>
+   *                   <code>tag</code>:<key> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value.
+   *     For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>network-interface-permission.permission</code> - The type of
-   * 					permission (<code>INSTANCE-ATTACH</code> |
-   * 					<code>EIP-ASSOCIATE</code>).</p>
+   *                   <code>tag-key</code> - The key of a tag assigned to the resource. Use this filter to find all resources assigned a tag with a specific key, regardless of the tag value.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>vpc-id</code> - The ID of the VPC in which the NAT gateway resides.</p>
    *             </li>
    *          </ul>
    */
-  Filters?: Filter[];
+  Filter?: Filter[];
+
+  /**
+   * @public
+   * <p>The maximum number of items to return for this request.
+   * 	To get the next page of items, make another request with the token returned in the output.
+   * 	For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
+   */
+  MaxResults?: number;
 
   /**
    * @public
-   * <p>The token returned from a previous paginated request.
-   * 		    Pagination continues from the end of the items returned by the previous request.</p>
+   * <p>The IDs of the NAT gateways.</p>
    */
-  NextToken?: string;
+  NatGatewayIds?: string[];
 
   /**
    * @public
-   * <p>The maximum number of items to return for this request. To get the next page of items,
-   * 			make another request with the token returned in the output. If this parameter is not specified,
-   * 			up to 50 results are returned by default. For more information, see
-   * 			<a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
+   * <p>The token returned from a previous paginated request. Pagination continues from the end of the items returned by the previous request.</p>
    */
-  MaxResults?: number;
+  NextToken?: string;
 }
 
 /**
  * @public
- * <p>Contains the output for DescribeNetworkInterfacePermissions.</p>
  */
-export interface DescribeNetworkInterfacePermissionsResult {
+export interface DescribeNatGatewaysResult {
   /**
    * @public
-   * <p>The network interface permissions.</p>
+   * <p>Information about the NAT gateways.</p>
    */
-  NetworkInterfacePermissions?: NetworkInterfacePermission[];
+  NatGateways?: NatGateway[];
 
   /**
    * @public
-   * <p>The token to include in another request to get the next page of items.
-   * 		  This value is <code>null</code> when there are no more items to return.</p>
+   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there are no more items to return.</p>
    */
   NextToken?: string;
 }
 
 /**
  * @public
- * <p>Contains the parameters for DescribeNetworkInterfaces.</p>
  */
-export interface DescribeNetworkInterfacesRequest {
+export interface DescribeNetworkAclsRequest {
   /**
    * @public
-   * <p>One or more filters.</p>
+   * <p>The filters.</p>
    *          <ul>
    *             <li>
    *                <p>
-   *                   <code>association.allocation-id</code> - The allocation ID returned when you
-   * 		                allocated the Elastic IP address (IPv4) for your network interface.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>association.association-id</code> - The association ID returned when the
-   * 		                network interface was associated with an IPv4 address.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>addresses.association.owner-id</code> - The owner ID of the addresses associated with the network interface.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>addresses.association.public-ip</code> - The association ID returned when
-   * 		                the network interface was associated with the Elastic IP address
-   * 		                (IPv4).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>addresses.primary</code> - Whether the private IPv4 address is the primary
-   *                     IP address associated with the network interface. </p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>addresses.private-ip-address</code> - The private IPv4 addresses
-   * 		                associated with the network interface.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>association.ip-owner-id</code> - The owner of the Elastic IP address
-   *                     (IPv4) associated with the network interface.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>association.public-ip</code> - The address of the Elastic IP address
-   *                     (IPv4) bound to the network interface.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>association.public-dns-name</code> - The public DNS name for the network
-   *                     interface (IPv4).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>attachment.attach-time</code> - The time that the network interface was attached to an instance.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>attachment.attachment-id</code> - The ID of the interface attachment.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>attachment.delete-on-termination</code> - Indicates whether the attachment is deleted when an instance is terminated.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>attachment.device-index</code> - The device index to which the network interface is attached.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>attachment.instance-id</code> - The ID of the instance to which the network interface is attached.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>attachment.instance-owner-id</code> - The owner ID of the instance to which the network interface is attached.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>attachment.status</code> - The status of the attachment (<code>attaching</code> | <code>attached</code> | <code>detaching</code> | <code>detached</code>).</p>
+   *                   <code>association.association-id</code> - The ID of an association ID for the ACL.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>availability-zone</code> - The Availability Zone of the network interface.</p>
+   *                   <code>association.network-acl-id</code> - The ID of the network ACL involved in the association.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>description</code> - The description of the network interface.</p>
+   *                   <code>association.subnet-id</code> - The ID of the subnet involved in the association.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>group-id</code> - The ID of a security group associated with the network interface.</p>
+   *                   <code>default</code> - Indicates whether the ACL is the default network ACL for the VPC.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>ipv6-addresses.ipv6-address</code> - An IPv6 address associated with
-   *                     the network interface.</p>
+   *                   <code>entry.cidr</code> - The IPv4 CIDR range specified in the entry.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>interface-type</code> - The type of network interface (<code>api_gateway_managed</code> |
-   * 		               <code>aws_codestar_connections_managed</code> | <code>branch</code> |
-   * 		               <code>ec2_instance_connect_endpoint</code> | <code>efa</code> | <code>efs</code> |
-   * 		               <code>gateway_load_balancer</code> | <code>gateway_load_balancer_endpoint</code> |
-   * 		               <code>global_accelerator_managed</code> |
-   * 		               <code>interface</code> | <code>iot_rules_managed</code> |
-   * 		               <code>lambda</code> | <code>load_balancer</code> |
-   * 		               <code>nat_gateway</code> | <code>network_load_balancer</code> |
-   * 		               <code>quicksight</code> |
-   * 		               <code>transit_gateway</code> | <code>trunk</code> |
-   * 		               <code>vpc_endpoint</code>).</p>
+   *                   <code>entry.icmp.code</code> - The ICMP code specified in the entry, if any.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>mac-address</code> - The MAC address of the network interface.</p>
+   *                   <code>entry.icmp.type</code> - The ICMP type specified in the entry, if any.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>network-interface-id</code> - The ID of the network interface.</p>
+   *                   <code>entry.ipv6-cidr</code> - The IPv6 CIDR range specified in the entry.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>owner-id</code> - The Amazon Web Services account ID of the network interface owner.</p>
+   *                   <code>entry.port-range.from</code> - The start of the port range specified in the entry. </p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>private-dns-name</code> - The private DNS name of the network interface (IPv4).</p>
+   *                   <code>entry.port-range.to</code> - The end of the port range specified in the entry. </p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>private-ip-address</code> - The private IPv4 address or addresses of the
-   *                     network interface.</p>
+   *                   <code>entry.protocol</code> - The protocol specified in the entry (<code>tcp</code> | <code>udp</code> | <code>icmp</code> or a protocol number).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>requester-id</code> - The alias or Amazon Web Services account ID of the principal or service that created the network interface.</p>
+   *                   <code>entry.rule-action</code> - Allows or denies the matching traffic (<code>allow</code> | <code>deny</code>).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>requester-managed</code> - Indicates whether the network interface is being managed by an Amazon Web Service
-   * 		               (for example, Amazon Web Services Management Console, Auto Scaling, and so on).</p>
+   *                   <code>entry.egress</code> - A Boolean that indicates the type of rule. Specify <code>true</code>
+   * 		                for egress rules, or <code>false</code> for ingress rules.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>source-dest-check</code> - Indicates whether the network interface performs source/destination checking.
-   * 		            A value of <code>true</code> means checking is enabled, and <code>false</code> means checking is disabled.
-   * 		            The value must be <code>false</code> for the network interface to perform network address translation (NAT) in your VPC. </p>
+   *                   <code>entry.rule-number</code> - The number of an entry (in other words, rule) in
+   *                     the set of ACL entries.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>status</code> - The status of the network interface. If the network interface is not attached to an instance, the status is <code>available</code>;
-   * 		            if a network interface is attached to an instance the status is <code>in-use</code>.</p>
+   *                   <code>network-acl-id</code> - The ID of the network ACL.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>subnet-id</code> - The ID of the subnet for the network interface.</p>
+   *                   <code>owner-id</code> - The ID of the Amazon Web Services account that owns the network ACL.</p>
    *             </li>
    *             <li>
    *                <p>
@@ -6923,7 +6662,7 @@ export interface DescribeNetworkInterfacesRequest {
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>vpc-id</code> - The ID of the VPC for the network interface.</p>
+   *                   <code>vpc-id</code> - The ID of the VPC for the network ACL.</p>
    *             </li>
    *          </ul>
    */
@@ -6932,299 +6671,221 @@ export interface DescribeNetworkInterfacesRequest {
   /**
    * @public
    * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *        and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *        Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
 
   /**
    * @public
-   * <p>The network interface IDs.</p>
-   *          <p>Default: Describes all your network interfaces.</p>
-   */
-  NetworkInterfaceIds?: string[];
-
-  /**
-   * @public
-   * <p>The token returned from a previous paginated request.
-   * 		    Pagination continues from the end of the items returned by the previous request.</p>
-   */
-  NextToken?: string;
-
-  /**
-   * @public
-   * <p>The maximum number of items to return for this request. To get the next page of items,
-   * 		    make another request with the token returned in the output. You cannot specify this
-   * 		    parameter and the network interface IDs parameter in the same request. For more information,
-   * 		    see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
-   */
-  MaxResults?: number;
-}
-
-/**
- * @public
- */
-export interface DescribeNetworkInterfacesResult {
-  /**
-   * @public
-   * <p>Information about one or more network interfaces.</p>
-   */
-  NetworkInterfaces?: NetworkInterface[];
-
-  /**
-   * @public
-   * <p>The token to include in another request to get the next page of items.
-   * 		    This value is <code>null</code> when there are no more items to return.</p>
-   */
-  NextToken?: string;
-}
-
-/**
- * @public
- */
-export interface DescribePlacementGroupsRequest {
-  /**
-   * @public
-   * <p>The filters.</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>group-name</code> - The name of the placement group.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>group-arn</code> - The Amazon Resource Name (ARN) of the placement
-   *                     group.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>spread-level</code> - The spread level for the placement group
-   *                         (<code>host</code> | <code>rack</code>). </p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>state</code> - The state of the placement group (<code>pending</code> |
-   *                         <code>available</code> | <code>deleting</code> |
-   *                     <code>deleted</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>strategy</code> - The strategy of the placement group
-   *                         (<code>cluster</code> | <code>spread</code> |
-   *                     <code>partition</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>tag:<key></code> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value.
-   *     For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>tag-key</code> - The key of a tag assigned to the resource. Use this filter to find all resources that have a tag with a specific key, regardless of the tag value.</p>
-   *             </li>
-   *          </ul>
-   */
-  Filters?: Filter[];
-
-  /**
-   * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The IDs of the network ACLs.</p>
+   *          <p>Default: Describes all your network ACLs.</p>
    */
-  DryRun?: boolean;
+  NetworkAclIds?: string[];
 
   /**
-   * @public
-   * <p>The names of the placement groups.</p>
-   *          <p>Default: Describes all your placement groups, or only those otherwise
-   *             specified.</p>
+   * @public
+   * <p>The token returned from a previous paginated request. Pagination continues from the end of the items returned by the previous request.</p>
    */
-  GroupNames?: string[];
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The IDs of the placement groups.</p>
+   * <p>The maximum number of items to return for this request.
+   * 	To get the next page of items, make another request with the token returned in the output.
+   * 	For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
    */
-  GroupIds?: string[];
+  MaxResults?: number;
 }
 
 /**
  * @public
  */
-export interface DescribePlacementGroupsResult {
+export interface DescribeNetworkAclsResult {
   /**
    * @public
-   * <p>Information about the placement groups.</p>
+   * <p>Information about one or more network ACLs.</p>
    */
-  PlacementGroups?: PlacementGroup[];
+  NetworkAcls?: NetworkAcl[];
+
+  /**
+   * @public
+   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there are no more items to return.</p>
+   */
+  NextToken?: string;
 }
 
 /**
  * @public
  */
-export interface DescribePrefixListsRequest {
+export interface DescribeNetworkInsightsAccessScopeAnalysesRequest {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The IDs of the Network Access Scope analyses.</p>
    */
-  DryRun?: boolean;
+  NetworkInsightsAccessScopeAnalysisIds?: string[];
 
   /**
    * @public
-   * <p>One or more filters.</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>prefix-list-id</code>: The ID of a prefix list.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>prefix-list-name</code>: The name of a prefix list.</p>
-   *             </li>
-   *          </ul>
+   * <p>The ID of the Network Access Scope.</p>
+   */
+  NetworkInsightsAccessScopeId?: string;
+
+  /**
+   * @public
+   * <p>Filters the results based on the start time. The analysis must have started on or after this time.</p>
+   */
+  AnalysisStartTimeBegin?: Date;
+
+  /**
+   * @public
+   * <p>Filters the results based on the start time. The analysis must have started on or before this time.</p>
+   */
+  AnalysisStartTimeEnd?: Date;
+
+  /**
+   * @public
+   * <p>There are no supported filters.</p>
    */
   Filters?: Filter[];
 
   /**
    * @public
    * <p>The maximum number of results to return with a single call.
-   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
+   *    To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
    */
   MaxResults?: number;
 
   /**
    * @public
-   * <p>The token for the next page of results.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  NextToken?: string;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>One or more prefix list IDs.</p>
+   * <p>The token for the next page of results.</p>
    */
-  PrefixListIds?: string[];
+  NextToken?: string;
 }
 
 /**
  * @public
- * <p>Describes prefixes for Amazon Web Services services.</p>
+ * @enum
  */
-export interface PrefixList {
+export const FindingsFound = {
+  false: "false",
+  true: "true",
+  unknown: "unknown",
+} as const;
+
+/**
+ * @public
+ */
+export type FindingsFound = (typeof FindingsFound)[keyof typeof FindingsFound];
+
+/**
+ * @public
+ * @enum
+ */
+export const AnalysisStatus = {
+  failed: "failed",
+  running: "running",
+  succeeded: "succeeded",
+} as const;
+
+/**
+ * @public
+ */
+export type AnalysisStatus = (typeof AnalysisStatus)[keyof typeof AnalysisStatus];
+
+/**
+ * @public
+ * <p>Describes a Network Access Scope analysis.</p>
+ */
+export interface NetworkInsightsAccessScopeAnalysis {
   /**
    * @public
-   * <p>The IP address range of the Amazon Web Service.</p>
+   * <p>The ID of the Network Access Scope analysis.</p>
    */
-  Cidrs?: string[];
+  NetworkInsightsAccessScopeAnalysisId?: string;
 
   /**
    * @public
-   * <p>The ID of the prefix.</p>
+   * <p>The Amazon Resource Name (ARN) of the Network Access Scope analysis.</p>
    */
-  PrefixListId?: string;
+  NetworkInsightsAccessScopeAnalysisArn?: string;
 
   /**
    * @public
-   * <p>The name of the prefix.</p>
+   * <p>The ID of the Network Access Scope.</p>
    */
-  PrefixListName?: string;
-}
+  NetworkInsightsAccessScopeId?: string;
 
-/**
- * @public
- */
-export interface DescribePrefixListsResult {
   /**
    * @public
-   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
+   * <p>The status.</p>
    */
-  NextToken?: string;
+  Status?: AnalysisStatus;
 
   /**
    * @public
-   * <p>All available prefix lists.</p>
+   * <p>The status message.</p>
    */
-  PrefixLists?: PrefixList[];
-}
+  StatusMessage?: string;
 
-/**
- * @public
- */
-export interface DescribePrincipalIdFormatRequest {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The warning message.</p>
    */
-  DryRun?: boolean;
+  WarningMessage?: string;
 
   /**
    * @public
-   * <p>The type of resource: <code>bundle</code> |
-   *             <code>conversion-task</code> | <code>customer-gateway</code> | <code>dhcp-options</code> |
-   *             <code>elastic-ip-allocation</code> | <code>elastic-ip-association</code> |
-   *             <code>export-task</code> | <code>flow-log</code> | <code>image</code> |
-   *             <code>import-task</code> | <code>instance</code> | <code>internet-gateway</code> |
-   *             <code>network-acl</code> | <code>network-acl-association</code> |
-   *             <code>network-interface</code> | <code>network-interface-attachment</code> |
-   *             <code>prefix-list</code> | <code>reservation</code> | <code>route-table</code> |
-   *             <code>route-table-association</code> | <code>security-group</code> |
-   *             <code>snapshot</code> | <code>subnet</code> |
-   *             <code>subnet-cidr-block-association</code> | <code>volume</code> | <code>vpc</code>
-   *             | <code>vpc-cidr-block-association</code> | <code>vpc-endpoint</code> |
-   *             <code>vpc-peering-connection</code> | <code>vpn-connection</code> | <code>vpn-gateway</code>
-   *          </p>
+   * <p>The analysis start date.</p>
    */
-  Resources?: string[];
+  StartDate?: Date;
 
   /**
    * @public
-   * <p>The maximum number of results to return in a single call. To retrieve the remaining
-   *             results, make another call with the returned NextToken value. </p>
+   * <p>The analysis end date.</p>
    */
-  MaxResults?: number;
+  EndDate?: Date;
 
   /**
    * @public
-   * <p>The token to request the next page of results.</p>
+   * <p>Indicates whether there are findings.</p>
    */
-  NextToken?: string;
-}
+  FindingsFound?: FindingsFound;
 
-/**
- * @public
- * <p>PrincipalIdFormat description</p>
- */
-export interface PrincipalIdFormat {
   /**
    * @public
-   * <p>PrincipalIdFormatARN description</p>
+   * <p>The number of network interfaces analyzed.</p>
    */
-  Arn?: string;
+  AnalyzedEniCount?: number;
 
   /**
    * @public
-   * <p>PrincipalIdFormatStatuses description</p>
+   * <p>The tags.</p>
    */
-  Statuses?: IdFormat[];
+  Tags?: Tag[];
 }
 
 /**
  * @public
  */
-export interface DescribePrincipalIdFormatResult {
+export interface DescribeNetworkInsightsAccessScopeAnalysesResult {
   /**
    * @public
-   * <p>Information about the ID format settings for the ARN.</p>
+   * <p>The Network Access Scope analyses.</p>
    */
-  Principals?: PrincipalIdFormat[];
+  NetworkInsightsAccessScopeAnalyses?: NetworkInsightsAccessScopeAnalysis[];
 
   /**
    * @public
-   * <p>The token to use to retrieve the next page of results. This value is null when there are no more results to return.</p>
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
    */
   NextToken?: string;
 }
@@ -7232,386 +6893,287 @@ export interface DescribePrincipalIdFormatResult {
 /**
  * @public
  */
-export interface DescribePublicIpv4PoolsRequest {
+export interface DescribeNetworkInsightsAccessScopesRequest {
   /**
    * @public
-   * <p>The IDs of the address pools.</p>
+   * <p>The IDs of the Network Access Scopes.</p>
    */
-  PoolIds?: string[];
+  NetworkInsightsAccessScopeIds?: string[];
 
   /**
    * @public
-   * <p>The token for the next page of results.</p>
+   * <p>There are no supported filters.</p>
    */
-  NextToken?: string;
+  Filters?: Filter[];
 
   /**
    * @public
    * <p>The maximum number of results to return with a single call.
-   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
+   *    To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
    */
   MaxResults?: number;
 
   /**
    * @public
-   * <p>One or more filters.</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>tag</code>:<key> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value.
-   *     For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>tag-key</code> - The key of a tag assigned to the resource. Use this filter to find all resources assigned a tag with a specific key, regardless of the tag value.</p>
-   *             </li>
-   *          </ul>
-   */
-  Filters?: Filter[];
-}
-
-/**
- * @public
- * <p>Describes an address range of an IPv4 address pool.</p>
- */
-export interface PublicIpv4PoolRange {
-  /**
-   * @public
-   * <p>The first IP address in the range.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  FirstAddress?: string;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The last IP address in the range.</p>
+   * <p>The token for the next page of results.</p>
    */
-  LastAddress?: string;
+  NextToken?: string;
+}
 
+/**
+ * @public
+ */
+export interface DescribeNetworkInsightsAccessScopesResult {
   /**
    * @public
-   * <p>The number of addresses in the range.</p>
+   * <p>The Network Access Scopes.</p>
    */
-  AddressCount?: number;
+  NetworkInsightsAccessScopes?: NetworkInsightsAccessScope[];
 
   /**
    * @public
-   * <p>The number of available addresses in the range.</p>
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
    */
-  AvailableAddressCount?: number;
+  NextToken?: string;
 }
 
 /**
  * @public
- * <p>Describes an IPv4 address pool.</p>
  */
-export interface PublicIpv4Pool {
+export interface DescribeNetworkInsightsAnalysesRequest {
+  /**
+   * @public
+   * <p>The ID of the network insights analyses. You must specify either analysis IDs or a path ID.</p>
+   */
+  NetworkInsightsAnalysisIds?: string[];
+
   /**
    * @public
-   * <p>The ID of the address pool.</p>
+   * <p>The ID of the path. You must specify either a path ID or analysis IDs.</p>
    */
-  PoolId?: string;
+  NetworkInsightsPathId?: string;
 
   /**
    * @public
-   * <p>A description of the address pool.</p>
+   * <p>The time when the network insights analyses started.</p>
    */
-  Description?: string;
+  AnalysisStartTime?: Date;
 
   /**
    * @public
-   * <p>The address ranges.</p>
+   * <p>The time when the network insights analyses ended.</p>
    */
-  PoolAddressRanges?: PublicIpv4PoolRange[];
+  AnalysisEndTime?: Date;
 
   /**
    * @public
-   * <p>The total number of addresses.</p>
+   * <p>The filters. The following are the possible values:</p>
+   *          <ul>
+   *             <li>
+   *                <p>path-found - A Boolean value that indicates whether a feasible path is found.</p>
+   *             </li>
+   *             <li>
+   *                <p>status - The status of the analysis (running | succeeded | failed).</p>
+   *             </li>
+   *          </ul>
    */
-  TotalAddressCount?: number;
+  Filters?: Filter[];
 
   /**
    * @public
-   * <p>The total number of available addresses.</p>
+   * <p>The maximum number of results to return with a single call.
+   *    To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
    */
-  TotalAvailableAddressCount?: number;
+  MaxResults?: number;
 
   /**
    * @public
-   * <p>The name of the location from which the address pool is advertised.
-   *             A network border group is a unique set of Availability Zones or Local Zones
-   *             from where Amazon Web Services advertises public IP addresses.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  NetworkBorderGroup?: string;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>Any tags for the address pool.</p>
+   * <p>The token for the next page of results.</p>
    */
-  Tags?: Tag[];
+  NextToken?: string;
 }
 
 /**
  * @public
+ * <p>Describes a network insights analysis.</p>
  */
-export interface DescribePublicIpv4PoolsResult {
+export interface NetworkInsightsAnalysis {
   /**
    * @public
-   * <p>Information about the address pools.</p>
+   * <p>The ID of the network insights analysis.</p>
    */
-  PublicIpv4Pools?: PublicIpv4Pool[];
+  NetworkInsightsAnalysisId?: string;
 
   /**
    * @public
-   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
+   * <p>The Amazon Resource Name (ARN) of the network insights analysis.</p>
    */
-  NextToken?: string;
-}
+  NetworkInsightsAnalysisArn?: string;
 
-/**
- * @public
- */
-export interface DescribeRegionsRequest {
   /**
    * @public
-   * <p>The filters.</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>endpoint</code> - The endpoint of the Region (for example, <code>ec2.us-east-1.amazonaws.com</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>opt-in-status</code> - The opt-in status of the Region (<code>opt-in-not-required</code> | <code>opted-in</code> |
-   *                  <code>not-opted-in</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>region-name</code> - The name of the Region (for example, <code>us-east-1</code>).</p>
-   *             </li>
-   *          </ul>
+   * <p>The ID of the path.</p>
    */
-  Filters?: Filter[];
+  NetworkInsightsPathId?: string;
 
   /**
    * @public
-   * <p>The names of the Regions. You can specify any Regions, whether they are enabled and disabled for your account.</p>
+   * <p>The member accounts that contain resources that the path can traverse.</p>
    */
-  RegionNames?: string[];
+  AdditionalAccounts?: string[];
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The Amazon Resource Names (ARN) of the resources that the path must traverse.</p>
    */
-  DryRun?: boolean;
+  FilterInArns?: string[];
 
   /**
    * @public
-   * <p>Indicates whether to display all Regions, including Regions that are disabled for your account.</p>
+   * <p>The time the analysis started.</p>
    */
-  AllRegions?: boolean;
-}
+  StartDate?: Date;
 
-/**
- * @public
- * <p>Describes a Region.</p>
- */
-export interface Region {
   /**
    * @public
-   * <p>The Region service endpoint.</p>
+   * <p>The status of the network insights analysis.</p>
    */
-  Endpoint?: string;
+  Status?: AnalysisStatus;
 
   /**
    * @public
-   * <p>The name of the Region.</p>
+   * <p>The status message, if the status is <code>failed</code>.</p>
    */
-  RegionName?: string;
+  StatusMessage?: string;
 
   /**
    * @public
-   * <p>The Region opt-in status. The possible values are <code>opt-in-not-required</code>, <code>opted-in</code>, and
-   *         <code>not-opted-in</code>.</p>
+   * <p>The warning message.</p>
    */
-  OptInStatus?: string;
-}
+  WarningMessage?: string;
 
-/**
- * @public
- */
-export interface DescribeRegionsResult {
   /**
    * @public
-   * <p>Information about the Regions.</p>
+   * <p>Indicates whether the destination is reachable from the source.</p>
    */
-  Regions?: Region[];
-}
+  NetworkPathFound?: boolean;
 
-/**
- * @public
- */
-export interface DescribeReplaceRootVolumeTasksRequest {
   /**
    * @public
-   * <p>The ID of the root volume replacement task to view.</p>
+   * <p>The components in the path from source to destination.</p>
    */
-  ReplaceRootVolumeTaskIds?: string[];
+  ForwardPathComponents?: PathComponent[];
 
   /**
    * @public
-   * <p>Filter to use:</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>instance-id</code> - The ID of the instance for which the root volume replacement task was created.</p>
-   *             </li>
-   *          </ul>
+   * <p>The components in the path from destination to source.</p>
    */
-  Filters?: Filter[];
+  ReturnPathComponents?: PathComponent[];
 
   /**
    * @public
-   * <p>The maximum number of items to return for this request.
-   * 	To get the next page of items, make another request with the token returned in the output.
-   * 	For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
+   * <p>The explanations. For more information, see <a href="https://docs.aws.amazon.com/vpc/latest/reachability/explanation-codes.html">Reachability Analyzer explanation codes</a>.</p>
    */
-  MaxResults?: number;
+  Explanations?: Explanation[];
 
   /**
    * @public
-   * <p>The token returned from a previous paginated request.
-   *   Pagination continues from the end of the items returned by the previous request.</p>
+   * <p>Potential intermediate components.</p>
    */
-  NextToken?: string;
+  AlternatePathHints?: AlternatePathHint[];
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>Potential intermediate accounts.</p>
    */
-  DryRun?: boolean;
+  SuggestedAccounts?: string[];
+
+  /**
+   * @public
+   * <p>The tags.</p>
+   */
+  Tags?: Tag[];
 }
 
 /**
  * @public
  */
-export interface DescribeReplaceRootVolumeTasksResult {
+export interface DescribeNetworkInsightsAnalysesResult {
   /**
    * @public
-   * <p>Information about the root volume replacement task.</p>
+   * <p>Information about the network insights analyses.</p>
    */
-  ReplaceRootVolumeTasks?: ReplaceRootVolumeTask[];
+  NetworkInsightsAnalyses?: NetworkInsightsAnalysis[];
 
   /**
    * @public
-   * <p>The token to include in another request to get the next page of items.
-   *   This value is <code>null</code> when there are no more items to return.</p>
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
    */
   NextToken?: string;
 }
 
-/**
- * @public
- * @enum
- */
-export const OfferingClassType = {
-  CONVERTIBLE: "convertible",
-  STANDARD: "standard",
-} as const;
-
-/**
- * @public
- */
-export type OfferingClassType = (typeof OfferingClassType)[keyof typeof OfferingClassType];
-
-/**
- * @public
- * @enum
- */
-export const OfferingTypeValues = {
-  All_Upfront: "All Upfront",
-  Heavy_Utilization: "Heavy Utilization",
-  Light_Utilization: "Light Utilization",
-  Medium_Utilization: "Medium Utilization",
-  No_Upfront: "No Upfront",
-  Partial_Upfront: "Partial Upfront",
-} as const;
-
 /**
  * @public
  */
-export type OfferingTypeValues = (typeof OfferingTypeValues)[keyof typeof OfferingTypeValues];
+export interface DescribeNetworkInsightsPathsRequest {
+  /**
+   * @public
+   * <p>The IDs of the paths.</p>
+   */
+  NetworkInsightsPathIds?: string[];
 
-/**
- * @public
- * <p>Contains the parameters for DescribeReservedInstances.</p>
- */
-export interface DescribeReservedInstancesRequest {
   /**
    * @public
-   * <p>One or more filters.</p>
+   * <p>The filters. The following are the possible values:</p>
    *          <ul>
    *             <li>
-   *                <p>
-   *                   <code>availability-zone</code> - The Availability Zone where the Reserved Instance can be used.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>duration</code> - The duration of the Reserved Instance (one year or three years), in seconds (<code>31536000</code> | <code>94608000</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>end</code> - The time when the Reserved Instance expires (for example, 2015-08-07T11:54:42.000Z).</p>
+   *                <p>destination - The ID of the resource.</p>
    *             </li>
    *             <li>
-   *                <p>
-   *                   <code>fixed-price</code> - The purchase price of the Reserved Instance (for example, 9800.0).</p>
+   *                <p>filter-at-source.source-address - The source IPv4 address at the source.</p>
    *             </li>
    *             <li>
-   *                <p>
-   *                   <code>instance-type</code> - The instance type that is covered by the reservation.</p>
+   *                <p>filter-at-source.source-port-range - The source port range at the source.</p>
    *             </li>
    *             <li>
-   *                <p>
-   *                   <code>scope</code> - The scope of the Reserved Instance (<code>Region</code> or <code>Availability Zone</code>).</p>
+   *                <p>filter-at-source.destination-address - The destination IPv4 address at the source.</p>
    *             </li>
    *             <li>
-   *                <p>
-   *                   <code>product-description</code> - The Reserved Instance product platform description
-   *              (<code>Linux/UNIX</code> | <code>Linux with SQL Server Standard</code> |
-   *               <code>Linux with SQL Server Web</code> | <code>Linux with SQL Server Enterprise</code> |
-   *               <code>SUSE Linux</code> |
-   *               <code>Red Hat Enterprise Linux</code> | <code>Red Hat Enterprise Linux with HA</code> |
-   *               <code>Windows</code> | <code>Windows with SQL Server Standard</code> |
-   *               <code>Windows with SQL Server Web</code> | <code>Windows with SQL Server Enterprise</code>).</p>
+   *                <p>filter-at-source.destination-port-range - The destination port range at the source.</p>
    *             </li>
    *             <li>
-   *                <p>
-   *                   <code>reserved-instances-id</code> - The ID of the Reserved Instance.</p>
+   *                <p>filter-at-destination.source-address - The source IPv4 address at the destination.</p>
    *             </li>
    *             <li>
-   *                <p>
-   *                   <code>start</code> - The time at which the Reserved Instance purchase request was placed (for example, 2014-08-07T11:54:42.000Z).</p>
+   *                <p>filter-at-destination.source-port-range - The source port range at the destination.</p>
    *             </li>
    *             <li>
-   *                <p>
-   *                   <code>state</code> - The state of the Reserved Instance (<code>payment-pending</code> | <code>active</code> | <code>payment-failed</code> | <code>retired</code>).</p>
+   *                <p>filter-at-destination.destination-address - The destination IPv4 address at the destination.</p>
    *             </li>
    *             <li>
-   *                <p>
-   *                   <code>tag:<key></code> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value.
-   *     For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
+   *                <p>filter-at-destination.destination-port-range - The destination port range at the destination.</p>
    *             </li>
    *             <li>
-   *                <p>
-   *                   <code>tag-key</code> - The key of a tag assigned to the resource. Use this filter to find all resources assigned a tag with a specific key, regardless of the tag value.</p>
+   *                <p>protocol - The protocol.</p>
    *             </li>
    *             <li>
-   *                <p>
-   *                   <code>usage-price</code> - The usage price of the Reserved Instance, per hour (for example, 0.84).</p>
+   *                <p>source - The ID of the resource.</p>
    *             </li>
    *          </ul>
    */
@@ -7619,265 +7181,370 @@ export interface DescribeReservedInstancesRequest {
 
   /**
    * @public
-   * <p>Describes whether the Reserved Instance is Standard or Convertible.</p>
-   */
-  OfferingClass?: OfferingClassType;
-
-  /**
-   * @public
-   * <p>One or more Reserved Instance IDs.</p>
-   *          <p>Default: Describes all your Reserved Instances, or only those otherwise specified.</p>
+   * <p>The maximum number of results to return with a single call.
+   *    To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
    */
-  ReservedInstancesIds?: string[];
+  MaxResults?: number;
 
   /**
    * @public
    * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *        and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *        Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
 
   /**
    * @public
-   * <p>The Reserved Instance offering type. If you are using tools that predate the 2011-11-01 API
-   * 			version, you only have access to the <code>Medium Utilization</code> Reserved Instance
-   * 			offering type.</p>
+   * <p>The token for the next page of results.</p>
    */
-  OfferingType?: OfferingTypeValues;
+  NextToken?: string;
 }
 
 /**
  * @public
- * @enum
- */
-export const RIProductDescription = {
-  Linux_UNIX: "Linux/UNIX",
-  Linux_UNIX_Amazon_VPC_: "Linux/UNIX (Amazon VPC)",
-  Windows: "Windows",
-  Windows_Amazon_VPC_: "Windows (Amazon VPC)",
-} as const;
-
-/**
- * @public
- */
-export type RIProductDescription = (typeof RIProductDescription)[keyof typeof RIProductDescription];
-
-/**
- * @public
- * @enum
- */
-export const RecurringChargeFrequency = {
-  Hourly: "Hourly",
-} as const;
-
-/**
- * @public
- */
-export type RecurringChargeFrequency = (typeof RecurringChargeFrequency)[keyof typeof RecurringChargeFrequency];
-
-/**
- * @public
- * <p>Describes a recurring charge.</p>
  */
-export interface RecurringCharge {
+export interface DescribeNetworkInsightsPathsResult {
   /**
    * @public
-   * <p>The amount of the recurring charge.</p>
+   * <p>Information about the paths.</p>
    */
-  Amount?: number;
+  NetworkInsightsPaths?: NetworkInsightsPath[];
 
   /**
    * @public
-   * <p>The frequency of the recurring charge.</p>
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
    */
-  Frequency?: RecurringChargeFrequency;
+  NextToken?: string;
 }
 
 /**
  * @public
  * @enum
  */
-export const Scope = {
-  AVAILABILITY_ZONE: "Availability Zone",
-  REGIONAL: "Region",
-} as const;
-
-/**
- * @public
- */
-export type Scope = (typeof Scope)[keyof typeof Scope];
-
-/**
- * @public
- * @enum
- */
-export const ReservedInstanceState = {
-  active: "active",
-  payment_failed: "payment-failed",
-  payment_pending: "payment-pending",
-  queued: "queued",
-  queued_deleted: "queued-deleted",
-  retired: "retired",
+export const NetworkInterfaceAttribute = {
+  attachment: "attachment",
+  description: "description",
+  groupSet: "groupSet",
+  sourceDestCheck: "sourceDestCheck",
 } as const;
 
 /**
  * @public
  */
-export type ReservedInstanceState = (typeof ReservedInstanceState)[keyof typeof ReservedInstanceState];
+export type NetworkInterfaceAttribute = (typeof NetworkInterfaceAttribute)[keyof typeof NetworkInterfaceAttribute];
 
 /**
  * @public
- * <p>Describes a Reserved Instance.</p>
+ * <p>Contains the parameters for DescribeNetworkInterfaceAttribute.</p>
  */
-export interface ReservedInstances {
-  /**
-   * @public
-   * <p>The Availability Zone in which the Reserved Instance can be used.</p>
-   */
-  AvailabilityZone?: string;
-
-  /**
-   * @public
-   * <p>The duration of the Reserved Instance, in seconds.</p>
-   */
-  Duration?: number;
-
-  /**
-   * @public
-   * <p>The time when the Reserved Instance expires.</p>
-   */
-  End?: Date;
-
-  /**
-   * @public
-   * <p>The purchase price of the Reserved Instance.</p>
-   */
-  FixedPrice?: number;
-
-  /**
-   * @public
-   * <p>The number of reservations purchased.</p>
-   */
-  InstanceCount?: number;
-
-  /**
-   * @public
-   * <p>The instance type on which the Reserved Instance can be used.</p>
-   */
-  InstanceType?: _InstanceType;
-
+export interface DescribeNetworkInterfaceAttributeRequest {
   /**
    * @public
-   * <p>The Reserved Instance product platform description.</p>
+   * <p>The attribute of the network interface. This parameter is required.</p>
    */
-  ProductDescription?: RIProductDescription;
+  Attribute?: NetworkInterfaceAttribute;
 
   /**
    * @public
-   * <p>The ID of the Reserved Instance.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *        and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *        Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  ReservedInstancesId?: string;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The date and time the Reserved Instance started.</p>
+   * <p>The ID of the network interface.</p>
    */
-  Start?: Date;
+  NetworkInterfaceId: string | undefined;
+}
 
+/**
+ * @public
+ * <p>Contains the output of DescribeNetworkInterfaceAttribute.</p>
+ */
+export interface DescribeNetworkInterfaceAttributeResult {
   /**
    * @public
-   * <p>The state of the Reserved Instance purchase.</p>
+   * <p>The attachment (if any) of the network interface.</p>
    */
-  State?: ReservedInstanceState;
+  Attachment?: NetworkInterfaceAttachment;
 
   /**
    * @public
-   * <p>The usage price of the Reserved Instance, per hour.</p>
+   * <p>The description of the network interface.</p>
    */
-  UsagePrice?: number;
+  Description?: AttributeValue;
 
   /**
    * @public
-   * <p>The currency of the Reserved Instance. It's specified using ISO 4217 standard currency codes.
-   * 				At this time, the only supported currency is <code>USD</code>.</p>
+   * <p>The security groups associated with the network interface.</p>
    */
-  CurrencyCode?: CurrencyCodeValues;
+  Groups?: GroupIdentifier[];
 
   /**
    * @public
-   * <p>The tenancy of the instance.</p>
+   * <p>The ID of the network interface.</p>
    */
-  InstanceTenancy?: Tenancy;
+  NetworkInterfaceId?: string;
 
   /**
    * @public
-   * <p>The offering class of the Reserved Instance.</p>
+   * <p>Indicates whether source/destination checking is enabled.</p>
    */
-  OfferingClass?: OfferingClassType;
+  SourceDestCheck?: AttributeBooleanValue;
+}
 
+/**
+ * @public
+ * <p>Contains the parameters for DescribeNetworkInterfacePermissions.</p>
+ */
+export interface DescribeNetworkInterfacePermissionsRequest {
   /**
    * @public
-   * <p>The Reserved Instance offering type.</p>
+   * <p>The network interface permission IDs.</p>
    */
-  OfferingType?: OfferingTypeValues;
+  NetworkInterfacePermissionIds?: string[];
 
   /**
    * @public
-   * <p>The recurring charge tag assigned to the resource.</p>
+   * <p>One or more filters.</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>network-interface-permission.network-interface-permission-id</code> - The ID of the
+   * 				permission.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>network-interface-permission.network-interface-id</code> - The ID of
+   * 					the network interface.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>network-interface-permission.aws-account-id</code> - The Amazon Web Services account ID.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>network-interface-permission.aws-service</code> - The Amazon Web Service.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>network-interface-permission.permission</code> - The type of
+   * 					permission (<code>INSTANCE-ATTACH</code> |
+   * 					<code>EIP-ASSOCIATE</code>).</p>
+   *             </li>
+   *          </ul>
    */
-  RecurringCharges?: RecurringCharge[];
+  Filters?: Filter[];
 
   /**
    * @public
-   * <p>The scope of the Reserved Instance.</p>
+   * <p>The token returned from a previous paginated request.
+   * 		    Pagination continues from the end of the items returned by the previous request.</p>
    */
-  Scope?: Scope;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>Any tags assigned to the resource.</p>
+   * <p>The maximum number of items to return for this request. To get the next page of items,
+   * 			make another request with the token returned in the output. If this parameter is not specified,
+   * 			up to 50 results are returned by default. For more information, see
+   * 			<a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
    */
-  Tags?: Tag[];
+  MaxResults?: number;
 }
 
 /**
  * @public
- * <p>Contains the output for DescribeReservedInstances.</p>
+ * <p>Contains the output for DescribeNetworkInterfacePermissions.</p>
  */
-export interface DescribeReservedInstancesResult {
+export interface DescribeNetworkInterfacePermissionsResult {
   /**
    * @public
-   * <p>A list of Reserved Instances.</p>
+   * <p>The network interface permissions.</p>
    */
-  ReservedInstances?: ReservedInstances[];
+  NetworkInterfacePermissions?: NetworkInterfacePermission[];
+
+  /**
+   * @public
+   * <p>The token to include in another request to get the next page of items.
+   * 		  This value is <code>null</code> when there are no more items to return.</p>
+   */
+  NextToken?: string;
 }
 
 /**
  * @public
- * <p>Contains the parameters for DescribeReservedInstancesListings.</p>
+ * <p>Contains the parameters for DescribeNetworkInterfaces.</p>
  */
-export interface DescribeReservedInstancesListingsRequest {
+export interface DescribeNetworkInterfacesRequest {
   /**
    * @public
    * <p>One or more filters.</p>
    *          <ul>
    *             <li>
    *                <p>
-   *                   <code>reserved-instances-id</code> - The ID of the Reserved Instances.</p>
+   *                   <code>association.allocation-id</code> - The allocation ID returned when you
+   * 		                allocated the Elastic IP address (IPv4) for your network interface.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>association.association-id</code> - The association ID returned when the
+   * 		                network interface was associated with an IPv4 address.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>addresses.association.owner-id</code> - The owner ID of the addresses associated with the network interface.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>addresses.association.public-ip</code> - The association ID returned when
+   * 		                the network interface was associated with the Elastic IP address
+   * 		                (IPv4).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>reserved-instances-listing-id</code> - The ID of the Reserved Instances listing.</p>
+   *                   <code>addresses.primary</code> - Whether the private IPv4 address is the primary
+   *                     IP address associated with the network interface. </p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>status</code> - The status of the Reserved Instance listing (<code>pending</code> | <code>active</code> |
-   *            <code>cancelled</code> | <code>closed</code>).</p>
+   *                   <code>addresses.private-ip-address</code> - The private IPv4 addresses
+   * 		                associated with the network interface.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>status-message</code> - The reason for the status.</p>
+   *                   <code>association.ip-owner-id</code> - The owner of the Elastic IP address
+   *                     (IPv4) associated with the network interface.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>association.public-ip</code> - The address of the Elastic IP address
+   *                     (IPv4) bound to the network interface.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>association.public-dns-name</code> - The public DNS name for the network
+   *                     interface (IPv4).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>attachment.attach-time</code> - The time that the network interface was attached to an instance.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>attachment.attachment-id</code> - The ID of the interface attachment.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>attachment.delete-on-termination</code> - Indicates whether the attachment is deleted when an instance is terminated.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>attachment.device-index</code> - The device index to which the network interface is attached.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>attachment.instance-id</code> - The ID of the instance to which the network interface is attached.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>attachment.instance-owner-id</code> - The owner ID of the instance to which the network interface is attached.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>attachment.status</code> - The status of the attachment (<code>attaching</code> | <code>attached</code> | <code>detaching</code> | <code>detached</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>availability-zone</code> - The Availability Zone of the network interface.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>description</code> - The description of the network interface.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>group-id</code> - The ID of a security group associated with the network interface.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>ipv6-addresses.ipv6-address</code> - An IPv6 address associated with
+   *                     the network interface.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>interface-type</code> - The type of network interface (<code>api_gateway_managed</code> |
+   * 		               <code>aws_codestar_connections_managed</code> | <code>branch</code> |
+   * 		               <code>ec2_instance_connect_endpoint</code> | <code>efa</code> | <code>efs</code> |
+   * 		               <code>gateway_load_balancer</code> | <code>gateway_load_balancer_endpoint</code> |
+   * 		               <code>global_accelerator_managed</code> |
+   * 		               <code>interface</code> | <code>iot_rules_managed</code> |
+   * 		               <code>lambda</code> | <code>load_balancer</code> |
+   * 		               <code>nat_gateway</code> | <code>network_load_balancer</code> |
+   * 		               <code>quicksight</code> |
+   * 		               <code>transit_gateway</code> | <code>trunk</code> |
+   * 		               <code>vpc_endpoint</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>mac-address</code> - The MAC address of the network interface.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>network-interface-id</code> - The ID of the network interface.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>owner-id</code> - The Amazon Web Services account ID of the network interface owner.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>private-dns-name</code> - The private DNS name of the network interface (IPv4).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>private-ip-address</code> - The private IPv4 address or addresses of the
+   *                     network interface.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>requester-id</code> - The alias or Amazon Web Services account ID of the principal or service that created the network interface.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>requester-managed</code> - Indicates whether the network interface is being managed by an Amazon Web Service
+   * 		               (for example, Amazon Web Services Management Console, Auto Scaling, and so on).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>source-dest-check</code> - Indicates whether the network interface performs source/destination checking.
+   * 		            A value of <code>true</code> means checking is enabled, and <code>false</code> means checking is disabled.
+   * 		            The value must be <code>false</code> for the network interface to perform network address translation (NAT) in your VPC. </p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>status</code> - The status of the network interface. If the network interface is not attached to an instance, the status is <code>available</code>;
+   * 		            if a network interface is attached to an instance the status is <code>in-use</code>.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>subnet-id</code> - The ID of the subnet for the network interface.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>tag</code>:<key> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value.
+   *     For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>tag-key</code> - The key of a tag assigned to the resource. Use this filter to find all resources assigned a tag with a specific key, regardless of the tag value.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>vpc-id</code> - The ID of the VPC for the network interface.</p>
    *             </li>
    *          </ul>
    */
@@ -7885,86 +7552,96 @@ export interface DescribeReservedInstancesListingsRequest {
 
   /**
    * @public
-   * <p>One or more Reserved Instance IDs.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *        and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *        Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  ReservedInstancesId?: string;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>One or more Reserved Instance listing IDs.</p>
+   * <p>The network interface IDs.</p>
+   *          <p>Default: Describes all your network interfaces.</p>
    */
-  ReservedInstancesListingId?: string;
+  NetworkInterfaceIds?: string[];
+
+  /**
+   * @public
+   * <p>The token returned from a previous paginated request.
+   * 		    Pagination continues from the end of the items returned by the previous request.</p>
+   */
+  NextToken?: string;
+
+  /**
+   * @public
+   * <p>The maximum number of items to return for this request. To get the next page of items,
+   * 		    make another request with the token returned in the output. You cannot specify this
+   * 		    parameter and the network interface IDs parameter in the same request. For more information,
+   * 		    see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
+   */
+  MaxResults?: number;
 }
 
 /**
  * @public
- * <p>Contains the output of DescribeReservedInstancesListings.</p>
  */
-export interface DescribeReservedInstancesListingsResult {
+export interface DescribeNetworkInterfacesResult {
   /**
    * @public
-   * <p>Information about the Reserved Instance listing.</p>
+   * <p>Information about one or more network interfaces.</p>
    */
-  ReservedInstancesListings?: ReservedInstancesListing[];
+  NetworkInterfaces?: NetworkInterface[];
+
+  /**
+   * @public
+   * <p>The token to include in another request to get the next page of items.
+   * 		    This value is <code>null</code> when there are no more items to return.</p>
+   */
+  NextToken?: string;
 }
 
 /**
  * @public
- * <p>Contains the parameters for DescribeReservedInstancesModifications.</p>
  */
-export interface DescribeReservedInstancesModificationsRequest {
+export interface DescribePlacementGroupsRequest {
   /**
    * @public
-   * <p>One or more filters.</p>
+   * <p>The filters.</p>
    *          <ul>
    *             <li>
    *                <p>
-   *                   <code>client-token</code> - The idempotency token for the modification request.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>create-date</code> - The time when the modification request was created.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>effective-date</code> - The time when the modification becomes effective.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>modification-result.reserved-instances-id</code> - The ID for the Reserved Instances created as part of the modification request. This ID is only available when the status of the modification is <code>fulfilled</code>.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>modification-result.target-configuration.availability-zone</code> - The Availability Zone for the new Reserved Instances.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>modification-result.target-configuration.instance-count </code> - The number of new Reserved Instances.</p>
+   *                   <code>group-name</code> - The name of the placement group.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>modification-result.target-configuration.instance-type</code> - The instance type of the new Reserved Instances.</p>
+   *                   <code>group-arn</code> - The Amazon Resource Name (ARN) of the placement
+   *                     group.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>reserved-instances-id</code> - The ID of the Reserved Instances modified.</p>
+   *                   <code>spread-level</code> - The spread level for the placement group
+   *                         (<code>host</code> | <code>rack</code>). </p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>reserved-instances-modification-id</code> - The ID of the modification request.</p>
+   *                   <code>state</code> - The state of the placement group (<code>pending</code> |
+   *                         <code>available</code> | <code>deleting</code> |
+   *                     <code>deleted</code>).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>status</code> - The status of the Reserved Instances modification request
-   *            (<code>processing</code> | <code>fulfilled</code> | <code>failed</code>).</p>
+   *                   <code>strategy</code> - The strategy of the placement group
+   *                         (<code>cluster</code> | <code>spread</code> |
+   *                     <code>partition</code>).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>status-message</code> - The reason for the status.</p>
+   *                   <code>tag:<key></code> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value.
+   *     For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>update-date</code> - The time when the modification request was last updated.</p>
+   *                   <code>tag-key</code> - The key of a tag assigned to the resource. Use this filter to find all resources that have a tag with a specific key, regardless of the tag value.</p>
    *             </li>
    *          </ul>
    */
@@ -7972,177 +7649,229 @@ export interface DescribeReservedInstancesModificationsRequest {
 
   /**
    * @public
-   * <p>IDs for the submitted modification request.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  ReservedInstancesModificationIds?: string[];
+  DryRun?: boolean;
+
+  /**
+   * @public
+   * <p>The names of the placement groups.</p>
+   *          <p>Default: Describes all your placement groups, or only those otherwise
+   *             specified.</p>
+   */
+  GroupNames?: string[];
+
+  /**
+   * @public
+   * <p>The IDs of the placement groups.</p>
+   */
+  GroupIds?: string[];
+}
 
+/**
+ * @public
+ */
+export interface DescribePlacementGroupsResult {
   /**
    * @public
-   * <p>The token to retrieve the next page of results.</p>
+   * <p>Information about the placement groups.</p>
    */
-  NextToken?: string;
+  PlacementGroups?: PlacementGroup[];
 }
 
 /**
  * @public
- * <p>Describes the configuration settings for the modified Reserved Instances.</p>
  */
-export interface ReservedInstancesConfiguration {
+export interface DescribePrefixListsRequest {
   /**
    * @public
-   * <p>The Availability Zone for the modified Reserved Instances.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  AvailabilityZone?: string;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The number of modified Reserved Instances.</p>
-   *          <note>
-   *             <p>This is a required field for a request.</p>
-   *          </note>
+   * <p>One or more filters.</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>prefix-list-id</code>: The ID of a prefix list.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>prefix-list-name</code>: The name of a prefix list.</p>
+   *             </li>
+   *          </ul>
    */
-  InstanceCount?: number;
+  Filters?: Filter[];
 
   /**
    * @public
-   * <p>The instance type for the modified Reserved Instances.</p>
+   * <p>The maximum number of results to return with a single call.
+   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
    */
-  InstanceType?: _InstanceType;
+  MaxResults?: number;
 
   /**
    * @public
-   * <p>The network platform of the modified Reserved Instances.</p>
+   * <p>The token for the next page of results.</p>
    */
-  Platform?: string;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>Whether the Reserved Instance is applied to instances in a Region or instances in a specific Availability Zone.</p>
+   * <p>One or more prefix list IDs.</p>
    */
-  Scope?: Scope;
+  PrefixListIds?: string[];
 }
 
 /**
  * @public
- * <p>Describes the modification request/s.</p>
+ * <p>Describes prefixes for Amazon Web Services services.</p>
  */
-export interface ReservedInstancesModificationResult {
+export interface PrefixList {
   /**
    * @public
-   * <p>The ID for the Reserved Instances that were created as part of the modification request. This field is only available when the modification is fulfilled.</p>
+   * <p>The IP address range of the Amazon Web Service.</p>
    */
-  ReservedInstancesId?: string;
+  Cidrs?: string[];
 
   /**
    * @public
-   * <p>The target Reserved Instances configurations supplied as part of the modification request.</p>
+   * <p>The ID of the prefix.</p>
    */
-  TargetConfiguration?: ReservedInstancesConfiguration;
-}
+  PrefixListId?: string;
 
-/**
- * @public
- * <p>Describes the ID of a Reserved Instance.</p>
- */
-export interface ReservedInstancesId {
   /**
    * @public
-   * <p>The ID of the Reserved Instance.</p>
+   * <p>The name of the prefix.</p>
    */
-  ReservedInstancesId?: string;
+  PrefixListName?: string;
 }
 
 /**
  * @public
- * <p>Describes a Reserved Instance modification.</p>
  */
-export interface ReservedInstancesModification {
-  /**
-   * @public
-   * <p>A unique, case-sensitive key supplied by the client to ensure that the request is idempotent.
-   * 			For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html">Ensuring
-   * 				Idempotency</a>.</p>
-   */
-  ClientToken?: string;
-
+export interface DescribePrefixListsResult {
   /**
    * @public
-   * <p>The time when the modification request was created.</p>
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
    */
-  CreateDate?: Date;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The time for the modification to become effective.</p>
+   * <p>All available prefix lists.</p>
    */
-  EffectiveDate?: Date;
+  PrefixLists?: PrefixList[];
+}
 
+/**
+ * @public
+ */
+export interface DescribePrincipalIdFormatRequest {
   /**
    * @public
-   * <p>Contains target configurations along with their corresponding new Reserved Instance IDs.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  ModificationResults?: ReservedInstancesModificationResult[];
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The IDs of one or more Reserved Instances.</p>
+   * <p>The type of resource: <code>bundle</code> |
+   *             <code>conversion-task</code> | <code>customer-gateway</code> | <code>dhcp-options</code> |
+   *             <code>elastic-ip-allocation</code> | <code>elastic-ip-association</code> |
+   *             <code>export-task</code> | <code>flow-log</code> | <code>image</code> |
+   *             <code>import-task</code> | <code>instance</code> | <code>internet-gateway</code> |
+   *             <code>network-acl</code> | <code>network-acl-association</code> |
+   *             <code>network-interface</code> | <code>network-interface-attachment</code> |
+   *             <code>prefix-list</code> | <code>reservation</code> | <code>route-table</code> |
+   *             <code>route-table-association</code> | <code>security-group</code> |
+   *             <code>snapshot</code> | <code>subnet</code> |
+   *             <code>subnet-cidr-block-association</code> | <code>volume</code> | <code>vpc</code>
+   *             | <code>vpc-cidr-block-association</code> | <code>vpc-endpoint</code> |
+   *             <code>vpc-peering-connection</code> | <code>vpn-connection</code> | <code>vpn-gateway</code>
+   *          </p>
    */
-  ReservedInstancesIds?: ReservedInstancesId[];
+  Resources?: string[];
 
   /**
    * @public
-   * <p>A unique ID for the Reserved Instance modification.</p>
+   * <p>The maximum number of results to return in a single call. To retrieve the remaining
+   *             results, make another call with the returned NextToken value. </p>
    */
-  ReservedInstancesModificationId?: string;
+  MaxResults?: number;
 
   /**
    * @public
-   * <p>The status of the Reserved Instances modification request.</p>
+   * <p>The token to request the next page of results.</p>
    */
-  Status?: string;
+  NextToken?: string;
+}
 
+/**
+ * @public
+ * <p>PrincipalIdFormat description</p>
+ */
+export interface PrincipalIdFormat {
   /**
    * @public
-   * <p>The reason for the status.</p>
+   * <p>PrincipalIdFormatARN description</p>
    */
-  StatusMessage?: string;
+  Arn?: string;
 
   /**
    * @public
-   * <p>The time when the modification request was last updated.</p>
+   * <p>PrincipalIdFormatStatuses description</p>
    */
-  UpdateDate?: Date;
+  Statuses?: IdFormat[];
 }
 
 /**
  * @public
- * <p>Contains the output of DescribeReservedInstancesModifications.</p>
  */
-export interface DescribeReservedInstancesModificationsResult {
+export interface DescribePrincipalIdFormatResult {
   /**
    * @public
-   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when
-   * 			there are no more results to return.</p>
+   * <p>Information about the ID format settings for the ARN.</p>
    */
-  NextToken?: string;
+  Principals?: PrincipalIdFormat[];
 
   /**
    * @public
-   * <p>The Reserved Instance modification information.</p>
+   * <p>The token to use to retrieve the next page of results. This value is null when there are no more results to return.</p>
    */
-  ReservedInstancesModifications?: ReservedInstancesModification[];
+  NextToken?: string;
 }
 
 /**
  * @public
- * <p>Contains the parameters for DescribeReservedInstancesOfferings.</p>
  */
-export interface DescribeReservedInstancesOfferingsRequest {
+export interface DescribePublicIpv4PoolsRequest {
   /**
    * @public
-   * <p>The Availability Zone in which the Reserved Instance can be used.</p>
+   * <p>The IDs of the address pools.</p>
    */
-  AvailabilityZone?: string;
+  PoolIds?: string[];
+
+  /**
+   * @public
+   * <p>The token for the next page of results.</p>
+   */
+  NextToken?: string;
+
+  /**
+   * @public
+   * <p>The maximum number of results to return with a single call.
+   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
+   */
+  MaxResults?: number;
 
   /**
    * @public
@@ -8150,393 +7879,351 @@ export interface DescribeReservedInstancesOfferingsRequest {
    *          <ul>
    *             <li>
    *                <p>
-   *                   <code>availability-zone</code> - The Availability Zone where the Reserved Instance can be
-   *           used.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>duration</code> - The duration of the Reserved Instance (for example, one year or
-   *           three years), in seconds (<code>31536000</code> | <code>94608000</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>fixed-price</code> - The purchase price of the Reserved Instance (for example,
-   *           9800.0).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>instance-type</code> - The instance type that is covered by the
-   *           reservation.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>marketplace</code> - Set to <code>true</code> to show only Reserved Instance
-   *           Marketplace offerings. When this filter is not used, which is the default behavior, all
-   *           offerings from both Amazon Web Services and the Reserved Instance Marketplace are listed.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>product-description</code> - The Reserved Instance product platform description
-   *           (<code>Linux/UNIX</code> | <code>Linux with SQL Server Standard</code> |
-   *           <code>Linux with SQL Server Web</code> | <code>Linux with SQL Server Enterprise</code> |
-   *           <code>SUSE Linux</code> |
-   *           <code>Red Hat Enterprise Linux</code> | <code>Red Hat Enterprise Linux with HA</code> |
-   *           <code>Windows</code> | <code>Windows with SQL Server Standard</code> |
-   *           <code>Windows with SQL Server Web</code> | <code>Windows with SQL Server Enterprise</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>reserved-instances-offering-id</code> - The Reserved Instances offering
-   *           ID.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>scope</code> - The scope of the Reserved Instance (<code>Availability Zone</code> or
-   *             <code>Region</code>).</p>
+   *                   <code>tag</code>:<key> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value.
+   *     For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>usage-price</code> - The usage price of the Reserved Instance, per hour (for
-   *           example, 0.84).</p>
+   *                   <code>tag-key</code> - The key of a tag assigned to the resource. Use this filter to find all resources assigned a tag with a specific key, regardless of the tag value.</p>
    *             </li>
    *          </ul>
    */
   Filters?: Filter[];
+}
 
+/**
+ * @public
+ * <p>Describes an address range of an IPv4 address pool.</p>
+ */
+export interface PublicIpv4PoolRange {
   /**
    * @public
-   * <p>Include Reserved Instance Marketplace offerings in the response.</p>
-   */
-  IncludeMarketplace?: boolean;
-
-  /**
-   * @public
-   * <p>The instance type that the reservation will cover (for example, <code>m1.small</code>). For more information, see
-   *        <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html">Instance types</a> in the
-   *       <i>Amazon EC2 User Guide</i>.</p>
-   */
-  InstanceType?: _InstanceType;
-
-  /**
-   * @public
-   * <p>The maximum duration (in seconds) to filter when searching for offerings.</p>
-   *          <p>Default: 94608000 (3 years)</p>
-   */
-  MaxDuration?: number;
-
-  /**
-   * @public
-   * <p>The maximum number of instances to filter when searching for offerings.</p>
-   *          <p>Default: 20</p>
-   */
-  MaxInstanceCount?: number;
-
-  /**
-   * @public
-   * <p>The minimum duration (in seconds) to filter when searching for offerings.</p>
-   *          <p>Default: 2592000 (1 month)</p>
+   * <p>The first IP address in the range.</p>
    */
-  MinDuration?: number;
+  FirstAddress?: string;
 
   /**
    * @public
-   * <p>The offering class of the Reserved Instance. Can be <code>standard</code> or <code>convertible</code>.</p>
+   * <p>The last IP address in the range.</p>
    */
-  OfferingClass?: OfferingClassType;
+  LastAddress?: string;
 
   /**
    * @public
-   * <p>The Reserved Instance product platform description. Instances that include <code>(Amazon
-   *         VPC)</code> in the description are for use with Amazon VPC.</p>
+   * <p>The number of addresses in the range.</p>
    */
-  ProductDescription?: RIProductDescription;
+  AddressCount?: number;
 
   /**
    * @public
-   * <p>One or more Reserved Instances offering IDs.</p>
+   * <p>The number of available addresses in the range.</p>
    */
-  ReservedInstancesOfferingIds?: string[];
+  AvailableAddressCount?: number;
+}
 
+/**
+ * @public
+ * <p>Describes an IPv4 address pool.</p>
+ */
+export interface PublicIpv4Pool {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *        and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *        Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The ID of the address pool.</p>
    */
-  DryRun?: boolean;
+  PoolId?: string;
 
   /**
    * @public
-   * <p>The tenancy of the instances covered by the reservation. A Reserved Instance with a tenancy
-   *       of <code>dedicated</code> is applied to instances that run in a VPC on single-tenant hardware
-   *       (i.e., Dedicated Instances).</p>
-   *          <p>
-   *             <b>Important:</b> The <code>host</code> value cannot be used with this parameter. Use the <code>default</code> or <code>dedicated</code> values only.</p>
-   *          <p>Default: <code>default</code>
-   *          </p>
+   * <p>A description of the address pool.</p>
    */
-  InstanceTenancy?: Tenancy;
+  Description?: string;
 
   /**
    * @public
-   * <p>The maximum number of results to return for the request in a single page. The remaining
-   * 			results of the initial request can be seen by sending another request with the returned
-   * 				<code>NextToken</code> value. The maximum is 100.</p>
-   *          <p>Default: 100</p>
+   * <p>The address ranges.</p>
    */
-  MaxResults?: number;
+  PoolAddressRanges?: PublicIpv4PoolRange[];
 
   /**
    * @public
-   * <p>The token to retrieve the next page of results.</p>
+   * <p>The total number of addresses.</p>
    */
-  NextToken?: string;
+  TotalAddressCount?: number;
 
   /**
    * @public
-   * <p>The Reserved Instance offering type. If you are using tools that predate the 2011-11-01 API
-   * 			version, you only have access to the <code>Medium Utilization</code> Reserved Instance
-   * 			offering type. </p>
+   * <p>The total number of available addresses.</p>
    */
-  OfferingType?: OfferingTypeValues;
-}
+  TotalAvailableAddressCount?: number;
 
-/**
- * @public
- * <p>Describes a Reserved Instance offering.</p>
- */
-export interface PricingDetail {
   /**
    * @public
-   * <p>The number of reservations available for the price.</p>
+   * <p>The name of the location from which the address pool is advertised.
+   *             A network border group is a unique set of Availability Zones or Local Zones
+   *             from where Amazon Web Services advertises public IP addresses.</p>
    */
-  Count?: number;
+  NetworkBorderGroup?: string;
 
   /**
    * @public
-   * <p>The price per instance.</p>
+   * <p>Any tags for the address pool.</p>
    */
-  Price?: number;
+  Tags?: Tag[];
 }
 
 /**
  * @public
- * <p>Describes a Reserved Instance offering.</p>
  */
-export interface ReservedInstancesOffering {
+export interface DescribePublicIpv4PoolsResult {
   /**
    * @public
-   * <p>The Availability Zone in which the Reserved Instance can be used.</p>
+   * <p>Information about the address pools.</p>
    */
-  AvailabilityZone?: string;
+  PublicIpv4Pools?: PublicIpv4Pool[];
 
   /**
    * @public
-   * <p>The duration of the Reserved Instance, in seconds.</p>
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
    */
-  Duration?: number;
+  NextToken?: string;
+}
 
+/**
+ * @public
+ */
+export interface DescribeRegionsRequest {
   /**
    * @public
-   * <p>The purchase price of the Reserved Instance.</p>
+   * <p>The filters.</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>endpoint</code> - The endpoint of the Region (for example, <code>ec2.us-east-1.amazonaws.com</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>opt-in-status</code> - The opt-in status of the Region (<code>opt-in-not-required</code> | <code>opted-in</code> |
+   *                  <code>not-opted-in</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>region-name</code> - The name of the Region (for example, <code>us-east-1</code>).</p>
+   *             </li>
+   *          </ul>
    */
-  FixedPrice?: number;
+  Filters?: Filter[];
 
   /**
    * @public
-   * <p>The instance type on which the Reserved Instance can be used.</p>
+   * <p>The names of the Regions. You can specify any Regions, whether they are enabled and disabled for your account.</p>
    */
-  InstanceType?: _InstanceType;
+  RegionNames?: string[];
 
   /**
    * @public
-   * <p>The Reserved Instance product platform description.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  ProductDescription?: RIProductDescription;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The ID of the Reserved Instance offering. This is the offering ID used in <a>GetReservedInstancesExchangeQuote</a>
-   *      to confirm that an exchange can be made.</p>
+   * <p>Indicates whether to display all Regions, including Regions that are disabled for your account.</p>
    */
-  ReservedInstancesOfferingId?: string;
+  AllRegions?: boolean;
+}
 
+/**
+ * @public
+ * <p>Describes a Region.</p>
+ */
+export interface Region {
   /**
    * @public
-   * <p>The usage price of the Reserved Instance, per hour.</p>
+   * <p>The Region service endpoint.</p>
    */
-  UsagePrice?: number;
+  Endpoint?: string;
 
   /**
    * @public
-   * <p>The currency of the Reserved Instance offering you are purchasing. It's
-   * 				specified using ISO 4217 standard currency codes. At this time,
-   * 				the only supported currency is <code>USD</code>.</p>
+   * <p>The name of the Region.</p>
    */
-  CurrencyCode?: CurrencyCodeValues;
+  RegionName?: string;
 
   /**
    * @public
-   * <p>The tenancy of the instance.</p>
+   * <p>The Region opt-in status. The possible values are <code>opt-in-not-required</code>, <code>opted-in</code>, and
+   *         <code>not-opted-in</code>.</p>
    */
-  InstanceTenancy?: Tenancy;
+  OptInStatus?: string;
+}
 
+/**
+ * @public
+ */
+export interface DescribeRegionsResult {
   /**
    * @public
-   * <p>Indicates whether the offering is available through the Reserved Instance Marketplace (resale) or Amazon Web Services.
-   *         If it's a Reserved Instance Marketplace offering, this is <code>true</code>.</p>
+   * <p>Information about the Regions.</p>
    */
-  Marketplace?: boolean;
+  Regions?: Region[];
+}
 
+/**
+ * @public
+ */
+export interface DescribeReplaceRootVolumeTasksRequest {
   /**
    * @public
-   * <p>If <code>convertible</code> it can be exchanged for Reserved Instances of
-   *       the same or higher monetary value, with different configurations. If <code>standard</code>, it is not
-   *       possible to perform an exchange.</p>
+   * <p>The ID of the root volume replacement task to view.</p>
    */
-  OfferingClass?: OfferingClassType;
+  ReplaceRootVolumeTaskIds?: string[];
 
   /**
    * @public
-   * <p>The Reserved Instance offering type.</p>
+   * <p>Filter to use:</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>instance-id</code> - The ID of the instance for which the root volume replacement task was created.</p>
+   *             </li>
+   *          </ul>
    */
-  OfferingType?: OfferingTypeValues;
+  Filters?: Filter[];
 
   /**
    * @public
-   * <p>The pricing details of the Reserved Instance offering.</p>
+   * <p>The maximum number of items to return for this request.
+   * 	To get the next page of items, make another request with the token returned in the output.
+   * 	For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
    */
-  PricingDetails?: PricingDetail[];
+  MaxResults?: number;
 
   /**
    * @public
-   * <p>The recurring charge tag assigned to the resource.</p>
+   * <p>The token returned from a previous paginated request.
+   *   Pagination continues from the end of the items returned by the previous request.</p>
    */
-  RecurringCharges?: RecurringCharge[];
+  NextToken?: string;
 
   /**
    * @public
-   * <p>Whether the Reserved Instance is applied to instances in a Region or an Availability Zone.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  Scope?: Scope;
+  DryRun?: boolean;
 }
 
 /**
  * @public
- * <p>Contains the output of DescribeReservedInstancesOfferings.</p>
  */
-export interface DescribeReservedInstancesOfferingsResult {
+export interface DescribeReplaceRootVolumeTasksResult {
   /**
    * @public
-   * <p>A list of Reserved Instances offerings.</p>
+   * <p>Information about the root volume replacement task.</p>
    */
-  ReservedInstancesOfferings?: ReservedInstancesOffering[];
+  ReplaceRootVolumeTasks?: ReplaceRootVolumeTask[];
 
   /**
    * @public
-   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when
-   * 			there are no more results to return.</p>
+   * <p>The token to include in another request to get the next page of items.
+   *   This value is <code>null</code> when there are no more items to return.</p>
    */
   NextToken?: string;
 }
 
 /**
  * @public
+ * @enum
  */
-export interface DescribeRouteTablesRequest {
-  /**
-   * @public
-   * <p>The filters.</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>association.route-table-association-id</code> - The ID of an association
-   *                     ID for the route table.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>association.route-table-id</code> - The ID of the route table involved in
-   *                     the association.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>association.subnet-id</code> - The ID of the subnet involved in the
-   *                     association.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>association.main</code> - Indicates whether the route table is the main
-   *                     route table for the VPC (<code>true</code> | <code>false</code>). Route tables
-   *                     that do not have an association ID are not returned in the response.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>owner-id</code> - The ID of the Amazon Web Services account that owns the route table.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>route-table-id</code> - The ID of the route table.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>route.destination-cidr-block</code> - The IPv4 CIDR range specified in a
-   *                     route in the table.</p>
-   *             </li>
+export const OfferingClassType = {
+  CONVERTIBLE: "convertible",
+  STANDARD: "standard",
+} as const;
+
+/**
+ * @public
+ */
+export type OfferingClassType = (typeof OfferingClassType)[keyof typeof OfferingClassType];
+
+/**
+ * @public
+ * @enum
+ */
+export const OfferingTypeValues = {
+  All_Upfront: "All Upfront",
+  Heavy_Utilization: "Heavy Utilization",
+  Light_Utilization: "Light Utilization",
+  Medium_Utilization: "Medium Utilization",
+  No_Upfront: "No Upfront",
+  Partial_Upfront: "Partial Upfront",
+} as const;
+
+/**
+ * @public
+ */
+export type OfferingTypeValues = (typeof OfferingTypeValues)[keyof typeof OfferingTypeValues];
+
+/**
+ * @public
+ * <p>Contains the parameters for DescribeReservedInstances.</p>
+ */
+export interface DescribeReservedInstancesRequest {
+  /**
+   * @public
+   * <p>One or more filters.</p>
+   *          <ul>
    *             <li>
    *                <p>
-   *                   <code>route.destination-ipv6-cidr-block</code> - The IPv6 CIDR range specified in a route in the route table.</p>
+   *                   <code>availability-zone</code> - The Availability Zone where the Reserved Instance can be used.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>route.destination-prefix-list-id</code> - The ID (prefix) of the Amazon Web Service
-   *                     specified in a route in the table.</p>
+   *                   <code>duration</code> - The duration of the Reserved Instance (one year or three years), in seconds (<code>31536000</code> | <code>94608000</code>).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>route.egress-only-internet-gateway-id</code> - The ID of an
-   *                     egress-only Internet gateway specified in a route in the route table.</p>
+   *                   <code>end</code> - The time when the Reserved Instance expires (for example, 2015-08-07T11:54:42.000Z).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>route.gateway-id</code> - The ID of a gateway specified in a route in the table.</p>
+   *                   <code>fixed-price</code> - The purchase price of the Reserved Instance (for example, 9800.0).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>route.instance-id</code> - The ID of an instance specified in a route in the table.</p>
+   *                   <code>instance-type</code> - The instance type that is covered by the reservation.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>route.nat-gateway-id</code> - The ID of a NAT gateway.</p>
+   *                   <code>scope</code> - The scope of the Reserved Instance (<code>Region</code> or <code>Availability Zone</code>).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>route.transit-gateway-id</code> - The ID of a transit gateway.</p>
+   *                   <code>product-description</code> - The Reserved Instance product platform description
+   *              (<code>Linux/UNIX</code> | <code>Linux with SQL Server Standard</code> |
+   *               <code>Linux with SQL Server Web</code> | <code>Linux with SQL Server Enterprise</code> |
+   *               <code>SUSE Linux</code> |
+   *               <code>Red Hat Enterprise Linux</code> | <code>Red Hat Enterprise Linux with HA</code> |
+   *               <code>Windows</code> | <code>Windows with SQL Server Standard</code> |
+   *               <code>Windows with SQL Server Web</code> | <code>Windows with SQL Server Enterprise</code>).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>route.origin</code> - Describes how the route was created.
-   *                         <code>CreateRouteTable</code> indicates that the route was automatically
-   *                     created when the route table was created; <code>CreateRoute</code> indicates
-   *                     that the route was manually added to the route table;
-   *                         <code>EnableVgwRoutePropagation</code> indicates that the route was
-   *                     propagated by route propagation.</p>
+   *                   <code>reserved-instances-id</code> - The ID of the Reserved Instance.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>route.state</code> - The state of a route in the route table
-   *                         (<code>active</code> | <code>blackhole</code>). The blackhole state
-   *                     indicates that the route's target isn't available (for example, the specified
-   *                     gateway isn't attached to the VPC, the specified NAT instance has been
-   *                     terminated, and so on).</p>
+   *                   <code>start</code> - The time at which the Reserved Instance purchase request was placed (for example, 2014-08-07T11:54:42.000Z).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>route.vpc-peering-connection-id</code> - The ID of a VPC peering
-   * 		                connection specified in a route in the table.</p>
+   *                   <code>state</code> - The state of the Reserved Instance (<code>payment-pending</code> | <code>active</code> | <code>payment-failed</code> | <code>retired</code>).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>tag</code>:<key> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value.
+   *                   <code>tag:<key></code> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value.
    *     For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
    *             </li>
    *             <li>
@@ -8545,7 +8232,7 @@ export interface DescribeRouteTablesRequest {
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>vpc-id</code> - The ID of the VPC for the route table.</p>
+   *                   <code>usage-price</code> - The usage price of the Reserved Instance, per hour (for example, 0.84).</p>
    *             </li>
    *          </ul>
    */
@@ -8553,369 +8240,265 @@ export interface DescribeRouteTablesRequest {
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>Describes whether the Reserved Instance is Standard or Convertible.</p>
    */
-  DryRun?: boolean;
+  OfferingClass?: OfferingClassType;
 
   /**
    * @public
-   * <p>The IDs of the route tables.</p>
-   *          <p>Default: Describes all your route tables.</p>
+   * <p>One or more Reserved Instance IDs.</p>
+   *          <p>Default: Describes all your Reserved Instances, or only those otherwise specified.</p>
    */
-  RouteTableIds?: string[];
+  ReservedInstancesIds?: string[];
 
   /**
    * @public
-   * <p>The token returned from a previous paginated request. Pagination continues from the end of the items returned by the previous request.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *        and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *        Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  NextToken?: string;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The maximum number of items to return for this request.
-   * 	To get the next page of items, make another request with the token returned in the output.
-   * 	For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
+   * <p>The Reserved Instance offering type. If you are using tools that predate the 2011-11-01 API
+   * 			version, you only have access to the <code>Medium Utilization</code> Reserved Instance
+   * 			offering type.</p>
    */
-  MaxResults?: number;
+  OfferingType?: OfferingTypeValues;
 }
 
 /**
  * @public
- * <p>Contains the output of DescribeRouteTables.</p>
+ * @enum
  */
-export interface DescribeRouteTablesResult {
-  /**
-   * @public
-   * <p>Information about one or more route tables.</p>
-   */
-  RouteTables?: RouteTable[];
-
-  /**
-   * @public
-   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there are no more items to return.</p>
-   */
-  NextToken?: string;
-}
+export const RIProductDescription = {
+  Linux_UNIX: "Linux/UNIX",
+  Linux_UNIX_Amazon_VPC_: "Linux/UNIX (Amazon VPC)",
+  Windows: "Windows",
+  Windows_Amazon_VPC_: "Windows (Amazon VPC)",
+} as const;
 
 /**
  * @public
- * <p>Describes the time period for a Scheduled Instance to start its first schedule. The time period must span less than one day.</p>
  */
-export interface SlotDateTimeRangeRequest {
-  /**
-   * @public
-   * <p>The earliest date and time, in UTC, for the Scheduled Instance to start.</p>
-   */
-  EarliestTime: Date | undefined;
-
-  /**
-   * @public
-   * <p>The latest date and time, in UTC, for the Scheduled Instance to start. This value must be later than or equal to the earliest date and at most three months in the future.</p>
-   */
-  LatestTime: Date | undefined;
-}
+export type RIProductDescription = (typeof RIProductDescription)[keyof typeof RIProductDescription];
 
 /**
  * @public
- * <p>Describes the recurring schedule for a Scheduled Instance.</p>
+ * @enum
  */
-export interface ScheduledInstanceRecurrenceRequest {
-  /**
-   * @public
-   * <p>The frequency (<code>Daily</code>, <code>Weekly</code>, or <code>Monthly</code>).</p>
-   */
-  Frequency?: string;
-
-  /**
-   * @public
-   * <p>The interval quantity. The interval unit depends on the value of <code>Frequency</code>. For example, every 2
-   *          weeks or every 2 months.</p>
-   */
-  Interval?: number;
+export const RecurringChargeFrequency = {
+  Hourly: "Hourly",
+} as const;
 
-  /**
-   * @public
-   * <p>The days. For a monthly schedule, this is one or more days of the month (1-31). For a weekly schedule, this is one or more days of the week (1-7, where 1 is Sunday). You can't specify this value with a daily schedule. If the occurrence is relative to the end of the month, you can specify only a single day.</p>
-   */
-  OccurrenceDays?: number[];
+/**
+ * @public
+ */
+export type RecurringChargeFrequency = (typeof RecurringChargeFrequency)[keyof typeof RecurringChargeFrequency];
 
+/**
+ * @public
+ * <p>Describes a recurring charge.</p>
+ */
+export interface RecurringCharge {
   /**
    * @public
-   * <p>Indicates whether the occurrence is relative to the end of the specified week or month. You can't specify this value with a daily schedule.</p>
+   * <p>The amount of the recurring charge.</p>
    */
-  OccurrenceRelativeToEnd?: boolean;
+  Amount?: number;
 
   /**
    * @public
-   * <p>The unit for <code>OccurrenceDays</code> (<code>DayOfWeek</code> or <code>DayOfMonth</code>).
-   *         This value is required for a monthly schedule.
-   *         You can't specify <code>DayOfWeek</code> with a weekly schedule.
-   *         You can't specify this value with a daily schedule.</p>
+   * <p>The frequency of the recurring charge.</p>
    */
-  OccurrenceUnit?: string;
+  Frequency?: RecurringChargeFrequency;
 }
 
 /**
  * @public
- * <p>Contains the parameters for DescribeScheduledInstanceAvailability.</p>
+ * @enum
  */
-export interface DescribeScheduledInstanceAvailabilityRequest {
-  /**
-   * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-   */
-  DryRun?: boolean;
-
-  /**
-   * @public
-   * <p>The filters.</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>availability-zone</code> - The Availability Zone (for example, <code>us-west-2a</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>instance-type</code> - The instance type (for example, <code>c4.large</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>platform</code> - The platform (<code>Linux/UNIX</code> or <code>Windows</code>).</p>
-   *             </li>
-   *          </ul>
-   */
-  Filters?: Filter[];
-
-  /**
-   * @public
-   * <p>The time period for the first schedule to start.</p>
-   */
-  FirstSlotStartTimeRange: SlotDateTimeRangeRequest | undefined;
-
-  /**
-   * @public
-   * <p>The maximum number of results to return in a single call.
-   *          This value can be between 5 and 300. The default value is 300.
-   *          To retrieve the remaining results, make another call with the returned
-   *          <code>NextToken</code> value.</p>
-   */
-  MaxResults?: number;
-
-  /**
-   * @public
-   * <p>The maximum available duration, in hours. This value must be greater than <code>MinSlotDurationInHours</code>
-   *          and less than 1,720.</p>
-   */
-  MaxSlotDurationInHours?: number;
+export const Scope = {
+  AVAILABILITY_ZONE: "Availability Zone",
+  REGIONAL: "Region",
+} as const;
 
-  /**
-   * @public
-   * <p>The minimum available duration, in hours. The minimum required duration is 1,200 hours per year. For example, the minimum daily schedule is 4 hours, the minimum weekly schedule is 24 hours, and the minimum monthly schedule is 100 hours.</p>
-   */
-  MinSlotDurationInHours?: number;
+/**
+ * @public
+ */
+export type Scope = (typeof Scope)[keyof typeof Scope];
 
-  /**
-   * @public
-   * <p>The token for the next set of results.</p>
-   */
-  NextToken?: string;
+/**
+ * @public
+ * @enum
+ */
+export const ReservedInstanceState = {
+  active: "active",
+  payment_failed: "payment-failed",
+  payment_pending: "payment-pending",
+  queued: "queued",
+  queued_deleted: "queued-deleted",
+  retired: "retired",
+} as const;
 
-  /**
-   * @public
-   * <p>The schedule recurrence.</p>
-   */
-  Recurrence: ScheduledInstanceRecurrenceRequest | undefined;
-}
+/**
+ * @public
+ */
+export type ReservedInstanceState = (typeof ReservedInstanceState)[keyof typeof ReservedInstanceState];
 
 /**
  * @public
- * <p>Describes the recurring schedule for a Scheduled Instance.</p>
+ * <p>Describes a Reserved Instance.</p>
  */
-export interface ScheduledInstanceRecurrence {
-  /**
-   * @public
-   * <p>The frequency (<code>Daily</code>, <code>Weekly</code>, or <code>Monthly</code>).</p>
-   */
-  Frequency?: string;
-
-  /**
-   * @public
-   * <p>The interval quantity. The interval unit depends on the value of <code>frequency</code>. For example, every 2
-   *          weeks or every 2 months.</p>
-   */
-  Interval?: number;
-
+export interface ReservedInstances {
   /**
    * @public
-   * <p>The days. For a monthly schedule, this is one or more days of the month (1-31). For a weekly schedule, this is one or more days of the week (1-7, where 1 is Sunday).</p>
+   * <p>The Availability Zone in which the Reserved Instance can be used.</p>
    */
-  OccurrenceDaySet?: number[];
+  AvailabilityZone?: string;
 
   /**
    * @public
-   * <p>Indicates whether the occurrence is relative to the end of the specified week or month.</p>
+   * <p>The duration of the Reserved Instance, in seconds.</p>
    */
-  OccurrenceRelativeToEnd?: boolean;
+  Duration?: number;
 
   /**
    * @public
-   * <p>The unit for <code>occurrenceDaySet</code> (<code>DayOfWeek</code> or <code>DayOfMonth</code>).</p>
+   * <p>The time when the Reserved Instance expires.</p>
    */
-  OccurrenceUnit?: string;
-}
+  End?: Date;
 
-/**
- * @public
- * <p>Describes a schedule that is available for your Scheduled Instances.</p>
- */
-export interface ScheduledInstanceAvailability {
   /**
    * @public
-   * <p>The Availability Zone.</p>
+   * <p>The purchase price of the Reserved Instance.</p>
    */
-  AvailabilityZone?: string;
+  FixedPrice?: number;
 
   /**
    * @public
-   * <p>The number of available instances.</p>
+   * <p>The number of reservations purchased.</p>
    */
-  AvailableInstanceCount?: number;
+  InstanceCount?: number;
 
   /**
    * @public
-   * <p>The time period for the first schedule to start.</p>
+   * <p>The instance type on which the Reserved Instance can be used.</p>
    */
-  FirstSlotStartTime?: Date;
+  InstanceType?: _InstanceType;
 
   /**
    * @public
-   * <p>The hourly price for a single instance.</p>
+   * <p>The Reserved Instance product platform description.</p>
    */
-  HourlyPrice?: string;
+  ProductDescription?: RIProductDescription;
 
   /**
    * @public
-   * <p>The instance type. You can specify one of the C3, C4, M4, or R3 instance types.</p>
+   * <p>The ID of the Reserved Instance.</p>
    */
-  InstanceType?: string;
+  ReservedInstancesId?: string;
 
   /**
    * @public
-   * <p>The maximum term. The only possible value is 365 days.</p>
+   * <p>The date and time the Reserved Instance started.</p>
    */
-  MaxTermDurationInDays?: number;
+  Start?: Date;
 
   /**
    * @public
-   * <p>The minimum term. The only possible value is 365 days.</p>
+   * <p>The state of the Reserved Instance purchase.</p>
    */
-  MinTermDurationInDays?: number;
+  State?: ReservedInstanceState;
 
   /**
    * @public
-   * <p>The network platform.</p>
+   * <p>The usage price of the Reserved Instance, per hour.</p>
    */
-  NetworkPlatform?: string;
+  UsagePrice?: number;
 
   /**
    * @public
-   * <p>The platform (<code>Linux/UNIX</code> or <code>Windows</code>).</p>
+   * <p>The currency of the Reserved Instance. It's specified using ISO 4217 standard currency codes.
+   * 				At this time, the only supported currency is <code>USD</code>.</p>
    */
-  Platform?: string;
+  CurrencyCode?: CurrencyCodeValues;
 
   /**
    * @public
-   * <p>The purchase token. This token expires in two hours.</p>
+   * <p>The tenancy of the instance.</p>
    */
-  PurchaseToken?: string;
+  InstanceTenancy?: Tenancy;
 
   /**
    * @public
-   * <p>The schedule recurrence.</p>
+   * <p>The offering class of the Reserved Instance.</p>
    */
-  Recurrence?: ScheduledInstanceRecurrence;
+  OfferingClass?: OfferingClassType;
 
   /**
    * @public
-   * <p>The number of hours in the schedule.</p>
+   * <p>The Reserved Instance offering type.</p>
    */
-  SlotDurationInHours?: number;
+  OfferingType?: OfferingTypeValues;
 
   /**
    * @public
-   * <p>The total number of hours for a single instance for the entire term.</p>
+   * <p>The recurring charge tag assigned to the resource.</p>
    */
-  TotalScheduledInstanceHours?: number;
-}
+  RecurringCharges?: RecurringCharge[];
 
-/**
- * @public
- * <p>Contains the output of DescribeScheduledInstanceAvailability.</p>
- */
-export interface DescribeScheduledInstanceAvailabilityResult {
   /**
    * @public
-   * <p>The token required to retrieve the next set of results. This value is <code>null</code> when there are no more results to return.</p>
+   * <p>The scope of the Reserved Instance.</p>
    */
-  NextToken?: string;
+  Scope?: Scope;
 
   /**
    * @public
-   * <p>Information about the available Scheduled Instances.</p>
+   * <p>Any tags assigned to the resource.</p>
    */
-  ScheduledInstanceAvailabilitySet?: ScheduledInstanceAvailability[];
+  Tags?: Tag[];
 }
 
 /**
  * @public
- * <p>Describes the time period for a Scheduled Instance to start its first schedule.</p>
+ * <p>Contains the output for DescribeReservedInstances.</p>
  */
-export interface SlotStartTimeRangeRequest {
-  /**
-   * @public
-   * <p>The earliest date and time, in UTC, for the Scheduled Instance to start.</p>
-   */
-  EarliestTime?: Date;
-
+export interface DescribeReservedInstancesResult {
   /**
    * @public
-   * <p>The latest date and time, in UTC, for the Scheduled Instance to start.</p>
+   * <p>A list of Reserved Instances.</p>
    */
-  LatestTime?: Date;
+  ReservedInstances?: ReservedInstances[];
 }
 
 /**
  * @public
- * <p>Contains the parameters for DescribeScheduledInstances.</p>
+ * <p>Contains the parameters for DescribeReservedInstancesListings.</p>
  */
-export interface DescribeScheduledInstancesRequest {
-  /**
-   * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-   */
-  DryRun?: boolean;
-
+export interface DescribeReservedInstancesListingsRequest {
   /**
    * @public
-   * <p>The filters.</p>
+   * <p>One or more filters.</p>
    *          <ul>
    *             <li>
    *                <p>
-   *                   <code>availability-zone</code> - The Availability Zone (for example, <code>us-west-2a</code>).</p>
+   *                   <code>reserved-instances-id</code> - The ID of the Reserved Instances.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>instance-type</code> - The instance type (for example, <code>c4.large</code>).</p>
+   *                   <code>reserved-instances-listing-id</code> - The ID of the Reserved Instances listing.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>platform</code> - The platform (<code>Linux/UNIX</code> or <code>Windows</code>).</p>
+   *                   <code>status</code> - The status of the Reserved Instance listing (<code>pending</code> | <code>active</code> |
+   *            <code>cancelled</code> | <code>closed</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>status-message</code> - The reason for the status.</p>
    *             </li>
    *          </ul>
    */
@@ -8923,401 +8506,319 @@ export interface DescribeScheduledInstancesRequest {
 
   /**
    * @public
-   * <p>The maximum number of results to return in a single call.
-   *          This value can be between 5 and 300. The default value is 100.
-   *          To retrieve the remaining results, make another call with the returned
-   *          <code>NextToken</code> value.</p>
-   */
-  MaxResults?: number;
-
-  /**
-   * @public
-   * <p>The token for the next set of results.</p>
-   */
-  NextToken?: string;
-
-  /**
-   * @public
-   * <p>The Scheduled Instance IDs.</p>
+   * <p>One or more Reserved Instance IDs.</p>
    */
-  ScheduledInstanceIds?: string[];
+  ReservedInstancesId?: string;
 
   /**
    * @public
-   * <p>The time period for the first schedule to start.</p>
+   * <p>One or more Reserved Instance listing IDs.</p>
    */
-  SlotStartTimeRange?: SlotStartTimeRangeRequest;
+  ReservedInstancesListingId?: string;
 }
 
 /**
  * @public
- * <p>Describes a Scheduled Instance.</p>
+ * <p>Contains the output of DescribeReservedInstancesListings.</p>
  */
-export interface ScheduledInstance {
-  /**
-   * @public
-   * <p>The Availability Zone.</p>
-   */
-  AvailabilityZone?: string;
-
-  /**
-   * @public
-   * <p>The date when the Scheduled Instance was purchased.</p>
-   */
-  CreateDate?: Date;
-
-  /**
-   * @public
-   * <p>The hourly price for a single instance.</p>
-   */
-  HourlyPrice?: string;
-
-  /**
-   * @public
-   * <p>The number of instances.</p>
-   */
-  InstanceCount?: number;
-
-  /**
-   * @public
-   * <p>The instance type.</p>
-   */
-  InstanceType?: string;
-
-  /**
-   * @public
-   * <p>The network platform.</p>
-   */
-  NetworkPlatform?: string;
-
+export interface DescribeReservedInstancesListingsResult {
   /**
    * @public
-   * <p>The time for the next schedule to start.</p>
+   * <p>Information about the Reserved Instance listing.</p>
    */
-  NextSlotStartTime?: Date;
+  ReservedInstancesListings?: ReservedInstancesListing[];
+}
 
+/**
+ * @public
+ * <p>Contains the parameters for DescribeReservedInstancesModifications.</p>
+ */
+export interface DescribeReservedInstancesModificationsRequest {
   /**
    * @public
-   * <p>The platform (<code>Linux/UNIX</code> or <code>Windows</code>).</p>
+   * <p>One or more filters.</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>client-token</code> - The idempotency token for the modification request.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>create-date</code> - The time when the modification request was created.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>effective-date</code> - The time when the modification becomes effective.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>modification-result.reserved-instances-id</code> - The ID for the Reserved Instances created as part of the modification request. This ID is only available when the status of the modification is <code>fulfilled</code>.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>modification-result.target-configuration.availability-zone</code> - The Availability Zone for the new Reserved Instances.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>modification-result.target-configuration.instance-count </code> - The number of new Reserved Instances.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>modification-result.target-configuration.instance-type</code> - The instance type of the new Reserved Instances.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>reserved-instances-id</code> - The ID of the Reserved Instances modified.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>reserved-instances-modification-id</code> - The ID of the modification request.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>status</code> - The status of the Reserved Instances modification request
+   *            (<code>processing</code> | <code>fulfilled</code> | <code>failed</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>status-message</code> - The reason for the status.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>update-date</code> - The time when the modification request was last updated.</p>
+   *             </li>
+   *          </ul>
    */
-  Platform?: string;
+  Filters?: Filter[];
 
   /**
    * @public
-   * <p>The time that the previous schedule ended or will end.</p>
+   * <p>IDs for the submitted modification request.</p>
    */
-  PreviousSlotEndTime?: Date;
+  ReservedInstancesModificationIds?: string[];
 
   /**
    * @public
-   * <p>The schedule recurrence.</p>
+   * <p>The token to retrieve the next page of results.</p>
    */
-  Recurrence?: ScheduledInstanceRecurrence;
+  NextToken?: string;
+}
 
+/**
+ * @public
+ * <p>Describes the configuration settings for the modified Reserved Instances.</p>
+ */
+export interface ReservedInstancesConfiguration {
   /**
    * @public
-   * <p>The Scheduled Instance ID.</p>
+   * <p>The Availability Zone for the modified Reserved Instances.</p>
    */
-  ScheduledInstanceId?: string;
+  AvailabilityZone?: string;
 
   /**
    * @public
-   * <p>The number of hours in the schedule.</p>
+   * <p>The number of modified Reserved Instances.</p>
+   *          <note>
+   *             <p>This is a required field for a request.</p>
+   *          </note>
    */
-  SlotDurationInHours?: number;
+  InstanceCount?: number;
 
   /**
    * @public
-   * <p>The end date for the Scheduled Instance.</p>
+   * <p>The instance type for the modified Reserved Instances.</p>
    */
-  TermEndDate?: Date;
+  InstanceType?: _InstanceType;
 
   /**
    * @public
-   * <p>The start date for the Scheduled Instance.</p>
+   * <p>The network platform of the modified Reserved Instances.</p>
    */
-  TermStartDate?: Date;
+  Platform?: string;
 
   /**
    * @public
-   * <p>The total number of hours for a single instance for the entire term.</p>
+   * <p>Whether the Reserved Instance is applied to instances in a Region or instances in a specific Availability Zone.</p>
    */
-  TotalScheduledInstanceHours?: number;
+  Scope?: Scope;
 }
 
 /**
  * @public
- * <p>Contains the output of DescribeScheduledInstances.</p>
+ * <p>Describes the modification request/s.</p>
  */
-export interface DescribeScheduledInstancesResult {
+export interface ReservedInstancesModificationResult {
   /**
    * @public
-   * <p>The token required to retrieve the next set of results. This value is <code>null</code> when there are no more results to return.</p>
+   * <p>The ID for the Reserved Instances that were created as part of the modification request. This field is only available when the modification is fulfilled.</p>
    */
-  NextToken?: string;
+  ReservedInstancesId?: string;
 
   /**
    * @public
-   * <p>Information about the Scheduled Instances.</p>
+   * <p>The target Reserved Instances configurations supplied as part of the modification request.</p>
    */
-  ScheduledInstanceSet?: ScheduledInstance[];
+  TargetConfiguration?: ReservedInstancesConfiguration;
 }
 
 /**
  * @public
+ * <p>Describes the ID of a Reserved Instance.</p>
  */
-export interface DescribeSecurityGroupReferencesRequest {
-  /**
-   * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-   */
-  DryRun?: boolean;
-
+export interface ReservedInstancesId {
   /**
    * @public
-   * <p>The IDs of the security groups in your account.</p>
+   * <p>The ID of the Reserved Instance.</p>
    */
-  GroupId: string[] | undefined;
+  ReservedInstancesId?: string;
 }
 
 /**
  * @public
- * <p>Describes a VPC with a security group that references your security group.</p>
+ * <p>Describes a Reserved Instance modification.</p>
  */
-export interface SecurityGroupReference {
+export interface ReservedInstancesModification {
   /**
    * @public
-   * <p>The ID of your security group.</p>
+   * <p>A unique, case-sensitive key supplied by the client to ensure that the request is idempotent.
+   * 			For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html">Ensuring
+   * 				Idempotency</a>.</p>
    */
-  GroupId?: string;
+  ClientToken?: string;
 
   /**
    * @public
-   * <p>The ID of the VPC with the referencing security group.</p>
+   * <p>The time when the modification request was created.</p>
    */
-  ReferencingVpcId?: string;
+  CreateDate?: Date;
 
   /**
    * @public
-   * <p>The ID of the VPC peering connection.</p>
+   * <p>The time for the modification to become effective.</p>
    */
-  VpcPeeringConnectionId?: string;
-}
+  EffectiveDate?: Date;
 
-/**
- * @public
- */
-export interface DescribeSecurityGroupReferencesResult {
   /**
    * @public
-   * <p>Information about the VPCs with the referencing security groups.</p>
+   * <p>Contains target configurations along with their corresponding new Reserved Instance IDs.</p>
    */
-  SecurityGroupReferenceSet?: SecurityGroupReference[];
-}
+  ModificationResults?: ReservedInstancesModificationResult[];
 
-/**
- * @public
- */
-export interface DescribeSecurityGroupRulesRequest {
   /**
    * @public
-   * <p>One or more filters.</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>group-id</code> - The ID of the security group.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>security-group-rule-id</code> - The ID of the security group rule.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>tag</code>:<key> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value.
-   *     For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
-   *             </li>
-   *          </ul>
+   * <p>The IDs of one or more Reserved Instances.</p>
    */
-  Filters?: Filter[];
+  ReservedInstancesIds?: ReservedInstancesId[];
 
   /**
    * @public
-   * <p>The IDs of the security group rules.</p>
+   * <p>A unique ID for the Reserved Instance modification.</p>
    */
-  SecurityGroupRuleIds?: string[];
+  ReservedInstancesModificationId?: string;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The status of the Reserved Instances modification request.</p>
    */
-  DryRun?: boolean;
+  Status?: string;
 
   /**
    * @public
-   * <p>The token returned from a previous paginated request.
-   *             Pagination continues from the end of the items returned by the previous request.</p>
+   * <p>The reason for the status.</p>
    */
-  NextToken?: string;
+  StatusMessage?: string;
 
   /**
    * @public
-   * <p>The maximum number of items to return for this request. To get the next page of
-   *             items, make another request with the token returned in the output. This value
-   *             can be between 5 and 1000. If this parameter is not specified, then all items are
-   *             returned. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
+   * <p>The time when the modification request was last updated.</p>
    */
-  MaxResults?: number;
+  UpdateDate?: Date;
 }
 
 /**
  * @public
+ * <p>Contains the output of DescribeReservedInstancesModifications.</p>
  */
-export interface DescribeSecurityGroupRulesResult {
+export interface DescribeReservedInstancesModificationsResult {
   /**
    * @public
-   * <p>Information about security group rules.</p>
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when
+   * 			there are no more results to return.</p>
    */
-  SecurityGroupRules?: SecurityGroupRule[];
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The token to include in another request to get the next page of items.
-   *             This value is <code>null</code> when there are no more items to return.</p>
+   * <p>The Reserved Instance modification information.</p>
    */
-  NextToken?: string;
+  ReservedInstancesModifications?: ReservedInstancesModification[];
 }
 
 /**
  * @public
+ * <p>Contains the parameters for DescribeReservedInstancesOfferings.</p>
  */
-export interface DescribeSecurityGroupsRequest {
+export interface DescribeReservedInstancesOfferingsRequest {
   /**
    * @public
-   * <p>The filters. If using multiple filters for rules, the results include security groups for which any combination of rules - not necessarily a single rule - match all filters.</p>
+   * <p>The Availability Zone in which the Reserved Instance can be used.</p>
+   */
+  AvailabilityZone?: string;
+
+  /**
+   * @public
+   * <p>One or more filters.</p>
    *          <ul>
    *             <li>
-   *                <p>
-   *                   <code>description</code> - The description of the security group.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>egress.ip-permission.cidr</code> - An IPv4 CIDR block for an outbound
-   *                     security group rule.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>egress.ip-permission.from-port</code> - For an outbound rule, the
-   *                     start of port range for the TCP and UDP protocols, or an ICMP type
-   *                     number.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>egress.ip-permission.group-id</code> - The ID of a security group
-   *                     that has been referenced in an outbound security group rule.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>egress.ip-permission.group-name</code> - The name of a security group
-   *                     that is referenced in an outbound security group rule.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>egress.ip-permission.ipv6-cidr</code> - An IPv6 CIDR block for an
-   *                     outbound security group rule.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>egress.ip-permission.prefix-list-id</code> - The ID of a prefix list to which a security group rule allows outbound access.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>egress.ip-permission.protocol</code> - The IP protocol for an
-   *                     outbound security group rule (<code>tcp</code> | <code>udp</code> |
-   *                         <code>icmp</code>, a protocol number, or -1 for all protocols).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>egress.ip-permission.to-port</code> - For an outbound rule, the end
-   *                     of port range for the TCP and UDP protocols, or an ICMP code.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>egress.ip-permission.user-id</code> - The ID of an Amazon Web Services account that
-   *                     has been referenced in an outbound security group rule.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>group-id</code> - The ID of the security group. </p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>group-name</code> - The name of the security group.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>ip-permission.cidr</code> - An IPv4 CIDR block for an inbound security
-   *                     group rule.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>ip-permission.from-port</code> - For an inbound rule, the start of port
-   *                     range for the TCP and UDP protocols, or an ICMP type number.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>ip-permission.group-id</code> - The ID of a security group that has been
-   *                     referenced in an inbound security group rule.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>ip-permission.group-name</code> - The name of a security group that is
-   *                     referenced in an inbound security group rule.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>ip-permission.ipv6-cidr</code> - An IPv6 CIDR block for an inbound security
-   *                     group rule.</p>
+   *                <p>
+   *                   <code>availability-zone</code> - The Availability Zone where the Reserved Instance can be
+   *           used.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>ip-permission.prefix-list-id</code> - The ID of a prefix list from which a security group rule allows inbound access.</p>
+   *                   <code>duration</code> - The duration of the Reserved Instance (for example, one year or
+   *           three years), in seconds (<code>31536000</code> | <code>94608000</code>).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>ip-permission.protocol</code> - The IP protocol for an inbound security
-   *                 group rule (<code>tcp</code> | <code>udp</code> | <code>icmp</code>, a
-   *                 protocol number, or -1 for all protocols).</p>
+   *                   <code>fixed-price</code> - The purchase price of the Reserved Instance (for example,
+   *           9800.0).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>ip-permission.to-port</code> - For an inbound rule, the end of port range
-   *                     for the TCP and UDP protocols, or an ICMP code.</p>
+   *                   <code>instance-type</code> - The instance type that is covered by the
+   *           reservation.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>ip-permission.user-id</code> - The ID of an Amazon Web Services account that has been
-   *                     referenced in an inbound security group rule.</p>
+   *                   <code>marketplace</code> - Set to <code>true</code> to show only Reserved Instance
+   *           Marketplace offerings. When this filter is not used, which is the default behavior, all
+   *           offerings from both Amazon Web Services and the Reserved Instance Marketplace are listed.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>owner-id</code> - The Amazon Web Services account ID of the owner of the security group.</p>
+   *                   <code>product-description</code> - The Reserved Instance product platform description
+   *           (<code>Linux/UNIX</code> | <code>Linux with SQL Server Standard</code> |
+   *           <code>Linux with SQL Server Web</code> | <code>Linux with SQL Server Enterprise</code> |
+   *           <code>SUSE Linux</code> |
+   *           <code>Red Hat Enterprise Linux</code> | <code>Red Hat Enterprise Linux with HA</code> |
+   *           <code>Windows</code> | <code>Windows with SQL Server Standard</code> |
+   *           <code>Windows with SQL Server Web</code> | <code>Windows with SQL Server Enterprise</code>).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>tag</code>:<key> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value.
-   *     For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
+   *                   <code>reserved-instances-offering-id</code> - The Reserved Instances offering
+   *           ID.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>tag-key</code> - The key of a tag assigned to the resource. Use this filter to find all resources assigned a tag with a specific key, regardless of the tag value.</p>
+   *                   <code>scope</code> - The scope of the Reserved Instance (<code>Availability Zone</code> or
+   *             <code>Region</code>).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>vpc-id</code> - The ID of the VPC specified when the security group was created.</p>
+   *                   <code>usage-price</code> - The usage price of the Reserved Instance, per hour (for
+   *           example, 0.84).</p>
    *             </li>
    *          </ul>
    */
@@ -9325,266 +8826,347 @@ export interface DescribeSecurityGroupsRequest {
 
   /**
    * @public
-   * <p>The IDs of the security groups. Required for security groups in a nondefault VPC.</p>
-   *          <p>Default: Describes all of your security groups.</p>
+   * <p>Include Reserved Instance Marketplace offerings in the response.</p>
    */
-  GroupIds?: string[];
+  IncludeMarketplace?: boolean;
 
   /**
    * @public
-   * <p>[Default VPC] The names of the security groups. You can specify either
-   * 			the security group name or the security group ID.</p>
-   *          <p>Default: Describes all of your security groups.</p>
+   * <p>The instance type that the reservation will cover (for example, <code>m1.small</code>). For more information, see
+   *        <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html">Instance types</a> in the
+   *       <i>Amazon EC2 User Guide</i>.</p>
    */
-  GroupNames?: string[];
+  InstanceType?: _InstanceType;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The maximum duration (in seconds) to filter when searching for offerings.</p>
+   *          <p>Default: 94608000 (3 years)</p>
    */
-  DryRun?: boolean;
+  MaxDuration?: number;
 
   /**
    * @public
-   * <p>The token returned from a previous paginated request.
-   *             Pagination continues from the end of the items returned by the previous request.</p>
+   * <p>The maximum number of instances to filter when searching for offerings.</p>
+   *          <p>Default: 20</p>
    */
-  NextToken?: string;
+  MaxInstanceCount?: number;
 
   /**
    * @public
-   * <p>The maximum number of items to return for this request. To get the next page of items,
-   *             make another request with the token returned in the output. This value can be between 5 and 1000.
-   *             If this parameter is not specified, then all items are returned. For more information, see
-   *             <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
+   * <p>The minimum duration (in seconds) to filter when searching for offerings.</p>
+   *          <p>Default: 2592000 (1 month)</p>
    */
-  MaxResults?: number;
-}
+  MinDuration?: number;
 
-/**
- * @public
- * <p>Describes a security group.</p>
- */
-export interface SecurityGroup {
   /**
    * @public
-   * <p>A description of the security group.</p>
+   * <p>The offering class of the Reserved Instance. Can be <code>standard</code> or <code>convertible</code>.</p>
    */
-  Description?: string;
+  OfferingClass?: OfferingClassType;
 
   /**
    * @public
-   * <p>The name of the security group.</p>
+   * <p>The Reserved Instance product platform description. Instances that include <code>(Amazon
+   *         VPC)</code> in the description are for use with Amazon VPC.</p>
    */
-  GroupName?: string;
+  ProductDescription?: RIProductDescription;
 
   /**
    * @public
-   * <p>The inbound rules associated with the security group.</p>
+   * <p>One or more Reserved Instances offering IDs.</p>
    */
-  IpPermissions?: IpPermission[];
+  ReservedInstancesOfferingIds?: string[];
 
   /**
    * @public
-   * <p>The Amazon Web Services account ID of the owner of the security group.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *        and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *        Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  OwnerId?: string;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The ID of the security group.</p>
+   * <p>The tenancy of the instances covered by the reservation. A Reserved Instance with a tenancy
+   *       of <code>dedicated</code> is applied to instances that run in a VPC on single-tenant hardware
+   *       (i.e., Dedicated Instances).</p>
+   *          <p>
+   *             <b>Important:</b> The <code>host</code> value cannot be used with this parameter. Use the <code>default</code> or <code>dedicated</code> values only.</p>
+   *          <p>Default: <code>default</code>
+   *          </p>
    */
-  GroupId?: string;
+  InstanceTenancy?: Tenancy;
 
   /**
    * @public
-   * <p>The outbound rules associated with the security group.</p>
+   * <p>The maximum number of results to return for the request in a single page. The remaining
+   * 			results of the initial request can be seen by sending another request with the returned
+   * 				<code>NextToken</code> value. The maximum is 100.</p>
+   *          <p>Default: 100</p>
    */
-  IpPermissionsEgress?: IpPermission[];
+  MaxResults?: number;
 
   /**
    * @public
-   * <p>Any tags assigned to the security group.</p>
+   * <p>The token to retrieve the next page of results.</p>
    */
-  Tags?: Tag[];
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The ID of the VPC for the security group.</p>
+   * <p>The Reserved Instance offering type. If you are using tools that predate the 2011-11-01 API
+   * 			version, you only have access to the <code>Medium Utilization</code> Reserved Instance
+   * 			offering type. </p>
    */
-  VpcId?: string;
+  OfferingType?: OfferingTypeValues;
 }
 
 /**
  * @public
+ * <p>Describes a Reserved Instance offering.</p>
  */
-export interface DescribeSecurityGroupsResult {
+export interface PricingDetail {
   /**
    * @public
-   * <p>Information about the security groups.</p>
+   * <p>The number of reservations available for the price.</p>
    */
-  SecurityGroups?: SecurityGroup[];
+  Count?: number;
 
   /**
    * @public
-   * <p>The token to include in another request to get the next page of items.
-   *             This value is <code>null</code> when there are no more items to return.</p>
+   * <p>The price per instance.</p>
    */
-  NextToken?: string;
+  Price?: number;
 }
 
 /**
  * @public
- * @enum
+ * <p>Describes a Reserved Instance offering.</p>
  */
-export const SnapshotAttributeName = {
-  createVolumePermission: "createVolumePermission",
-  productCodes: "productCodes",
-} as const;
+export interface ReservedInstancesOffering {
+  /**
+   * @public
+   * <p>The Availability Zone in which the Reserved Instance can be used.</p>
+   */
+  AvailabilityZone?: string;
 
-/**
- * @public
- */
-export type SnapshotAttributeName = (typeof SnapshotAttributeName)[keyof typeof SnapshotAttributeName];
+  /**
+   * @public
+   * <p>The duration of the Reserved Instance, in seconds.</p>
+   */
+  Duration?: number;
 
-/**
- * @public
- */
-export interface DescribeSnapshotAttributeRequest {
   /**
    * @public
-   * <p>The snapshot attribute you would like to view.</p>
+   * <p>The purchase price of the Reserved Instance.</p>
    */
-  Attribute: SnapshotAttributeName | undefined;
+  FixedPrice?: number;
 
   /**
    * @public
-   * <p>The ID of the EBS snapshot.</p>
+   * <p>The instance type on which the Reserved Instance can be used.</p>
    */
-  SnapshotId: string | undefined;
+  InstanceType?: _InstanceType;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The Reserved Instance product platform description.</p>
    */
-  DryRun?: boolean;
-}
+  ProductDescription?: RIProductDescription;
 
-/**
- * @public
- * <p>Describes the user or group to be added or removed from the list of create volume
- *       permissions for a volume.</p>
- */
-export interface CreateVolumePermission {
   /**
    * @public
-   * <p>The group to be added or removed. The possible value is <code>all</code>.</p>
+   * <p>The ID of the Reserved Instance offering. This is the offering ID used in <a>GetReservedInstancesExchangeQuote</a>
+   *      to confirm that an exchange can be made.</p>
    */
-  Group?: PermissionGroup;
+  ReservedInstancesOfferingId?: string;
 
   /**
    * @public
-   * <p>The ID of the Amazon Web Services account to be added or removed.</p>
+   * <p>The usage price of the Reserved Instance, per hour.</p>
    */
-  UserId?: string;
-}
+  UsagePrice?: number;
 
-/**
- * @public
- */
-export interface DescribeSnapshotAttributeResult {
   /**
    * @public
-   * <p>The users and groups that have the permissions for creating volumes from the
-   *       snapshot.</p>
+   * <p>The currency of the Reserved Instance offering you are purchasing. It's
+   * 				specified using ISO 4217 standard currency codes. At this time,
+   * 				the only supported currency is <code>USD</code>.</p>
    */
-  CreateVolumePermissions?: CreateVolumePermission[];
+  CurrencyCode?: CurrencyCodeValues;
 
   /**
    * @public
-   * <p>The product codes.</p>
+   * <p>The tenancy of the instance.</p>
+   */
+  InstanceTenancy?: Tenancy;
+
+  /**
+   * @public
+   * <p>Indicates whether the offering is available through the Reserved Instance Marketplace (resale) or Amazon Web Services.
+   *         If it's a Reserved Instance Marketplace offering, this is <code>true</code>.</p>
+   */
+  Marketplace?: boolean;
+
+  /**
+   * @public
+   * <p>If <code>convertible</code> it can be exchanged for Reserved Instances of
+   *       the same or higher monetary value, with different configurations. If <code>standard</code>, it is not
+   *       possible to perform an exchange.</p>
+   */
+  OfferingClass?: OfferingClassType;
+
+  /**
+   * @public
+   * <p>The Reserved Instance offering type.</p>
+   */
+  OfferingType?: OfferingTypeValues;
+
+  /**
+   * @public
+   * <p>The pricing details of the Reserved Instance offering.</p>
+   */
+  PricingDetails?: PricingDetail[];
+
+  /**
+   * @public
+   * <p>The recurring charge tag assigned to the resource.</p>
+   */
+  RecurringCharges?: RecurringCharge[];
+
+  /**
+   * @public
+   * <p>Whether the Reserved Instance is applied to instances in a Region or an Availability Zone.</p>
+   */
+  Scope?: Scope;
+}
+
+/**
+ * @public
+ * <p>Contains the output of DescribeReservedInstancesOfferings.</p>
+ */
+export interface DescribeReservedInstancesOfferingsResult {
+  /**
+   * @public
+   * <p>A list of Reserved Instances offerings.</p>
    */
-  ProductCodes?: ProductCode[];
+  ReservedInstancesOfferings?: ReservedInstancesOffering[];
 
   /**
    * @public
-   * <p>The ID of the EBS snapshot.</p>
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when
+   * 			there are no more results to return.</p>
    */
-  SnapshotId?: string;
+  NextToken?: string;
 }
 
 /**
  * @public
  */
-export interface DescribeSnapshotsRequest {
+export interface DescribeRouteTablesRequest {
   /**
    * @public
    * <p>The filters.</p>
    *          <ul>
    *             <li>
    *                <p>
-   *                   <code>description</code> - A description of the snapshot.</p>
+   *                   <code>association.route-table-association-id</code> - The ID of an association
+   *                     ID for the route table.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>encrypted</code> - Indicates whether the snapshot is encrypted
-   *             (<code>true</code> | <code>false</code>)</p>
+   *                   <code>association.route-table-id</code> - The ID of the route table involved in
+   *                     the association.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>owner-alias</code> - The owner alias, from an Amazon-maintained list
-   *           (<code>amazon</code>).
-   *           This is not the user-configured Amazon Web Services account alias set using the IAM console.
-   *           We recommend that you use the related parameter instead of this filter.</p>
+   *                   <code>association.subnet-id</code> - The ID of the subnet involved in the
+   *                     association.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>owner-id</code> - The Amazon Web Services account ID of the owner. We recommend that
-   *           you use the related parameter instead of this filter.</p>
+   *                   <code>association.main</code> - Indicates whether the route table is the main
+   *                     route table for the VPC (<code>true</code> | <code>false</code>). Route tables
+   *                     that do not have an association ID are not returned in the response.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>progress</code> - The progress of the snapshot, as a percentage (for example,
-   *           80%).</p>
+   *                   <code>owner-id</code> - The ID of the Amazon Web Services account that owns the route table.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>snapshot-id</code> - The snapshot ID.</p>
+   *                   <code>route-table-id</code> - The ID of the route table.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>start-time</code> - The time stamp when the snapshot was initiated.</p>
+   *                   <code>route.destination-cidr-block</code> - The IPv4 CIDR range specified in a
+   *                     route in the table.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>status</code> - The status of the snapshot (<code>pending</code> |
-   *             <code>completed</code> | <code>error</code>).</p>
+   *                   <code>route.destination-ipv6-cidr-block</code> - The IPv6 CIDR range specified in a route in the route table.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>storage-tier</code> - The storage tier of the snapshot (<code>archive</code> |
-   *           <code>standard</code>).</p>
+   *                   <code>route.destination-prefix-list-id</code> - The ID (prefix) of the Amazon Web Service
+   *                     specified in a route in the table.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>tag</code>:<key> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value.
-   *     For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
+   *                   <code>route.egress-only-internet-gateway-id</code> - The ID of an
+   *                     egress-only Internet gateway specified in a route in the route table.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>tag-key</code> - The key of a tag assigned to the resource. Use this filter to find all resources assigned a tag with a specific key, regardless of the tag value.</p>
+   *                   <code>route.gateway-id</code> - The ID of a gateway specified in a route in the table.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>volume-id</code> - The ID of the volume the snapshot is for.</p>
+   *                   <code>route.instance-id</code> - The ID of an instance specified in a route in the table.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>volume-size</code> - The size of the volume, in GiB.</p>
+   *                   <code>route.nat-gateway-id</code> - The ID of a NAT gateway.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>route.transit-gateway-id</code> - The ID of a transit gateway.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>route.origin</code> - Describes how the route was created.
+   *                         <code>CreateRouteTable</code> indicates that the route was automatically
+   *                     created when the route table was created; <code>CreateRoute</code> indicates
+   *                     that the route was manually added to the route table;
+   *                         <code>EnableVgwRoutePropagation</code> indicates that the route was
+   *                     propagated by route propagation.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>route.state</code> - The state of a route in the route table
+   *                         (<code>active</code> | <code>blackhole</code>). The blackhole state
+   *                     indicates that the route's target isn't available (for example, the specified
+   *                     gateway isn't attached to the VPC, the specified NAT instance has been
+   *                     terminated, and so on).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>route.vpc-peering-connection-id</code> - The ID of a VPC peering
+   * 		                connection specified in a route in the table.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>tag</code>:<key> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value.
+   *     For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>tag-key</code> - The key of a tag assigned to the resource. Use this filter to find all resources assigned a tag with a specific key, regardless of the tag value.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>vpc-id</code> - The ID of the VPC for the route table.</p>
    *             </li>
    *          </ul>
    */
@@ -9592,1982 +9174,1965 @@ export interface DescribeSnapshotsRequest {
 
   /**
    * @public
-   * <p>The maximum number of snapshots to return for this request.
-   *       This value can be between 5 and 1,000; if this value is larger than 1,000, only 1,000 results are returned.
-   *       If this parameter is not used, then the request returns all snapshots.
-   *       You cannot specify this parameter and the snapshot IDs parameter in the same request. For more information,
-   *       see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  MaxResults?: number;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The token returned from a previous paginated request.
-   *       Pagination continues from the end of the items returned by the previous request.</p>
+   * <p>The IDs of the route tables.</p>
+   *          <p>Default: Describes all your route tables.</p>
    */
-  NextToken?: string;
+  RouteTableIds?: string[];
 
   /**
    * @public
-   * <p>Scopes the results to snapshots with the specified owners. You can specify a combination of
-   *       Amazon Web Services account IDs, <code>self</code>, and <code>amazon</code>.</p>
+   * <p>The token returned from a previous paginated request. Pagination continues from the end of the items returned by the previous request.</p>
    */
-  OwnerIds?: string[];
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The IDs of the Amazon Web Services accounts that can create volumes from the snapshot.</p>
+   * <p>The maximum number of items to return for this request.
+   * 	To get the next page of items, make another request with the token returned in the output.
+   * 	For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
    */
-  RestorableByUserIds?: string[];
+  MaxResults?: number;
+}
 
+/**
+ * @public
+ * <p>Contains the output of DescribeRouteTables.</p>
+ */
+export interface DescribeRouteTablesResult {
   /**
    * @public
-   * <p>The snapshot IDs.</p>
-   *          <p>Default: Describes the snapshots for which you have create volume permissions.</p>
+   * <p>Information about one or more route tables.</p>
    */
-  SnapshotIds?: string[];
+  RouteTables?: RouteTable[];
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there are no more items to return.</p>
    */
-  DryRun?: boolean;
+  NextToken?: string;
 }
 
 /**
  * @public
+ * <p>Describes the time period for a Scheduled Instance to start its first schedule. The time period must span less than one day.</p>
  */
-export interface DescribeSnapshotsResult {
+export interface SlotDateTimeRangeRequest {
   /**
    * @public
-   * <p>Information about the snapshots.</p>
+   * <p>The earliest date and time, in UTC, for the Scheduled Instance to start.</p>
    */
-  Snapshots?: Snapshot[];
+  EarliestTime: Date | undefined;
 
   /**
    * @public
-   * <p>The token to include in another request to return the next page of snapshots.
-   *       This value is <code>null</code> when there are no more snapshots to return.</p>
+   * <p>The latest date and time, in UTC, for the Scheduled Instance to start. This value must be later than or equal to the earliest date and at most three months in the future.</p>
    */
-  NextToken?: string;
+  LatestTime: Date | undefined;
 }
 
 /**
  * @public
+ * <p>Describes the recurring schedule for a Scheduled Instance.</p>
  */
-export interface DescribeSnapshotTierStatusRequest {
+export interface ScheduledInstanceRecurrenceRequest {
   /**
    * @public
-   * <p>The filters.</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>snapshot-id</code> - The snapshot ID.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>volume-id</code> - The ID of the volume the snapshot is for.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>last-tiering-operation</code> - The state of the last archive or restore action. (<code>archival-in-progress</code> | <code>archival-completed</code> |
-   *           <code>archival-failed</code> | <code>permanent-restore-in-progress</code> | <code>permanent-restore-completed</code> | <code>permanent-restore-failed</code> |
-   * 		<code>temporary-restore-in-progress</code> | <code>temporary-restore-completed</code> | <code>temporary-restore-failed</code>)</p>
-   *             </li>
-   *          </ul>
+   * <p>The frequency (<code>Daily</code>, <code>Weekly</code>, or <code>Monthly</code>).</p>
    */
-  Filters?: Filter[];
+  Frequency?: string;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The interval quantity. The interval unit depends on the value of <code>Frequency</code>. For example, every 2
+   *          weeks or every 2 months.</p>
    */
-  DryRun?: boolean;
+  Interval?: number;
 
   /**
    * @public
-   * <p>The token returned from a previous paginated request.
-   *   Pagination continues from the end of the items returned by the previous request.</p>
+   * <p>The days. For a monthly schedule, this is one or more days of the month (1-31). For a weekly schedule, this is one or more days of the week (1-7, where 1 is Sunday). You can't specify this value with a daily schedule. If the occurrence is relative to the end of the month, you can specify only a single day.</p>
    */
-  NextToken?: string;
+  OccurrenceDays?: number[];
 
   /**
    * @public
-   * <p>The maximum number of items to return for this request.
-   * 	To get the next page of items, make another request with the token returned in the output.
-   * 	For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
+   * <p>Indicates whether the occurrence is relative to the end of the specified week or month. You can't specify this value with a daily schedule.</p>
    */
-  MaxResults?: number;
-}
+  OccurrenceRelativeToEnd?: boolean;
 
-/**
- * @public
- * @enum
- */
-export const TieringOperationStatus = {
-  archival_completed: "archival-completed",
-  archival_failed: "archival-failed",
-  archival_in_progress: "archival-in-progress",
-  permanent_restore_completed: "permanent-restore-completed",
-  permanent_restore_failed: "permanent-restore-failed",
-  permanent_restore_in_progress: "permanent-restore-in-progress",
-  temporary_restore_completed: "temporary-restore-completed",
-  temporary_restore_failed: "temporary-restore-failed",
-  temporary_restore_in_progress: "temporary-restore-in-progress",
-} as const;
+  /**
+   * @public
+   * <p>The unit for <code>OccurrenceDays</code> (<code>DayOfWeek</code> or <code>DayOfMonth</code>).
+   *         This value is required for a monthly schedule.
+   *         You can't specify <code>DayOfWeek</code> with a weekly schedule.
+   *         You can't specify this value with a daily schedule.</p>
+   */
+  OccurrenceUnit?: string;
+}
 
 /**
  * @public
+ * <p>Contains the parameters for DescribeScheduledInstanceAvailability.</p>
  */
-export type TieringOperationStatus = (typeof TieringOperationStatus)[keyof typeof TieringOperationStatus];
+export interface DescribeScheduledInstanceAvailabilityRequest {
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
 
-/**
- * @public
- * <p>Provides information about a snapshot's storage tier.</p>
- */
-export interface SnapshotTierStatus {
   /**
    * @public
-   * <p>The ID of the snapshot.</p>
+   * <p>The filters.</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>availability-zone</code> - The Availability Zone (for example, <code>us-west-2a</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>instance-type</code> - The instance type (for example, <code>c4.large</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>platform</code> - The platform (<code>Linux/UNIX</code> or <code>Windows</code>).</p>
+   *             </li>
+   *          </ul>
    */
-  SnapshotId?: string;
+  Filters?: Filter[];
 
   /**
    * @public
-   * <p>The ID of the volume from which the snapshot was created.</p>
+   * <p>The time period for the first schedule to start.</p>
    */
-  VolumeId?: string;
+  FirstSlotStartTimeRange: SlotDateTimeRangeRequest | undefined;
 
   /**
    * @public
-   * <p>The state of the snapshot.</p>
+   * <p>The maximum number of results to return in a single call.
+   *          This value can be between 5 and 300. The default value is 300.
+   *          To retrieve the remaining results, make another call with the returned
+   *          <code>NextToken</code> value.</p>
    */
-  Status?: SnapshotState;
+  MaxResults?: number;
 
   /**
    * @public
-   * <p>The ID of the Amazon Web Services account that owns the snapshot.</p>
+   * <p>The maximum available duration, in hours. This value must be greater than <code>MinSlotDurationInHours</code>
+   *          and less than 1,720.</p>
    */
-  OwnerId?: string;
+  MaxSlotDurationInHours?: number;
 
   /**
    * @public
-   * <p>The tags that are assigned to the snapshot.</p>
+   * <p>The minimum available duration, in hours. The minimum required duration is 1,200 hours per year. For example, the minimum daily schedule is 4 hours, the minimum weekly schedule is 24 hours, and the minimum monthly schedule is 100 hours.</p>
    */
-  Tags?: Tag[];
+  MinSlotDurationInHours?: number;
 
   /**
    * @public
-   * <p>The storage tier in which the snapshot is stored. <code>standard</code> indicates
-   *       that the snapshot is stored in the standard snapshot storage tier and that it is ready
-   *       for use. <code>archive</code> indicates that the snapshot is currently archived and that
-   *       it must be restored before it can be used.</p>
+   * <p>The token for the next set of results.</p>
    */
-  StorageTier?: StorageTier;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The date and time when the last archive or restore process was started.</p>
+   * <p>The schedule recurrence.</p>
    */
-  LastTieringStartTime?: Date;
+  Recurrence: ScheduledInstanceRecurrenceRequest | undefined;
+}
 
+/**
+ * @public
+ * <p>Describes the recurring schedule for a Scheduled Instance.</p>
+ */
+export interface ScheduledInstanceRecurrence {
   /**
    * @public
-   * <p>The progress of the last archive or restore process, as a percentage.</p>
+   * <p>The frequency (<code>Daily</code>, <code>Weekly</code>, or <code>Monthly</code>).</p>
    */
-  LastTieringProgress?: number;
+  Frequency?: string;
 
   /**
    * @public
-   * <p>The status of the last archive or restore process.</p>
+   * <p>The interval quantity. The interval unit depends on the value of <code>frequency</code>. For example, every 2
+   *          weeks or every 2 months.</p>
    */
-  LastTieringOperationStatus?: TieringOperationStatus;
+  Interval?: number;
 
   /**
    * @public
-   * <p>A message describing the status of the last archive or restore process.</p>
+   * <p>The days. For a monthly schedule, this is one or more days of the month (1-31). For a weekly schedule, this is one or more days of the week (1-7, where 1 is Sunday).</p>
    */
-  LastTieringOperationStatusDetail?: string;
+  OccurrenceDaySet?: number[];
 
   /**
    * @public
-   * <p>The date and time when the last archive process was completed.</p>
+   * <p>Indicates whether the occurrence is relative to the end of the specified week or month.</p>
    */
-  ArchivalCompleteTime?: Date;
+  OccurrenceRelativeToEnd?: boolean;
 
   /**
    * @public
-   * <p>Only for archived snapshots that are temporarily restored. Indicates the date and
-   *       time when a temporarily restored snapshot will be automatically re-archived.</p>
+   * <p>The unit for <code>occurrenceDaySet</code> (<code>DayOfWeek</code> or <code>DayOfMonth</code>).</p>
    */
-  RestoreExpiryTime?: Date;
+  OccurrenceUnit?: string;
 }
 
 /**
  * @public
+ * <p>Describes a schedule that is available for your Scheduled Instances.</p>
  */
-export interface DescribeSnapshotTierStatusResult {
+export interface ScheduledInstanceAvailability {
   /**
    * @public
-   * <p>Information about the snapshot's storage tier.</p>
+   * <p>The Availability Zone.</p>
    */
-  SnapshotTierStatuses?: SnapshotTierStatus[];
+  AvailabilityZone?: string;
 
   /**
    * @public
-   * <p>The token to include in another request to get the next page of items.
-   *   This value is <code>null</code> when there are no more items to return.</p>
+   * <p>The number of available instances.</p>
    */
-  NextToken?: string;
-}
+  AvailableInstanceCount?: number;
 
-/**
- * @public
- * <p>Contains the parameters for DescribeSpotDatafeedSubscription.</p>
- */
-export interface DescribeSpotDatafeedSubscriptionRequest {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually
-   *             making the request, and provides an error response. If you have the required
-   *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
-   *             <code>UnauthorizedOperation</code>.</p>
+   * <p>The time period for the first schedule to start.</p>
    */
-  DryRun?: boolean;
-}
+  FirstSlotStartTime?: Date;
 
-/**
- * @public
- * <p>Contains the output of DescribeSpotDatafeedSubscription.</p>
- */
-export interface DescribeSpotDatafeedSubscriptionResult {
   /**
    * @public
-   * <p>The Spot Instance data feed subscription.</p>
+   * <p>The hourly price for a single instance.</p>
    */
-  SpotDatafeedSubscription?: SpotDatafeedSubscription;
-}
+  HourlyPrice?: string;
 
-/**
- * @public
- * <p>Contains the parameters for DescribeSpotFleetInstances.</p>
- */
-export interface DescribeSpotFleetInstancesRequest {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually
-   *             making the request, and provides an error response. If you have the required
-   *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
-   *                 <code>UnauthorizedOperation</code>.</p>
+   * <p>The instance type. You can specify one of the C3, C4, M4, or R3 instance types.</p>
    */
-  DryRun?: boolean;
+  InstanceType?: string;
 
   /**
    * @public
-   * <p>The maximum number of items to return for this request.
-   *          To get the next page of items, make another request with the token returned in the output.
-   * 	        For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
+   * <p>The maximum term. The only possible value is 365 days.</p>
    */
-  MaxResults?: number;
+  MaxTermDurationInDays?: number;
 
   /**
    * @public
-   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there
-   *          are no more items to return.</p>
+   * <p>The minimum term. The only possible value is 365 days.</p>
    */
-  NextToken?: string;
+  MinTermDurationInDays?: number;
 
   /**
    * @public
-   * <p>The ID of the Spot Fleet request.</p>
+   * <p>The network platform.</p>
    */
-  SpotFleetRequestId: string | undefined;
-}
+  NetworkPlatform?: string;
 
-/**
- * @public
- * <p>Contains the output of DescribeSpotFleetInstances.</p>
- */
-export interface DescribeSpotFleetInstancesResponse {
   /**
    * @public
-   * <p>The running instances. This list is refreshed periodically and might be out of
-   *             date.</p>
+   * <p>The platform (<code>Linux/UNIX</code> or <code>Windows</code>).</p>
    */
-  ActiveInstances?: ActiveInstance[];
+  Platform?: string;
 
   /**
    * @public
-   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there
-   *          are no more items to return.</p>
+   * <p>The purchase token. This token expires in two hours.</p>
    */
-  NextToken?: string;
+  PurchaseToken?: string;
 
   /**
    * @public
-   * <p>The ID of the Spot Fleet request.</p>
+   * <p>The schedule recurrence.</p>
    */
-  SpotFleetRequestId?: string;
-}
-
-/**
- * @public
- * @enum
- */
-export const EventType = {
-  BATCH_CHANGE: "fleetRequestChange",
-  ERROR: "error",
-  INFORMATION: "information",
-  INSTANCE_CHANGE: "instanceChange",
-} as const;
-
-/**
- * @public
- */
-export type EventType = (typeof EventType)[keyof typeof EventType];
+  Recurrence?: ScheduledInstanceRecurrence;
 
-/**
- * @public
- * <p>Contains the parameters for DescribeSpotFleetRequestHistory.</p>
- */
-export interface DescribeSpotFleetRequestHistoryRequest {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually
-   *             making the request, and provides an error response. If you have the required
-   *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
-   *                 <code>UnauthorizedOperation</code>.</p>
+   * <p>The number of hours in the schedule.</p>
    */
-  DryRun?: boolean;
+  SlotDurationInHours?: number;
 
   /**
    * @public
-   * <p>The type of events to describe. By default, all events are described.</p>
+   * <p>The total number of hours for a single instance for the entire term.</p>
    */
-  EventType?: EventType;
+  TotalScheduledInstanceHours?: number;
+}
 
+/**
+ * @public
+ * <p>Contains the output of DescribeScheduledInstanceAvailability.</p>
+ */
+export interface DescribeScheduledInstanceAvailabilityResult {
   /**
    * @public
-   * <p>The maximum number of items to return for this request.
-   *          To get the next page of items, make another request with the token returned in the output.
-   * 	        For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
+   * <p>The token required to retrieve the next set of results. This value is <code>null</code> when there are no more results to return.</p>
    */
-  MaxResults?: number;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there
-   *          are no more items to return.</p>
+   * <p>Information about the available Scheduled Instances.</p>
    */
-  NextToken?: string;
+  ScheduledInstanceAvailabilitySet?: ScheduledInstanceAvailability[];
+}
 
+/**
+ * @public
+ * <p>Describes the time period for a Scheduled Instance to start its first schedule.</p>
+ */
+export interface SlotStartTimeRangeRequest {
   /**
    * @public
-   * <p>The ID of the Spot Fleet request.</p>
+   * <p>The earliest date and time, in UTC, for the Scheduled Instance to start.</p>
    */
-  SpotFleetRequestId: string | undefined;
+  EarliestTime?: Date;
 
   /**
    * @public
-   * <p>The starting date and time for the events, in UTC format (for example,
-   *                 <i>YYYY</i>-<i>MM</i>-<i>DD</i>T<i>HH</i>:<i>MM</i>:<i>SS</i>Z).</p>
+   * <p>The latest date and time, in UTC, for the Scheduled Instance to start.</p>
    */
-  StartTime: Date | undefined;
+  LatestTime?: Date;
 }
 
 /**
  * @public
- * <p>Describes an event in the history of the Spot Fleet request.</p>
+ * <p>Contains the parameters for DescribeScheduledInstances.</p>
  */
-export interface HistoryRecord {
+export interface DescribeScheduledInstancesRequest {
   /**
    * @public
-   * <p>Information about the event.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  EventInformation?: EventInformation;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The event type.</p>
+   * <p>The filters.</p>
    *          <ul>
    *             <li>
    *                <p>
-   *                   <code>error</code> - An error with the Spot Fleet request.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>fleetRequestChange</code> - A change in the status or configuration of
-   *                     the Spot Fleet request.</p>
+   *                   <code>availability-zone</code> - The Availability Zone (for example, <code>us-west-2a</code>).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>instanceChange</code> - An instance was launched or terminated.</p>
+   *                   <code>instance-type</code> - The instance type (for example, <code>c4.large</code>).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>Information</code> - An informational event.</p>
+   *                   <code>platform</code> - The platform (<code>Linux/UNIX</code> or <code>Windows</code>).</p>
    *             </li>
    *          </ul>
    */
-  EventType?: EventType;
-
-  /**
-   * @public
-   * <p>The date and time of the event, in UTC format (for example,
-   *                 <i>YYYY</i>-<i>MM</i>-<i>DD</i>T<i>HH</i>:<i>MM</i>:<i>SS</i>Z).</p>
-   */
-  Timestamp?: Date;
-}
-
-/**
- * @public
- * <p>Contains the output of DescribeSpotFleetRequestHistory.</p>
- */
-export interface DescribeSpotFleetRequestHistoryResponse {
-  /**
-   * @public
-   * <p>Information about the events in the history of the Spot Fleet request.</p>
-   */
-  HistoryRecords?: HistoryRecord[];
+  Filters?: Filter[];
 
   /**
    * @public
-   * <p>The last date and time for the events, in UTC format (for example,
-   *                 <i>YYYY</i>-<i>MM</i>-<i>DD</i>T<i>HH</i>:<i>MM</i>:<i>SS</i>Z).
-   *             All records up to this time were retrieved.</p>
-   *          <p>If <code>nextToken</code> indicates that there are more items, this value is not
-   *             present.</p>
+   * <p>The maximum number of results to return in a single call.
+   *          This value can be between 5 and 300. The default value is 100.
+   *          To retrieve the remaining results, make another call with the returned
+   *          <code>NextToken</code> value.</p>
    */
-  LastEvaluatedTime?: Date;
+  MaxResults?: number;
 
   /**
    * @public
-   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there
-   *          are no more items to return.</p>
+   * <p>The token for the next set of results.</p>
    */
   NextToken?: string;
 
   /**
    * @public
-   * <p>The ID of the Spot Fleet request.</p>
+   * <p>The Scheduled Instance IDs.</p>
    */
-  SpotFleetRequestId?: string;
+  ScheduledInstanceIds?: string[];
 
   /**
    * @public
-   * <p>The starting date and time for the events, in UTC format (for example,
-   *                 <i>YYYY</i>-<i>MM</i>-<i>DD</i>T<i>HH</i>:<i>MM</i>:<i>SS</i>Z).</p>
+   * <p>The time period for the first schedule to start.</p>
    */
-  StartTime?: Date;
+  SlotStartTimeRange?: SlotStartTimeRangeRequest;
 }
 
 /**
  * @public
- * <p>Contains the parameters for DescribeSpotFleetRequests.</p>
+ * <p>Describes a Scheduled Instance.</p>
  */
-export interface DescribeSpotFleetRequestsRequest {
+export interface ScheduledInstance {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually
-   *             making the request, and provides an error response. If you have the required
-   *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
-   *                 <code>UnauthorizedOperation</code>.</p>
+   * <p>The Availability Zone.</p>
    */
-  DryRun?: boolean;
+  AvailabilityZone?: string;
 
   /**
    * @public
-   * <p>The maximum number of items to return for this request.
-   *          To get the next page of items, make another request with the token returned in the output.
-   * 	        For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
+   * <p>The date when the Scheduled Instance was purchased.</p>
    */
-  MaxResults?: number;
+  CreateDate?: Date;
 
   /**
    * @public
-   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there
-   *          are no more items to return.</p>
+   * <p>The hourly price for a single instance.</p>
    */
-  NextToken?: string;
+  HourlyPrice?: string;
 
   /**
    * @public
-   * <p>The IDs of the Spot Fleet requests.</p>
+   * <p>The number of instances.</p>
    */
-  SpotFleetRequestIds?: string[];
-}
+  InstanceCount?: number;
 
-/**
- * @public
- * @enum
- */
-export const ExcessCapacityTerminationPolicy = {
-  DEFAULT: "default",
-  NO_TERMINATION: "noTermination",
-} as const;
+  /**
+   * @public
+   * <p>The instance type.</p>
+   */
+  InstanceType?: string;
 
-/**
- * @public
- */
-export type ExcessCapacityTerminationPolicy =
-  (typeof ExcessCapacityTerminationPolicy)[keyof typeof ExcessCapacityTerminationPolicy];
+  /**
+   * @public
+   * <p>The network platform.</p>
+   */
+  NetworkPlatform?: string;
 
-/**
- * @public
- * <p>Describes whether monitoring is enabled.</p>
- */
-export interface SpotFleetMonitoring {
   /**
    * @public
-   * <p>Enables monitoring for the instance.</p>
-   *          <p>Default: <code>false</code>
-   *          </p>
+   * <p>The time for the next schedule to start.</p>
    */
-  Enabled?: boolean;
-}
+  NextSlotStartTime?: Date;
 
-/**
- * @public
- * <p>Describes a network interface.</p>
- */
-export interface InstanceNetworkInterfaceSpecification {
   /**
    * @public
-   * <p>Indicates whether to assign a public IPv4 address to an instance you launch in a VPC. The
-   *             public IP address can only be assigned to a network interface for eth0, and can only be
-   *             assigned to a new network interface, not an existing one. You cannot specify more than one
-   *             network interface in the request. If launching into a default subnet, the default value is
-   *             <code>true</code>.</p>
+   * <p>The platform (<code>Linux/UNIX</code> or <code>Windows</code>).</p>
    */
-  AssociatePublicIpAddress?: boolean;
+  Platform?: string;
 
   /**
    * @public
-   * <p>If set to <code>true</code>, the interface is deleted when the instance is terminated. You can
-   *             specify <code>true</code> only if creating a new network interface when launching an
-   *             instance.</p>
+   * <p>The time that the previous schedule ended or will end.</p>
    */
-  DeleteOnTermination?: boolean;
+  PreviousSlotEndTime?: Date;
 
   /**
    * @public
-   * <p>The description of the network interface. Applies only if creating a network interface when launching an instance.</p>
+   * <p>The schedule recurrence.</p>
    */
-  Description?: string;
+  Recurrence?: ScheduledInstanceRecurrence;
 
   /**
    * @public
-   * <p>The position of the network interface in the attachment order.
-   *           A primary network interface has a device index of 0.</p>
-   *          <p>If you specify a network interface when launching an instance,
-   *           you must specify the device index.</p>
+   * <p>The Scheduled Instance ID.</p>
    */
-  DeviceIndex?: number;
+  ScheduledInstanceId?: string;
 
   /**
    * @public
-   * <p>The IDs of the security groups for the network interface. Applies only if creating a network interface when launching an instance.</p>
+   * <p>The number of hours in the schedule.</p>
    */
-  Groups?: string[];
+  SlotDurationInHours?: number;
 
   /**
    * @public
-   * <p>A number of IPv6 addresses to assign to the network interface. Amazon EC2 chooses
-   *             the IPv6 addresses from the range of the subnet. You cannot specify this option and the
-   *             option to assign specific IPv6 addresses in the same request. You can specify this
-   *             option if you've specified a minimum number of instances to launch.</p>
+   * <p>The end date for the Scheduled Instance.</p>
    */
-  Ipv6AddressCount?: number;
+  TermEndDate?: Date;
 
   /**
    * @public
-   * <p>The IPv6 addresses to assign to the network interface. You cannot specify
-   *             this option and the option to assign a number of IPv6 addresses in the same request. You
-   *             cannot specify this option if you've specified a minimum number of instances to
-   *             launch.</p>
+   * <p>The start date for the Scheduled Instance.</p>
    */
-  Ipv6Addresses?: InstanceIpv6Address[];
+  TermStartDate?: Date;
 
   /**
    * @public
-   * <p>The ID of the network interface.</p>
-   *          <p>If you are creating a Spot Fleet, omit this parameter because you can’t specify a network interface ID in a launch specification.</p>
+   * <p>The total number of hours for a single instance for the entire term.</p>
    */
-  NetworkInterfaceId?: string;
+  TotalScheduledInstanceHours?: number;
+}
 
+/**
+ * @public
+ * <p>Contains the output of DescribeScheduledInstances.</p>
+ */
+export interface DescribeScheduledInstancesResult {
   /**
    * @public
-   * <p>The private IPv4 address of the network interface. Applies only if creating a network interface when launching an instance. You cannot specify this option if you're launching
-   *         	more than one instance in a <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RunInstances.html">RunInstances</a> request.</p>
+   * <p>The token required to retrieve the next set of results. This value is <code>null</code> when there are no more results to return.</p>
    */
-  PrivateIpAddress?: string;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The private IPv4 addresses to assign to the network interface. Only one private IPv4 address can be designated as primary. You cannot specify this option if you're
-   *         	launching more than one instance in a <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RunInstances.html">RunInstances</a> request.</p>
+   * <p>Information about the Scheduled Instances.</p>
    */
-  PrivateIpAddresses?: PrivateIpAddressSpecification[];
+  ScheduledInstanceSet?: ScheduledInstance[];
+}
 
+/**
+ * @public
+ */
+export interface DescribeSecurityGroupReferencesRequest {
   /**
    * @public
-   * <p>The number of secondary private IPv4 addresses. You can't specify this option and specify more than one private IP address using the private IP addresses option. You cannot specify this option if you're
-   *         	launching more than one instance in a <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RunInstances.html">RunInstances</a> request.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  SecondaryPrivateIpAddressCount?: number;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The ID of the subnet associated with the network interface. Applies only if creating a network interface when launching an instance.</p>
+   * <p>The IDs of the security groups in your account.</p>
    */
-  SubnetId?: string;
+  GroupId: string[] | undefined;
+}
 
+/**
+ * @public
+ * <p>Describes a VPC with a security group that references your security group.</p>
+ */
+export interface SecurityGroupReference {
   /**
    * @public
-   * <p>Indicates whether to assign a carrier IP address to the network interface.</p>
-   *          <p>You can only assign a carrier IP address to a network interface that is in a subnet in
-   *             a Wavelength Zone. For more information about carrier IP addresses, see <a href="https://docs.aws.amazon.com/wavelength/latest/developerguide/how-wavelengths-work.html#provider-owned-ip">Carrier IP address</a> in the <i>Amazon Web Services Wavelength Developer
-   *                 Guide</i>.</p>
+   * <p>The ID of your security group.</p>
    */
-  AssociateCarrierIpAddress?: boolean;
+  GroupId?: string;
 
   /**
    * @public
-   * <p>The type of network interface.</p>
-   *          <p>Valid values: <code>interface</code> | <code>efa</code>
-   *          </p>
+   * <p>The ID of the VPC with the referencing security group.</p>
    */
-  InterfaceType?: string;
+  ReferencingVpcId?: string;
 
   /**
    * @public
-   * <p>The index of the network card. Some instance types support multiple network cards.
-   *             The primary network interface must be assigned to network card index 0.
-   *             The default is network card index 0.</p>
-   *          <p>If you are using <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RequestSpotInstances.html">RequestSpotInstances</a> to create Spot Instances, omit this parameter because
-   *             you can’t specify the network card index when using this API. To specify the network
-   *             card index, use <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RunInstances.html">RunInstances</a>.</p>
+   * <p>The ID of the VPC peering connection.</p>
    */
-  NetworkCardIndex?: number;
+  VpcPeeringConnectionId?: string;
+}
 
+/**
+ * @public
+ */
+export interface DescribeSecurityGroupReferencesResult {
   /**
    * @public
-   * <p>The IPv4 delegated prefixes to be assigned to the network interface. You cannot
-   *             use this option if you use the <code>Ipv4PrefixCount</code> option.</p>
+   * <p>Information about the VPCs with the referencing security groups.</p>
    */
-  Ipv4Prefixes?: Ipv4PrefixSpecificationRequest[];
+  SecurityGroupReferenceSet?: SecurityGroupReference[];
+}
 
+/**
+ * @public
+ */
+export interface DescribeSecurityGroupRulesRequest {
   /**
    * @public
-   * <p>The number of IPv4 delegated prefixes to be automatically assigned to the network interface.
-   *             You cannot use this option if you use the <code>Ipv4Prefix</code> option.</p>
+   * <p>One or more filters.</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>group-id</code> - The ID of the security group.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>security-group-rule-id</code> - The ID of the security group rule.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>tag</code>:<key> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value.
+   *     For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
+   *             </li>
+   *          </ul>
    */
-  Ipv4PrefixCount?: number;
+  Filters?: Filter[];
 
   /**
    * @public
-   * <p>The IPv6 delegated prefixes to be assigned to the network interface. You cannot
-   *             use this option if you use the <code>Ipv6PrefixCount</code> option.</p>
+   * <p>The IDs of the security group rules.</p>
    */
-  Ipv6Prefixes?: Ipv6PrefixSpecificationRequest[];
+  SecurityGroupRuleIds?: string[];
 
   /**
    * @public
-   * <p>The number of IPv6 delegated prefixes to be automatically assigned to the network interface.
-   *             You cannot use this option if you use the <code>Ipv6Prefix</code> option.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  Ipv6PrefixCount?: number;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The primary IPv6 address of the network interface. When you enable an IPv6 GUA address to be a primary IPv6, the first IPv6 GUA will be made the primary IPv6 address until the instance is terminated or the network interface is detached. For more information about primary IPv6 addresses, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RunInstances.html">RunInstances</a>.</p>
+   * <p>The token returned from a previous paginated request.
+   *             Pagination continues from the end of the items returned by the previous request.</p>
    */
-  PrimaryIpv6?: boolean;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>Specifies the ENA Express settings for the network interface that's attached to
-   * 			the instance.</p>
+   * <p>The maximum number of items to return for this request. To get the next page of
+   *             items, make another request with the token returned in the output. This value
+   *             can be between 5 and 1000. If this parameter is not specified, then all items are
+   *             returned. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
    */
-  EnaSrdSpecification?: EnaSrdSpecificationRequest;
+  MaxResults?: number;
 }
 
 /**
  * @public
- * <p>Describes Spot Instance placement.</p>
  */
-export interface SpotPlacement {
-  /**
-   * @public
-   * <p>The Availability Zone.</p>
-   *          <p>[Spot Fleet only] To specify multiple Availability Zones, separate them using commas;
-   *             for example, "us-west-2a, us-west-2b".</p>
-   */
-  AvailabilityZone?: string;
-
+export interface DescribeSecurityGroupRulesResult {
   /**
    * @public
-   * <p>The name of the placement group.</p>
+   * <p>Information about security group rules.</p>
    */
-  GroupName?: string;
+  SecurityGroupRules?: SecurityGroupRule[];
 
   /**
    * @public
-   * <p>The tenancy of the instance (if the instance is running in a VPC). An instance with a
-   *             tenancy of <code>dedicated</code> runs on single-tenant hardware. The <code>host</code>
-   *             tenancy is not supported for Spot Instances.</p>
+   * <p>The token to include in another request to get the next page of items.
+   *             This value is <code>null</code> when there are no more items to return.</p>
    */
-  Tenancy?: Tenancy;
+  NextToken?: string;
 }
 
 /**
  * @public
- * <p>The tags for a Spot Fleet resource.</p>
  */
-export interface SpotFleetTagSpecification {
+export interface DescribeSecurityGroupsRequest {
   /**
    * @public
-   * <p>The type of resource. Currently, the only resource type that is supported is
-   *                 <code>instance</code>. To tag the Spot Fleet request on creation, use the
-   *                 <code>TagSpecifications</code> parameter in <code>
-   *                <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_SpotFleetRequestConfigData.html">SpotFleetRequestConfigData</a>
-   *             </code>.</p>
+   * <p>The filters. If using multiple filters for rules, the results include security groups for which any combination of rules - not necessarily a single rule - match all filters.</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>description</code> - The description of the security group.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>egress.ip-permission.cidr</code> - An IPv4 CIDR block for an outbound
+   *                     security group rule.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>egress.ip-permission.from-port</code> - For an outbound rule, the
+   *                     start of port range for the TCP and UDP protocols, or an ICMP type
+   *                     number.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>egress.ip-permission.group-id</code> - The ID of a security group
+   *                     that has been referenced in an outbound security group rule.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>egress.ip-permission.group-name</code> - The name of a security group
+   *                     that is referenced in an outbound security group rule.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>egress.ip-permission.ipv6-cidr</code> - An IPv6 CIDR block for an
+   *                     outbound security group rule.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>egress.ip-permission.prefix-list-id</code> - The ID of a prefix list to which a security group rule allows outbound access.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>egress.ip-permission.protocol</code> - The IP protocol for an
+   *                     outbound security group rule (<code>tcp</code> | <code>udp</code> |
+   *                         <code>icmp</code>, a protocol number, or -1 for all protocols).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>egress.ip-permission.to-port</code> - For an outbound rule, the end
+   *                     of port range for the TCP and UDP protocols, or an ICMP code.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>egress.ip-permission.user-id</code> - The ID of an Amazon Web Services account that
+   *                     has been referenced in an outbound security group rule.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>group-id</code> - The ID of the security group. </p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>group-name</code> - The name of the security group.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>ip-permission.cidr</code> - An IPv4 CIDR block for an inbound security
+   *                     group rule.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>ip-permission.from-port</code> - For an inbound rule, the start of port
+   *                     range for the TCP and UDP protocols, or an ICMP type number.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>ip-permission.group-id</code> - The ID of a security group that has been
+   *                     referenced in an inbound security group rule.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>ip-permission.group-name</code> - The name of a security group that is
+   *                     referenced in an inbound security group rule.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>ip-permission.ipv6-cidr</code> - An IPv6 CIDR block for an inbound security
+   *                     group rule.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>ip-permission.prefix-list-id</code> - The ID of a prefix list from which a security group rule allows inbound access.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>ip-permission.protocol</code> - The IP protocol for an inbound security
+   *                 group rule (<code>tcp</code> | <code>udp</code> | <code>icmp</code>, a
+   *                 protocol number, or -1 for all protocols).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>ip-permission.to-port</code> - For an inbound rule, the end of port range
+   *                     for the TCP and UDP protocols, or an ICMP code.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>ip-permission.user-id</code> - The ID of an Amazon Web Services account that has been
+   *                     referenced in an inbound security group rule.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>owner-id</code> - The Amazon Web Services account ID of the owner of the security group.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>tag</code>:<key> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value.
+   *     For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>tag-key</code> - The key of a tag assigned to the resource. Use this filter to find all resources assigned a tag with a specific key, regardless of the tag value.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>vpc-id</code> - The ID of the VPC specified when the security group was created.</p>
+   *             </li>
+   *          </ul>
    */
-  ResourceType?: ResourceType;
+  Filters?: Filter[];
 
   /**
    * @public
-   * <p>The tags.</p>
+   * <p>The IDs of the security groups. Required for security groups in a nondefault VPC.</p>
+   *          <p>Default: Describes all of your security groups.</p>
    */
-  Tags?: Tag[];
-}
+  GroupIds?: string[];
 
-/**
- * @public
- * <p>Describes the launch specification for one or more Spot Instances. If you include
- *           On-Demand capacity in your fleet request or want to specify an EFA network device, you
- *           can't use <code>SpotFleetLaunchSpecification</code>; you must use <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_LaunchTemplateConfig.html">LaunchTemplateConfig</a>.</p>
- */
-export interface SpotFleetLaunchSpecification {
   /**
    * @public
-   * <p>The security groups.</p>
+   * <p>[Default VPC] The names of the security groups. You can specify either
+   * 			the security group name or the security group ID.</p>
+   *          <p>Default: Describes all of your security groups.</p>
    */
-  SecurityGroups?: GroupIdentifier[];
+  GroupNames?: string[];
 
   /**
    * @public
-   * <p>Deprecated.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  AddressingType?: string;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>One or more block devices that are mapped to the Spot Instances. You can't specify both
-   *             a snapshot ID and an encryption value. This is because only blank volumes can be
-   *             encrypted on creation. If a snapshot is the basis for a volume, it is not blank and its
-   *             encryption status is used for the volume encryption status.</p>
+   * <p>The token returned from a previous paginated request.
+   *             Pagination continues from the end of the items returned by the previous request.</p>
    */
-  BlockDeviceMappings?: BlockDeviceMapping[];
+  NextToken?: string;
 
   /**
    * @public
-   * <p>Indicates whether the instances are optimized for EBS I/O. This optimization provides dedicated throughput to Amazon EBS and an optimized configuration stack to provide optimal EBS I/O performance. This optimization isn't available with all instance types. Additional usage charges apply when using an EBS Optimized instance.</p>
-   *          <p>Default: <code>false</code>
-   *          </p>
+   * <p>The maximum number of items to return for this request. To get the next page of items,
+   *             make another request with the token returned in the output. This value can be between 5 and 1000.
+   *             If this parameter is not specified, then all items are returned. For more information, see
+   *             <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
    */
-  EbsOptimized?: boolean;
+  MaxResults?: number;
+}
 
+/**
+ * @public
+ * <p>Describes a security group.</p>
+ */
+export interface SecurityGroup {
   /**
    * @public
-   * <p>The IAM instance profile.</p>
+   * <p>A description of the security group.</p>
    */
-  IamInstanceProfile?: IamInstanceProfileSpecification;
+  Description?: string;
 
   /**
    * @public
-   * <p>The ID of the AMI.</p>
+   * <p>The name of the security group.</p>
    */
-  ImageId?: string;
+  GroupName?: string;
 
   /**
    * @public
-   * <p>The instance type.</p>
+   * <p>The inbound rules associated with the security group.</p>
    */
-  InstanceType?: _InstanceType;
+  IpPermissions?: IpPermission[];
 
   /**
    * @public
-   * <p>The ID of the kernel.</p>
+   * <p>The Amazon Web Services account ID of the owner of the security group.</p>
    */
-  KernelId?: string;
+  OwnerId?: string;
 
   /**
    * @public
-   * <p>The name of the key pair.</p>
+   * <p>The ID of the security group.</p>
    */
-  KeyName?: string;
+  GroupId?: string;
 
   /**
    * @public
-   * <p>Enable or disable monitoring for the instances.</p>
+   * <p>The outbound rules associated with the security group.</p>
    */
-  Monitoring?: SpotFleetMonitoring;
+  IpPermissionsEgress?: IpPermission[];
 
   /**
    * @public
-   * <p>One or more network interfaces. If you specify a network interface, you must specify
-   *           subnet IDs and security group IDs using the network interface.</p>
-   *          <note>
-   *             <p>
-   *                <code>SpotFleetLaunchSpecification</code> currently does not support Elastic Fabric Adapter (EFA). To specify an EFA, you must use <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_LaunchTemplateConfig.html">LaunchTemplateConfig</a>.</p>
-   *          </note>
+   * <p>Any tags assigned to the security group.</p>
    */
-  NetworkInterfaces?: InstanceNetworkInterfaceSpecification[];
+  Tags?: Tag[];
 
   /**
    * @public
-   * <p>The placement information.</p>
+   * <p>The ID of the VPC for the security group.</p>
    */
-  Placement?: SpotPlacement;
+  VpcId?: string;
+}
 
+/**
+ * @public
+ */
+export interface DescribeSecurityGroupsResult {
   /**
    * @public
-   * <p>The ID of the RAM disk. Some kernels require additional drivers at launch. Check the kernel
-   *           requirements for information about whether you need to specify a RAM disk. To find kernel
-   *           requirements, refer to the Amazon Web Services Resource Center and search for the kernel ID.</p>
+   * <p>Information about the security groups.</p>
    */
-  RamdiskId?: string;
+  SecurityGroups?: SecurityGroup[];
 
   /**
    * @public
-   * <p>The maximum price per unit hour that you are willing to pay for a Spot Instance. We do not recommend using this parameter because it can lead to
-   *           increased interruptions. If you do not specify this parameter, you will pay the current Spot price.</p>
-   *          <important>
-   *             <p>If you specify a maximum price, your instances will be interrupted more frequently than if you do not specify this parameter.</p>
-   *          </important>
+   * <p>The token to include in another request to get the next page of items.
+   *             This value is <code>null</code> when there are no more items to return.</p>
    */
-  SpotPrice?: string;
+  NextToken?: string;
+}
+
+/**
+ * @public
+ * @enum
+ */
+export const SnapshotAttributeName = {
+  createVolumePermission: "createVolumePermission",
+  productCodes: "productCodes",
+} as const;
+
+/**
+ * @public
+ */
+export type SnapshotAttributeName = (typeof SnapshotAttributeName)[keyof typeof SnapshotAttributeName];
 
+/**
+ * @public
+ */
+export interface DescribeSnapshotAttributeRequest {
   /**
    * @public
-   * <p>The IDs of the subnets in which to launch the instances. To specify multiple subnets, separate
-   *           them using commas; for example, "subnet-1234abcdeexample1, subnet-0987cdef6example2".</p>
+   * <p>The snapshot attribute you would like to view.</p>
    */
-  SubnetId?: string;
+  Attribute: SnapshotAttributeName | undefined;
 
   /**
    * @public
-   * <p>The base64-encoded user data that instances use when starting up. User data is limited to 16 KB.</p>
+   * <p>The ID of the EBS snapshot.</p>
    */
-  UserData?: string;
+  SnapshotId: string | undefined;
 
   /**
    * @public
-   * <p>The number of units provided by the specified instance type. These are the same units that you chose to set the target capacity in terms of instances, or a performance characteristic such as vCPUs, memory, or I/O.</p>
-   *          <p>If the target capacity divided by this value is not a whole number, Amazon EC2 rounds the number of instances to the next whole number. If this value is not specified, the default is 1.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  WeightedCapacity?: number;
+  DryRun?: boolean;
+}
 
+/**
+ * @public
+ * <p>Describes the user or group to be added or removed from the list of create volume
+ *       permissions for a volume.</p>
+ */
+export interface CreateVolumePermission {
   /**
    * @public
-   * <p>The tags to apply during creation.</p>
+   * <p>The group to be added or removed. The possible value is <code>all</code>.</p>
    */
-  TagSpecifications?: SpotFleetTagSpecification[];
+  Group?: PermissionGroup;
 
   /**
    * @public
-   * <p>The attributes for the instance types. When you specify instance attributes, Amazon EC2 will
-   *          identify instance types with those attributes.</p>
-   *          <note>
-   *             <p>If you specify <code>InstanceRequirements</code>, you can't specify
-   *             <code>InstanceType</code>.</p>
-   *          </note>
+   * <p>The ID of the Amazon Web Services account to be added or removed.</p>
    */
-  InstanceRequirements?: InstanceRequirements;
+  UserId?: string;
 }
 
 /**
  * @public
- * <p>Describes overrides for a launch template.</p>
  */
-export interface LaunchTemplateOverrides {
+export interface DescribeSnapshotAttributeResult {
   /**
    * @public
-   * <p>The instance type.</p>
+   * <p>The users and groups that have the permissions for creating volumes from the
+   *       snapshot.</p>
    */
-  InstanceType?: _InstanceType;
+  CreateVolumePermissions?: CreateVolumePermission[];
 
   /**
    * @public
-   * <p>The maximum price per unit hour that you are willing to pay for a Spot Instance. We do not recommend using this parameter because it can lead to
-   *          increased interruptions. If you do not specify this parameter, you will pay the current Spot price.</p>
-   *          <important>
-   *             <p>If you specify a maximum price, your instances will be interrupted more frequently than if you do not specify this parameter.</p>
-   *          </important>
+   * <p>The product codes.</p>
    */
-  SpotPrice?: string;
+  ProductCodes?: ProductCode[];
 
   /**
    * @public
-   * <p>The ID of the subnet in which to launch the instances.</p>
+   * <p>The ID of the EBS snapshot.</p>
    */
-  SubnetId?: string;
+  SnapshotId?: string;
+}
 
+/**
+ * @public
+ */
+export interface DescribeSnapshotsRequest {
   /**
    * @public
-   * <p>The Availability Zone in which to launch the instances.</p>
+   * <p>The filters.</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>description</code> - A description of the snapshot.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>encrypted</code> - Indicates whether the snapshot is encrypted
+   *             (<code>true</code> | <code>false</code>)</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>owner-alias</code> - The owner alias, from an Amazon-maintained list
+   *           (<code>amazon</code>).
+   *           This is not the user-configured Amazon Web Services account alias set using the IAM console.
+   *           We recommend that you use the related parameter instead of this filter.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>owner-id</code> - The Amazon Web Services account ID of the owner. We recommend that
+   *           you use the related parameter instead of this filter.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>progress</code> - The progress of the snapshot, as a percentage (for example,
+   *           80%).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>snapshot-id</code> - The snapshot ID.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>start-time</code> - The time stamp when the snapshot was initiated.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>status</code> - The status of the snapshot (<code>pending</code> |
+   *             <code>completed</code> | <code>error</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>storage-tier</code> - The storage tier of the snapshot (<code>archive</code> |
+   *           <code>standard</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>tag</code>:<key> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value.
+   *     For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>tag-key</code> - The key of a tag assigned to the resource. Use this filter to find all resources assigned a tag with a specific key, regardless of the tag value.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>volume-id</code> - The ID of the volume the snapshot is for.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>volume-size</code> - The size of the volume, in GiB.</p>
+   *             </li>
+   *          </ul>
    */
-  AvailabilityZone?: string;
+  Filters?: Filter[];
 
   /**
    * @public
-   * <p>The number of units provided by the specified instance type.</p>
+   * <p>The maximum number of snapshots to return for this request.
+   *       This value can be between 5 and 1,000; if this value is larger than 1,000, only 1,000 results are returned.
+   *       If this parameter is not used, then the request returns all snapshots.
+   *       You cannot specify this parameter and the snapshot IDs parameter in the same request. For more information,
+   *       see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
    */
-  WeightedCapacity?: number;
+  MaxResults?: number;
 
   /**
    * @public
-   * <p>The priority for the launch template override. The highest priority is launched
-   *          first.</p>
-   *          <p>If <code>OnDemandAllocationStrategy</code> is set to <code>prioritized</code>, Spot Fleet
-   *          uses priority to determine which launch template override to use first in fulfilling
-   *          On-Demand capacity.</p>
-   *          <p>If the Spot <code>AllocationStrategy</code> is set to
-   *          <code>capacityOptimizedPrioritized</code>, Spot Fleet uses priority on a best-effort basis
-   *          to determine which launch template override to use in fulfilling Spot capacity, but
-   *          optimizes for capacity first.</p>
-   *          <p>Valid values are whole numbers starting at <code>0</code>. The lower the number, the
-   *          higher the priority. If no number is set, the launch template override has the lowest
-   *          priority. You can set the same priority for different launch template overrides.</p>
+   * <p>The token returned from a previous paginated request.
+   *       Pagination continues from the end of the items returned by the previous request.</p>
    */
-  Priority?: number;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The instance requirements. When you specify instance requirements, Amazon EC2 will identify
-   *          instance types with the provided requirements, and then use your On-Demand and Spot
-   *          allocation strategies to launch instances from these instance types, in the same way as
-   *          when you specify a list of instance types.</p>
-   *          <note>
-   *             <p>If you specify <code>InstanceRequirements</code>, you can't specify
-   *             <code>InstanceType</code>.</p>
-   *          </note>
+   * <p>Scopes the results to snapshots with the specified owners. You can specify a combination of
+   *       Amazon Web Services account IDs, <code>self</code>, and <code>amazon</code>.</p>
    */
-  InstanceRequirements?: InstanceRequirements;
-}
+  OwnerIds?: string[];
 
-/**
- * @public
- * <p>Describes a launch template and overrides.</p>
- */
-export interface LaunchTemplateConfig {
   /**
    * @public
-   * <p>The launch template to use. Make sure that the launch template does not contain the
-   *             <code>NetworkInterfaceId</code> parameter because you can't specify a network interface
-   *          ID in a Spot Fleet.</p>
+   * <p>The IDs of the Amazon Web Services accounts that can create volumes from the snapshot.</p>
    */
-  LaunchTemplateSpecification?: FleetLaunchTemplateSpecification;
+  RestorableByUserIds?: string[];
 
   /**
    * @public
-   * <p>Any parameters that you specify override the same parameters in the launch
-   *          template.</p>
+   * <p>The snapshot IDs.</p>
+   *          <p>Default: Describes the snapshots for which you have create volume permissions.</p>
    */
-  Overrides?: LaunchTemplateOverrides[];
-}
+  SnapshotIds?: string[];
 
-/**
- * @public
- * <p>Describes a Classic Load Balancer.</p>
- */
-export interface ClassicLoadBalancer {
   /**
    * @public
-   * <p>The name of the load balancer.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  Name?: string;
+  DryRun?: boolean;
 }
 
 /**
  * @public
- * <p>Describes the Classic Load Balancers to attach to a Spot Fleet. Spot Fleet registers
- *             the running Spot Instances with these Classic Load Balancers.</p>
  */
-export interface ClassicLoadBalancersConfig {
+export interface DescribeSnapshotsResult {
   /**
    * @public
-   * <p>One or more Classic Load Balancers.</p>
+   * <p>Information about the snapshots.</p>
    */
-  ClassicLoadBalancers?: ClassicLoadBalancer[];
-}
+  Snapshots?: Snapshot[];
 
-/**
- * @public
- * <p>Describes a load balancer target group.</p>
- */
-export interface TargetGroup {
   /**
    * @public
-   * <p>The Amazon Resource Name (ARN) of the target group.</p>
+   * <p>The token to include in another request to return the next page of snapshots.
+   *       This value is <code>null</code> when there are no more snapshots to return.</p>
    */
-  Arn?: string;
+  NextToken?: string;
 }
 
 /**
  * @public
- * <p>Describes the target groups to attach to a Spot Fleet. Spot Fleet registers the
- *             running Spot Instances with these target groups.</p>
  */
-export interface TargetGroupsConfig {
+export interface DescribeSnapshotTierStatusRequest {
   /**
    * @public
-   * <p>One or more target groups.</p>
+   * <p>The filters.</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>snapshot-id</code> - The snapshot ID.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>volume-id</code> - The ID of the volume the snapshot is for.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>last-tiering-operation</code> - The state of the last archive or restore action. (<code>archival-in-progress</code> | <code>archival-completed</code> |
+   *           <code>archival-failed</code> | <code>permanent-restore-in-progress</code> | <code>permanent-restore-completed</code> | <code>permanent-restore-failed</code> |
+   * 		<code>temporary-restore-in-progress</code> | <code>temporary-restore-completed</code> | <code>temporary-restore-failed</code>)</p>
+   *             </li>
+   *          </ul>
    */
-  TargetGroups?: TargetGroup[];
-}
+  Filters?: Filter[];
+
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
 
-/**
- * @public
- * <p>Describes the Classic Load Balancers and target groups to attach to a Spot Fleet
- *             request.</p>
- */
-export interface LoadBalancersConfig {
   /**
    * @public
-   * <p>The Classic Load Balancers.</p>
+   * <p>The token returned from a previous paginated request.
+   *   Pagination continues from the end of the items returned by the previous request.</p>
    */
-  ClassicLoadBalancersConfig?: ClassicLoadBalancersConfig;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The target groups.</p>
+   * <p>The maximum number of items to return for this request.
+   * 	To get the next page of items, make another request with the token returned in the output.
+   * 	For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
    */
-  TargetGroupsConfig?: TargetGroupsConfig;
+  MaxResults?: number;
 }
 
 /**
  * @public
  * @enum
  */
-export const OnDemandAllocationStrategy = {
-  LOWEST_PRICE: "lowestPrice",
-  PRIORITIZED: "prioritized",
+export const TieringOperationStatus = {
+  archival_completed: "archival-completed",
+  archival_failed: "archival-failed",
+  archival_in_progress: "archival-in-progress",
+  permanent_restore_completed: "permanent-restore-completed",
+  permanent_restore_failed: "permanent-restore-failed",
+  permanent_restore_in_progress: "permanent-restore-in-progress",
+  temporary_restore_completed: "temporary-restore-completed",
+  temporary_restore_failed: "temporary-restore-failed",
+  temporary_restore_in_progress: "temporary-restore-in-progress",
 } as const;
 
 /**
  * @public
  */
-export type OnDemandAllocationStrategy = (typeof OnDemandAllocationStrategy)[keyof typeof OnDemandAllocationStrategy];
+export type TieringOperationStatus = (typeof TieringOperationStatus)[keyof typeof TieringOperationStatus];
 
 /**
  * @public
- * @enum
+ * <p>Provides information about a snapshot's storage tier.</p>
  */
-export const ReplacementStrategy = {
-  LAUNCH: "launch",
-  LAUNCH_BEFORE_TERMINATE: "launch-before-terminate",
-} as const;
+export interface SnapshotTierStatus {
+  /**
+   * @public
+   * <p>The ID of the snapshot.</p>
+   */
+  SnapshotId?: string;
 
-/**
- * @public
- */
-export type ReplacementStrategy = (typeof ReplacementStrategy)[keyof typeof ReplacementStrategy];
+  /**
+   * @public
+   * <p>The ID of the volume from which the snapshot was created.</p>
+   */
+  VolumeId?: string;
 
-/**
- * @public
- * <p>The Spot Instance replacement strategy to use when Amazon EC2 emits a signal that your
- *             Spot Instance is at an elevated risk of being interrupted. For more information, see
- *                 <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/spot-fleet-capacity-rebalance.html">Capacity rebalancing</a> in the <i>Amazon EC2 User Guide for Linux Instances</i>.</p>
- */
-export interface SpotCapacityRebalance {
   /**
    * @public
-   * <p>The replacement strategy to use. Only available for fleets of type
-   *             <code>maintain</code>.</p>
-   *          <p>
-   *             <code>launch</code> - Spot Fleet launches a new replacement Spot Instance when a
-   *             rebalance notification is emitted for an existing Spot Instance in the fleet. Spot Fleet
-   *             does not terminate the instances that receive a rebalance notification. You can
-   *             terminate the old instances, or you can leave them running. You are charged for all
-   *             instances while they are running. </p>
-   *          <p>
-   *             <code>launch-before-terminate</code> - Spot Fleet launches a new replacement Spot
-   *             Instance when a rebalance notification is emitted for an existing Spot Instance in the
-   *             fleet, and then, after a delay that you specify (in <code>TerminationDelay</code>),
-   *             terminates the instances that received a rebalance notification.</p>
+   * <p>The state of the snapshot.</p>
    */
-  ReplacementStrategy?: ReplacementStrategy;
+  Status?: SnapshotState;
 
   /**
    * @public
-   * <p>The amount of time (in seconds) that Amazon EC2 waits before terminating the old Spot
-   *             Instance after launching a new replacement Spot Instance.</p>
-   *          <p>Required when <code>ReplacementStrategy</code> is set to <code>launch-before-terminate</code>.</p>
-   *          <p>Not valid when <code>ReplacementStrategy</code> is set to <code>launch</code>.</p>
-   *          <p>Valid values: Minimum value of <code>120</code> seconds. Maximum value of <code>7200</code> seconds.</p>
+   * <p>The ID of the Amazon Web Services account that owns the snapshot.</p>
    */
-  TerminationDelay?: number;
-}
+  OwnerId?: string;
 
-/**
- * @public
- * <p>The strategies for managing your Spot Instances that are at an elevated risk of being
- *             interrupted.</p>
- */
-export interface SpotMaintenanceStrategies {
   /**
    * @public
-   * <p>The Spot Instance replacement strategy to use when Amazon EC2 emits a signal that your
-   *             Spot Instance is at an elevated risk of being interrupted. For more information, see
-   *             <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/spot-fleet-capacity-rebalance.html">Capacity rebalancing</a> in the <i>Amazon EC2 User Guide for Linux Instances</i>.</p>
+   * <p>The tags that are assigned to the snapshot.</p>
    */
-  CapacityRebalance?: SpotCapacityRebalance;
-}
+  Tags?: Tag[];
 
-/**
- * @public
- * <p>Describes the configuration of a Spot Fleet request.</p>
- */
-export interface SpotFleetRequestConfigData {
   /**
    * @public
-   * <p>The strategy that determines how to allocate the target Spot Instance capacity across the Spot Instance
-   *             pools specified by the Spot Fleet launch configuration. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/spot-fleet-allocation-strategy.html">Allocation
-   *                 strategies for Spot Instances</a> in the <i>Amazon EC2 User Guide</i>.</p>
-   *          <dl>
-   *             <dt>priceCapacityOptimized (recommended)</dt>
-   *             <dd>
-   *                <p>Spot Fleet identifies the pools with
-   *                    the highest capacity availability for the number of instances that are launching. This means
-   *                    that we will request Spot Instances from the pools that we believe have the lowest chance of interruption
-   *                    in the near term. Spot Fleet then requests Spot Instances from the lowest priced of these pools.</p>
-   *             </dd>
-   *             <dt>capacityOptimized</dt>
-   *             <dd>
-   *                <p>Spot Fleet identifies the pools with
-   *                    the highest capacity availability for the number of instances that are launching. This means
-   *                    that we will request Spot Instances from the pools that we believe have the lowest chance of interruption
-   *                    in the near term. To give certain
-   *           instance types a higher chance of launching first, use
-   *           <code>capacityOptimizedPrioritized</code>. Set a priority for each instance type by
-   *           using the <code>Priority</code> parameter for <code>LaunchTemplateOverrides</code>. You can
-   *           assign the same priority to different <code>LaunchTemplateOverrides</code>. EC2 implements
-   *           the priorities on a best-effort basis, but optimizes for capacity first.
-   *           <code>capacityOptimizedPrioritized</code> is supported only if your Spot Fleet uses a
-   *           launch template. Note that if the <code>OnDemandAllocationStrategy</code> is set to
-   *           <code>prioritized</code>, the same priority is applied when fulfilling On-Demand
-   *           capacity.</p>
-   *             </dd>
-   *             <dt>diversified</dt>
-   *             <dd>
-   *                <p>Spot Fleet requests instances from all of the Spot Instance pools that you
-   *           specify.</p>
-   *             </dd>
-   *             <dt>lowestPrice</dt>
-   *             <dd>
-   *                <p>Spot Fleet requests instances from the lowest priced Spot Instance pool that
-   *           has available capacity. If the lowest priced pool doesn't have available capacity, the Spot Instances
-   *           come from the next lowest priced pool that has available capacity. If a pool runs out of
-   *           capacity before fulfilling your desired capacity, Spot Fleet will continue to fulfill your
-   *           request by drawing from the next lowest priced pool. To ensure that your desired capacity is
-   *           met, you might receive Spot Instances from several pools. Because this strategy only considers instance
-   *           price and not capacity availability, it might lead to high interruption rates.</p>
-   *             </dd>
-   *          </dl>
-   *          <p>Default: <code>lowestPrice</code>
-   *          </p>
+   * <p>The storage tier in which the snapshot is stored. <code>standard</code> indicates
+   *       that the snapshot is stored in the standard snapshot storage tier and that it is ready
+   *       for use. <code>archive</code> indicates that the snapshot is currently archived and that
+   *       it must be restored before it can be used.</p>
    */
-  AllocationStrategy?: AllocationStrategy;
+  StorageTier?: StorageTier;
 
   /**
    * @public
-   * <p>The order of the launch template overrides to use in fulfilling On-Demand capacity. If
-   *             you specify <code>lowestPrice</code>, Spot Fleet uses price to determine the order, launching
-   *             the lowest price first. If you specify <code>prioritized</code>, Spot Fleet uses the priority
-   *             that you assign to each Spot Fleet launch template override, launching the highest priority
-   *             first. If you do not specify a value, Spot Fleet defaults to <code>lowestPrice</code>.</p>
+   * <p>The date and time when the last archive or restore process was started.</p>
    */
-  OnDemandAllocationStrategy?: OnDemandAllocationStrategy;
+  LastTieringStartTime?: Date;
 
   /**
    * @public
-   * <p>The strategies for managing your Spot Instances that are at an elevated risk of being
-   *             interrupted.</p>
+   * <p>The progress of the last archive or restore process, as a percentage.</p>
    */
-  SpotMaintenanceStrategies?: SpotMaintenanceStrategies;
+  LastTieringProgress?: number;
 
   /**
    * @public
-   * <p>A unique, case-sensitive identifier that you provide to ensure the idempotency of your
-   *             listings. This helps to avoid duplicate listings. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html">Ensuring Idempotency</a>.</p>
+   * <p>The status of the last archive or restore process.</p>
    */
-  ClientToken?: string;
+  LastTieringOperationStatus?: TieringOperationStatus;
 
   /**
    * @public
-   * <p>Indicates whether running instances should be terminated if you decrease the
-   *             target capacity of the Spot Fleet request below the current size of the Spot Fleet.</p>
-   *          <p>Supported only for fleets of type <code>maintain</code>.</p>
+   * <p>A message describing the status of the last archive or restore process.</p>
    */
-  ExcessCapacityTerminationPolicy?: ExcessCapacityTerminationPolicy;
+  LastTieringOperationStatusDetail?: string;
 
   /**
    * @public
-   * <p>The number of units fulfilled by this request compared to the set target capacity. You
-   *             cannot set this value.</p>
+   * <p>The date and time when the last archive process was completed.</p>
    */
-  FulfilledCapacity?: number;
+  ArchivalCompleteTime?: Date;
 
   /**
    * @public
-   * <p>The number of On-Demand units fulfilled by this request compared to the set target
-   *             On-Demand capacity.</p>
+   * <p>Only for archived snapshots that are temporarily restored. Indicates the date and
+   *       time when a temporarily restored snapshot will be automatically re-archived.</p>
    */
-  OnDemandFulfilledCapacity?: number;
+  RestoreExpiryTime?: Date;
+}
+
+/**
+ * @public
+ */
+export interface DescribeSnapshotTierStatusResult {
+  /**
+   * @public
+   * <p>Information about the snapshot's storage tier.</p>
+   */
+  SnapshotTierStatuses?: SnapshotTierStatus[];
 
   /**
    * @public
-   * <p>The Amazon Resource Name (ARN) of an Identity and Access Management (IAM) role that
-   *             grants the Spot Fleet the permission to request, launch, terminate, and tag instances on
-   *             your behalf. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/spot-fleet-requests.html#spot-fleet-prerequisites">Spot
-   *                 Fleet prerequisites</a> in the <i>Amazon EC2 User Guide</i>. Spot Fleet
-   *             can terminate Spot Instances on your behalf when you cancel its Spot Fleet request using
-   *                 <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CancelSpotFleetRequests">CancelSpotFleetRequests</a> or when the Spot Fleet request expires, if you set
-   *                 <code>TerminateInstancesWithExpiration</code>.</p>
+   * <p>The token to include in another request to get the next page of items.
+   *   This value is <code>null</code> when there are no more items to return.</p>
    */
-  IamFleetRole: string | undefined;
+  NextToken?: string;
+}
 
+/**
+ * @public
+ * <p>Contains the parameters for DescribeSpotDatafeedSubscription.</p>
+ */
+export interface DescribeSpotDatafeedSubscriptionRequest {
   /**
    * @public
-   * <p>The launch specifications for the Spot Fleet request. If you specify
-   *                 <code>LaunchSpecifications</code>, you can't specify
-   *                 <code>LaunchTemplateConfigs</code>. If you include On-Demand capacity in your
-   *             request, you must use <code>LaunchTemplateConfigs</code>.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually
+   *             making the request, and provides an error response. If you have the required
+   *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
+   *             <code>UnauthorizedOperation</code>.</p>
    */
-  LaunchSpecifications?: SpotFleetLaunchSpecification[];
+  DryRun?: boolean;
+}
 
+/**
+ * @public
+ * <p>Contains the output of DescribeSpotDatafeedSubscription.</p>
+ */
+export interface DescribeSpotDatafeedSubscriptionResult {
   /**
    * @public
-   * <p>The launch template and overrides. If you specify <code>LaunchTemplateConfigs</code>,
-   *             you can't specify <code>LaunchSpecifications</code>. If you include On-Demand capacity
-   *             in your request, you must use <code>LaunchTemplateConfigs</code>.</p>
+   * <p>The Spot Instance data feed subscription.</p>
    */
-  LaunchTemplateConfigs?: LaunchTemplateConfig[];
+  SpotDatafeedSubscription?: SpotDatafeedSubscription;
+}
 
+/**
+ * @public
+ * <p>Contains the parameters for DescribeSpotFleetInstances.</p>
+ */
+export interface DescribeSpotFleetInstancesRequest {
   /**
    * @public
-   * <p>The maximum price per unit hour that you are willing to pay for a Spot Instance. We do not recommend
-   *             using this parameter because it can lead to increased interruptions. If you do not specify this parameter, you will pay the current Spot price.</p>
-   *          <important>
-   *             <p>If you specify a maximum price, your instances will be interrupted more frequently than if you do not specify this parameter.</p>
-   *          </important>
+   * <p>Checks whether you have the required permissions for the action, without actually
+   *             making the request, and provides an error response. If you have the required
+   *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
+   *                 <code>UnauthorizedOperation</code>.</p>
    */
-  SpotPrice?: string;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The number of units to request for the Spot Fleet. You can choose to set the target
-   *             capacity in terms of instances or a performance characteristic that is important to your
-   *             application workload, such as vCPUs, memory, or I/O. If the request type is
-   *                 <code>maintain</code>, you can specify a target capacity of 0 and add capacity
-   *             later.</p>
+   * <p>The maximum number of items to return for this request.
+   *          To get the next page of items, make another request with the token returned in the output.
+   * 	        For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
    */
-  TargetCapacity: number | undefined;
+  MaxResults?: number;
 
   /**
    * @public
-   * <p>The number of On-Demand units to request. You can choose to set the target capacity in
-   *             terms of instances or a performance characteristic that is important to your application
-   *             workload, such as vCPUs, memory, or I/O. If the request type is <code>maintain</code>,
-   *             you can specify a target capacity of 0 and add capacity later.</p>
+   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there
+   *          are no more items to return.</p>
    */
-  OnDemandTargetCapacity?: number;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The maximum amount per hour for On-Demand Instances that you're willing to pay. You
-   *             can use the <code>onDemandMaxTotalPrice</code> parameter, the
-   *                 <code>spotMaxTotalPrice</code> parameter, or both parameters to ensure that your
-   *             fleet cost does not exceed your budget. If you set a maximum price per hour for the
-   *             On-Demand Instances and Spot Instances in your request, Spot Fleet will launch instances until it reaches the
-   *             maximum amount you're willing to pay. When the maximum amount you're willing to pay is
-   *             reached, the fleet stops launching instances even if it hasn’t met the target
-   *             capacity.</p>
-   *          <note>
-   *             <p>If your fleet includes T instances that are configured as <code>unlimited</code>,
-   *             and if their average CPU usage exceeds the baseline utilization, you will incur a charge
-   *             for surplus credits. The <code>onDemandMaxTotalPrice</code> does not account for surplus
-   *             credits, and, if you use surplus credits, your final cost might be higher than what you
-   *             specified for <code>onDemandMaxTotalPrice</code>. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/burstable-performance-instances-unlimited-mode-concepts.html#unlimited-mode-surplus-credits">Surplus credits can incur charges</a> in the <i>EC2 User
-   *             Guide</i>.</p>
-   *          </note>
+   * <p>The ID of the Spot Fleet request.</p>
    */
-  OnDemandMaxTotalPrice?: string;
+  SpotFleetRequestId: string | undefined;
+}
 
+/**
+ * @public
+ * <p>Contains the output of DescribeSpotFleetInstances.</p>
+ */
+export interface DescribeSpotFleetInstancesResponse {
   /**
    * @public
-   * <p>The maximum amount per hour for Spot Instances that you're willing to pay. You can use
-   *          the <code>spotMaxTotalPrice</code> parameter, the <code>onDemandMaxTotalPrice</code>
-   *          parameter, or both parameters to ensure that your fleet cost does not exceed your budget.
-   *          If you set a maximum price per hour for the On-Demand Instances and Spot Instances in your request, Spot Fleet will
-   *          launch instances until it reaches the maximum amount you're willing to pay. When the
-   *          maximum amount you're willing to pay is reached, the fleet stops launching instances even
-   *          if it hasn’t met the target capacity.</p>
-   *          <note>
-   *             <p>If your fleet includes T instances that are configured as <code>unlimited</code>,
-   *             and if their average CPU usage exceeds the baseline utilization, you will incur a charge
-   *             for surplus credits. The <code>spotMaxTotalPrice</code> does not account for surplus
-   *             credits, and, if you use surplus credits, your final cost might be higher than what you
-   *             specified for <code>spotMaxTotalPrice</code>. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/burstable-performance-instances-unlimited-mode-concepts.html#unlimited-mode-surplus-credits">Surplus credits can incur charges</a> in the <i>EC2 User
-   *             Guide</i>.</p>
-   *          </note>
+   * <p>The running instances. This list is refreshed periodically and might be out of
+   *             date.</p>
    */
-  SpotMaxTotalPrice?: string;
+  ActiveInstances?: ActiveInstance[];
 
   /**
    * @public
-   * <p>Indicates whether running Spot Instances are terminated when the Spot Fleet request
-   *             expires.</p>
+   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there
+   *          are no more items to return.</p>
    */
-  TerminateInstancesWithExpiration?: boolean;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The type of request. Indicates whether the Spot Fleet only requests the target
-   *             capacity or also attempts to maintain it. When this value is <code>request</code>, the
-   *             Spot Fleet only places the required requests. It does not attempt to replenish Spot
-   *             Instances if capacity is diminished, nor does it submit requests in alternative Spot
-   *             pools if capacity is not available. When this value is <code>maintain</code>, the Spot
-   *             Fleet maintains the target capacity. The Spot Fleet places the required requests to meet
-   *             capacity and automatically replenishes any interrupted instances. Default:
-   *                 <code>maintain</code>. <code>instant</code> is listed but is not used by Spot
-   *             Fleet.</p>
+   * <p>The ID of the Spot Fleet request.</p>
    */
-  Type?: FleetType;
+  SpotFleetRequestId?: string;
+}
+
+/**
+ * @public
+ * @enum
+ */
+export const EventType = {
+  BATCH_CHANGE: "fleetRequestChange",
+  ERROR: "error",
+  INFORMATION: "information",
+  INSTANCE_CHANGE: "instanceChange",
+} as const;
+
+/**
+ * @public
+ */
+export type EventType = (typeof EventType)[keyof typeof EventType];
 
+/**
+ * @public
+ * <p>Contains the parameters for DescribeSpotFleetRequestHistory.</p>
+ */
+export interface DescribeSpotFleetRequestHistoryRequest {
   /**
    * @public
-   * <p>The start date and time of the request, in UTC format
-   *                 (<i>YYYY</i>-<i>MM</i>-<i>DD</i>T<i>HH</i>:<i>MM</i>:<i>SS</i>Z).
-   *             By default, Amazon EC2 starts fulfilling the request immediately.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually
+   *             making the request, and provides an error response. If you have the required
+   *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
+   *                 <code>UnauthorizedOperation</code>.</p>
    */
-  ValidFrom?: Date;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The end date and time of the request, in UTC format
-   *                 (<i>YYYY</i>-<i>MM</i>-<i>DD</i>T<i>HH</i>:<i>MM</i>:<i>SS</i>Z).
-   *             After the end date and time, no new Spot Instance requests are placed or able to fulfill
-   *             the request. If no value is specified, the Spot Fleet request remains until you cancel
-   *             it.</p>
+   * <p>The type of events to describe. By default, all events are described.</p>
    */
-  ValidUntil?: Date;
+  EventType?: EventType;
 
   /**
    * @public
-   * <p>Indicates whether Spot Fleet should replace unhealthy instances.</p>
+   * <p>The maximum number of items to return for this request.
+   *          To get the next page of items, make another request with the token returned in the output.
+   * 	        For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
    */
-  ReplaceUnhealthyInstances?: boolean;
+  MaxResults?: number;
 
   /**
    * @public
-   * <p>The behavior when a Spot Instance is interrupted. The default is
-   *                 <code>terminate</code>.</p>
+   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there
+   *          are no more items to return.</p>
    */
-  InstanceInterruptionBehavior?: InstanceInterruptionBehavior;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>One or more Classic Load Balancers and target groups to attach to the Spot Fleet
-   *             request. Spot Fleet registers the running Spot Instances with the specified Classic Load
-   *             Balancers and target groups.</p>
-   *          <p>With Network Load Balancers, Spot Fleet cannot register instances that have the
-   *             following instance types: C1, CC1, CC2, CG1, CG2, CR1, CS1, G1, G2, HI1, HS1, M1, M2,
-   *             M3, and T1.</p>
+   * <p>The ID of the Spot Fleet request.</p>
    */
-  LoadBalancersConfig?: LoadBalancersConfig;
+  SpotFleetRequestId: string | undefined;
 
   /**
    * @public
-   * <p>The number of Spot pools across which to allocate your target Spot capacity. Valid
-   *             only when Spot <b>AllocationStrategy</b> is set to
-   *                 <code>lowest-price</code>. Spot Fleet selects the cheapest Spot pools and evenly
-   *             allocates your target Spot capacity across the number of Spot pools that you
-   *             specify.</p>
-   *          <p>Note that Spot Fleet attempts to draw Spot Instances from the number of pools that you specify on a
-   *             best effort basis. If a pool runs out of Spot capacity before fulfilling your target
-   *             capacity, Spot Fleet will continue to fulfill your request by drawing from the next cheapest
-   *             pool. To ensure that your target capacity is met, you might receive Spot Instances from more than
-   *             the number of pools that you specified. Similarly, if most of the pools have no Spot
-   *             capacity, you might receive your full target capacity from fewer than the number of
-   *             pools that you specified.</p>
+   * <p>The starting date and time for the events, in UTC format (for example,
+   *                 <i>YYYY</i>-<i>MM</i>-<i>DD</i>T<i>HH</i>:<i>MM</i>:<i>SS</i>Z).</p>
    */
-  InstancePoolsToUseCount?: number;
+  StartTime: Date | undefined;
+}
 
+/**
+ * @public
+ * <p>Describes an event in the history of the Spot Fleet request.</p>
+ */
+export interface HistoryRecord {
   /**
    * @public
-   * <p>Reserved.</p>
+   * <p>Information about the event.</p>
    */
-  Context?: string;
+  EventInformation?: EventInformation;
 
   /**
    * @public
-   * <p>The unit for the target capacity. <code>TargetCapacityUnitType</code> can only be specified when <code>InstanceRequirements</code> is specified.</p>
-   *          <p>Default: <code>units</code> (translates to number of instances)</p>
+   * <p>The event type.</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>error</code> - An error with the Spot Fleet request.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>fleetRequestChange</code> - A change in the status or configuration of
+   *                     the Spot Fleet request.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>instanceChange</code> - An instance was launched or terminated.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>Information</code> - An informational event.</p>
+   *             </li>
+   *          </ul>
    */
-  TargetCapacityUnitType?: TargetCapacityUnitType;
+  EventType?: EventType;
 
   /**
    * @public
-   * <p>The key-value pair for tagging the Spot Fleet request on creation. The value for
-   *                 <code>ResourceType</code> must be <code>spot-fleet-request</code>, otherwise the
-   *             Spot Fleet request fails. To tag instances at launch, specify the tags in the <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-launch-templates.html#create-launch-template">launch
-   *                 template</a> (valid only if you use <code>LaunchTemplateConfigs</code>) or in
-   *             the <code>
-   *                <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_SpotFleetTagSpecification.html">SpotFleetTagSpecification</a>
-   *             </code> (valid only if you use
-   *                 <code>LaunchSpecifications</code>). For information about tagging after launch, see
-   *                 <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Using_Tags.html#tag-resources">Tag your resources</a>.</p>
+   * <p>The date and time of the event, in UTC format (for example,
+   *                 <i>YYYY</i>-<i>MM</i>-<i>DD</i>T<i>HH</i>:<i>MM</i>:<i>SS</i>Z).</p>
    */
-  TagSpecifications?: TagSpecification[];
+  Timestamp?: Date;
 }
 
 /**
  * @public
- * <p>Describes a Spot Fleet request.</p>
+ * <p>Contains the output of DescribeSpotFleetRequestHistory.</p>
  */
-export interface SpotFleetRequestConfig {
+export interface DescribeSpotFleetRequestHistoryResponse {
   /**
    * @public
-   * <p>The progress of the Spot Fleet request.
-   *           If there is an error, the status is <code>error</code>.
-   *           After all requests are placed, the status is <code>pending_fulfillment</code>.
-   *           If the size of the fleet is equal to or greater than its target capacity, the status is <code>fulfilled</code>.
-   *           If the size of the fleet is decreased, the status is <code>pending_termination</code>
-   *           while Spot Instances are terminating.</p>
+   * <p>Information about the events in the history of the Spot Fleet request.</p>
    */
-  ActivityStatus?: ActivityStatus;
+  HistoryRecords?: HistoryRecord[];
 
   /**
    * @public
-   * <p>The creation date and time of the request.</p>
+   * <p>The last date and time for the events, in UTC format (for example,
+   *                 <i>YYYY</i>-<i>MM</i>-<i>DD</i>T<i>HH</i>:<i>MM</i>:<i>SS</i>Z).
+   *             All records up to this time were retrieved.</p>
+   *          <p>If <code>nextToken</code> indicates that there are more items, this value is not
+   *             present.</p>
    */
-  CreateTime?: Date;
+  LastEvaluatedTime?: Date;
 
   /**
    * @public
-   * <p>The configuration of the Spot Fleet request.</p>
+   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there
+   *          are no more items to return.</p>
    */
-  SpotFleetRequestConfig?: SpotFleetRequestConfigData;
+  NextToken?: string;
 
   /**
    * @public
    * <p>The ID of the Spot Fleet request.</p>
    */
-  SpotFleetRequestId?: string;
+  SpotFleetRequestId?: string;
+
+  /**
+   * @public
+   * <p>The starting date and time for the events, in UTC format (for example,
+   *                 <i>YYYY</i>-<i>MM</i>-<i>DD</i>T<i>HH</i>:<i>MM</i>:<i>SS</i>Z).</p>
+   */
+  StartTime?: Date;
+}
+
+/**
+ * @public
+ * <p>Contains the parameters for DescribeSpotFleetRequests.</p>
+ */
+export interface DescribeSpotFleetRequestsRequest {
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually
+   *             making the request, and provides an error response. If you have the required
+   *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
+   *                 <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
+
+  /**
+   * @public
+   * <p>The maximum number of items to return for this request.
+   *          To get the next page of items, make another request with the token returned in the output.
+   * 	        For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
+   */
+  MaxResults?: number;
 
   /**
    * @public
-   * <p>The state of the Spot Fleet request.</p>
+   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there
+   *          are no more items to return.</p>
    */
-  SpotFleetRequestState?: BatchState;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The tags for a Spot Fleet resource.</p>
+   * <p>The IDs of the Spot Fleet requests.</p>
    */
-  Tags?: Tag[];
+  SpotFleetRequestIds?: string[];
 }
 
 /**
  * @public
- * <p>Contains the output of DescribeSpotFleetRequests.</p>
+ * @enum
  */
-export interface DescribeSpotFleetRequestsResponse {
-  /**
-   * @public
-   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there
-   *          are no more items to return.</p>
-   */
-  NextToken?: string;
+export const ExcessCapacityTerminationPolicy = {
+  DEFAULT: "default",
+  NO_TERMINATION: "noTermination",
+} as const;
+
+/**
+ * @public
+ */
+export type ExcessCapacityTerminationPolicy =
+  (typeof ExcessCapacityTerminationPolicy)[keyof typeof ExcessCapacityTerminationPolicy];
 
+/**
+ * @public
+ * <p>Describes whether monitoring is enabled.</p>
+ */
+export interface SpotFleetMonitoring {
   /**
    * @public
-   * <p>Information about the configuration of your Spot Fleet.</p>
+   * <p>Enables monitoring for the instance.</p>
+   *          <p>Default: <code>false</code>
+   *          </p>
    */
-  SpotFleetRequestConfigs?: SpotFleetRequestConfig[];
+  Enabled?: boolean;
 }
 
 /**
  * @public
- * <p>Contains the parameters for DescribeSpotInstanceRequests.</p>
+ * <p>Describes a network interface.</p>
  */
-export interface DescribeSpotInstanceRequestsRequest {
+export interface InstanceNetworkInterfaceSpecification {
   /**
    * @public
-   * <p>The filters.</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>availability-zone-group</code> - The Availability Zone group.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>create-time</code> - The time stamp when the Spot Instance request was
-   *                     created.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>fault-code</code> - The fault code related to the request.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>fault-message</code> - The fault message related to the request.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>instance-id</code> - The ID of the instance that fulfilled the
-   *                     request.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>launch-group</code> - The Spot Instance launch group.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>launch.block-device-mapping.delete-on-termination</code> - Indicates
-   *                     whether the EBS volume is deleted on instance termination.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>launch.block-device-mapping.device-name</code> - The device name for the
-   *                     volume in the block device mapping (for example, <code>/dev/sdh</code> or
-   *                         <code>xvdh</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>launch.block-device-mapping.snapshot-id</code> - The ID of the snapshot
-   *                     for the EBS volume.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>launch.block-device-mapping.volume-size</code> - The size of the EBS
-   *                     volume, in GiB.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>launch.block-device-mapping.volume-type</code> - The type of EBS volume:
-   *                         <code>gp2</code> for General Purpose SSD, <code>io1</code> or
-   *                         <code>io2</code> for Provisioned IOPS SSD, <code>st1</code> for Throughput
-   *                     Optimized HDD, <code>sc1</code>for Cold HDD, or <code>standard</code> for
-   *                     Magnetic.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>launch.group-id</code> - The ID of the security group for the
-   *                     instance.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>launch.group-name</code> - The name of the security group for the
-   *                     instance.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>launch.image-id</code> - The ID of the AMI.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>launch.instance-type</code> - The type of instance (for example,
-   *                         <code>m3.medium</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>launch.kernel-id</code> - The kernel ID.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>launch.key-name</code> - The name of the key pair the instance launched
-   *                     with.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>launch.monitoring-enabled</code> - Whether detailed monitoring is
-   *                     enabled for the Spot Instance.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>launch.ramdisk-id</code> - The RAM disk ID.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>launched-availability-zone</code> - The Availability Zone in which the
-   *                     request is launched.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>network-interface.addresses.primary</code> - Indicates whether the IP
-   *                     address is the primary private IP address.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>network-interface.delete-on-termination</code> - Indicates whether the
-   *                     network interface is deleted when the instance is terminated.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>network-interface.description</code> - A description of the network
-   *                     interface.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>network-interface.device-index</code> - The index of the device for the
-   *                     network interface attachment on the instance.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>network-interface.group-id</code> - The ID of the security group
-   *                     associated with the network interface.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>network-interface.network-interface-id</code> - The ID of the network
-   *                     interface.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>network-interface.private-ip-address</code> - The primary private IP
-   *                     address of the network interface.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>network-interface.subnet-id</code> - The ID of the subnet for the
-   *                     instance.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>product-description</code> - The product description associated with the
-   *                     instance (<code>Linux/UNIX</code> | <code>Windows</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>spot-instance-request-id</code> - The Spot Instance request ID.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>spot-price</code> - The maximum hourly price for any Spot Instance
-   *                     launched to fulfill the request.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>state</code> - The state of the Spot Instance request (<code>open</code>
-   *                     | <code>active</code> | <code>closed</code> | <code>cancelled</code> |
-   *                         <code>failed</code>). Spot request status information can help you track
-   *                     your Amazon EC2 Spot Instance requests. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/spot-request-status.html">Spot
-   *                         request status</a> in the <i>Amazon EC2 User Guide for Linux Instances</i>.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>status-code</code> - The short code describing the most recent
-   *                     evaluation of your Spot Instance request.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>status-message</code> - The message explaining the status of the Spot
-   *                     Instance request.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>tag:<key></code> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value.
-   *     For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>tag-key</code> - The key of a tag assigned to the resource. Use this filter to find all resources assigned a tag with a specific key, regardless of the tag value.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>type</code> - The type of Spot Instance request (<code>one-time</code> |
-   *                         <code>persistent</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>valid-from</code> - The start date of the request.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>valid-until</code> - The end date of the request.</p>
-   *             </li>
-   *          </ul>
+   * <p>Indicates whether to assign a public IPv4 address to an instance you launch in a VPC. The
+   *             public IP address can only be assigned to a network interface for eth0, and can only be
+   *             assigned to a new network interface, not an existing one. You cannot specify more than one
+   *             network interface in the request. If launching into a default subnet, the default value is
+   *             <code>true</code>.</p>
    */
-  Filters?: Filter[];
+  AssociatePublicIpAddress?: boolean;
+
+  /**
+   * @public
+   * <p>If set to <code>true</code>, the interface is deleted when the instance is terminated. You can
+   *             specify <code>true</code> only if creating a new network interface when launching an
+   *             instance.</p>
+   */
+  DeleteOnTermination?: boolean;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually
-   *             making the request, and provides an error response. If you have the required
-   *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
-   *                 <code>UnauthorizedOperation</code>.</p>
+   * <p>The description of the network interface. Applies only if creating a network interface when launching an instance.</p>
    */
-  DryRun?: boolean;
+  Description?: string;
 
   /**
    * @public
-   * <p>The IDs of the Spot Instance requests.</p>
+   * <p>The position of the network interface in the attachment order.
+   *           A primary network interface has a device index of 0.</p>
+   *          <p>If you specify a network interface when launching an instance,
+   *           you must specify the device index.</p>
    */
-  SpotInstanceRequestIds?: string[];
+  DeviceIndex?: number;
 
   /**
    * @public
-   * <p>The token returned from a previous paginated request. Pagination continues from the end of the items returned by the previous request.</p>
+   * <p>The IDs of the security groups for the network interface. Applies only if creating a network interface when launching an instance.</p>
    */
-  NextToken?: string;
+  Groups?: string[];
 
   /**
    * @public
-   * <p>The maximum number of items to return for this request.
-   *          To get the next page of items, make another request with the token returned in the output.
-   * 	        For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
+   * <p>A number of IPv6 addresses to assign to the network interface. Amazon EC2 chooses
+   *             the IPv6 addresses from the range of the subnet. You cannot specify this option and the
+   *             option to assign specific IPv6 addresses in the same request. You can specify this
+   *             option if you've specified a minimum number of instances to launch.</p>
    */
-  MaxResults?: number;
-}
+  Ipv6AddressCount?: number;
 
-/**
- * @public
- * <p>Describes the monitoring of an instance.</p>
- */
-export interface RunInstancesMonitoringEnabled {
   /**
    * @public
-   * <p>Indicates whether detailed monitoring is enabled. Otherwise, basic monitoring is
-   *             enabled.</p>
+   * <p>The IPv6 addresses to assign to the network interface. You cannot specify
+   *             this option and the option to assign a number of IPv6 addresses in the same request. You
+   *             cannot specify this option if you've specified a minimum number of instances to
+   *             launch.</p>
    */
-  Enabled: boolean | undefined;
-}
+  Ipv6Addresses?: InstanceIpv6Address[];
 
-/**
- * @public
- * <p>Describes the launch specification for an instance.</p>
- */
-export interface LaunchSpecification {
   /**
    * @public
-   * <p>The base64-encoded user data that instances use when starting up. User data is limited to 16 KB.</p>
+   * <p>The ID of the network interface.</p>
+   *          <p>If you are creating a Spot Fleet, omit this parameter because you can’t specify a network interface ID in a launch specification.</p>
    */
-  UserData?: string;
+  NetworkInterfaceId?: string;
 
   /**
    * @public
-   * <p>The IDs of the security groups.</p>
+   * <p>The private IPv4 address of the network interface. Applies only if creating a network interface when launching an instance. You cannot specify this option if you're launching
+   *         	more than one instance in a <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RunInstances.html">RunInstances</a> request.</p>
    */
-  SecurityGroups?: GroupIdentifier[];
+  PrivateIpAddress?: string;
 
   /**
    * @public
-   * <p>Deprecated.</p>
+   * <p>The private IPv4 addresses to assign to the network interface. Only one private IPv4 address can be designated as primary. You cannot specify this option if you're
+   *         	launching more than one instance in a <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RunInstances.html">RunInstances</a> request.</p>
    */
-  AddressingType?: string;
+  PrivateIpAddresses?: PrivateIpAddressSpecification[];
 
   /**
    * @public
-   * <p>The block device mapping entries.</p>
+   * <p>The number of secondary private IPv4 addresses. You can't specify this option and specify more than one private IP address using the private IP addresses option. You cannot specify this option if you're
+   *         	launching more than one instance in a <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RunInstances.html">RunInstances</a> request.</p>
    */
-  BlockDeviceMappings?: BlockDeviceMapping[];
+  SecondaryPrivateIpAddressCount?: number;
 
   /**
    * @public
-   * <p>Indicates whether the instance is optimized for EBS I/O. This optimization provides dedicated throughput to Amazon EBS and an optimized configuration stack to provide optimal EBS I/O performance. This optimization isn't available with all instance types. Additional usage charges apply when using an EBS Optimized instance.</p>
-   *          <p>Default: <code>false</code>
-   *          </p>
+   * <p>The ID of the subnet associated with the network interface. Applies only if creating a network interface when launching an instance.</p>
    */
-  EbsOptimized?: boolean;
+  SubnetId?: string;
 
   /**
    * @public
-   * <p>The IAM instance profile.</p>
+   * <p>Indicates whether to assign a carrier IP address to the network interface.</p>
+   *          <p>You can only assign a carrier IP address to a network interface that is in a subnet in
+   *             a Wavelength Zone. For more information about carrier IP addresses, see <a href="https://docs.aws.amazon.com/wavelength/latest/developerguide/how-wavelengths-work.html#provider-owned-ip">Carrier IP address</a> in the <i>Amazon Web Services Wavelength Developer
+   *                 Guide</i>.</p>
    */
-  IamInstanceProfile?: IamInstanceProfileSpecification;
+  AssociateCarrierIpAddress?: boolean;
 
   /**
    * @public
-   * <p>The ID of the AMI.</p>
+   * <p>The type of network interface.</p>
+   *          <p>Valid values: <code>interface</code> | <code>efa</code>
+   *          </p>
    */
-  ImageId?: string;
+  InterfaceType?: string;
 
   /**
    * @public
-   * <p>The instance type. Only one instance type can be specified.</p>
+   * <p>The index of the network card. Some instance types support multiple network cards.
+   *             The primary network interface must be assigned to network card index 0.
+   *             The default is network card index 0.</p>
+   *          <p>If you are using <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RequestSpotInstances.html">RequestSpotInstances</a> to create Spot Instances, omit this parameter because
+   *             you can’t specify the network card index when using this API. To specify the network
+   *             card index, use <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RunInstances.html">RunInstances</a>.</p>
    */
-  InstanceType?: _InstanceType;
+  NetworkCardIndex?: number;
 
   /**
    * @public
-   * <p>The ID of the kernel.</p>
+   * <p>The IPv4 delegated prefixes to be assigned to the network interface. You cannot
+   *             use this option if you use the <code>Ipv4PrefixCount</code> option.</p>
    */
-  KernelId?: string;
+  Ipv4Prefixes?: Ipv4PrefixSpecificationRequest[];
 
   /**
    * @public
-   * <p>The name of the key pair.</p>
+   * <p>The number of IPv4 delegated prefixes to be automatically assigned to the network interface.
+   *             You cannot use this option if you use the <code>Ipv4Prefix</code> option.</p>
    */
-  KeyName?: string;
+  Ipv4PrefixCount?: number;
 
   /**
    * @public
-   * <p>The network interfaces. If you specify a network interface, you must specify
-   *            subnet IDs and security group IDs using the network interface.</p>
+   * <p>The IPv6 delegated prefixes to be assigned to the network interface. You cannot
+   *             use this option if you use the <code>Ipv6PrefixCount</code> option.</p>
    */
-  NetworkInterfaces?: InstanceNetworkInterfaceSpecification[];
+  Ipv6Prefixes?: Ipv6PrefixSpecificationRequest[];
 
   /**
    * @public
-   * <p>The placement information for the instance.</p>
+   * <p>The number of IPv6 delegated prefixes to be automatically assigned to the network interface.
+   *             You cannot use this option if you use the <code>Ipv6Prefix</code> option.</p>
    */
-  Placement?: SpotPlacement;
+  Ipv6PrefixCount?: number;
 
   /**
    * @public
-   * <p>The ID of the RAM disk.</p>
+   * <p>The primary IPv6 address of the network interface. When you enable an IPv6 GUA address to be a primary IPv6, the first IPv6 GUA will be made the primary IPv6 address until the instance is terminated or the network interface is detached. For more information about primary IPv6 addresses, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RunInstances.html">RunInstances</a>.</p>
    */
-  RamdiskId?: string;
+  PrimaryIpv6?: boolean;
 
   /**
    * @public
-   * <p>The ID of the subnet in which to launch the instance.</p>
+   * <p>Specifies the ENA Express settings for the network interface that's attached to
+   * 			the instance.</p>
    */
-  SubnetId?: string;
+  EnaSrdSpecification?: EnaSrdSpecificationRequest;
 
   /**
    * @public
-   * <p>Describes the monitoring of an instance.</p>
+   * <p>A security group connection tracking specification that enables you to set the timeout for connection tracking on an Elastic network interface. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-connection-tracking.html#connection-tracking-timeouts">Connection tracking timeouts</a> in the <i>Amazon Elastic Compute Cloud User Guide</i>.</p>
    */
-  Monitoring?: RunInstancesMonitoringEnabled;
+  ConnectionTrackingSpecification?: ConnectionTrackingSpecificationRequest;
 }
 
 /**
  * @public
- * @enum
+ * <p>Describes Spot Instance placement.</p>
  */
-export const SpotInstanceState = {
-  active: "active",
-  cancelled: "cancelled",
-  closed: "closed",
-  disabled: "disabled",
-  failed: "failed",
-  open: "open",
-} as const;
+export interface SpotPlacement {
+  /**
+   * @public
+   * <p>The Availability Zone.</p>
+   *          <p>[Spot Fleet only] To specify multiple Availability Zones, separate them using commas;
+   *             for example, "us-west-2a, us-west-2b".</p>
+   */
+  AvailabilityZone?: string;
+
+  /**
+   * @public
+   * <p>The name of the placement group.</p>
+   */
+  GroupName?: string;
+
+  /**
+   * @public
+   * <p>The tenancy of the instance (if the instance is running in a VPC). An instance with a
+   *             tenancy of <code>dedicated</code> runs on single-tenant hardware. The <code>host</code>
+   *             tenancy is not supported for Spot Instances.</p>
+   */
+  Tenancy?: Tenancy;
+}
 
 /**
  * @public
+ * <p>The tags for a Spot Fleet resource.</p>
  */
-export type SpotInstanceState = (typeof SpotInstanceState)[keyof typeof SpotInstanceState];
+export interface SpotFleetTagSpecification {
+  /**
+   * @public
+   * <p>The type of resource. Currently, the only resource type that is supported is
+   *                 <code>instance</code>. To tag the Spot Fleet request on creation, use the
+   *                 <code>TagSpecifications</code> parameter in <code>
+   *                <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_SpotFleetRequestConfigData.html">SpotFleetRequestConfigData</a>
+   *             </code>.</p>
+   */
+  ResourceType?: ResourceType;
+
+  /**
+   * @public
+   * <p>The tags.</p>
+   */
+  Tags?: Tag[];
+}
 
 /**
  * @public
- * <p>Describes the status of a Spot Instance request.</p>
+ * <p>Describes the launch specification for one or more Spot Instances. If you include
+ *           On-Demand capacity in your fleet request or want to specify an EFA network device, you
+ *           can't use <code>SpotFleetLaunchSpecification</code>; you must use <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_LaunchTemplateConfig.html">LaunchTemplateConfig</a>.</p>
  */
-export interface SpotInstanceStatus {
+export interface SpotFleetLaunchSpecification {
   /**
    * @public
-   * <p>The status code. For a list of status codes, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/spot-request-status.html#spot-instance-request-status-understand">Spot request status codes</a> in the <i>Amazon EC2 User Guide for Linux Instances</i>.</p>
+   * <p>The security groups.</p>
    */
-  Code?: string;
+  SecurityGroups?: GroupIdentifier[];
 
   /**
    * @public
-   * <p>The description for the status code.</p>
+   * <p>Deprecated.</p>
    */
-  Message?: string;
+  AddressingType?: string;
 
   /**
    * @public
-   * <p>The date and time of the most recent status update, in UTC format (for example,
-   *                 <i>YYYY</i>-<i>MM</i>-<i>DD</i>T<i>HH</i>:<i>MM</i>:<i>SS</i>Z).</p>
+   * <p>One or more block devices that are mapped to the Spot Instances. You can't specify both
+   *             a snapshot ID and an encryption value. This is because only blank volumes can be
+   *             encrypted on creation. If a snapshot is the basis for a volume, it is not blank and its
+   *             encryption status is used for the volume encryption status.</p>
    */
-  UpdateTime?: Date;
-}
+  BlockDeviceMappings?: BlockDeviceMapping[];
 
-/**
- * @public
- * <p>Describes a Spot Instance request.</p>
- */
-export interface SpotInstanceRequest {
   /**
    * @public
-   * <p>Deprecated.</p>
+   * <p>Indicates whether the instances are optimized for EBS I/O. This optimization provides dedicated throughput to Amazon EBS and an optimized configuration stack to provide optimal EBS I/O performance. This optimization isn't available with all instance types. Additional usage charges apply when using an EBS Optimized instance.</p>
+   *          <p>Default: <code>false</code>
+   *          </p>
    */
-  ActualBlockHourlyPrice?: string;
+  EbsOptimized?: boolean;
 
   /**
    * @public
-   * <p>The Availability Zone group. If you specify the same Availability Zone group for all Spot Instance requests, all Spot Instances are launched in the same Availability Zone.</p>
+   * <p>The IAM instance profile.</p>
+   */
+  IamInstanceProfile?: IamInstanceProfileSpecification;
+
+  /**
+   * @public
+   * <p>The ID of the AMI.</p>
+   */
+  ImageId?: string;
+
+  /**
+   * @public
+   * <p>The instance type.</p>
+   */
+  InstanceType?: _InstanceType;
+
+  /**
+   * @public
+   * <p>The ID of the kernel.</p>
+   */
+  KernelId?: string;
+
+  /**
+   * @public
+   * <p>The name of the key pair.</p>
+   */
+  KeyName?: string;
+
+  /**
+   * @public
+   * <p>Enable or disable monitoring for the instances.</p>
+   */
+  Monitoring?: SpotFleetMonitoring;
+
+  /**
+   * @public
+   * <p>One or more network interfaces. If you specify a network interface, you must specify
+   *           subnet IDs and security group IDs using the network interface.</p>
+   *          <note>
+   *             <p>
+   *                <code>SpotFleetLaunchSpecification</code> currently does not support Elastic Fabric Adapter (EFA). To specify an EFA, you must use <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_LaunchTemplateConfig.html">LaunchTemplateConfig</a>.</p>
+   *          </note>
    */
-  AvailabilityZoneGroup?: string;
+  NetworkInterfaces?: InstanceNetworkInterfaceSpecification[];
 
   /**
    * @public
-   * <p>Deprecated.</p>
+   * <p>The placement information.</p>
    */
-  BlockDurationMinutes?: number;
+  Placement?: SpotPlacement;
 
   /**
    * @public
-   * <p>The date and time when the Spot Instance request was created, in UTC format (for example, <i>YYYY</i>-<i>MM</i>-<i>DD</i>T<i>HH</i>:<i>MM</i>:<i>SS</i>Z).</p>
+   * <p>The ID of the RAM disk. Some kernels require additional drivers at launch. Check the kernel
+   *           requirements for information about whether you need to specify a RAM disk. To find kernel
+   *           requirements, refer to the Amazon Web Services Resource Center and search for the kernel ID.</p>
    */
-  CreateTime?: Date;
+  RamdiskId?: string;
 
   /**
    * @public
-   * <p>The fault codes for the Spot Instance request, if any.</p>
+   * <p>The maximum price per unit hour that you are willing to pay for a Spot Instance. We do not recommend using this parameter because it can lead to
+   *           increased interruptions. If you do not specify this parameter, you will pay the current Spot price.</p>
+   *          <important>
+   *             <p>If you specify a maximum price, your instances will be interrupted more frequently than if you do not specify this parameter.</p>
+   *          </important>
    */
-  Fault?: SpotInstanceStateFault;
+  SpotPrice?: string;
 
   /**
    * @public
-   * <p>The instance ID, if an instance has been launched to fulfill the Spot Instance request.</p>
+   * <p>The IDs of the subnets in which to launch the instances. To specify multiple subnets, separate
+   *           them using commas; for example, "subnet-1234abcdeexample1, subnet-0987cdef6example2".</p>
    */
-  InstanceId?: string;
+  SubnetId?: string;
 
   /**
    * @public
-   * <p>The instance launch group. Launch groups are Spot Instances that launch together and terminate together.</p>
+   * <p>The base64-encoded user data that instances use when starting up. User data is limited to 16 KB.</p>
    */
-  LaunchGroup?: string;
+  UserData?: string;
 
   /**
    * @public
-   * <p>Additional information for launching instances.</p>
+   * <p>The number of units provided by the specified instance type. These are the same units that you chose to set the target capacity in terms of instances, or a performance characteristic such as vCPUs, memory, or I/O.</p>
+   *          <p>If the target capacity divided by this value is not a whole number, Amazon EC2 rounds the number of instances to the next whole number. If this value is not specified, the default is 1.</p>
    */
-  LaunchSpecification?: LaunchSpecification;
+  WeightedCapacity?: number;
 
   /**
    * @public
-   * <p>The Availability Zone in which the request is launched.</p>
+   * <p>The tags to apply during creation.</p>
    */
-  LaunchedAvailabilityZone?: string;
+  TagSpecifications?: SpotFleetTagSpecification[];
 
   /**
    * @public
-   * <p>The product description associated with the Spot Instance.</p>
+   * <p>The attributes for the instance types. When you specify instance attributes, Amazon EC2 will
+   *          identify instance types with those attributes.</p>
+   *          <note>
+   *             <p>If you specify <code>InstanceRequirements</code>, you can't specify
+   *             <code>InstanceType</code>.</p>
+   *          </note>
    */
-  ProductDescription?: RIProductDescription;
+  InstanceRequirements?: InstanceRequirements;
+}
 
+/**
+ * @public
+ * <p>Describes overrides for a launch template.</p>
+ */
+export interface LaunchTemplateOverrides {
   /**
    * @public
-   * <p>The ID of the Spot Instance request.</p>
+   * <p>The instance type.</p>
    */
-  SpotInstanceRequestId?: string;
+  InstanceType?: _InstanceType;
 
   /**
    * @public
-   * <p>The maximum price per unit hour that you are willing to pay for a Spot Instance. We do not recommend
-   *             using this parameter because it can lead to increased interruptions. If you do not specify this parameter, you will pay the current Spot price.</p>
+   * <p>The maximum price per unit hour that you are willing to pay for a Spot Instance. We do not recommend using this parameter because it can lead to
+   *          increased interruptions. If you do not specify this parameter, you will pay the current Spot price.</p>
    *          <important>
    *             <p>If you specify a maximum price, your instances will be interrupted more frequently than if you do not specify this parameter.</p>
    *          </important>
@@ -11576,643 +11141,777 @@ export interface SpotInstanceRequest {
 
   /**
    * @public
-   * <p>The state of the Spot Instance request. Spot request status information helps track your Spot
-   *             Instance requests. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/spot-request-status.html">Spot request status</a> in the
-   *                 <i>Amazon EC2 User Guide for Linux Instances</i>.</p>
-   */
-  State?: SpotInstanceState;
-
-  /**
-   * @public
-   * <p>The status code and status message describing the Spot Instance request.</p>
-   */
-  Status?: SpotInstanceStatus;
-
-  /**
-   * @public
-   * <p>Any tags assigned to the resource.</p>
+   * <p>The ID of the subnet in which to launch the instances.</p>
    */
-  Tags?: Tag[];
+  SubnetId?: string;
 
   /**
    * @public
-   * <p>The Spot Instance request type.</p>
+   * <p>The Availability Zone in which to launch the instances.</p>
    */
-  Type?: SpotInstanceType;
+  AvailabilityZone?: string;
 
   /**
    * @public
-   * <p>The start date of the request, in UTC format (for example,
-   *                 <i>YYYY</i>-<i>MM</i>-<i>DD</i>T<i>HH</i>:<i>MM</i>:<i>SS</i>Z).
-   *             The request becomes active at this date and time.</p>
+   * <p>The number of units provided by the specified instance type.</p>
    */
-  ValidFrom?: Date;
+  WeightedCapacity?: number;
 
   /**
    * @public
-   * <p>The end date of the request, in UTC format
-   *                 (<i>YYYY</i>-<i>MM</i>-<i>DD</i>T<i>HH</i>:<i>MM</i>:<i>SS</i>Z).</p>
-   *          <ul>
-   *             <li>
-   *                <p>For a persistent request, the request remains active until the <code>validUntil</code> date
-   *                     and time is reached. Otherwise, the request remains active until you cancel it.
-   *                 </p>
-   *             </li>
-   *             <li>
-   *                <p>For a one-time request, the request remains active until all instances launch,
-   *                     the request is canceled, or the <code>validUntil</code> date and time is reached. By default, the
-   *                     request is valid for 7 days from the date the request was created.</p>
-   *             </li>
-   *          </ul>
+   * <p>The priority for the launch template override. The highest priority is launched
+   *          first.</p>
+   *          <p>If <code>OnDemandAllocationStrategy</code> is set to <code>prioritized</code>, Spot Fleet
+   *          uses priority to determine which launch template override to use first in fulfilling
+   *          On-Demand capacity.</p>
+   *          <p>If the Spot <code>AllocationStrategy</code> is set to
+   *          <code>capacityOptimizedPrioritized</code>, Spot Fleet uses priority on a best-effort basis
+   *          to determine which launch template override to use in fulfilling Spot capacity, but
+   *          optimizes for capacity first.</p>
+   *          <p>Valid values are whole numbers starting at <code>0</code>. The lower the number, the
+   *          higher the priority. If no number is set, the launch template override has the lowest
+   *          priority. You can set the same priority for different launch template overrides.</p>
    */
-  ValidUntil?: Date;
+  Priority?: number;
 
   /**
    * @public
-   * <p>The behavior when a Spot Instance is interrupted.</p>
+   * <p>The instance requirements. When you specify instance requirements, Amazon EC2 will identify
+   *          instance types with the provided requirements, and then use your On-Demand and Spot
+   *          allocation strategies to launch instances from these instance types, in the same way as
+   *          when you specify a list of instance types.</p>
+   *          <note>
+   *             <p>If you specify <code>InstanceRequirements</code>, you can't specify
+   *             <code>InstanceType</code>.</p>
+   *          </note>
    */
-  InstanceInterruptionBehavior?: InstanceInterruptionBehavior;
+  InstanceRequirements?: InstanceRequirements;
 }
 
 /**
  * @public
- * <p>Contains the output of DescribeSpotInstanceRequests.</p>
+ * <p>Describes a launch template and overrides.</p>
  */
-export interface DescribeSpotInstanceRequestsResult {
+export interface LaunchTemplateConfig {
   /**
    * @public
-   * <p>The Spot Instance requests.</p>
+   * <p>The launch template to use. Make sure that the launch template does not contain the
+   *             <code>NetworkInterfaceId</code> parameter because you can't specify a network interface
+   *          ID in a Spot Fleet.</p>
    */
-  SpotInstanceRequests?: SpotInstanceRequest[];
+  LaunchTemplateSpecification?: FleetLaunchTemplateSpecification;
 
   /**
    * @public
-   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there
-   *          are no more items to return.</p>
+   * <p>Any parameters that you specify override the same parameters in the launch
+   *          template.</p>
    */
-  NextToken?: string;
+  Overrides?: LaunchTemplateOverrides[];
 }
 
 /**
  * @public
- * <p>Contains the parameters for DescribeSpotPriceHistory.</p>
+ * <p>Describes a Classic Load Balancer.</p>
  */
-export interface DescribeSpotPriceHistoryRequest {
-  /**
-   * @public
-   * <p>The filters.</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>availability-zone</code> - The Availability Zone for which prices should
-   *                     be returned.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>instance-type</code> - The type of instance (for example,
-   *                     <code>m3.medium</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>product-description</code> - The product description for the Spot price
-   *                     (<code>Linux/UNIX</code> | <code>Red Hat Enterprise Linux</code> |
-   *                     <code>SUSE Linux</code> | <code>Windows</code> | <code>Linux/UNIX (Amazon
-   *                         VPC)</code> | <code>Red Hat Enterprise Linux (Amazon VPC)</code> |
-   *                     <code>SUSE Linux (Amazon VPC)</code> | <code>Windows (Amazon
-   *                         VPC)</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>spot-price</code> - The Spot price. The value must match exactly (or use
-   *                     wildcards; greater than or less than comparison is not supported).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>timestamp</code> - The time stamp of the Spot price history, in UTC format
-   *                     (for example, <i>ddd MMM dd
-   *                         HH</i>:<i>mm</i>:<i>ss</i> UTC
-   *                         <i>YYYY</i>). You can use wildcards (<code>*</code> and
-   *                         <code>?</code>). Greater than or less than comparison is not
-   *                     supported.</p>
-   *             </li>
-   *          </ul>
-   */
-  Filters?: Filter[];
-
-  /**
-   * @public
-   * <p>Filters the results by the specified Availability Zone.</p>
-   */
-  AvailabilityZone?: string;
-
-  /**
-   * @public
-   * <p>Checks whether you have the required permissions for the action, without actually
-   *             making the request, and provides an error response. If you have the required
-   *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
-   *             <code>UnauthorizedOperation</code>.</p>
-   */
-  DryRun?: boolean;
-
+export interface ClassicLoadBalancer {
   /**
    * @public
-   * <p>The date and time, up to the current date, from which to stop retrieving the price
-   *             history data, in UTC format (for example,
-   *             <i>YYYY</i>-<i>MM</i>-<i>DD</i>T<i>HH</i>:<i>MM</i>:<i>SS</i>Z).</p>
+   * <p>The name of the load balancer.</p>
    */
-  EndTime?: Date;
+  Name?: string;
+}
 
+/**
+ * @public
+ * <p>Describes the Classic Load Balancers to attach to a Spot Fleet. Spot Fleet registers
+ *             the running Spot Instances with these Classic Load Balancers.</p>
+ */
+export interface ClassicLoadBalancersConfig {
   /**
    * @public
-   * <p>Filters the results by the specified instance types.</p>
+   * <p>One or more Classic Load Balancers.</p>
    */
-  InstanceTypes?: _InstanceType[];
+  ClassicLoadBalancers?: ClassicLoadBalancer[];
+}
 
+/**
+ * @public
+ * <p>Describes a load balancer target group.</p>
+ */
+export interface TargetGroup {
   /**
    * @public
-   * <p>The maximum number of items to return for this request.
-   *          To get the next page of items, make another request with the token returned in the output.
-   * 	        For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
+   * <p>The Amazon Resource Name (ARN) of the target group.</p>
    */
-  MaxResults?: number;
+  Arn?: string;
+}
 
+/**
+ * @public
+ * <p>Describes the target groups to attach to a Spot Fleet. Spot Fleet registers the
+ *             running Spot Instances with these target groups.</p>
+ */
+export interface TargetGroupsConfig {
   /**
    * @public
-   * <p>The token returned from a previous paginated request. Pagination continues from the end of the items returned by the previous request.</p>
+   * <p>One or more target groups.</p>
    */
-  NextToken?: string;
+  TargetGroups?: TargetGroup[];
+}
 
+/**
+ * @public
+ * <p>Describes the Classic Load Balancers and target groups to attach to a Spot Fleet
+ *             request.</p>
+ */
+export interface LoadBalancersConfig {
   /**
    * @public
-   * <p>Filters the results by the specified basic product descriptions.</p>
+   * <p>The Classic Load Balancers.</p>
    */
-  ProductDescriptions?: string[];
+  ClassicLoadBalancersConfig?: ClassicLoadBalancersConfig;
 
   /**
    * @public
-   * <p>The date and time, up to the past 90 days, from which to start retrieving the price
-   *             history data, in UTC format (for example,
-   *             <i>YYYY</i>-<i>MM</i>-<i>DD</i>T<i>HH</i>:<i>MM</i>:<i>SS</i>Z).</p>
+   * <p>The target groups.</p>
    */
-  StartTime?: Date;
+  TargetGroupsConfig?: TargetGroupsConfig;
 }
 
 /**
  * @public
- * <p>The maximum price per unit hour that you are willing to pay for a Spot Instance. We do not recommend
- *             using this parameter because it can lead to increased interruptions. If you do not specify this parameter, you will pay the current Spot price.</p>
- *          <important>
- *             <p>If you specify a maximum price, your instances will be interrupted more frequently than if you do not specify this parameter.</p>
- *          </important>
+ * @enum
  */
-export interface SpotPrice {
-  /**
-   * @public
-   * <p>The Availability Zone.</p>
-   */
-  AvailabilityZone?: string;
+export const OnDemandAllocationStrategy = {
+  LOWEST_PRICE: "lowestPrice",
+  PRIORITIZED: "prioritized",
+} as const;
 
-  /**
-   * @public
-   * <p>The instance type.</p>
-   */
-  InstanceType?: _InstanceType;
+/**
+ * @public
+ */
+export type OnDemandAllocationStrategy = (typeof OnDemandAllocationStrategy)[keyof typeof OnDemandAllocationStrategy];
+
+/**
+ * @public
+ * @enum
+ */
+export const ReplacementStrategy = {
+  LAUNCH: "launch",
+  LAUNCH_BEFORE_TERMINATE: "launch-before-terminate",
+} as const;
 
+/**
+ * @public
+ */
+export type ReplacementStrategy = (typeof ReplacementStrategy)[keyof typeof ReplacementStrategy];
+
+/**
+ * @public
+ * <p>The Spot Instance replacement strategy to use when Amazon EC2 emits a signal that your
+ *             Spot Instance is at an elevated risk of being interrupted. For more information, see
+ *                 <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/spot-fleet-capacity-rebalance.html">Capacity rebalancing</a> in the <i>Amazon EC2 User Guide for Linux Instances</i>.</p>
+ */
+export interface SpotCapacityRebalance {
   /**
    * @public
-   * <p>A general description of the AMI.</p>
+   * <p>The replacement strategy to use. Only available for fleets of type
+   *             <code>maintain</code>.</p>
+   *          <p>
+   *             <code>launch</code> - Spot Fleet launches a new replacement Spot Instance when a
+   *             rebalance notification is emitted for an existing Spot Instance in the fleet. Spot Fleet
+   *             does not terminate the instances that receive a rebalance notification. You can
+   *             terminate the old instances, or you can leave them running. You are charged for all
+   *             instances while they are running. </p>
+   *          <p>
+   *             <code>launch-before-terminate</code> - Spot Fleet launches a new replacement Spot
+   *             Instance when a rebalance notification is emitted for an existing Spot Instance in the
+   *             fleet, and then, after a delay that you specify (in <code>TerminationDelay</code>),
+   *             terminates the instances that received a rebalance notification.</p>
    */
-  ProductDescription?: RIProductDescription;
+  ReplacementStrategy?: ReplacementStrategy;
 
   /**
    * @public
-   * <p>The maximum price per unit hour that you are willing to pay for a Spot Instance. We do not recommend
-   *             using this parameter because it can lead to increased interruptions. If you do not specify this parameter, you will pay the current Spot price.</p>
-   *          <important>
-   *             <p>If you specify a maximum price, your instances will be interrupted more frequently than if you do not specify this parameter.</p>
-   *          </important>
+   * <p>The amount of time (in seconds) that Amazon EC2 waits before terminating the old Spot
+   *             Instance after launching a new replacement Spot Instance.</p>
+   *          <p>Required when <code>ReplacementStrategy</code> is set to <code>launch-before-terminate</code>.</p>
+   *          <p>Not valid when <code>ReplacementStrategy</code> is set to <code>launch</code>.</p>
+   *          <p>Valid values: Minimum value of <code>120</code> seconds. Maximum value of <code>7200</code> seconds.</p>
    */
-  SpotPrice?: string;
+  TerminationDelay?: number;
+}
 
+/**
+ * @public
+ * <p>The strategies for managing your Spot Instances that are at an elevated risk of being
+ *             interrupted.</p>
+ */
+export interface SpotMaintenanceStrategies {
   /**
    * @public
-   * <p>The date and time the request was created, in UTC format (for example,
-   *                 <i>YYYY</i>-<i>MM</i>-<i>DD</i>T<i>HH</i>:<i>MM</i>:<i>SS</i>Z).</p>
+   * <p>The Spot Instance replacement strategy to use when Amazon EC2 emits a signal that your
+   *             Spot Instance is at an elevated risk of being interrupted. For more information, see
+   *             <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/spot-fleet-capacity-rebalance.html">Capacity rebalancing</a> in the <i>Amazon EC2 User Guide for Linux Instances</i>.</p>
    */
-  Timestamp?: Date;
+  CapacityRebalance?: SpotCapacityRebalance;
 }
 
 /**
  * @public
- * <p>Contains the output of DescribeSpotPriceHistory.</p>
+ * <p>Describes the configuration of a Spot Fleet request.</p>
  */
-export interface DescribeSpotPriceHistoryResult {
+export interface SpotFleetRequestConfigData {
   /**
    * @public
-   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there
-   *          are no more items to return.</p>
+   * <p>The strategy that determines how to allocate the target Spot Instance capacity across the Spot Instance
+   *             pools specified by the Spot Fleet launch configuration. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/spot-fleet-allocation-strategy.html">Allocation
+   *                 strategies for Spot Instances</a> in the <i>Amazon EC2 User Guide</i>.</p>
+   *          <dl>
+   *             <dt>priceCapacityOptimized (recommended)</dt>
+   *             <dd>
+   *                <p>Spot Fleet identifies the pools with
+   *                    the highest capacity availability for the number of instances that are launching. This means
+   *                    that we will request Spot Instances from the pools that we believe have the lowest chance of interruption
+   *                    in the near term. Spot Fleet then requests Spot Instances from the lowest priced of these pools.</p>
+   *             </dd>
+   *             <dt>capacityOptimized</dt>
+   *             <dd>
+   *                <p>Spot Fleet identifies the pools with
+   *                    the highest capacity availability for the number of instances that are launching. This means
+   *                    that we will request Spot Instances from the pools that we believe have the lowest chance of interruption
+   *                    in the near term. To give certain
+   *           instance types a higher chance of launching first, use
+   *           <code>capacityOptimizedPrioritized</code>. Set a priority for each instance type by
+   *           using the <code>Priority</code> parameter for <code>LaunchTemplateOverrides</code>. You can
+   *           assign the same priority to different <code>LaunchTemplateOverrides</code>. EC2 implements
+   *           the priorities on a best-effort basis, but optimizes for capacity first.
+   *           <code>capacityOptimizedPrioritized</code> is supported only if your Spot Fleet uses a
+   *           launch template. Note that if the <code>OnDemandAllocationStrategy</code> is set to
+   *           <code>prioritized</code>, the same priority is applied when fulfilling On-Demand
+   *           capacity.</p>
+   *             </dd>
+   *             <dt>diversified</dt>
+   *             <dd>
+   *                <p>Spot Fleet requests instances from all of the Spot Instance pools that you
+   *           specify.</p>
+   *             </dd>
+   *             <dt>lowestPrice</dt>
+   *             <dd>
+   *                <p>Spot Fleet requests instances from the lowest priced Spot Instance pool that
+   *           has available capacity. If the lowest priced pool doesn't have available capacity, the Spot Instances
+   *           come from the next lowest priced pool that has available capacity. If a pool runs out of
+   *           capacity before fulfilling your desired capacity, Spot Fleet will continue to fulfill your
+   *           request by drawing from the next lowest priced pool. To ensure that your desired capacity is
+   *           met, you might receive Spot Instances from several pools. Because this strategy only considers instance
+   *           price and not capacity availability, it might lead to high interruption rates.</p>
+   *             </dd>
+   *          </dl>
+   *          <p>Default: <code>lowestPrice</code>
+   *          </p>
    */
-  NextToken?: string;
+  AllocationStrategy?: AllocationStrategy;
 
   /**
    * @public
-   * <p>The historical Spot prices.</p>
+   * <p>The order of the launch template overrides to use in fulfilling On-Demand capacity. If
+   *             you specify <code>lowestPrice</code>, Spot Fleet uses price to determine the order, launching
+   *             the lowest price first. If you specify <code>prioritized</code>, Spot Fleet uses the priority
+   *             that you assign to each Spot Fleet launch template override, launching the highest priority
+   *             first. If you do not specify a value, Spot Fleet defaults to <code>lowestPrice</code>.</p>
    */
-  SpotPriceHistory?: SpotPrice[];
-}
+  OnDemandAllocationStrategy?: OnDemandAllocationStrategy;
 
-/**
- * @public
- */
-export interface DescribeStaleSecurityGroupsRequest {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The strategies for managing your Spot Instances that are at an elevated risk of being
+   *             interrupted.</p>
    */
-  DryRun?: boolean;
+  SpotMaintenanceStrategies?: SpotMaintenanceStrategies;
 
   /**
    * @public
-   * <p>The maximum number of items to return for this request. To get the next page of items,
-   *           make another request with the token returned in the output. For more information,
-   *           see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
+   * <p>A unique, case-sensitive identifier that you provide to ensure the idempotency of your
+   *             listings. This helps to avoid duplicate listings. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html">Ensuring Idempotency</a>.</p>
    */
-  MaxResults?: number;
+  ClientToken?: string;
 
   /**
    * @public
-   * <p>The token returned from a previous paginated request.
-   *           Pagination continues from the end of the items returned by the previous request.</p>
+   * <p>Indicates whether running instances should be terminated if you decrease the
+   *             target capacity of the Spot Fleet request below the current size of the Spot Fleet.</p>
+   *          <p>Supported only for fleets of type <code>maintain</code>.</p>
    */
-  NextToken?: string;
+  ExcessCapacityTerminationPolicy?: ExcessCapacityTerminationPolicy;
 
   /**
    * @public
-   * <p>The ID of the VPC.</p>
+   * <p>The number of units fulfilled by this request compared to the set target capacity. You
+   *             cannot set this value.</p>
    */
-  VpcId: string | undefined;
-}
+  FulfilledCapacity?: number;
 
-/**
- * @public
- * <p>Describes a stale rule in a security group.</p>
- */
-export interface StaleIpPermission {
   /**
    * @public
-   * <p>The start of the port range for the TCP and UDP protocols, or an ICMP type number. A value of
-   *         -1 indicates all ICMP types. </p>
+   * <p>The number of On-Demand units fulfilled by this request compared to the set target
+   *             On-Demand capacity.</p>
    */
-  FromPort?: number;
+  OnDemandFulfilledCapacity?: number;
 
   /**
    * @public
-   * <p>The IP protocol name (for <code>tcp</code>, <code>udp</code>, and <code>icmp</code>) or number  (see <a href="http://www.iana.org/assignments/protocol-numbers/protocol-numbers.xhtml">Protocol Numbers)</a>.</p>
+   * <p>The Amazon Resource Name (ARN) of an Identity and Access Management (IAM) role that
+   *             grants the Spot Fleet the permission to request, launch, terminate, and tag instances on
+   *             your behalf. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/spot-fleet-requests.html#spot-fleet-prerequisites">Spot
+   *                 Fleet prerequisites</a> in the <i>Amazon EC2 User Guide</i>. Spot Fleet
+   *             can terminate Spot Instances on your behalf when you cancel its Spot Fleet request using
+   *                 <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CancelSpotFleetRequests">CancelSpotFleetRequests</a> or when the Spot Fleet request expires, if you set
+   *                 <code>TerminateInstancesWithExpiration</code>.</p>
    */
-  IpProtocol?: string;
+  IamFleetRole: string | undefined;
 
   /**
    * @public
-   * <p>The IP ranges. Not applicable for stale security group rules.</p>
+   * <p>The launch specifications for the Spot Fleet request. If you specify
+   *                 <code>LaunchSpecifications</code>, you can't specify
+   *                 <code>LaunchTemplateConfigs</code>. If you include On-Demand capacity in your
+   *             request, you must use <code>LaunchTemplateConfigs</code>.</p>
    */
-  IpRanges?: string[];
+  LaunchSpecifications?: SpotFleetLaunchSpecification[];
 
   /**
    * @public
-   * <p>The prefix list IDs. Not applicable for stale security group rules.</p>
+   * <p>The launch template and overrides. If you specify <code>LaunchTemplateConfigs</code>,
+   *             you can't specify <code>LaunchSpecifications</code>. If you include On-Demand capacity
+   *             in your request, you must use <code>LaunchTemplateConfigs</code>.</p>
    */
-  PrefixListIds?: string[];
+  LaunchTemplateConfigs?: LaunchTemplateConfig[];
 
   /**
    * @public
-   * <p>The end of the port range for the TCP and UDP protocols, or an ICMP type number. A value of
-   *         <code>-1</code> indicates all ICMP types. </p>
+   * <p>The maximum price per unit hour that you are willing to pay for a Spot Instance. We do not recommend
+   *             using this parameter because it can lead to increased interruptions. If you do not specify this parameter, you will pay the current Spot price.</p>
+   *          <important>
+   *             <p>If you specify a maximum price, your instances will be interrupted more frequently than if you do not specify this parameter.</p>
+   *          </important>
    */
-  ToPort?: number;
+  SpotPrice?: string;
 
   /**
    * @public
-   * <p>The security group pairs. Returns the ID of the referenced security group and VPC, and the ID and status of the VPC peering connection.</p>
+   * <p>The number of units to request for the Spot Fleet. You can choose to set the target
+   *             capacity in terms of instances or a performance characteristic that is important to your
+   *             application workload, such as vCPUs, memory, or I/O. If the request type is
+   *                 <code>maintain</code>, you can specify a target capacity of 0 and add capacity
+   *             later.</p>
    */
-  UserIdGroupPairs?: UserIdGroupPair[];
-}
+  TargetCapacity: number | undefined;
 
-/**
- * @public
- * <p>Describes a stale security group (a security group that contains stale rules).</p>
- */
-export interface StaleSecurityGroup {
   /**
    * @public
-   * <p>The description of the security group.</p>
+   * <p>The number of On-Demand units to request. You can choose to set the target capacity in
+   *             terms of instances or a performance characteristic that is important to your application
+   *             workload, such as vCPUs, memory, or I/O. If the request type is <code>maintain</code>,
+   *             you can specify a target capacity of 0 and add capacity later.</p>
+   */
+  OnDemandTargetCapacity?: number;
+
+  /**
+   * @public
+   * <p>The maximum amount per hour for On-Demand Instances that you're willing to pay. You
+   *             can use the <code>onDemandMaxTotalPrice</code> parameter, the
+   *                 <code>spotMaxTotalPrice</code> parameter, or both parameters to ensure that your
+   *             fleet cost does not exceed your budget. If you set a maximum price per hour for the
+   *             On-Demand Instances and Spot Instances in your request, Spot Fleet will launch instances until it reaches the
+   *             maximum amount you're willing to pay. When the maximum amount you're willing to pay is
+   *             reached, the fleet stops launching instances even if it hasn’t met the target
+   *             capacity.</p>
+   *          <note>
+   *             <p>If your fleet includes T instances that are configured as <code>unlimited</code>,
+   *             and if their average CPU usage exceeds the baseline utilization, you will incur a charge
+   *             for surplus credits. The <code>onDemandMaxTotalPrice</code> does not account for surplus
+   *             credits, and, if you use surplus credits, your final cost might be higher than what you
+   *             specified for <code>onDemandMaxTotalPrice</code>. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/burstable-performance-instances-unlimited-mode-concepts.html#unlimited-mode-surplus-credits">Surplus credits can incur charges</a> in the <i>EC2 User
+   *             Guide</i>.</p>
+   *          </note>
    */
-  Description?: string;
+  OnDemandMaxTotalPrice?: string;
 
   /**
    * @public
-   * <p>The ID of the security group.</p>
+   * <p>The maximum amount per hour for Spot Instances that you're willing to pay. You can use
+   *          the <code>spotMaxTotalPrice</code> parameter, the <code>onDemandMaxTotalPrice</code>
+   *          parameter, or both parameters to ensure that your fleet cost does not exceed your budget.
+   *          If you set a maximum price per hour for the On-Demand Instances and Spot Instances in your request, Spot Fleet will
+   *          launch instances until it reaches the maximum amount you're willing to pay. When the
+   *          maximum amount you're willing to pay is reached, the fleet stops launching instances even
+   *          if it hasn’t met the target capacity.</p>
+   *          <note>
+   *             <p>If your fleet includes T instances that are configured as <code>unlimited</code>,
+   *             and if their average CPU usage exceeds the baseline utilization, you will incur a charge
+   *             for surplus credits. The <code>spotMaxTotalPrice</code> does not account for surplus
+   *             credits, and, if you use surplus credits, your final cost might be higher than what you
+   *             specified for <code>spotMaxTotalPrice</code>. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/burstable-performance-instances-unlimited-mode-concepts.html#unlimited-mode-surplus-credits">Surplus credits can incur charges</a> in the <i>EC2 User
+   *             Guide</i>.</p>
+   *          </note>
    */
-  GroupId?: string;
+  SpotMaxTotalPrice?: string;
 
   /**
    * @public
-   * <p>The name of the security group.</p>
+   * <p>Indicates whether running Spot Instances are terminated when the Spot Fleet request
+   *             expires.</p>
    */
-  GroupName?: string;
+  TerminateInstancesWithExpiration?: boolean;
 
   /**
    * @public
-   * <p>Information about the stale inbound rules in the security group.</p>
+   * <p>The type of request. Indicates whether the Spot Fleet only requests the target
+   *             capacity or also attempts to maintain it. When this value is <code>request</code>, the
+   *             Spot Fleet only places the required requests. It does not attempt to replenish Spot
+   *             Instances if capacity is diminished, nor does it submit requests in alternative Spot
+   *             pools if capacity is not available. When this value is <code>maintain</code>, the Spot
+   *             Fleet maintains the target capacity. The Spot Fleet places the required requests to meet
+   *             capacity and automatically replenishes any interrupted instances. Default:
+   *                 <code>maintain</code>. <code>instant</code> is listed but is not used by Spot
+   *             Fleet.</p>
    */
-  StaleIpPermissions?: StaleIpPermission[];
+  Type?: FleetType;
 
   /**
    * @public
-   * <p>Information about the stale outbound rules in the security group.</p>
+   * <p>The start date and time of the request, in UTC format
+   *                 (<i>YYYY</i>-<i>MM</i>-<i>DD</i>T<i>HH</i>:<i>MM</i>:<i>SS</i>Z).
+   *             By default, Amazon EC2 starts fulfilling the request immediately.</p>
    */
-  StaleIpPermissionsEgress?: StaleIpPermission[];
+  ValidFrom?: Date;
 
   /**
    * @public
-   * <p>The ID of the VPC for the security group.</p>
+   * <p>The end date and time of the request, in UTC format
+   *                 (<i>YYYY</i>-<i>MM</i>-<i>DD</i>T<i>HH</i>:<i>MM</i>:<i>SS</i>Z).
+   *             After the end date and time, no new Spot Instance requests are placed or able to fulfill
+   *             the request. If no value is specified, the Spot Fleet request remains until you cancel
+   *             it.</p>
    */
-  VpcId?: string;
-}
+  ValidUntil?: Date;
 
-/**
- * @public
- */
-export interface DescribeStaleSecurityGroupsResult {
   /**
    * @public
-   * <p>The token to include in another request to get the next page of items.
-   *           If there are no additional items to return, the string is empty.</p>
+   * <p>Indicates whether Spot Fleet should replace unhealthy instances.</p>
    */
-  NextToken?: string;
+  ReplaceUnhealthyInstances?: boolean;
 
   /**
    * @public
-   * <p>Information about the stale security groups.</p>
+   * <p>The behavior when a Spot Instance is interrupted. The default is
+   *                 <code>terminate</code>.</p>
    */
-  StaleSecurityGroupSet?: StaleSecurityGroup[];
-}
+  InstanceInterruptionBehavior?: InstanceInterruptionBehavior;
 
-/**
- * @public
- */
-export interface DescribeStoreImageTasksRequest {
   /**
    * @public
-   * <p>The AMI IDs for which to show progress. Up to 20 AMI IDs can be included in a request.</p>
+   * <p>One or more Classic Load Balancers and target groups to attach to the Spot Fleet
+   *             request. Spot Fleet registers the running Spot Instances with the specified Classic Load
+   *             Balancers and target groups.</p>
+   *          <p>With Network Load Balancers, Spot Fleet cannot register instances that have the
+   *             following instance types: C1, CC1, CC2, CG1, CG2, CR1, CS1, G1, G2, HI1, HS1, M1, M2,
+   *             M3, and T1.</p>
    */
-  ImageIds?: string[];
+  LoadBalancersConfig?: LoadBalancersConfig;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   * 			and provides an error response. If you have the required permissions, the error response is
-   * 			<code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The number of Spot pools across which to allocate your target Spot capacity. Valid
+   *             only when Spot <b>AllocationStrategy</b> is set to
+   *                 <code>lowest-price</code>. Spot Fleet selects the cheapest Spot pools and evenly
+   *             allocates your target Spot capacity across the number of Spot pools that you
+   *             specify.</p>
+   *          <p>Note that Spot Fleet attempts to draw Spot Instances from the number of pools that you specify on a
+   *             best effort basis. If a pool runs out of Spot capacity before fulfilling your target
+   *             capacity, Spot Fleet will continue to fulfill your request by drawing from the next cheapest
+   *             pool. To ensure that your target capacity is met, you might receive Spot Instances from more than
+   *             the number of pools that you specified. Similarly, if most of the pools have no Spot
+   *             capacity, you might receive your full target capacity from fewer than the number of
+   *             pools that you specified.</p>
    */
-  DryRun?: boolean;
+  InstancePoolsToUseCount?: number;
 
   /**
    * @public
-   * <p>The filters.</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>task-state</code> - Returns tasks in a certain state (<code>InProgress</code> |
-   *             <code>Completed</code> | <code>Failed</code>)</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>bucket</code> - Returns task information for tasks that targeted a specific
-   *           bucket. For the filter value, specify the bucket name.</p>
-   *             </li>
-   *          </ul>
-   *          <note>
-   *             <p>When you specify the <code>ImageIds</code> parameter, any filters that you specify are
-   *         ignored. To use the filters, you must remove the <code>ImageIds</code> parameter.</p>
-   *          </note>
+   * <p>Reserved.</p>
    */
-  Filters?: Filter[];
+  Context?: string;
 
   /**
    * @public
-   * <p>The token returned from a previous paginated request. Pagination continues from the end of the items returned by the previous request.</p>
+   * <p>The unit for the target capacity. <code>TargetCapacityUnitType</code> can only be specified when <code>InstanceRequirements</code> is specified.</p>
+   *          <p>Default: <code>units</code> (translates to number of instances)</p>
    */
-  NextToken?: string;
+  TargetCapacityUnitType?: TargetCapacityUnitType;
 
   /**
    * @public
-   * <p>The maximum number of items to return for this request.
-   *          To get the next page of items, make another request with the token returned in the output.
-   * 	        For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
-   *          <p>You cannot specify this parameter and the <code>ImageIds</code> parameter in the same
-   *       call.</p>
+   * <p>The key-value pair for tagging the Spot Fleet request on creation. The value for
+   *                 <code>ResourceType</code> must be <code>spot-fleet-request</code>, otherwise the
+   *             Spot Fleet request fails. To tag instances at launch, specify the tags in the <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-launch-templates.html#create-launch-template">launch
+   *                 template</a> (valid only if you use <code>LaunchTemplateConfigs</code>) or in
+   *             the <code>
+   *                <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_SpotFleetTagSpecification.html">SpotFleetTagSpecification</a>
+   *             </code> (valid only if you use
+   *                 <code>LaunchSpecifications</code>). For information about tagging after launch, see
+   *                 <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Using_Tags.html#tag-resources">Tag your resources</a>.</p>
    */
-  MaxResults?: number;
+  TagSpecifications?: TagSpecification[];
 }
 
 /**
  * @public
- * <p>The information about the AMI store task, including the progress of the task.</p>
+ * <p>Describes a Spot Fleet request.</p>
  */
-export interface StoreImageTaskResult {
-  /**
-   * @public
-   * <p>The ID of the AMI that is being stored.</p>
-   */
-  AmiId?: string;
-
+export interface SpotFleetRequestConfig {
   /**
    * @public
-   * <p>The time the task started.</p>
+   * <p>The progress of the Spot Fleet request.
+   *           If there is an error, the status is <code>error</code>.
+   *           After all requests are placed, the status is <code>pending_fulfillment</code>.
+   *           If the size of the fleet is equal to or greater than its target capacity, the status is <code>fulfilled</code>.
+   *           If the size of the fleet is decreased, the status is <code>pending_termination</code>
+   *           while Spot Instances are terminating.</p>
    */
-  TaskStartTime?: Date;
+  ActivityStatus?: ActivityStatus;
 
   /**
    * @public
-   * <p>The name of the Amazon S3 bucket that contains the stored AMI object.</p>
+   * <p>The creation date and time of the request.</p>
    */
-  Bucket?: string;
+  CreateTime?: Date;
 
   /**
    * @public
-   * <p>The name of the stored AMI object in the bucket.</p>
+   * <p>The configuration of the Spot Fleet request.</p>
    */
-  S3objectKey?: string;
+  SpotFleetRequestConfig?: SpotFleetRequestConfigData;
 
   /**
    * @public
-   * <p>The progress of the task as a percentage.</p>
+   * <p>The ID of the Spot Fleet request.</p>
    */
-  ProgressPercentage?: number;
+  SpotFleetRequestId?: string;
 
   /**
    * @public
-   * <p>The state of the store task (<code>InProgress</code>, <code>Completed</code>, or
-   *         <code>Failed</code>).</p>
+   * <p>The state of the Spot Fleet request.</p>
    */
-  StoreTaskState?: string;
+  SpotFleetRequestState?: BatchState;
 
   /**
    * @public
-   * <p>If the tasks fails, the reason for the failure is returned. If the task succeeds,
-   *         <code>null</code> is returned.</p>
+   * <p>The tags for a Spot Fleet resource.</p>
    */
-  StoreTaskFailureReason?: string;
+  Tags?: Tag[];
 }
 
 /**
  * @public
+ * <p>Contains the output of DescribeSpotFleetRequests.</p>
  */
-export interface DescribeStoreImageTasksResult {
+export interface DescribeSpotFleetRequestsResponse {
   /**
    * @public
-   * <p>The information about the AMI store tasks.</p>
+   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there
+   *          are no more items to return.</p>
    */
-  StoreImageTaskResults?: StoreImageTaskResult[];
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there
-   *          are no more items to return.</p>
+   * <p>Information about the configuration of your Spot Fleet.</p>
    */
-  NextToken?: string;
+  SpotFleetRequestConfigs?: SpotFleetRequestConfig[];
 }
 
 /**
  * @public
+ * <p>Contains the parameters for DescribeSpotInstanceRequests.</p>
  */
-export interface DescribeSubnetsRequest {
+export interface DescribeSpotInstanceRequestsRequest {
   /**
    * @public
    * <p>The filters.</p>
    *          <ul>
    *             <li>
    *                <p>
-   *                   <code>availability-zone</code> - The Availability Zone for the subnet. You can also use
-   *                     <code>availabilityZone</code> as the filter name.</p>
+   *                   <code>availability-zone-group</code> - The Availability Zone group.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>create-time</code> - The time stamp when the Spot Instance request was
+   *                     created.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>fault-code</code> - The fault code related to the request.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>fault-message</code> - The fault message related to the request.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>instance-id</code> - The ID of the instance that fulfilled the
+   *                     request.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>launch-group</code> - The Spot Instance launch group.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>launch.block-device-mapping.delete-on-termination</code> - Indicates
+   *                     whether the EBS volume is deleted on instance termination.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>launch.block-device-mapping.device-name</code> - The device name for the
+   *                     volume in the block device mapping (for example, <code>/dev/sdh</code> or
+   *                         <code>xvdh</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>launch.block-device-mapping.snapshot-id</code> - The ID of the snapshot
+   *                     for the EBS volume.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>launch.block-device-mapping.volume-size</code> - The size of the EBS
+   *                     volume, in GiB.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>launch.block-device-mapping.volume-type</code> - The type of EBS volume:
+   *                         <code>gp2</code> for General Purpose SSD, <code>io1</code> or
+   *                         <code>io2</code> for Provisioned IOPS SSD, <code>st1</code> for Throughput
+   *                     Optimized HDD, <code>sc1</code>for Cold HDD, or <code>standard</code> for
+   *                     Magnetic.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>availability-zone-id</code> - The ID of the Availability Zone for the subnet.
-   *                     You can also use <code>availabilityZoneId</code> as the filter name.</p>
+   *                   <code>launch.group-id</code> - The ID of the security group for the
+   *                     instance.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>available-ip-address-count</code> - The number of IPv4 addresses in the
-   *                     subnet that are available.</p>
+   *                   <code>launch.group-name</code> - The name of the security group for the
+   *                     instance.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>cidr-block</code> - The IPv4 CIDR block of the subnet. The CIDR block
-   *                     you specify must exactly match the subnet's CIDR block for information to be
-   *                     returned for the subnet. You can also use <code>cidr</code> or
-   *                         <code>cidrBlock</code> as the filter names.</p>
+   *                   <code>launch.image-id</code> - The ID of the AMI.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>customer-owned-ipv4-pool</code> - The customer-owned IPv4 address pool
-   *                     associated with the subnet.</p>
+   *                   <code>launch.instance-type</code> - The type of instance (for example,
+   *                         <code>m3.medium</code>).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>default-for-az</code> - Indicates whether this is the default subnet for
-   *                     the Availability Zone (<code>true</code> | <code>false</code>). You can also use
-   *                         <code>defaultForAz</code> as the filter name.</p>
+   *                   <code>launch.kernel-id</code> - The kernel ID.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>enable-dns64</code> - Indicates whether DNS queries made to the
-   *                     Amazon-provided DNS Resolver in this subnet should return synthetic IPv6
-   *                     addresses for IPv4-only destinations.</p>
+   *                   <code>launch.key-name</code> - The name of the key pair the instance launched
+   *                     with.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>enable-lni-at-device-index</code> - Indicates the device position for
-   *                     local network interfaces in this subnet. For example, <code>1</code> indicates
-   *                     local network interfaces in this subnet are the secondary network interface
-   *                     (eth1). </p>
+   *                   <code>launch.monitoring-enabled</code> - Whether detailed monitoring is
+   *                     enabled for the Spot Instance.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>ipv6-cidr-block-association.ipv6-cidr-block</code> - An IPv6 CIDR
-   *                     block associated with the subnet.</p>
+   *                   <code>launch.ramdisk-id</code> - The RAM disk ID.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>ipv6-cidr-block-association.association-id</code> - An association ID
-   *                     for an IPv6 CIDR block associated with the subnet.</p>
+   *                   <code>launched-availability-zone</code> - The Availability Zone in which the
+   *                     request is launched.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>ipv6-cidr-block-association.state</code> - The state of an IPv6 CIDR
-   *                     block associated with the subnet.</p>
+   *                   <code>network-interface.addresses.primary</code> - Indicates whether the IP
+   *                     address is the primary private IP address.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>ipv6-native</code> - Indicates whether this is an IPv6 only subnet
-   *                         (<code>true</code> | <code>false</code>).</p>
+   *                   <code>network-interface.delete-on-termination</code> - Indicates whether the
+   *                     network interface is deleted when the instance is terminated.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>map-customer-owned-ip-on-launch</code> - Indicates whether a network
-   *                     interface created in this subnet (including a network interface created by <a>RunInstances</a>) receives a customer-owned IPv4 address.</p>
+   *                   <code>network-interface.description</code> - A description of the network
+   *                     interface.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>map-public-ip-on-launch</code> - Indicates whether instances launched in
-   *                     this subnet receive a public IPv4 address.</p>
+   *                   <code>network-interface.device-index</code> - The index of the device for the
+   *                     network interface attachment on the instance.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>outpost-arn</code> - The Amazon Resource Name (ARN) of the Outpost.</p>
+   *                   <code>network-interface.group-id</code> - The ID of the security group
+   *                     associated with the network interface.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>owner-id</code> - The ID of the Amazon Web Services account that owns the
-   *                     subnet.</p>
+   *                   <code>network-interface.network-interface-id</code> - The ID of the network
+   *                     interface.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>private-dns-name-options-on-launch.hostname-type</code> - The type of
-   *                     hostname to assign to instances in the subnet at launch. For IPv4-only and
-   *                     dual-stack (IPv4 and IPv6) subnets, an instance DNS name can be based on the
-   *                     instance IPv4 address (ip-name) or the instance ID (resource-name). For IPv6
-   *                     only subnets, an instance DNS name must be based on the instance ID
-   *                     (resource-name).</p>
+   *                   <code>network-interface.private-ip-address</code> - The primary private IP
+   *                     address of the network interface.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>private-dns-name-options-on-launch.enable-resource-name-dns-a-record</code>
-   *                     - Indicates whether to respond to DNS queries for instance hostnames with DNS A
-   *                     records.</p>
+   *                   <code>network-interface.subnet-id</code> - The ID of the subnet for the
+   *                     instance.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>private-dns-name-options-on-launch.enable-resource-name-dns-aaaa-record</code>
-   *                     - Indicates whether to respond to DNS queries for instance hostnames with DNS
-   *                     AAAA records.</p>
+   *                   <code>product-description</code> - The product description associated with the
+   *                     instance (<code>Linux/UNIX</code> | <code>Windows</code>).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>state</code> - The state of the subnet (<code>pending</code> | <code>available</code>).</p>
+   *                   <code>spot-instance-request-id</code> - The Spot Instance request ID.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>subnet-arn</code> - The Amazon Resource Name (ARN) of the subnet.</p>
+   *                   <code>spot-price</code> - The maximum hourly price for any Spot Instance
+   *                     launched to fulfill the request.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>subnet-id</code> - The ID of the subnet.</p>
+   *                   <code>state</code> - The state of the Spot Instance request (<code>open</code>
+   *                     | <code>active</code> | <code>closed</code> | <code>cancelled</code> |
+   *                         <code>failed</code>). Spot request status information can help you track
+   *                     your Amazon EC2 Spot Instance requests. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/spot-request-status.html">Spot
+   *                         request status</a> in the <i>Amazon EC2 User Guide for Linux Instances</i>.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>tag</code>:<key> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value.
+   *                   <code>status-code</code> - The short code describing the most recent
+   *                     evaluation of your Spot Instance request.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>status-message</code> - The message explaining the status of the Spot
+   *                     Instance request.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>tag:<key></code> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value.
    *     For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
    *             </li>
    *             <li>
@@ -12221,7 +11920,16 @@ export interface DescribeSubnetsRequest {
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>vpc-id</code> - The ID of the VPC for the subnet.</p>
+   *                   <code>type</code> - The type of Spot Instance request (<code>one-time</code> |
+   *                         <code>persistent</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>valid-from</code> - The start date of the request.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>valid-until</code> - The end date of the request.</p>
    *             </li>
    *          </ul>
    */
@@ -12229,325 +11937,521 @@ export interface DescribeSubnetsRequest {
 
   /**
    * @public
-   * <p>The IDs of the subnets.</p>
-   *          <p>Default: Describes all your subnets.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually
+   *             making the request, and provides an error response. If you have the required
+   *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
+   *                 <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
+
+  /**
+   * @public
+   * <p>The IDs of the Spot Instance requests.</p>
+   */
+  SpotInstanceRequestIds?: string[];
+
+  /**
+   * @public
+   * <p>The token returned from a previous paginated request. Pagination continues from the end of the items returned by the previous request.</p>
+   */
+  NextToken?: string;
+
+  /**
+   * @public
+   * <p>The maximum number of items to return for this request.
+   *          To get the next page of items, make another request with the token returned in the output.
+   * 	        For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
+   */
+  MaxResults?: number;
+}
+
+/**
+ * @public
+ * <p>Describes the monitoring of an instance.</p>
+ */
+export interface RunInstancesMonitoringEnabled {
+  /**
+   * @public
+   * <p>Indicates whether detailed monitoring is enabled. Otherwise, basic monitoring is
+   *             enabled.</p>
+   */
+  Enabled: boolean | undefined;
+}
+
+/**
+ * @public
+ * <p>Describes the launch specification for an instance.</p>
+ */
+export interface LaunchSpecification {
+  /**
+   * @public
+   * <p>The base64-encoded user data that instances use when starting up. User data is limited to 16 KB.</p>
+   */
+  UserData?: string;
+
+  /**
+   * @public
+   * <p>The IDs of the security groups.</p>
+   */
+  SecurityGroups?: GroupIdentifier[];
+
+  /**
+   * @public
+   * <p>Deprecated.</p>
+   */
+  AddressingType?: string;
+
+  /**
+   * @public
+   * <p>The block device mapping entries.</p>
+   */
+  BlockDeviceMappings?: BlockDeviceMapping[];
+
+  /**
+   * @public
+   * <p>Indicates whether the instance is optimized for EBS I/O. This optimization provides dedicated throughput to Amazon EBS and an optimized configuration stack to provide optimal EBS I/O performance. This optimization isn't available with all instance types. Additional usage charges apply when using an EBS Optimized instance.</p>
+   *          <p>Default: <code>false</code>
+   *          </p>
+   */
+  EbsOptimized?: boolean;
+
+  /**
+   * @public
+   * <p>The IAM instance profile.</p>
+   */
+  IamInstanceProfile?: IamInstanceProfileSpecification;
+
+  /**
+   * @public
+   * <p>The ID of the AMI.</p>
+   */
+  ImageId?: string;
+
+  /**
+   * @public
+   * <p>The instance type. Only one instance type can be specified.</p>
+   */
+  InstanceType?: _InstanceType;
+
+  /**
+   * @public
+   * <p>The ID of the kernel.</p>
+   */
+  KernelId?: string;
+
+  /**
+   * @public
+   * <p>The name of the key pair.</p>
+   */
+  KeyName?: string;
+
+  /**
+   * @public
+   * <p>The network interfaces. If you specify a network interface, you must specify
+   *            subnet IDs and security group IDs using the network interface.</p>
+   */
+  NetworkInterfaces?: InstanceNetworkInterfaceSpecification[];
+
+  /**
+   * @public
+   * <p>The placement information for the instance.</p>
+   */
+  Placement?: SpotPlacement;
+
+  /**
+   * @public
+   * <p>The ID of the RAM disk.</p>
+   */
+  RamdiskId?: string;
+
+  /**
+   * @public
+   * <p>The ID of the subnet in which to launch the instance.</p>
+   */
+  SubnetId?: string;
+
+  /**
+   * @public
+   * <p>Describes the monitoring of an instance.</p>
    */
-  SubnetIds?: string[];
+  Monitoring?: RunInstancesMonitoringEnabled;
+}
+
+/**
+ * @public
+ * @enum
+ */
+export const SpotInstanceState = {
+  active: "active",
+  cancelled: "cancelled",
+  closed: "closed",
+  disabled: "disabled",
+  failed: "failed",
+  open: "open",
+} as const;
+
+/**
+ * @public
+ */
+export type SpotInstanceState = (typeof SpotInstanceState)[keyof typeof SpotInstanceState];
 
+/**
+ * @public
+ * <p>Describes the status of a Spot Instance request.</p>
+ */
+export interface SpotInstanceStatus {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The status code. For a list of status codes, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/spot-request-status.html#spot-instance-request-status-understand">Spot request status codes</a> in the <i>Amazon EC2 User Guide for Linux Instances</i>.</p>
    */
-  DryRun?: boolean;
+  Code?: string;
 
   /**
    * @public
-   * <p>The token returned from a previous paginated request. Pagination continues from the end of the items returned by the previous request.</p>
+   * <p>The description for the status code.</p>
    */
-  NextToken?: string;
+  Message?: string;
 
   /**
    * @public
-   * <p>The maximum number of items to return for this request.
-   * 	To get the next page of items, make another request with the token returned in the output.
-   * 	For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
+   * <p>The date and time of the most recent status update, in UTC format (for example,
+   *                 <i>YYYY</i>-<i>MM</i>-<i>DD</i>T<i>HH</i>:<i>MM</i>:<i>SS</i>Z).</p>
    */
-  MaxResults?: number;
+  UpdateTime?: Date;
 }
 
 /**
  * @public
+ * <p>Describes a Spot Instance request.</p>
  */
-export interface DescribeSubnetsResult {
+export interface SpotInstanceRequest {
   /**
    * @public
-   * <p>Information about one or more subnets.</p>
+   * <p>Deprecated.</p>
    */
-  Subnets?: Subnet[];
+  ActualBlockHourlyPrice?: string;
 
   /**
    * @public
-   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there are no more items to return.</p>
+   * <p>The Availability Zone group. If you specify the same Availability Zone group for all Spot Instance requests, all Spot Instances are launched in the same Availability Zone.</p>
    */
-  NextToken?: string;
-}
+  AvailabilityZoneGroup?: string;
 
-/**
- * @public
- */
-export interface DescribeTagsRequest {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>Deprecated.</p>
    */
-  DryRun?: boolean;
+  BlockDurationMinutes?: number;
 
   /**
    * @public
-   * <p>The filters.</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>key</code> - The tag key.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>resource-id</code> - The ID of the resource.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>resource-type</code> - The resource type (<code>customer-gateway</code> | <code>dedicated-host</code> | <code>dhcp-options</code> | <code>elastic-ip</code> | <code>fleet</code> | <code>fpga-image</code> | <code>host-reservation</code> | <code>image</code> | <code>instance</code> | <code>internet-gateway</code> | <code>key-pair</code> | <code>launch-template</code> | <code>natgateway</code> | <code>network-acl</code> | <code>network-interface</code> | <code>placement-group</code> | <code>reserved-instances</code> | <code>route-table</code> | <code>security-group</code> | <code>snapshot</code> | <code>spot-instances-request</code> | <code>subnet</code> | <code>volume</code> | <code>vpc</code> | <code>vpc-endpoint</code> | <code>vpc-endpoint-service</code> | <code>vpc-peering-connection</code> | <code>vpn-connection</code> | <code>vpn-gateway</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>tag</code>:<key> - The key/value combination of the tag. For example,
-   *                 specify "tag:Owner" for the filter name and "TeamA" for the filter value to find
-   *                 resources with the tag "Owner=TeamA".</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>value</code> - The tag value.</p>
-   *             </li>
-   *          </ul>
+   * <p>The date and time when the Spot Instance request was created, in UTC format (for example, <i>YYYY</i>-<i>MM</i>-<i>DD</i>T<i>HH</i>:<i>MM</i>:<i>SS</i>Z).</p>
    */
-  Filters?: Filter[];
+  CreateTime?: Date;
 
   /**
    * @public
-   * <p>The maximum number of items to return for this request. This value can be between 5 and 1000.
-   *          To get the next page of items, make another request with the token returned in the output.
-   *          For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
+   * <p>The fault codes for the Spot Instance request, if any.</p>
    */
-  MaxResults?: number;
+  Fault?: SpotInstanceStateFault;
 
   /**
    * @public
-   * <p>The token returned from a previous paginated request.
-   *          Pagination continues from the end of the items returned by the previous request.</p>
+   * <p>The instance ID, if an instance has been launched to fulfill the Spot Instance request.</p>
    */
-  NextToken?: string;
-}
+  InstanceId?: string;
 
-/**
- * @public
- * <p>Describes a tag.</p>
- */
-export interface TagDescription {
   /**
    * @public
-   * <p>The tag key.</p>
+   * <p>The instance launch group. Launch groups are Spot Instances that launch together and terminate together.</p>
    */
-  Key?: string;
+  LaunchGroup?: string;
 
   /**
    * @public
-   * <p>The ID of the resource.</p>
+   * <p>Additional information for launching instances.</p>
    */
-  ResourceId?: string;
+  LaunchSpecification?: LaunchSpecification;
 
   /**
    * @public
-   * <p>The resource type.</p>
+   * <p>The Availability Zone in which the request is launched.</p>
    */
-  ResourceType?: ResourceType;
+  LaunchedAvailabilityZone?: string;
 
   /**
    * @public
-   * <p>The tag value.</p>
+   * <p>The product description associated with the Spot Instance.</p>
    */
-  Value?: string;
-}
+  ProductDescription?: RIProductDescription;
 
-/**
- * @public
- */
-export interface DescribeTagsResult {
   /**
    * @public
-   * <p>The token to include in another request to get the next page of items.
-   *          This value is <code>null</code> when there are no more items to return.</p>
+   * <p>The ID of the Spot Instance request.</p>
    */
-  NextToken?: string;
+  SpotInstanceRequestId?: string;
 
   /**
    * @public
-   * <p>The tags.</p>
+   * <p>The maximum price per unit hour that you are willing to pay for a Spot Instance. We do not recommend
+   *             using this parameter because it can lead to increased interruptions. If you do not specify this parameter, you will pay the current Spot price.</p>
+   *          <important>
+   *             <p>If you specify a maximum price, your instances will be interrupted more frequently than if you do not specify this parameter.</p>
+   *          </important>
+   */
+  SpotPrice?: string;
+
+  /**
+   * @public
+   * <p>The state of the Spot Instance request. Spot request status information helps track your Spot
+   *             Instance requests. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/spot-request-status.html">Spot request status</a> in the
+   *                 <i>Amazon EC2 User Guide for Linux Instances</i>.</p>
+   */
+  State?: SpotInstanceState;
+
+  /**
+   * @public
+   * <p>The status code and status message describing the Spot Instance request.</p>
+   */
+  Status?: SpotInstanceStatus;
+
+  /**
+   * @public
+   * <p>Any tags assigned to the resource.</p>
+   */
+  Tags?: Tag[];
+
+  /**
+   * @public
+   * <p>The Spot Instance request type.</p>
+   */
+  Type?: SpotInstanceType;
+
+  /**
+   * @public
+   * <p>The start date of the request, in UTC format (for example,
+   *                 <i>YYYY</i>-<i>MM</i>-<i>DD</i>T<i>HH</i>:<i>MM</i>:<i>SS</i>Z).
+   *             The request becomes active at this date and time.</p>
+   */
+  ValidFrom?: Date;
+
+  /**
+   * @public
+   * <p>The end date of the request, in UTC format
+   *                 (<i>YYYY</i>-<i>MM</i>-<i>DD</i>T<i>HH</i>:<i>MM</i>:<i>SS</i>Z).</p>
+   *          <ul>
+   *             <li>
+   *                <p>For a persistent request, the request remains active until the <code>validUntil</code> date
+   *                     and time is reached. Otherwise, the request remains active until you cancel it.
+   *                 </p>
+   *             </li>
+   *             <li>
+   *                <p>For a one-time request, the request remains active until all instances launch,
+   *                     the request is canceled, or the <code>validUntil</code> date and time is reached. By default, the
+   *                     request is valid for 7 days from the date the request was created.</p>
+   *             </li>
+   *          </ul>
    */
-  Tags?: TagDescription[];
+  ValidUntil?: Date;
+
+  /**
+   * @public
+   * <p>The behavior when a Spot Instance is interrupted.</p>
+   */
+  InstanceInterruptionBehavior?: InstanceInterruptionBehavior;
 }
 
 /**
  * @public
+ * <p>Contains the output of DescribeSpotInstanceRequests.</p>
  */
-export interface DescribeTrafficMirrorFiltersRequest {
+export interface DescribeSpotInstanceRequestsResult {
   /**
    * @public
-   * <p>The ID of the Traffic Mirror filter.</p>
+   * <p>The Spot Instance requests.</p>
    */
-  TrafficMirrorFilterIds?: string[];
+  SpotInstanceRequests?: SpotInstanceRequest[];
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there
+   *          are no more items to return.</p>
    */
-  DryRun?: boolean;
+  NextToken?: string;
+}
 
+/**
+ * @public
+ * <p>Contains the parameters for DescribeSpotPriceHistory.</p>
+ */
+export interface DescribeSpotPriceHistoryRequest {
   /**
    * @public
-   * <p>One or more filters. The possible values are:</p>
+   * <p>The filters.</p>
    *          <ul>
    *             <li>
    *                <p>
-   *                   <code>description</code>: The Traffic Mirror filter description.</p>
+   *                   <code>availability-zone</code> - The Availability Zone for which prices should
+   *                     be returned.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>instance-type</code> - The type of instance (for example,
+   *                     <code>m3.medium</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>product-description</code> - The product description for the Spot price
+   *                     (<code>Linux/UNIX</code> | <code>Red Hat Enterprise Linux</code> |
+   *                     <code>SUSE Linux</code> | <code>Windows</code> | <code>Linux/UNIX (Amazon
+   *                         VPC)</code> | <code>Red Hat Enterprise Linux (Amazon VPC)</code> |
+   *                     <code>SUSE Linux (Amazon VPC)</code> | <code>Windows (Amazon
+   *                         VPC)</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>spot-price</code> - The Spot price. The value must match exactly (or use
+   *                     wildcards; greater than or less than comparison is not supported).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>traffic-mirror-filter-id</code>: The ID of the Traffic Mirror filter.</p>
+   *                   <code>timestamp</code> - The time stamp of the Spot price history, in UTC format
+   *                     (for example, <i>ddd MMM dd
+   *                         HH</i>:<i>mm</i>:<i>ss</i> UTC
+   *                         <i>YYYY</i>). You can use wildcards (<code>*</code> and
+   *                         <code>?</code>). Greater than or less than comparison is not
+   *                     supported.</p>
    *             </li>
    *          </ul>
    */
-  Filters?: Filter[];
+  Filters?: Filter[];
+
+  /**
+   * @public
+   * <p>Filters the results by the specified Availability Zone.</p>
+   */
+  AvailabilityZone?: string;
+
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually
+   *             making the request, and provides an error response. If you have the required
+   *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
+   *             <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
+
+  /**
+   * @public
+   * <p>The date and time, up to the current date, from which to stop retrieving the price
+   *             history data, in UTC format (for example,
+   *             <i>YYYY</i>-<i>MM</i>-<i>DD</i>T<i>HH</i>:<i>MM</i>:<i>SS</i>Z).</p>
+   */
+  EndTime?: Date;
+
+  /**
+   * @public
+   * <p>Filters the results by the specified instance types.</p>
+   */
+  InstanceTypes?: _InstanceType[];
 
   /**
    * @public
-   * <p>The maximum number of results to return with a single call.
-   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
+   * <p>The maximum number of items to return for this request.
+   *          To get the next page of items, make another request with the token returned in the output.
+   * 	        For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
    */
   MaxResults?: number;
 
   /**
    * @public
-   * <p>The token for the next page of results.</p>
+   * <p>The token returned from a previous paginated request. Pagination continues from the end of the items returned by the previous request.</p>
    */
   NextToken?: string;
-}
 
-/**
- * @public
- */
-export interface DescribeTrafficMirrorFiltersResult {
   /**
    * @public
-   * <p>Information about one or more Traffic Mirror filters.</p>
+   * <p>Filters the results by the specified basic product descriptions.</p>
    */
-  TrafficMirrorFilters?: TrafficMirrorFilter[];
+  ProductDescriptions?: string[];
 
   /**
    * @public
-   * <p>The token to use to retrieve the next page of results. The value is <code>null</code> when there are no more results to return.</p>
+   * <p>The date and time, up to the past 90 days, from which to start retrieving the price
+   *             history data, in UTC format (for example,
+   *             <i>YYYY</i>-<i>MM</i>-<i>DD</i>T<i>HH</i>:<i>MM</i>:<i>SS</i>Z).</p>
    */
-  NextToken?: string;
+  StartTime?: Date;
 }
 
 /**
  * @public
+ * <p>The maximum price per unit hour that you are willing to pay for a Spot Instance. We do not recommend
+ *             using this parameter because it can lead to increased interruptions. If you do not specify this parameter, you will pay the current Spot price.</p>
+ *          <important>
+ *             <p>If you specify a maximum price, your instances will be interrupted more frequently than if you do not specify this parameter.</p>
+ *          </important>
  */
-export interface DescribeTrafficMirrorSessionsRequest {
+export interface SpotPrice {
   /**
    * @public
-   * <p>The ID of the Traffic Mirror session.</p>
+   * <p>The Availability Zone.</p>
    */
-  TrafficMirrorSessionIds?: string[];
+  AvailabilityZone?: string;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The instance type.</p>
    */
-  DryRun?: boolean;
+  InstanceType?: _InstanceType;
 
   /**
    * @public
-   * <p>One or more filters. The possible values are:</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>description</code>: The Traffic Mirror session description.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>network-interface-id</code>: The ID of the Traffic Mirror session network interface.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>owner-id</code>: The ID of the account that owns the Traffic Mirror session.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>packet-length</code>: The assigned number of packets to mirror. </p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>session-number</code>: The assigned session number. </p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>traffic-mirror-filter-id</code>: The ID of the Traffic Mirror filter.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>traffic-mirror-session-id</code>: The ID of the Traffic Mirror session.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>traffic-mirror-target-id</code>: The ID of the Traffic Mirror target.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>virtual-network-id</code>: The virtual network ID of the Traffic Mirror session.</p>
-   *             </li>
-   *          </ul>
+   * <p>A general description of the AMI.</p>
    */
-  Filters?: Filter[];
+  ProductDescription?: RIProductDescription;
 
   /**
    * @public
-   * <p>The maximum number of results to return with a single call.
-   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
+   * <p>The maximum price per unit hour that you are willing to pay for a Spot Instance. We do not recommend
+   *             using this parameter because it can lead to increased interruptions. If you do not specify this parameter, you will pay the current Spot price.</p>
+   *          <important>
+   *             <p>If you specify a maximum price, your instances will be interrupted more frequently than if you do not specify this parameter.</p>
+   *          </important>
    */
-  MaxResults?: number;
+  SpotPrice?: string;
 
   /**
    * @public
-   * <p>The token for the next page of results.</p>
+   * <p>The date and time the request was created, in UTC format (for example,
+   *                 <i>YYYY</i>-<i>MM</i>-<i>DD</i>T<i>HH</i>:<i>MM</i>:<i>SS</i>Z).</p>
    */
-  NextToken?: string;
+  Timestamp?: Date;
 }
 
 /**
  * @public
+ * <p>Contains the output of DescribeSpotPriceHistory.</p>
  */
-export interface DescribeTrafficMirrorSessionsResult {
+export interface DescribeSpotPriceHistoryResult {
   /**
    * @public
-   * <p>Describes one or more Traffic Mirror sessions. By default, all Traffic Mirror sessions are described. Alternatively, you can filter the results.</p>
+   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there
+   *          are no more items to return.</p>
    */
-  TrafficMirrorSessions?: TrafficMirrorSession[];
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The token to use to retrieve the next page of results. The value is <code>null</code> when there are no more results to return.</p>
+   * <p>The historical Spot prices.</p>
    */
-  NextToken?: string;
+  SpotPriceHistory?: SpotPrice[];
 }
 
 /**
  * @public
  */
-export interface DescribeTrafficMirrorTargetsRequest {
-  /**
-   * @public
-   * <p>The ID of the Traffic Mirror targets.</p>
-   */
-  TrafficMirrorTargetIds?: string[];
-
+export interface DescribeStaleSecurityGroupsRequest {
   /**
    * @public
    * <p>Checks whether you have the required permissions for the action, without actually making the request,
@@ -12558,310 +12462,251 @@ export interface DescribeTrafficMirrorTargetsRequest {
 
   /**
    * @public
-   * <p>One or more filters. The possible values are:</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>description</code>: The Traffic Mirror target description.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>network-interface-id</code>: The ID of the Traffic Mirror session network interface.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>network-load-balancer-arn</code>: The Amazon Resource Name (ARN) of the Network Load Balancer that is associated with the session.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>owner-id</code>: The ID of the account that owns the Traffic Mirror session.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>traffic-mirror-target-id</code>: The ID of the Traffic Mirror target.</p>
-   *             </li>
-   *          </ul>
+   * <p>The maximum number of items to return for this request. To get the next page of items,
+   *           make another request with the token returned in the output. For more information,
+   *           see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
    */
-  Filters?: Filter[];
+  MaxResults?: number;
 
   /**
    * @public
-   * <p>The maximum number of results to return with a single call.
-   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
+   * <p>The token returned from a previous paginated request.
+   *           Pagination continues from the end of the items returned by the previous request.</p>
    */
-  MaxResults?: number;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The token for the next page of results.</p>
+   * <p>The ID of the VPC.</p>
    */
-  NextToken?: string;
+  VpcId: string | undefined;
 }
 
 /**
  * @public
+ * <p>Describes a stale rule in a security group.</p>
  */
-export interface DescribeTrafficMirrorTargetsResult {
-  /**
-   * @public
-   * <p>Information about one or more Traffic Mirror targets.</p>
-   */
-  TrafficMirrorTargets?: TrafficMirrorTarget[];
-
+export interface StaleIpPermission {
   /**
    * @public
-   * <p>The token to use to retrieve the next page of results. The value is <code>null</code> when there are no more results to return.</p>
+   * <p>The start of the port range for the TCP and UDP protocols, or an ICMP type number. A value of
+   *         -1 indicates all ICMP types. </p>
    */
-  NextToken?: string;
-}
+  FromPort?: number;
 
-/**
- * @public
- */
-export interface DescribeTransitGatewayAttachmentsRequest {
   /**
    * @public
-   * <p>The IDs of the attachments.</p>
+   * <p>The IP protocol name (for <code>tcp</code>, <code>udp</code>, and <code>icmp</code>) or number  (see <a href="http://www.iana.org/assignments/protocol-numbers/protocol-numbers.xhtml">Protocol Numbers)</a>.</p>
    */
-  TransitGatewayAttachmentIds?: string[];
+  IpProtocol?: string;
 
   /**
    * @public
-   * <p>One or more filters. The possible values are:</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>association.state</code> - The state of the association (<code>associating</code> | <code>associated</code> |
-   *                <code>disassociating</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>association.transit-gateway-route-table-id</code> - The ID of the route table for the transit gateway.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>resource-id</code> - The ID of the resource.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>resource-owner-id</code> - The ID of the Amazon Web Services account that owns the resource.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>resource-type</code> - The resource type. Valid values are <code>vpc</code>
-   *                     | <code>vpn</code> | <code>direct-connect-gateway</code> | <code>peering</code>
-   *                     | <code>connect</code>.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>state</code> - The state of the attachment. Valid values are <code>available</code> | <code>deleted</code> | <code>deleting</code> | <code>failed</code> |  <code>failing</code> | <code>initiatingRequest</code> | <code>modifying</code> | <code>pendingAcceptance</code> | <code>pending</code> | <code>rollingBack</code> | <code>rejected</code> | <code>rejecting</code>.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>transit-gateway-attachment-id</code> - The ID of the attachment.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>transit-gateway-id</code> - The ID of the transit gateway.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>transit-gateway-owner-id</code> - The ID of the Amazon Web Services account that owns the transit gateway.</p>
-   *             </li>
-   *          </ul>
+   * <p>The IP ranges. Not applicable for stale security group rules.</p>
    */
-  Filters?: Filter[];
+  IpRanges?: string[];
 
   /**
    * @public
-   * <p>The maximum number of results to return with a single call.
-   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
+   * <p>The prefix list IDs. Not applicable for stale security group rules.</p>
    */
-  MaxResults?: number;
+  PrefixListIds?: string[];
 
   /**
    * @public
-   * <p>The token for the next page of results.</p>
+   * <p>The end of the port range for the TCP and UDP protocols, or an ICMP type number. A value of
+   *         <code>-1</code> indicates all ICMP types. </p>
    */
-  NextToken?: string;
+  ToPort?: number;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The security group pairs. Returns the ID of the referenced security group and VPC, and the ID and status of the VPC peering connection.</p>
    */
-  DryRun?: boolean;
+  UserIdGroupPairs?: UserIdGroupPair[];
 }
 
 /**
  * @public
- * <p>Describes an association.</p>
+ * <p>Describes a stale security group (a security group that contains stale rules).</p>
  */
-export interface TransitGatewayAttachmentAssociation {
+export interface StaleSecurityGroup {
   /**
    * @public
-   * <p>The ID of the route table for the transit gateway.</p>
+   * <p>The description of the security group.</p>
    */
-  TransitGatewayRouteTableId?: string;
+  Description?: string;
 
   /**
    * @public
-   * <p>The state of the association.</p>
+   * <p>The ID of the security group.</p>
    */
-  State?: TransitGatewayAssociationState;
-}
+  GroupId?: string;
 
-/**
- * @public
- * <p>Describes an attachment between a resource and a transit gateway.</p>
- */
-export interface TransitGatewayAttachment {
   /**
    * @public
-   * <p>The ID of the attachment.</p>
+   * <p>The name of the security group.</p>
+   */
+  GroupName?: string;
+
+  /**
+   * @public
+   * <p>Information about the stale inbound rules in the security group.</p>
    */
-  TransitGatewayAttachmentId?: string;
+  StaleIpPermissions?: StaleIpPermission[];
 
   /**
    * @public
-   * <p>The ID of the transit gateway.</p>
+   * <p>Information about the stale outbound rules in the security group.</p>
    */
-  TransitGatewayId?: string;
+  StaleIpPermissionsEgress?: StaleIpPermission[];
 
   /**
    * @public
-   * <p>The ID of the Amazon Web Services account that owns the transit gateway.</p>
+   * <p>The ID of the VPC for the security group.</p>
    */
-  TransitGatewayOwnerId?: string;
+  VpcId?: string;
+}
 
+/**
+ * @public
+ */
+export interface DescribeStaleSecurityGroupsResult {
   /**
    * @public
-   * <p>The ID of the Amazon Web Services account that owns the resource.</p>
+   * <p>The token to include in another request to get the next page of items.
+   *           If there are no additional items to return, the string is empty.</p>
    */
-  ResourceOwnerId?: string;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The resource type. Note that the <code>tgw-peering</code> resource type has been deprecated.</p>
+   * <p>Information about the stale security groups.</p>
    */
-  ResourceType?: TransitGatewayAttachmentResourceType;
+  StaleSecurityGroupSet?: StaleSecurityGroup[];
+}
 
+/**
+ * @public
+ */
+export interface DescribeStoreImageTasksRequest {
   /**
    * @public
-   * <p>The ID of the resource.</p>
+   * <p>The AMI IDs for which to show progress. Up to 20 AMI IDs can be included in a request.</p>
    */
-  ResourceId?: string;
+  ImageIds?: string[];
 
   /**
    * @public
-   * <p>The attachment state. Note that the <code>initiating</code> state has been deprecated.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   * 			and provides an error response. If you have the required permissions, the error response is
+   * 			<code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  State?: TransitGatewayAttachmentState;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The association.</p>
+   * <p>The filters.</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>task-state</code> - Returns tasks in a certain state (<code>InProgress</code> |
+   *             <code>Completed</code> | <code>Failed</code>)</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>bucket</code> - Returns task information for tasks that targeted a specific
+   *           bucket. For the filter value, specify the bucket name.</p>
+   *             </li>
+   *          </ul>
+   *          <note>
+   *             <p>When you specify the <code>ImageIds</code> parameter, any filters that you specify are
+   *         ignored. To use the filters, you must remove the <code>ImageIds</code> parameter.</p>
+   *          </note>
    */
-  Association?: TransitGatewayAttachmentAssociation;
+  Filters?: Filter[];
 
   /**
    * @public
-   * <p>The creation time.</p>
+   * <p>The token returned from a previous paginated request. Pagination continues from the end of the items returned by the previous request.</p>
    */
-  CreationTime?: Date;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The tags for the attachment.</p>
+   * <p>The maximum number of items to return for this request.
+   *          To get the next page of items, make another request with the token returned in the output.
+   * 	        For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
+   *          <p>You cannot specify this parameter and the <code>ImageIds</code> parameter in the same
+   *       call.</p>
    */
-  Tags?: Tag[];
+  MaxResults?: number;
 }
 
 /**
  * @public
+ * <p>The information about the AMI store task, including the progress of the task.</p>
  */
-export interface DescribeTransitGatewayAttachmentsResult {
+export interface StoreImageTaskResult {
   /**
    * @public
-   * <p>Information about the attachments.</p>
+   * <p>The ID of the AMI that is being stored.</p>
    */
-  TransitGatewayAttachments?: TransitGatewayAttachment[];
+  AmiId?: string;
 
   /**
    * @public
-   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
+   * <p>The time the task started.</p>
    */
-  NextToken?: string;
-}
+  TaskStartTime?: Date;
 
-/**
- * @public
- */
-export interface DescribeTransitGatewayConnectPeersRequest {
   /**
    * @public
-   * <p>The IDs of the Connect peers.</p>
+   * <p>The name of the Amazon S3 bucket that contains the stored AMI object.</p>
    */
-  TransitGatewayConnectPeerIds?: string[];
+  Bucket?: string;
 
   /**
    * @public
-   * <p>One or more filters. The possible values are:</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>state</code> - The state of the Connect peer (<code>pending</code> |
-   *                         <code>available</code> | <code>deleting</code> |
-   *                     <code>deleted</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>transit-gateway-attachment-id</code> - The ID of the attachment.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>transit-gateway-connect-peer-id</code> - The ID of the Connect peer.</p>
-   *             </li>
-   *          </ul>
+   * <p>The name of the stored AMI object in the bucket.</p>
    */
-  Filters?: Filter[];
+  S3objectKey?: string;
 
   /**
    * @public
-   * <p>The maximum number of results to return with a single call.
-   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
+   * <p>The progress of the task as a percentage.</p>
    */
-  MaxResults?: number;
+  ProgressPercentage?: number;
 
   /**
    * @public
-   * <p>The token for the next page of results.</p>
+   * <p>The state of the store task (<code>InProgress</code>, <code>Completed</code>, or
+   *         <code>Failed</code>).</p>
    */
-  NextToken?: string;
+  StoreTaskState?: string;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>If the tasks fails, the reason for the failure is returned. If the task succeeds,
+   *         <code>null</code> is returned.</p>
    */
-  DryRun?: boolean;
+  StoreTaskFailureReason?: string;
 }
 
 /**
  * @public
  */
-export interface DescribeTransitGatewayConnectPeersResult {
+export interface DescribeStoreImageTasksResult {
   /**
    * @public
-   * <p>Information about the Connect peers.</p>
+   * <p>The information about the AMI store tasks.</p>
    */
-  TransitGatewayConnectPeers?: TransitGatewayConnectPeer[];
+  StoreImageTaskResults?: StoreImageTaskResult[];
 
   /**
    * @public
-   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
+   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there
+   *          are no more items to return.</p>
    */
   NextToken?: string;
 }
@@ -12869,42 +12714,141 @@ export interface DescribeTransitGatewayConnectPeersResult {
 /**
  * @public
  */
-export interface DescribeTransitGatewayConnectsRequest {
-  /**
-   * @public
-   * <p>The IDs of the attachments.</p>
-   */
-  TransitGatewayAttachmentIds?: string[];
-
+export interface DescribeSubnetsRequest {
   /**
    * @public
-   * <p>One or more filters. The possible values are:</p>
+   * <p>The filters.</p>
    *          <ul>
    *             <li>
    *                <p>
-   *                   <code>options.protocol</code> - The tunnel protocol (<code>gre</code>).</p>
+   *                   <code>availability-zone</code> - The Availability Zone for the subnet. You can also use
+   *                     <code>availabilityZone</code> as the filter name.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>availability-zone-id</code> - The ID of the Availability Zone for the subnet.
+   *                     You can also use <code>availabilityZoneId</code> as the filter name.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>available-ip-address-count</code> - The number of IPv4 addresses in the
+   *                     subnet that are available.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>cidr-block</code> - The IPv4 CIDR block of the subnet. The CIDR block
+   *                     you specify must exactly match the subnet's CIDR block for information to be
+   *                     returned for the subnet. You can also use <code>cidr</code> or
+   *                         <code>cidrBlock</code> as the filter names.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>customer-owned-ipv4-pool</code> - The customer-owned IPv4 address pool
+   *                     associated with the subnet.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>default-for-az</code> - Indicates whether this is the default subnet for
+   *                     the Availability Zone (<code>true</code> | <code>false</code>). You can also use
+   *                         <code>defaultForAz</code> as the filter name.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>enable-dns64</code> - Indicates whether DNS queries made to the
+   *                     Amazon-provided DNS Resolver in this subnet should return synthetic IPv6
+   *                     addresses for IPv4-only destinations.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>enable-lni-at-device-index</code> - Indicates the device position for
+   *                     local network interfaces in this subnet. For example, <code>1</code> indicates
+   *                     local network interfaces in this subnet are the secondary network interface
+   *                     (eth1). </p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>ipv6-cidr-block-association.ipv6-cidr-block</code> - An IPv6 CIDR
+   *                     block associated with the subnet.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>ipv6-cidr-block-association.association-id</code> - An association ID
+   *                     for an IPv6 CIDR block associated with the subnet.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>ipv6-cidr-block-association.state</code> - The state of an IPv6 CIDR
+   *                     block associated with the subnet.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>ipv6-native</code> - Indicates whether this is an IPv6 only subnet
+   *                         (<code>true</code> | <code>false</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>map-customer-owned-ip-on-launch</code> - Indicates whether a network
+   *                     interface created in this subnet (including a network interface created by <a>RunInstances</a>) receives a customer-owned IPv4 address.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>map-public-ip-on-launch</code> - Indicates whether instances launched in
+   *                     this subnet receive a public IPv4 address.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>outpost-arn</code> - The Amazon Resource Name (ARN) of the Outpost.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>owner-id</code> - The ID of the Amazon Web Services account that owns the
+   *                     subnet.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>private-dns-name-options-on-launch.hostname-type</code> - The type of
+   *                     hostname to assign to instances in the subnet at launch. For IPv4-only and
+   *                     dual-stack (IPv4 and IPv6) subnets, an instance DNS name can be based on the
+   *                     instance IPv4 address (ip-name) or the instance ID (resource-name). For IPv6
+   *                     only subnets, an instance DNS name must be based on the instance ID
+   *                     (resource-name).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>private-dns-name-options-on-launch.enable-resource-name-dns-a-record</code>
+   *                     - Indicates whether to respond to DNS queries for instance hostnames with DNS A
+   *                     records.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>private-dns-name-options-on-launch.enable-resource-name-dns-aaaa-record</code>
+   *                     - Indicates whether to respond to DNS queries for instance hostnames with DNS
+   *                     AAAA records.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>state</code> - The state of the subnet (<code>pending</code> | <code>available</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>subnet-arn</code> - The Amazon Resource Name (ARN) of the subnet.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>state</code> - The state of the attachment (<code>initiating</code> |
-   *                         <code>initiatingRequest</code> | <code>pendingAcceptance</code> |
-   *                         <code>rollingBack</code> | <code>pending</code> | <code>available</code> |
-   *                         <code>modifying</code> | <code>deleting</code> | <code>deleted</code> |
-   *                         <code>failed</code> | <code>rejected</code> | <code>rejecting</code> |
-   *                         <code>failing</code>).</p>
+   *                   <code>subnet-id</code> - The ID of the subnet.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>transit-gateway-attachment-id</code> - The ID of the
-   *                     Connect attachment.</p>
+   *                   <code>tag</code>:<key> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value.
+   *     For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>transit-gateway-id</code> - The ID of the transit gateway.</p>
+   *                   <code>tag-key</code> - The key of a tag assigned to the resource. Use this filter to find all resources assigned a tag with a specific key, regardless of the tag value.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>transport-transit-gateway-attachment-id</code> - The ID of the transit gateway attachment from which the Connect attachment was created.</p>
+   *                   <code>vpc-id</code> - The ID of the VPC for the subnet.</p>
    *             </li>
    *          </ul>
    */
@@ -12912,16 +12856,10 @@ export interface DescribeTransitGatewayConnectsRequest {
 
   /**
    * @public
-   * <p>The maximum number of results to return with a single call.
-   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
-   */
-  MaxResults?: number;
-
-  /**
-   * @public
-   * <p>The token for the next page of results.</p>
+   * <p>The IDs of the subnets.</p>
+   *          <p>Default: Describes all your subnets.</p>
    */
-  NextToken?: string;
+  SubnetIds?: string[];
 
   /**
    * @public
@@ -12930,76 +12868,64 @@ export interface DescribeTransitGatewayConnectsRequest {
    *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
-}
 
-/**
- * @public
- */
-export interface DescribeTransitGatewayConnectsResult {
   /**
    * @public
-   * <p>Information about the Connect attachments.</p>
+   * <p>The token returned from a previous paginated request. Pagination continues from the end of the items returned by the previous request.</p>
    */
-  TransitGatewayConnects?: TransitGatewayConnect[];
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
+   * <p>The maximum number of items to return for this request.
+   * 	To get the next page of items, make another request with the token returned in the output.
+   * 	For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
    */
-  NextToken?: string;
+  MaxResults?: number;
 }
 
 /**
  * @public
  */
-export interface DescribeTransitGatewayMulticastDomainsRequest {
+export interface DescribeSubnetsResult {
   /**
    * @public
-   * <p>The ID of the transit gateway multicast domain.</p>
+   * <p>Information about one or more subnets.</p>
    */
-  TransitGatewayMulticastDomainIds?: string[];
+  Subnets?: Subnet[];
 
   /**
    * @public
-   * <p>One or more filters. The possible values are:</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>state</code> - The state of the transit gateway multicast domain. Valid values are <code>pending</code> | <code>available</code> | <code>deleting</code> | <code>deleted</code>.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>transit-gateway-id</code> - The ID of the transit gateway.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>transit-gateway-multicast-domain-id</code> - The ID of the transit gateway multicast domain.</p>
-   *             </li>
-   *          </ul>
+   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there are no more items to return.</p>
    */
-  Filters?: Filter[];
+  NextToken?: string;
+}
 
-  /**
-   * @public
-   * <p>The maximum number of results to return with a single call.
-   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
-   */
-  MaxResults?: number;
+/**
+ * @internal
+ */
+export const SnapshotTaskDetailFilterSensitiveLog = (obj: SnapshotTaskDetail): any => ({
+  ...obj,
+  ...(obj.Url && { Url: SENSITIVE_STRING }),
+});
 
-  /**
-   * @public
-   * <p>The token for the next page of results.</p>
-   */
-  NextToken?: string;
+/**
+ * @internal
+ */
+export const ImportSnapshotTaskFilterSensitiveLog = (obj: ImportSnapshotTask): any => ({
+  ...obj,
+  ...(obj.SnapshotTaskDetail && { SnapshotTaskDetail: SnapshotTaskDetailFilterSensitiveLog(obj.SnapshotTaskDetail) }),
+});
 
-  /**
-   * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-   */
-  DryRun?: boolean;
-}
+/**
+ * @internal
+ */
+export const DescribeImportSnapshotTasksResultFilterSensitiveLog = (obj: DescribeImportSnapshotTasksResult): any => ({
+  ...obj,
+  ...(obj.ImportSnapshotTasks && {
+    ImportSnapshotTasks: obj.ImportSnapshotTasks.map((item) => ImportSnapshotTaskFilterSensitiveLog(item)),
+  }),
+});
 
 /**
  * @internal
diff --git a/clients/client-ec2/src/models/models_5.ts b/clients/client-ec2/src/models/models_5.ts
index 38068c9ca1130..de8163f89dc07 100644
--- a/clients/client-ec2/src/models/models_5.ts
+++ b/clients/client-ec2/src/models/models_5.ts
@@ -1,10 +1,8 @@
 // smithy-typescript generated code
-import { SENSITIVE_STRING } from "@smithy/smithy-client";
-
 import {
-  AccessScopeAnalysisFinding,
   AddressTransfer,
   AllowedPrincipal,
+  AsnAssociation,
   AssociationStatus,
   CapacityReservationState,
   CurrencyCodeValues,
@@ -13,12 +11,14 @@ import {
   IpamPoolAllocation,
   IpamResourceDiscoveryAssociation,
   NatGatewayAddress,
+  ResourceType,
   SubnetIpv6CidrBlockAssociation,
   Tag,
   TagSpecification,
-  TargetConfigurationRequest,
   TransitGatewayAssociation,
+  TransitGatewayAssociationState,
   TransitGatewayAttachmentResourceType,
+  TransitGatewayAttachmentState,
   TransitGatewayMulticastDomainAssociations,
   TransitGatewayPeeringAttachment,
   TransitGatewayPolicyTableAssociation,
@@ -31,17 +31,7 @@ import {
   VpcIpv6CidrBlockAssociation,
   VpcPeeringConnection,
 } from "./models_0";
-import {
-  DiskImageFormat,
-  InstanceRequirementsRequest,
-  IpamResourceTag,
-  NetworkInsightsAccessScopeContent,
-  RequestIpamResourceTag,
-  ResponseLaunchTemplateData,
-  ResponseLaunchTemplateDataFilterSensitiveLog,
-  VolumeType,
-  Vpc,
-} from "./models_1";
+import { DiskImageFormat, InstanceRequirementsRequest, IpamResourceTag, VolumeType, Vpc } from "./models_1";
 import {
   ConnectionNotification,
   DnsEntry,
@@ -53,7 +43,12 @@ import {
   ServiceTypeDetail,
   SSEType,
   State,
+  TrafficMirrorFilter,
+  TrafficMirrorSession,
+  TrafficMirrorTarget,
   TransitGateway,
+  TransitGatewayConnect,
+  TransitGatewayConnectPeer,
   TransitGatewayMulticastDomain,
   TransitGatewayPolicyTable,
   TransitGatewayRouteTable,
@@ -67,7 +62,6 @@ import {
   VpnGateway,
 } from "./models_2";
 import {
-  AttributeBooleanValue,
   ExportTaskS3Location,
   FastLaunchLaunchTemplateSpecificationResponse,
   FastLaunchResourceType,
@@ -83,67 +77,45 @@ import {
   StatisticType,
   VirtualizationType,
 } from "./models_3";
-import { AnalysisStatus, ArchitectureType } from "./models_4";
-
-/**
- * @public
- */
-export interface DescribeTransitGatewayMulticastDomainsResult {
-  /**
-   * @public
-   * <p>Information about the transit gateway multicast domains.</p>
-   */
-  TransitGatewayMulticastDomains?: TransitGatewayMulticastDomain[];
-
-  /**
-   * @public
-   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
-   */
-  NextToken?: string;
-}
+import { ArchitectureType, AttributeBooleanValue } from "./models_4";
 
 /**
  * @public
  */
-export interface DescribeTransitGatewayPeeringAttachmentsRequest {
+export interface DescribeTagsRequest {
   /**
    * @public
-   * <p>One or more IDs of the transit gateway peering attachments.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  TransitGatewayAttachmentIds?: string[];
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>One or more filters. The possible values are:</p>
+   * <p>The filters.</p>
    *          <ul>
    *             <li>
    *                <p>
-   *                   <code>transit-gateway-attachment-id</code> - The ID of the transit gateway attachment.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>local-owner-id</code> - The ID of your Amazon Web Services account.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>remote-owner-id</code> - The ID of the Amazon Web Services account in the remote Region that owns the transit gateway.</p>
+   *                   <code>key</code> - The tag key.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>state</code> - The state of the peering attachment. Valid values are <code>available</code> | <code>deleted</code> | <code>deleting</code> | <code>failed</code> |  <code>failing</code> | <code>initiatingRequest</code> | <code>modifying</code> | <code>pendingAcceptance</code> | <code>pending</code> | <code>rollingBack</code> | <code>rejected</code> | <code>rejecting</code>).</p>
+   *                   <code>resource-id</code> - The ID of the resource.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>tag</code>:<key> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value.
-   *     For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
+   *                   <code>resource-type</code> - The resource type (<code>customer-gateway</code> | <code>dedicated-host</code> | <code>dhcp-options</code> | <code>elastic-ip</code> | <code>fleet</code> | <code>fpga-image</code> | <code>host-reservation</code> | <code>image</code> | <code>instance</code> | <code>internet-gateway</code> | <code>key-pair</code> | <code>launch-template</code> | <code>natgateway</code> | <code>network-acl</code> | <code>network-interface</code> | <code>placement-group</code> | <code>reserved-instances</code> | <code>route-table</code> | <code>security-group</code> | <code>snapshot</code> | <code>spot-instances-request</code> | <code>subnet</code> | <code>volume</code> | <code>vpc</code> | <code>vpc-endpoint</code> | <code>vpc-endpoint-service</code> | <code>vpc-peering-connection</code> | <code>vpn-connection</code> | <code>vpn-gateway</code>).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>tag-key</code> - The key of a tag assigned to the resource. Use this filter to find all resources that have a tag with a specific key, regardless of the tag value.</p>
+   *                   <code>tag</code>:<key> - The key/value combination of the tag. For example,
+   *                 specify "tag:Owner" for the filter name and "TeamA" for the filter value to find
+   *                 resources with the tag "Owner=TeamA".</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>transit-gateway-id</code> - The ID of the transit gateway.</p>
+   *                   <code>value</code> - The tag value.</p>
    *             </li>
    *          </ul>
    */
@@ -151,111 +123,99 @@ export interface DescribeTransitGatewayPeeringAttachmentsRequest {
 
   /**
    * @public
-   * <p>The maximum number of results to return with a single call.
-   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
+   * <p>The maximum number of items to return for this request. This value can be between 5 and 1000.
+   *          To get the next page of items, make another request with the token returned in the output.
+   *          For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
    */
   MaxResults?: number;
 
   /**
    * @public
-   * <p>The token for the next page of results.</p>
+   * <p>The token returned from a previous paginated request.
+   *          Pagination continues from the end of the items returned by the previous request.</p>
    */
   NextToken?: string;
-
-  /**
-   * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-   */
-  DryRun?: boolean;
 }
 
 /**
  * @public
+ * <p>Describes a tag.</p>
  */
-export interface DescribeTransitGatewayPeeringAttachmentsResult {
+export interface TagDescription {
   /**
    * @public
-   * <p>The transit gateway peering attachments.</p>
-   */
-  TransitGatewayPeeringAttachments?: TransitGatewayPeeringAttachment[];
-
-  /**
-   * @public
-   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
+   * <p>The tag key.</p>
    */
-  NextToken?: string;
-}
+  Key?: string;
 
-/**
- * @public
- */
-export interface DescribeTransitGatewayPolicyTablesRequest {
   /**
    * @public
-   * <p>The IDs of the transit gateway policy tables.</p>
+   * <p>The ID of the resource.</p>
    */
-  TransitGatewayPolicyTableIds?: string[];
+  ResourceId?: string;
 
   /**
    * @public
-   * <p>The filters associated with the transit gateway policy table.</p>
+   * <p>The resource type.</p>
    */
-  Filters?: Filter[];
+  ResourceType?: ResourceType;
 
   /**
    * @public
-   * <p>The maximum number of results to return with a single call.
-   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
+   * <p>The tag value.</p>
    */
-  MaxResults?: number;
+  Value?: string;
+}
 
+/**
+ * @public
+ */
+export interface DescribeTagsResult {
   /**
    * @public
-   * <p>The token for the next page of results.</p>
+   * <p>The token to include in another request to get the next page of items.
+   *          This value is <code>null</code> when there are no more items to return.</p>
    */
   NextToken?: string;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The tags.</p>
    */
-  DryRun?: boolean;
+  Tags?: TagDescription[];
 }
 
 /**
  * @public
  */
-export interface DescribeTransitGatewayPolicyTablesResult {
-  /**
-   * @public
-   * <p>Describes the transit gateway policy tables.</p>
-   */
-  TransitGatewayPolicyTables?: TransitGatewayPolicyTable[];
-
+export interface DescribeTrafficMirrorFiltersRequest {
   /**
    * @public
-   * <p>The token for the next page of results.</p>
+   * <p>The ID of the Traffic Mirror filter.</p>
    */
-  NextToken?: string;
-}
+  TrafficMirrorFilterIds?: string[];
 
-/**
- * @public
- */
-export interface DescribeTransitGatewayRouteTableAnnouncementsRequest {
   /**
    * @public
-   * <p>The IDs of the transit gateway route tables that are being advertised.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  TransitGatewayRouteTableAnnouncementIds?: string[];
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The filters associated with the transit gateway policy table.</p>
+   * <p>One or more filters. The possible values are:</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>description</code>: The Traffic Mirror filter description.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>traffic-mirror-filter-id</code>: The ID of the Traffic Mirror filter.</p>
+   *             </li>
+   *          </ul>
    */
   Filters?: Filter[];
 
@@ -271,29 +231,21 @@ export interface DescribeTransitGatewayRouteTableAnnouncementsRequest {
    * <p>The token for the next page of results.</p>
    */
   NextToken?: string;
-
-  /**
-   * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-   */
-  DryRun?: boolean;
 }
 
 /**
  * @public
  */
-export interface DescribeTransitGatewayRouteTableAnnouncementsResult {
+export interface DescribeTrafficMirrorFiltersResult {
   /**
    * @public
-   * <p>Describes the transit gateway route table announcement.</p>
+   * <p>Information about one or more Traffic Mirror filters.</p>
    */
-  TransitGatewayRouteTableAnnouncements?: TransitGatewayRouteTableAnnouncement[];
+  TrafficMirrorFilters?: TrafficMirrorFilter[];
 
   /**
    * @public
-   * <p>The token for the next page of results.</p>
+   * <p>The token to use to retrieve the next page of results. The value is <code>null</code> when there are no more results to return.</p>
    */
   NextToken?: string;
 }
@@ -301,12 +253,20 @@ export interface DescribeTransitGatewayRouteTableAnnouncementsResult {
 /**
  * @public
  */
-export interface DescribeTransitGatewayRouteTablesRequest {
+export interface DescribeTrafficMirrorSessionsRequest {
   /**
    * @public
-   * <p>The IDs of the transit gateway route tables.</p>
+   * <p>The ID of the Traffic Mirror session.</p>
    */
-  TransitGatewayRouteTableIds?: string[];
+  TrafficMirrorSessionIds?: string[];
+
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
 
   /**
    * @public
@@ -314,25 +274,39 @@ export interface DescribeTransitGatewayRouteTablesRequest {
    *          <ul>
    *             <li>
    *                <p>
-   *                   <code>default-association-route-table</code> - Indicates whether this is the default
-   *                 association route table for the transit gateway (<code>true</code> | <code>false</code>).</p>
+   *                   <code>description</code>: The Traffic Mirror session description.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>default-propagation-route-table</code> - Indicates whether this is the default
-   *                propagation route table for the transit gateway (<code>true</code> | <code>false</code>).</p>
+   *                   <code>network-interface-id</code>: The ID of the Traffic Mirror session network interface.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>state</code> - The state of the route table (<code>available</code> | <code>deleting</code> | <code>deleted</code> | <code>pending</code>).</p>
+   *                   <code>owner-id</code>: The ID of the account that owns the Traffic Mirror session.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>transit-gateway-id</code> - The ID of the transit gateway.</p>
+   *                   <code>packet-length</code>: The assigned number of packets to mirror. </p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>transit-gateway-route-table-id</code> - The ID of the transit gateway route table.</p>
+   *                   <code>session-number</code>: The assigned session number. </p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>traffic-mirror-filter-id</code>: The ID of the Traffic Mirror filter.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>traffic-mirror-session-id</code>: The ID of the Traffic Mirror session.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>traffic-mirror-target-id</code>: The ID of the Traffic Mirror target.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>virtual-network-id</code>: The virtual network ID of the Traffic Mirror session.</p>
    *             </li>
    *          </ul>
    */
@@ -350,29 +324,21 @@ export interface DescribeTransitGatewayRouteTablesRequest {
    * <p>The token for the next page of results.</p>
    */
   NextToken?: string;
-
-  /**
-   * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-   */
-  DryRun?: boolean;
 }
 
 /**
  * @public
  */
-export interface DescribeTransitGatewayRouteTablesResult {
+export interface DescribeTrafficMirrorSessionsResult {
   /**
    * @public
-   * <p>Information about the transit gateway route tables.</p>
+   * <p>Describes one or more Traffic Mirror sessions. By default, all Traffic Mirror sessions are described. Alternatively, you can filter the results.</p>
    */
-  TransitGatewayRouteTables?: TransitGatewayRouteTable[];
+  TrafficMirrorSessions?: TrafficMirrorSession[];
 
   /**
    * @public
-   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
+   * <p>The token to use to retrieve the next page of results. The value is <code>null</code> when there are no more results to return.</p>
    */
   NextToken?: string;
 }
@@ -380,12 +346,20 @@ export interface DescribeTransitGatewayRouteTablesResult {
 /**
  * @public
  */
-export interface DescribeTransitGatewaysRequest {
+export interface DescribeTrafficMirrorTargetsRequest {
   /**
    * @public
-   * <p>The IDs of the transit gateways.</p>
+   * <p>The ID of the Traffic Mirror targets.</p>
    */
-  TransitGatewayIds?: string[];
+  TrafficMirrorTargetIds?: string[];
+
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
 
   /**
    * @public
@@ -393,49 +367,23 @@ export interface DescribeTransitGatewaysRequest {
    *          <ul>
    *             <li>
    *                <p>
-   *                   <code>options.propagation-default-route-table-id</code> - The ID of the default propagation route table.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>options.amazon-side-asn</code> - The private ASN for the Amazon side of a BGP session.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>options.association-default-route-table-id</code> - The ID of the default association route table.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>options.auto-accept-shared-attachments</code> - Indicates whether there is automatic acceptance of attachment requests (<code>enable</code> | <code>disable</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>options.default-route-table-association</code> - Indicates whether resource attachments are automatically
-   *                associated with the default association route table (<code>enable</code> | <code>disable</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>options.default-route-table-propagation</code> - Indicates whether resource attachments automatically propagate
-   *                routes to the default propagation route table (<code>enable</code> | <code>disable</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>options.dns-support</code> - Indicates whether DNS support is enabled (<code>enable</code> | <code>disable</code>).</p>
+   *                   <code>description</code>: The Traffic Mirror target description.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>options.vpn-ecmp-support</code> - Indicates whether Equal Cost Multipath Protocol support is enabled  (<code>enable</code> | <code>disable</code>).</p>
+   *                   <code>network-interface-id</code>: The ID of the Traffic Mirror session network interface.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>owner-id</code> - The ID of the Amazon Web Services account that owns the transit gateway.</p>
+   *                   <code>network-load-balancer-arn</code>: The Amazon Resource Name (ARN) of the Network Load Balancer that is associated with the session.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>state</code> - The state of the transit gateway (<code>available</code> | <code>deleted</code> | <code>deleting</code> | <code>modifying</code> | <code>pending</code>).</p>
+   *                   <code>owner-id</code>: The ID of the account that owns the Traffic Mirror session.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>transit-gateway-id</code> - The ID of the transit gateway.</p>
+   *                   <code>traffic-mirror-target-id</code>: The ID of the Traffic Mirror target.</p>
    *             </li>
    *          </ul>
    */
@@ -453,29 +401,21 @@ export interface DescribeTransitGatewaysRequest {
    * <p>The token for the next page of results.</p>
    */
   NextToken?: string;
-
-  /**
-   * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-   */
-  DryRun?: boolean;
 }
 
 /**
  * @public
  */
-export interface DescribeTransitGatewaysResult {
+export interface DescribeTrafficMirrorTargetsResult {
   /**
    * @public
-   * <p>Information about the transit gateways.</p>
+   * <p>Information about one or more Traffic Mirror targets.</p>
    */
-  TransitGateways?: TransitGateway[];
+  TrafficMirrorTargets?: TrafficMirrorTarget[];
 
   /**
    * @public
-   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
+   * <p>The token to use to retrieve the next page of results. The value is <code>null</code> when there are no more results to return.</p>
    */
   NextToken?: string;
 }
@@ -483,7 +423,7 @@ export interface DescribeTransitGatewaysResult {
 /**
  * @public
  */
-export interface DescribeTransitGatewayVpcAttachmentsRequest {
+export interface DescribeTransitGatewayAttachmentsRequest {
   /**
    * @public
    * <p>The IDs of the attachments.</p>
@@ -496,6 +436,29 @@ export interface DescribeTransitGatewayVpcAttachmentsRequest {
    *          <ul>
    *             <li>
    *                <p>
+   *                   <code>association.state</code> - The state of the association (<code>associating</code> | <code>associated</code> |
+   *                <code>disassociating</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>association.transit-gateway-route-table-id</code> - The ID of the route table for the transit gateway.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>resource-id</code> - The ID of the resource.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>resource-owner-id</code> - The ID of the Amazon Web Services account that owns the resource.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>resource-type</code> - The resource type. Valid values are <code>vpc</code>
+   *                     | <code>vpn</code> | <code>direct-connect-gateway</code> | <code>peering</code>
+   *                     | <code>connect</code>.</p>
+   *             </li>
+   *             <li>
+   *                <p>
    *                   <code>state</code> - The state of the attachment. Valid values are <code>available</code> | <code>deleted</code> | <code>deleting</code> | <code>failed</code> |  <code>failing</code> | <code>initiatingRequest</code> | <code>modifying</code> | <code>pendingAcceptance</code> | <code>pending</code> | <code>rollingBack</code> | <code>rejected</code> | <code>rejecting</code>.</p>
    *             </li>
    *             <li>
@@ -508,7 +471,7 @@ export interface DescribeTransitGatewayVpcAttachmentsRequest {
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>vpc-id</code> - The ID of the VPC.</p>
+   *                   <code>transit-gateway-owner-id</code> - The ID of the Amazon Web Services account that owns the transit gateway.</p>
    *             </li>
    *          </ul>
    */
@@ -538,78 +501,97 @@ export interface DescribeTransitGatewayVpcAttachmentsRequest {
 
 /**
  * @public
+ * <p>Describes an association.</p>
  */
-export interface DescribeTransitGatewayVpcAttachmentsResult {
+export interface TransitGatewayAttachmentAssociation {
   /**
    * @public
-   * <p>Information about the VPC attachments.</p>
+   * <p>The ID of the route table for the transit gateway.</p>
    */
-  TransitGatewayVpcAttachments?: TransitGatewayVpcAttachment[];
+  TransitGatewayRouteTableId?: string;
 
   /**
    * @public
-   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
+   * <p>The state of the association.</p>
    */
-  NextToken?: string;
+  State?: TransitGatewayAssociationState;
 }
 
 /**
  * @public
+ * <p>Describes an attachment between a resource and a transit gateway.</p>
  */
-export interface DescribeTrunkInterfaceAssociationsRequest {
+export interface TransitGatewayAttachment {
   /**
    * @public
-   * <p>The IDs of the associations.</p>
+   * <p>The ID of the attachment.</p>
    */
-  AssociationIds?: string[];
+  TransitGatewayAttachmentId?: string;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The ID of the transit gateway.</p>
    */
-  DryRun?: boolean;
+  TransitGatewayId?: string;
 
   /**
    * @public
-   * <p>One or more filters.</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>gre-key</code> - The ID of a trunk interface association.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>interface-protocol</code> - The interface protocol. Valid values are <code>VLAN</code> and <code>GRE</code>.</p>
-   *             </li>
-   *          </ul>
+   * <p>The ID of the Amazon Web Services account that owns the transit gateway.</p>
    */
-  Filters?: Filter[];
+  TransitGatewayOwnerId?: string;
 
   /**
    * @public
-   * <p>The token for the next page of results.</p>
+   * <p>The ID of the Amazon Web Services account that owns the resource.</p>
    */
-  NextToken?: string;
+  ResourceOwnerId?: string;
 
   /**
    * @public
-   * <p>The maximum number of results to return with a single call.
-   *             To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
+   * <p>The resource type. Note that the <code>tgw-peering</code> resource type has been deprecated.</p>
    */
-  MaxResults?: number;
+  ResourceType?: TransitGatewayAttachmentResourceType;
+
+  /**
+   * @public
+   * <p>The ID of the resource.</p>
+   */
+  ResourceId?: string;
+
+  /**
+   * @public
+   * <p>The attachment state. Note that the <code>initiating</code> state has been deprecated.</p>
+   */
+  State?: TransitGatewayAttachmentState;
+
+  /**
+   * @public
+   * <p>The association.</p>
+   */
+  Association?: TransitGatewayAttachmentAssociation;
+
+  /**
+   * @public
+   * <p>The creation time.</p>
+   */
+  CreationTime?: Date;
+
+  /**
+   * @public
+   * <p>The tags for the attachment.</p>
+   */
+  Tags?: Tag[];
 }
 
 /**
  * @public
  */
-export interface DescribeTrunkInterfaceAssociationsResult {
+export interface DescribeTransitGatewayAttachmentsResult {
   /**
    * @public
-   * <p>Information about the trunk associations.</p>
+   * <p>Information about the attachments.</p>
    */
-  InterfaceAssociations?: TrunkInterfaceAssociation[];
+  TransitGatewayAttachments?: TransitGatewayAttachment[];
 
   /**
    * @public
@@ -621,24 +603,34 @@ export interface DescribeTrunkInterfaceAssociationsResult {
 /**
  * @public
  */
-export interface DescribeVerifiedAccessEndpointsRequest {
-  /**
-   * @public
-   * <p>The ID of the Verified Access endpoint.</p>
-   */
-  VerifiedAccessEndpointIds?: string[];
-
+export interface DescribeTransitGatewayConnectPeersRequest {
   /**
    * @public
-   * <p>The ID of the Verified Access instance.</p>
+   * <p>The IDs of the Connect peers.</p>
    */
-  VerifiedAccessInstanceId?: string;
+  TransitGatewayConnectPeerIds?: string[];
 
   /**
    * @public
-   * <p>The ID of the Verified Access group.</p>
+   * <p>One or more filters. The possible values are:</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>state</code> - The state of the Connect peer (<code>pending</code> |
+   *                         <code>available</code> | <code>deleting</code> |
+   *                     <code>deleted</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>transit-gateway-attachment-id</code> - The ID of the attachment.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>transit-gateway-connect-peer-id</code> - The ID of the Connect peer.</p>
+   *             </li>
+   *          </ul>
    */
-  VerifiedAccessGroupId?: string;
+  Filters?: Filter[];
 
   /**
    * @public
@@ -653,12 +645,6 @@ export interface DescribeVerifiedAccessEndpointsRequest {
    */
   NextToken?: string;
 
-  /**
-   * @public
-   * <p>One or more filters. Filter names and values are case-sensitive.</p>
-   */
-  Filters?: Filter[];
-
   /**
    * @public
    * <p>Checks whether you have the required permissions for the action, without actually making the request,
@@ -671,12 +657,12 @@ export interface DescribeVerifiedAccessEndpointsRequest {
 /**
  * @public
  */
-export interface DescribeVerifiedAccessEndpointsResult {
+export interface DescribeTransitGatewayConnectPeersResult {
   /**
    * @public
-   * <p>Details about the Verified Access endpoints.</p>
+   * <p>Information about the Connect peers.</p>
    */
-  VerifiedAccessEndpoints?: VerifiedAccessEndpoint[];
+  TransitGatewayConnectPeers?: TransitGatewayConnectPeer[];
 
   /**
    * @public
@@ -688,18 +674,46 @@ export interface DescribeVerifiedAccessEndpointsResult {
 /**
  * @public
  */
-export interface DescribeVerifiedAccessGroupsRequest {
+export interface DescribeTransitGatewayConnectsRequest {
   /**
    * @public
-   * <p>The ID of the Verified Access groups.</p>
+   * <p>The IDs of the attachments.</p>
    */
-  VerifiedAccessGroupIds?: string[];
+  TransitGatewayAttachmentIds?: string[];
 
   /**
    * @public
-   * <p>The ID of the Verified Access instance.</p>
+   * <p>One or more filters. The possible values are:</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>options.protocol</code> - The tunnel protocol (<code>gre</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>state</code> - The state of the attachment (<code>initiating</code> |
+   *                         <code>initiatingRequest</code> | <code>pendingAcceptance</code> |
+   *                         <code>rollingBack</code> | <code>pending</code> | <code>available</code> |
+   *                         <code>modifying</code> | <code>deleting</code> | <code>deleted</code> |
+   *                         <code>failed</code> | <code>rejected</code> | <code>rejecting</code> |
+   *                         <code>failing</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>transit-gateway-attachment-id</code> - The ID of the
+   *                     Connect attachment.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>transit-gateway-id</code> - The ID of the transit gateway.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>transport-transit-gateway-attachment-id</code> - The ID of the transit gateway attachment from which the Connect attachment was created.</p>
+   *             </li>
+   *          </ul>
    */
-  VerifiedAccessInstanceId?: string;
+  Filters?: Filter[];
 
   /**
    * @public
@@ -714,12 +728,6 @@ export interface DescribeVerifiedAccessGroupsRequest {
    */
   NextToken?: string;
 
-  /**
-   * @public
-   * <p>One or more filters. Filter names and values are case-sensitive.</p>
-   */
-  Filters?: Filter[];
-
   /**
    * @public
    * <p>Checks whether you have the required permissions for the action, without actually making the request,
@@ -732,12 +740,12 @@ export interface DescribeVerifiedAccessGroupsRequest {
 /**
  * @public
  */
-export interface DescribeVerifiedAccessGroupsResult {
+export interface DescribeTransitGatewayConnectsResult {
   /**
    * @public
-   * <p>Details about the Verified Access groups.</p>
+   * <p>Information about the Connect attachments.</p>
    */
-  VerifiedAccessGroups?: VerifiedAccessGroup[];
+  TransitGatewayConnects?: TransitGatewayConnect[];
 
   /**
    * @public
@@ -749,12 +757,32 @@ export interface DescribeVerifiedAccessGroupsResult {
 /**
  * @public
  */
-export interface DescribeVerifiedAccessInstanceLoggingConfigurationsRequest {
+export interface DescribeTransitGatewayMulticastDomainsRequest {
   /**
    * @public
-   * <p>The IDs of the Verified Access instances.</p>
+   * <p>The ID of the transit gateway multicast domain.</p>
    */
-  VerifiedAccessInstanceIds?: string[];
+  TransitGatewayMulticastDomainIds?: string[];
+
+  /**
+   * @public
+   * <p>One or more filters. The possible values are:</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>state</code> - The state of the transit gateway multicast domain. Valid values are <code>pending</code> | <code>available</code> | <code>deleting</code> | <code>deleted</code>.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>transit-gateway-id</code> - The ID of the transit gateway.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>transit-gateway-multicast-domain-id</code> - The ID of the transit gateway multicast domain.</p>
+   *             </li>
+   *          </ul>
+   */
+  Filters?: Filter[];
 
   /**
    * @public
@@ -769,12 +797,6 @@ export interface DescribeVerifiedAccessInstanceLoggingConfigurationsRequest {
    */
   NextToken?: string;
 
-  /**
-   * @public
-   * <p>One or more filters. Filter names and values are case-sensitive.</p>
-   */
-  Filters?: Filter[];
-
   /**
    * @public
    * <p>Checks whether you have the required permissions for the action, without actually making the request,
@@ -784,203 +806,179 @@ export interface DescribeVerifiedAccessInstanceLoggingConfigurationsRequest {
   DryRun?: boolean;
 }
 
-/**
- * @public
- * @enum
- */
-export const VerifiedAccessLogDeliveryStatusCode = {
-  FAILED: "failed",
-  SUCCESS: "success",
-} as const;
-
 /**
  * @public
  */
-export type VerifiedAccessLogDeliveryStatusCode =
-  (typeof VerifiedAccessLogDeliveryStatusCode)[keyof typeof VerifiedAccessLogDeliveryStatusCode];
-
-/**
- * @public
- * <p>Describes a log delivery status.</p>
- */
-export interface VerifiedAccessLogDeliveryStatus {
+export interface DescribeTransitGatewayMulticastDomainsResult {
   /**
    * @public
-   * <p>The status code.</p>
+   * <p>Information about the transit gateway multicast domains.</p>
    */
-  Code?: VerifiedAccessLogDeliveryStatusCode;
+  TransitGatewayMulticastDomains?: TransitGatewayMulticastDomain[];
 
   /**
    * @public
-   * <p>The status message.</p>
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
    */
-  Message?: string;
+  NextToken?: string;
 }
 
 /**
  * @public
- * <p>Options for CloudWatch Logs as a logging destination.</p>
  */
-export interface VerifiedAccessLogCloudWatchLogsDestination {
-  /**
-   * @public
-   * <p>Indicates whether logging is enabled.</p>
-   */
-  Enabled?: boolean;
-
+export interface DescribeTransitGatewayPeeringAttachmentsRequest {
   /**
    * @public
-   * <p>The delivery status for access logs.</p>
+   * <p>One or more IDs of the transit gateway peering attachments.</p>
    */
-  DeliveryStatus?: VerifiedAccessLogDeliveryStatus;
+  TransitGatewayAttachmentIds?: string[];
 
   /**
    * @public
-   * <p>The ID of the CloudWatch Logs log group.</p>
+   * <p>One or more filters. The possible values are:</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>transit-gateway-attachment-id</code> - The ID of the transit gateway attachment.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>local-owner-id</code> - The ID of your Amazon Web Services account.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>remote-owner-id</code> - The ID of the Amazon Web Services account in the remote Region that owns the transit gateway.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>state</code> - The state of the peering attachment. Valid values are <code>available</code> | <code>deleted</code> | <code>deleting</code> | <code>failed</code> |  <code>failing</code> | <code>initiatingRequest</code> | <code>modifying</code> | <code>pendingAcceptance</code> | <code>pending</code> | <code>rollingBack</code> | <code>rejected</code> | <code>rejecting</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>tag</code>:<key> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value.
+   *     For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>tag-key</code> - The key of a tag assigned to the resource. Use this filter to find all resources that have a tag with a specific key, regardless of the tag value.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>transit-gateway-id</code> - The ID of the transit gateway.</p>
+   *             </li>
+   *          </ul>
    */
-  LogGroup?: string;
-}
+  Filters?: Filter[];
 
-/**
- * @public
- * <p>Options for Kinesis as a logging destination.</p>
- */
-export interface VerifiedAccessLogKinesisDataFirehoseDestination {
   /**
    * @public
-   * <p>Indicates whether logging is enabled.</p>
+   * <p>The maximum number of results to return with a single call.
+   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
    */
-  Enabled?: boolean;
+  MaxResults?: number;
 
   /**
    * @public
-   * <p>The delivery status.</p>
+   * <p>The token for the next page of results.</p>
    */
-  DeliveryStatus?: VerifiedAccessLogDeliveryStatus;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The ID of the delivery stream.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  DeliveryStream?: string;
+  DryRun?: boolean;
 }
 
 /**
  * @public
- * <p>Options for Amazon S3 as a logging destination.</p>
  */
-export interface VerifiedAccessLogS3Destination {
+export interface DescribeTransitGatewayPeeringAttachmentsResult {
   /**
    * @public
-   * <p>Indicates whether logging is enabled.</p>
+   * <p>The transit gateway peering attachments.</p>
    */
-  Enabled?: boolean;
+  TransitGatewayPeeringAttachments?: TransitGatewayPeeringAttachment[];
 
   /**
    * @public
-   * <p>The delivery status.</p>
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
    */
-  DeliveryStatus?: VerifiedAccessLogDeliveryStatus;
-
-  /**
-   * @public
-   * <p>The bucket name.</p>
-   */
-  BucketName?: string;
-
-  /**
-   * @public
-   * <p>The bucket prefix.</p>
-   */
-  Prefix?: string;
-
-  /**
-   * @public
-   * <p>The Amazon Web Services account number that owns the bucket.</p>
-   */
-  BucketOwner?: string;
+  NextToken?: string;
 }
 
 /**
  * @public
- * <p>Describes the options for Verified Access logs.</p>
  */
-export interface VerifiedAccessLogs {
+export interface DescribeTransitGatewayPolicyTablesRequest {
   /**
    * @public
-   * <p>Amazon S3 logging options.</p>
+   * <p>The IDs of the transit gateway policy tables.</p>
    */
-  S3?: VerifiedAccessLogS3Destination;
+  TransitGatewayPolicyTableIds?: string[];
 
   /**
    * @public
-   * <p>CloudWatch Logs logging destination.</p>
+   * <p>The filters associated with the transit gateway policy table.</p>
    */
-  CloudWatchLogs?: VerifiedAccessLogCloudWatchLogsDestination;
+  Filters?: Filter[];
 
   /**
    * @public
-   * <p>Kinesis logging destination.</p>
+   * <p>The maximum number of results to return with a single call.
+   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
    */
-  KinesisDataFirehose?: VerifiedAccessLogKinesisDataFirehoseDestination;
+  MaxResults?: number;
 
   /**
    * @public
-   * <p>The log version.</p>
+   * <p>The token for the next page of results.</p>
    */
-  LogVersion?: string;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>Indicates whether trust data is included in the logs.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  IncludeTrustContext?: boolean;
+  DryRun?: boolean;
 }
 
 /**
  * @public
- * <p>Describes logging options for an Amazon Web Services Verified Access instance.</p>
  */
-export interface VerifiedAccessInstanceLoggingConfiguration {
+export interface DescribeTransitGatewayPolicyTablesResult {
   /**
    * @public
-   * <p>The ID of the Amazon Web Services Verified Access instance.</p>
+   * <p>Describes the transit gateway policy tables.</p>
    */
-  VerifiedAccessInstanceId?: string;
+  TransitGatewayPolicyTables?: TransitGatewayPolicyTable[];
 
   /**
    * @public
-   * <p>Details about the logging options.</p>
+   * <p>The token for the next page of results.</p>
    */
-  AccessLogs?: VerifiedAccessLogs;
+  NextToken?: string;
 }
 
 /**
  * @public
  */
-export interface DescribeVerifiedAccessInstanceLoggingConfigurationsResult {
-  /**
-   * @public
-   * <p>The logging configuration for the Verified Access instances.</p>
-   */
-  LoggingConfigurations?: VerifiedAccessInstanceLoggingConfiguration[];
-
+export interface DescribeTransitGatewayRouteTableAnnouncementsRequest {
   /**
    * @public
-   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
+   * <p>The IDs of the transit gateway route tables that are being advertised.</p>
    */
-  NextToken?: string;
-}
+  TransitGatewayRouteTableAnnouncementIds?: string[];
 
-/**
- * @public
- */
-export interface DescribeVerifiedAccessInstancesRequest {
   /**
    * @public
-   * <p>The IDs of the Verified Access instances.</p>
+   * <p>The filters associated with the transit gateway policy table.</p>
    */
-  VerifiedAccessInstanceIds?: string[];
+  Filters?: Filter[];
 
   /**
    * @public
@@ -995,12 +993,6 @@ export interface DescribeVerifiedAccessInstancesRequest {
    */
   NextToken?: string;
 
-  /**
-   * @public
-   * <p>One or more filters. Filter names and values are case-sensitive.</p>
-   */
-  Filters?: Filter[];
-
   /**
    * @public
    * <p>Checks whether you have the required permissions for the action, without actually making the request,
@@ -1013,16 +1005,16 @@ export interface DescribeVerifiedAccessInstancesRequest {
 /**
  * @public
  */
-export interface DescribeVerifiedAccessInstancesResult {
+export interface DescribeTransitGatewayRouteTableAnnouncementsResult {
   /**
    * @public
-   * <p>Details about the Verified Access instances.</p>
+   * <p>Describes the transit gateway route table announcement.</p>
    */
-  VerifiedAccessInstances?: VerifiedAccessInstance[];
+  TransitGatewayRouteTableAnnouncements?: TransitGatewayRouteTableAnnouncement[];
 
   /**
    * @public
-   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
+   * <p>The token for the next page of results.</p>
    */
   NextToken?: string;
 }
@@ -1030,12 +1022,42 @@ export interface DescribeVerifiedAccessInstancesResult {
 /**
  * @public
  */
-export interface DescribeVerifiedAccessTrustProvidersRequest {
+export interface DescribeTransitGatewayRouteTablesRequest {
   /**
    * @public
-   * <p>The IDs of the Verified Access trust providers.</p>
+   * <p>The IDs of the transit gateway route tables.</p>
    */
-  VerifiedAccessTrustProviderIds?: string[];
+  TransitGatewayRouteTableIds?: string[];
+
+  /**
+   * @public
+   * <p>One or more filters. The possible values are:</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>default-association-route-table</code> - Indicates whether this is the default
+   *                 association route table for the transit gateway (<code>true</code> | <code>false</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>default-propagation-route-table</code> - Indicates whether this is the default
+   *                propagation route table for the transit gateway (<code>true</code> | <code>false</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>state</code> - The state of the route table (<code>available</code> | <code>deleting</code> | <code>deleted</code> | <code>pending</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>transit-gateway-id</code> - The ID of the transit gateway.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>transit-gateway-route-table-id</code> - The ID of the transit gateway route table.</p>
+   *             </li>
+   *          </ul>
+   */
+  Filters?: Filter[];
 
   /**
    * @public
@@ -1050,12 +1072,6 @@ export interface DescribeVerifiedAccessTrustProvidersRequest {
    */
   NextToken?: string;
 
-  /**
-   * @public
-   * <p>One or more filters. Filter names and values are case-sensitive.</p>
-   */
-  Filters?: Filter[];
-
   /**
    * @public
    * <p>Checks whether you have the required permissions for the action, without actually making the request,
@@ -1068,12 +1084,12 @@ export interface DescribeVerifiedAccessTrustProvidersRequest {
 /**
  * @public
  */
-export interface DescribeVerifiedAccessTrustProvidersResult {
+export interface DescribeTransitGatewayRouteTablesResult {
   /**
    * @public
-   * <p>Details about the Verified Access trust providers.</p>
+   * <p>Information about the transit gateway route tables.</p>
    */
-  VerifiedAccessTrustProviders?: VerifiedAccessTrustProvider[];
+  TransitGatewayRouteTables?: TransitGatewayRouteTable[];
 
   /**
    * @public
@@ -1084,33 +1100,80 @@ export interface DescribeVerifiedAccessTrustProvidersResult {
 
 /**
  * @public
- * @enum
  */
-export const VolumeAttributeName = {
-  autoEnableIO: "autoEnableIO",
-  productCodes: "productCodes",
-} as const;
+export interface DescribeTransitGatewaysRequest {
+  /**
+   * @public
+   * <p>The IDs of the transit gateways.</p>
+   */
+  TransitGatewayIds?: string[];
 
-/**
- * @public
- */
-export type VolumeAttributeName = (typeof VolumeAttributeName)[keyof typeof VolumeAttributeName];
+  /**
+   * @public
+   * <p>One or more filters. The possible values are:</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>options.propagation-default-route-table-id</code> - The ID of the default propagation route table.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>options.amazon-side-asn</code> - The private ASN for the Amazon side of a BGP session.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>options.association-default-route-table-id</code> - The ID of the default association route table.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>options.auto-accept-shared-attachments</code> - Indicates whether there is automatic acceptance of attachment requests (<code>enable</code> | <code>disable</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>options.default-route-table-association</code> - Indicates whether resource attachments are automatically
+   *                associated with the default association route table (<code>enable</code> | <code>disable</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>options.default-route-table-propagation</code> - Indicates whether resource attachments automatically propagate
+   *                routes to the default propagation route table (<code>enable</code> | <code>disable</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>options.dns-support</code> - Indicates whether DNS support is enabled (<code>enable</code> | <code>disable</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>options.vpn-ecmp-support</code> - Indicates whether Equal Cost Multipath Protocol support is enabled  (<code>enable</code> | <code>disable</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>owner-id</code> - The ID of the Amazon Web Services account that owns the transit gateway.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>state</code> - The state of the transit gateway (<code>available</code> | <code>deleted</code> | <code>deleting</code> | <code>modifying</code> | <code>pending</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>transit-gateway-id</code> - The ID of the transit gateway.</p>
+   *             </li>
+   *          </ul>
+   */
+  Filters?: Filter[];
 
-/**
- * @public
- */
-export interface DescribeVolumeAttributeRequest {
   /**
    * @public
-   * <p>The attribute of the volume. This parameter is required.</p>
+   * <p>The maximum number of results to return with a single call.
+   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
    */
-  Attribute: VolumeAttributeName | undefined;
+  MaxResults?: number;
 
   /**
    * @public
-   * <p>The ID of the volume.</p>
+   * <p>The token for the next page of results.</p>
    */
-  VolumeId: string | undefined;
+  NextToken?: string;
 
   /**
    * @public
@@ -1124,115 +1187,49 @@ export interface DescribeVolumeAttributeRequest {
 /**
  * @public
  */
-export interface DescribeVolumeAttributeResult {
-  /**
-   * @public
-   * <p>The state of <code>autoEnableIO</code> attribute.</p>
-   */
-  AutoEnableIO?: AttributeBooleanValue;
-
+export interface DescribeTransitGatewaysResult {
   /**
    * @public
-   * <p>A list of product codes.</p>
+   * <p>Information about the transit gateways.</p>
    */
-  ProductCodes?: ProductCode[];
+  TransitGateways?: TransitGateway[];
 
   /**
    * @public
-   * <p>The ID of the volume.</p>
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
    */
-  VolumeId?: string;
+  NextToken?: string;
 }
 
 /**
  * @public
  */
-export interface DescribeVolumesRequest {
+export interface DescribeTransitGatewayVpcAttachmentsRequest {
   /**
    * @public
-   * <p>The filters.</p>
+   * <p>The IDs of the attachments.</p>
+   */
+  TransitGatewayAttachmentIds?: string[];
+
+  /**
+   * @public
+   * <p>One or more filters. The possible values are:</p>
    *          <ul>
    *             <li>
    *                <p>
-   *                   <code>attachment.attach-time</code> - The time stamp when the attachment
-   *           initiated.</p>
+   *                   <code>state</code> - The state of the attachment. Valid values are <code>available</code> | <code>deleted</code> | <code>deleting</code> | <code>failed</code> |  <code>failing</code> | <code>initiatingRequest</code> | <code>modifying</code> | <code>pendingAcceptance</code> | <code>pending</code> | <code>rollingBack</code> | <code>rejected</code> | <code>rejecting</code>.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>attachment.delete-on-termination</code> - Whether the volume is deleted on
-   *           instance termination.</p>
+   *                   <code>transit-gateway-attachment-id</code> - The ID of the attachment.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>attachment.device</code> - The device name specified in the block device mapping
-   *           (for example, <code>/dev/sda1</code>).</p>
+   *                   <code>transit-gateway-id</code> - The ID of the transit gateway.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>attachment.instance-id</code> - The ID of the instance the volume is attached
-   *           to.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>attachment.status</code> - The attachment state (<code>attaching</code> |
-   *             <code>attached</code> | <code>detaching</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>availability-zone</code> - The Availability Zone in which the volume was
-   *           created.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>create-time</code> - The time stamp when the volume was created.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>encrypted</code> - Indicates whether the volume is encrypted (<code>true</code>
-   *           | <code>false</code>)</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>multi-attach-enabled</code> - Indicates whether the volume is enabled for Multi-Attach (<code>true</code>
-   *     			| <code>false</code>)</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>fast-restored</code> - Indicates whether the volume was created from a
-   *           snapshot that is enabled for fast snapshot restore (<code>true</code> |
-   *           <code>false</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>size</code> - The size of the volume, in GiB.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>snapshot-id</code> - The snapshot from which the volume was created.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>status</code> - The state of the volume (<code>creating</code> |
-   *             <code>available</code> | <code>in-use</code> | <code>deleting</code> |
-   *             <code>deleted</code> | <code>error</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>tag</code>:<key> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value.
-   *     For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>tag-key</code> - The key of a tag assigned to the resource. Use this filter to find all resources assigned a tag with a specific key, regardless of the tag value.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>volume-id</code> - The volume ID.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>volume-type</code> - The Amazon EBS volume type (<code>gp2</code> | <code>gp3</code> | <code>io1</code> | <code>io2</code> |
-   *           <code>st1</code> | <code>sc1</code>| <code>standard</code>)</p>
+   *                   <code>vpc-id</code> - The ID of the VPC.</p>
    *             </li>
    *          </ul>
    */
@@ -1240,49 +1237,39 @@ export interface DescribeVolumesRequest {
 
   /**
    * @public
-   * <p>The volume IDs.</p>
-   */
-  VolumeIds?: string[];
-
-  /**
-   * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The maximum number of results to return with a single call.
+   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
    */
-  DryRun?: boolean;
+  MaxResults?: number;
 
   /**
    * @public
-   * <p>The maximum number of volumes to return for this request.
-   *       This value can be between 5 and 500; if you specify a value larger than 500, only 500 items are returned.
-   *       If this parameter is not used, then all items are returned. You cannot specify this parameter and the
-   *       volume IDs parameter in the same request. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
+   * <p>The token for the next page of results.</p>
    */
-  MaxResults?: number;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The token returned from a previous paginated request.
-   *       Pagination continues from the end of the items returned from the previous request.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  NextToken?: string;
+  DryRun?: boolean;
 }
 
 /**
  * @public
  */
-export interface DescribeVolumesResult {
+export interface DescribeTransitGatewayVpcAttachmentsResult {
   /**
    * @public
-   * <p>Information about the volumes.</p>
+   * <p>Information about the VPC attachments.</p>
    */
-  Volumes?: Volume[];
+  TransitGatewayVpcAttachments?: TransitGatewayVpcAttachment[];
 
   /**
    * @public
-   * <p>The token to include in another request to get the next page of items.
-   *       This value is <code>null</code> when there are no more items to return.</p>
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
    */
   NextToken?: string;
 }
@@ -1290,71 +1277,32 @@ export interface DescribeVolumesResult {
 /**
  * @public
  */
-export interface DescribeVolumesModificationsRequest {
+export interface DescribeTrunkInterfaceAssociationsRequest {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The IDs of the associations.</p>
    */
-  DryRun?: boolean;
+  AssociationIds?: string[];
 
   /**
    * @public
-   * <p>The IDs of the volumes.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  VolumeIds?: string[];
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The filters.</p>
+   * <p>One or more filters.</p>
    *          <ul>
    *             <li>
    *                <p>
-   *                   <code>modification-state</code> - The current modification state (modifying |
-   *           optimizing | completed | failed).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>original-iops</code> - The original IOPS rate of the volume.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>original-size</code> - The original size of the volume, in GiB.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>original-volume-type</code> - The original volume type of the volume (standard |
-   *           io1 | io2 | gp2 | sc1 | st1).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>originalMultiAttachEnabled</code> - Indicates whether Multi-Attach support was enabled (true | false).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>start-time</code> - The modification start time.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>target-iops</code> - The target IOPS rate of the volume.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>target-size</code> - The target size of the volume, in GiB.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>target-volume-type</code> - The target volume type of the volume (standard |
-   *           io1 | io2 | gp2 | sc1 | st1).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>targetMultiAttachEnabled</code> - Indicates whether Multi-Attach support is to be enabled (true | false).</p>
+   *                   <code>gre-key</code> - The ID of a trunk interface association.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>volume-id</code> - The ID of the volume.</p>
+   *                   <code>interface-protocol</code> - The interface protocol. Valid values are <code>VLAN</code> and <code>GRE</code>.</p>
    *             </li>
    *          </ul>
    */
@@ -1362,153 +1310,159 @@ export interface DescribeVolumesModificationsRequest {
 
   /**
    * @public
-   * <p>The token returned by a previous paginated request.
-   *       Pagination continues from the end of the items returned by the previous request.</p>
+   * <p>The token for the next page of results.</p>
    */
   NextToken?: string;
 
   /**
    * @public
-   * <p>The maximum number of results (up to a limit of 500) to be returned in a paginated
-   *       request. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
+   * <p>The maximum number of results to return with a single call.
+   *             To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
    */
   MaxResults?: number;
 }
 
 /**
  * @public
- * @enum
  */
-export const VolumeModificationState = {
-  completed: "completed",
-  failed: "failed",
-  modifying: "modifying",
-  optimizing: "optimizing",
-} as const;
+export interface DescribeTrunkInterfaceAssociationsResult {
+  /**
+   * @public
+   * <p>Information about the trunk associations.</p>
+   */
+  InterfaceAssociations?: TrunkInterfaceAssociation[];
 
-/**
- * @public
- */
-export type VolumeModificationState = (typeof VolumeModificationState)[keyof typeof VolumeModificationState];
+  /**
+   * @public
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
+   */
+  NextToken?: string;
+}
 
 /**
  * @public
- * <p>Describes the modification status of an EBS volume.</p>
- *          <p>If the volume has never been modified, some element values will be null.</p>
  */
-export interface VolumeModification {
+export interface DescribeVerifiedAccessEndpointsRequest {
   /**
    * @public
-   * <p>The ID of the volume.</p>
+   * <p>The ID of the Verified Access endpoint.</p>
    */
-  VolumeId?: string;
+  VerifiedAccessEndpointIds?: string[];
 
   /**
    * @public
-   * <p>The current modification state. The modification state is null for unmodified
-   *       volumes.</p>
+   * <p>The ID of the Verified Access instance.</p>
    */
-  ModificationState?: VolumeModificationState;
+  VerifiedAccessInstanceId?: string;
 
   /**
    * @public
-   * <p>A status message about the modification progress or failure.</p>
+   * <p>The ID of the Verified Access group.</p>
    */
-  StatusMessage?: string;
+  VerifiedAccessGroupId?: string;
 
   /**
    * @public
-   * <p>The target size of the volume, in GiB.</p>
+   * <p>The maximum number of results to return with a single call.
+   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
    */
-  TargetSize?: number;
+  MaxResults?: number;
 
   /**
    * @public
-   * <p>The target IOPS rate of the volume.</p>
+   * <p>The token for the next page of results.</p>
    */
-  TargetIops?: number;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The target EBS volume type of the volume.</p>
+   * <p>One or more filters. Filter names and values are case-sensitive.</p>
    */
-  TargetVolumeType?: VolumeType;
+  Filters?: Filter[];
 
   /**
    * @public
-   * <p>The target throughput of the volume, in MiB/s.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  TargetThroughput?: number;
+  DryRun?: boolean;
+}
 
+/**
+ * @public
+ */
+export interface DescribeVerifiedAccessEndpointsResult {
   /**
    * @public
-   * <p>The target setting for Amazon EBS Multi-Attach.</p>
+   * <p>Details about the Verified Access endpoints.</p>
    */
-  TargetMultiAttachEnabled?: boolean;
+  VerifiedAccessEndpoints?: VerifiedAccessEndpoint[];
 
   /**
    * @public
-   * <p>The original size of the volume, in GiB.</p>
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
    */
-  OriginalSize?: number;
+  NextToken?: string;
+}
 
+/**
+ * @public
+ */
+export interface DescribeVerifiedAccessGroupsRequest {
   /**
    * @public
-   * <p>The original IOPS rate of the volume.</p>
+   * <p>The ID of the Verified Access groups.</p>
    */
-  OriginalIops?: number;
+  VerifiedAccessGroupIds?: string[];
 
   /**
    * @public
-   * <p>The original EBS volume type of the volume.</p>
+   * <p>The ID of the Verified Access instance.</p>
    */
-  OriginalVolumeType?: VolumeType;
+  VerifiedAccessInstanceId?: string;
 
   /**
    * @public
-   * <p>The original throughput of the volume, in MiB/s.</p>
+   * <p>The maximum number of results to return with a single call.
+   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
    */
-  OriginalThroughput?: number;
+  MaxResults?: number;
 
   /**
    * @public
-   * <p>The original setting for Amazon EBS Multi-Attach.</p>
-   */
-  OriginalMultiAttachEnabled?: boolean;
-
-  /**
-   * @public
-   * <p>The modification progress, from 0 to 100 percent complete.</p>
+   * <p>The token for the next page of results.</p>
    */
-  Progress?: number;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The modification start time.</p>
+   * <p>One or more filters. Filter names and values are case-sensitive.</p>
    */
-  StartTime?: Date;
+  Filters?: Filter[];
 
   /**
    * @public
-   * <p>The modification completion or failure time.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  EndTime?: Date;
+  DryRun?: boolean;
 }
 
 /**
  * @public
  */
-export interface DescribeVolumesModificationsResult {
+export interface DescribeVerifiedAccessGroupsResult {
   /**
    * @public
-   * <p>Information about the volume modifications.</p>
+   * <p>Details about the Verified Access groups.</p>
    */
-  VolumesModifications?: VolumeModification[];
+  VerifiedAccessGroups?: VerifiedAccessGroup[];
 
   /**
    * @public
-   * <p>The token to include in another request to get the next page of items.
-   *       This value is <code>null</code> if there are no more items to return.</p>
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
    */
   NextToken?: string;
 }
@@ -1516,97 +1470,31 @@ export interface DescribeVolumesModificationsResult {
 /**
  * @public
  */
-export interface DescribeVolumeStatusRequest {
+export interface DescribeVerifiedAccessInstanceLoggingConfigurationsRequest {
   /**
    * @public
-   * <p>The filters.</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>action.code</code> - The action code for the event (for example,
-   *             <code>enable-volume-io</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>action.description</code> - A description of the action.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>action.event-id</code> - The event ID associated with the action.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>availability-zone</code> - The Availability Zone of the instance.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>event.description</code> - A description of the event.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>event.event-id</code> - The event ID.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>event.event-type</code> - The event type (for <code>io-enabled</code>:
-   *             <code>passed</code> | <code>failed</code>; for <code>io-performance</code>:
-   *             <code>io-performance:degraded</code> | <code>io-performance:severely-degraded</code> |
-   *             <code>io-performance:stalled</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>event.not-after</code> - The latest end time for the event.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>event.not-before</code> - The earliest start time for the event.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>volume-status.details-name</code> - The cause for
-   *             <code>volume-status.status</code> (<code>io-enabled</code> |
-   *           <code>io-performance</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>volume-status.details-status</code> - The status of
-   *             <code>volume-status.details-name</code> (for <code>io-enabled</code>:
-   *             <code>passed</code> | <code>failed</code>; for <code>io-performance</code>:
-   *             <code>normal</code> | <code>degraded</code> | <code>severely-degraded</code> |
-   *             <code>stalled</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>volume-status.status</code> - The status of the volume (<code>ok</code> |
-   *             <code>impaired</code> | <code>warning</code> | <code>insufficient-data</code>).</p>
-   *             </li>
-   *          </ul>
+   * <p>The IDs of the Verified Access instances.</p>
    */
-  Filters?: Filter[];
+  VerifiedAccessInstanceIds?: string[];
 
   /**
    * @public
-   * <p>The maximum number of items to return for this request. To get the next page of items,
-   *       make another request with the token returned in the output. This value can be between 5 and 1,000;
-   *       if the value is larger than 1,000, only 1,000 results are returned. If this parameter is not used,
-   *       then all items are returned. You cannot specify this parameter and the volume IDs parameter in the
-   *       same request. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
+   * <p>The maximum number of results to return with a single call.
+   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
    */
   MaxResults?: number;
 
   /**
    * @public
-   * <p>The token returned from a previous paginated request.
-   *       Pagination continues from the end of the items returned by the previous request.</p>
+   * <p>The token for the next page of results.</p>
    */
   NextToken?: string;
 
   /**
    * @public
-   * <p>The IDs of the volumes.</p>
-   *          <p>Default: Describes all your volumes.</p>
+   * <p>One or more filters. Filter names and values are case-sensitive.</p>
    */
-  VolumeIds?: string[];
+  Filters?: Filter[];
 
   /**
    * @public
@@ -1619,255 +1507,220 @@ export interface DescribeVolumeStatusRequest {
 
 /**
  * @public
- * <p>Describes a volume status operation code.</p>
+ * @enum
  */
-export interface VolumeStatusAction {
-  /**
-   * @public
-   * <p>The code identifying the operation, for example, <code>enable-volume-io</code>.</p>
-   */
-  Code?: string;
+export const VerifiedAccessLogDeliveryStatusCode = {
+  FAILED: "failed",
+  SUCCESS: "success",
+} as const;
 
-  /**
-   * @public
-   * <p>A description of the operation.</p>
-   */
-  Description?: string;
+/**
+ * @public
+ */
+export type VerifiedAccessLogDeliveryStatusCode =
+  (typeof VerifiedAccessLogDeliveryStatusCode)[keyof typeof VerifiedAccessLogDeliveryStatusCode];
 
+/**
+ * @public
+ * <p>Describes a log delivery status.</p>
+ */
+export interface VerifiedAccessLogDeliveryStatus {
   /**
    * @public
-   * <p>The ID of the event associated with this operation.</p>
+   * <p>The status code.</p>
    */
-  EventId?: string;
+  Code?: VerifiedAccessLogDeliveryStatusCode;
 
   /**
    * @public
-   * <p>The event type associated with this operation.</p>
+   * <p>The status message.</p>
    */
-  EventType?: string;
+  Message?: string;
 }
 
 /**
  * @public
- * <p>Information about the instances to which the volume is attached.</p>
+ * <p>Options for CloudWatch Logs as a logging destination.</p>
  */
-export interface VolumeStatusAttachmentStatus {
+export interface VerifiedAccessLogCloudWatchLogsDestination {
   /**
    * @public
-   * <p>The maximum IOPS supported by the attached instance.</p>
+   * <p>Indicates whether logging is enabled.</p>
    */
-  IoPerformance?: string;
+  Enabled?: boolean;
 
   /**
    * @public
-   * <p>The ID of the attached instance.</p>
+   * <p>The delivery status for access logs.</p>
    */
-  InstanceId?: string;
+  DeliveryStatus?: VerifiedAccessLogDeliveryStatus;
+
+  /**
+   * @public
+   * <p>The ID of the CloudWatch Logs log group.</p>
+   */
+  LogGroup?: string;
 }
 
 /**
  * @public
- * <p>Describes a volume status event.</p>
+ * <p>Options for Kinesis as a logging destination.</p>
  */
-export interface VolumeStatusEvent {
+export interface VerifiedAccessLogKinesisDataFirehoseDestination {
   /**
    * @public
-   * <p>A description of the event.</p>
+   * <p>Indicates whether logging is enabled.</p>
    */
-  Description?: string;
+  Enabled?: boolean;
 
   /**
    * @public
-   * <p>The ID of this event.</p>
+   * <p>The delivery status.</p>
    */
-  EventId?: string;
+  DeliveryStatus?: VerifiedAccessLogDeliveryStatus;
 
   /**
    * @public
-   * <p>The type of this event.</p>
+   * <p>The ID of the delivery stream.</p>
    */
-  EventType?: string;
+  DeliveryStream?: string;
+}
 
+/**
+ * @public
+ * <p>Options for Amazon S3 as a logging destination.</p>
+ */
+export interface VerifiedAccessLogS3Destination {
   /**
    * @public
-   * <p>The latest end time of the event.</p>
+   * <p>Indicates whether logging is enabled.</p>
    */
-  NotAfter?: Date;
+  Enabled?: boolean;
 
   /**
    * @public
-   * <p>The earliest start time of the event.</p>
+   * <p>The delivery status.</p>
    */
-  NotBefore?: Date;
+  DeliveryStatus?: VerifiedAccessLogDeliveryStatus;
 
   /**
    * @public
-   * <p>The ID of the instance associated with the event.</p>
+   * <p>The bucket name.</p>
    */
-  InstanceId?: string;
-}
-
-/**
- * @public
- * @enum
- */
-export const VolumeStatusName = {
-  io_enabled: "io-enabled",
-  io_performance: "io-performance",
-} as const;
-
-/**
- * @public
- */
-export type VolumeStatusName = (typeof VolumeStatusName)[keyof typeof VolumeStatusName];
+  BucketName?: string;
 
-/**
- * @public
- * <p>Describes a volume status.</p>
- */
-export interface VolumeStatusDetails {
   /**
    * @public
-   * <p>The name of the volume status.</p>
+   * <p>The bucket prefix.</p>
    */
-  Name?: VolumeStatusName;
+  Prefix?: string;
 
   /**
    * @public
-   * <p>The intended status of the volume status.</p>
+   * <p>The Amazon Web Services account number that owns the bucket.</p>
    */
-  Status?: string;
+  BucketOwner?: string;
 }
 
 /**
  * @public
- * @enum
- */
-export const VolumeStatusInfoStatus = {
-  impaired: "impaired",
-  insufficient_data: "insufficient-data",
-  ok: "ok",
-} as const;
-
-/**
- * @public
- */
-export type VolumeStatusInfoStatus = (typeof VolumeStatusInfoStatus)[keyof typeof VolumeStatusInfoStatus];
-
-/**
- * @public
- * <p>Describes the status of a volume.</p>
+ * <p>Describes the options for Verified Access logs.</p>
  */
-export interface VolumeStatusInfo {
+export interface VerifiedAccessLogs {
   /**
    * @public
-   * <p>The details of the volume status.</p>
+   * <p>Amazon S3 logging options.</p>
    */
-  Details?: VolumeStatusDetails[];
+  S3?: VerifiedAccessLogS3Destination;
 
   /**
    * @public
-   * <p>The status of the volume.</p>
+   * <p>CloudWatch Logs logging destination.</p>
    */
-  Status?: VolumeStatusInfoStatus;
-}
+  CloudWatchLogs?: VerifiedAccessLogCloudWatchLogsDestination;
 
-/**
- * @public
- * <p>Describes the volume status.</p>
- */
-export interface VolumeStatusItem {
   /**
    * @public
-   * <p>The details of the operation.</p>
+   * <p>Kinesis logging destination.</p>
    */
-  Actions?: VolumeStatusAction[];
+  KinesisDataFirehose?: VerifiedAccessLogKinesisDataFirehoseDestination;
 
   /**
    * @public
-   * <p>The Availability Zone of the volume.</p>
+   * <p>The log version.</p>
    */
-  AvailabilityZone?: string;
+  LogVersion?: string;
 
   /**
    * @public
-   * <p>The Amazon Resource Name (ARN) of the Outpost.</p>
+   * <p>Indicates whether trust data is included in the logs.</p>
    */
-  OutpostArn?: string;
+  IncludeTrustContext?: boolean;
+}
 
+/**
+ * @public
+ * <p>Describes logging options for an Amazon Web Services Verified Access instance.</p>
+ */
+export interface VerifiedAccessInstanceLoggingConfiguration {
   /**
    * @public
-   * <p>A list of events associated with the volume.</p>
+   * <p>The ID of the Amazon Web Services Verified Access instance.</p>
    */
-  Events?: VolumeStatusEvent[];
+  VerifiedAccessInstanceId?: string;
 
   /**
    * @public
-   * <p>The volume ID.</p>
+   * <p>Details about the logging options.</p>
    */
-  VolumeId?: string;
+  AccessLogs?: VerifiedAccessLogs;
+}
 
+/**
+ * @public
+ */
+export interface DescribeVerifiedAccessInstanceLoggingConfigurationsResult {
   /**
    * @public
-   * <p>The volume status.</p>
+   * <p>The logging configuration for the Verified Access instances.</p>
    */
-  VolumeStatus?: VolumeStatusInfo;
+  LoggingConfigurations?: VerifiedAccessInstanceLoggingConfiguration[];
 
   /**
    * @public
-   * <p>Information about the instances to which the volume is attached.</p>
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
    */
-  AttachmentStatuses?: VolumeStatusAttachmentStatus[];
+  NextToken?: string;
 }
 
 /**
  * @public
  */
-export interface DescribeVolumeStatusResult {
+export interface DescribeVerifiedAccessInstancesRequest {
   /**
    * @public
-   * <p>The token to include in another request to get the next page of items.
-   *       This value is <code>null</code> when there are no more items to return.</p>
+   * <p>The IDs of the Verified Access instances.</p>
    */
-  NextToken?: string;
+  VerifiedAccessInstanceIds?: string[];
 
   /**
    * @public
-   * <p>Information about the status of the volumes.</p>
+   * <p>The maximum number of results to return with a single call.
+   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
    */
-  VolumeStatuses?: VolumeStatusItem[];
-}
-
-/**
- * @public
- * @enum
- */
-export const VpcAttributeName = {
-  enableDnsHostnames: "enableDnsHostnames",
-  enableDnsSupport: "enableDnsSupport",
-  enableNetworkAddressUsageMetrics: "enableNetworkAddressUsageMetrics",
-} as const;
-
-/**
- * @public
- */
-export type VpcAttributeName = (typeof VpcAttributeName)[keyof typeof VpcAttributeName];
+  MaxResults?: number;
 
-/**
- * @public
- */
-export interface DescribeVpcAttributeRequest {
   /**
    * @public
-   * <p>The VPC attribute.</p>
+   * <p>The token for the next page of results.</p>
    */
-  Attribute: VpcAttributeName | undefined;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The ID of the VPC.</p>
+   * <p>One or more filters. Filter names and values are case-sensitive.</p>
    */
-  VpcId: string | undefined;
+  Filters?: Filter[];
 
   /**
    * @public
@@ -1881,60 +1734,46 @@ export interface DescribeVpcAttributeRequest {
 /**
  * @public
  */
-export interface DescribeVpcAttributeResult {
+export interface DescribeVerifiedAccessInstancesResult {
   /**
    * @public
-   * <p>The ID of the VPC.</p>
+   * <p>Details about the Verified Access instances.</p>
    */
-  VpcId?: string;
+  VerifiedAccessInstances?: VerifiedAccessInstance[];
 
   /**
    * @public
-   * <p>Indicates whether the instances launched in the VPC get DNS hostnames.
-   * 				If this attribute is <code>true</code>, instances in the VPC get DNS hostnames;
-   * 				otherwise, they do not.</p>
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
    */
-  EnableDnsHostnames?: AttributeBooleanValue;
+  NextToken?: string;
+}
 
+/**
+ * @public
+ */
+export interface DescribeVerifiedAccessTrustProvidersRequest {
   /**
    * @public
-   * <p>Indicates whether DNS resolution is enabled for
-   * 				the VPC. If this attribute is <code>true</code>, the Amazon DNS server
-   * 				resolves DNS hostnames for your instances to their corresponding
-   * 				IP addresses; otherwise, it does not.</p>
+   * <p>The IDs of the Verified Access trust providers.</p>
    */
-  EnableDnsSupport?: AttributeBooleanValue;
+  VerifiedAccessTrustProviderIds?: string[];
 
   /**
    * @public
-   * <p>Indicates whether Network Address Usage metrics are enabled for your VPC.</p>
+   * <p>The maximum number of results to return with a single call.
+   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
    */
-  EnableNetworkAddressUsageMetrics?: AttributeBooleanValue;
-}
+  MaxResults?: number;
 
-/**
- * @public
- */
-export interface DescribeVpcClassicLinkRequest {
   /**
    * @public
-   * <p>The filters.</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>is-classic-link-enabled</code> - Whether the VPC is enabled for ClassicLink
-   * 					   (<code>true</code> | <code>false</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>tag</code>:<key> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value.
-   *     For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>tag-key</code> - The key of a tag assigned to the resource. Use this filter to find all resources assigned a tag with a specific key, regardless of the tag value.</p>
-   *             </li>
-   *          </ul>
+   * <p>The token for the next page of results.</p>
+   */
+  NextToken?: string;
+
+  /**
+   * @public
+   * <p>One or more filters. Filter names and values are case-sensitive.</p>
    */
   Filters?: Filter[];
 
@@ -1945,164 +1784,176 @@ export interface DescribeVpcClassicLinkRequest {
    *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
-
-  /**
-   * @public
-   * <p>The VPCs for which you want to describe the ClassicLink status.</p>
-   */
-  VpcIds?: string[];
 }
 
 /**
  * @public
- * <note>
- *             <p>Deprecated.</p>
- *          </note>
- *          <p>Describes whether a VPC is enabled for ClassicLink.</p>
  */
-export interface VpcClassicLink {
-  /**
-   * @public
-   * <p>Indicates whether the VPC is enabled for ClassicLink.</p>
-   */
-  ClassicLinkEnabled?: boolean;
-
+export interface DescribeVerifiedAccessTrustProvidersResult {
   /**
    * @public
-   * <p>Any tags assigned to the VPC.</p>
+   * <p>Details about the Verified Access trust providers.</p>
    */
-  Tags?: Tag[];
+  VerifiedAccessTrustProviders?: VerifiedAccessTrustProvider[];
 
   /**
    * @public
-   * <p>The ID of the VPC.</p>
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
    */
-  VpcId?: string;
+  NextToken?: string;
 }
 
 /**
  * @public
+ * @enum
  */
-export interface DescribeVpcClassicLinkResult {
-  /**
-   * @public
-   * <p>The ClassicLink status of the VPCs.</p>
-   */
-  Vpcs?: VpcClassicLink[];
-}
+export const VolumeAttributeName = {
+  autoEnableIO: "autoEnableIO",
+  productCodes: "productCodes",
+} as const;
 
 /**
  * @public
  */
-export interface DescribeVpcClassicLinkDnsSupportRequest {
+export type VolumeAttributeName = (typeof VolumeAttributeName)[keyof typeof VolumeAttributeName];
+
+/**
+ * @public
+ */
+export interface DescribeVolumeAttributeRequest {
   /**
    * @public
-   * <p>The maximum number of items to return for this request.
-   * 	To get the next page of items, make another request with the token returned in the output.
-   * 	For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
+   * <p>The attribute of the volume. This parameter is required.</p>
    */
-  MaxResults?: number;
+  Attribute: VolumeAttributeName | undefined;
 
   /**
    * @public
-   * <p>The token returned from a previous paginated request. Pagination continues from the end of the items returned by the previous request.</p>
+   * <p>The ID of the volume.</p>
    */
-  NextToken?: string;
+  VolumeId: string | undefined;
 
   /**
    * @public
-   * <p>The IDs of the VPCs.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  VpcIds?: string[];
+  DryRun?: boolean;
 }
 
 /**
  * @public
- * <note>
- *             <p>Deprecated.</p>
- *          </note>
- *          <p>Describes the ClassicLink DNS support status of a VPC.</p>
  */
-export interface ClassicLinkDnsSupport {
-  /**
-   * @public
-   * <p>Indicates whether ClassicLink DNS support is enabled for the VPC.</p>
-   */
-  ClassicLinkDnsSupported?: boolean;
-
+export interface DescribeVolumeAttributeResult {
   /**
    * @public
-   * <p>The ID of the VPC.</p>
+   * <p>The state of <code>autoEnableIO</code> attribute.</p>
    */
-  VpcId?: string;
-}
+  AutoEnableIO?: AttributeBooleanValue;
 
-/**
- * @public
- */
-export interface DescribeVpcClassicLinkDnsSupportResult {
   /**
    * @public
-   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there are no more items to return.</p>
+   * <p>A list of product codes.</p>
    */
-  NextToken?: string;
+  ProductCodes?: ProductCode[];
 
   /**
    * @public
-   * <p>Information about the ClassicLink DNS support status of the VPCs.</p>
+   * <p>The ID of the volume.</p>
    */
-  Vpcs?: ClassicLinkDnsSupport[];
+  VolumeId?: string;
 }
 
 /**
  * @public
  */
-export interface DescribeVpcEndpointConnectionNotificationsRequest {
-  /**
-   * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-   */
-  DryRun?: boolean;
-
-  /**
-   * @public
-   * <p>The ID of the notification.</p>
-   */
-  ConnectionNotificationId?: string;
-
+export interface DescribeVolumesRequest {
   /**
    * @public
    * <p>The filters.</p>
    *          <ul>
    *             <li>
    *                <p>
-   *                   <code>connection-notification-arn</code> - The ARN of the SNS topic for the
-   *                     notification.</p>
+   *                   <code>attachment.attach-time</code> - The time stamp when the attachment
+   *           initiated.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>connection-notification-id</code> - The ID of the
-   *                     notification.</p>
+   *                   <code>attachment.delete-on-termination</code> - Whether the volume is deleted on
+   *           instance termination.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>connection-notification-state</code> - The state of the notification
-   *                         (<code>Enabled</code> | <code>Disabled</code>).</p>
+   *                   <code>attachment.device</code> - The device name specified in the block device mapping
+   *           (for example, <code>/dev/sda1</code>).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>connection-notification-type</code> - The type of notification
-   *                         (<code>Topic</code>).</p>
+   *                   <code>attachment.instance-id</code> - The ID of the instance the volume is attached
+   *           to.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>service-id</code> - The ID of the endpoint service.</p>
+   *                   <code>attachment.status</code> - The attachment state (<code>attaching</code> |
+   *             <code>attached</code> | <code>detaching</code>).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>vpc-endpoint-id</code> - The ID of the VPC endpoint.</p>
+   *                   <code>availability-zone</code> - The Availability Zone in which the volume was
+   *           created.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>create-time</code> - The time stamp when the volume was created.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>encrypted</code> - Indicates whether the volume is encrypted (<code>true</code>
+   *           | <code>false</code>)</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>multi-attach-enabled</code> - Indicates whether the volume is enabled for Multi-Attach (<code>true</code>
+   *     			| <code>false</code>)</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>fast-restored</code> - Indicates whether the volume was created from a
+   *           snapshot that is enabled for fast snapshot restore (<code>true</code> |
+   *           <code>false</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>size</code> - The size of the volume, in GiB.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>snapshot-id</code> - The snapshot from which the volume was created.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>status</code> - The state of the volume (<code>creating</code> |
+   *             <code>available</code> | <code>in-use</code> | <code>deleting</code> |
+   *             <code>deleted</code> | <code>error</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>tag</code>:<key> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value.
+   *     For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>tag-key</code> - The key of a tag assigned to the resource. Use this filter to find all resources assigned a tag with a specific key, regardless of the tag value.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>volume-id</code> - The volume ID.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>volume-type</code> - The Amazon EBS volume type (<code>gp2</code> | <code>gp3</code> | <code>io1</code> | <code>io2</code> |
+   *           <code>st1</code> | <code>sc1</code>| <code>standard</code>)</p>
    *             </li>
    *          </ul>
    */
@@ -2110,14 +1961,31 @@ export interface DescribeVpcEndpointConnectionNotificationsRequest {
 
   /**
    * @public
-   * <p>The maximum number of results to return in a single call. To retrieve the remaining
-   *             results, make another request with the returned <code>NextToken</code> value.</p>
+   * <p>The volume IDs.</p>
+   */
+  VolumeIds?: string[];
+
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
+
+  /**
+   * @public
+   * <p>The maximum number of volumes to return for this request.
+   *       This value can be between 5 and 500; if you specify a value larger than 500, only 500 items are returned.
+   *       If this parameter is not used, then all items are returned. You cannot specify this parameter and the
+   *       volume IDs parameter in the same request. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
    */
   MaxResults?: number;
 
   /**
    * @public
-   * <p>The token to request the next page of results.</p>
+   * <p>The token returned from a previous paginated request.
+   *       Pagination continues from the end of the items returned from the previous request.</p>
    */
   NextToken?: string;
 }
@@ -2125,17 +1993,17 @@ export interface DescribeVpcEndpointConnectionNotificationsRequest {
 /**
  * @public
  */
-export interface DescribeVpcEndpointConnectionNotificationsResult {
+export interface DescribeVolumesResult {
   /**
    * @public
-   * <p>The notifications.</p>
+   * <p>Information about the volumes.</p>
    */
-  ConnectionNotificationSet?: ConnectionNotification[];
+  Volumes?: Volume[];
 
   /**
    * @public
-   * <p>The token to use to retrieve the next page of results. This value is
-   *             <code>null</code> when there are no more results to return.</p>
+   * <p>The token to include in another request to get the next page of items.
+   *       This value is <code>null</code> when there are no more items to return.</p>
    */
   NextToken?: string;
 }
@@ -2143,7 +2011,7 @@ export interface DescribeVpcEndpointConnectionNotificationsResult {
 /**
  * @public
  */
-export interface DescribeVpcEndpointConnectionsRequest {
+export interface DescribeVolumesModificationsRequest {
   /**
    * @public
    * <p>Checks whether you have the required permissions for the action, without actually making the request,
@@ -2152,33 +2020,62 @@ export interface DescribeVpcEndpointConnectionsRequest {
    */
   DryRun?: boolean;
 
+  /**
+   * @public
+   * <p>The IDs of the volumes.</p>
+   */
+  VolumeIds?: string[];
+
   /**
    * @public
    * <p>The filters.</p>
    *          <ul>
    *             <li>
    *                <p>
-   *                   <code>ip-address-type</code> - The IP address type (<code>ipv4</code> | <code>ipv6</code>).</p>
+   *                   <code>modification-state</code> - The current modification state (modifying |
+   *           optimizing | completed | failed).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>service-id</code> - The ID of the service.</p>
+   *                   <code>original-iops</code> - The original IOPS rate of the volume.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>vpc-endpoint-owner</code> - The ID of the Amazon Web Services account ID
-   * 		        that owns the endpoint.</p>
+   *                   <code>original-size</code> - The original size of the volume, in GiB.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>vpc-endpoint-state</code> - The state of the endpoint
-   * 			        (<code>pendingAcceptance</code> | <code>pending</code> |
-   * 			        <code>available</code> | <code>deleting</code> | <code>deleted</code> |
-   * 			        <code>rejected</code> | <code>failed</code>).</p>
+   *                   <code>original-volume-type</code> - The original volume type of the volume (standard |
+   *           io1 | io2 | gp2 | sc1 | st1).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>vpc-endpoint-id</code> - The ID of the endpoint.</p>
+   *                   <code>originalMultiAttachEnabled</code> - Indicates whether Multi-Attach support was enabled (true | false).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>start-time</code> - The modification start time.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>target-iops</code> - The target IOPS rate of the volume.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>target-size</code> - The target size of the volume, in GiB.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>target-volume-type</code> - The target volume type of the volume (standard |
+   *           io1 | io2 | gp2 | sc1 | st1).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>targetMultiAttachEnabled</code> - Indicates whether Multi-Attach support is to be enabled (true | false).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>volume-id</code> - The ID of the volume.</p>
    *             </li>
    *          </ul>
    */
@@ -2186,166 +2083,223 @@ export interface DescribeVpcEndpointConnectionsRequest {
 
   /**
    * @public
-   * <p>The maximum number of results to return for the request in a single page. The remaining
-   *             results of the initial request can be seen by sending another request with the returned
-   *                 <code>NextToken</code> value. This value can be between 5 and 1,000; if
-   *                 <code>MaxResults</code> is given a value larger than 1,000, only 1,000 results are
-   *             returned.</p>
+   * <p>The token returned by a previous paginated request.
+   *       Pagination continues from the end of the items returned by the previous request.</p>
    */
-  MaxResults?: number;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The token to retrieve the next page of results.</p>
+   * <p>The maximum number of results (up to a limit of 500) to be returned in a paginated
+   *       request. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
    */
-  NextToken?: string;
+  MaxResults?: number;
 }
 
 /**
  * @public
- * <p>Describes a VPC endpoint connection to a service.</p>
+ * @enum
  */
-export interface VpcEndpointConnection {
+export const VolumeModificationState = {
+  completed: "completed",
+  failed: "failed",
+  modifying: "modifying",
+  optimizing: "optimizing",
+} as const;
+
+/**
+ * @public
+ */
+export type VolumeModificationState = (typeof VolumeModificationState)[keyof typeof VolumeModificationState];
+
+/**
+ * @public
+ * <p>Describes the modification status of an EBS volume.</p>
+ *          <p>If the volume has never been modified, some element values will be null.</p>
+ */
+export interface VolumeModification {
   /**
    * @public
-   * <p>The ID of the service to which the endpoint is connected.</p>
+   * <p>The ID of the volume.</p>
    */
-  ServiceId?: string;
+  VolumeId?: string;
 
   /**
    * @public
-   * <p>The ID of the VPC endpoint.</p>
+   * <p>The current modification state. The modification state is null for unmodified
+   *       volumes.</p>
    */
-  VpcEndpointId?: string;
+  ModificationState?: VolumeModificationState;
 
   /**
    * @public
-   * <p>The ID of the Amazon Web Services account that owns the VPC endpoint.</p>
+   * <p>A status message about the modification progress or failure.</p>
    */
-  VpcEndpointOwner?: string;
+  StatusMessage?: string;
 
   /**
    * @public
-   * <p>The state of the VPC endpoint.</p>
+   * <p>The target size of the volume, in GiB.</p>
    */
-  VpcEndpointState?: State;
+  TargetSize?: number;
 
   /**
    * @public
-   * <p>The date and time that the VPC endpoint was created.</p>
+   * <p>The target IOPS rate of the volume.</p>
    */
-  CreationTimestamp?: Date;
+  TargetIops?: number;
 
   /**
    * @public
-   * <p>The DNS entries for the VPC endpoint.</p>
+   * <p>The target EBS volume type of the volume.</p>
    */
-  DnsEntries?: DnsEntry[];
+  TargetVolumeType?: VolumeType;
 
   /**
    * @public
-   * <p>The Amazon Resource Names (ARNs) of the network load balancers for the service.</p>
+   * <p>The target throughput of the volume, in MiB/s.</p>
    */
-  NetworkLoadBalancerArns?: string[];
+  TargetThroughput?: number;
 
   /**
    * @public
-   * <p>The Amazon Resource Names (ARNs) of the Gateway Load Balancers for the service.</p>
+   * <p>The target setting for Amazon EBS Multi-Attach.</p>
    */
-  GatewayLoadBalancerArns?: string[];
+  TargetMultiAttachEnabled?: boolean;
 
   /**
    * @public
-   * <p>The IP address type for the endpoint.</p>
+   * <p>The original size of the volume, in GiB.</p>
    */
-  IpAddressType?: IpAddressType;
+  OriginalSize?: number;
 
   /**
    * @public
-   * <p>The ID of the VPC endpoint connection.</p>
+   * <p>The original IOPS rate of the volume.</p>
    */
-  VpcEndpointConnectionId?: string;
+  OriginalIops?: number;
 
   /**
    * @public
-   * <p>The tags.</p>
+   * <p>The original EBS volume type of the volume.</p>
    */
-  Tags?: Tag[];
-}
+  OriginalVolumeType?: VolumeType;
 
-/**
- * @public
- */
-export interface DescribeVpcEndpointConnectionsResult {
   /**
    * @public
-   * <p>Information about the VPC endpoint connections.</p>
+   * <p>The original throughput of the volume, in MiB/s.</p>
    */
-  VpcEndpointConnections?: VpcEndpointConnection[];
+  OriginalThroughput?: number;
 
   /**
    * @public
-   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
+   * <p>The original setting for Amazon EBS Multi-Attach.</p>
    */
-  NextToken?: string;
-}
+  OriginalMultiAttachEnabled?: boolean;
 
-/**
- * @public
- */
-export interface DescribeVpcEndpointsRequest {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The modification progress, from 0 to 100 percent complete.</p>
    */
-  DryRun?: boolean;
+  Progress?: number;
 
   /**
    * @public
-   * <p>The IDs of the VPC endpoints.</p>
+   * <p>The modification start time.</p>
    */
-  VpcEndpointIds?: string[];
+  StartTime?: Date;
 
   /**
    * @public
-   * <p>The filters.</p>
-   *          <ul>
+   * <p>The modification completion or failure time.</p>
+   */
+  EndTime?: Date;
+}
+
+/**
+ * @public
+ */
+export interface DescribeVolumesModificationsResult {
+  /**
+   * @public
+   * <p>Information about the volume modifications.</p>
+   */
+  VolumesModifications?: VolumeModification[];
+
+  /**
+   * @public
+   * <p>The token to include in another request to get the next page of items.
+   *       This value is <code>null</code> if there are no more items to return.</p>
+   */
+  NextToken?: string;
+}
+
+/**
+ * @public
+ */
+export interface DescribeVolumeStatusRequest {
+  /**
+   * @public
+   * <p>The filters.</p>
+   *          <ul>
    *             <li>
    *                <p>
-   *                   <code>ip-address-type</code> - The IP address type (<code>ipv4</code> | <code>ipv6</code>).</p>
+   *                   <code>action.code</code> - The action code for the event (for example,
+   *             <code>enable-volume-io</code>).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>service-name</code> - The name of the service.</p>
+   *                   <code>action.description</code> - A description of the action.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>tag</code>:<key> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value. For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
+   *                   <code>action.event-id</code> - The event ID associated with the action.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>tag-key</code> - The key of a tag assigned to the resource. Use this filter to find all resources assigned a tag with a specific key, regardless of the tag value.</p>
+   *                   <code>availability-zone</code> - The Availability Zone of the instance.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>vpc-id</code> - The ID of the VPC in which the endpoint resides.</p>
+   *                   <code>event.description</code> - A description of the event.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>vpc-endpoint-id</code> - The ID of the endpoint.</p>
+   *                   <code>event.event-id</code> - The event ID.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>vpc-endpoint-state</code> - The state of the endpoint
-   *                         (<code>pendingAcceptance</code> | <code>pending</code> |
-   *                         <code>available</code> | <code>deleting</code> | <code>deleted</code> |
-   *                         <code>rejected</code> | <code>failed</code>).</p>
+   *                   <code>event.event-type</code> - The event type (for <code>io-enabled</code>:
+   *             <code>passed</code> | <code>failed</code>; for <code>io-performance</code>:
+   *             <code>io-performance:degraded</code> | <code>io-performance:severely-degraded</code> |
+   *             <code>io-performance:stalled</code>).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>vpc-endpoint-type</code> - The type of VPC endpoint (<code>Interface</code> | <code>Gateway</code> | <code>GatewayLoadBalancer</code>).</p>
+   *                   <code>event.not-after</code> - The latest end time for the event.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>event.not-before</code> - The earliest start time for the event.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>volume-status.details-name</code> - The cause for
+   *             <code>volume-status.status</code> (<code>io-enabled</code> |
+   *           <code>io-performance</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>volume-status.details-status</code> - The status of
+   *             <code>volume-status.details-name</code> (for <code>io-enabled</code>:
+   *             <code>passed</code> | <code>failed</code>; for <code>io-performance</code>:
+   *             <code>normal</code> | <code>degraded</code> | <code>severely-degraded</code> |
+   *             <code>stalled</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>volume-status.status</code> - The status of the volume (<code>ok</code> |
+   *             <code>impaired</code> | <code>warning</code> | <code>insufficient-data</code>).</p>
    *             </li>
    *          </ul>
    */
@@ -2353,39 +2307,28 @@ export interface DescribeVpcEndpointsRequest {
 
   /**
    * @public
-   * <p>The maximum number of items to return for this request. The request returns a token that you can specify in a subsequent call to get the next set of results.</p>
-   *          <p>Constraint: If the value is greater than 1,000, we return only 1,000 items.</p>
+   * <p>The maximum number of items to return for this request. To get the next page of items,
+   *       make another request with the token returned in the output. This value can be between 5 and 1,000;
+   *       if the value is larger than 1,000, only 1,000 results are returned. If this parameter is not used,
+   *       then all items are returned. You cannot specify this parameter and the volume IDs parameter in the
+   *       same request. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
    */
   MaxResults?: number;
 
   /**
    * @public
-   * <p>The token for the next set of items to return. (You received this token from a prior call.)</p>
+   * <p>The token returned from a previous paginated request.
+   *       Pagination continues from the end of the items returned by the previous request.</p>
    */
   NextToken?: string;
-}
-
-/**
- * @public
- */
-export interface DescribeVpcEndpointsResult {
-  /**
-   * @public
-   * <p>Information about the endpoints.</p>
-   */
-  VpcEndpoints?: VpcEndpoint[];
 
   /**
    * @public
-   * <p>The token to use when requesting the next set of items. If there are no additional items to return, the string is empty.</p>
+   * <p>The IDs of the volumes.</p>
+   *          <p>Default: Describes all your volumes.</p>
    */
-  NextToken?: string;
-}
+  VolumeIds?: string[];
 
-/**
- * @public
- */
-export interface DescribeVpcEndpointServiceConfigurationsRequest {
   /**
    * @public
    * <p>Checks whether you have the required permissions for the action, without actually making the request,
@@ -2393,403 +2336,315 @@ export interface DescribeVpcEndpointServiceConfigurationsRequest {
    *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
+}
 
+/**
+ * @public
+ * <p>Describes a volume status operation code.</p>
+ */
+export interface VolumeStatusAction {
   /**
    * @public
-   * <p>The IDs of the endpoint services.</p>
+   * <p>The code identifying the operation, for example, <code>enable-volume-io</code>.</p>
    */
-  ServiceIds?: string[];
+  Code?: string;
 
   /**
    * @public
-   * <p>The filters.</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>service-name</code> - The name of the service.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>service-id</code> - The ID of the service.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>service-state</code> - The state of the service (<code>Pending</code> |
-   *                         <code>Available</code> | <code>Deleting</code> | <code>Deleted</code> |
-   *                         <code>Failed</code>). </p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>supported-ip-address-types</code> - The IP address type (<code>ipv4</code> | <code>ipv6</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>tag</code>:<key> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value. For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>tag-key</code> - The key of a tag assigned to the resource. Use this filter to find all resources assigned a tag with a specific key, regardless of the tag value.</p>
-   *             </li>
-   *          </ul>
+   * <p>A description of the operation.</p>
    */
-  Filters?: Filter[];
+  Description?: string;
 
   /**
    * @public
-   * <p>The maximum number of results to return for the request in a single page. The remaining
-   *             results of the initial request can be seen by sending another request with the returned
-   *                 <code>NextToken</code> value. This value can be between 5 and 1,000; if
-   *                 <code>MaxResults</code> is given a value larger than 1,000, only 1,000 results are
-   *             returned.</p>
+   * <p>The ID of the event associated with this operation.</p>
    */
-  MaxResults?: number;
+  EventId?: string;
 
   /**
    * @public
-   * <p>The token to retrieve the next page of results.</p>
+   * <p>The event type associated with this operation.</p>
    */
-  NextToken?: string;
+  EventType?: string;
 }
 
 /**
  * @public
+ * <p>Information about the instances to which the volume is attached.</p>
  */
-export interface DescribeVpcEndpointServiceConfigurationsResult {
+export interface VolumeStatusAttachmentStatus {
   /**
    * @public
-   * <p>Information about the services.</p>
+   * <p>The maximum IOPS supported by the attached instance.</p>
    */
-  ServiceConfigurations?: ServiceConfiguration[];
+  IoPerformance?: string;
 
   /**
    * @public
-   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
+   * <p>The ID of the attached instance.</p>
    */
-  NextToken?: string;
+  InstanceId?: string;
 }
 
 /**
  * @public
+ * <p>Describes a volume status event.</p>
  */
-export interface DescribeVpcEndpointServicePermissionsRequest {
+export interface VolumeStatusEvent {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>A description of the event.</p>
    */
-  DryRun?: boolean;
+  Description?: string;
 
   /**
    * @public
-   * <p>The ID of the service.</p>
+   * <p>The ID of this event.</p>
    */
-  ServiceId: string | undefined;
+  EventId?: string;
 
   /**
    * @public
-   * <p>The filters.</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>principal</code> - The ARN of the principal.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>principal-type</code> - The principal type (<code>All</code> |
-   * 						<code>Service</code> | <code>OrganizationUnit</code> | <code>Account</code>
-   * 					| <code>User</code> | <code>Role</code>).</p>
-   *             </li>
-   *          </ul>
+   * <p>The type of this event.</p>
    */
-  Filters?: Filter[];
+  EventType?: string;
 
   /**
    * @public
-   * <p>The maximum number of results to return for the request in a single page. The remaining
-   *             results of the initial request can be seen by sending another request with the returned
-   *                 <code>NextToken</code> value. This value can be between 5 and 1,000; if
-   *                 <code>MaxResults</code> is given a value larger than 1,000, only 1,000 results are
-   *             returned.</p>
+   * <p>The latest end time of the event.</p>
    */
-  MaxResults?: number;
+  NotAfter?: Date;
 
   /**
    * @public
-   * <p>The token to retrieve the next page of results.</p>
+   * <p>The earliest start time of the event.</p>
    */
-  NextToken?: string;
+  NotBefore?: Date;
+
+  /**
+   * @public
+   * <p>The ID of the instance associated with the event.</p>
+   */
+  InstanceId?: string;
 }
 
 /**
  * @public
+ * @enum
  */
-export interface DescribeVpcEndpointServicePermissionsResult {
-  /**
-   * @public
-   * <p>Information about the allowed principals.</p>
-   */
-  AllowedPrincipals?: AllowedPrincipal[];
+export const VolumeStatusName = {
+  io_enabled: "io-enabled",
+  io_performance: "io-performance",
+} as const;
 
-  /**
-   * @public
-   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
-   */
-  NextToken?: string;
-}
+/**
+ * @public
+ */
+export type VolumeStatusName = (typeof VolumeStatusName)[keyof typeof VolumeStatusName];
 
 /**
  * @public
+ * <p>Describes a volume status.</p>
  */
-export interface DescribeVpcEndpointServicesRequest {
+export interface VolumeStatusDetails {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The name of the volume status.</p>
    */
-  DryRun?: boolean;
+  Name?: VolumeStatusName;
 
   /**
    * @public
-   * <p>The service names.</p>
+   * <p>The intended status of the volume status.</p>
    */
-  ServiceNames?: string[];
+  Status?: string;
+}
 
-  /**
-   * @public
-   * <p>The filters.</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>owner</code> - The ID or alias of the Amazon Web Services account that owns
-   *                     the service.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>service-name</code> - The name of the service.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>service-type</code> - The type of service (<code>Interface</code> |
-   *                         <code>Gateway</code> | <code>GatewayLoadBalancer</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>supported-ip-address-types</code> - The IP address type (<code>ipv4</code> | <code>ipv6</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>tag</code>:<key> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value. For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>tag-key</code> - The key of a tag assigned to the resource. Use this filter to find all resources assigned a tag with a specific key, regardless of the tag value.</p>
-   *             </li>
-   *          </ul>
-   */
-  Filters?: Filter[];
-
-  /**
-   * @public
-   * <p>The maximum number of items to return for this request. The request returns a token that you can specify in a subsequent call to get the next set of results.</p>
-   *          <p>Constraint: If the value is greater than 1,000, we return only 1,000 items.</p>
-   */
-  MaxResults?: number;
-
-  /**
-   * @public
-   * <p>The token for the next set of items to return. (You received this token from a prior call.)</p>
-   */
-  NextToken?: string;
-}
+/**
+ * @public
+ * @enum
+ */
+export const VolumeStatusInfoStatus = {
+  impaired: "impaired",
+  insufficient_data: "insufficient-data",
+  ok: "ok",
+} as const;
 
 /**
  * @public
- * <p>Information about the Private DNS name for interface endpoints.</p>
  */
-export interface PrivateDnsDetails {
-  /**
-   * @public
-   * <p>The private DNS name assigned to the VPC endpoint service.</p>
-   */
-  PrivateDnsName?: string;
-}
+export type VolumeStatusInfoStatus = (typeof VolumeStatusInfoStatus)[keyof typeof VolumeStatusInfoStatus];
 
 /**
  * @public
- * <p>Describes a VPC endpoint service.</p>
+ * <p>Describes the status of a volume.</p>
  */
-export interface ServiceDetail {
+export interface VolumeStatusInfo {
   /**
    * @public
-   * <p>The name of the service.</p>
+   * <p>The details of the volume status.</p>
    */
-  ServiceName?: string;
+  Details?: VolumeStatusDetails[];
 
   /**
    * @public
-   * <p>The ID of the endpoint service.</p>
+   * <p>The status of the volume.</p>
    */
-  ServiceId?: string;
+  Status?: VolumeStatusInfoStatus;
+}
 
+/**
+ * @public
+ * <p>Describes the volume status.</p>
+ */
+export interface VolumeStatusItem {
   /**
    * @public
-   * <p>The type of service.</p>
+   * <p>The details of the operation.</p>
    */
-  ServiceType?: ServiceTypeDetail[];
+  Actions?: VolumeStatusAction[];
 
   /**
    * @public
-   * <p>The Availability Zones in which the service is available.</p>
+   * <p>The Availability Zone of the volume.</p>
    */
-  AvailabilityZones?: string[];
+  AvailabilityZone?: string;
 
   /**
    * @public
-   * <p>The Amazon Web Services account ID of the service owner.</p>
+   * <p>The Amazon Resource Name (ARN) of the Outpost.</p>
    */
-  Owner?: string;
+  OutpostArn?: string;
 
   /**
    * @public
-   * <p>The DNS names for the service.</p>
+   * <p>A list of events associated with the volume.</p>
    */
-  BaseEndpointDnsNames?: string[];
+  Events?: VolumeStatusEvent[];
 
   /**
    * @public
-   * <p>The private DNS name for the service.</p>
+   * <p>The volume ID.</p>
    */
-  PrivateDnsName?: string;
+  VolumeId?: string;
 
   /**
    * @public
-   * <p>The private DNS names assigned to the VPC endpoint service.</p>
+   * <p>The volume status.</p>
    */
-  PrivateDnsNames?: PrivateDnsDetails[];
+  VolumeStatus?: VolumeStatusInfo;
 
   /**
    * @public
-   * <p>Indicates whether the service supports endpoint policies.</p>
+   * <p>Information about the instances to which the volume is attached.</p>
    */
-  VpcEndpointPolicySupported?: boolean;
+  AttachmentStatuses?: VolumeStatusAttachmentStatus[];
+}
 
+/**
+ * @public
+ */
+export interface DescribeVolumeStatusResult {
   /**
    * @public
-   * <p>Indicates whether VPC endpoint connection requests to the service must be accepted by the service owner.</p>
+   * <p>The token to include in another request to get the next page of items.
+   *       This value is <code>null</code> when there are no more items to return.</p>
    */
-  AcceptanceRequired?: boolean;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>Indicates whether the service manages its VPC endpoints. Management of the service VPC
-   *             endpoints using the VPC endpoint API is restricted.</p>
+   * <p>Information about the status of the volumes.</p>
    */
-  ManagesVpcEndpoints?: boolean;
+  VolumeStatuses?: VolumeStatusItem[];
+}
 
-  /**
-   * @public
-   * <p>The payer responsibility.</p>
-   */
-  PayerResponsibility?: PayerResponsibility;
+/**
+ * @public
+ * @enum
+ */
+export const VpcAttributeName = {
+  enableDnsHostnames: "enableDnsHostnames",
+  enableDnsSupport: "enableDnsSupport",
+  enableNetworkAddressUsageMetrics: "enableNetworkAddressUsageMetrics",
+} as const;
+
+/**
+ * @public
+ */
+export type VpcAttributeName = (typeof VpcAttributeName)[keyof typeof VpcAttributeName];
 
+/**
+ * @public
+ */
+export interface DescribeVpcAttributeRequest {
   /**
    * @public
-   * <p>The tags assigned to the service.</p>
+   * <p>The VPC attribute.</p>
    */
-  Tags?: Tag[];
+  Attribute: VpcAttributeName | undefined;
 
   /**
    * @public
-   * <p>The verification state of the VPC endpoint service.</p>
-   *          <p>Consumers of the endpoint service cannot use the private name when the state is not <code>verified</code>.</p>
+   * <p>The ID of the VPC.</p>
    */
-  PrivateDnsNameVerificationState?: DnsNameState;
+  VpcId: string | undefined;
 
   /**
    * @public
-   * <p>The supported IP address types.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  SupportedIpAddressTypes?: ServiceConnectivityType[];
+  DryRun?: boolean;
 }
 
 /**
  * @public
  */
-export interface DescribeVpcEndpointServicesResult {
+export interface DescribeVpcAttributeResult {
   /**
    * @public
-   * <p>The supported services.</p>
+   * <p>The ID of the VPC.</p>
    */
-  ServiceNames?: string[];
+  VpcId?: string;
 
   /**
    * @public
-   * <p>Information about the service.</p>
+   * <p>Indicates whether the instances launched in the VPC get DNS hostnames.
+   * 				If this attribute is <code>true</code>, instances in the VPC get DNS hostnames;
+   * 				otherwise, they do not.</p>
    */
-  ServiceDetails?: ServiceDetail[];
+  EnableDnsHostnames?: AttributeBooleanValue;
 
   /**
    * @public
-   * <p>The token to use when requesting the next set of items. If there are no additional items to return, the string is empty.</p>
+   * <p>Indicates whether DNS resolution is enabled for
+   * 				the VPC. If this attribute is <code>true</code>, the Amazon DNS server
+   * 				resolves DNS hostnames for your instances to their corresponding
+   * 				IP addresses; otherwise, it does not.</p>
    */
-  NextToken?: string;
+  EnableDnsSupport?: AttributeBooleanValue;
+
+  /**
+   * @public
+   * <p>Indicates whether Network Address Usage metrics are enabled for your VPC.</p>
+   */
+  EnableNetworkAddressUsageMetrics?: AttributeBooleanValue;
 }
 
 /**
  * @public
  */
-export interface DescribeVpcPeeringConnectionsRequest {
+export interface DescribeVpcClassicLinkRequest {
   /**
    * @public
    * <p>The filters.</p>
    *          <ul>
    *             <li>
    *                <p>
-   *                   <code>accepter-vpc-info.cidr-block</code> - The IPv4 CIDR block of the accepter
-   *                     VPC.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>accepter-vpc-info.owner-id</code> - The ID of the Amazon Web Services account that owns the
-   *                     accepter VPC.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>accepter-vpc-info.vpc-id</code> - The ID of the accepter VPC.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>expiration-time</code> - The expiration date and time for the VPC peering
-   *           connection.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>requester-vpc-info.cidr-block</code> - The IPv4 CIDR block of the
-   *                     requester's VPC.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>requester-vpc-info.owner-id</code> - The ID of the Amazon Web Services account that owns the
-   *                   requester VPC.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>requester-vpc-info.vpc-id</code> - The ID of the requester VPC.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>status-code</code> - The status of the VPC peering connection
-   *                         (<code>pending-acceptance</code> | <code>failed</code> |
-   *                         <code>expired</code> | <code>provisioning</code> | <code>active</code> |
-   *                         <code>deleting</code> | <code>deleted</code> |
-   *                     <code>rejected</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>status-message</code> - A message that provides more information about the status
-   *           of the VPC peering connection, if applicable.</p>
+   *                   <code>is-classic-link-enabled</code> - Whether the VPC is enabled for ClassicLink
+   * 					   (<code>true</code> | <code>false</code>).</p>
    *             </li>
    *             <li>
    *                <p>
@@ -2800,10 +2655,6 @@ export interface DescribeVpcPeeringConnectionsRequest {
    *                <p>
    *                   <code>tag-key</code> - The key of a tag assigned to the resource. Use this filter to find all resources assigned a tag with a specific key, regardless of the tag value.</p>
    *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>vpc-peering-connection-id</code> - The ID of the VPC peering connection.</p>
-   *             </li>
    *          </ul>
    */
   Filters?: Filter[];
@@ -2818,17 +2669,53 @@ export interface DescribeVpcPeeringConnectionsRequest {
 
   /**
    * @public
-   * <p>The IDs of the VPC peering connections.</p>
-   *          <p>Default: Describes all your VPC peering connections.</p>
+   * <p>The VPCs for which you want to describe the ClassicLink status.</p>
    */
-  VpcPeeringConnectionIds?: string[];
+  VpcIds?: string[];
+}
 
+/**
+ * @public
+ * <note>
+ *             <p>Deprecated.</p>
+ *          </note>
+ *          <p>Describes whether a VPC is enabled for ClassicLink.</p>
+ */
+export interface VpcClassicLink {
   /**
    * @public
-   * <p>The token returned from a previous paginated request. Pagination continues from the end of the items returned by the previous request.</p>
+   * <p>Indicates whether the VPC is enabled for ClassicLink.</p>
    */
-  NextToken?: string;
+  ClassicLinkEnabled?: boolean;
+
+  /**
+   * @public
+   * <p>Any tags assigned to the VPC.</p>
+   */
+  Tags?: Tag[];
+
+  /**
+   * @public
+   * <p>The ID of the VPC.</p>
+   */
+  VpcId?: string;
+}
+
+/**
+ * @public
+ */
+export interface DescribeVpcClassicLinkResult {
+  /**
+   * @public
+   * <p>The ClassicLink status of the VPCs.</p>
+   */
+  Vpcs?: VpcClassicLink[];
+}
 
+/**
+ * @public
+ */
+export interface DescribeVpcClassicLinkDnsSupportRequest {
   /**
    * @public
    * <p>The maximum number of items to return for this request.
@@ -2836,102 +2723,107 @@ export interface DescribeVpcPeeringConnectionsRequest {
    * 	For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
    */
   MaxResults?: number;
+
+  /**
+   * @public
+   * <p>The token returned from a previous paginated request. Pagination continues from the end of the items returned by the previous request.</p>
+   */
+  NextToken?: string;
+
+  /**
+   * @public
+   * <p>The IDs of the VPCs.</p>
+   */
+  VpcIds?: string[];
 }
 
 /**
  * @public
+ * <note>
+ *             <p>Deprecated.</p>
+ *          </note>
+ *          <p>Describes the ClassicLink DNS support status of a VPC.</p>
  */
-export interface DescribeVpcPeeringConnectionsResult {
+export interface ClassicLinkDnsSupport {
   /**
    * @public
-   * <p>Information about the VPC peering connections.</p>
+   * <p>Indicates whether ClassicLink DNS support is enabled for the VPC.</p>
    */
-  VpcPeeringConnections?: VpcPeeringConnection[];
+  ClassicLinkDnsSupported?: boolean;
+
+  /**
+   * @public
+   * <p>The ID of the VPC.</p>
+   */
+  VpcId?: string;
+}
 
+/**
+ * @public
+ */
+export interface DescribeVpcClassicLinkDnsSupportResult {
   /**
    * @public
    * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there are no more items to return.</p>
    */
   NextToken?: string;
+
+  /**
+   * @public
+   * <p>Information about the ClassicLink DNS support status of the VPCs.</p>
+   */
+  Vpcs?: ClassicLinkDnsSupport[];
 }
 
 /**
  * @public
  */
-export interface DescribeVpcsRequest {
+export interface DescribeVpcEndpointConnectionNotificationsRequest {
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
+
+  /**
+   * @public
+   * <p>The ID of the notification.</p>
+   */
+  ConnectionNotificationId?: string;
+
   /**
    * @public
    * <p>The filters.</p>
    *          <ul>
    *             <li>
    *                <p>
-   *                   <code>cidr</code> - The primary IPv4 CIDR block of the VPC. The CIDR block you
-   *                     specify must exactly match the VPC's CIDR block for information to be returned
-   *                     for the VPC. Must contain the slash followed by one or two digits (for example,
-   *                     <code>/28</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>cidr-block-association.cidr-block</code> - An IPv4 CIDR block associated with the
-   *                     VPC.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>cidr-block-association.association-id</code> - The association ID for
-   *                     an IPv4 CIDR block associated with the VPC.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>cidr-block-association.state</code> - The state of an IPv4 CIDR block
-   *                     associated with the VPC.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>dhcp-options-id</code> - The ID of a set of DHCP options.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>ipv6-cidr-block-association.ipv6-cidr-block</code> - An IPv6 CIDR
-   *                     block associated with the VPC.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>ipv6-cidr-block-association.ipv6-pool</code> - The ID of the IPv6 address pool from which the IPv6 CIDR block is allocated.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>ipv6-cidr-block-association.association-id</code> - The association
-   *                     ID for an IPv6 CIDR block associated with the VPC.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>ipv6-cidr-block-association.state</code> - The state of an IPv6 CIDR
-   *                     block associated with the VPC.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>is-default</code> - Indicates whether the VPC is the default VPC.</p>
+   *                   <code>connection-notification-arn</code> - The ARN of the SNS topic for the
+   *                     notification.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>owner-id</code> - The ID of the Amazon Web Services account that owns the VPC.</p>
+   *                   <code>connection-notification-id</code> - The ID of the
+   *                     notification.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>state</code> - The state of the VPC (<code>pending</code> | <code>available</code>).</p>
+   *                   <code>connection-notification-state</code> - The state of the notification
+   *                         (<code>Enabled</code> | <code>Disabled</code>).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>tag</code>:<key> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value.
-   *     For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
+   *                   <code>connection-notification-type</code> - The type of notification
+   *                         (<code>Topic</code>).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>tag-key</code> - The key of a tag assigned to the resource. Use this filter to find all resources assigned a tag with a specific key, regardless of the tag value.</p>
+   *                   <code>service-id</code> - The ID of the endpoint service.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>vpc-id</code> - The ID of the VPC.</p>
+   *                   <code>vpc-endpoint-id</code> - The ID of the VPC endpoint.</p>
    *             </li>
    *          </ul>
    */
@@ -2939,119 +2831,75 @@ export interface DescribeVpcsRequest {
 
   /**
    * @public
-   * <p>The IDs of the VPCs.</p>
-   *          <p>Default: Describes all your VPCs.</p>
-   */
-  VpcIds?: string[];
-
-  /**
-   * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The maximum number of results to return in a single call. To retrieve the remaining
+   *             results, make another request with the returned <code>NextToken</code> value.</p>
    */
-  DryRun?: boolean;
+  MaxResults?: number;
 
   /**
    * @public
-   * <p>The token returned from a previous paginated request. Pagination continues from the end of the items returned by the previous request.</p>
+   * <p>The token to request the next page of results.</p>
    */
   NextToken?: string;
-
-  /**
-   * @public
-   * <p>The maximum number of items to return for this request.
-   * 	To get the next page of items, make another request with the token returned in the output.
-   * 	For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
-   */
-  MaxResults?: number;
 }
 
 /**
  * @public
  */
-export interface DescribeVpcsResult {
+export interface DescribeVpcEndpointConnectionNotificationsResult {
   /**
    * @public
-   * <p>Information about one or more VPCs.</p>
+   * <p>The notifications.</p>
    */
-  Vpcs?: Vpc[];
+  ConnectionNotificationSet?: ConnectionNotification[];
 
   /**
    * @public
-   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there are no more items to return.</p>
+   * <p>The token to use to retrieve the next page of results. This value is
+   *             <code>null</code> when there are no more results to return.</p>
    */
   NextToken?: string;
 }
 
 /**
  * @public
- * <p>Contains the parameters for DescribeVpnConnections.</p>
  */
-export interface DescribeVpnConnectionsRequest {
+export interface DescribeVpcEndpointConnectionsRequest {
   /**
    * @public
-   * <p>One or more filters.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
+
+  /**
+   * @public
+   * <p>The filters.</p>
    *          <ul>
    *             <li>
    *                <p>
-   *                   <code>customer-gateway-configuration</code> - The configuration information
-   *                     for the customer gateway.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>customer-gateway-id</code> - The ID of a customer gateway associated
-   *                     with the VPN connection.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>state</code> - The state of the VPN connection (<code>pending</code> |
-   *                         <code>available</code> | <code>deleting</code> |
-   *                     <code>deleted</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>option.static-routes-only</code> - Indicates whether the connection has
-   *                     static routes only. Used for devices that do not support Border Gateway Protocol
-   *                     (BGP).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>route.destination-cidr-block</code> - The destination CIDR block. This
-   *                     corresponds to the subnet used in a customer data center.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>bgp-asn</code> - The BGP Autonomous System Number (ASN) associated with
-   *                     a BGP device.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>tag</code>:<key> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value.
-   *     For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>tag-key</code> - The key of a tag assigned to the resource. Use this filter to find all resources assigned a tag with a specific key, regardless of the tag value.</p>
+   *                   <code>ip-address-type</code> - The IP address type (<code>ipv4</code> | <code>ipv6</code>).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>type</code> - The type of VPN connection. Currently the only supported
-   *                     type is <code>ipsec.1</code>.</p>
+   *                   <code>service-id</code> - The ID of the service.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>vpn-connection-id</code> - The ID of the VPN connection.</p>
+   *                   <code>vpc-endpoint-owner</code> - The ID of the Amazon Web Services account ID
+   * 		        that owns the endpoint.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>vpn-gateway-id</code> - The ID of a virtual private gateway associated
-   *                     with the VPN connection.</p>
+   *                   <code>vpc-endpoint-state</code> - The state of the endpoint
+   * 			        (<code>pendingAcceptance</code> | <code>pending</code> |
+   * 			        <code>available</code> | <code>deleting</code> | <code>deleted</code> |
+   * 			        <code>rejected</code> | <code>failed</code>).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>transit-gateway-id</code> - The ID of a transit gateway associated with
-   *                     the VPN connection.</p>
+   *                   <code>vpc-endpoint-id</code> - The ID of the endpoint.</p>
    *             </li>
    *          </ul>
    */
@@ -3059,85 +2907,166 @@ export interface DescribeVpnConnectionsRequest {
 
   /**
    * @public
-   * <p>One or more VPN connection IDs.</p>
-   *          <p>Default: Describes your VPN connections.</p>
+   * <p>The maximum number of results to return for the request in a single page. The remaining
+   *             results of the initial request can be seen by sending another request with the returned
+   *                 <code>NextToken</code> value. This value can be between 5 and 1,000; if
+   *                 <code>MaxResults</code> is given a value larger than 1,000, only 1,000 results are
+   *             returned.</p>
    */
-  VpnConnectionIds?: string[];
+  MaxResults?: number;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually
-   *             making the request, and provides an error response. If you have the required
-   *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
-   *                 <code>UnauthorizedOperation</code>.</p>
+   * <p>The token to retrieve the next page of results.</p>
    */
-  DryRun?: boolean;
+  NextToken?: string;
 }
 
 /**
  * @public
- * <p>Contains the output of DescribeVpnConnections.</p>
+ * <p>Describes a VPC endpoint connection to a service.</p>
  */
-export interface DescribeVpnConnectionsResult {
+export interface VpcEndpointConnection {
   /**
    * @public
-   * <p>Information about one or more VPN connections.</p>
+   * <p>The ID of the service to which the endpoint is connected.</p>
    */
-  VpnConnections?: VpnConnection[];
+  ServiceId?: string;
+
+  /**
+   * @public
+   * <p>The ID of the VPC endpoint.</p>
+   */
+  VpcEndpointId?: string;
+
+  /**
+   * @public
+   * <p>The ID of the Amazon Web Services account that owns the VPC endpoint.</p>
+   */
+  VpcEndpointOwner?: string;
+
+  /**
+   * @public
+   * <p>The state of the VPC endpoint.</p>
+   */
+  VpcEndpointState?: State;
+
+  /**
+   * @public
+   * <p>The date and time that the VPC endpoint was created.</p>
+   */
+  CreationTimestamp?: Date;
+
+  /**
+   * @public
+   * <p>The DNS entries for the VPC endpoint.</p>
+   */
+  DnsEntries?: DnsEntry[];
+
+  /**
+   * @public
+   * <p>The Amazon Resource Names (ARNs) of the network load balancers for the service.</p>
+   */
+  NetworkLoadBalancerArns?: string[];
+
+  /**
+   * @public
+   * <p>The Amazon Resource Names (ARNs) of the Gateway Load Balancers for the service.</p>
+   */
+  GatewayLoadBalancerArns?: string[];
+
+  /**
+   * @public
+   * <p>The IP address type for the endpoint.</p>
+   */
+  IpAddressType?: IpAddressType;
+
+  /**
+   * @public
+   * <p>The ID of the VPC endpoint connection.</p>
+   */
+  VpcEndpointConnectionId?: string;
+
+  /**
+   * @public
+   * <p>The tags.</p>
+   */
+  Tags?: Tag[];
 }
 
 /**
  * @public
- * <p>Contains the parameters for DescribeVpnGateways.</p>
  */
-export interface DescribeVpnGatewaysRequest {
+export interface DescribeVpcEndpointConnectionsResult {
   /**
    * @public
-   * <p>One or more filters.</p>
+   * <p>Information about the VPC endpoint connections.</p>
+   */
+  VpcEndpointConnections?: VpcEndpointConnection[];
+
+  /**
+   * @public
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
+   */
+  NextToken?: string;
+}
+
+/**
+ * @public
+ */
+export interface DescribeVpcEndpointsRequest {
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
+
+  /**
+   * @public
+   * <p>The IDs of the VPC endpoints.</p>
+   */
+  VpcEndpointIds?: string[];
+
+  /**
+   * @public
+   * <p>The filters.</p>
    *          <ul>
    *             <li>
    *                <p>
-   *                   <code>amazon-side-asn</code> - The Autonomous System Number (ASN) for the
-   *                     Amazon side of the gateway.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>attachment.state</code> - The current state of the attachment between
-   *                     the gateway and the VPC (<code>attaching</code> | <code>attached</code> |
-   *                         <code>detaching</code> | <code>detached</code>).</p>
+   *                   <code>ip-address-type</code> - The IP address type (<code>ipv4</code> | <code>ipv6</code>).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>attachment.vpc-id</code> - The ID of an attached VPC.</p>
+   *                   <code>service-name</code> - The name of the service.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>availability-zone</code> - The Availability Zone for the virtual private
-   *                     gateway (if applicable).</p>
+   *                   <code>tag</code>:<key> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value. For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>state</code> - The state of the virtual private gateway
-   *                         (<code>pending</code> | <code>available</code> | <code>deleting</code> |
-   *                         <code>deleted</code>).</p>
+   *                   <code>tag-key</code> - The key of a tag assigned to the resource. Use this filter to find all resources assigned a tag with a specific key, regardless of the tag value.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>tag</code>:<key> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value.
-   *     For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
+   *                   <code>vpc-id</code> - The ID of the VPC in which the endpoint resides.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>tag-key</code> - The key of a tag assigned to the resource. Use this filter to find all resources assigned a tag with a specific key, regardless of the tag value.</p>
+   *                   <code>vpc-endpoint-id</code> - The ID of the endpoint.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>type</code> - The type of virtual private gateway. Currently the only
-   *                     supported type is <code>ipsec.1</code>.</p>
+   *                   <code>vpc-endpoint-state</code> - The state of the endpoint
+   *                         (<code>pendingAcceptance</code> | <code>pending</code> |
+   *                         <code>available</code> | <code>deleting</code> | <code>deleted</code> |
+   *                         <code>rejected</code> | <code>failed</code>).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>vpn-gateway-id</code> - The ID of the virtual private gateway.</p>
+   *                   <code>vpc-endpoint-type</code> - The type of VPC endpoint (<code>Interface</code> | <code>Gateway</code> | <code>GatewayLoadBalancer</code>).</p>
    *             </li>
    *          </ul>
    */
@@ -3145,37 +3074,39 @@ export interface DescribeVpnGatewaysRequest {
 
   /**
    * @public
-   * <p>One or more virtual private gateway IDs.</p>
-   *          <p>Default: Describes all your virtual private gateways.</p>
+   * <p>The maximum number of items to return for this request. The request returns a token that you can specify in a subsequent call to get the next set of results.</p>
+   *          <p>Constraint: If the value is greater than 1,000, we return only 1,000 items.</p>
    */
-  VpnGatewayIds?: string[];
+  MaxResults?: number;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually
-   *             making the request, and provides an error response. If you have the required
-   *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
-   *                 <code>UnauthorizedOperation</code>.</p>
+   * <p>The token for the next set of items to return. (You received this token from a prior call.)</p>
    */
-  DryRun?: boolean;
+  NextToken?: string;
 }
 
 /**
  * @public
- * <p>Contains the output of DescribeVpnGateways.</p>
  */
-export interface DescribeVpnGatewaysResult {
+export interface DescribeVpcEndpointsResult {
   /**
    * @public
-   * <p>Information about one or more virtual private gateways.</p>
+   * <p>Information about the endpoints.</p>
    */
-  VpnGateways?: VpnGateway[];
+  VpcEndpoints?: VpcEndpoint[];
+
+  /**
+   * @public
+   * <p>The token to use when requesting the next set of items. If there are no additional items to return, the string is empty.</p>
+   */
+  NextToken?: string;
 }
 
 /**
  * @public
  */
-export interface DetachClassicLinkVpcRequest {
+export interface DescribeVpcEndpointServiceConfigurationsRequest {
   /**
    * @public
    * <p>Checks whether you have the required permissions for the action, without actually making the request,
@@ -3186,419 +3117,553 @@ export interface DetachClassicLinkVpcRequest {
 
   /**
    * @public
-   * <p>The ID of the instance to unlink from the VPC.</p>
+   * <p>The IDs of the endpoint services.</p>
    */
-  InstanceId: string | undefined;
+  ServiceIds?: string[];
 
   /**
    * @public
-   * <p>The ID of the VPC to which the instance is linked.</p>
+   * <p>The filters.</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>service-name</code> - The name of the service.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>service-id</code> - The ID of the service.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>service-state</code> - The state of the service (<code>Pending</code> |
+   *                         <code>Available</code> | <code>Deleting</code> | <code>Deleted</code> |
+   *                         <code>Failed</code>). </p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>supported-ip-address-types</code> - The IP address type (<code>ipv4</code> | <code>ipv6</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>tag</code>:<key> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value. For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>tag-key</code> - The key of a tag assigned to the resource. Use this filter to find all resources assigned a tag with a specific key, regardless of the tag value.</p>
+   *             </li>
+   *          </ul>
    */
-  VpcId: string | undefined;
-}
+  Filters?: Filter[];
 
-/**
- * @public
- */
-export interface DetachClassicLinkVpcResult {
   /**
    * @public
-   * <p>Returns <code>true</code> if the request succeeds; otherwise, it returns an error.</p>
+   * <p>The maximum number of results to return for the request in a single page. The remaining
+   *             results of the initial request can be seen by sending another request with the returned
+   *                 <code>NextToken</code> value. This value can be between 5 and 1,000; if
+   *                 <code>MaxResults</code> is given a value larger than 1,000, only 1,000 results are
+   *             returned.</p>
    */
-  Return?: boolean;
-}
+  MaxResults?: number;
 
-/**
- * @public
- */
-export interface DetachInternetGatewayRequest {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The token to retrieve the next page of results.</p>
    */
-  DryRun?: boolean;
+  NextToken?: string;
+}
 
+/**
+ * @public
+ */
+export interface DescribeVpcEndpointServiceConfigurationsResult {
   /**
    * @public
-   * <p>The ID of the internet gateway.</p>
+   * <p>Information about the services.</p>
    */
-  InternetGatewayId: string | undefined;
+  ServiceConfigurations?: ServiceConfiguration[];
 
   /**
    * @public
-   * <p>The ID of the VPC.</p>
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
    */
-  VpcId: string | undefined;
+  NextToken?: string;
 }
 
 /**
  * @public
- * <p>Contains the parameters for DetachNetworkInterface.</p>
  */
-export interface DetachNetworkInterfaceRequest {
-  /**
-   * @public
-   * <p>The ID of the attachment.</p>
-   */
-  AttachmentId: string | undefined;
-
+export interface DescribeVpcEndpointServicePermissionsRequest {
   /**
    * @public
    * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *             and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *             Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
 
   /**
    * @public
-   * <p>Specifies whether to force a detachment.</p>
-   *          <note>
-   *             <ul>
-   *                <li>
-   *                   <p>Use the <code>Force</code> parameter only as a last resort to detach a network interface from a failed instance. </p>
-   *                </li>
-   *                <li>
-   *                   <p>If you use the <code>Force</code> parameter to detach a network interface, you might not be able to attach a different network interface to the same index on the instance without first stopping and starting the instance.</p>
-   *                </li>
-   *                <li>
-   *                   <p>If you force the detachment of a network interface, the <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-metadata.html">instance metadata</a>
-   *                         might not get updated. This means that the attributes associated
-   *                         with the detached network interface might still be visible. The
-   *                         instance metadata will get updated when you stop and start the
-   *                         instance.</p>
-   *                </li>
-   *             </ul>
-   *          </note>
-   */
-  Force?: boolean;
-}
-
-/**
- * @public
- */
-export interface DetachVerifiedAccessTrustProviderRequest {
-  /**
-   * @public
-   * <p>The ID of the Verified Access instance.</p>
+   * <p>The ID of the service.</p>
    */
-  VerifiedAccessInstanceId: string | undefined;
+  ServiceId: string | undefined;
 
   /**
    * @public
-   * <p>The ID of the Verified Access trust provider.</p>
+   * <p>The filters.</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>principal</code> - The ARN of the principal.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>principal-type</code> - The principal type (<code>All</code> |
+   * 						<code>Service</code> | <code>OrganizationUnit</code> | <code>Account</code>
+   * 					| <code>User</code> | <code>Role</code>).</p>
+   *             </li>
+   *          </ul>
    */
-  VerifiedAccessTrustProviderId: string | undefined;
+  Filters?: Filter[];
 
   /**
    * @public
-   * <p>A unique, case-sensitive token that you provide to ensure idempotency of your
-   *             modification request. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html">Ensuring Idempotency</a>.</p>
+   * <p>The maximum number of results to return for the request in a single page. The remaining
+   *             results of the initial request can be seen by sending another request with the returned
+   *                 <code>NextToken</code> value. This value can be between 5 and 1,000; if
+   *                 <code>MaxResults</code> is given a value larger than 1,000, only 1,000 results are
+   *             returned.</p>
    */
-  ClientToken?: string;
+  MaxResults?: number;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The token to retrieve the next page of results.</p>
    */
-  DryRun?: boolean;
+  NextToken?: string;
 }
 
 /**
  * @public
  */
-export interface DetachVerifiedAccessTrustProviderResult {
+export interface DescribeVpcEndpointServicePermissionsResult {
   /**
    * @public
-   * <p>Details about the Verified Access trust provider.</p>
+   * <p>Information about the allowed principals.</p>
    */
-  VerifiedAccessTrustProvider?: VerifiedAccessTrustProvider;
+  AllowedPrincipals?: AllowedPrincipal[];
 
   /**
    * @public
-   * <p>Details about the Verified Access instance.</p>
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
    */
-  VerifiedAccessInstance?: VerifiedAccessInstance;
+  NextToken?: string;
 }
 
 /**
  * @public
  */
-export interface DetachVolumeRequest {
+export interface DescribeVpcEndpointServicesRequest {
   /**
    * @public
-   * <p>The device name.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  Device?: string;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>Forces detachment if the previous detachment attempt did not occur cleanly (for example,
-   *       logging into an instance, unmounting the volume, and detaching normally). This option can lead
-   *       to data loss or a corrupted file system. Use this option only as a last resort to detach a
-   *       volume from a failed instance. The instance won't have an opportunity to flush file system
-   *       caches or file system metadata. If you use this option, you must perform file system check and
-   *       repair procedures.</p>
+   * <p>The service names.</p>
    */
-  Force?: boolean;
+  ServiceNames?: string[];
 
   /**
    * @public
-   * <p>The ID of the instance. If you are detaching a Multi-Attach enabled volume, you must specify an instance ID.</p>
+   * <p>The filters.</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>owner</code> - The ID or alias of the Amazon Web Services account that owns
+   *                     the service.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>service-name</code> - The name of the service.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>service-type</code> - The type of service (<code>Interface</code> |
+   *                         <code>Gateway</code> | <code>GatewayLoadBalancer</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>supported-ip-address-types</code> - The IP address type (<code>ipv4</code> | <code>ipv6</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>tag</code>:<key> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value. For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>tag-key</code> - The key of a tag assigned to the resource. Use this filter to find all resources assigned a tag with a specific key, regardless of the tag value.</p>
+   *             </li>
+   *          </ul>
    */
-  InstanceId?: string;
+  Filters?: Filter[];
 
   /**
    * @public
-   * <p>The ID of the volume.</p>
+   * <p>The maximum number of items to return for this request. The request returns a token that you can specify in a subsequent call to get the next set of results.</p>
+   *          <p>Constraint: If the value is greater than 1,000, we return only 1,000 items.</p>
    */
-  VolumeId: string | undefined;
+  MaxResults?: number;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The token for the next set of items to return. (You received this token from a prior call.)</p>
    */
-  DryRun?: boolean;
+  NextToken?: string;
 }
 
 /**
  * @public
- * <p>Contains the parameters for DetachVpnGateway.</p>
+ * <p>Information about the Private DNS name for interface endpoints.</p>
  */
-export interface DetachVpnGatewayRequest {
+export interface PrivateDnsDetails {
   /**
    * @public
-   * <p>The ID of the VPC.</p>
+   * <p>The private DNS name assigned to the VPC endpoint service.</p>
    */
-  VpcId: string | undefined;
+  PrivateDnsName?: string;
+}
 
+/**
+ * @public
+ * <p>Describes a VPC endpoint service.</p>
+ */
+export interface ServiceDetail {
   /**
    * @public
-   * <p>The ID of the virtual private gateway.</p>
+   * <p>The name of the service.</p>
    */
-  VpnGatewayId: string | undefined;
+  ServiceName?: string;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually
-   *             making the request, and provides an error response. If you have the required
-   *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
-   *                 <code>UnauthorizedOperation</code>.</p>
+   * <p>The ID of the endpoint service.</p>
    */
-  DryRun?: boolean;
-}
+  ServiceId?: string;
 
-/**
- * @public
- */
-export interface DisableAddressTransferRequest {
   /**
    * @public
-   * <p>The allocation ID of an Elastic IP address.</p>
+   * <p>The type of service.</p>
    */
-  AllocationId: string | undefined;
+  ServiceType?: ServiceTypeDetail[];
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The Availability Zones in which the service is available.</p>
    */
-  DryRun?: boolean;
-}
+  AvailabilityZones?: string[];
 
-/**
- * @public
- */
-export interface DisableAddressTransferResult {
   /**
    * @public
-   * <p>An Elastic IP address transfer.</p>
+   * <p>The Amazon Web Services account ID of the service owner.</p>
    */
-  AddressTransfer?: AddressTransfer;
-}
+  Owner?: string;
 
-/**
- * @public
- */
-export interface DisableAwsNetworkPerformanceMetricSubscriptionRequest {
   /**
    * @public
-   * <p>The source Region or Availability Zone that the metric subscription is disabled for. For example, <code>us-east-1</code>.</p>
+   * <p>The DNS names for the service.</p>
    */
-  Source?: string;
+  BaseEndpointDnsNames?: string[];
 
   /**
    * @public
-   * <p>The target Region or Availability Zone that the metric subscription is disabled for. For example, <code>eu-north-1</code>.</p>
+   * <p>The private DNS name for the service.</p>
    */
-  Destination?: string;
+  PrivateDnsName?: string;
 
   /**
    * @public
-   * <p>The metric used for the disabled subscription.</p>
+   * <p>The private DNS names assigned to the VPC endpoint service.</p>
    */
-  Metric?: MetricType;
+  PrivateDnsNames?: PrivateDnsDetails[];
 
   /**
    * @public
-   * <p>The statistic used for the disabled subscription. </p>
+   * <p>Indicates whether the service supports endpoint policies.</p>
    */
-  Statistic?: StatisticType;
+  VpcEndpointPolicySupported?: boolean;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>Indicates whether VPC endpoint connection requests to the service must be accepted by the service owner.</p>
    */
-  DryRun?: boolean;
-}
+  AcceptanceRequired?: boolean;
 
-/**
- * @public
- */
-export interface DisableAwsNetworkPerformanceMetricSubscriptionResult {
   /**
    * @public
-   * <p>Indicates whether the unsubscribe action was successful.</p>
+   * <p>Indicates whether the service manages its VPC endpoints. Management of the service VPC
+   *             endpoints using the VPC endpoint API is restricted.</p>
    */
-  Output?: boolean;
-}
+  ManagesVpcEndpoints?: boolean;
 
-/**
- * @public
- */
-export interface DisableEbsEncryptionByDefaultRequest {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The payer responsibility.</p>
    */
-  DryRun?: boolean;
-}
+  PayerResponsibility?: PayerResponsibility;
 
-/**
- * @public
- */
-export interface DisableEbsEncryptionByDefaultResult {
   /**
    * @public
-   * <p>The updated status of encryption by default.</p>
+   * <p>The tags assigned to the service.</p>
    */
-  EbsEncryptionByDefault?: boolean;
-}
+  Tags?: Tag[];
 
-/**
- * @public
- */
-export interface DisableFastLaunchRequest {
   /**
    * @public
-   * <p>Specify the ID of the image for which to disable Windows fast launch.</p>
+   * <p>The verification state of the VPC endpoint service.</p>
+   *          <p>Consumers of the endpoint service cannot use the private name when the state is not <code>verified</code>.</p>
    */
-  ImageId: string | undefined;
+  PrivateDnsNameVerificationState?: DnsNameState;
 
   /**
    * @public
-   * <p>Forces the image settings to turn off Windows fast launch for your Windows AMI. This parameter overrides
-   * 			any errors that are encountered while cleaning up resources in your account.</p>
+   * <p>The supported IP address types.</p>
    */
-  Force?: boolean;
-
-  /**
-   * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   * 			and provides an error response. If you have the required permissions, the error response is
-   * 			<code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-   */
-  DryRun?: boolean;
-}
+  SupportedIpAddressTypes?: ServiceConnectivityType[];
+}
 
 /**
  * @public
  */
-export interface DisableFastLaunchResult {
+export interface DescribeVpcEndpointServicesResult {
   /**
    * @public
-   * <p>The ID of the image for which Windows fast launch was disabled.</p>
+   * <p>The supported services.</p>
    */
-  ImageId?: string;
+  ServiceNames?: string[];
 
   /**
    * @public
-   * <p>The pre-provisioning resource type that must be cleaned after turning off Windows fast launch
-   * 			for the Windows AMI. Supported values include: <code>snapshot</code>.</p>
+   * <p>Information about the service.</p>
    */
-  ResourceType?: FastLaunchResourceType;
+  ServiceDetails?: ServiceDetail[];
 
   /**
    * @public
-   * <p>Parameters that were used for Windows fast launch for the Windows AMI before
-   * 			Windows fast launch was disabled. This informs the clean-up process.</p>
+   * <p>The token to use when requesting the next set of items. If there are no additional items to return, the string is empty.</p>
    */
-  SnapshotConfiguration?: FastLaunchSnapshotConfigurationResponse;
+  NextToken?: string;
+}
 
+/**
+ * @public
+ */
+export interface DescribeVpcPeeringConnectionsRequest {
   /**
    * @public
-   * <p>The launch template that was used to launch Windows instances from pre-provisioned snapshots.</p>
+   * <p>The filters.</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>accepter-vpc-info.cidr-block</code> - The IPv4 CIDR block of the accepter
+   *                     VPC.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>accepter-vpc-info.owner-id</code> - The ID of the Amazon Web Services account that owns the
+   *                     accepter VPC.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>accepter-vpc-info.vpc-id</code> - The ID of the accepter VPC.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>expiration-time</code> - The expiration date and time for the VPC peering
+   *           connection.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>requester-vpc-info.cidr-block</code> - The IPv4 CIDR block of the
+   *                     requester's VPC.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>requester-vpc-info.owner-id</code> - The ID of the Amazon Web Services account that owns the
+   *                   requester VPC.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>requester-vpc-info.vpc-id</code> - The ID of the requester VPC.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>status-code</code> - The status of the VPC peering connection
+   *                         (<code>pending-acceptance</code> | <code>failed</code> |
+   *                         <code>expired</code> | <code>provisioning</code> | <code>active</code> |
+   *                         <code>deleting</code> | <code>deleted</code> |
+   *                     <code>rejected</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>status-message</code> - A message that provides more information about the status
+   *           of the VPC peering connection, if applicable.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>tag</code>:<key> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value.
+   *     For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>tag-key</code> - The key of a tag assigned to the resource. Use this filter to find all resources assigned a tag with a specific key, regardless of the tag value.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>vpc-peering-connection-id</code> - The ID of the VPC peering connection.</p>
+   *             </li>
+   *          </ul>
    */
-  LaunchTemplate?: FastLaunchLaunchTemplateSpecificationResponse;
+  Filters?: Filter[];
 
   /**
    * @public
-   * <p>The maximum number of instances that Amazon EC2 can launch at the same time to
-   * 			create pre-provisioned snapshots for Windows fast launch.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  MaxParallelLaunches?: number;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The owner of the Windows AMI for which Windows fast launch was disabled.</p>
+   * <p>The IDs of the VPC peering connections.</p>
+   *          <p>Default: Describes all your VPC peering connections.</p>
    */
-  OwnerId?: string;
+  VpcPeeringConnectionIds?: string[];
 
   /**
    * @public
-   * <p>The current state of Windows fast launch for the specified Windows AMI.</p>
+   * <p>The token returned from a previous paginated request. Pagination continues from the end of the items returned by the previous request.</p>
    */
-  State?: FastLaunchStateCode;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The reason that the state changed for Windows fast launch for the Windows AMI.</p>
+   * <p>The maximum number of items to return for this request.
+   * 	To get the next page of items, make another request with the token returned in the output.
+   * 	For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
    */
-  StateTransitionReason?: string;
+  MaxResults?: number;
+}
 
+/**
+ * @public
+ */
+export interface DescribeVpcPeeringConnectionsResult {
   /**
    * @public
-   * <p>The time that the state changed for Windows fast launch for the Windows AMI.</p>
+   * <p>Information about the VPC peering connections.</p>
    */
-  StateTransitionTime?: Date;
+  VpcPeeringConnections?: VpcPeeringConnection[];
+
+  /**
+   * @public
+   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there are no more items to return.</p>
+   */
+  NextToken?: string;
 }
 
 /**
  * @public
  */
-export interface DisableFastSnapshotRestoresRequest {
+export interface DescribeVpcsRequest {
   /**
    * @public
-   * <p>One or more Availability Zones. For example, <code>us-east-2a</code>.</p>
+   * <p>The filters.</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>cidr</code> - The primary IPv4 CIDR block of the VPC. The CIDR block you
+   *                     specify must exactly match the VPC's CIDR block for information to be returned
+   *                     for the VPC. Must contain the slash followed by one or two digits (for example,
+   *                     <code>/28</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>cidr-block-association.cidr-block</code> - An IPv4 CIDR block associated with the
+   *                     VPC.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>cidr-block-association.association-id</code> - The association ID for
+   *                     an IPv4 CIDR block associated with the VPC.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>cidr-block-association.state</code> - The state of an IPv4 CIDR block
+   *                     associated with the VPC.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>dhcp-options-id</code> - The ID of a set of DHCP options.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>ipv6-cidr-block-association.ipv6-cidr-block</code> - An IPv6 CIDR
+   *                     block associated with the VPC.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>ipv6-cidr-block-association.ipv6-pool</code> - The ID of the IPv6 address pool from which the IPv6 CIDR block is allocated.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>ipv6-cidr-block-association.association-id</code> - The association
+   *                     ID for an IPv6 CIDR block associated with the VPC.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>ipv6-cidr-block-association.state</code> - The state of an IPv6 CIDR
+   *                     block associated with the VPC.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>is-default</code> - Indicates whether the VPC is the default VPC.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>owner-id</code> - The ID of the Amazon Web Services account that owns the VPC.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>state</code> - The state of the VPC (<code>pending</code> | <code>available</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>tag</code>:<key> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value.
+   *     For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>tag-key</code> - The key of a tag assigned to the resource. Use this filter to find all resources assigned a tag with a specific key, regardless of the tag value.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>vpc-id</code> - The ID of the VPC.</p>
+   *             </li>
+   *          </ul>
    */
-  AvailabilityZones: string[] | undefined;
+  Filters?: Filter[];
 
   /**
    * @public
-   * <p>The IDs of one or more snapshots. For example, <code>snap-1234567890abcdef0</code>.</p>
+   * <p>The IDs of the VPCs.</p>
+   *          <p>Default: Describes all your VPCs.</p>
    */
-  SourceSnapshotIds: string[] | undefined;
+  VpcIds?: string[];
 
   /**
    * @public
@@ -3607,247 +3672,464 @@ export interface DisableFastSnapshotRestoresRequest {
    *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
+
+  /**
+   * @public
+   * <p>The token returned from a previous paginated request. Pagination continues from the end of the items returned by the previous request.</p>
+   */
+  NextToken?: string;
+
+  /**
+   * @public
+   * <p>The maximum number of items to return for this request.
+   * 	To get the next page of items, make another request with the token returned in the output.
+   * 	For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
+   */
+  MaxResults?: number;
 }
 
 /**
  * @public
- * <p>Describes fast snapshot restores that were successfully disabled.</p>
  */
-export interface DisableFastSnapshotRestoreSuccessItem {
+export interface DescribeVpcsResult {
   /**
    * @public
-   * <p>The ID of the snapshot.</p>
+   * <p>Information about one or more VPCs.</p>
    */
-  SnapshotId?: string;
+  Vpcs?: Vpc[];
 
   /**
    * @public
-   * <p>The Availability Zone.</p>
+   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there are no more items to return.</p>
    */
-  AvailabilityZone?: string;
+  NextToken?: string;
+}
 
+/**
+ * @public
+ * <p>Contains the parameters for DescribeVpnConnections.</p>
+ */
+export interface DescribeVpnConnectionsRequest {
   /**
    * @public
-   * <p>The state of fast snapshot restores for the snapshot.</p>
+   * <p>One or more filters.</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>customer-gateway-configuration</code> - The configuration information
+   *                     for the customer gateway.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>customer-gateway-id</code> - The ID of a customer gateway associated
+   *                     with the VPN connection.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>state</code> - The state of the VPN connection (<code>pending</code> |
+   *                         <code>available</code> | <code>deleting</code> |
+   *                     <code>deleted</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>option.static-routes-only</code> - Indicates whether the connection has
+   *                     static routes only. Used for devices that do not support Border Gateway Protocol
+   *                     (BGP).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>route.destination-cidr-block</code> - The destination CIDR block. This
+   *                     corresponds to the subnet used in a customer data center.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>bgp-asn</code> - The BGP Autonomous System Number (ASN) associated with
+   *                     a BGP device.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>tag</code>:<key> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value.
+   *     For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>tag-key</code> - The key of a tag assigned to the resource. Use this filter to find all resources assigned a tag with a specific key, regardless of the tag value.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>type</code> - The type of VPN connection. Currently the only supported
+   *                     type is <code>ipsec.1</code>.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>vpn-connection-id</code> - The ID of the VPN connection.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>vpn-gateway-id</code> - The ID of a virtual private gateway associated
+   *                     with the VPN connection.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>transit-gateway-id</code> - The ID of a transit gateway associated with
+   *                     the VPN connection.</p>
+   *             </li>
+   *          </ul>
    */
-  State?: FastSnapshotRestoreStateCode;
+  Filters?: Filter[];
 
   /**
    * @public
-   * <p>The reason for the state transition. The possible values are as follows:</p>
+   * <p>One or more VPN connection IDs.</p>
+   *          <p>Default: Describes your VPN connections.</p>
+   */
+  VpnConnectionIds?: string[];
+
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually
+   *             making the request, and provides an error response. If you have the required
+   *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
+   *                 <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
+}
+
+/**
+ * @public
+ * <p>Contains the output of DescribeVpnConnections.</p>
+ */
+export interface DescribeVpnConnectionsResult {
+  /**
+   * @public
+   * <p>Information about one or more VPN connections.</p>
+   */
+  VpnConnections?: VpnConnection[];
+}
+
+/**
+ * @public
+ * <p>Contains the parameters for DescribeVpnGateways.</p>
+ */
+export interface DescribeVpnGatewaysRequest {
+  /**
+   * @public
+   * <p>One or more filters.</p>
    *          <ul>
    *             <li>
    *                <p>
-   *                   <code>Client.UserInitiated</code> - The state successfully transitioned to <code>enabling</code> or
-   *           <code>disabling</code>.</p>
+   *                   <code>amazon-side-asn</code> - The Autonomous System Number (ASN) for the
+   *                     Amazon side of the gateway.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>Client.UserInitiated - Lifecycle state transition</code> - The state successfully transitioned
-   *           to <code>optimizing</code>, <code>enabled</code>, or <code>disabled</code>.</p>
+   *                   <code>attachment.state</code> - The current state of the attachment between
+   *                     the gateway and the VPC (<code>attaching</code> | <code>attached</code> |
+   *                         <code>detaching</code> | <code>detached</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>attachment.vpc-id</code> - The ID of an attached VPC.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>availability-zone</code> - The Availability Zone for the virtual private
+   *                     gateway (if applicable).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>state</code> - The state of the virtual private gateway
+   *                         (<code>pending</code> | <code>available</code> | <code>deleting</code> |
+   *                         <code>deleted</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>tag</code>:<key> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value.
+   *     For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>tag-key</code> - The key of a tag assigned to the resource. Use this filter to find all resources assigned a tag with a specific key, regardless of the tag value.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>type</code> - The type of virtual private gateway. Currently the only
+   *                     supported type is <code>ipsec.1</code>.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>vpn-gateway-id</code> - The ID of the virtual private gateway.</p>
    *             </li>
    *          </ul>
    */
-  StateTransitionReason?: string;
+  Filters?: Filter[];
 
   /**
    * @public
-   * <p>The ID of the Amazon Web Services account that enabled fast snapshot restores on the snapshot.</p>
+   * <p>One or more virtual private gateway IDs.</p>
+   *          <p>Default: Describes all your virtual private gateways.</p>
+   */
+  VpnGatewayIds?: string[];
+
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually
+   *             making the request, and provides an error response. If you have the required
+   *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
+   *                 <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
+}
+
+/**
+ * @public
+ * <p>Contains the output of DescribeVpnGateways.</p>
+ */
+export interface DescribeVpnGatewaysResult {
+  /**
+   * @public
+   * <p>Information about one or more virtual private gateways.</p>
+   */
+  VpnGateways?: VpnGateway[];
+}
+
+/**
+ * @public
+ */
+export interface DetachClassicLinkVpcRequest {
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
+
+  /**
+   * @public
+   * <p>The ID of the instance to unlink from the VPC.</p>
+   */
+  InstanceId: string | undefined;
+
+  /**
+   * @public
+   * <p>The ID of the VPC to which the instance is linked.</p>
+   */
+  VpcId: string | undefined;
+}
+
+/**
+ * @public
+ */
+export interface DetachClassicLinkVpcResult {
+  /**
+   * @public
+   * <p>Returns <code>true</code> if the request succeeds; otherwise, it returns an error.</p>
    */
-  OwnerId?: string;
+  Return?: boolean;
+}
 
+/**
+ * @public
+ */
+export interface DetachInternetGatewayRequest {
   /**
    * @public
-   * <p>The Amazon Web Services owner alias that enabled fast snapshot restores on the snapshot. This is intended for future use.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  OwnerAlias?: string;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The time at which fast snapshot restores entered the <code>enabling</code> state.</p>
+   * <p>The ID of the internet gateway.</p>
    */
-  EnablingTime?: Date;
+  InternetGatewayId: string | undefined;
 
   /**
    * @public
-   * <p>The time at which fast snapshot restores entered the <code>optimizing</code> state.</p>
+   * <p>The ID of the VPC.</p>
    */
-  OptimizingTime?: Date;
+  VpcId: string | undefined;
+}
 
+/**
+ * @public
+ * <p>Contains the parameters for DetachNetworkInterface.</p>
+ */
+export interface DetachNetworkInterfaceRequest {
   /**
    * @public
-   * <p>The time at which fast snapshot restores entered the <code>enabled</code> state.</p>
+   * <p>The ID of the attachment.</p>
    */
-  EnabledTime?: Date;
+  AttachmentId: string | undefined;
 
   /**
    * @public
-   * <p>The time at which fast snapshot restores entered the <code>disabling</code> state.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *             and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *             Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  DisablingTime?: Date;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The time at which fast snapshot restores entered the <code>disabled</code> state.</p>
+   * <p>Specifies whether to force a detachment.</p>
+   *          <note>
+   *             <ul>
+   *                <li>
+   *                   <p>Use the <code>Force</code> parameter only as a last resort to detach a network interface from a failed instance. </p>
+   *                </li>
+   *                <li>
+   *                   <p>If you use the <code>Force</code> parameter to detach a network interface, you might not be able to attach a different network interface to the same index on the instance without first stopping and starting the instance.</p>
+   *                </li>
+   *                <li>
+   *                   <p>If you force the detachment of a network interface, the <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-metadata.html">instance metadata</a>
+   *                         might not get updated. This means that the attributes associated
+   *                         with the detached network interface might still be visible. The
+   *                         instance metadata will get updated when you stop and start the
+   *                         instance.</p>
+   *                </li>
+   *             </ul>
+   *          </note>
    */
-  DisabledTime?: Date;
+  Force?: boolean;
 }
 
 /**
  * @public
- * <p>Describes an error that occurred when disabling fast snapshot restores.</p>
  */
-export interface DisableFastSnapshotRestoreStateError {
+export interface DetachVerifiedAccessTrustProviderRequest {
   /**
    * @public
-   * <p>The error code.</p>
+   * <p>The ID of the Verified Access instance.</p>
    */
-  Code?: string;
+  VerifiedAccessInstanceId: string | undefined;
 
   /**
    * @public
-   * <p>The error message.</p>
+   * <p>The ID of the Verified Access trust provider.</p>
    */
-  Message?: string;
-}
+  VerifiedAccessTrustProviderId: string | undefined;
 
-/**
- * @public
- * <p>Contains information about an error that occurred when disabling fast snapshot restores.</p>
- */
-export interface DisableFastSnapshotRestoreStateErrorItem {
   /**
    * @public
-   * <p>The Availability Zone.</p>
+   * <p>A unique, case-sensitive token that you provide to ensure idempotency of your
+   *             modification request. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html">Ensuring Idempotency</a>.</p>
    */
-  AvailabilityZone?: string;
+  ClientToken?: string;
 
   /**
    * @public
-   * <p>The error.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  Error?: DisableFastSnapshotRestoreStateError;
+  DryRun?: boolean;
 }
 
 /**
  * @public
- * <p>Contains information about the errors that occurred when disabling fast snapshot restores.</p>
  */
-export interface DisableFastSnapshotRestoreErrorItem {
+export interface DetachVerifiedAccessTrustProviderResult {
   /**
    * @public
-   * <p>The ID of the snapshot.</p>
+   * <p>Details about the Verified Access trust provider.</p>
    */
-  SnapshotId?: string;
+  VerifiedAccessTrustProvider?: VerifiedAccessTrustProvider;
 
   /**
    * @public
-   * <p>The errors.</p>
+   * <p>Details about the Verified Access instance.</p>
    */
-  FastSnapshotRestoreStateErrors?: DisableFastSnapshotRestoreStateErrorItem[];
+  VerifiedAccessInstance?: VerifiedAccessInstance;
 }
 
 /**
  * @public
  */
-export interface DisableFastSnapshotRestoresResult {
+export interface DetachVolumeRequest {
   /**
    * @public
-   * <p>Information about the snapshots for which fast snapshot restores were successfully disabled.</p>
+   * <p>The device name.</p>
    */
-  Successful?: DisableFastSnapshotRestoreSuccessItem[];
+  Device?: string;
 
   /**
    * @public
-   * <p>Information about the snapshots for which fast snapshot restores could not be disabled.</p>
+   * <p>Forces detachment if the previous detachment attempt did not occur cleanly (for example,
+   *       logging into an instance, unmounting the volume, and detaching normally). This option can lead
+   *       to data loss or a corrupted file system. Use this option only as a last resort to detach a
+   *       volume from a failed instance. The instance won't have an opportunity to flush file system
+   *       caches or file system metadata. If you use this option, you must perform file system check and
+   *       repair procedures.</p>
    */
-  Unsuccessful?: DisableFastSnapshotRestoreErrorItem[];
-}
+  Force?: boolean;
 
-/**
- * @public
- */
-export interface DisableImageRequest {
   /**
    * @public
-   * <p>The ID of the AMI.</p>
+   * <p>The ID of the instance. If you are detaching a Multi-Attach enabled volume, you must specify an instance ID.</p>
    */
-  ImageId: string | undefined;
+  InstanceId?: string;
+
+  /**
+   * @public
+   * <p>The ID of the volume.</p>
+   */
+  VolumeId: string | undefined;
 
   /**
    * @public
    * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   * 			and provides an error response. If you have the required permissions, the error response is
-   * 			<code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
 }
 
 /**
  * @public
+ * <p>Contains the parameters for DetachVpnGateway.</p>
  */
-export interface DisableImageResult {
+export interface DetachVpnGatewayRequest {
   /**
    * @public
-   * <p>Returns <code>true</code> if the request succeeds; otherwise, it returns an error.</p>
+   * <p>The ID of the VPC.</p>
    */
-  Return?: boolean;
-}
+  VpcId: string | undefined;
 
-/**
- * @public
- */
-export interface DisableImageBlockPublicAccessRequest {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   * 			and provides an error response. If you have the required permissions, the error response is
-   * 			<code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The ID of the virtual private gateway.</p>
    */
-  DryRun?: boolean;
-}
-
-/**
- * @public
- * @enum
- */
-export const ImageBlockPublicAccessDisabledState = {
-  unblocked: "unblocked",
-} as const;
-
-/**
- * @public
- */
-export type ImageBlockPublicAccessDisabledState =
-  (typeof ImageBlockPublicAccessDisabledState)[keyof typeof ImageBlockPublicAccessDisabledState];
+  VpnGatewayId: string | undefined;
 
-/**
- * @public
- */
-export interface DisableImageBlockPublicAccessResult {
   /**
    * @public
-   * <p>Returns <code>unblocked</code> if the request succeeds; otherwise, it returns an
-   *       error.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually
+   *             making the request, and provides an error response. If you have the required
+   *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
+   *                 <code>UnauthorizedOperation</code>.</p>
    */
-  ImageBlockPublicAccessState?: ImageBlockPublicAccessDisabledState;
+  DryRun?: boolean;
 }
 
 /**
  * @public
  */
-export interface DisableImageDeprecationRequest {
+export interface DisableAddressTransferRequest {
   /**
    * @public
-   * <p>The ID of the AMI.</p>
+   * <p>The allocation ID of an Elastic IP address.</p>
    */
-  ImageId: string | undefined;
+  AllocationId: string | undefined;
 
   /**
    * @public
    * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   * 			and provides an error response. If you have the required permissions, the error response is
-   * 			<code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
 }
@@ -3855,72 +4137,42 @@ export interface DisableImageDeprecationRequest {
 /**
  * @public
  */
-export interface DisableImageDeprecationResult {
+export interface DisableAddressTransferResult {
   /**
    * @public
-   * <p>Returns <code>true</code> if the request succeeds; otherwise, it returns an error.</p>
+   * <p>An Elastic IP address transfer.</p>
    */
-  Return?: boolean;
+  AddressTransfer?: AddressTransfer;
 }
 
 /**
  * @public
  */
-export interface DisableIpamOrganizationAdminAccountRequest {
-  /**
-   * @public
-   * <p>A check for whether you have the required permissions for the action without actually making the request
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-   */
-  DryRun?: boolean;
-
+export interface DisableAwsNetworkPerformanceMetricSubscriptionRequest {
   /**
    * @public
-   * <p>The Organizations member account ID that you want to disable as IPAM account.</p>
+   * <p>The source Region or Availability Zone that the metric subscription is disabled for. For example, <code>us-east-1</code>.</p>
    */
-  DelegatedAdminAccountId: string | undefined;
-}
+  Source?: string;
 
-/**
- * @public
- */
-export interface DisableIpamOrganizationAdminAccountResult {
   /**
    * @public
-   * <p>The result of disabling the IPAM account.</p>
+   * <p>The target Region or Availability Zone that the metric subscription is disabled for. For example, <code>eu-north-1</code>.</p>
    */
-  Success?: boolean;
-}
+  Destination?: string;
 
-/**
- * @public
- */
-export interface DisableSerialConsoleAccessRequest {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The metric used for the disabled subscription.</p>
    */
-  DryRun?: boolean;
-}
+  Metric?: MetricType;
 
-/**
- * @public
- */
-export interface DisableSerialConsoleAccessResult {
   /**
    * @public
-   * <p>If <code>true</code>, access to the EC2 serial console of all instances is enabled for
-   * 			your account. If <code>false</code>, access to the EC2 serial console of all instances
-   * 			is disabled for your account.</p>
+   * <p>The statistic used for the disabled subscription. </p>
    */
-  SerialConsoleAccessEnabled?: boolean;
-}
+  Statistic?: StatisticType;
 
-/**
- * @public
- */
-export interface DisableSnapshotBlockPublicAccessRequest {
   /**
    * @public
    * <p>Checks whether you have the required permissions for the action, without actually making the request,
@@ -3932,295 +4184,322 @@ export interface DisableSnapshotBlockPublicAccessRequest {
 
 /**
  * @public
- * @enum
  */
-export const SnapshotBlockPublicAccessState = {
-  block_all_sharing: "block-all-sharing",
-  block_new_sharing: "block-new-sharing",
-  unblocked: "unblocked",
-} as const;
+export interface DisableAwsNetworkPerformanceMetricSubscriptionResult {
+  /**
+   * @public
+   * <p>Indicates whether the unsubscribe action was successful.</p>
+   */
+  Output?: boolean;
+}
 
 /**
  * @public
  */
-export type SnapshotBlockPublicAccessState =
-  (typeof SnapshotBlockPublicAccessState)[keyof typeof SnapshotBlockPublicAccessState];
+export interface DisableEbsEncryptionByDefaultRequest {
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
+}
 
 /**
  * @public
  */
-export interface DisableSnapshotBlockPublicAccessResult {
+export interface DisableEbsEncryptionByDefaultResult {
   /**
    * @public
-   * <p>Returns <code>unblocked</code> if the request succeeds.</p>
+   * <p>The updated status of encryption by default.</p>
    */
-  State?: SnapshotBlockPublicAccessState;
+  EbsEncryptionByDefault?: boolean;
 }
 
 /**
  * @public
  */
-export interface DisableTransitGatewayRouteTablePropagationRequest {
+export interface DisableFastLaunchRequest {
   /**
    * @public
-   * <p>The ID of the propagation route table.</p>
+   * <p>Specify the ID of the image for which to disable Windows fast launch.</p>
    */
-  TransitGatewayRouteTableId: string | undefined;
+  ImageId: string | undefined;
 
   /**
    * @public
-   * <p>The ID of the attachment.</p>
+   * <p>Forces the image settings to turn off Windows fast launch for your Windows AMI. This parameter overrides
+   * 			any errors that are encountered while cleaning up resources in your account.</p>
    */
-  TransitGatewayAttachmentId?: string;
+  Force?: boolean;
 
   /**
    * @public
    * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * 			and provides an error response. If you have the required permissions, the error response is
+   * 			<code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
-
-  /**
-   * @public
-   * <p>The ID of the route table announcement.</p>
-   */
-  TransitGatewayRouteTableAnnouncementId?: string;
 }
 
 /**
  * @public
- * @enum
  */
-export const TransitGatewayPropagationState = {
-  disabled: "disabled",
-  disabling: "disabling",
-  enabled: "enabled",
-  enabling: "enabling",
-} as const;
+export interface DisableFastLaunchResult {
+  /**
+   * @public
+   * <p>The ID of the image for which Windows fast launch was disabled.</p>
+   */
+  ImageId?: string;
 
-/**
- * @public
- */
-export type TransitGatewayPropagationState =
-  (typeof TransitGatewayPropagationState)[keyof typeof TransitGatewayPropagationState];
+  /**
+   * @public
+   * <p>The pre-provisioning resource type that must be cleaned after turning off Windows fast launch
+   * 			for the Windows AMI. Supported values include: <code>snapshot</code>.</p>
+   */
+  ResourceType?: FastLaunchResourceType;
 
-/**
- * @public
- * <p>Describes route propagation.</p>
- */
-export interface TransitGatewayPropagation {
   /**
    * @public
-   * <p>The ID of the attachment.</p>
+   * <p>Parameters that were used for Windows fast launch for the Windows AMI before
+   * 			Windows fast launch was disabled. This informs the clean-up process.</p>
    */
-  TransitGatewayAttachmentId?: string;
+  SnapshotConfiguration?: FastLaunchSnapshotConfigurationResponse;
 
   /**
    * @public
-   * <p>The ID of the resource.</p>
+   * <p>The launch template that was used to launch Windows instances from pre-provisioned snapshots.</p>
    */
-  ResourceId?: string;
+  LaunchTemplate?: FastLaunchLaunchTemplateSpecificationResponse;
 
   /**
    * @public
-   * <p>The resource type. Note that the <code>tgw-peering</code> resource type has been deprecated.</p>
+   * <p>The maximum number of instances that Amazon EC2 can launch at the same time to
+   * 			create pre-provisioned snapshots for Windows fast launch.</p>
    */
-  ResourceType?: TransitGatewayAttachmentResourceType;
+  MaxParallelLaunches?: number;
 
   /**
    * @public
-   * <p>The ID of the transit gateway route table.</p>
+   * <p>The owner of the Windows AMI for which Windows fast launch was disabled.</p>
    */
-  TransitGatewayRouteTableId?: string;
+  OwnerId?: string;
 
   /**
    * @public
-   * <p>The state.</p>
+   * <p>The current state of Windows fast launch for the specified Windows AMI.</p>
    */
-  State?: TransitGatewayPropagationState;
+  State?: FastLaunchStateCode;
 
   /**
    * @public
-   * <p>The ID of the transit gateway route table announcement.</p>
+   * <p>The reason that the state changed for Windows fast launch for the Windows AMI.</p>
    */
-  TransitGatewayRouteTableAnnouncementId?: string;
-}
+  StateTransitionReason?: string;
 
-/**
- * @public
- */
-export interface DisableTransitGatewayRouteTablePropagationResult {
   /**
    * @public
-   * <p>Information about route propagation.</p>
+   * <p>The time that the state changed for Windows fast launch for the Windows AMI.</p>
    */
-  Propagation?: TransitGatewayPropagation;
+  StateTransitionTime?: Date;
 }
 
 /**
  * @public
- * <p>Contains the parameters for DisableVgwRoutePropagation.</p>
  */
-export interface DisableVgwRoutePropagationRequest {
+export interface DisableFastSnapshotRestoresRequest {
   /**
    * @public
-   * <p>The ID of the virtual private gateway.</p>
+   * <p>One or more Availability Zones. For example, <code>us-east-2a</code>.</p>
    */
-  GatewayId: string | undefined;
+  AvailabilityZones: string[] | undefined;
 
   /**
    * @public
-   * <p>The ID of the route table.</p>
+   * <p>The IDs of one or more snapshots. For example, <code>snap-1234567890abcdef0</code>.</p>
    */
-  RouteTableId: string | undefined;
+  SourceSnapshotIds: string[] | undefined;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually
-   *             making the request, and provides an error response. If you have the required
-   *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
-   *                 <code>UnauthorizedOperation</code>.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
 }
 
 /**
  * @public
+ * <p>Describes fast snapshot restores that were successfully disabled.</p>
  */
-export interface DisableVpcClassicLinkRequest {
+export interface DisableFastSnapshotRestoreSuccessItem {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The ID of the snapshot.</p>
    */
-  DryRun?: boolean;
+  SnapshotId?: string;
 
   /**
    * @public
-   * <p>The ID of the VPC.</p>
+   * <p>The Availability Zone.</p>
    */
-  VpcId: string | undefined;
-}
+  AvailabilityZone?: string;
 
-/**
- * @public
- */
-export interface DisableVpcClassicLinkResult {
   /**
    * @public
-   * <p>Returns <code>true</code> if the request succeeds; otherwise, it returns an error.</p>
+   * <p>The state of fast snapshot restores for the snapshot.</p>
    */
-  Return?: boolean;
-}
+  State?: FastSnapshotRestoreStateCode;
 
-/**
- * @public
- */
-export interface DisableVpcClassicLinkDnsSupportRequest {
   /**
    * @public
-   * <p>The ID of the VPC.</p>
+   * <p>The reason for the state transition. The possible values are as follows:</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>Client.UserInitiated</code> - The state successfully transitioned to <code>enabling</code> or
+   *           <code>disabling</code>.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>Client.UserInitiated - Lifecycle state transition</code> - The state successfully transitioned
+   *           to <code>optimizing</code>, <code>enabled</code>, or <code>disabled</code>.</p>
+   *             </li>
+   *          </ul>
    */
-  VpcId?: string;
-}
+  StateTransitionReason?: string;
 
-/**
- * @public
- */
-export interface DisableVpcClassicLinkDnsSupportResult {
   /**
    * @public
-   * <p>Returns <code>true</code> if the request succeeds; otherwise, it returns an error.</p>
+   * <p>The ID of the Amazon Web Services account that enabled fast snapshot restores on the snapshot.</p>
    */
-  Return?: boolean;
-}
+  OwnerId?: string;
 
-/**
- * @public
- */
-export interface DisassociateAddressRequest {
   /**
    * @public
-   * <p>The association ID. This parameter is required.</p>
+   * <p>The Amazon Web Services owner alias that enabled fast snapshot restores on the snapshot. This is intended for future use.</p>
    */
-  AssociationId?: string;
+  OwnerAlias?: string;
 
   /**
    * @public
-   * <p>Deprecated.</p>
+   * <p>The time at which fast snapshot restores entered the <code>enabling</code> state.</p>
    */
-  PublicIp?: string;
+  EnablingTime?: Date;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The time at which fast snapshot restores entered the <code>optimizing</code> state.</p>
    */
-  DryRun?: boolean;
+  OptimizingTime?: Date;
+
+  /**
+   * @public
+   * <p>The time at which fast snapshot restores entered the <code>enabled</code> state.</p>
+   */
+  EnabledTime?: Date;
+
+  /**
+   * @public
+   * <p>The time at which fast snapshot restores entered the <code>disabling</code> state.</p>
+   */
+  DisablingTime?: Date;
+
+  /**
+   * @public
+   * <p>The time at which fast snapshot restores entered the <code>disabled</code> state.</p>
+   */
+  DisabledTime?: Date;
 }
 
 /**
  * @public
+ * <p>Describes an error that occurred when disabling fast snapshot restores.</p>
  */
-export interface DisassociateClientVpnTargetNetworkRequest {
+export interface DisableFastSnapshotRestoreStateError {
   /**
    * @public
-   * <p>The ID of the Client VPN endpoint from which to disassociate the target network.</p>
+   * <p>The error code.</p>
    */
-  ClientVpnEndpointId: string | undefined;
+  Code?: string;
 
   /**
    * @public
-   * <p>The ID of the target network association.</p>
+   * <p>The error message.</p>
    */
-  AssociationId: string | undefined;
+  Message?: string;
+}
+
+/**
+ * @public
+ * <p>Contains information about an error that occurred when disabling fast snapshot restores.</p>
+ */
+export interface DisableFastSnapshotRestoreStateErrorItem {
+  /**
+   * @public
+   * <p>The Availability Zone.</p>
+   */
+  AvailabilityZone?: string;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The error.</p>
    */
-  DryRun?: boolean;
+  Error?: DisableFastSnapshotRestoreStateError;
 }
 
 /**
  * @public
+ * <p>Contains information about the errors that occurred when disabling fast snapshot restores.</p>
  */
-export interface DisassociateClientVpnTargetNetworkResult {
+export interface DisableFastSnapshotRestoreErrorItem {
+  /**
+   * @public
+   * <p>The ID of the snapshot.</p>
+   */
+  SnapshotId?: string;
+
+  /**
+   * @public
+   * <p>The errors.</p>
+   */
+  FastSnapshotRestoreStateErrors?: DisableFastSnapshotRestoreStateErrorItem[];
+}
+
+/**
+ * @public
+ */
+export interface DisableFastSnapshotRestoresResult {
   /**
    * @public
-   * <p>The ID of the target network association.</p>
+   * <p>Information about the snapshots for which fast snapshot restores were successfully disabled.</p>
    */
-  AssociationId?: string;
+  Successful?: DisableFastSnapshotRestoreSuccessItem[];
 
   /**
    * @public
-   * <p>The current state of the target network association.</p>
+   * <p>Information about the snapshots for which fast snapshot restores could not be disabled.</p>
    */
-  Status?: AssociationStatus;
+  Unsuccessful?: DisableFastSnapshotRestoreErrorItem[];
 }
 
 /**
  * @public
  */
-export interface DisassociateEnclaveCertificateIamRoleRequest {
-  /**
-   * @public
-   * <p>The ARN of the ACM certificate from which to disassociate the IAM role.</p>
-   */
-  CertificateArn: string | undefined;
-
+export interface DisableImageRequest {
   /**
    * @public
-   * <p>The ARN of the IAM role to disassociate.</p>
+   * <p>The ID of the AMI.</p>
    */
-  RoleArn: string | undefined;
+  ImageId: string | undefined;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   * 			and provides an error response. If you have the required permissions, the error response is
+   * 			<code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
 }
@@ -4228,7 +4507,7 @@ export interface DisassociateEnclaveCertificateIamRoleRequest {
 /**
  * @public
  */
-export interface DisassociateEnclaveCertificateIamRoleResult {
+export interface DisableImageResult {
   /**
    * @public
    * <p>Returns <code>true</code> if the request succeeds; otherwise, it returns an error.</p>
@@ -4239,90 +4518,76 @@ export interface DisassociateEnclaveCertificateIamRoleResult {
 /**
  * @public
  */
-export interface DisassociateIamInstanceProfileRequest {
+export interface DisableImageBlockPublicAccessRequest {
   /**
    * @public
-   * <p>The ID of the IAM instance profile association.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   * 			and provides an error response. If you have the required permissions, the error response is
+   * 			<code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  AssociationId: string | undefined;
+  DryRun?: boolean;
 }
 
 /**
  * @public
+ * @enum
  */
-export interface DisassociateIamInstanceProfileResult {
-  /**
-   * @public
-   * <p>Information about the IAM instance profile association.</p>
-   */
-  IamInstanceProfileAssociation?: IamInstanceProfileAssociation;
-}
+export const ImageBlockPublicAccessDisabledState = {
+  unblocked: "unblocked",
+} as const;
 
 /**
  * @public
- * <p>The targets to disassociate from the specified event window.</p>
  */
-export interface InstanceEventWindowDisassociationRequest {
-  /**
-   * @public
-   * <p>The IDs of the instances to disassociate from the event window.</p>
-   */
-  InstanceIds?: string[];
-
-  /**
-   * @public
-   * <p>The instance tags to disassociate from the event window. Any instances associated with
-   *          the tags will be disassociated from the event window.</p>
-   */
-  InstanceTags?: Tag[];
+export type ImageBlockPublicAccessDisabledState =
+  (typeof ImageBlockPublicAccessDisabledState)[keyof typeof ImageBlockPublicAccessDisabledState];
 
+/**
+ * @public
+ */
+export interface DisableImageBlockPublicAccessResult {
   /**
    * @public
-   * <p>The IDs of the Dedicated Hosts to disassociate from the event window.</p>
+   * <p>Returns <code>unblocked</code> if the request succeeds; otherwise, it returns an
+   *       error.</p>
    */
-  DedicatedHostIds?: string[];
+  ImageBlockPublicAccessState?: ImageBlockPublicAccessDisabledState;
 }
 
 /**
  * @public
  */
-export interface DisassociateInstanceEventWindowRequest {
-  /**
-   * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-   */
-  DryRun?: boolean;
-
+export interface DisableImageDeprecationRequest {
   /**
    * @public
-   * <p>The ID of the event window.</p>
+   * <p>The ID of the AMI.</p>
    */
-  InstanceEventWindowId: string | undefined;
+  ImageId: string | undefined;
 
   /**
    * @public
-   * <p>One or more targets to disassociate from the specified event window.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   * 			and provides an error response. If you have the required permissions, the error response is
+   * 			<code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  AssociationTarget: InstanceEventWindowDisassociationRequest | undefined;
+  DryRun?: boolean;
 }
 
 /**
  * @public
  */
-export interface DisassociateInstanceEventWindowResult {
+export interface DisableImageDeprecationResult {
   /**
    * @public
-   * <p>Information about the event window.</p>
+   * <p>Returns <code>true</code> if the request succeeds; otherwise, it returns an error.</p>
    */
-  InstanceEventWindow?: InstanceEventWindow;
+  Return?: boolean;
 }
 
 /**
  * @public
  */
-export interface DisassociateIpamResourceDiscoveryRequest {
+export interface DisableIpamOrganizationAdminAccountRequest {
   /**
    * @public
    * <p>A check for whether you have the required permissions for the action without actually making the request
@@ -4333,49 +4598,29 @@ export interface DisassociateIpamResourceDiscoveryRequest {
 
   /**
    * @public
-   * <p>A resource discovery association ID.</p>
+   * <p>The Organizations member account ID that you want to disable as IPAM account.</p>
    */
-  IpamResourceDiscoveryAssociationId: string | undefined;
+  DelegatedAdminAccountId: string | undefined;
 }
 
 /**
  * @public
  */
-export interface DisassociateIpamResourceDiscoveryResult {
+export interface DisableIpamOrganizationAdminAccountResult {
   /**
    * @public
-   * <p>A resource discovery association.</p>
+   * <p>The result of disabling the IPAM account.</p>
    */
-  IpamResourceDiscoveryAssociation?: IpamResourceDiscoveryAssociation;
+  Success?: boolean;
 }
 
 /**
  * @public
  */
-export interface DisassociateNatGatewayAddressRequest {
-  /**
-   * @public
-   * <p>The ID of the NAT gateway.</p>
-   */
-  NatGatewayId: string | undefined;
-
-  /**
-   * @public
-   * <p>The association IDs of EIPs that have been associated with the NAT gateway.</p>
-   */
-  AssociationIds: string[] | undefined;
-
-  /**
-   * @public
-   * <p>The maximum amount of time to wait (in seconds) before forcibly releasing the IP addresses if connections are still in progress. Default value is 350 seconds.</p>
-   */
-  MaxDrainDurationSeconds?: number;
-
+export interface DisableSerialConsoleAccessRequest {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
 }
@@ -4383,30 +4628,20 @@ export interface DisassociateNatGatewayAddressRequest {
 /**
  * @public
  */
-export interface DisassociateNatGatewayAddressResult {
-  /**
-   * @public
-   * <p>The ID of the NAT gateway.</p>
-   */
-  NatGatewayId?: string;
-
+export interface DisableSerialConsoleAccessResult {
   /**
    * @public
-   * <p>Information about the NAT gateway IP addresses.</p>
+   * <p>If <code>true</code>, access to the EC2 serial console of all instances is enabled for
+   * 			your account. If <code>false</code>, access to the EC2 serial console of all instances
+   * 			is disabled for your account.</p>
    */
-  NatGatewayAddresses?: NatGatewayAddress[];
+  SerialConsoleAccessEnabled?: boolean;
 }
 
 /**
  * @public
  */
-export interface DisassociateRouteTableRequest {
-  /**
-   * @public
-   * <p>The association ID representing the current association between the route table and subnet or gateway.</p>
-   */
-  AssociationId: string | undefined;
-
+export interface DisableSnapshotBlockPublicAccessRequest {
   /**
    * @public
    * <p>Checks whether you have the required permissions for the action, without actually making the request,
@@ -4418,53 +4653,46 @@ export interface DisassociateRouteTableRequest {
 
 /**
  * @public
+ * @enum
  */
-export interface DisassociateSubnetCidrBlockRequest {
-  /**
-   * @public
-   * <p>The association ID for the CIDR block.</p>
-   */
-  AssociationId: string | undefined;
-}
+export const SnapshotBlockPublicAccessState = {
+  block_all_sharing: "block-all-sharing",
+  block_new_sharing: "block-new-sharing",
+  unblocked: "unblocked",
+} as const;
 
 /**
  * @public
  */
-export interface DisassociateSubnetCidrBlockResult {
-  /**
-   * @public
-   * <p>Information about the IPv6 CIDR block association.</p>
-   */
-  Ipv6CidrBlockAssociation?: SubnetIpv6CidrBlockAssociation;
+export type SnapshotBlockPublicAccessState =
+  (typeof SnapshotBlockPublicAccessState)[keyof typeof SnapshotBlockPublicAccessState];
 
+/**
+ * @public
+ */
+export interface DisableSnapshotBlockPublicAccessResult {
   /**
    * @public
-   * <p>The ID of the subnet.</p>
+   * <p>Returns <code>unblocked</code> if the request succeeds.</p>
    */
-  SubnetId?: string;
+  State?: SnapshotBlockPublicAccessState;
 }
 
 /**
  * @public
  */
-export interface DisassociateTransitGatewayMulticastDomainRequest {
+export interface DisableTransitGatewayRouteTablePropagationRequest {
   /**
    * @public
-   * <p>The ID of the transit gateway multicast domain.</p>
+   * <p>The ID of the propagation route table.</p>
    */
-  TransitGatewayMulticastDomainId: string | undefined;
+  TransitGatewayRouteTableId: string | undefined;
 
   /**
    * @public
    * <p>The ID of the attachment.</p>
    */
-  TransitGatewayAttachmentId: string | undefined;
-
-  /**
-   * @public
-   * <p>The IDs of the subnets;</p>
-   */
-  SubnetIds: string[] | undefined;
+  TransitGatewayAttachmentId?: string;
 
   /**
    * @public
@@ -4473,114 +4701,107 @@ export interface DisassociateTransitGatewayMulticastDomainRequest {
    *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
-}
 
-/**
- * @public
- */
-export interface DisassociateTransitGatewayMulticastDomainResult {
   /**
    * @public
-   * <p>Information about the association.</p>
+   * <p>The ID of the route table announcement.</p>
    */
-  Associations?: TransitGatewayMulticastDomainAssociations;
+  TransitGatewayRouteTableAnnouncementId?: string;
 }
 
+/**
+ * @public
+ * @enum
+ */
+export const TransitGatewayPropagationState = {
+  disabled: "disabled",
+  disabling: "disabling",
+  enabled: "enabled",
+  enabling: "enabling",
+} as const;
+
 /**
  * @public
  */
-export interface DisassociateTransitGatewayPolicyTableRequest {
-  /**
-   * @public
-   * <p>The ID of the disassociated policy table.</p>
-   */
-  TransitGatewayPolicyTableId: string | undefined;
+export type TransitGatewayPropagationState =
+  (typeof TransitGatewayPropagationState)[keyof typeof TransitGatewayPropagationState];
 
+/**
+ * @public
+ * <p>Describes route propagation.</p>
+ */
+export interface TransitGatewayPropagation {
   /**
    * @public
-   * <p>The ID of the transit gateway attachment to disassociate from the policy table.</p>
+   * <p>The ID of the attachment.</p>
    */
-  TransitGatewayAttachmentId: string | undefined;
+  TransitGatewayAttachmentId?: string;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The ID of the resource.</p>
    */
-  DryRun?: boolean;
-}
+  ResourceId?: string;
 
-/**
- * @public
- */
-export interface DisassociateTransitGatewayPolicyTableResult {
   /**
    * @public
-   * <p>Returns details about the transit gateway policy table disassociation.</p>
+   * <p>The resource type. Note that the <code>tgw-peering</code> resource type has been deprecated.</p>
    */
-  Association?: TransitGatewayPolicyTableAssociation;
-}
+  ResourceType?: TransitGatewayAttachmentResourceType;
 
-/**
- * @public
- */
-export interface DisassociateTransitGatewayRouteTableRequest {
   /**
    * @public
    * <p>The ID of the transit gateway route table.</p>
    */
-  TransitGatewayRouteTableId: string | undefined;
+  TransitGatewayRouteTableId?: string;
 
   /**
    * @public
-   * <p>The ID of the attachment.</p>
+   * <p>The state.</p>
    */
-  TransitGatewayAttachmentId: string | undefined;
+  State?: TransitGatewayPropagationState;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The ID of the transit gateway route table announcement.</p>
    */
-  DryRun?: boolean;
+  TransitGatewayRouteTableAnnouncementId?: string;
 }
 
 /**
  * @public
  */
-export interface DisassociateTransitGatewayRouteTableResult {
+export interface DisableTransitGatewayRouteTablePropagationResult {
   /**
    * @public
-   * <p>Information about the association.</p>
+   * <p>Information about route propagation.</p>
    */
-  Association?: TransitGatewayAssociation;
+  Propagation?: TransitGatewayPropagation;
 }
 
 /**
  * @public
+ * <p>Contains the parameters for DisableVgwRoutePropagation.</p>
  */
-export interface DisassociateTrunkInterfaceRequest {
+export interface DisableVgwRoutePropagationRequest {
   /**
    * @public
-   * <p>The ID of the association</p>
+   * <p>The ID of the virtual private gateway.</p>
    */
-  AssociationId: string | undefined;
+  GatewayId: string | undefined;
 
   /**
    * @public
-   * <p>Unique, case-sensitive identifier that you provide to ensure the idempotency of the
-   *             request. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Run_Instance_Idempotency.html">How to Ensure
-   *                 Idempotency</a>.</p>
+   * <p>The ID of the route table.</p>
    */
-  ClientToken?: string;
+  RouteTableId: string | undefined;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually
+   *             making the request, and provides an error response. If you have the required
+   *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
+   *                 <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
 }
@@ -4588,71 +4809,70 @@ export interface DisassociateTrunkInterfaceRequest {
 /**
  * @public
  */
-export interface DisassociateTrunkInterfaceResult {
+export interface DisableVpcClassicLinkRequest {
   /**
    * @public
-   * <p>Returns <code>true</code> if the request succeeds; otherwise, it returns an error.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  Return?: boolean;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>Unique, case-sensitive identifier that you provide to ensure the idempotency of the
-   *             request. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Run_Instance_Idempotency.html">How to Ensure
-   *                 Idempotency</a>.</p>
+   * <p>The ID of the VPC.</p>
    */
-  ClientToken?: string;
+  VpcId: string | undefined;
 }
 
 /**
  * @public
  */
-export interface DisassociateVpcCidrBlockRequest {
+export interface DisableVpcClassicLinkResult {
   /**
    * @public
-   * <p>The association ID for the CIDR block.</p>
+   * <p>Returns <code>true</code> if the request succeeds; otherwise, it returns an error.</p>
    */
-  AssociationId: string | undefined;
+  Return?: boolean;
 }
 
 /**
  * @public
  */
-export interface DisassociateVpcCidrBlockResult {
-  /**
-   * @public
-   * <p>Information about the IPv6 CIDR block association.</p>
-   */
-  Ipv6CidrBlockAssociation?: VpcIpv6CidrBlockAssociation;
-
+export interface DisableVpcClassicLinkDnsSupportRequest {
   /**
    * @public
-   * <p>Information about the IPv4 CIDR block association.</p>
+   * <p>The ID of the VPC.</p>
    */
-  CidrBlockAssociation?: VpcCidrBlockAssociation;
+  VpcId?: string;
+}
 
+/**
+ * @public
+ */
+export interface DisableVpcClassicLinkDnsSupportResult {
   /**
    * @public
-   * <p>The ID of the VPC.</p>
+   * <p>Returns <code>true</code> if the request succeeds; otherwise, it returns an error.</p>
    */
-  VpcId?: string;
+  Return?: boolean;
 }
 
 /**
  * @public
  */
-export interface EnableAddressTransferRequest {
+export interface DisassociateAddressRequest {
   /**
    * @public
-   * <p>The allocation ID of an Elastic IP address.</p>
+   * <p>The association ID. This parameter is required.</p>
    */
-  AllocationId: string | undefined;
+  AssociationId?: string;
 
   /**
    * @public
-   * <p>The ID of the account that you want to transfer the Elastic IP address to.</p>
+   * <p>Deprecated.</p>
    */
-  TransferAccountId: string | undefined;
+  PublicIp?: string;
 
   /**
    * @public
@@ -4666,47 +4886,62 @@ export interface EnableAddressTransferRequest {
 /**
  * @public
  */
-export interface EnableAddressTransferResult {
+export interface DisassociateClientVpnTargetNetworkRequest {
   /**
    * @public
-   * <p>An Elastic IP address transfer.</p>
+   * <p>The ID of the Client VPN endpoint from which to disassociate the target network.</p>
    */
-  AddressTransfer?: AddressTransfer;
+  ClientVpnEndpointId: string | undefined;
+
+  /**
+   * @public
+   * <p>The ID of the target network association.</p>
+   */
+  AssociationId: string | undefined;
+
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
 }
 
 /**
  * @public
  */
-export interface EnableAwsNetworkPerformanceMetricSubscriptionRequest {
+export interface DisassociateClientVpnTargetNetworkResult {
   /**
    * @public
-   * <p>The source Region or Availability Zone that the metric subscription is enabled for. For example, <code>us-east-1</code>.</p>
+   * <p>The ID of the target network association.</p>
    */
-  Source?: string;
+  AssociationId?: string;
 
   /**
    * @public
-   * <p>The target Region or Availability Zone that the metric subscription is enabled for. For example, <code>eu-west-1</code>.</p>
+   * <p>The current state of the target network association.</p>
    */
-  Destination?: string;
+  Status?: AssociationStatus;
+}
 
+/**
+ * @public
+ */
+export interface DisassociateEnclaveCertificateIamRoleRequest {
   /**
    * @public
-   * <p>The metric used for the enabled subscription.</p>
+   * <p>The ARN of the ACM certificate from which to disassociate the IAM role.</p>
    */
-  Metric?: MetricType;
+  CertificateArn: string | undefined;
 
   /**
    * @public
-   * <p>The statistic used for the enabled subscription.</p>
+   * <p>The ARN of the IAM role to disassociate.</p>
    */
-  Statistic?: StatisticType;
+  RoleArn: string | undefined;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
 }
@@ -4714,208 +4949,220 @@ export interface EnableAwsNetworkPerformanceMetricSubscriptionRequest {
 /**
  * @public
  */
-export interface EnableAwsNetworkPerformanceMetricSubscriptionResult {
+export interface DisassociateEnclaveCertificateIamRoleResult {
   /**
    * @public
-   * <p>Indicates whether the subscribe action was successful.</p>
+   * <p>Returns <code>true</code> if the request succeeds; otherwise, it returns an error.</p>
    */
-  Output?: boolean;
+  Return?: boolean;
 }
 
 /**
  * @public
  */
-export interface EnableEbsEncryptionByDefaultRequest {
+export interface DisassociateIamInstanceProfileRequest {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The ID of the IAM instance profile association.</p>
    */
-  DryRun?: boolean;
+  AssociationId: string | undefined;
 }
 
 /**
  * @public
  */
-export interface EnableEbsEncryptionByDefaultResult {
+export interface DisassociateIamInstanceProfileResult {
   /**
    * @public
-   * <p>The updated status of encryption by default.</p>
+   * <p>Information about the IAM instance profile association.</p>
    */
-  EbsEncryptionByDefault?: boolean;
+  IamInstanceProfileAssociation?: IamInstanceProfileAssociation;
 }
 
 /**
  * @public
- * <p>Request to create a launch template for a Windows fast launch enabled AMI.</p>
- *          <note>
- *             <p>Note - You can specify either the <code>LaunchTemplateName</code> or the
- * 				<code>LaunchTemplateId</code>, but not both.</p>
- *          </note>
+ * <p>The targets to disassociate from the specified event window.</p>
  */
-export interface FastLaunchLaunchTemplateSpecificationRequest {
+export interface InstanceEventWindowDisassociationRequest {
   /**
    * @public
-   * <p>Specify the ID of the launch template that the AMI should use for Windows fast launch.</p>
+   * <p>The IDs of the instances to disassociate from the event window.</p>
    */
-  LaunchTemplateId?: string;
+  InstanceIds?: string[];
 
   /**
    * @public
-   * <p>Specify the name of the launch template that the AMI should use for Windows fast launch.</p>
+   * <p>The instance tags to disassociate from the event window. Any instances associated with
+   *          the tags will be disassociated from the event window.</p>
    */
-  LaunchTemplateName?: string;
+  InstanceTags?: Tag[];
 
   /**
    * @public
-   * <p>Specify the version of the launch template that the AMI should use for Windows fast launch.</p>
+   * <p>The IDs of the Dedicated Hosts to disassociate from the event window.</p>
    */
-  Version: string | undefined;
+  DedicatedHostIds?: string[];
 }
 
 /**
  * @public
- * <p>Configuration settings for creating and managing pre-provisioned snapshots for a Windows fast launch
- * 			enabled AMI.</p>
  */
-export interface FastLaunchSnapshotConfigurationRequest {
+export interface DisassociateInstanceEventWindowRequest {
   /**
    * @public
-   * <p>The number of pre-provisioned snapshots to keep on hand for a Windows fast launch
-   * 			enabled AMI.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  TargetResourceCount?: number;
-}
+  DryRun?: boolean;
 
-/**
- * @public
- */
-export interface EnableFastLaunchRequest {
   /**
    * @public
-   * <p>Specify the ID of the image for which to enable Windows fast launch.</p>
+   * <p>The ID of the event window.</p>
    */
-  ImageId: string | undefined;
+  InstanceEventWindowId: string | undefined;
 
   /**
    * @public
-   * <p>The type of resource to use for pre-provisioning the AMI for Windows fast launch.
-   * 			Supported values include: <code>snapshot</code>, which is the default value.</p>
+   * <p>One or more targets to disassociate from the specified event window.</p>
    */
-  ResourceType?: string;
+  AssociationTarget: InstanceEventWindowDisassociationRequest | undefined;
+}
 
+/**
+ * @public
+ */
+export interface DisassociateInstanceEventWindowResult {
   /**
    * @public
-   * <p>Configuration settings for creating and managing the snapshots that are used for
-   * 			pre-provisioning the AMI for Windows fast launch. The associated <code>ResourceType</code>
-   * 			must be <code>snapshot</code>.</p>
+   * <p>Information about the event window.</p>
    */
-  SnapshotConfiguration?: FastLaunchSnapshotConfigurationRequest;
+  InstanceEventWindow?: InstanceEventWindow;
+}
 
+/**
+ * @public
+ */
+export interface DisassociateIpamByoasnRequest {
   /**
    * @public
-   * <p>The launch template to use when launching Windows instances from pre-provisioned
-   * 			snapshots. Launch template parameters can include either the name or ID of the launch
-   * 			template, but not both.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  LaunchTemplate?: FastLaunchLaunchTemplateSpecificationRequest;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The maximum number of instances that Amazon EC2 can launch at the same time to create
-   * 			pre-provisioned snapshots for Windows fast launch. Value must be
-   * 			<code>6</code> or greater.</p>
+   * <p>A public 2-byte or 4-byte ASN.</p>
    */
-  MaxParallelLaunches?: number;
+  Asn: string | undefined;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   * 			and provides an error response. If you have the required permissions, the error response is
-   * 			<code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>A BYOIP CIDR.</p>
    */
-  DryRun?: boolean;
+  Cidr: string | undefined;
 }
 
 /**
  * @public
  */
-export interface EnableFastLaunchResult {
+export interface DisassociateIpamByoasnResult {
   /**
    * @public
-   * <p>The image ID that identifies the AMI for which Windows fast launch was enabled.</p>
+   * <p>An ASN and BYOIP CIDR association.</p>
    */
-  ImageId?: string;
+  AsnAssociation?: AsnAssociation;
+}
 
+/**
+ * @public
+ */
+export interface DisassociateIpamResourceDiscoveryRequest {
   /**
    * @public
-   * <p>The type of resource that was defined for pre-provisioning the AMI for Windows fast launch.</p>
+   * <p>A check for whether you have the required permissions for the action without actually making the request
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  ResourceType?: FastLaunchResourceType;
+  DryRun?: boolean;
+
+  /**
+   * @public
+   * <p>A resource discovery association ID.</p>
+   */
+  IpamResourceDiscoveryAssociationId: string | undefined;
+}
 
+/**
+ * @public
+ */
+export interface DisassociateIpamResourceDiscoveryResult {
   /**
    * @public
-   * <p>Settings to create and manage the pre-provisioned snapshots that Amazon EC2 uses for faster
-   * 			launches from the Windows AMI. This property is returned when the associated
-   * 			<code>resourceType</code> is <code>snapshot</code>.</p>
+   * <p>A resource discovery association.</p>
    */
-  SnapshotConfiguration?: FastLaunchSnapshotConfigurationResponse;
+  IpamResourceDiscoveryAssociation?: IpamResourceDiscoveryAssociation;
+}
 
+/**
+ * @public
+ */
+export interface DisassociateNatGatewayAddressRequest {
   /**
    * @public
-   * <p>The launch template that is used when launching Windows instances from pre-provisioned snapshots.</p>
+   * <p>The ID of the NAT gateway.</p>
    */
-  LaunchTemplate?: FastLaunchLaunchTemplateSpecificationResponse;
+  NatGatewayId: string | undefined;
 
   /**
    * @public
-   * <p>The maximum number of instances that Amazon EC2 can launch at the same time to
-   * 			create pre-provisioned snapshots for Windows fast launch.</p>
+   * <p>The association IDs of EIPs that have been associated with the NAT gateway.</p>
    */
-  MaxParallelLaunches?: number;
+  AssociationIds: string[] | undefined;
 
   /**
    * @public
-   * <p>The owner ID for the AMI for which Windows fast launch was enabled.</p>
+   * <p>The maximum amount of time to wait (in seconds) before forcibly releasing the IP addresses if connections are still in progress. Default value is 350 seconds.</p>
    */
-  OwnerId?: string;
+  MaxDrainDurationSeconds?: number;
 
   /**
    * @public
-   * <p>The current state of Windows fast launch for the specified AMI.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  State?: FastLaunchStateCode;
+  DryRun?: boolean;
+}
 
+/**
+ * @public
+ */
+export interface DisassociateNatGatewayAddressResult {
   /**
    * @public
-   * <p>The reason that the state changed for Windows fast launch for the AMI.</p>
+   * <p>The ID of the NAT gateway.</p>
    */
-  StateTransitionReason?: string;
+  NatGatewayId?: string;
 
   /**
    * @public
-   * <p>The time that the state changed for Windows fast launch for the AMI.</p>
+   * <p>Information about the NAT gateway IP addresses.</p>
    */
-  StateTransitionTime?: Date;
+  NatGatewayAddresses?: NatGatewayAddress[];
 }
 
 /**
  * @public
  */
-export interface EnableFastSnapshotRestoresRequest {
-  /**
-   * @public
-   * <p>One or more Availability Zones. For example, <code>us-east-2a</code>.</p>
-   */
-  AvailabilityZones: string[] | undefined;
-
+export interface DisassociateRouteTableRequest {
   /**
    * @public
-   * <p>The IDs of one or more snapshots. For example, <code>snap-1234567890abcdef0</code>. You can specify
-   *       a snapshot that was shared with you from another Amazon Web Services account.</p>
+   * <p>The association ID representing the current association between the route table and subnet or gateway.</p>
    */
-  SourceSnapshotIds: string[] | undefined;
+  AssociationId: string | undefined;
 
   /**
    * @public
@@ -4928,220 +5175,247 @@ export interface EnableFastSnapshotRestoresRequest {
 
 /**
  * @public
- * <p>Describes fast snapshot restores that were successfully enabled.</p>
  */
-export interface EnableFastSnapshotRestoreSuccessItem {
+export interface DisassociateSubnetCidrBlockRequest {
   /**
    * @public
-   * <p>The ID of the snapshot.</p>
+   * <p>The association ID for the CIDR block.</p>
    */
-  SnapshotId?: string;
+  AssociationId: string | undefined;
+}
 
+/**
+ * @public
+ */
+export interface DisassociateSubnetCidrBlockResult {
   /**
    * @public
-   * <p>The Availability Zone.</p>
+   * <p>Information about the IPv6 CIDR block association.</p>
    */
-  AvailabilityZone?: string;
+  Ipv6CidrBlockAssociation?: SubnetIpv6CidrBlockAssociation;
 
   /**
    * @public
-   * <p>The state of fast snapshot restores.</p>
+   * <p>The ID of the subnet.</p>
    */
-  State?: FastSnapshotRestoreStateCode;
+  SubnetId?: string;
+}
 
+/**
+ * @public
+ */
+export interface DisassociateTransitGatewayMulticastDomainRequest {
   /**
    * @public
-   * <p>The reason for the state transition. The possible values are as follows:</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>Client.UserInitiated</code> - The state successfully transitioned to <code>enabling</code> or
-   *           <code>disabling</code>.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>Client.UserInitiated - Lifecycle state transition</code> - The state successfully transitioned
-   *           to <code>optimizing</code>, <code>enabled</code>, or <code>disabled</code>.</p>
-   *             </li>
-   *          </ul>
+   * <p>The ID of the transit gateway multicast domain.</p>
    */
-  StateTransitionReason?: string;
+  TransitGatewayMulticastDomainId: string | undefined;
 
   /**
    * @public
-   * <p>The ID of the Amazon Web Services account that enabled fast snapshot restores on the snapshot.</p>
+   * <p>The ID of the attachment.</p>
    */
-  OwnerId?: string;
+  TransitGatewayAttachmentId: string | undefined;
 
   /**
    * @public
-   * <p>The Amazon Web Services owner alias that enabled fast snapshot restores on the snapshot. This is intended for future use.</p>
+   * <p>The IDs of the subnets;</p>
    */
-  OwnerAlias?: string;
+  SubnetIds: string[] | undefined;
 
   /**
    * @public
-   * <p>The time at which fast snapshot restores entered the <code>enabling</code> state.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  EnablingTime?: Date;
+  DryRun?: boolean;
+}
 
+/**
+ * @public
+ */
+export interface DisassociateTransitGatewayMulticastDomainResult {
   /**
    * @public
-   * <p>The time at which fast snapshot restores entered the <code>optimizing</code> state.</p>
+   * <p>Information about the association.</p>
    */
-  OptimizingTime?: Date;
+  Associations?: TransitGatewayMulticastDomainAssociations;
+}
 
+/**
+ * @public
+ */
+export interface DisassociateTransitGatewayPolicyTableRequest {
   /**
    * @public
-   * <p>The time at which fast snapshot restores entered the <code>enabled</code> state.</p>
+   * <p>The ID of the disassociated policy table.</p>
    */
-  EnabledTime?: Date;
+  TransitGatewayPolicyTableId: string | undefined;
 
   /**
    * @public
-   * <p>The time at which fast snapshot restores entered the <code>disabling</code> state.</p>
+   * <p>The ID of the transit gateway attachment to disassociate from the policy table.</p>
    */
-  DisablingTime?: Date;
+  TransitGatewayAttachmentId: string | undefined;
 
   /**
    * @public
-   * <p>The time at which fast snapshot restores entered the <code>disabled</code> state.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  DisabledTime?: Date;
+  DryRun?: boolean;
 }
 
 /**
  * @public
- * <p>Describes an error that occurred when enabling fast snapshot restores.</p>
  */
-export interface EnableFastSnapshotRestoreStateError {
-  /**
-   * @public
-   * <p>The error code.</p>
-   */
-  Code?: string;
-
+export interface DisassociateTransitGatewayPolicyTableResult {
   /**
    * @public
-   * <p>The error message.</p>
+   * <p>Returns details about the transit gateway policy table disassociation.</p>
    */
-  Message?: string;
+  Association?: TransitGatewayPolicyTableAssociation;
 }
 
 /**
  * @public
- * <p>Contains information about an error that occurred when enabling fast snapshot restores.</p>
  */
-export interface EnableFastSnapshotRestoreStateErrorItem {
+export interface DisassociateTransitGatewayRouteTableRequest {
   /**
    * @public
-   * <p>The Availability Zone.</p>
+   * <p>The ID of the transit gateway route table.</p>
    */
-  AvailabilityZone?: string;
+  TransitGatewayRouteTableId: string | undefined;
 
   /**
    * @public
-   * <p>The error.</p>
+   * <p>The ID of the attachment.</p>
    */
-  Error?: EnableFastSnapshotRestoreStateError;
-}
+  TransitGatewayAttachmentId: string | undefined;
 
-/**
- * @public
- * <p>Contains information about the errors that occurred when enabling fast snapshot restores.</p>
- */
-export interface EnableFastSnapshotRestoreErrorItem {
   /**
    * @public
-   * <p>The ID of the snapshot.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  SnapshotId?: string;
+  DryRun?: boolean;
+}
 
+/**
+ * @public
+ */
+export interface DisassociateTransitGatewayRouteTableResult {
   /**
    * @public
-   * <p>The errors.</p>
+   * <p>Information about the association.</p>
    */
-  FastSnapshotRestoreStateErrors?: EnableFastSnapshotRestoreStateErrorItem[];
+  Association?: TransitGatewayAssociation;
 }
 
 /**
  * @public
  */
-export interface EnableFastSnapshotRestoresResult {
+export interface DisassociateTrunkInterfaceRequest {
   /**
    * @public
-   * <p>Information about the snapshots for which fast snapshot restores were successfully enabled.</p>
+   * <p>The ID of the association</p>
    */
-  Successful?: EnableFastSnapshotRestoreSuccessItem[];
+  AssociationId: string | undefined;
 
   /**
    * @public
-   * <p>Information about the snapshots for which fast snapshot restores could not be enabled.</p>
+   * <p>Unique, case-sensitive identifier that you provide to ensure the idempotency of the
+   *             request. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Run_Instance_Idempotency.html">How to Ensure
+   *                 Idempotency</a>.</p>
    */
-  Unsuccessful?: EnableFastSnapshotRestoreErrorItem[];
+  ClientToken?: string;
+
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
 }
 
 /**
  * @public
  */
-export interface EnableImageRequest {
+export interface DisassociateTrunkInterfaceResult {
   /**
    * @public
-   * <p>The ID of the AMI.</p>
+   * <p>Returns <code>true</code> if the request succeeds; otherwise, it returns an error.</p>
    */
-  ImageId: string | undefined;
+  Return?: boolean;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   * 			and provides an error response. If you have the required permissions, the error response is
-   * 			<code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>Unique, case-sensitive identifier that you provide to ensure the idempotency of the
+   *             request. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Run_Instance_Idempotency.html">How to Ensure
+   *                 Idempotency</a>.</p>
    */
-  DryRun?: boolean;
+  ClientToken?: string;
 }
 
 /**
  * @public
  */
-export interface EnableImageResult {
+export interface DisassociateVpcCidrBlockRequest {
   /**
    * @public
-   * <p>Returns <code>true</code> if the request succeeds; otherwise, it returns an error.</p>
+   * <p>The association ID for the CIDR block.</p>
    */
-  Return?: boolean;
+  AssociationId: string | undefined;
 }
 
 /**
  * @public
- * @enum
  */
-export const ImageBlockPublicAccessEnabledState = {
-  block_new_sharing: "block-new-sharing",
-} as const;
+export interface DisassociateVpcCidrBlockResult {
+  /**
+   * @public
+   * <p>Information about the IPv6 CIDR block association.</p>
+   */
+  Ipv6CidrBlockAssociation?: VpcIpv6CidrBlockAssociation;
 
-/**
- * @public
- */
-export type ImageBlockPublicAccessEnabledState =
-  (typeof ImageBlockPublicAccessEnabledState)[keyof typeof ImageBlockPublicAccessEnabledState];
+  /**
+   * @public
+   * <p>Information about the IPv4 CIDR block association.</p>
+   */
+  CidrBlockAssociation?: VpcCidrBlockAssociation;
+
+  /**
+   * @public
+   * <p>The ID of the VPC.</p>
+   */
+  VpcId?: string;
+}
 
 /**
  * @public
  */
-export interface EnableImageBlockPublicAccessRequest {
+export interface EnableAddressTransferRequest {
+  /**
+   * @public
+   * <p>The allocation ID of an Elastic IP address.</p>
+   */
+  AllocationId: string | undefined;
+
   /**
    * @public
-   * <p>Specify <code>block-new-sharing</code> to enable block public access for AMIs at the
-   *       account level in the specified Region. This will block any attempt to publicly share your AMIs
-   *       in the specified Region.</p>
+   * <p>The ID of the account that you want to transfer the Elastic IP address to.</p>
    */
-  ImageBlockPublicAccessState: ImageBlockPublicAccessEnabledState | undefined;
+  TransferAccountId: string | undefined;
 
   /**
    * @public
    * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   * 			and provides an error response. If you have the required permissions, the error response is
-   * 			<code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
 }
@@ -5149,90 +5423,66 @@ export interface EnableImageBlockPublicAccessRequest {
 /**
  * @public
  */
-export interface EnableImageBlockPublicAccessResult {
+export interface EnableAddressTransferResult {
   /**
    * @public
-   * <p>Returns <code>block-new-sharing</code> if the request succeeds; otherwise, it returns an
-   *       error.</p>
+   * <p>An Elastic IP address transfer.</p>
    */
-  ImageBlockPublicAccessState?: ImageBlockPublicAccessEnabledState;
+  AddressTransfer?: AddressTransfer;
 }
 
 /**
  * @public
  */
-export interface EnableImageDeprecationRequest {
+export interface EnableAwsNetworkPerformanceMetricSubscriptionRequest {
   /**
    * @public
-   * <p>The ID of the AMI.</p>
+   * <p>The source Region or Availability Zone that the metric subscription is enabled for. For example, <code>us-east-1</code>.</p>
    */
-  ImageId: string | undefined;
+  Source?: string;
 
   /**
    * @public
-   * <p>The date and time to deprecate the AMI, in UTC, in the following format:
-   *         <i>YYYY</i>-<i>MM</i>-<i>DD</i>T<i>HH</i>:<i>MM</i>:<i>SS</i>Z.
-   *       If you specify a value for seconds, Amazon EC2 rounds the seconds to the
-   *       nearest minute.</p>
-   *          <p>You can’t specify a date in the past. The upper limit for <code>DeprecateAt</code> is 10
-   *       years from now, except for public AMIs, where the upper limit is 2 years from the creation date.</p>
+   * <p>The target Region or Availability Zone that the metric subscription is enabled for. For example, <code>eu-west-1</code>.</p>
    */
-  DeprecateAt: Date | undefined;
+  Destination?: string;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   * 			and provides an error response. If you have the required permissions, the error response is
-   * 			<code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The metric used for the enabled subscription.</p>
    */
-  DryRun?: boolean;
-}
+  Metric?: MetricType;
 
-/**
- * @public
- */
-export interface EnableImageDeprecationResult {
   /**
    * @public
-   * <p>Returns <code>true</code> if the request succeeds; otherwise, it returns an error.</p>
+   * <p>The statistic used for the enabled subscription.</p>
    */
-  Return?: boolean;
-}
+  Statistic?: StatisticType;
 
-/**
- * @public
- */
-export interface EnableIpamOrganizationAdminAccountRequest {
   /**
    * @public
-   * <p>A check for whether you have the required permissions for the action without actually making the request
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
    *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
    *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
-
-  /**
-   * @public
-   * <p>The Organizations member account ID that you want to enable as the IPAM account.</p>
-   */
-  DelegatedAdminAccountId: string | undefined;
 }
 
 /**
  * @public
  */
-export interface EnableIpamOrganizationAdminAccountResult {
+export interface EnableAwsNetworkPerformanceMetricSubscriptionResult {
   /**
    * @public
-   * <p>The result of enabling the IPAM account.</p>
+   * <p>Indicates whether the subscribe action was successful.</p>
    */
-  Success?: boolean;
+  Output?: boolean;
 }
 
 /**
  * @public
  */
-export interface EnableReachabilityAnalyzerOrganizationSharingRequest {
+export interface EnableEbsEncryptionByDefaultRequest {
   /**
    * @public
    * <p>Checks whether you have the required permissions for the action, without actually making the request,
@@ -5245,77 +5495,102 @@ export interface EnableReachabilityAnalyzerOrganizationSharingRequest {
 /**
  * @public
  */
-export interface EnableReachabilityAnalyzerOrganizationSharingResult {
+export interface EnableEbsEncryptionByDefaultResult {
   /**
    * @public
-   * <p>Returns <code>true</code> if the request succeeds; otherwise, returns an error.</p>
+   * <p>The updated status of encryption by default.</p>
    */
-  ReturnValue?: boolean;
+  EbsEncryptionByDefault?: boolean;
 }
 
 /**
  * @public
+ * <p>Request to create a launch template for a Windows fast launch enabled AMI.</p>
+ *          <note>
+ *             <p>Note - You can specify either the <code>LaunchTemplateName</code> or the
+ * 				<code>LaunchTemplateId</code>, but not both.</p>
+ *          </note>
  */
-export interface EnableSerialConsoleAccessRequest {
+export interface FastLaunchLaunchTemplateSpecificationRequest {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>Specify the ID of the launch template that the AMI should use for Windows fast launch.</p>
    */
-  DryRun?: boolean;
+  LaunchTemplateId?: string;
+
+  /**
+   * @public
+   * <p>Specify the name of the launch template that the AMI should use for Windows fast launch.</p>
+   */
+  LaunchTemplateName?: string;
+
+  /**
+   * @public
+   * <p>Specify the version of the launch template that the AMI should use for Windows fast launch.</p>
+   */
+  Version: string | undefined;
 }
 
 /**
  * @public
+ * <p>Configuration settings for creating and managing pre-provisioned snapshots for a Windows fast launch
+ * 			enabled AMI.</p>
  */
-export interface EnableSerialConsoleAccessResult {
+export interface FastLaunchSnapshotConfigurationRequest {
   /**
    * @public
-   * <p>If <code>true</code>, access to the EC2 serial console of all instances is enabled for
-   * 			your account. If <code>false</code>, access to the EC2 serial console of all instances
-   * 			is disabled for your account.</p>
+   * <p>The number of pre-provisioned snapshots to keep on hand for a Windows fast launch
+   * 			enabled AMI.</p>
    */
-  SerialConsoleAccessEnabled?: boolean;
+  TargetResourceCount?: number;
 }
 
 /**
  * @public
  */
-export interface EnableSnapshotBlockPublicAccessRequest {
+export interface EnableFastLaunchRequest {
   /**
    * @public
-   * <p>The mode in which to enable block public access for snapshots for the Region.
-   *       Specify one of the following values:</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>block-all-sharing</code> - Prevents all public sharing of snapshots in
-   *           the Region. Users in the account will no longer be able to request new public
-   *           sharing. Additionally, snapshots that are already publicly shared are treated as
-   *           private and they are no longer publicly available.</p>
-   *                <note>
-   *                   <p>If you enable block public access for snapshots in <code>block-all-sharing</code>
-   *             mode, it does not change the permissions for snapshots that are already publicly shared.
-   *             Instead, it prevents these snapshots from be publicly visible and publicly accessible.
-   *             Therefore, the attributes for these snapshots still indicate that they are publicly
-   *             shared, even though they are not publicly available.</p>
-   *                </note>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>block-new-sharing</code>  - Prevents only new public sharing of snapshots
-   *           in the Region. Users in the account will no longer be able to request new public
-   *           sharing. However, snapshots that are already publicly shared, remain publicly
-   *           available.</p>
-   *             </li>
-   *          </ul>
+   * <p>Specify the ID of the image for which to enable Windows fast launch.</p>
    */
-  State: SnapshotBlockPublicAccessState | undefined;
+  ImageId: string | undefined;
+
+  /**
+   * @public
+   * <p>The type of resource to use for pre-provisioning the AMI for Windows fast launch.
+   * 			Supported values include: <code>snapshot</code>, which is the default value.</p>
+   */
+  ResourceType?: string;
+
+  /**
+   * @public
+   * <p>Configuration settings for creating and managing the snapshots that are used for
+   * 			pre-provisioning the AMI for Windows fast launch. The associated <code>ResourceType</code>
+   * 			must be <code>snapshot</code>.</p>
+   */
+  SnapshotConfiguration?: FastLaunchSnapshotConfigurationRequest;
+
+  /**
+   * @public
+   * <p>The launch template to use when launching Windows instances from pre-provisioned
+   * 			snapshots. Launch template parameters can include either the name or ID of the launch
+   * 			template, but not both.</p>
+   */
+  LaunchTemplate?: FastLaunchLaunchTemplateSpecificationRequest;
+
+  /**
+   * @public
+   * <p>The maximum number of instances that Amazon EC2 can launch at the same time to create
+   * 			pre-provisioned snapshots for Windows fast launch. Value must be
+   * 			<code>6</code> or greater.</p>
+   */
+  MaxParallelLaunches?: number;
 
   /**
    * @public
    * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * 			and provides an error response. If you have the required permissions, the error response is
+   * 			<code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
 }
@@ -5323,92 +5598,82 @@ export interface EnableSnapshotBlockPublicAccessRequest {
 /**
  * @public
  */
-export interface EnableSnapshotBlockPublicAccessResult {
+export interface EnableFastLaunchResult {
   /**
    * @public
-   * <p>The state of block public access for snapshots for the account and Region. Returns
-   *       either <code>block-all-sharing</code> or <code>block-new-sharing</code> if the request
-   *       succeeds.</p>
+   * <p>The image ID that identifies the AMI for which Windows fast launch was enabled.</p>
    */
-  State?: SnapshotBlockPublicAccessState;
-}
+  ImageId?: string;
 
-/**
- * @public
- */
-export interface EnableTransitGatewayRouteTablePropagationRequest {
   /**
    * @public
-   * <p>The ID of the propagation route table.</p>
+   * <p>The type of resource that was defined for pre-provisioning the AMI for Windows fast launch.</p>
    */
-  TransitGatewayRouteTableId: string | undefined;
+  ResourceType?: FastLaunchResourceType;
 
   /**
    * @public
-   * <p>The ID of the attachment.</p>
+   * <p>Settings to create and manage the pre-provisioned snapshots that Amazon EC2 uses for faster
+   * 			launches from the Windows AMI. This property is returned when the associated
+   * 			<code>resourceType</code> is <code>snapshot</code>.</p>
    */
-  TransitGatewayAttachmentId?: string;
+  SnapshotConfiguration?: FastLaunchSnapshotConfigurationResponse;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The launch template that is used when launching Windows instances from pre-provisioned snapshots.</p>
    */
-  DryRun?: boolean;
+  LaunchTemplate?: FastLaunchLaunchTemplateSpecificationResponse;
 
   /**
    * @public
-   * <p>The ID of the transit gateway route table announcement.</p>
+   * <p>The maximum number of instances that Amazon EC2 can launch at the same time to
+   * 			create pre-provisioned snapshots for Windows fast launch.</p>
    */
-  TransitGatewayRouteTableAnnouncementId?: string;
-}
+  MaxParallelLaunches?: number;
 
-/**
- * @public
- */
-export interface EnableTransitGatewayRouteTablePropagationResult {
   /**
    * @public
-   * <p>Information about route propagation.</p>
+   * <p>The owner ID for the AMI for which Windows fast launch was enabled.</p>
    */
-  Propagation?: TransitGatewayPropagation;
-}
+  OwnerId?: string;
 
-/**
- * @public
- * <p>Contains the parameters for EnableVgwRoutePropagation.</p>
- */
-export interface EnableVgwRoutePropagationRequest {
   /**
    * @public
-   * <p>The ID of the virtual private gateway that is attached to a VPC. The virtual private
-   *             gateway must be attached to the same VPC that the routing tables are associated with.
-   *         </p>
+   * <p>The current state of Windows fast launch for the specified AMI.</p>
    */
-  GatewayId: string | undefined;
+  State?: FastLaunchStateCode;
 
   /**
    * @public
-   * <p>The ID of the route table. The routing table must be associated with the same VPC that
-   *             the virtual private gateway is attached to. </p>
+   * <p>The reason that the state changed for Windows fast launch for the AMI.</p>
    */
-  RouteTableId: string | undefined;
+  StateTransitionReason?: string;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually
-   *             making the request, and provides an error response. If you have the required
-   *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
-   *                 <code>UnauthorizedOperation</code>.</p>
+   * <p>The time that the state changed for Windows fast launch for the AMI.</p>
    */
-  DryRun?: boolean;
+  StateTransitionTime?: Date;
 }
 
 /**
  * @public
  */
-export interface EnableVolumeIORequest {
+export interface EnableFastSnapshotRestoresRequest {
+  /**
+   * @public
+   * <p>One or more Availability Zones. For example, <code>us-east-2a</code>.</p>
+   */
+  AvailabilityZones: string[] | undefined;
+
+  /**
+   * @public
+   * <p>The IDs of one or more snapshots. For example, <code>snap-1234567890abcdef0</code>. You can specify
+   *       a snapshot that was shared with you from another Amazon Web Services account.</p>
+   */
+  SourceSnapshotIds: string[] | undefined;
+
   /**
    * @public
    * <p>Checks whether you have the required permissions for the action, without actually making the request,
@@ -5416,362 +5681,392 @@ export interface EnableVolumeIORequest {
    *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
-
-  /**
-   * @public
-   * <p>The ID of the volume.</p>
-   */
-  VolumeId: string | undefined;
 }
 
 /**
  * @public
+ * <p>Describes fast snapshot restores that were successfully enabled.</p>
  */
-export interface EnableVpcClassicLinkRequest {
+export interface EnableFastSnapshotRestoreSuccessItem {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The ID of the snapshot.</p>
    */
-  DryRun?: boolean;
+  SnapshotId?: string;
 
   /**
    * @public
-   * <p>The ID of the VPC.</p>
+   * <p>The Availability Zone.</p>
    */
-  VpcId: string | undefined;
-}
+  AvailabilityZone?: string;
 
-/**
- * @public
- */
-export interface EnableVpcClassicLinkResult {
   /**
    * @public
-   * <p>Returns <code>true</code> if the request succeeds; otherwise, it returns an error.</p>
+   * <p>The state of fast snapshot restores.</p>
    */
-  Return?: boolean;
-}
+  State?: FastSnapshotRestoreStateCode;
 
-/**
- * @public
- */
-export interface EnableVpcClassicLinkDnsSupportRequest {
   /**
    * @public
-   * <p>The ID of the VPC.</p>
+   * <p>The reason for the state transition. The possible values are as follows:</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>Client.UserInitiated</code> - The state successfully transitioned to <code>enabling</code> or
+   *           <code>disabling</code>.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>Client.UserInitiated - Lifecycle state transition</code> - The state successfully transitioned
+   *           to <code>optimizing</code>, <code>enabled</code>, or <code>disabled</code>.</p>
+   *             </li>
+   *          </ul>
    */
-  VpcId?: string;
-}
+  StateTransitionReason?: string;
 
-/**
- * @public
- */
-export interface EnableVpcClassicLinkDnsSupportResult {
   /**
    * @public
-   * <p>Returns <code>true</code> if the request succeeds; otherwise, it returns an error.</p>
+   * <p>The ID of the Amazon Web Services account that enabled fast snapshot restores on the snapshot.</p>
    */
-  Return?: boolean;
-}
+  OwnerId?: string;
 
-/**
- * @public
- */
-export interface ExportClientVpnClientCertificateRevocationListRequest {
   /**
    * @public
-   * <p>The ID of the Client VPN endpoint.</p>
+   * <p>The Amazon Web Services owner alias that enabled fast snapshot restores on the snapshot. This is intended for future use.</p>
    */
-  ClientVpnEndpointId: string | undefined;
+  OwnerAlias?: string;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The time at which fast snapshot restores entered the <code>enabling</code> state.</p>
    */
-  DryRun?: boolean;
-}
-
-/**
- * @public
- * @enum
- */
-export const ClientCertificateRevocationListStatusCode = {
-  active: "active",
-  pending: "pending",
-} as const;
-
-/**
- * @public
- */
-export type ClientCertificateRevocationListStatusCode =
-  (typeof ClientCertificateRevocationListStatusCode)[keyof typeof ClientCertificateRevocationListStatusCode];
+  EnablingTime?: Date;
 
-/**
- * @public
- * <p>Describes the state of a client certificate revocation list.</p>
- */
-export interface ClientCertificateRevocationListStatus {
   /**
    * @public
-   * <p>The state of the client certificate revocation list.</p>
+   * <p>The time at which fast snapshot restores entered the <code>optimizing</code> state.</p>
    */
-  Code?: ClientCertificateRevocationListStatusCode;
+  OptimizingTime?: Date;
 
   /**
    * @public
-   * <p>A message about the status of the client certificate revocation list, if applicable.</p>
+   * <p>The time at which fast snapshot restores entered the <code>enabled</code> state.</p>
    */
-  Message?: string;
-}
+  EnabledTime?: Date;
 
-/**
- * @public
- */
-export interface ExportClientVpnClientCertificateRevocationListResult {
   /**
    * @public
-   * <p>Information about the client certificate revocation list.</p>
+   * <p>The time at which fast snapshot restores entered the <code>disabling</code> state.</p>
    */
-  CertificateRevocationList?: string;
+  DisablingTime?: Date;
 
   /**
    * @public
-   * <p>The current state of the client certificate revocation list.</p>
+   * <p>The time at which fast snapshot restores entered the <code>disabled</code> state.</p>
    */
-  Status?: ClientCertificateRevocationListStatus;
+  DisabledTime?: Date;
 }
 
 /**
  * @public
+ * <p>Describes an error that occurred when enabling fast snapshot restores.</p>
  */
-export interface ExportClientVpnClientConfigurationRequest {
+export interface EnableFastSnapshotRestoreStateError {
   /**
    * @public
-   * <p>The ID of the Client VPN endpoint.</p>
+   * <p>The error code.</p>
    */
-  ClientVpnEndpointId: string | undefined;
+  Code?: string;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The error message.</p>
    */
-  DryRun?: boolean;
+  Message?: string;
 }
 
 /**
  * @public
+ * <p>Contains information about an error that occurred when enabling fast snapshot restores.</p>
  */
-export interface ExportClientVpnClientConfigurationResult {
+export interface EnableFastSnapshotRestoreStateErrorItem {
   /**
    * @public
-   * <p>The contents of the Client VPN endpoint configuration file.</p>
+   * <p>The Availability Zone.</p>
    */
-  ClientConfiguration?: string;
+  AvailabilityZone?: string;
+
+  /**
+   * @public
+   * <p>The error.</p>
+   */
+  Error?: EnableFastSnapshotRestoreStateError;
 }
 
 /**
  * @public
- * <p>Describes the destination for an export image task.</p>
+ * <p>Contains information about the errors that occurred when enabling fast snapshot restores.</p>
  */
-export interface ExportTaskS3LocationRequest {
+export interface EnableFastSnapshotRestoreErrorItem {
   /**
    * @public
-   * <p>The destination Amazon S3 bucket.</p>
+   * <p>The ID of the snapshot.</p>
    */
-  S3Bucket: string | undefined;
+  SnapshotId?: string;
 
   /**
    * @public
-   * <p>The prefix (logical hierarchy) in the bucket.</p>
+   * <p>The errors.</p>
    */
-  S3Prefix?: string;
+  FastSnapshotRestoreStateErrors?: EnableFastSnapshotRestoreStateErrorItem[];
 }
 
 /**
  * @public
  */
-export interface ExportImageRequest {
+export interface EnableFastSnapshotRestoresResult {
   /**
    * @public
-   * <p>Token to enable idempotency for export image requests.</p>
+   * <p>Information about the snapshots for which fast snapshot restores were successfully enabled.</p>
    */
-  ClientToken?: string;
+  Successful?: EnableFastSnapshotRestoreSuccessItem[];
 
   /**
    * @public
-   * <p>A description of the image being exported. The maximum length is 255 characters.</p>
+   * <p>Information about the snapshots for which fast snapshot restores could not be enabled.</p>
    */
-  Description?: string;
+  Unsuccessful?: EnableFastSnapshotRestoreErrorItem[];
+}
 
+/**
+ * @public
+ */
+export interface EnableImageRequest {
   /**
    * @public
-   * <p>The disk image format.</p>
+   * <p>The ID of the AMI.</p>
    */
-  DiskImageFormat: DiskImageFormat | undefined;
+  ImageId: string | undefined;
 
   /**
    * @public
    * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * 			and provides an error response. If you have the required permissions, the error response is
+   * 			<code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
+}
 
+/**
+ * @public
+ */
+export interface EnableImageResult {
   /**
    * @public
-   * <p>The ID of the image.</p>
+   * <p>Returns <code>true</code> if the request succeeds; otherwise, it returns an error.</p>
    */
-  ImageId: string | undefined;
+  Return?: boolean;
+}
+
+/**
+ * @public
+ * @enum
+ */
+export const ImageBlockPublicAccessEnabledState = {
+  block_new_sharing: "block-new-sharing",
+} as const;
 
+/**
+ * @public
+ */
+export type ImageBlockPublicAccessEnabledState =
+  (typeof ImageBlockPublicAccessEnabledState)[keyof typeof ImageBlockPublicAccessEnabledState];
+
+/**
+ * @public
+ */
+export interface EnableImageBlockPublicAccessRequest {
   /**
    * @public
-   * <p>The Amazon S3 bucket for the destination image. The destination bucket must exist.</p>
+   * <p>Specify <code>block-new-sharing</code> to enable block public access for AMIs at the
+   *       account level in the specified Region. This will block any attempt to publicly share your AMIs
+   *       in the specified Region.</p>
    */
-  S3ExportLocation: ExportTaskS3LocationRequest | undefined;
+  ImageBlockPublicAccessState: ImageBlockPublicAccessEnabledState | undefined;
 
   /**
    * @public
-   * <p>The name of the role that grants VM Import/Export permission to export images to your Amazon
-   *    S3 bucket. If this parameter is not specified, the default role is named 'vmimport'.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   * 			and provides an error response. If you have the required permissions, the error response is
+   * 			<code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  RoleName?: string;
+  DryRun?: boolean;
+}
 
+/**
+ * @public
+ */
+export interface EnableImageBlockPublicAccessResult {
   /**
    * @public
-   * <p>The tags to apply to the export image task during creation.</p>
+   * <p>Returns <code>block-new-sharing</code> if the request succeeds; otherwise, it returns an
+   *       error.</p>
    */
-  TagSpecifications?: TagSpecification[];
+  ImageBlockPublicAccessState?: ImageBlockPublicAccessEnabledState;
 }
 
 /**
  * @public
  */
-export interface ExportImageResult {
+export interface EnableImageDeprecationRequest {
   /**
    * @public
-   * <p>A description of the image being exported.</p>
+   * <p>The ID of the AMI.</p>
    */
-  Description?: string;
+  ImageId: string | undefined;
 
   /**
    * @public
-   * <p>The disk image format for the exported image.</p>
+   * <p>The date and time to deprecate the AMI, in UTC, in the following format:
+   *         <i>YYYY</i>-<i>MM</i>-<i>DD</i>T<i>HH</i>:<i>MM</i>:<i>SS</i>Z.
+   *       If you specify a value for seconds, Amazon EC2 rounds the seconds to the
+   *       nearest minute.</p>
+   *          <p>You can’t specify a date in the past. The upper limit for <code>DeprecateAt</code> is 10
+   *       years from now, except for public AMIs, where the upper limit is 2 years from the creation date.</p>
    */
-  DiskImageFormat?: DiskImageFormat;
+  DeprecateAt: Date | undefined;
 
   /**
    * @public
-   * <p>The ID of the export image task.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   * 			and provides an error response. If you have the required permissions, the error response is
+   * 			<code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  ExportImageTaskId?: string;
+  DryRun?: boolean;
+}
 
+/**
+ * @public
+ */
+export interface EnableImageDeprecationResult {
   /**
    * @public
-   * <p>The ID of the image.</p>
+   * <p>Returns <code>true</code> if the request succeeds; otherwise, it returns an error.</p>
    */
-  ImageId?: string;
+  Return?: boolean;
+}
 
+/**
+ * @public
+ */
+export interface EnableIpamOrganizationAdminAccountRequest {
   /**
    * @public
-   * <p>The name of the role that grants VM Import/Export permission to export images to your Amazon
-   *    S3 bucket.</p>
+   * <p>A check for whether you have the required permissions for the action without actually making the request
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  RoleName?: string;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The percent complete of the export image task.</p>
+   * <p>The Organizations member account ID that you want to enable as the IPAM account.</p>
    */
-  Progress?: string;
+  DelegatedAdminAccountId: string | undefined;
+}
 
+/**
+ * @public
+ */
+export interface EnableIpamOrganizationAdminAccountResult {
   /**
    * @public
-   * <p>Information about the destination Amazon S3 bucket.</p>
+   * <p>The result of enabling the IPAM account.</p>
    */
-  S3ExportLocation?: ExportTaskS3Location;
+  Success?: boolean;
+}
 
+/**
+ * @public
+ */
+export interface EnableReachabilityAnalyzerOrganizationSharingRequest {
   /**
    * @public
-   * <p>The status of the export image task. The possible values are <code>active</code>, <code>completed</code>,
-   *     <code>deleting</code>, and <code>deleted</code>.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  Status?: string;
+  DryRun?: boolean;
+}
 
+/**
+ * @public
+ */
+export interface EnableReachabilityAnalyzerOrganizationSharingResult {
   /**
    * @public
-   * <p>The status message for the export image task.</p>
+   * <p>Returns <code>true</code> if the request succeeds; otherwise, returns an error.</p>
    */
-  StatusMessage?: string;
+  ReturnValue?: boolean;
+}
 
+/**
+ * @public
+ */
+export interface EnableSerialConsoleAccessRequest {
   /**
    * @public
-   * <p>Any tags assigned to the export image task.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  Tags?: Tag[];
+  DryRun?: boolean;
 }
 
 /**
  * @public
  */
-export interface ExportTransitGatewayRoutesRequest {
+export interface EnableSerialConsoleAccessResult {
   /**
    * @public
-   * <p>The ID of the route table.</p>
+   * <p>If <code>true</code>, access to the EC2 serial console of all instances is enabled for
+   * 			your account. If <code>false</code>, access to the EC2 serial console of all instances
+   * 			is disabled for your account.</p>
    */
-  TransitGatewayRouteTableId: string | undefined;
+  SerialConsoleAccessEnabled?: boolean;
+}
 
+/**
+ * @public
+ */
+export interface EnableSnapshotBlockPublicAccessRequest {
   /**
    * @public
-   * <p>One or more filters. The possible values are:</p>
+   * <p>The mode in which to enable block public access for snapshots for the Region.
+   *       Specify one of the following values:</p>
    *          <ul>
    *             <li>
    *                <p>
-   *                   <code>attachment.transit-gateway-attachment-id</code> - The id of the transit gateway attachment.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>attachment.resource-id</code> - The resource id of the transit gateway attachment.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>route-search.exact-match</code> - The exact match of the specified filter.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>route-search.longest-prefix-match</code> - The longest prefix that matches the route.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>route-search.subnet-of-match</code> - The routes with a subnet that match the specified CIDR filter.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>route-search.supernet-of-match</code> - The routes with a CIDR that encompass the CIDR filter. For example, if you have 10.0.1.0/29 and 10.0.1.0/31 routes in your route table and you specify supernet-of-match as 10.0.1.0/30, then the result returns 10.0.1.0/29.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>state</code> - The state of the route (<code>active</code> | <code>blackhole</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>transit-gateway-route-destination-cidr-block</code> - The CIDR range.</p>
+   *                   <code>block-all-sharing</code> - Prevents all public sharing of snapshots in
+   *           the Region. Users in the account will no longer be able to request new public
+   *           sharing. Additionally, snapshots that are already publicly shared are treated as
+   *           private and they are no longer publicly available.</p>
+   *                <note>
+   *                   <p>If you enable block public access for snapshots in <code>block-all-sharing</code>
+   *             mode, it does not change the permissions for snapshots that are already publicly shared.
+   *             Instead, it prevents these snapshots from be publicly visible and publicly accessible.
+   *             Therefore, the attributes for these snapshots still indicate that they are publicly
+   *             shared, even though they are not publicly available.</p>
+   *                </note>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>type</code> - The type of route (<code>propagated</code> |
-   *                <code>static</code>).</p>
+   *                   <code>block-new-sharing</code>  - Prevents only new public sharing of snapshots
+   *           in the Region. Users in the account will no longer be able to request new public
+   *           sharing. However, snapshots that are already publicly shared, remain publicly
+   *           available.</p>
    *             </li>
    *          </ul>
    */
-  Filters?: Filter[];
-
-  /**
-   * @public
-   * <p>The name of the S3 bucket.</p>
-   */
-  S3Bucket: string | undefined;
+  State: SnapshotBlockPublicAccessState | undefined;
 
   /**
    * @public
@@ -5785,472 +6080,445 @@ export interface ExportTransitGatewayRoutesRequest {
 /**
  * @public
  */
-export interface ExportTransitGatewayRoutesResult {
-  /**
-   * @public
-   * <p>The URL of the exported file in Amazon S3. For example,
-   *          s3://<i>bucket_name</i>/VPCTransitGateway/TransitGatewayRouteTables/<i>file_name</i>.</p>
-   */
-  S3Location?: string;
-}
-
-/**
- * @public
- */
-export interface GetAssociatedEnclaveCertificateIamRolesRequest {
-  /**
-   * @public
-   * <p>The ARN of the ACM certificate for which to view the associated IAM roles, encryption keys, and Amazon
-   * 			S3 object information.</p>
-   */
-  CertificateArn: string | undefined;
-
+export interface EnableSnapshotBlockPublicAccessResult {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The state of block public access for snapshots for the account and Region. Returns
+   *       either <code>block-all-sharing</code> or <code>block-new-sharing</code> if the request
+   *       succeeds.</p>
    */
-  DryRun?: boolean;
+  State?: SnapshotBlockPublicAccessState;
 }
 
 /**
  * @public
- * <p>Information about the associated IAM roles.</p>
  */
-export interface AssociatedRole {
+export interface EnableTransitGatewayRouteTablePropagationRequest {
   /**
    * @public
-   * <p>The ARN of the associated IAM role.</p>
+   * <p>The ID of the propagation route table.</p>
    */
-  AssociatedRoleArn?: string;
+  TransitGatewayRouteTableId: string | undefined;
 
   /**
    * @public
-   * <p>The name of the Amazon S3 bucket in which the Amazon S3 object is stored.</p>
+   * <p>The ID of the attachment.</p>
    */
-  CertificateS3BucketName?: string;
+  TransitGatewayAttachmentId?: string;
 
   /**
    * @public
-   * <p>The key of the Amazon S3 object ey where the certificate, certificate chain, and encrypted private key bundle
-   * 			is stored. The object key is formated as follows:  <code>role_arn</code>/<code>certificate_arn</code>.
-   * 		</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  CertificateS3ObjectKey?: string;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The ID of the KMS customer master key (CMK) used to encrypt the private key.</p>
+   * <p>The ID of the transit gateway route table announcement.</p>
    */
-  EncryptionKmsKeyId?: string;
+  TransitGatewayRouteTableAnnouncementId?: string;
 }
 
 /**
  * @public
  */
-export interface GetAssociatedEnclaveCertificateIamRolesResult {
+export interface EnableTransitGatewayRouteTablePropagationResult {
   /**
    * @public
-   * <p>Information about the associated IAM roles.</p>
+   * <p>Information about route propagation.</p>
    */
-  AssociatedRoles?: AssociatedRole[];
+  Propagation?: TransitGatewayPropagation;
 }
 
 /**
  * @public
+ * <p>Contains the parameters for EnableVgwRoutePropagation.</p>
  */
-export interface GetAssociatedIpv6PoolCidrsRequest {
-  /**
-   * @public
-   * <p>The ID of the IPv6 address pool.</p>
-   */
-  PoolId: string | undefined;
-
+export interface EnableVgwRoutePropagationRequest {
   /**
    * @public
-   * <p>The token for the next page of results.</p>
+   * <p>The ID of the virtual private gateway that is attached to a VPC. The virtual private
+   *             gateway must be attached to the same VPC that the routing tables are associated with.
+   *         </p>
    */
-  NextToken?: string;
+  GatewayId: string | undefined;
 
   /**
    * @public
-   * <p>The maximum number of results to return with a single call.
-   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
+   * <p>The ID of the route table. The routing table must be associated with the same VPC that
+   *             the virtual private gateway is attached to. </p>
    */
-  MaxResults?: number;
+  RouteTableId: string | undefined;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually
+   *             making the request, and provides an error response. If you have the required
+   *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
+   *                 <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
 }
 
 /**
  * @public
- * <p>Describes an IPv6 CIDR block association.</p>
  */
-export interface Ipv6CidrAssociation {
+export interface EnableVolumeIORequest {
   /**
    * @public
-   * <p>The IPv6 CIDR block.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  Ipv6Cidr?: string;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The resource that's associated with the IPv6 CIDR block.</p>
+   * <p>The ID of the volume.</p>
    */
-  AssociatedResource?: string;
+  VolumeId: string | undefined;
 }
 
 /**
  * @public
  */
-export interface GetAssociatedIpv6PoolCidrsResult {
+export interface EnableVpcClassicLinkRequest {
   /**
    * @public
-   * <p>Information about the IPv6 CIDR block associations.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  Ipv6CidrAssociations?: Ipv6CidrAssociation[];
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
+   * <p>The ID of the VPC.</p>
    */
-  NextToken?: string;
+  VpcId: string | undefined;
 }
 
 /**
  * @public
- * <p>A query used for retrieving network health data. </p>
  */
-export interface DataQuery {
-  /**
-   * @public
-   * <p>A user-defined ID associated with a data query that's returned in the <code>dataResponse</code> identifying the query. For example, if you set the Id to <code>MyQuery01</code>in the query, the <code>dataResponse</code> identifies the query as <code>MyQuery01</code>.</p>
-   */
-  Id?: string;
-
+export interface EnableVpcClassicLinkResult {
   /**
    * @public
-   * <p>The Region or Availability Zone that's the source for the data query. For example, <code>us-east-1</code>.</p>
+   * <p>Returns <code>true</code> if the request succeeds; otherwise, it returns an error.</p>
    */
-  Source?: string;
+  Return?: boolean;
+}
 
+/**
+ * @public
+ */
+export interface EnableVpcClassicLinkDnsSupportRequest {
   /**
    * @public
-   * <p>The Region or Availability Zone that's the target for the data query. For example, <code>eu-north-1</code>.</p>
+   * <p>The ID of the VPC.</p>
    */
-  Destination?: string;
+  VpcId?: string;
+}
 
+/**
+ * @public
+ */
+export interface EnableVpcClassicLinkDnsSupportResult {
   /**
    * @public
-   * <p>The metric, <code>aggregation-latency</code>, indicating that network latency is aggregated for the query. This is the only supported metric.</p>
+   * <p>Returns <code>true</code> if the request succeeds; otherwise, it returns an error.</p>
    */
-  Metric?: MetricType;
+  Return?: boolean;
+}
 
+/**
+ * @public
+ */
+export interface ExportClientVpnClientCertificateRevocationListRequest {
   /**
    * @public
-   * <p>The metric data aggregation period, <code>p50</code>, between the specified <code>startDate</code> and <code>endDate</code>. For example, a metric of <code>five_minutes</code> is the median of all the data points gathered within those five minutes. <code>p50</code> is the only supported metric.</p>
+   * <p>The ID of the Client VPN endpoint.</p>
    */
-  Statistic?: StatisticType;
+  ClientVpnEndpointId: string | undefined;
 
   /**
    * @public
-   * <p>The aggregation period used for the data query.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  Period?: PeriodType;
+  DryRun?: boolean;
 }
 
 /**
  * @public
+ * @enum
  */
-export interface GetAwsNetworkPerformanceDataRequest {
+export const ClientCertificateRevocationListStatusCode = {
+  active: "active",
+  pending: "pending",
+} as const;
+
+/**
+ * @public
+ */
+export type ClientCertificateRevocationListStatusCode =
+  (typeof ClientCertificateRevocationListStatusCode)[keyof typeof ClientCertificateRevocationListStatusCode];
+
+/**
+ * @public
+ * <p>Describes the state of a client certificate revocation list.</p>
+ */
+export interface ClientCertificateRevocationListStatus {
   /**
    * @public
-   * <p>A list of network performance data queries.</p>
+   * <p>The state of the client certificate revocation list.</p>
    */
-  DataQueries?: DataQuery[];
+  Code?: ClientCertificateRevocationListStatusCode;
 
   /**
    * @public
-   * <p>The starting time for the performance data request. The starting time must be formatted
-   *          as <code>yyyy-mm-ddThh:mm:ss</code>.  For example, <code>2022-06-10T12:00:00.000Z</code>.</p>
+   * <p>A message about the status of the client certificate revocation list, if applicable.</p>
    */
-  StartTime?: Date;
+  Message?: string;
+}
 
+/**
+ * @public
+ */
+export interface ExportClientVpnClientCertificateRevocationListResult {
   /**
    * @public
-   * <p>The ending time for the performance data request. The end time must be formatted as <code>yyyy-mm-ddThh:mm:ss</code>. For example, <code>2022-06-12T12:00:00.000Z</code>.</p>
+   * <p>Information about the client certificate revocation list.</p>
    */
-  EndTime?: Date;
+  CertificateRevocationList?: string;
 
   /**
    * @public
-   * <p>The maximum number of results to return with a single call.
-   *    To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
+   * <p>The current state of the client certificate revocation list.</p>
    */
-  MaxResults?: number;
+  Status?: ClientCertificateRevocationListStatus;
+}
 
+/**
+ * @public
+ */
+export interface ExportClientVpnClientConfigurationRequest {
   /**
    * @public
-   * <p>The token for the next page of results.</p>
+   * <p>The ID of the Client VPN endpoint.</p>
    */
-  NextToken?: string;
+  ClientVpnEndpointId: string | undefined;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
 }
 
 /**
  * @public
- * <p>Indicates whether the network was healthy or degraded at a particular point. The value is aggregated from the <code>startDate</code> to the <code>endDate</code>. Currently only <code>five_minutes</code> is supported.</p>
  */
-export interface MetricPoint {
+export interface ExportClientVpnClientConfigurationResult {
   /**
    * @public
-   * <p>The start date for the metric point. The starting date for the metric point. The starting time must be formatted
-   *          as <code>yyyy-mm-ddThh:mm:ss</code>.  For example, <code>2022-06-10T12:00:00.000Z</code>.</p>
+   * <p>The contents of the Client VPN endpoint configuration file.</p>
    */
-  StartDate?: Date;
+  ClientConfiguration?: string;
+}
 
+/**
+ * @public
+ * <p>Describes the destination for an export image task.</p>
+ */
+export interface ExportTaskS3LocationRequest {
   /**
    * @public
-   * <p>The end date for the metric point. The ending time must be formatted as <code>yyyy-mm-ddThh:mm:ss</code>.  For example, <code>2022-06-12T12:00:00.000Z</code>.</p>
+   * <p>The destination Amazon S3 bucket.</p>
    */
-  EndDate?: Date;
+  S3Bucket: string | undefined;
 
-  Value?: number;
   /**
    * @public
-   * <p>The status of the metric point.</p>
+   * <p>The prefix (logical hierarchy) in the bucket.</p>
    */
-  Status?: string;
+  S3Prefix?: string;
 }
 
 /**
  * @public
- * <p>The response to a <code>DataQuery</code>.</p>
  */
-export interface DataResponse {
-  /**
-   * @public
-   * <p>The ID passed in the <code>DataQuery</code>.</p>
-   */
-  Id?: string;
-
+export interface ExportImageRequest {
   /**
    * @public
-   * <p>The Region or Availability Zone that's the source for the data query. For example, <code>us-east-1</code>.</p>
+   * <p>Token to enable idempotency for export image requests.</p>
    */
-  Source?: string;
+  ClientToken?: string;
 
   /**
    * @public
-   * <p>The Region or Availability Zone that's the destination for the data query. For example, <code>eu-west-1</code>.</p>
+   * <p>A description of the image being exported. The maximum length is 255 characters.</p>
    */
-  Destination?: string;
+  Description?: string;
 
   /**
    * @public
-   * <p>The metric used for the network performance request. Only <code>aggregate-latency</code> is supported, which shows network latency during a specified period. </p>
+   * <p>The disk image format.</p>
    */
-  Metric?: MetricType;
+  DiskImageFormat: DiskImageFormat | undefined;
 
   /**
    * @public
-   * <p>The statistic used for the network performance request.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  Statistic?: StatisticType;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The period used for the network performance request.</p>
+   * <p>The ID of the image.</p>
    */
-  Period?: PeriodType;
+  ImageId: string | undefined;
 
   /**
    * @public
-   * <p>A list of <code>MetricPoint</code> objects.</p>
+   * <p>The Amazon S3 bucket for the destination image. The destination bucket must exist.</p>
    */
-  MetricPoints?: MetricPoint[];
-}
+  S3ExportLocation: ExportTaskS3LocationRequest | undefined;
 
-/**
- * @public
- */
-export interface GetAwsNetworkPerformanceDataResult {
   /**
    * @public
-   * <p>The list of data responses.</p>
+   * <p>The name of the role that grants VM Import/Export permission to export images to your Amazon
+   *    S3 bucket. If this parameter is not specified, the default role is named 'vmimport'.</p>
    */
-  DataResponses?: DataResponse[];
+  RoleName?: string;
 
   /**
    * @public
-   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
+   * <p>The tags to apply to the export image task during creation.</p>
    */
-  NextToken?: string;
+  TagSpecifications?: TagSpecification[];
 }
 
 /**
  * @public
  */
-export interface GetCapacityReservationUsageRequest {
+export interface ExportImageResult {
   /**
    * @public
-   * <p>The ID of the Capacity Reservation.</p>
+   * <p>A description of the image being exported.</p>
    */
-  CapacityReservationId: string | undefined;
+  Description?: string;
 
   /**
    * @public
-   * <p>The token to use to retrieve the next page of results.</p>
+   * <p>The disk image format for the exported image.</p>
    */
-  NextToken?: string;
+  DiskImageFormat?: DiskImageFormat;
 
   /**
    * @public
-   * <p>The maximum number of results to return for the request in a single page. The remaining results can be seen by sending another request with the returned <code>nextToken</code> value. This value can be between 5 and 500. If <code>maxResults</code> is given a larger value than 500, you receive an error.</p>
-   *          <p>Valid range: Minimum value of 1. Maximum value of 1000.</p>
+   * <p>The ID of the export image task.</p>
    */
-  MaxResults?: number;
+  ExportImageTaskId?: string;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The ID of the image.</p>
    */
-  DryRun?: boolean;
-}
+  ImageId?: string;
 
-/**
- * @public
- * <p>Information about the Capacity Reservation usage.</p>
- */
-export interface InstanceUsage {
   /**
    * @public
-   * <p>The ID of the Amazon Web Services account that is making use of the Capacity Reservation.</p>
+   * <p>The name of the role that grants VM Import/Export permission to export images to your Amazon
+   *    S3 bucket.</p>
    */
-  AccountId?: string;
+  RoleName?: string;
 
   /**
    * @public
-   * <p>The number of instances the Amazon Web Services account currently has in the Capacity Reservation.</p>
+   * <p>The percent complete of the export image task.</p>
    */
-  UsedInstanceCount?: number;
-}
+  Progress?: string;
 
-/**
- * @public
- */
-export interface GetCapacityReservationUsageResult {
   /**
    * @public
-   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
+   * <p>Information about the destination Amazon S3 bucket.</p>
    */
-  NextToken?: string;
+  S3ExportLocation?: ExportTaskS3Location;
 
   /**
    * @public
-   * <p>The ID of the Capacity Reservation.</p>
+   * <p>The status of the export image task. The possible values are <code>active</code>, <code>completed</code>,
+   *     <code>deleting</code>, and <code>deleted</code>.</p>
    */
-  CapacityReservationId?: string;
+  Status?: string;
 
   /**
    * @public
-   * <p>The type of instance for which the Capacity Reservation reserves capacity.</p>
+   * <p>The status message for the export image task.</p>
    */
-  InstanceType?: string;
+  StatusMessage?: string;
 
   /**
    * @public
-   * <p>The number of instances for which the Capacity Reservation reserves capacity.</p>
+   * <p>Any tags assigned to the export image task.</p>
    */
-  TotalInstanceCount?: number;
+  Tags?: Tag[];
+}
 
+/**
+ * @public
+ */
+export interface ExportTransitGatewayRoutesRequest {
   /**
    * @public
-   * <p>The remaining capacity. Indicates the number of instances that can be launched in the Capacity Reservation.</p>
+   * <p>The ID of the route table.</p>
    */
-  AvailableInstanceCount?: number;
+  TransitGatewayRouteTableId: string | undefined;
 
   /**
    * @public
-   * <p>The current state of the Capacity Reservation. A Capacity Reservation can be in one of the following states:</p>
+   * <p>One or more filters. The possible values are:</p>
    *          <ul>
    *             <li>
    *                <p>
-   *                   <code>active</code> - The Capacity Reservation is active and the capacity is available for your use.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>expired</code> - The Capacity Reservation expired automatically at the date and time specified
-   * 					in your request. The reserved capacity is no longer available for your use.</p>
+   *                   <code>attachment.transit-gateway-attachment-id</code> - The id of the transit gateway attachment.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>cancelled</code> - The Capacity Reservation was cancelled. The reserved capacity is no
-   * 					longer available for your use.</p>
+   *                   <code>attachment.resource-id</code> - The resource id of the transit gateway attachment.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>pending</code> - The Capacity Reservation request was successful but the capacity
-   * 					provisioning is still pending.</p>
+   *                   <code>route-search.exact-match</code> - The exact match of the specified filter.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>failed</code> - The Capacity Reservation request has failed. A request might fail
-   * 					due to invalid request parameters, capacity constraints, or instance limit constraints.
-   * 					Failed requests are retained for 60 minutes.</p>
+   *                   <code>route-search.longest-prefix-match</code> - The longest prefix that matches the route.</p>
    *             </li>
-   *          </ul>
-   */
-  State?: CapacityReservationState;
-
-  /**
-   * @public
-   * <p>Information about the Capacity Reservation usage.</p>
-   */
-  InstanceUsages?: InstanceUsage[];
-}
-
-/**
- * @public
- */
-export interface GetCoipPoolUsageRequest {
-  /**
-   * @public
-   * <p>The ID of the address pool.</p>
-   */
-  PoolId: string | undefined;
-
-  /**
-   * @public
-   * <p>One or more filters.</p>
-   *          <ul>
    *             <li>
    *                <p>
-   *                   <code>coip-address-usage.allocation-id</code> - The allocation ID of the address.</p>
+   *                   <code>route-search.subnet-of-match</code> - The routes with a subnet that match the specified CIDR filter.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>coip-address-usage.aws-account-id</code> - The ID of the Amazon Web Services account that is using the customer-owned IP address.</p>
+   *                   <code>route-search.supernet-of-match</code> - The routes with a CIDR that encompass the CIDR filter. For example, if you have 10.0.1.0/29 and 10.0.1.0/31 routes in your route table and you specify supernet-of-match as 10.0.1.0/30, then the result returns 10.0.1.0/29.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>coip-address-usage.aws-service</code> - The Amazon Web Services service that is using the customer-owned IP address.</p>
+   *                   <code>state</code> - The state of the route (<code>active</code> | <code>blackhole</code>).</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>coip-address-usage.co-ip</code> - The customer-owned IP address.</p>
+   *                   <code>transit-gateway-route-destination-cidr-block</code> - The CIDR range.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>type</code> - The type of route (<code>propagated</code> |
+   *                <code>static</code>).</p>
    *             </li>
    *          </ul>
    */
@@ -6258,16 +6526,9 @@ export interface GetCoipPoolUsageRequest {
 
   /**
    * @public
-   * <p>The maximum number of results to return with a single call.
-   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
-   */
-  MaxResults?: number;
-
-  /**
-   * @public
-   * <p>The token for the next page of results.</p>
+   * <p>The name of the S3 bucket.</p>
    */
-  NextToken?: string;
+  S3Bucket: string | undefined;
 
   /**
    * @public
@@ -6280,117 +6541,100 @@ export interface GetCoipPoolUsageRequest {
 
 /**
  * @public
- * <p>Describes address usage for a customer-owned address pool.</p>
  */
-export interface CoipAddressUsage {
-  /**
-   * @public
-   * <p>The allocation ID of the address.</p>
-   */
-  AllocationId?: string;
-
+export interface ExportTransitGatewayRoutesResult {
   /**
    * @public
-   * <p>The Amazon Web Services account ID.</p>
+   * <p>The URL of the exported file in Amazon S3. For example,
+   *          s3://<i>bucket_name</i>/VPCTransitGateway/TransitGatewayRouteTables/<i>file_name</i>.</p>
    */
-  AwsAccountId?: string;
+  S3Location?: string;
+}
 
+/**
+ * @public
+ */
+export interface GetAssociatedEnclaveCertificateIamRolesRequest {
   /**
    * @public
-   * <p>The Amazon Web Services service.</p>
+   * <p>The ARN of the ACM certificate for which to view the associated IAM roles, encryption keys, and Amazon
+   * 			S3 object information.</p>
    */
-  AwsService?: string;
+  CertificateArn: string | undefined;
 
   /**
    * @public
-   * <p>The customer-owned IP address.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  CoIp?: string;
+  DryRun?: boolean;
 }
 
 /**
  * @public
+ * <p>Information about the associated IAM roles.</p>
  */
-export interface GetCoipPoolUsageResult {
+export interface AssociatedRole {
   /**
    * @public
-   * <p>The ID of the customer-owned address pool.</p>
+   * <p>The ARN of the associated IAM role.</p>
    */
-  CoipPoolId?: string;
+  AssociatedRoleArn?: string;
 
   /**
    * @public
-   * <p>Information about the address usage.</p>
+   * <p>The name of the Amazon S3 bucket in which the Amazon S3 object is stored.</p>
    */
-  CoipAddressUsages?: CoipAddressUsage[];
+  CertificateS3BucketName?: string;
 
   /**
    * @public
-   * <p>The ID of the local gateway route table.</p>
+   * <p>The key of the Amazon S3 object ey where the certificate, certificate chain, and encrypted private key bundle
+   * 			is stored. The object key is formated as follows:  <code>role_arn</code>/<code>certificate_arn</code>.
+   * 		</p>
    */
-  LocalGatewayRouteTableId?: string;
+  CertificateS3ObjectKey?: string;
 
   /**
    * @public
-   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
+   * <p>The ID of the KMS customer master key (CMK) used to encrypt the private key.</p>
    */
-  NextToken?: string;
+  EncryptionKmsKeyId?: string;
 }
 
 /**
  * @public
  */
-export interface GetConsoleOutputRequest {
-  /**
-   * @public
-   * <p>The ID of the instance.</p>
-   */
-  InstanceId: string | undefined;
-
-  /**
-   * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-   */
-  DryRun?: boolean;
-
+export interface GetAssociatedEnclaveCertificateIamRolesResult {
   /**
    * @public
-   * <p>When enabled, retrieves the latest console output for the instance.</p>
-   *          <p>Default: disabled (<code>false</code>)</p>
+   * <p>Information about the associated IAM roles.</p>
    */
-  Latest?: boolean;
+  AssociatedRoles?: AssociatedRole[];
 }
 
 /**
  * @public
  */
-export interface GetConsoleOutputResult {
+export interface GetAssociatedIpv6PoolCidrsRequest {
   /**
    * @public
-   * <p>The ID of the instance.</p>
+   * <p>The ID of the IPv6 address pool.</p>
    */
-  InstanceId?: string;
+  PoolId: string | undefined;
 
   /**
    * @public
-   * <p>The console output, base64-encoded. If you are using a command line tool, the tool
-   *             decodes the output for you.</p>
+   * <p>The token for the next page of results.</p>
    */
-  Output?: string;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The time at which the output was last updated.</p>
+   * <p>The maximum number of results to return with a single call.
+   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
    */
-  Timestamp?: Date;
-}
+  MaxResults?: number;
 
-/**
- * @public
- */
-export interface GetConsoleScreenshotRequest {
   /**
    * @public
    * <p>Checks whether you have the required permissions for the action, without actually making the request,
@@ -6398,221 +6642,121 @@ export interface GetConsoleScreenshotRequest {
    *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
-
-  /**
-   * @public
-   * <p>The ID of the instance.</p>
-   */
-  InstanceId: string | undefined;
-
-  /**
-   * @public
-   * <p>When set to <code>true</code>, acts as keystroke input and wakes up an instance that's
-   *             in standby or "sleep" mode.</p>
-   */
-  WakeUp?: boolean;
 }
 
 /**
  * @public
+ * <p>Describes an IPv6 CIDR block association.</p>
  */
-export interface GetConsoleScreenshotResult {
-  /**
-   * @public
-   * <p>The data that comprises the image.</p>
-   */
-  ImageData?: string;
-
-  /**
-   * @public
-   * <p>The ID of the instance.</p>
-   */
-  InstanceId?: string;
-}
-
-/**
- * @public
- * @enum
- */
-export const UnlimitedSupportedInstanceFamily = {
-  t2: "t2",
-  t3: "t3",
-  t3a: "t3a",
-  t4g: "t4g",
-} as const;
-
-/**
- * @public
- */
-export type UnlimitedSupportedInstanceFamily =
-  (typeof UnlimitedSupportedInstanceFamily)[keyof typeof UnlimitedSupportedInstanceFamily];
-
-/**
- * @public
- */
-export interface GetDefaultCreditSpecificationRequest {
+export interface Ipv6CidrAssociation {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The IPv6 CIDR block.</p>
    */
-  DryRun?: boolean;
+  Ipv6Cidr?: string;
 
   /**
    * @public
-   * <p>The instance family.</p>
+   * <p>The resource that's associated with the IPv6 CIDR block.</p>
    */
-  InstanceFamily: UnlimitedSupportedInstanceFamily | undefined;
+  AssociatedResource?: string;
 }
 
 /**
  * @public
- * <p>Describes the default credit option for CPU usage of a burstable performance instance
- *             family.</p>
  */
-export interface InstanceFamilyCreditSpecification {
+export interface GetAssociatedIpv6PoolCidrsResult {
   /**
    * @public
-   * <p>The instance family.</p>
+   * <p>Information about the IPv6 CIDR block associations.</p>
    */
-  InstanceFamily?: UnlimitedSupportedInstanceFamily;
+  Ipv6CidrAssociations?: Ipv6CidrAssociation[];
 
   /**
    * @public
-   * <p>The default credit option for CPU usage of the instance family. Valid values are
-   *                 <code>standard</code> and <code>unlimited</code>.</p>
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
    */
-  CpuCredits?: string;
+  NextToken?: string;
 }
 
 /**
  * @public
+ * <p>A query used for retrieving network health data. </p>
  */
-export interface GetDefaultCreditSpecificationResult {
+export interface DataQuery {
   /**
    * @public
-   * <p>The default credit option for CPU usage of the instance family.</p>
+   * <p>A user-defined ID associated with a data query that's returned in the <code>dataResponse</code> identifying the query. For example, if you set the Id to <code>MyQuery01</code>in the query, the <code>dataResponse</code> identifies the query as <code>MyQuery01</code>.</p>
    */
-  InstanceFamilyCreditSpecification?: InstanceFamilyCreditSpecification;
-}
+  Id?: string;
 
-/**
- * @public
- */
-export interface GetEbsDefaultKmsKeyIdRequest {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The Region or Availability Zone that's the source for the data query. For example, <code>us-east-1</code>.</p>
    */
-  DryRun?: boolean;
-}
+  Source?: string;
 
-/**
- * @public
- */
-export interface GetEbsDefaultKmsKeyIdResult {
   /**
    * @public
-   * <p>The Amazon Resource Name (ARN) of the default KMS key for encryption by default.</p>
+   * <p>The Region or Availability Zone that's the target for the data query. For example, <code>eu-north-1</code>.</p>
    */
-  KmsKeyId?: string;
-}
+  Destination?: string;
 
-/**
- * @public
- */
-export interface GetEbsEncryptionByDefaultRequest {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The metric, <code>aggregation-latency</code>, indicating that network latency is aggregated for the query. This is the only supported metric.</p>
    */
-  DryRun?: boolean;
-}
+  Metric?: MetricType;
 
-/**
- * @public
- */
-export interface GetEbsEncryptionByDefaultResult {
   /**
    * @public
-   * <p>Indicates whether encryption by default is enabled.</p>
+   * <p>The metric data aggregation period, <code>p50</code>, between the specified <code>startDate</code> and <code>endDate</code>. For example, a metric of <code>five_minutes</code> is the median of all the data points gathered within those five minutes. <code>p50</code> is the only supported metric.</p>
    */
-  EbsEncryptionByDefault?: boolean;
+  Statistic?: StatisticType;
 
   /**
    * @public
-   * <p>Reserved for future use.</p>
+   * <p>The aggregation period used for the data query.</p>
    */
-  SseType?: SSEType;
-}
-
-/**
- * @public
- * @enum
- */
-export const PartitionLoadFrequency = {
-  DAILY: "daily",
-  MONTHLY: "monthly",
-  NONE: "none",
-  WEEKLY: "weekly",
-} as const;
-
-/**
- * @public
- */
-export type PartitionLoadFrequency = (typeof PartitionLoadFrequency)[keyof typeof PartitionLoadFrequency];
+  Period?: PeriodType;
+}
 
 /**
  * @public
- * <p>Describes integration options for Amazon Athena.</p>
  */
-export interface AthenaIntegration {
+export interface GetAwsNetworkPerformanceDataRequest {
   /**
    * @public
-   * <p>The location in Amazon S3 to store the generated CloudFormation template.</p>
+   * <p>A list of network performance data queries.</p>
    */
-  IntegrationResultS3DestinationArn: string | undefined;
+  DataQueries?: DataQuery[];
 
   /**
    * @public
-   * <p>The schedule for adding new partitions to the table.</p>
+   * <p>The starting time for the performance data request. The starting time must be formatted
+   *          as <code>yyyy-mm-ddThh:mm:ss</code>.  For example, <code>2022-06-10T12:00:00.000Z</code>.</p>
    */
-  PartitionLoadFrequency: PartitionLoadFrequency | undefined;
+  StartTime?: Date;
 
   /**
    * @public
-   * <p>The start date for the partition.</p>
+   * <p>The ending time for the performance data request. The end time must be formatted as <code>yyyy-mm-ddThh:mm:ss</code>. For example, <code>2022-06-12T12:00:00.000Z</code>.</p>
    */
-  PartitionStartDate?: Date;
+  EndTime?: Date;
 
   /**
    * @public
-   * <p>The end date for the partition.</p>
+   * <p>The maximum number of results to return with a single call.
+   *    To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
    */
-  PartitionEndDate?: Date;
-}
+  MaxResults?: number;
 
-/**
- * @public
- * <p>Describes service integrations with VPC Flow logs.</p>
- */
-export interface IntegrateServices {
   /**
    * @public
-   * <p>Information about the integration with Amazon Athena.</p>
+   * <p>The token for the next page of results.</p>
    */
-  AthenaIntegrations?: AthenaIntegration[];
-}
+  NextToken?: string;
 
-/**
- * @public
- */
-export interface GetFlowLogsIntegrationTemplateRequest {
   /**
    * @public
    * <p>Checks whether you have the required permissions for the action, without actually making the request,
@@ -6620,317 +6764,332 @@ export interface GetFlowLogsIntegrationTemplateRequest {
    *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
+}
 
+/**
+ * @public
+ * <p>Indicates whether the network was healthy or degraded at a particular point. The value is aggregated from the <code>startDate</code> to the <code>endDate</code>. Currently only <code>five_minutes</code> is supported.</p>
+ */
+export interface MetricPoint {
   /**
    * @public
-   * <p>The ID of the flow log.</p>
+   * <p>The start date for the metric point. The starting date for the metric point. The starting time must be formatted
+   *          as <code>yyyy-mm-ddThh:mm:ss</code>.  For example, <code>2022-06-10T12:00:00.000Z</code>.</p>
    */
-  FlowLogId: string | undefined;
+  StartDate?: Date;
 
   /**
    * @public
-   * <p>To store the CloudFormation template in Amazon S3, specify the location in Amazon S3.</p>
+   * <p>The end date for the metric point. The ending time must be formatted as <code>yyyy-mm-ddThh:mm:ss</code>.  For example, <code>2022-06-12T12:00:00.000Z</code>.</p>
    */
-  ConfigDeliveryS3DestinationArn: string | undefined;
+  EndDate?: Date;
 
+  Value?: number;
   /**
    * @public
-   * <p>Information about the service integration.</p>
+   * <p>The status of the metric point.</p>
    */
-  IntegrateServices: IntegrateServices | undefined;
+  Status?: string;
 }
 
 /**
  * @public
+ * <p>The response to a <code>DataQuery</code>.</p>
  */
-export interface GetFlowLogsIntegrationTemplateResult {
+export interface DataResponse {
   /**
    * @public
-   * <p>The generated CloudFormation template.</p>
+   * <p>The ID passed in the <code>DataQuery</code>.</p>
    */
-  Result?: string;
-}
+  Id?: string;
 
-/**
- * @public
- */
-export interface GetGroupsForCapacityReservationRequest {
   /**
    * @public
-   * <p>The ID of the Capacity Reservation. If you specify a Capacity Reservation that is shared
-   * 			with you, the operation returns only Capacity Reservation groups that you own.</p>
+   * <p>The Region or Availability Zone that's the source for the data query. For example, <code>us-east-1</code>.</p>
    */
-  CapacityReservationId: string | undefined;
+  Source?: string;
 
   /**
    * @public
-   * <p>The token to use to retrieve the next page of results.</p>
+   * <p>The Region or Availability Zone that's the destination for the data query. For example, <code>eu-west-1</code>.</p>
    */
-  NextToken?: string;
+  Destination?: string;
 
   /**
    * @public
-   * <p>The maximum number of results to return for the request in a single page. The remaining results can be seen by sending another request with the returned <code>nextToken</code> value. This value can be between 5 and 500. If <code>maxResults</code> is given a larger value than 500, you receive an error.</p>
+   * <p>The metric used for the network performance request. Only <code>aggregate-latency</code> is supported, which shows network latency during a specified period. </p>
    */
-  MaxResults?: number;
+  Metric?: MetricType;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The statistic used for the network performance request.</p>
    */
-  DryRun?: boolean;
-}
+  Statistic?: StatisticType;
 
-/**
- * @public
- * <p>Describes a resource group to which a Capacity Reservation has been added.</p>
- */
-export interface CapacityReservationGroup {
   /**
    * @public
-   * <p>The ARN of the resource group.</p>
+   * <p>The period used for the network performance request.</p>
    */
-  GroupArn?: string;
+  Period?: PeriodType;
 
   /**
    * @public
-   * <p>The ID of the Amazon Web Services account that owns the resource group.</p>
+   * <p>A list of <code>MetricPoint</code> objects.</p>
    */
-  OwnerId?: string;
+  MetricPoints?: MetricPoint[];
 }
 
 /**
  * @public
  */
-export interface GetGroupsForCapacityReservationResult {
+export interface GetAwsNetworkPerformanceDataResult {
   /**
    * @public
-   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
+   * <p>The list of data responses.</p>
    */
-  NextToken?: string;
+  DataResponses?: DataResponse[];
 
   /**
    * @public
-   * <p>Information about the resource groups to which the Capacity Reservation has been added.</p>
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
    */
-  CapacityReservationGroups?: CapacityReservationGroup[];
+  NextToken?: string;
 }
 
 /**
  * @public
  */
-export interface GetHostReservationPurchasePreviewRequest {
-  /**
-   * @public
-   * <p>The IDs of the Dedicated Hosts with which the reservation is associated.</p>
-   */
-  HostIdSet: string[] | undefined;
-
+export interface GetCapacityReservationUsageRequest {
   /**
    * @public
-   * <p>The offering ID of the reservation.</p>
+   * <p>The ID of the Capacity Reservation.</p>
    */
-  OfferingId: string | undefined;
-}
+  CapacityReservationId: string | undefined;
 
-/**
- * @public
- * <p>Describes the result of the purchase.</p>
- */
-export interface Purchase {
   /**
    * @public
-   * <p>The currency in which the <code>UpfrontPrice</code> and <code>HourlyPrice</code>
-   *             amounts are specified. At this time, the only supported currency is
-   *             <code>USD</code>.</p>
+   * <p>The token to use to retrieve the next page of results.</p>
    */
-  CurrencyCode?: CurrencyCodeValues;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The duration of the reservation's term in seconds.</p>
+   * <p>The maximum number of results to return for the request in a single page. The remaining results can be seen by sending another request with the returned <code>nextToken</code> value. This value can be between 5 and 500. If <code>maxResults</code> is given a larger value than 500, you receive an error.</p>
+   *          <p>Valid range: Minimum value of 1. Maximum value of 1000.</p>
    */
-  Duration?: number;
+  MaxResults?: number;
 
   /**
    * @public
-   * <p>The IDs of the Dedicated Hosts associated with the reservation.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  HostIdSet?: string[];
+  DryRun?: boolean;
+}
 
+/**
+ * @public
+ * <p>Information about the Capacity Reservation usage.</p>
+ */
+export interface InstanceUsage {
   /**
    * @public
-   * <p>The ID of the reservation.</p>
+   * <p>The ID of the Amazon Web Services account that is making use of the Capacity Reservation.</p>
    */
-  HostReservationId?: string;
+  AccountId?: string;
 
   /**
    * @public
-   * <p>The hourly price of the reservation per hour.</p>
+   * <p>The number of instances the Amazon Web Services account currently has in the Capacity Reservation.</p>
    */
-  HourlyPrice?: string;
+  UsedInstanceCount?: number;
+}
 
+/**
+ * @public
+ */
+export interface GetCapacityReservationUsageResult {
   /**
    * @public
-   * <p>The instance family on the Dedicated Host that the reservation can be associated
-   *             with.</p>
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
    */
-  InstanceFamily?: string;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The payment option for the reservation.</p>
+   * <p>The ID of the Capacity Reservation.</p>
    */
-  PaymentOption?: PaymentOption;
+  CapacityReservationId?: string;
 
   /**
    * @public
-   * <p>The upfront price of the reservation.</p>
+   * <p>The type of instance for which the Capacity Reservation reserves capacity.</p>
    */
-  UpfrontPrice?: string;
-}
+  InstanceType?: string;
 
-/**
- * @public
- */
-export interface GetHostReservationPurchasePreviewResult {
   /**
    * @public
-   * <p>The currency in which the <code>totalUpfrontPrice</code> and
-   *                 <code>totalHourlyPrice</code> amounts are specified. At this time, the only
-   *             supported currency is <code>USD</code>.</p>
+   * <p>The number of instances for which the Capacity Reservation reserves capacity.</p>
    */
-  CurrencyCode?: CurrencyCodeValues;
+  TotalInstanceCount?: number;
 
   /**
    * @public
-   * <p>The purchase information of the Dedicated Host reservation and the Dedicated Hosts
-   *             associated with it.</p>
+   * <p>The remaining capacity. Indicates the number of instances that can be launched in the Capacity Reservation.</p>
    */
-  Purchase?: Purchase[];
+  AvailableInstanceCount?: number;
 
   /**
    * @public
-   * <p>The potential total hourly price of the reservation per hour.</p>
+   * <p>The current state of the Capacity Reservation. A Capacity Reservation can be in one of the following states:</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>active</code> - The Capacity Reservation is active and the capacity is available for your use.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>expired</code> - The Capacity Reservation expired automatically at the date and time specified
+   * 					in your request. The reserved capacity is no longer available for your use.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>cancelled</code> - The Capacity Reservation was cancelled. The reserved capacity is no
+   * 					longer available for your use.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>pending</code> - The Capacity Reservation request was successful but the capacity
+   * 					provisioning is still pending.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>failed</code> - The Capacity Reservation request has failed. A request might fail
+   * 					due to invalid request parameters, capacity constraints, or instance limit constraints.
+   * 					Failed requests are retained for 60 minutes.</p>
+   *             </li>
+   *          </ul>
    */
-  TotalHourlyPrice?: string;
+  State?: CapacityReservationState;
 
   /**
    * @public
-   * <p>The potential total upfront price. This is billed immediately.</p>
+   * <p>Information about the Capacity Reservation usage.</p>
    */
-  TotalUpfrontPrice?: string;
+  InstanceUsages?: InstanceUsage[];
 }
 
 /**
  * @public
  */
-export interface GetImageBlockPublicAccessStateRequest {
+export interface GetCoipPoolUsageRequest {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   * 			and provides an error response. If you have the required permissions, the error response is
-   * 			<code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The ID of the address pool.</p>
    */
-  DryRun?: boolean;
-}
+  PoolId: string | undefined;
 
-/**
- * @public
- */
-export interface GetImageBlockPublicAccessStateResult {
   /**
    * @public
-   * <p>The current state of block public access for AMIs at the account level in the specified
-   *       Amazon Web Services Region.</p>
-   *          <p>Possible values:</p>
+   * <p>One or more filters.</p>
    *          <ul>
    *             <li>
    *                <p>
-   *                   <code>block-new-sharing</code> - Any attempt to publicly share your AMIs in the
-   *           specified Region is blocked.</p>
+   *                   <code>coip-address-usage.allocation-id</code> - The allocation ID of the address.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>unblocked</code> - Your AMIs in the specified Region can be publicly
-   *           shared.</p>
+   *                   <code>coip-address-usage.aws-account-id</code> - The ID of the Amazon Web Services account that is using the customer-owned IP address.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>coip-address-usage.aws-service</code> - The Amazon Web Services service that is using the customer-owned IP address.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>coip-address-usage.co-ip</code> - The customer-owned IP address.</p>
    *             </li>
    *          </ul>
    */
-  ImageBlockPublicAccessState?: string;
-}
+  Filters?: Filter[];
 
-/**
- * @public
- */
-export interface GetInstanceTypesFromInstanceRequirementsRequest {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The maximum number of results to return with a single call.
+   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
    */
-  DryRun?: boolean;
+  MaxResults?: number;
 
   /**
    * @public
-   * <p>The processor architecture type.</p>
+   * <p>The token for the next page of results.</p>
    */
-  ArchitectureTypes: ArchitectureType[] | undefined;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The virtualization type.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  VirtualizationTypes: VirtualizationType[] | undefined;
+  DryRun?: boolean;
+}
 
+/**
+ * @public
+ * <p>Describes address usage for a customer-owned address pool.</p>
+ */
+export interface CoipAddressUsage {
   /**
    * @public
-   * <p>The attributes required for the instance types.</p>
+   * <p>The allocation ID of the address.</p>
    */
-  InstanceRequirements: InstanceRequirementsRequest | undefined;
+  AllocationId?: string;
 
   /**
    * @public
-   * <p>The maximum number of items to return for this request.
-   *          To get the next page of items, make another request with the token returned in the output.
-   * 	        For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
+   * <p>The Amazon Web Services account ID.</p>
    */
-  MaxResults?: number;
+  AwsAccountId?: string;
 
   /**
    * @public
-   * <p>The token returned from a previous paginated request. Pagination continues from the end of the items returned by the previous request.</p>
+   * <p>The Amazon Web Services service.</p>
    */
-  NextToken?: string;
-}
+  AwsService?: string;
 
-/**
- * @public
- * <p>The list of instance types with the specified instance attributes.</p>
- */
-export interface InstanceTypeInfoFromInstanceRequirements {
   /**
    * @public
-   * <p>The matching instance type.</p>
+   * <p>The customer-owned IP address.</p>
    */
-  InstanceType?: string;
+  CoIp?: string;
 }
 
 /**
  * @public
  */
-export interface GetInstanceTypesFromInstanceRequirementsResult {
+export interface GetCoipPoolUsageResult {
   /**
    * @public
-   * <p>The instance types with the specified instance attributes.</p>
+   * <p>The ID of the customer-owned address pool.</p>
    */
-  InstanceTypes?: InstanceTypeInfoFromInstanceRequirements[];
+  CoipPoolId?: string;
 
   /**
    * @public
-   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there
-   *          are no more items to return.</p>
+   * <p>Information about the address usage.</p>
+   */
+  CoipAddressUsages?: CoipAddressUsage[];
+
+  /**
+   * @public
+   * <p>The ID of the local gateway route table.</p>
+   */
+  LocalGatewayRouteTableId?: string;
+
+  /**
+   * @public
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
    */
   NextToken?: string;
 }
@@ -6938,10 +7097,10 @@ export interface GetInstanceTypesFromInstanceRequirementsResult {
 /**
  * @public
  */
-export interface GetInstanceUefiDataRequest {
+export interface GetConsoleOutputRequest {
   /**
    * @public
-   * <p>The ID of the instance from which to retrieve the UEFI data.</p>
+   * <p>The ID of the instance.</p>
    */
   InstanceId: string | undefined;
 
@@ -6952,227 +7111,268 @@ export interface GetInstanceUefiDataRequest {
    *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
-}
-
-/**
- * @public
- */
-export interface GetInstanceUefiDataResult {
-  /**
-   * @public
-   * <p>The ID of the instance from which to retrieve the UEFI data.</p>
-   */
-  InstanceId?: string;
 
   /**
    * @public
-   * <p>Base64 representation of the non-volatile UEFI variable store.</p>
+   * <p>When enabled, retrieves the latest console output for the instance.</p>
+   *          <p>Default: disabled (<code>false</code>)</p>
    */
-  UefiData?: string;
+  Latest?: boolean;
 }
 
 /**
  * @public
  */
-export interface GetIpamAddressHistoryRequest {
+export interface GetConsoleOutputResult {
   /**
    * @public
-   * <p>A check for whether you have the required permissions for the action without actually making the request
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The ID of the instance.</p>
    */
-  DryRun?: boolean;
+  InstanceId?: string;
 
   /**
    * @public
-   * <p>The CIDR you want the history of. The CIDR can be an IPv4 or IPv6 IP address range.
-   *          If you enter a /16 IPv4 CIDR, you will get records that match it exactly. You will not get records for any subnets within the /16 CIDR.</p>
+   * <p>The console output, base64-encoded. If you are using a command line tool, the tool
+   *             decodes the output for you.</p>
    */
-  Cidr: string | undefined;
+  Output?: string;
 
   /**
    * @public
-   * <p>The ID of the IPAM scope that the CIDR is in.</p>
+   * <p>The time at which the output was last updated.</p>
    */
-  IpamScopeId: string | undefined;
+  Timestamp?: Date;
+}
 
+/**
+ * @public
+ */
+export interface GetConsoleScreenshotRequest {
   /**
    * @public
-   * <p>The ID of the VPC you want your history records filtered by.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  VpcId?: string;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The start of the time period for which you are looking for history. If you omit this option, it will default to the value of EndTime.</p>
+   * <p>The ID of the instance.</p>
    */
-  StartTime?: Date;
+  InstanceId: string | undefined;
 
   /**
    * @public
-   * <p>The end of the time period for which you are looking for history. If you omit this option, it will default to the current time.</p>
+   * <p>When set to <code>true</code>, acts as keystroke input and wakes up an instance that's
+   *             in standby or "sleep" mode.</p>
    */
-  EndTime?: Date;
+  WakeUp?: boolean;
+}
 
+/**
+ * @public
+ */
+export interface GetConsoleScreenshotResult {
   /**
    * @public
-   * <p>The maximum number of historical results you would like returned per page. Defaults to 100.</p>
+   * <p>The data that comprises the image.</p>
    */
-  MaxResults?: number;
+  ImageData?: string;
 
   /**
    * @public
-   * <p>The token for the next page of results.</p>
+   * <p>The ID of the instance.</p>
    */
-  NextToken?: string;
+  InstanceId?: string;
 }
 
 /**
  * @public
  * @enum
  */
-export const IpamComplianceStatus = {
-  compliant: "compliant",
-  ignored: "ignored",
-  noncompliant: "noncompliant",
-  unmanaged: "unmanaged",
+export const UnlimitedSupportedInstanceFamily = {
+  t2: "t2",
+  t3: "t3",
+  t3a: "t3a",
+  t4g: "t4g",
 } as const;
 
 /**
  * @public
  */
-export type IpamComplianceStatus = (typeof IpamComplianceStatus)[keyof typeof IpamComplianceStatus];
-
-/**
- * @public
- * @enum
- */
-export const IpamOverlapStatus = {
-  ignored: "ignored",
-  nonoverlapping: "nonoverlapping",
-  overlapping: "overlapping",
-} as const;
+export type UnlimitedSupportedInstanceFamily =
+  (typeof UnlimitedSupportedInstanceFamily)[keyof typeof UnlimitedSupportedInstanceFamily];
 
 /**
  * @public
  */
-export type IpamOverlapStatus = (typeof IpamOverlapStatus)[keyof typeof IpamOverlapStatus];
+export interface GetDefaultCreditSpecificationRequest {
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
 
-/**
- * @public
- * @enum
- */
-export const IpamAddressHistoryResourceType = {
-  eip: "eip",
-  instance: "instance",
-  network_interface: "network-interface",
-  subnet: "subnet",
-  vpc: "vpc",
-} as const;
+  /**
+   * @public
+   * <p>The instance family.</p>
+   */
+  InstanceFamily: UnlimitedSupportedInstanceFamily | undefined;
+}
 
 /**
  * @public
+ * <p>Describes the default credit option for CPU usage of a burstable performance instance
+ *             family.</p>
  */
-export type IpamAddressHistoryResourceType =
-  (typeof IpamAddressHistoryResourceType)[keyof typeof IpamAddressHistoryResourceType];
+export interface InstanceFamilyCreditSpecification {
+  /**
+   * @public
+   * <p>The instance family.</p>
+   */
+  InstanceFamily?: UnlimitedSupportedInstanceFamily;
 
-/**
- * @public
- * <p>The historical record of a CIDR within an IPAM scope. For more information, see <a href="https://docs.aws.amazon.com/vpc/latest/ipam/view-history-cidr-ipam.html">View the history of IP addresses</a> in the <i>Amazon VPC IPAM User Guide</i>.
- *       </p>
- */
-export interface IpamAddressHistoryRecord {
   /**
    * @public
-   * <p>The ID of the resource owner.</p>
+   * <p>The default credit option for CPU usage of the instance family. Valid values are
+   *                 <code>standard</code> and <code>unlimited</code>.</p>
    */
-  ResourceOwnerId?: string;
+  CpuCredits?: string;
+}
 
+/**
+ * @public
+ */
+export interface GetDefaultCreditSpecificationResult {
   /**
    * @public
-   * <p>The Amazon Web Services Region of the resource.</p>
+   * <p>The default credit option for CPU usage of the instance family.</p>
    */
-  ResourceRegion?: string;
+  InstanceFamilyCreditSpecification?: InstanceFamilyCreditSpecification;
+}
 
+/**
+ * @public
+ */
+export interface GetEbsDefaultKmsKeyIdRequest {
   /**
    * @public
-   * <p>The type of the resource.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  ResourceType?: IpamAddressHistoryResourceType;
+  DryRun?: boolean;
+}
 
+/**
+ * @public
+ */
+export interface GetEbsDefaultKmsKeyIdResult {
   /**
    * @public
-   * <p>The ID of the resource.</p>
+   * <p>The Amazon Resource Name (ARN) of the default KMS key for encryption by default.</p>
    */
-  ResourceId?: string;
+  KmsKeyId?: string;
+}
 
+/**
+ * @public
+ */
+export interface GetEbsEncryptionByDefaultRequest {
   /**
    * @public
-   * <p>The CIDR of the resource.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  ResourceCidr?: string;
+  DryRun?: boolean;
+}
 
+/**
+ * @public
+ */
+export interface GetEbsEncryptionByDefaultResult {
   /**
    * @public
-   * <p>The name of the resource.</p>
+   * <p>Indicates whether encryption by default is enabled.</p>
    */
-  ResourceName?: string;
+  EbsEncryptionByDefault?: boolean;
 
   /**
    * @public
-   * <p>The compliance status of a resource. For more information on compliance statuses, see <a href="https://docs.aws.amazon.com/vpc/latest/ipam/monitor-cidr-compliance-ipam.html">Monitor CIDR usage by resource</a> in the <i>Amazon VPC IPAM User Guide</i>.</p>
+   * <p>Reserved for future use.</p>
    */
-  ResourceComplianceStatus?: IpamComplianceStatus;
+  SseType?: SSEType;
+}
+
+/**
+ * @public
+ * @enum
+ */
+export const PartitionLoadFrequency = {
+  DAILY: "daily",
+  MONTHLY: "monthly",
+  NONE: "none",
+  WEEKLY: "weekly",
+} as const;
+
+/**
+ * @public
+ */
+export type PartitionLoadFrequency = (typeof PartitionLoadFrequency)[keyof typeof PartitionLoadFrequency];
 
+/**
+ * @public
+ * <p>Describes integration options for Amazon Athena.</p>
+ */
+export interface AthenaIntegration {
   /**
    * @public
-   * <p>The overlap status of an IPAM resource. The overlap status tells you if the CIDR for a resource overlaps with another CIDR in the scope. For more information on overlap statuses, see <a href="https://docs.aws.amazon.com/vpc/latest/ipam/monitor-cidr-compliance-ipam.html">Monitor CIDR usage by resource</a> in the <i>Amazon VPC IPAM User Guide</i>.</p>
+   * <p>The location in Amazon S3 to store the generated CloudFormation template.</p>
    */
-  ResourceOverlapStatus?: IpamOverlapStatus;
+  IntegrationResultS3DestinationArn: string | undefined;
 
   /**
    * @public
-   * <p>The VPC ID of the resource.</p>
+   * <p>The schedule for adding new partitions to the table.</p>
    */
-  VpcId?: string;
+  PartitionLoadFrequency: PartitionLoadFrequency | undefined;
 
   /**
    * @public
-   * <p>Sampled start time of the resource-to-CIDR association within the IPAM scope. Changes are picked up in periodic snapshots, so the start time may have occurred before this specific time.</p>
+   * <p>The start date for the partition.</p>
    */
-  SampledStartTime?: Date;
+  PartitionStartDate?: Date;
 
   /**
    * @public
-   * <p>Sampled end time of the resource-to-CIDR association within the IPAM scope. Changes are picked up in periodic snapshots, so the end time may have occurred before this specific time.</p>
+   * <p>The end date for the partition.</p>
    */
-  SampledEndTime?: Date;
+  PartitionEndDate?: Date;
 }
 
 /**
  * @public
+ * <p>Describes service integrations with VPC Flow logs.</p>
  */
-export interface GetIpamAddressHistoryResult {
-  /**
-   * @public
-   * <p>A historical record for a CIDR within an IPAM scope. If the CIDR is associated with an EC2 instance, you will see an object in the response for the instance and one for the network interface.</p>
-   */
-  HistoryRecords?: IpamAddressHistoryRecord[];
-
+export interface IntegrateServices {
   /**
    * @public
-   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
+   * <p>Information about the integration with Amazon Athena.</p>
    */
-  NextToken?: string;
+  AthenaIntegrations?: AthenaIntegration[];
 }
 
 /**
  * @public
  */
-export interface GetIpamDiscoveredAccountsRequest {
+export interface GetFlowLogsIntegrationTemplateRequest {
   /**
    * @public
-   * <p>A check for whether you have the required permissions for the action without actually making the request
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
    *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
    *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
@@ -7180,368 +7380,358 @@ export interface GetIpamDiscoveredAccountsRequest {
 
   /**
    * @public
-   * <p>A resource discovery ID.</p>
-   */
-  IpamResourceDiscoveryId: string | undefined;
-
-  /**
-   * @public
-   * <p>The Amazon Web Services Region that the account information is returned from.</p>
+   * <p>The ID of the flow log.</p>
    */
-  DiscoveryRegion: string | undefined;
+  FlowLogId: string | undefined;
 
   /**
    * @public
-   * <p>Discovered account filters.</p>
+   * <p>To store the CloudFormation template in Amazon S3, specify the location in Amazon S3.</p>
    */
-  Filters?: Filter[];
+  ConfigDeliveryS3DestinationArn: string | undefined;
 
   /**
    * @public
-   * <p>Specify the pagination token from a previous request to retrieve the next page of results.</p>
+   * <p>Information about the service integration.</p>
    */
-  NextToken?: string;
+  IntegrateServices: IntegrateServices | undefined;
+}
 
+/**
+ * @public
+ */
+export interface GetFlowLogsIntegrationTemplateResult {
   /**
    * @public
-   * <p>The maximum number of discovered accounts to return in one page of results.</p>
+   * <p>The generated CloudFormation template.</p>
    */
-  MaxResults?: number;
+  Result?: string;
 }
 
 /**
  * @public
- * @enum
  */
-export const IpamDiscoveryFailureCode = {
-  assume_role_failure: "assume-role-failure",
-  throttling_failure: "throttling-failure",
-  unauthorized_failure: "unauthorized-failure",
-} as const;
+export interface GetGroupsForCapacityReservationRequest {
+  /**
+   * @public
+   * <p>The ID of the Capacity Reservation. If you specify a Capacity Reservation that is shared
+   * 			with you, the operation returns only Capacity Reservation groups that you own.</p>
+   */
+  CapacityReservationId: string | undefined;
 
-/**
- * @public
- */
-export type IpamDiscoveryFailureCode = (typeof IpamDiscoveryFailureCode)[keyof typeof IpamDiscoveryFailureCode];
+  /**
+   * @public
+   * <p>The token to use to retrieve the next page of results.</p>
+   */
+  NextToken?: string;
 
-/**
- * @public
- * <p>The discovery failure reason.</p>
- */
-export interface IpamDiscoveryFailureReason {
   /**
    * @public
-   * <p>The discovery failure code.</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>assume-role-failure</code> - IPAM could not assume the Amazon Web Services IAM service-linked role. This could be because of any of the following:</p>
-   *                <ul>
-   *                   <li>
-   *                      <p>SLR has not been created yet and IPAM is still creating it.</p>
-   *                   </li>
-   *                   <li>
-   *                      <p>You have opted-out of the IPAM home Region.</p>
-   *                   </li>
-   *                   <li>
-   *                      <p>Account you are using as your IPAM account has been suspended.</p>
-   *                   </li>
-   *                </ul>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>throttling-failure</code> - IPAM account is already using the allotted transactions per second and IPAM is receiving a throttling error when assuming the Amazon Web Services IAM SLR.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>unauthorized-failure</code> - Amazon Web Services account making the request is not authorized. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/errors-overview.html">AuthFailure</a> in the <i>Amazon Elastic Compute Cloud API Reference</i>.</p>
-   *             </li>
-   *          </ul>
+   * <p>The maximum number of results to return for the request in a single page. The remaining results can be seen by sending another request with the returned <code>nextToken</code> value. This value can be between 5 and 500. If <code>maxResults</code> is given a larger value than 500, you receive an error.</p>
    */
-  Code?: IpamDiscoveryFailureCode;
+  MaxResults?: number;
 
   /**
    * @public
-   * <p>The discovery failure message.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  Message?: string;
+  DryRun?: boolean;
 }
 
 /**
  * @public
- * <p>An IPAM discovered account. A discovered account is an Amazon Web Services account that is monitored under a resource discovery. If you have integrated IPAM with Amazon Web Services Organizations, all accounts in the organization are discovered accounts.</p>
+ * <p>Describes a resource group to which a Capacity Reservation has been added.</p>
  */
-export interface IpamDiscoveredAccount {
-  /**
-   * @public
-   * <p>The account ID.</p>
-   */
-  AccountId?: string;
-
+export interface CapacityReservationGroup {
   /**
    * @public
-   * <p>The Amazon Web Services Region that the account information is returned from.
-   *          An account can be discovered in multiple regions and will have a separate discovered account for each Region.</p>
+   * <p>The ARN of the resource group.</p>
    */
-  DiscoveryRegion?: string;
+  GroupArn?: string;
 
   /**
    * @public
-   * <p>The resource discovery failure reason.</p>
+   * <p>The ID of the Amazon Web Services account that owns the resource group.</p>
    */
-  FailureReason?: IpamDiscoveryFailureReason;
+  OwnerId?: string;
+}
 
+/**
+ * @public
+ */
+export interface GetGroupsForCapacityReservationResult {
   /**
    * @public
-   * <p>The last attempted resource discovery time.</p>
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
    */
-  LastAttemptedDiscoveryTime?: Date;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The last successful resource discovery time.</p>
+   * <p>Information about the resource groups to which the Capacity Reservation has been added.</p>
    */
-  LastSuccessfulDiscoveryTime?: Date;
+  CapacityReservationGroups?: CapacityReservationGroup[];
 }
 
 /**
  * @public
  */
-export interface GetIpamDiscoveredAccountsResult {
+export interface GetHostReservationPurchasePreviewRequest {
   /**
    * @public
-   * <p>Discovered accounts.</p>
+   * <p>The IDs of the Dedicated Hosts with which the reservation is associated.</p>
    */
-  IpamDiscoveredAccounts?: IpamDiscoveredAccount[];
+  HostIdSet: string[] | undefined;
 
   /**
    * @public
-   * <p>Specify the pagination token from a previous request to retrieve the next page of results.</p>
+   * <p>The offering ID of the reservation.</p>
    */
-  NextToken?: string;
+  OfferingId: string | undefined;
 }
 
 /**
  * @public
+ * <p>Describes the result of the purchase.</p>
  */
-export interface GetIpamDiscoveredResourceCidrsRequest {
+export interface Purchase {
   /**
    * @public
-   * <p>A check for whether you have the required permissions for the action without actually making the request
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The currency in which the <code>UpfrontPrice</code> and <code>HourlyPrice</code>
+   *             amounts are specified. At this time, the only supported currency is
+   *             <code>USD</code>.</p>
    */
-  DryRun?: boolean;
+  CurrencyCode?: CurrencyCodeValues;
 
   /**
    * @public
-   * <p>A resource discovery ID.</p>
+   * <p>The duration of the reservation's term in seconds.</p>
    */
-  IpamResourceDiscoveryId: string | undefined;
+  Duration?: number;
 
   /**
    * @public
-   * <p>A resource Region.</p>
+   * <p>The IDs of the Dedicated Hosts associated with the reservation.</p>
    */
-  ResourceRegion: string | undefined;
+  HostIdSet?: string[];
 
   /**
    * @public
-   * <p>Filters.</p>
+   * <p>The ID of the reservation.</p>
    */
-  Filters?: Filter[];
+  HostReservationId?: string;
 
   /**
    * @public
-   * <p>Specify the pagination token from a previous request to retrieve the next page of results.</p>
+   * <p>The hourly price of the reservation per hour.</p>
    */
-  NextToken?: string;
+  HourlyPrice?: string;
 
   /**
    * @public
-   * <p>The maximum number of discovered resource CIDRs to return in one page of results.</p>
+   * <p>The instance family on the Dedicated Host that the reservation can be associated
+   *             with.</p>
    */
-  MaxResults?: number;
-}
-
-/**
- * @public
- * @enum
- */
-export const IpamResourceType = {
-  eip: "eip",
-  ipv6_pool: "ipv6-pool",
-  public_ipv4_pool: "public-ipv4-pool",
-  subnet: "subnet",
-  vpc: "vpc",
-} as const;
-
-/**
- * @public
- */
-export type IpamResourceType = (typeof IpamResourceType)[keyof typeof IpamResourceType];
+  InstanceFamily?: string;
 
-/**
- * @public
- * <p>An IPAM discovered resource CIDR. A discovered resource is a resource CIDR monitored under a resource discovery. The following resources can be discovered: VPCs, Public IPv4 pools, VPC subnets, and Elastic IP addresses. The discovered resource CIDR is the IP address range in CIDR notation that is associated with the resource.</p>
- */
-export interface IpamDiscoveredResourceCidr {
   /**
    * @public
-   * <p>The resource discovery ID.</p>
+   * <p>The payment option for the reservation.</p>
    */
-  IpamResourceDiscoveryId?: string;
+  PaymentOption?: PaymentOption;
 
   /**
    * @public
-   * <p>The resource Region.</p>
+   * <p>The upfront price of the reservation.</p>
    */
-  ResourceRegion?: string;
+  UpfrontPrice?: string;
+}
 
+/**
+ * @public
+ */
+export interface GetHostReservationPurchasePreviewResult {
   /**
    * @public
-   * <p>The resource ID.</p>
+   * <p>The currency in which the <code>totalUpfrontPrice</code> and
+   *                 <code>totalHourlyPrice</code> amounts are specified. At this time, the only
+   *             supported currency is <code>USD</code>.</p>
    */
-  ResourceId?: string;
+  CurrencyCode?: CurrencyCodeValues;
 
   /**
    * @public
-   * <p>The resource owner ID.</p>
+   * <p>The purchase information of the Dedicated Host reservation and the Dedicated Hosts
+   *             associated with it.</p>
    */
-  ResourceOwnerId?: string;
+  Purchase?: Purchase[];
 
   /**
    * @public
-   * <p>The resource CIDR.</p>
+   * <p>The potential total hourly price of the reservation per hour.</p>
    */
-  ResourceCidr?: string;
+  TotalHourlyPrice?: string;
 
   /**
    * @public
-   * <p>The resource type.</p>
+   * <p>The potential total upfront price. This is billed immediately.</p>
    */
-  ResourceType?: IpamResourceType;
+  TotalUpfrontPrice?: string;
+}
 
+/**
+ * @public
+ */
+export interface GetImageBlockPublicAccessStateRequest {
   /**
    * @public
-   * <p>The resource tags.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   * 			and provides an error response. If you have the required permissions, the error response is
+   * 			<code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  ResourceTags?: IpamResourceTag[];
+  DryRun?: boolean;
+}
 
+/**
+ * @public
+ */
+export interface GetImageBlockPublicAccessStateResult {
   /**
    * @public
-   * <p>The percentage of IP address space in use. To convert the decimal to a percentage, multiply the decimal by 100. Note the following:</p>
+   * <p>The current state of block public access for AMIs at the account level in the specified
+   *       Amazon Web Services Region.</p>
+   *          <p>Possible values:</p>
    *          <ul>
    *             <li>
-   *                <p>For resources that are VPCs, this is the percentage of IP address space in the VPC that's taken up by subnet CIDRs.
-   *          </p>
-   *             </li>
-   *             <li>
-   *                <p>For resources that are subnets, if the subnet has an IPv4 CIDR provisioned to it, this is the percentage of IPv4 address space in the subnet that's in use. If the subnet has an IPv6 CIDR provisioned to it, the percentage of IPv6 address space in use is not represented. The percentage of IPv6 address space in use cannot currently be calculated.
-   *          </p>
+   *                <p>
+   *                   <code>block-new-sharing</code> - Any attempt to publicly share your AMIs in the
+   *           specified Region is blocked.</p>
    *             </li>
    *             <li>
-   *                <p>For resources that are public IPv4 pools, this is the percentage of IP address space in the pool that's been allocated to Elastic IP addresses (EIPs).
-   *          </p>
+   *                <p>
+   *                   <code>unblocked</code> - Your AMIs in the specified Region can be publicly
+   *           shared.</p>
    *             </li>
    *          </ul>
    */
-  IpUsage?: number;
+  ImageBlockPublicAccessState?: string;
+}
 
+/**
+ * @public
+ */
+export interface GetInstanceTypesFromInstanceRequirementsRequest {
   /**
    * @public
-   * <p>The VPC ID.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  VpcId?: string;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The last successful resource discovery time.</p>
+   * <p>The processor architecture type.</p>
    */
-  SampleTime?: Date;
-}
+  ArchitectureTypes: ArchitectureType[] | undefined;
 
-/**
- * @public
- */
-export interface GetIpamDiscoveredResourceCidrsResult {
   /**
    * @public
-   * <p>Discovered resource CIDRs.</p>
+   * <p>The virtualization type.</p>
    */
-  IpamDiscoveredResourceCidrs?: IpamDiscoveredResourceCidr[];
+  VirtualizationTypes: VirtualizationType[] | undefined;
 
   /**
    * @public
-   * <p>Specify the pagination token from a previous request to retrieve the next page of results.</p>
+   * <p>The attributes required for the instance types.</p>
+   */
+  InstanceRequirements: InstanceRequirementsRequest | undefined;
+
+  /**
+   * @public
+   * <p>The maximum number of items to return for this request.
+   *          To get the next page of items, make another request with the token returned in the output.
+   * 	        For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
+   */
+  MaxResults?: number;
+
+  /**
+   * @public
+   * <p>The token returned from a previous paginated request. Pagination continues from the end of the items returned by the previous request.</p>
    */
   NextToken?: string;
 }
 
 /**
  * @public
+ * <p>The list of instance types with the specified instance attributes.</p>
  */
-export interface GetIpamPoolAllocationsRequest {
-  /**
-   * @public
-   * <p>A check for whether you have the required permissions for the action without actually making the request
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-   */
-  DryRun?: boolean;
-
+export interface InstanceTypeInfoFromInstanceRequirements {
   /**
    * @public
-   * <p>The ID of the IPAM pool you want to see the allocations for.</p>
+   * <p>The matching instance type.</p>
    */
-  IpamPoolId: string | undefined;
+  InstanceType?: string;
+}
 
+/**
+ * @public
+ */
+export interface GetInstanceTypesFromInstanceRequirementsResult {
   /**
    * @public
-   * <p>The ID of the allocation.</p>
+   * <p>The instance types with the specified instance attributes.</p>
    */
-  IpamPoolAllocationId?: string;
+  InstanceTypes?: InstanceTypeInfoFromInstanceRequirements[];
 
   /**
    * @public
-   * <p>One or more filters for the request. For more information about filtering, see <a href="https://docs.aws.amazon.com/cli/latest/userguide/cli-usage-filter.html">Filtering CLI output</a>.</p>
+   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there
+   *          are no more items to return.</p>
    */
-  Filters?: Filter[];
+  NextToken?: string;
+}
 
+/**
+ * @public
+ */
+export interface GetInstanceUefiDataRequest {
   /**
    * @public
-   * <p>The maximum number of results you would like returned per page.</p>
+   * <p>The ID of the instance from which to retrieve the UEFI data.</p>
    */
-  MaxResults?: number;
+  InstanceId: string | undefined;
 
   /**
    * @public
-   * <p>The token for the next page of results.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  NextToken?: string;
+  DryRun?: boolean;
 }
 
 /**
  * @public
  */
-export interface GetIpamPoolAllocationsResult {
+export interface GetInstanceUefiDataResult {
   /**
    * @public
-   * <p>The IPAM pool allocations you want information on.</p>
+   * <p>The ID of the instance from which to retrieve the UEFI data.</p>
    */
-  IpamPoolAllocations?: IpamPoolAllocation[];
+  InstanceId?: string;
 
   /**
    * @public
-   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
+   * <p>Base64 representation of the non-volatile UEFI variable store.</p>
    */
-  NextToken?: string;
+  UefiData?: string;
 }
 
 /**
  * @public
  */
-export interface GetIpamPoolCidrsRequest {
+export interface GetIpamAddressHistoryRequest {
   /**
    * @public
    * <p>A check for whether you have the required permissions for the action without actually making the request
@@ -7552,293 +7742,349 @@ export interface GetIpamPoolCidrsRequest {
 
   /**
    * @public
-   * <p>The ID of the IPAM pool you want the CIDR for.</p>
+   * <p>The CIDR you want the history of. The CIDR can be an IPv4 or IPv6 IP address range.
+   *          If you enter a /16 IPv4 CIDR, you will get records that match it exactly. You will not get records for any subnets within the /16 CIDR.</p>
    */
-  IpamPoolId: string | undefined;
+  Cidr: string | undefined;
 
   /**
    * @public
-   * <p>One or more filters for the request. For more information about filtering, see <a href="https://docs.aws.amazon.com/cli/latest/userguide/cli-usage-filter.html">Filtering CLI output</a>.</p>
+   * <p>The ID of the IPAM scope that the CIDR is in.</p>
    */
-  Filters?: Filter[];
+  IpamScopeId: string | undefined;
 
   /**
    * @public
-   * <p>The maximum number of results to return in the request.</p>
+   * <p>The ID of the VPC you want your history records filtered by.</p>
    */
-  MaxResults?: number;
+  VpcId?: string;
 
   /**
    * @public
-   * <p>The token for the next page of results.</p>
+   * <p>The start of the time period for which you are looking for history. If you omit this option, it will default to the value of EndTime.</p>
    */
-  NextToken?: string;
-}
+  StartTime?: Date;
 
-/**
- * @public
- */
-export interface GetIpamPoolCidrsResult {
   /**
    * @public
-   * <p>Information about the CIDRs provisioned to an IPAM pool.</p>
+   * <p>The end of the time period for which you are looking for history. If you omit this option, it will default to the current time.</p>
    */
-  IpamPoolCidrs?: IpamPoolCidr[];
+  EndTime?: Date;
 
   /**
    * @public
-   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
+   * <p>The maximum number of historical results you would like returned per page. Defaults to 100.</p>
+   */
+  MaxResults?: number;
+
+  /**
+   * @public
+   * <p>The token for the next page of results.</p>
    */
   NextToken?: string;
 }
 
 /**
  * @public
+ * @enum
+ */
+export const IpamComplianceStatus = {
+  compliant: "compliant",
+  ignored: "ignored",
+  noncompliant: "noncompliant",
+  unmanaged: "unmanaged",
+} as const;
+
+/**
+ * @public
+ */
+export type IpamComplianceStatus = (typeof IpamComplianceStatus)[keyof typeof IpamComplianceStatus];
+
+/**
+ * @public
+ * @enum
+ */
+export const IpamOverlapStatus = {
+  ignored: "ignored",
+  nonoverlapping: "nonoverlapping",
+  overlapping: "overlapping",
+} as const;
+
+/**
+ * @public
+ */
+export type IpamOverlapStatus = (typeof IpamOverlapStatus)[keyof typeof IpamOverlapStatus];
+
+/**
+ * @public
+ * @enum
+ */
+export const IpamAddressHistoryResourceType = {
+  eip: "eip",
+  instance: "instance",
+  network_interface: "network-interface",
+  subnet: "subnet",
+  vpc: "vpc",
+} as const;
+
+/**
+ * @public
+ */
+export type IpamAddressHistoryResourceType =
+  (typeof IpamAddressHistoryResourceType)[keyof typeof IpamAddressHistoryResourceType];
+
+/**
+ * @public
+ * <p>The historical record of a CIDR within an IPAM scope. For more information, see <a href="https://docs.aws.amazon.com/vpc/latest/ipam/view-history-cidr-ipam.html">View the history of IP addresses</a> in the <i>Amazon VPC IPAM User Guide</i>.
+ *       </p>
  */
-export interface GetIpamResourceCidrsRequest {
+export interface IpamAddressHistoryRecord {
   /**
    * @public
-   * <p>A check for whether you have the required permissions for the action without actually making the request
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The ID of the resource owner.</p>
+   */
+  ResourceOwnerId?: string;
+
+  /**
+   * @public
+   * <p>The Amazon Web Services Region of the resource.</p>
    */
-  DryRun?: boolean;
+  ResourceRegion?: string;
 
   /**
    * @public
-   * <p>One or more filters for the request. For more information about filtering, see <a href="https://docs.aws.amazon.com/cli/latest/userguide/cli-usage-filter.html">Filtering CLI output</a>.</p>
+   * <p>The type of the resource.</p>
    */
-  Filters?: Filter[];
+  ResourceType?: IpamAddressHistoryResourceType;
 
   /**
    * @public
-   * <p>The maximum number of results to return in the request.</p>
+   * <p>The ID of the resource.</p>
    */
-  MaxResults?: number;
+  ResourceId?: string;
 
   /**
    * @public
-   * <p>The token for the next page of results.</p>
+   * <p>The CIDR of the resource.</p>
    */
-  NextToken?: string;
+  ResourceCidr?: string;
 
   /**
    * @public
-   * <p>The ID of the scope that the resource is in.</p>
+   * <p>The name of the resource.</p>
    */
-  IpamScopeId: string | undefined;
+  ResourceName?: string;
 
   /**
    * @public
-   * <p>The ID of the IPAM pool that the resource is in.</p>
+   * <p>The compliance status of a resource. For more information on compliance statuses, see <a href="https://docs.aws.amazon.com/vpc/latest/ipam/monitor-cidr-compliance-ipam.html">Monitor CIDR usage by resource</a> in the <i>Amazon VPC IPAM User Guide</i>.</p>
    */
-  IpamPoolId?: string;
+  ResourceComplianceStatus?: IpamComplianceStatus;
 
   /**
    * @public
-   * <p>The ID of the resource.</p>
+   * <p>The overlap status of an IPAM resource. The overlap status tells you if the CIDR for a resource overlaps with another CIDR in the scope. For more information on overlap statuses, see <a href="https://docs.aws.amazon.com/vpc/latest/ipam/monitor-cidr-compliance-ipam.html">Monitor CIDR usage by resource</a> in the <i>Amazon VPC IPAM User Guide</i>.</p>
    */
-  ResourceId?: string;
+  ResourceOverlapStatus?: IpamOverlapStatus;
 
   /**
    * @public
-   * <p>The resource type.</p>
+   * <p>The VPC ID of the resource.</p>
    */
-  ResourceType?: IpamResourceType;
+  VpcId?: string;
 
   /**
    * @public
-   * <p>The resource tag.</p>
+   * <p>Sampled start time of the resource-to-CIDR association within the IPAM scope. Changes are picked up in periodic snapshots, so the start time may have occurred before this specific time.</p>
    */
-  ResourceTag?: RequestIpamResourceTag;
+  SampledStartTime?: Date;
 
   /**
    * @public
-   * <p>The ID of the Amazon Web Services account that owns the resource.</p>
+   * <p>Sampled end time of the resource-to-CIDR association within the IPAM scope. Changes are picked up in periodic snapshots, so the end time may have occurred before this specific time.</p>
    */
-  ResourceOwner?: string;
+  SampledEndTime?: Date;
 }
 
 /**
  * @public
- * @enum
- */
-export const IpamManagementState = {
-  ignored: "ignored",
-  managed: "managed",
-  unmanaged: "unmanaged",
-} as const;
-
-/**
- * @public
- */
-export type IpamManagementState = (typeof IpamManagementState)[keyof typeof IpamManagementState];
-
-/**
- * @public
- * <p>The CIDR for an IPAM resource.</p>
  */
-export interface IpamResourceCidr {
+export interface GetIpamAddressHistoryResult {
   /**
    * @public
-   * <p>The IPAM ID for an IPAM resource.</p>
+   * <p>A historical record for a CIDR within an IPAM scope. If the CIDR is associated with an EC2 instance, you will see an object in the response for the instance and one for the network interface.</p>
    */
-  IpamId?: string;
+  HistoryRecords?: IpamAddressHistoryRecord[];
 
   /**
    * @public
-   * <p>The scope ID for an IPAM resource.</p>
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
    */
-  IpamScopeId?: string;
+  NextToken?: string;
+}
 
+/**
+ * @public
+ */
+export interface GetIpamDiscoveredAccountsRequest {
   /**
    * @public
-   * <p>The pool ID for an IPAM resource.</p>
+   * <p>A check for whether you have the required permissions for the action without actually making the request
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  IpamPoolId?: string;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The Amazon Web Services Region for an IPAM resource.</p>
+   * <p>A resource discovery ID.</p>
    */
-  ResourceRegion?: string;
+  IpamResourceDiscoveryId: string | undefined;
 
   /**
    * @public
-   * <p>The Amazon Web Services account number of the owner of an IPAM resource.</p>
+   * <p>The Amazon Web Services Region that the account information is returned from.</p>
    */
-  ResourceOwnerId?: string;
+  DiscoveryRegion: string | undefined;
 
   /**
    * @public
-   * <p>The ID of an IPAM resource.</p>
+   * <p>Discovered account filters.</p>
    */
-  ResourceId?: string;
+  Filters?: Filter[];
 
   /**
    * @public
-   * <p>The name of an IPAM resource.</p>
+   * <p>Specify the pagination token from a previous request to retrieve the next page of results.</p>
    */
-  ResourceName?: string;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The CIDR for an IPAM resource.</p>
+   * <p>The maximum number of discovered accounts to return in one page of results.</p>
    */
-  ResourceCidr?: string;
+  MaxResults?: number;
+}
 
-  /**
-   * @public
-   * <p>The type of IPAM resource.</p>
-   */
-  ResourceType?: IpamResourceType;
+/**
+ * @public
+ * @enum
+ */
+export const IpamDiscoveryFailureCode = {
+  assume_role_failure: "assume-role-failure",
+  throttling_failure: "throttling-failure",
+  unauthorized_failure: "unauthorized-failure",
+} as const;
 
-  /**
-   * @public
-   * <p>The tags for an IPAM resource.</p>
-   */
-  ResourceTags?: IpamResourceTag[];
+/**
+ * @public
+ */
+export type IpamDiscoveryFailureCode = (typeof IpamDiscoveryFailureCode)[keyof typeof IpamDiscoveryFailureCode];
 
+/**
+ * @public
+ * <p>The discovery failure reason.</p>
+ */
+export interface IpamDiscoveryFailureReason {
   /**
    * @public
-   * <p>The percentage of IP address space in use. To convert the decimal to a percentage, multiply the decimal by 100. Note the following:</p>
+   * <p>The discovery failure code.</p>
    *          <ul>
    *             <li>
-   *                <p>For resources that are VPCs, this is the percentage of IP address space in the VPC that's taken up by subnet CIDRs.
-   *          </p>
+   *                <p>
+   *                   <code>assume-role-failure</code> - IPAM could not assume the Amazon Web Services IAM service-linked role. This could be because of any of the following:</p>
+   *                <ul>
+   *                   <li>
+   *                      <p>SLR has not been created yet and IPAM is still creating it.</p>
+   *                   </li>
+   *                   <li>
+   *                      <p>You have opted-out of the IPAM home Region.</p>
+   *                   </li>
+   *                   <li>
+   *                      <p>Account you are using as your IPAM account has been suspended.</p>
+   *                   </li>
+   *                </ul>
    *             </li>
    *             <li>
-   *                <p>For resources that are subnets, if the subnet has an IPv4 CIDR provisioned to it, this is the percentage of IPv4 address space in the subnet that's in use. If the subnet has an IPv6 CIDR provisioned to it, the percentage of IPv6 address space in use is not represented. The percentage of IPv6 address space in use cannot currently be calculated.
-   *          </p>
+   *                <p>
+   *                   <code>throttling-failure</code> - IPAM account is already using the allotted transactions per second and IPAM is receiving a throttling error when assuming the Amazon Web Services IAM SLR.</p>
    *             </li>
    *             <li>
-   *                <p>For resources that are public IPv4 pools, this is the percentage of IP address space in the pool that's been allocated to Elastic IP addresses (EIPs).
-   *          </p>
+   *                <p>
+   *                   <code>unauthorized-failure</code> - Amazon Web Services account making the request is not authorized. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/errors-overview.html">AuthFailure</a> in the <i>Amazon Elastic Compute Cloud API Reference</i>.</p>
    *             </li>
    *          </ul>
    */
-  IpUsage?: number;
+  Code?: IpamDiscoveryFailureCode;
 
   /**
    * @public
-   * <p>The compliance status of the IPAM resource. For more information on compliance statuses, see <a href="https://docs.aws.amazon.com/vpc/latest/ipam/monitor-cidr-compliance-ipam.html">Monitor CIDR usage by resource</a> in the <i>Amazon VPC IPAM User Guide</i>.</p>
+   * <p>The discovery failure message.</p>
    */
-  ComplianceStatus?: IpamComplianceStatus;
+  Message?: string;
+}
 
+/**
+ * @public
+ * <p>An IPAM discovered account. A discovered account is an Amazon Web Services account that is monitored under a resource discovery. If you have integrated IPAM with Amazon Web Services Organizations, all accounts in the organization are discovered accounts.</p>
+ */
+export interface IpamDiscoveredAccount {
   /**
    * @public
-   * <p>The management state of the resource. For more information about management states, see <a href="https://docs.aws.amazon.com/vpc/latest/ipam/monitor-cidr-compliance-ipam.html">Monitor CIDR usage by resource</a> in the <i>Amazon VPC IPAM User Guide</i>.</p>
+   * <p>The account ID.</p>
    */
-  ManagementState?: IpamManagementState;
+  AccountId?: string;
 
   /**
    * @public
-   * <p>The overlap status of an IPAM resource. The overlap status tells you if the CIDR for a resource overlaps with another CIDR in the scope. For more information on overlap statuses, see <a href="https://docs.aws.amazon.com/vpc/latest/ipam/monitor-cidr-compliance-ipam.html">Monitor CIDR usage by resource</a> in the <i>Amazon VPC IPAM User Guide</i>.</p>
+   * <p>The Amazon Web Services Region that the account information is returned from.
+   *          An account can be discovered in multiple regions and will have a separate discovered account for each Region.</p>
    */
-  OverlapStatus?: IpamOverlapStatus;
+  DiscoveryRegion?: string;
 
   /**
    * @public
-   * <p>The ID of a VPC.</p>
+   * <p>The resource discovery failure reason.</p>
    */
-  VpcId?: string;
-}
+  FailureReason?: IpamDiscoveryFailureReason;
 
-/**
- * @public
- */
-export interface GetIpamResourceCidrsResult {
   /**
    * @public
-   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
+   * <p>The last attempted resource discovery time.</p>
    */
-  NextToken?: string;
+  LastAttemptedDiscoveryTime?: Date;
 
   /**
    * @public
-   * <p>The resource CIDRs.</p>
+   * <p>The last successful resource discovery time.</p>
    */
-  IpamResourceCidrs?: IpamResourceCidr[];
+  LastSuccessfulDiscoveryTime?: Date;
 }
 
 /**
  * @public
  */
-export interface GetLaunchTemplateDataRequest {
-  /**
-   * @public
-   * <p>Checks whether you have the required permissions for the action, without actually
-   *             making the request, and provides an error response. If you have the required
-   *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
-   *                 <code>UnauthorizedOperation</code>.</p>
-   */
-  DryRun?: boolean;
-
+export interface GetIpamDiscoveredAccountsResult {
   /**
    * @public
-   * <p>The ID of the instance.</p>
+   * <p>Discovered accounts.</p>
    */
-  InstanceId: string | undefined;
-}
+  IpamDiscoveredAccounts?: IpamDiscoveredAccount[];
 
-/**
- * @public
- */
-export interface GetLaunchTemplateDataResult {
   /**
    * @public
-   * <p>The instance data.</p>
+   * <p>Specify the pagination token from a previous request to retrieve the next page of results.</p>
    */
-  LaunchTemplateData?: ResponseLaunchTemplateData;
+  NextToken?: string;
 }
 
 /**
  * @public
  */
-export interface GetManagedPrefixListAssociationsRequest {
+export interface GetIpamDiscoveredPublicAddressesRequest {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   * <p>A check for whether you have the required permissions for the action without actually making the request
    *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
    *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
@@ -7846,575 +8092,550 @@ export interface GetManagedPrefixListAssociationsRequest {
 
   /**
    * @public
-   * <p>The ID of the prefix list.</p>
+   * <p>An IPAM resource discovery ID.</p>
    */
-  PrefixListId: string | undefined;
+  IpamResourceDiscoveryId: string | undefined;
 
   /**
    * @public
-   * <p>The maximum number of results to return with a single call.
-   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
+   * <p>The Amazon Web Services Region for the IP address.</p>
    */
-  MaxResults?: number;
+  AddressRegion: string | undefined;
 
   /**
    * @public
-   * <p>The token for the next page of results.</p>
+   * <p>Filters.</p>
    */
-  NextToken?: string;
-}
+  Filters?: Filter[];
 
-/**
- * @public
- * <p>Describes the resource with which a prefix list is associated.</p>
- */
-export interface PrefixListAssociation {
   /**
    * @public
-   * <p>The ID of the resource.</p>
+   * <p>The token for the next page of results.</p>
    */
-  ResourceId?: string;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The owner of the resource.</p>
+   * <p>The maximum number of IPAM discovered public addresses to return in one page of results.</p>
    */
-  ResourceOwner?: string;
+  MaxResults?: number;
 }
 
 /**
  * @public
+ * @enum
+ */
+export const IpamPublicAddressType = {
+  AMAZON_OWNED_EIP: "amazon-owned-eip",
+  BYOIP: "byoip",
+  EC2_PUBLIC_IP: "ec2-public-ip",
+  SERVICE_MANAGED_BYOIP: "service-managed-byoip",
+  SERVICE_MANAGED_IP: "service-managed-ip",
+} as const;
+
+/**
+ * @public
+ */
+export type IpamPublicAddressType = (typeof IpamPublicAddressType)[keyof typeof IpamPublicAddressType];
+
+/**
+ * @public
+ * @enum
+ */
+export const IpamPublicAddressAssociationStatus = {
+  ASSOCIATED: "associated",
+  DISASSOCIATED: "disassociated",
+} as const;
+
+/**
+ * @public
+ */
+export type IpamPublicAddressAssociationStatus =
+  (typeof IpamPublicAddressAssociationStatus)[keyof typeof IpamPublicAddressAssociationStatus];
+
+/**
+ * @public
+ * <p>The security group that the resource with the public IP address is in.</p>
  */
-export interface GetManagedPrefixListAssociationsResult {
+export interface IpamPublicAddressSecurityGroup {
   /**
    * @public
-   * <p>Information about the associations.</p>
+   * <p>The security group's name.</p>
    */
-  PrefixListAssociations?: PrefixListAssociation[];
+  GroupName?: string;
 
   /**
    * @public
-   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
+   * <p>The security group's ID.</p>
    */
-  NextToken?: string;
+  GroupId?: string;
 }
 
+/**
+ * @public
+ * @enum
+ */
+export const IpamPublicAddressAwsService = {
+  AGA: "global-accelerator",
+  DMS: "database-migration-service",
+  EC2_LB: "load-balancer",
+  ECS: "elastic-container-service",
+  NAT_GATEWAY: "nat-gateway",
+  OTHER: "other",
+  RDS: "relational-database-service",
+  REDSHIFT: "redshift",
+  S2S_VPN: "site-to-site-vpn",
+} as const;
+
 /**
  * @public
  */
-export interface GetManagedPrefixListEntriesRequest {
+export type IpamPublicAddressAwsService =
+  (typeof IpamPublicAddressAwsService)[keyof typeof IpamPublicAddressAwsService];
+
+/**
+ * @public
+ * <p>A tag for a public IP address discovered by IPAM.</p>
+ */
+export interface IpamPublicAddressTag {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The tag's key.</p>
    */
-  DryRun?: boolean;
+  Key?: string;
 
   /**
    * @public
-   * <p>The ID of the prefix list.</p>
+   * <p>The tag's value.</p>
    */
-  PrefixListId: string | undefined;
+  Value?: string;
+}
 
+/**
+ * @public
+ * <p>Tags for a public IP address discovered by IPAM.</p>
+ */
+export interface IpamPublicAddressTags {
   /**
    * @public
-   * <p>The version of the prefix list for which to return the entries. The default is the current version.</p>
+   * <p>Tags for an Elastic IP address.</p>
    */
-  TargetVersion?: number;
+  EipTags?: IpamPublicAddressTag[];
+}
 
+/**
+ * @public
+ * <p>A public IP Address discovered by IPAM.</p>
+ */
+export interface IpamDiscoveredPublicAddress {
   /**
    * @public
-   * <p>The maximum number of results to return with a single call.
-   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
+   * <p>The resource discovery ID.</p>
    */
-  MaxResults?: number;
+  IpamResourceDiscoveryId?: string;
 
   /**
    * @public
-   * <p>The token for the next page of results.</p>
+   * <p>The Region of the resource the IP address is assigned to.</p>
    */
-  NextToken?: string;
-}
+  AddressRegion?: string;
 
-/**
- * @public
- * <p>Describes a prefix list entry.</p>
- */
-export interface PrefixListEntry {
   /**
    * @public
-   * <p>The CIDR block.</p>
+   * <p>The IP address.</p>
    */
-  Cidr?: string;
+  Address?: string;
 
   /**
    * @public
-   * <p>The description.</p>
+   * <p>The ID of the owner of the resource the IP address is assigned to.</p>
    */
-  Description?: string;
-}
+  AddressOwnerId?: string;
 
-/**
- * @public
- */
-export interface GetManagedPrefixListEntriesResult {
   /**
    * @public
-   * <p>Information about the prefix list entries.</p>
+   * <p>The allocation ID of the resource the IP address is assigned to.</p>
    */
-  Entries?: PrefixListEntry[];
+  AddressAllocationId?: string;
 
   /**
    * @public
-   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
+   * <p>The association status.</p>
    */
-  NextToken?: string;
-}
+  AssociationStatus?: IpamPublicAddressAssociationStatus;
 
-/**
- * @public
- */
-export interface GetNetworkInsightsAccessScopeAnalysisFindingsRequest {
   /**
    * @public
-   * <p>The ID of the Network Access Scope analysis.</p>
+   * <p>The IP address type.</p>
    */
-  NetworkInsightsAccessScopeAnalysisId: string | undefined;
+  AddressType?: IpamPublicAddressType;
 
   /**
    * @public
-   * <p>The maximum number of results to return with a single call.
-   *    To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
+   * <p>The Amazon Web Services service associated with the IP address.</p>
    */
-  MaxResults?: number;
+  Service?: IpamPublicAddressAwsService;
 
   /**
    * @public
-   * <p>The token for the next page of results.</p>
+   * <p>The resource ARN or ID.</p>
    */
-  NextToken?: string;
+  ServiceResource?: string;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The ID of the VPC that the resource with the assigned IP address is in.</p>
    */
-  DryRun?: boolean;
-}
+  VpcId?: string;
 
-/**
- * @public
- */
-export interface GetNetworkInsightsAccessScopeAnalysisFindingsResult {
   /**
    * @public
-   * <p>The ID of the Network Access Scope analysis.</p>
+   * <p>The ID of the subnet that the resource with the assigned IP address is in.</p>
    */
-  NetworkInsightsAccessScopeAnalysisId?: string;
+  SubnetId?: string;
 
   /**
    * @public
-   * <p>The status of Network Access Scope Analysis.</p>
+   * <p>The ID of the public IPv4 pool that the resource with the assigned IP address is from.</p>
    */
-  AnalysisStatus?: AnalysisStatus;
+  PublicIpv4PoolId?: string;
 
   /**
    * @public
-   * <p>The findings associated with Network Access Scope Analysis.</p>
+   * <p>The network interface ID of the resource with the assigned IP address.</p>
    */
-  AnalysisFindings?: AccessScopeAnalysisFinding[];
+  NetworkInterfaceId?: string;
 
   /**
    * @public
-   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
+   * <p>The description of the network interface that IP address is assigned to.</p>
    */
-  NextToken?: string;
-}
+  NetworkInterfaceDescription?: string;
 
-/**
- * @public
- */
-export interface GetNetworkInsightsAccessScopeContentRequest {
   /**
    * @public
-   * <p>The ID of the Network Access Scope.</p>
+   * <p>The instance ID of the instance the assigned IP address is assigned to.</p>
    */
-  NetworkInsightsAccessScopeId: string | undefined;
+  InstanceId?: string;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>Tags associated with the IP address.</p>
    */
-  DryRun?: boolean;
-}
+  Tags?: IpamPublicAddressTags;
 
-/**
- * @public
- */
-export interface GetNetworkInsightsAccessScopeContentResult {
   /**
    * @public
-   * <p>The Network Access Scope content.</p>
+   * <p>The network border group that the resource that the IP address is assigned to is in.</p>
    */
-  NetworkInsightsAccessScopeContent?: NetworkInsightsAccessScopeContent;
-}
+  NetworkBorderGroup?: string;
 
-/**
- * @public
- */
-export interface GetPasswordDataRequest {
   /**
    * @public
-   * <p>The ID of the Windows instance.</p>
+   * <p>Security groups associated with the resource that the IP address is assigned to.</p>
    */
-  InstanceId: string | undefined;
+  SecurityGroups?: IpamPublicAddressSecurityGroup[];
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The last successful resource discovery time.</p>
    */
-  DryRun?: boolean;
+  SampleTime?: Date;
 }
 
 /**
  * @public
  */
-export interface GetPasswordDataResult {
+export interface GetIpamDiscoveredPublicAddressesResult {
   /**
    * @public
-   * <p>The ID of the Windows instance.</p>
+   * <p>IPAM discovered public addresses.</p>
    */
-  InstanceId?: string;
+  IpamDiscoveredPublicAddresses?: IpamDiscoveredPublicAddress[];
 
   /**
    * @public
-   * <p>The password of the instance. Returns an empty string if the password is not
-   *             available.</p>
+   * <p>The oldest successful resource discovery time.</p>
    */
-  PasswordData?: string;
+  OldestSampleTime?: Date;
 
   /**
    * @public
-   * <p>The time the data was last updated.</p>
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
    */
-  Timestamp?: Date;
+  NextToken?: string;
 }
 
 /**
  * @public
- * <p>Contains the parameters for GetReservedInstanceExchangeQuote.</p>
  */
-export interface GetReservedInstancesExchangeQuoteRequest {
+export interface GetIpamDiscoveredResourceCidrsRequest {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *       and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *       Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>A check for whether you have the required permissions for the action without actually making the request
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
 
   /**
    * @public
-   * <p>The IDs of the Convertible Reserved Instances to exchange.</p>
+   * <p>A resource discovery ID.</p>
    */
-  ReservedInstanceIds: string[] | undefined;
+  IpamResourceDiscoveryId: string | undefined;
 
   /**
    * @public
-   * <p>The configuration of the target Convertible Reserved Instance to exchange for your
-   *             current Convertible Reserved Instances.</p>
+   * <p>A resource Region.</p>
    */
-  TargetConfigurations?: TargetConfigurationRequest[];
-}
+  ResourceRegion: string | undefined;
 
-/**
- * @public
- * <p>The cost associated with the Reserved Instance.</p>
- */
-export interface ReservationValue {
   /**
    * @public
-   * <p>The hourly rate of the reservation.</p>
+   * <p>Filters.</p>
    */
-  HourlyPrice?: string;
+  Filters?: Filter[];
 
   /**
    * @public
-   * <p>The balance of the total value (the sum of remainingUpfrontValue + hourlyPrice * number of hours remaining).</p>
+   * <p>Specify the pagination token from a previous request to retrieve the next page of results.</p>
    */
-  RemainingTotalValue?: string;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The remaining upfront cost of the reservation.</p>
+   * <p>The maximum number of discovered resource CIDRs to return in one page of results.</p>
    */
-  RemainingUpfrontValue?: string;
+  MaxResults?: number;
 }
 
 /**
  * @public
- * <p>The total value of the Convertible Reserved Instance.</p>
+ * @enum
  */
-export interface ReservedInstanceReservationValue {
-  /**
-   * @public
-   * <p>The total value of the Convertible Reserved Instance that you are exchanging.</p>
-   */
-  ReservationValue?: ReservationValue;
-
-  /**
-   * @public
-   * <p>The ID of the Convertible Reserved Instance that you are exchanging.</p>
-   */
-  ReservedInstanceId?: string;
-}
+export const IpamResourceType = {
+  eip: "eip",
+  eni: "eni",
+  ipv6_pool: "ipv6-pool",
+  public_ipv4_pool: "public-ipv4-pool",
+  subnet: "subnet",
+  vpc: "vpc",
+} as const;
 
 /**
  * @public
- * <p>Information about the Convertible Reserved Instance offering.</p>
  */
-export interface TargetConfiguration {
-  /**
-   * @public
-   * <p>The number of instances the Convertible Reserved Instance offering can be applied to. This parameter is
-   *       reserved and cannot be specified in a request</p>
-   */
-  InstanceCount?: number;
+export type IpamResourceType = (typeof IpamResourceType)[keyof typeof IpamResourceType];
 
+/**
+ * @public
+ * <p>An IPAM discovered resource CIDR. A discovered resource is a resource CIDR monitored under a resource discovery. The following resources can be discovered: VPCs, Public IPv4 pools, VPC subnets, and Elastic IP addresses. The discovered resource CIDR is the IP address range in CIDR notation that is associated with the resource.</p>
+ */
+export interface IpamDiscoveredResourceCidr {
   /**
    * @public
-   * <p>The ID of the Convertible Reserved Instance offering.</p>
+   * <p>The resource discovery ID.</p>
    */
-  OfferingId?: string;
-}
+  IpamResourceDiscoveryId?: string;
 
-/**
- * @public
- * <p>The total value of the new Convertible Reserved Instances.</p>
- */
-export interface TargetReservationValue {
   /**
    * @public
-   * <p>The total value of the Convertible Reserved Instances that make up the exchange. This is the sum of
-   *       the list value, remaining upfront price, and additional upfront cost of the exchange.</p>
+   * <p>The resource Region.</p>
    */
-  ReservationValue?: ReservationValue;
+  ResourceRegion?: string;
 
   /**
    * @public
-   * <p>The configuration of the Convertible Reserved Instances that make up the exchange.</p>
+   * <p>The resource ID.</p>
    */
-  TargetConfiguration?: TargetConfiguration;
-}
+  ResourceId?: string;
 
-/**
- * @public
- * <p>Contains the output of GetReservedInstancesExchangeQuote.</p>
- */
-export interface GetReservedInstancesExchangeQuoteResult {
   /**
    * @public
-   * <p>The currency of the transaction.</p>
+   * <p>The resource owner ID.</p>
    */
-  CurrencyCode?: string;
+  ResourceOwnerId?: string;
 
   /**
    * @public
-   * <p>If <code>true</code>, the exchange is valid. If <code>false</code>, the exchange cannot be completed.</p>
+   * <p>The resource CIDR.</p>
    */
-  IsValidExchange?: boolean;
+  ResourceCidr?: string;
 
   /**
    * @public
-   * <p>The new end date of the reservation term.</p>
+   * <p>The resource type.</p>
    */
-  OutputReservedInstancesWillExpireAt?: Date;
+  ResourceType?: IpamResourceType;
 
   /**
    * @public
-   * <p>The total true upfront charge for the exchange.</p>
+   * <p>The resource tags.</p>
    */
-  PaymentDue?: string;
+  ResourceTags?: IpamResourceTag[];
 
   /**
    * @public
-   * <p>The cost associated with the Reserved Instance.</p>
+   * <p>The percentage of IP address space in use. To convert the decimal to a percentage, multiply the decimal by 100. Note the following:</p>
+   *          <ul>
+   *             <li>
+   *                <p>For resources that are VPCs, this is the percentage of IP address space in the VPC that's taken up by subnet CIDRs.
+   *          </p>
+   *             </li>
+   *             <li>
+   *                <p>For resources that are subnets, if the subnet has an IPv4 CIDR provisioned to it, this is the percentage of IPv4 address space in the subnet that's in use. If the subnet has an IPv6 CIDR provisioned to it, the percentage of IPv6 address space in use is not represented. The percentage of IPv6 address space in use cannot currently be calculated.
+   *          </p>
+   *             </li>
+   *             <li>
+   *                <p>For resources that are public IPv4 pools, this is the percentage of IP address space in the pool that's been allocated to Elastic IP addresses (EIPs).
+   *          </p>
+   *             </li>
+   *          </ul>
    */
-  ReservedInstanceValueRollup?: ReservationValue;
+  IpUsage?: number;
 
   /**
    * @public
-   * <p>The configuration of your Convertible Reserved Instances.</p>
+   * <p>The VPC ID.</p>
    */
-  ReservedInstanceValueSet?: ReservedInstanceReservationValue[];
+  VpcId?: string;
 
   /**
    * @public
-   * <p>The cost associated with the Reserved Instance.</p>
+   * <p>The last successful resource discovery time.</p>
    */
-  TargetConfigurationValueRollup?: ReservationValue;
+  SampleTime?: Date;
+}
 
+/**
+ * @public
+ */
+export interface GetIpamDiscoveredResourceCidrsResult {
   /**
    * @public
-   * <p>The values of the target Convertible Reserved Instances.</p>
+   * <p>Discovered resource CIDRs.</p>
    */
-  TargetConfigurationValueSet?: TargetReservationValue[];
+  IpamDiscoveredResourceCidrs?: IpamDiscoveredResourceCidr[];
 
   /**
    * @public
-   * <p>Describes the reason why the exchange cannot be completed.</p>
+   * <p>Specify the pagination token from a previous request to retrieve the next page of results.</p>
    */
-  ValidationFailureReason?: string;
+  NextToken?: string;
 }
 
 /**
  * @public
  */
-export interface GetSecurityGroupsForVpcRequest {
+export interface GetIpamPoolAllocationsRequest {
   /**
    * @public
-   * <p>The VPC ID where the security group can be used.</p>
+   * <p>A check for whether you have the required permissions for the action without actually making the request
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  VpcId: string | undefined;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The token returned from a previous paginated request. Pagination continues from the end of the items returned by the previous request.</p>
+   * <p>The ID of the IPAM pool you want to see the allocations for.</p>
    */
-  NextToken?: string;
+  IpamPoolId: string | undefined;
 
   /**
    * @public
-   * <p>The maximum number of items to return for this request.
-   * 	To get the next page of items, make another request with the token returned in the output.
-   * 	For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
+   * <p>The ID of the allocation.</p>
    */
-  MaxResults?: number;
+  IpamPoolAllocationId?: string;
 
   /**
    * @public
-   * <p>The filters. If using multiple filters, the results include security groups which match all filters.</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>group-id</code>: The security group ID.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>description</code>: The security group's description.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>group-name</code>: The security group name.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>owner-id</code>: The security group owner ID.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>primary-vpc-id</code>: The VPC ID in which the security group was created.</p>
-   *             </li>
-   *          </ul>
+   * <p>One or more filters for the request. For more information about filtering, see <a href="https://docs.aws.amazon.com/cli/latest/userguide/cli-usage-filter.html">Filtering CLI output</a>.</p>
    */
   Filters?: Filter[];
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The maximum number of results you would like returned per page.</p>
    */
-  DryRun?: boolean;
+  MaxResults?: number;
+
+  /**
+   * @public
+   * <p>The token for the next page of results.</p>
+   */
+  NextToken?: string;
 }
 
 /**
  * @public
- * <p>A security group that can be used by interfaces in the VPC.</p>
  */
-export interface SecurityGroupForVpc {
+export interface GetIpamPoolAllocationsResult {
   /**
    * @public
-   * <p>The security group's description.</p>
+   * <p>The IPAM pool allocations you want information on.</p>
    */
-  Description?: string;
+  IpamPoolAllocations?: IpamPoolAllocation[];
 
   /**
    * @public
-   * <p>The security group name.</p>
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
    */
-  GroupName?: string;
+  NextToken?: string;
+}
 
+/**
+ * @public
+ */
+export interface GetIpamPoolCidrsRequest {
   /**
    * @public
-   * <p>The security group owner ID.</p>
+   * <p>A check for whether you have the required permissions for the action without actually making the request
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  OwnerId?: string;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The security group ID.</p>
+   * <p>The ID of the IPAM pool you want the CIDR for.</p>
    */
-  GroupId?: string;
+  IpamPoolId: string | undefined;
 
   /**
    * @public
-   * <p>The security group tags.</p>
+   * <p>One or more filters for the request. For more information about filtering, see <a href="https://docs.aws.amazon.com/cli/latest/userguide/cli-usage-filter.html">Filtering CLI output</a>.</p>
    */
-  Tags?: Tag[];
+  Filters?: Filter[];
 
   /**
    * @public
-   * <p>The VPC ID in which the security group was created.</p>
+   * <p>The maximum number of results to return in the request.</p>
    */
-  PrimaryVpcId?: string;
-}
+  MaxResults?: number;
 
-/**
- * @public
- */
-export interface GetSecurityGroupsForVpcResult {
   /**
    * @public
-   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there are no more items to return.</p>
+   * <p>The token for the next page of results.</p>
    */
   NextToken?: string;
-
-  /**
-   * @public
-   * <p>The security group that can be used by interfaces in the VPC.</p>
-   */
-  SecurityGroupForVpcs?: SecurityGroupForVpc[];
 }
 
 /**
  * @public
  */
-export interface GetSerialConsoleAccessStatusRequest {
+export interface GetIpamPoolCidrsResult {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>Information about the CIDRs provisioned to an IPAM pool.</p>
    */
-  DryRun?: boolean;
-}
+  IpamPoolCidrs?: IpamPoolCidr[];
 
-/**
- * @public
- */
-export interface GetSerialConsoleAccessStatusResult {
   /**
    * @public
-   * <p>If <code>true</code>, access to the EC2 serial console of all instances is enabled for
-   * 			your account. If <code>false</code>, access to the EC2 serial console of all instances
-   * 			is disabled for your account.</p>
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
    */
-  SerialConsoleAccessEnabled?: boolean;
+  NextToken?: string;
 }
 
 /**
@@ -8452,21 +8673,3 @@ export const DetachVerifiedAccessTrustProviderResultFilterSensitiveLog = (
     VerifiedAccessTrustProvider: VerifiedAccessTrustProviderFilterSensitiveLog(obj.VerifiedAccessTrustProvider),
   }),
 });
-
-/**
- * @internal
- */
-export const GetLaunchTemplateDataResultFilterSensitiveLog = (obj: GetLaunchTemplateDataResult): any => ({
-  ...obj,
-  ...(obj.LaunchTemplateData && {
-    LaunchTemplateData: ResponseLaunchTemplateDataFilterSensitiveLog(obj.LaunchTemplateData),
-  }),
-});
-
-/**
- * @internal
- */
-export const GetPasswordDataResultFilterSensitiveLog = (obj: GetPasswordDataResult): any => ({
-  ...obj,
-  ...(obj.PasswordData && { PasswordData: SENSITIVE_STRING }),
-});
diff --git a/clients/client-ec2/src/models/models_6.ts b/clients/client-ec2/src/models/models_6.ts
index bcba9cc21dcb7..1975f07787d71 100644
--- a/clients/client-ec2/src/models/models_6.ts
+++ b/clients/client-ec2/src/models/models_6.ts
@@ -3,6 +3,7 @@ import { SENSITIVE_STRING } from "@smithy/smithy-client";
 
 import {
   _InstanceType,
+  AccessScopeAnalysisFinding,
   AddedPrincipal,
   AddIpamOperatingRegion,
   AddPrefixListEntry,
@@ -19,19 +20,14 @@ import {
   EndDateType,
   HostMaintenance,
   HostRecovery,
-  IamInstanceProfileAssociation,
-  IamInstanceProfileSpecification,
   InstanceEventWindow,
   Ipv6SupportValue,
-  PortRange,
-  RouteTableAssociationState,
   SubnetAssociation,
   Tag,
   TagSpecification,
+  TargetConfigurationRequest,
   TransitGatewayAssociationState,
   TransitGatewayAttachmentResourceType,
-  TransitGatewayMulticastDomainAssociations,
-  TransitGatewayPeeringAttachment,
   TransitGatewayPolicyTableAssociation,
   TransitGatewayVpcAttachment,
   UnsuccessfulItem,
@@ -48,24 +44,28 @@ import {
   ClientConnectOptions,
   ClientLoginBannerOptions,
   ConnectionLogOptions,
+  ConnectionTrackingSpecificationRequest,
   DiskImageFormat,
   FleetExcessCapacityTerminationPolicy,
   FleetLaunchTemplateConfigRequest,
   HostnameType,
-  IcmpTypeCode,
   InstanceEventWindowTimeRangeRequest,
   InstanceRequirementsRequest,
   Ipam,
   IpamPool,
   IpamResourceDiscovery,
+  IpamResourceTag,
   IpamScope,
+  IpamTier,
   LaunchTemplate,
   LocalGatewayRoute,
   ManagedPrefixList,
+  NetworkInsightsAccessScopeContent,
   Placement,
   PlatformValues,
   RequestIpamResourceTag,
-  RuleAction,
+  ResponseLaunchTemplateData,
+  ResponseLaunchTemplateDataFilterSensitiveLog,
   SelfServicePortal,
   ShutdownBehavior,
   TargetCapacitySpecificationRequest,
@@ -97,7 +97,6 @@ import {
   TrafficMirrorSession,
   TransitGateway,
   TransitGatewayPrefixListReference,
-  TransitGatewayRoute,
   VerifiedAccessEndpoint,
   VerifiedAccessEndpointProtocol,
   VerifiedAccessGroup,
@@ -109,8 +108,8 @@ import {
 } from "./models_2";
 import {
   ArchitectureValues,
-  AttributeBooleanValue,
   BootModeValues,
+  Byoasn,
   ConversionTask,
   ConversionTaskFilterSensitiveLog,
   Filter,
@@ -118,23 +117,23 @@ import {
   FpgaImageAttributeName,
   ImdsSupportValues,
   ImportImageLicenseConfigurationResponse,
-  InstanceAttributeName,
   InstanceTagNotificationAttribute,
   IpamPoolCidr,
   LaunchPermission,
   PermissionGroup,
   SnapshotDetail,
   SnapshotDetailFilterSensitiveLog,
-  SnapshotTaskDetail,
-  SnapshotTaskDetailFilterSensitiveLog,
   TpmSupportValues,
   VirtualizationType,
 } from "./models_3";
 import {
+  AnalysisStatus,
   ArchitectureType,
+  AttributeBooleanValue,
   CreateVolumePermission,
   ExcessCapacityTerminationPolicy,
   HttpTokensState,
+  InstanceAttributeName,
   InstanceAutoRecoveryState,
   InstanceMetadataEndpointState,
   InstanceMetadataOptionsResponse,
@@ -148,12 +147,14 @@ import {
   ReservedInstancesConfiguration,
   ScheduledInstance,
   SnapshotAttributeName,
-  SpotFleetRequestConfigData,
-  SpotFleetRequestConfigDataFilterSensitiveLog,
+  SnapshotTaskDetail,
+  SnapshotTaskDetailFilterSensitiveLog,
 } from "./models_4";
 import {
   InstanceFamilyCreditSpecification,
-  IpamResourceCidr,
+  IpamComplianceStatus,
+  IpamOverlapStatus,
+  IpamResourceType,
   Purchase,
   SnapshotBlockPublicAccessState,
   TransitGatewayPropagationState,
@@ -165,315 +166,260 @@ import {
 /**
  * @public
  */
-export interface GetSnapshotBlockPublicAccessStateRequest {
+export interface GetIpamResourceCidrsRequest {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   * <p>A check for whether you have the required permissions for the action without actually making the request
    *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
    *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
-}
 
-/**
- * @public
- */
-export interface GetSnapshotBlockPublicAccessStateResult {
   /**
    * @public
-   * <p>The current state of block public access for snapshots. Possible values include:</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>block-all-sharing</code> - All public sharing of snapshots is blocked. Users in
-   *           the account can't request new public sharing. Additionally, snapshots that were already
-   *           publicly shared are treated as private and are not publicly available.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>block-new-sharing</code>  - Only new public sharing of snapshots is blocked.
-   *           Users in the account can't request new public sharing. However, snapshots that were
-   *           already publicly shared, remain publicly available.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>unblocked</code>  - Public sharing is not blocked. Users can publicly share
-   *           snapshots.</p>
-   *             </li>
-   *          </ul>
+   * <p>One or more filters for the request. For more information about filtering, see <a href="https://docs.aws.amazon.com/cli/latest/userguide/cli-usage-filter.html">Filtering CLI output</a>.</p>
    */
-  State?: SnapshotBlockPublicAccessState;
-}
+  Filters?: Filter[];
 
-/**
- * @public
- * <p>The architecture type, virtualization type, and other attributes for the instance types.
- *          When you specify instance attributes, Amazon EC2 will identify instance types with those
- *          attributes.</p>
- *          <p>If you specify <code>InstanceRequirementsWithMetadataRequest</code>, you can't specify
- *          <code>InstanceTypes</code>.</p>
- */
-export interface InstanceRequirementsWithMetadataRequest {
   /**
    * @public
-   * <p>The architecture type.</p>
+   * <p>The maximum number of results to return in the request.</p>
    */
-  ArchitectureTypes?: ArchitectureType[];
+  MaxResults?: number;
 
   /**
    * @public
-   * <p>The virtualization type.</p>
+   * <p>The token for the next page of results.</p>
    */
-  VirtualizationTypes?: VirtualizationType[];
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The attributes for the instance types. When you specify instance attributes, Amazon EC2 will
-   *          identify instance types with those attributes.</p>
+   * <p>The ID of the scope that the resource is in.</p>
    */
-  InstanceRequirements?: InstanceRequirementsRequest;
-}
+  IpamScopeId: string | undefined;
 
-/**
- * @public
- */
-export interface GetSpotPlacementScoresRequest {
   /**
    * @public
-   * <p>The instance types. We recommend that you specify at least three instance types. If you
-   *          specify one or two instance types, or specify variations of a single instance type (for
-   *          example, an <code>m3.xlarge</code> with and without instance storage), the returned
-   *          placement score will always be low. </p>
-   *          <p>If you specify <code>InstanceTypes</code>, you can't specify
-   *             <code>InstanceRequirementsWithMetadata</code>.</p>
+   * <p>The ID of the IPAM pool that the resource is in.</p>
    */
-  InstanceTypes?: string[];
+  IpamPoolId?: string;
 
   /**
    * @public
-   * <p>The target capacity.</p>
+   * <p>The ID of the resource.</p>
    */
-  TargetCapacity: number | undefined;
+  ResourceId?: string;
 
   /**
    * @public
-   * <p>The unit for the target capacity.</p>
-   *          <p>Default: <code>units</code> (translates to number of instances)</p>
+   * <p>The resource type.</p>
    */
-  TargetCapacityUnitType?: TargetCapacityUnitType;
+  ResourceType?: IpamResourceType;
 
   /**
    * @public
-   * <p>Specify <code>true</code> so that the response returns a list of scored Availability Zones.
-   *          Otherwise, the response returns a list of scored Regions.</p>
-   *          <p>A list of scored Availability Zones is useful if you want to launch all of your Spot
-   *          capacity into a single Availability Zone.</p>
+   * <p>The resource tag.</p>
    */
-  SingleAvailabilityZone?: boolean;
+  ResourceTag?: RequestIpamResourceTag;
 
   /**
    * @public
-   * <p>The Regions used to narrow down the list of Regions to be scored. Enter the Region code,
-   *          for example, <code>us-east-1</code>.</p>
+   * <p>The ID of the Amazon Web Services account that owns the resource.</p>
    */
-  RegionNames?: string[];
+  ResourceOwner?: string;
+}
+
+/**
+ * @public
+ * @enum
+ */
+export const IpamManagementState = {
+  ignored: "ignored",
+  managed: "managed",
+  unmanaged: "unmanaged",
+} as const;
+
+/**
+ * @public
+ */
+export type IpamManagementState = (typeof IpamManagementState)[keyof typeof IpamManagementState];
 
+/**
+ * @public
+ * <p>The CIDR for an IPAM resource.</p>
+ */
+export interface IpamResourceCidr {
   /**
    * @public
-   * <p>The attributes for the instance types. When you specify instance attributes, Amazon EC2 will
-   *          identify instance types with those attributes.</p>
-   *          <p>If you specify <code>InstanceRequirementsWithMetadata</code>, you can't specify
-   *             <code>InstanceTypes</code>.</p>
+   * <p>The IPAM ID for an IPAM resource.</p>
    */
-  InstanceRequirementsWithMetadata?: InstanceRequirementsWithMetadataRequest;
+  IpamId?: string;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The scope ID for an IPAM resource.</p>
    */
-  DryRun?: boolean;
+  IpamScopeId?: string;
 
   /**
    * @public
-   * <p>The maximum number of items to return for this request.
-   *          To get the next page of items, make another request with the token returned in the output.
-   * 	        For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
+   * <p>The pool ID for an IPAM resource.</p>
    */
-  MaxResults?: number;
+  IpamPoolId?: string;
 
   /**
    * @public
-   * <p>The token returned from a previous paginated request. Pagination continues from the end of the items returned by the previous request.</p>
+   * <p>The Amazon Web Services Region for an IPAM resource.</p>
    */
-  NextToken?: string;
-}
+  ResourceRegion?: string;
 
-/**
- * @public
- * <p>The Spot placement score for this Region or Availability Zone. The score is calculated
- *          based on the assumption that the <code>capacity-optimized</code> allocation strategy is
- *          used and that all of the Availability Zones in the Region can be used.</p>
- */
-export interface SpotPlacementScore {
   /**
    * @public
-   * <p>The Region.</p>
+   * <p>The Amazon Web Services account number of the owner of an IPAM resource.</p>
    */
-  Region?: string;
+  ResourceOwnerId?: string;
 
   /**
    * @public
-   * <p>The Availability Zone.</p>
+   * <p>The ID of an IPAM resource.</p>
    */
-  AvailabilityZoneId?: string;
+  ResourceId?: string;
 
   /**
    * @public
-   * <p>The placement score, on a scale from <code>1</code> to <code>10</code>. A score of
-   *             <code>10</code> indicates that your Spot request is highly likely to succeed in this
-   *          Region or Availability Zone. A score of <code>1</code> indicates that your Spot request is
-   *          not likely to succeed. </p>
+   * <p>The name of an IPAM resource.</p>
    */
-  Score?: number;
-}
+  ResourceName?: string;
 
-/**
- * @public
- */
-export interface GetSpotPlacementScoresResult {
   /**
    * @public
-   * <p>The Spot placement score for the top 10 Regions or Availability Zones, scored on a scale
-   *          from 1 to 10. Each score
 reflects how likely it is that each Region or Availability Zone
-   *          will succeed at fulfilling the specified target capacity
 <i>at the time of the Spot
-   *             placement score request</i>. A score of <code>10</code> means that your Spot
-   *          capacity request is highly likely to succeed in that Region or Availability Zone. </p>
-   *          <p>If you request a Spot placement score for Regions, a high score assumes that your fleet
-   *          request will be configured to use all Availability Zones and the
-   *             <code>capacity-optimized</code> allocation strategy. If you request a Spot placement
-   *          score for Availability Zones, a high score assumes that your fleet request will be
-   *          configured to use a single Availability Zone and the <code>capacity-optimized</code>
-   *          allocation strategy.</p>
-   *          <p>Different
 Regions or Availability Zones might return the same score.</p>
-   *          <note>
-   *             <p>The Spot placement score serves as a recommendation only. No score guarantees that your
-   *             Spot request will be fully or partially fulfilled.</p>
-   *          </note>
+   * <p>The CIDR for an IPAM resource.</p>
    */
-  SpotPlacementScores?: SpotPlacementScore[];
+  ResourceCidr?: string;
 
   /**
    * @public
-   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there
-   *          are no more items to return.</p>
+   * <p>The type of IPAM resource.</p>
    */
-  NextToken?: string;
-}
+  ResourceType?: IpamResourceType;
 
-/**
- * @public
- */
-export interface GetSubnetCidrReservationsRequest {
   /**
    * @public
-   * <p>One or more filters.</p>
+   * <p>The tags for an IPAM resource.</p>
+   */
+  ResourceTags?: IpamResourceTag[];
+
+  /**
+   * @public
+   * <p>The percentage of IP address space in use. To convert the decimal to a percentage, multiply the decimal by 100. Note the following:</p>
    *          <ul>
    *             <li>
-   *                <p>
-   *                   <code>reservationType</code> - The type of reservation (<code>prefix</code> |
-   *                     <code>explicit</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>subnet-id</code> - The ID of the subnet.</p>
+   *                <p>For resources that are VPCs, this is the percentage of IP address space in the VPC that's taken up by subnet CIDRs.
+   *          </p>
    *             </li>
    *             <li>
-   *                <p>
-   *                   <code>tag</code>:<key> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value.
-   *     For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
+   *                <p>For resources that are subnets, if the subnet has an IPv4 CIDR provisioned to it, this is the percentage of IPv4 address space in the subnet that's in use. If the subnet has an IPv6 CIDR provisioned to it, the percentage of IPv6 address space in use is not represented. The percentage of IPv6 address space in use cannot currently be calculated.
+   *          </p>
    *             </li>
    *             <li>
-   *                <p>
-   *                   <code>tag-key</code> - The key of a tag assigned to the resource. Use this filter to find all resources assigned a tag with a specific key, regardless of the tag value.</p>
+   *                <p>For resources that are public IPv4 pools, this is the percentage of IP address space in the pool that's been allocated to Elastic IP addresses (EIPs).
+   *          </p>
    *             </li>
    *          </ul>
    */
-  Filters?: Filter[];
+  IpUsage?: number;
 
   /**
    * @public
-   * <p>The ID of the subnet.</p>
+   * <p>The compliance status of the IPAM resource. For more information on compliance statuses, see <a href="https://docs.aws.amazon.com/vpc/latest/ipam/monitor-cidr-compliance-ipam.html">Monitor CIDR usage by resource</a> in the <i>Amazon VPC IPAM User Guide</i>.</p>
    */
-  SubnetId: string | undefined;
+  ComplianceStatus?: IpamComplianceStatus;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The management state of the resource. For more information about management states, see <a href="https://docs.aws.amazon.com/vpc/latest/ipam/monitor-cidr-compliance-ipam.html">Monitor CIDR usage by resource</a> in the <i>Amazon VPC IPAM User Guide</i>.</p>
    */
-  DryRun?: boolean;
+  ManagementState?: IpamManagementState;
 
   /**
    * @public
-   * <p>The token for the next page of results.</p>
+   * <p>The overlap status of an IPAM resource. The overlap status tells you if the CIDR for a resource overlaps with another CIDR in the scope. For more information on overlap statuses, see <a href="https://docs.aws.amazon.com/vpc/latest/ipam/monitor-cidr-compliance-ipam.html">Monitor CIDR usage by resource</a> in the <i>Amazon VPC IPAM User Guide</i>.</p>
+   */
+  OverlapStatus?: IpamOverlapStatus;
+
+  /**
+   * @public
+   * <p>The ID of a VPC.</p>
+   */
+  VpcId?: string;
+}
+
+/**
+ * @public
+ */
+export interface GetIpamResourceCidrsResult {
+  /**
+   * @public
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
    */
   NextToken?: string;
 
   /**
    * @public
-   * <p>The maximum number of results to return with a single call.
-   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
+   * <p>The resource CIDRs.</p>
    */
-  MaxResults?: number;
+  IpamResourceCidrs?: IpamResourceCidr[];
 }
 
 /**
  * @public
  */
-export interface GetSubnetCidrReservationsResult {
+export interface GetLaunchTemplateDataRequest {
   /**
    * @public
-   * <p>Information about the IPv4 subnet CIDR reservations.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually
+   *             making the request, and provides an error response. If you have the required
+   *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
+   *                 <code>UnauthorizedOperation</code>.</p>
    */
-  SubnetIpv4CidrReservations?: SubnetCidrReservation[];
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>Information about the IPv6 subnet CIDR reservations.</p>
+   * <p>The ID of the instance.</p>
    */
-  SubnetIpv6CidrReservations?: SubnetCidrReservation[];
+  InstanceId: string | undefined;
+}
 
+/**
+ * @public
+ */
+export interface GetLaunchTemplateDataResult {
   /**
    * @public
-   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
+   * <p>The instance data.</p>
    */
-  NextToken?: string;
+  LaunchTemplateData?: ResponseLaunchTemplateData;
 }
 
 /**
  * @public
  */
-export interface GetTransitGatewayAttachmentPropagationsRequest {
+export interface GetManagedPrefixListAssociationsRequest {
   /**
    * @public
-   * <p>The ID of the attachment.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  TransitGatewayAttachmentId: string | undefined;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>One or more filters. The possible values are:</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>transit-gateway-route-table-id</code> - The ID of the transit gateway route table.</p>
-   *             </li>
-   *          </ul>
+   * <p>The ID of the prefix list.</p>
    */
-  Filters?: Filter[];
+  PrefixListId: string | undefined;
 
   /**
    * @public
@@ -487,43 +433,35 @@ export interface GetTransitGatewayAttachmentPropagationsRequest {
    * <p>The token for the next page of results.</p>
    */
   NextToken?: string;
-
-  /**
-   * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-   */
-  DryRun?: boolean;
 }
 
 /**
  * @public
- * <p>Describes a propagation route table.</p>
+ * <p>Describes the resource with which a prefix list is associated.</p>
  */
-export interface TransitGatewayAttachmentPropagation {
+export interface PrefixListAssociation {
   /**
    * @public
-   * <p>The ID of the propagation route table.</p>
+   * <p>The ID of the resource.</p>
    */
-  TransitGatewayRouteTableId?: string;
+  ResourceId?: string;
 
   /**
    * @public
-   * <p>The state of the propagation route table.</p>
+   * <p>The owner of the resource.</p>
    */
-  State?: TransitGatewayPropagationState;
+  ResourceOwner?: string;
 }
 
 /**
  * @public
  */
-export interface GetTransitGatewayAttachmentPropagationsResult {
+export interface GetManagedPrefixListAssociationsResult {
   /**
    * @public
-   * <p>Information about the propagation route tables.</p>
+   * <p>Information about the associations.</p>
    */
-  TransitGatewayAttachmentPropagations?: TransitGatewayAttachmentPropagation[];
+  PrefixListAssociations?: PrefixListAssociation[];
 
   /**
    * @public
@@ -535,42 +473,26 @@ export interface GetTransitGatewayAttachmentPropagationsResult {
 /**
  * @public
  */
-export interface GetTransitGatewayMulticastDomainAssociationsRequest {
+export interface GetManagedPrefixListEntriesRequest {
   /**
    * @public
-   * <p>The ID of the transit gateway multicast domain.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  TransitGatewayMulticastDomainId: string | undefined;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>One or more filters. The possible values are:</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>resource-id</code> - The ID of the resource.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>resource-type</code> - The type of resource. The valid value is: <code>vpc</code>.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>state</code> - The state of the subnet association. Valid values are
-   *                         <code>associated</code> | <code>associating</code> |
-   *                         <code>disassociated</code> | <code>disassociating</code>.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>subnet-id</code> - The ID of the subnet.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>transit-gateway-attachment-id</code> - The id of the transit gateway attachment.</p>
-   *             </li>
-   *          </ul>
+   * <p>The ID of the prefix list.</p>
    */
-  Filters?: Filter[];
+  PrefixListId: string | undefined;
+
+  /**
+   * @public
+   * <p>The version of the prefix list for which to return the entries. The default is the current version.</p>
+   */
+  TargetVersion?: number;
 
   /**
    * @public
@@ -584,61 +506,35 @@ export interface GetTransitGatewayMulticastDomainAssociationsRequest {
    * <p>The token for the next page of results.</p>
    */
   NextToken?: string;
-
-  /**
-   * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-   */
-  DryRun?: boolean;
 }
 
 /**
  * @public
- * <p>Describes the resources associated with the transit gateway multicast domain.</p>
+ * <p>Describes a prefix list entry.</p>
  */
-export interface TransitGatewayMulticastDomainAssociation {
-  /**
-   * @public
-   * <p>The ID of the transit gateway attachment.</p>
-   */
-  TransitGatewayAttachmentId?: string;
-
-  /**
-   * @public
-   * <p>The ID of the resource.</p>
-   */
-  ResourceId?: string;
-
-  /**
-   * @public
-   * <p>The type of resource, for example a VPC attachment.</p>
-   */
-  ResourceType?: TransitGatewayAttachmentResourceType;
-
+export interface PrefixListEntry {
   /**
    * @public
-   * <p> The ID of the Amazon Web Services account that owns the transit gateway multicast domain association resource.</p>
+   * <p>The CIDR block.</p>
    */
-  ResourceOwnerId?: string;
+  Cidr?: string;
 
   /**
    * @public
-   * <p>The subnet associated with the transit gateway multicast domain.</p>
+   * <p>The description.</p>
    */
-  Subnet?: SubnetAssociation;
+  Description?: string;
 }
 
 /**
  * @public
  */
-export interface GetTransitGatewayMulticastDomainAssociationsResult {
+export interface GetManagedPrefixListEntriesResult {
   /**
    * @public
-   * <p>Information about the multicast domain associations.</p>
+   * <p>Information about the prefix list entries.</p>
    */
-  MulticastDomainAssociations?: TransitGatewayMulticastDomainAssociation[];
+  Entries?: PrefixListEntry[];
 
   /**
    * @public
@@ -650,23 +546,17 @@ export interface GetTransitGatewayMulticastDomainAssociationsResult {
 /**
  * @public
  */
-export interface GetTransitGatewayPolicyTableAssociationsRequest {
-  /**
-   * @public
-   * <p>The ID of the transit gateway policy table.</p>
-   */
-  TransitGatewayPolicyTableId: string | undefined;
-
+export interface GetNetworkInsightsAccessScopeAnalysisFindingsRequest {
   /**
    * @public
-   * <p>The filters associated with the transit gateway policy table.</p>
+   * <p>The ID of the Network Access Scope analysis.</p>
    */
-  Filters?: Filter[];
+  NetworkInsightsAccessScopeAnalysisId: string | undefined;
 
   /**
    * @public
    * <p>The maximum number of results to return with a single call.
-   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
+   *    To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
    */
   MaxResults?: number;
 
@@ -688,16 +578,28 @@ export interface GetTransitGatewayPolicyTableAssociationsRequest {
 /**
  * @public
  */
-export interface GetTransitGatewayPolicyTableAssociationsResult {
+export interface GetNetworkInsightsAccessScopeAnalysisFindingsResult {
   /**
    * @public
-   * <p>Returns details about the transit gateway policy table association.</p>
+   * <p>The ID of the Network Access Scope analysis.</p>
    */
-  Associations?: TransitGatewayPolicyTableAssociation[];
+  NetworkInsightsAccessScopeAnalysisId?: string;
 
   /**
    * @public
-   * <p>The token for the next page of results.</p>
+   * <p>The status of Network Access Scope Analysis.</p>
+   */
+  AnalysisStatus?: AnalysisStatus;
+
+  /**
+   * @public
+   * <p>The findings associated with Network Access Scope Analysis.</p>
+   */
+  AnalysisFindings?: AccessScopeAnalysisFinding[];
+
+  /**
+   * @public
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
    */
   NextToken?: string;
 }
@@ -705,31 +607,42 @@ export interface GetTransitGatewayPolicyTableAssociationsResult {
 /**
  * @public
  */
-export interface GetTransitGatewayPolicyTableEntriesRequest {
+export interface GetNetworkInsightsAccessScopeContentRequest {
   /**
    * @public
-   * <p>The ID of the transit gateway policy table.</p>
+   * <p>The ID of the Network Access Scope.</p>
    */
-  TransitGatewayPolicyTableId: string | undefined;
+  NetworkInsightsAccessScopeId: string | undefined;
 
   /**
    * @public
-   * <p>The filters associated with the transit gateway policy table.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  Filters?: Filter[];
+  DryRun?: boolean;
+}
 
+/**
+ * @public
+ */
+export interface GetNetworkInsightsAccessScopeContentResult {
   /**
    * @public
-   * <p>The maximum number of results to return with a single call.
-   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
+   * <p>The Network Access Scope content.</p>
    */
-  MaxResults?: number;
+  NetworkInsightsAccessScopeContent?: NetworkInsightsAccessScopeContent;
+}
 
+/**
+ * @public
+ */
+export interface GetPasswordDataRequest {
   /**
    * @public
-   * <p>The token for the next page of results.</p>
+   * <p>The ID of the Windows instance.</p>
    */
-  NextToken?: string;
+  InstanceId: string | undefined;
 
   /**
    * @public
@@ -742,231 +655,247 @@ export interface GetTransitGatewayPolicyTableEntriesRequest {
 
 /**
  * @public
- * <p>Describes the meta data tags associated with a transit gateway policy rule.</p>
  */
-export interface TransitGatewayPolicyRuleMetaData {
+export interface GetPasswordDataResult {
   /**
    * @public
-   * <p>The key name for the transit gateway policy rule meta data tag.</p>
+   * <p>The ID of the Windows instance.</p>
    */
-  MetaDataKey?: string;
+  InstanceId?: string;
 
   /**
    * @public
-   * <p>The value of the key for the transit gateway policy rule meta data tag.</p>
+   * <p>The password of the instance. Returns an empty string if the password is not
+   *             available.</p>
    */
-  MetaDataValue?: string;
+  PasswordData?: string;
+
+  /**
+   * @public
+   * <p>The time the data was last updated.</p>
+   */
+  Timestamp?: Date;
 }
 
 /**
  * @public
- * <p>Describes a rule associated with a transit gateway policy.</p>
+ * <p>Contains the parameters for GetReservedInstanceExchangeQuote.</p>
  */
-export interface TransitGatewayPolicyRule {
+export interface GetReservedInstancesExchangeQuoteRequest {
   /**
    * @public
-   * <p>The source CIDR block for the transit gateway policy rule.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *       and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *       Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  SourceCidrBlock?: string;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The port range for the transit gateway policy rule. Currently this is set to * (all).</p>
+   * <p>The IDs of the Convertible Reserved Instances to exchange.</p>
    */
-  SourcePortRange?: string;
+  ReservedInstanceIds: string[] | undefined;
 
   /**
    * @public
-   * <p>The destination CIDR block for the transit gateway policy rule.</p>
+   * <p>The configuration of the target Convertible Reserved Instance to exchange for your
+   *             current Convertible Reserved Instances.</p>
    */
-  DestinationCidrBlock?: string;
+  TargetConfigurations?: TargetConfigurationRequest[];
+}
 
+/**
+ * @public
+ * <p>The cost associated with the Reserved Instance.</p>
+ */
+export interface ReservationValue {
   /**
    * @public
-   * <p>The port range for the transit gateway policy rule. Currently this is set to * (all).</p>
+   * <p>The hourly rate of the reservation.</p>
    */
-  DestinationPortRange?: string;
+  HourlyPrice?: string;
 
   /**
    * @public
-   * <p>The protocol used by the transit gateway policy rule.</p>
+   * <p>The balance of the total value (the sum of remainingUpfrontValue + hourlyPrice * number of hours remaining).</p>
    */
-  Protocol?: string;
+  RemainingTotalValue?: string;
 
   /**
    * @public
-   * <p>The meta data tags used for the transit gateway policy rule.</p>
+   * <p>The remaining upfront cost of the reservation.</p>
    */
-  MetaData?: TransitGatewayPolicyRuleMetaData;
+  RemainingUpfrontValue?: string;
 }
 
 /**
  * @public
- * <p>Describes a transit gateway policy table entry</p>
+ * <p>The total value of the Convertible Reserved Instance.</p>
  */
-export interface TransitGatewayPolicyTableEntry {
+export interface ReservedInstanceReservationValue {
   /**
    * @public
-   * <p>The rule number for the transit gateway policy table entry.</p>
+   * <p>The total value of the Convertible Reserved Instance that you are exchanging.</p>
    */
-  PolicyRuleNumber?: string;
+  ReservationValue?: ReservationValue;
 
   /**
    * @public
-   * <p>The policy rule associated with the transit gateway policy table.</p>
+   * <p>The ID of the Convertible Reserved Instance that you are exchanging.</p>
    */
-  PolicyRule?: TransitGatewayPolicyRule;
+  ReservedInstanceId?: string;
+}
 
+/**
+ * @public
+ * <p>Information about the Convertible Reserved Instance offering.</p>
+ */
+export interface TargetConfiguration {
   /**
    * @public
-   * <p>The ID of the target route table.</p>
+   * <p>The number of instances the Convertible Reserved Instance offering can be applied to. This parameter is
+   *       reserved and cannot be specified in a request</p>
    */
-  TargetRouteTableId?: string;
+  InstanceCount?: number;
+
+  /**
+   * @public
+   * <p>The ID of the Convertible Reserved Instance offering.</p>
+   */
+  OfferingId?: string;
 }
 
 /**
  * @public
+ * <p>The total value of the new Convertible Reserved Instances.</p>
  */
-export interface GetTransitGatewayPolicyTableEntriesResult {
+export interface TargetReservationValue {
   /**
    * @public
-   * <p>The entries for the transit gateway policy table.</p>
+   * <p>The total value of the Convertible Reserved Instances that make up the exchange. This is the sum of
+   *       the list value, remaining upfront price, and additional upfront cost of the exchange.</p>
    */
-  TransitGatewayPolicyTableEntries?: TransitGatewayPolicyTableEntry[];
+  ReservationValue?: ReservationValue;
+
+  /**
+   * @public
+   * <p>The configuration of the Convertible Reserved Instances that make up the exchange.</p>
+   */
+  TargetConfiguration?: TargetConfiguration;
 }
 
 /**
  * @public
+ * <p>Contains the output of GetReservedInstancesExchangeQuote.</p>
  */
-export interface GetTransitGatewayPrefixListReferencesRequest {
+export interface GetReservedInstancesExchangeQuoteResult {
   /**
    * @public
-   * <p>The ID of the transit gateway route table.</p>
+   * <p>The currency of the transaction.</p>
    */
-  TransitGatewayRouteTableId: string | undefined;
+  CurrencyCode?: string;
 
   /**
    * @public
-   * <p>One or more filters. The possible values are:</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>attachment.resource-id</code> - The ID of the resource for the attachment.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>attachment.resource-type</code> - The type of resource for the
-   *                     attachment. Valid values are <code>vpc</code> | <code>vpn</code> |
-   *                         <code>direct-connect-gateway</code> | <code>peering</code>.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>attachment.transit-gateway-attachment-id</code> - The ID of the attachment.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>is-blackhole</code> - Whether traffic matching the route is blocked (<code>true</code> | <code>false</code>).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>prefix-list-id</code> - The ID of the prefix list.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>prefix-list-owner-id</code> - The ID of the owner of the prefix list.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>state</code> - The state of the prefix list reference (<code>pending</code> | <code>available</code> | <code>modifying</code> | <code>deleting</code>).</p>
-   *             </li>
-   *          </ul>
+   * <p>If <code>true</code>, the exchange is valid. If <code>false</code>, the exchange cannot be completed.</p>
    */
-  Filters?: Filter[];
+  IsValidExchange?: boolean;
 
   /**
    * @public
-   * <p>The maximum number of results to return with a single call.
-   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
+   * <p>The new end date of the reservation term.</p>
    */
-  MaxResults?: number;
+  OutputReservedInstancesWillExpireAt?: Date;
 
   /**
    * @public
-   * <p>The token for the next page of results.</p>
+   * <p>The total true upfront charge for the exchange.</p>
    */
-  NextToken?: string;
+  PaymentDue?: string;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The cost associated with the Reserved Instance.</p>
    */
-  DryRun?: boolean;
-}
+  ReservedInstanceValueRollup?: ReservationValue;
 
-/**
- * @public
- */
-export interface GetTransitGatewayPrefixListReferencesResult {
   /**
    * @public
-   * <p>Information about the prefix list references.</p>
+   * <p>The configuration of your Convertible Reserved Instances.</p>
    */
-  TransitGatewayPrefixListReferences?: TransitGatewayPrefixListReference[];
+  ReservedInstanceValueSet?: ReservedInstanceReservationValue[];
 
   /**
    * @public
-   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
+   * <p>The cost associated with the Reserved Instance.</p>
    */
-  NextToken?: string;
+  TargetConfigurationValueRollup?: ReservationValue;
+
+  /**
+   * @public
+   * <p>The values of the target Convertible Reserved Instances.</p>
+   */
+  TargetConfigurationValueSet?: TargetReservationValue[];
+
+  /**
+   * @public
+   * <p>Describes the reason why the exchange cannot be completed.</p>
+   */
+  ValidationFailureReason?: string;
 }
 
 /**
  * @public
  */
-export interface GetTransitGatewayRouteTableAssociationsRequest {
+export interface GetSecurityGroupsForVpcRequest {
   /**
    * @public
-   * <p>The ID of the transit gateway route table.</p>
+   * <p>The VPC ID where the security group can be used.</p>
    */
-  TransitGatewayRouteTableId: string | undefined;
+  VpcId: string | undefined;
 
   /**
    * @public
-   * <p>One or more filters. The possible values are:</p>
-   *          <ul>
-   *             <li>
+   * <p>The token returned from a previous paginated request. Pagination continues from the end of the items returned by the previous request.</p>
+   */
+  NextToken?: string;
+
+  /**
+   * @public
+   * <p>The maximum number of items to return for this request.
+   * 	To get the next page of items, make another request with the token returned in the output.
+   * 	For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
+   */
+  MaxResults?: number;
+
+  /**
+   * @public
+   * <p>The filters. If using multiple filters, the results include security groups which match all filters.</p>
+   *          <ul>
+   *             <li>
    *                <p>
-   *                   <code>resource-id</code> - The ID of the resource.</p>
+   *                   <code>group-id</code>: The security group ID.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>resource-type</code> - The resource type. Valid values are <code>vpc</code>
-   *                     | <code>vpn</code> | <code>direct-connect-gateway</code> | <code>peering</code>
-   *                     | <code>connect</code>.</p>
+   *                   <code>description</code>: The security group's description.</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>transit-gateway-attachment-id</code> - The ID of the attachment.</p>
+   *                   <code>group-name</code>: The security group name.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>owner-id</code>: The security group owner ID.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>primary-vpc-id</code>: The VPC ID in which the security group was created.</p>
    *             </li>
    *          </ul>
    */
   Filters?: Filter[];
 
-  /**
-   * @public
-   * <p>The maximum number of results to return with a single call.
-   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
-   */
-  MaxResults?: number;
-
-  /**
-   * @public
-   * <p>The token for the next page of results.</p>
-   */
-  NextToken?: string;
-
   /**
    * @public
    * <p>Checks whether you have the required permissions for the action, without actually making the request,
@@ -978,96 +907,91 @@ export interface GetTransitGatewayRouteTableAssociationsRequest {
 
 /**
  * @public
- * <p>Describes an association between a route table and a resource attachment.</p>
+ * <p>A security group that can be used by interfaces in the VPC.</p>
  */
-export interface TransitGatewayRouteTableAssociation {
+export interface SecurityGroupForVpc {
   /**
    * @public
-   * <p>The ID of the attachment.</p>
+   * <p>The security group's description.</p>
    */
-  TransitGatewayAttachmentId?: string;
+  Description?: string;
 
   /**
    * @public
-   * <p>The ID of the resource.</p>
+   * <p>The security group name.</p>
    */
-  ResourceId?: string;
+  GroupName?: string;
 
   /**
    * @public
-   * <p>The resource type. Note that the <code>tgw-peering</code> resource type has been deprecated.</p>
+   * <p>The security group owner ID.</p>
    */
-  ResourceType?: TransitGatewayAttachmentResourceType;
+  OwnerId?: string;
 
   /**
    * @public
-   * <p>The state of the association.</p>
+   * <p>The security group ID.</p>
    */
-  State?: TransitGatewayAssociationState;
-}
+  GroupId?: string;
 
-/**
- * @public
- */
-export interface GetTransitGatewayRouteTableAssociationsResult {
   /**
    * @public
-   * <p>Information about the associations.</p>
+   * <p>The security group tags.</p>
    */
-  Associations?: TransitGatewayRouteTableAssociation[];
+  Tags?: Tag[];
 
   /**
    * @public
-   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
+   * <p>The VPC ID in which the security group was created.</p>
    */
-  NextToken?: string;
+  PrimaryVpcId?: string;
 }
 
 /**
  * @public
  */
-export interface GetTransitGatewayRouteTablePropagationsRequest {
+export interface GetSecurityGroupsForVpcResult {
   /**
    * @public
-   * <p>The ID of the transit gateway route table.</p>
+   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there are no more items to return.</p>
    */
-  TransitGatewayRouteTableId: string | undefined;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>One or more filters. The possible values are:</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>resource-id</code> - The ID of the resource.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>resource-type</code> - The resource type. Valid values are <code>vpc</code>
-   *                     | <code>vpn</code> | <code>direct-connect-gateway</code> | <code>peering</code>
-   *                     | <code>connect</code>.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>transit-gateway-attachment-id</code> - The ID of the attachment.</p>
-   *             </li>
-   *          </ul>
+   * <p>The security group that can be used by interfaces in the VPC.</p>
    */
-  Filters?: Filter[];
+  SecurityGroupForVpcs?: SecurityGroupForVpc[];
+}
 
+/**
+ * @public
+ */
+export interface GetSerialConsoleAccessStatusRequest {
   /**
    * @public
-   * <p>The maximum number of results to return with a single call.
-   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  MaxResults?: number;
+  DryRun?: boolean;
+}
 
+/**
+ * @public
+ */
+export interface GetSerialConsoleAccessStatusResult {
   /**
    * @public
-   * <p>The token for the next page of results.</p>
+   * <p>If <code>true</code>, access to the EC2 serial console of all instances is enabled for
+   * 			your account. If <code>false</code>, access to the EC2 serial console of all instances
+   * 			is disabled for your account.</p>
    */
-  NextToken?: string;
+  SerialConsoleAccessEnabled?: boolean;
+}
 
+/**
+ * @public
+ */
+export interface GetSnapshotBlockPublicAccessStateRequest {
   /**
    * @public
    * <p>Checks whether you have the required permissions for the action, without actually making the request,
@@ -1079,102 +1003,115 @@ export interface GetTransitGatewayRouteTablePropagationsRequest {
 
 /**
  * @public
- * <p>Describes a route table propagation.</p>
  */
-export interface TransitGatewayRouteTablePropagation {
-  /**
-   * @public
-   * <p>The ID of the attachment.</p>
-   */
-  TransitGatewayAttachmentId?: string;
-
+export interface GetSnapshotBlockPublicAccessStateResult {
   /**
    * @public
-   * <p>The ID of the resource.</p>
+   * <p>The current state of block public access for snapshots. Possible values include:</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>block-all-sharing</code> - All public sharing of snapshots is blocked. Users in
+   *           the account can't request new public sharing. Additionally, snapshots that were already
+   *           publicly shared are treated as private and are not publicly available.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>block-new-sharing</code>  - Only new public sharing of snapshots is blocked.
+   *           Users in the account can't request new public sharing. However, snapshots that were
+   *           already publicly shared, remain publicly available.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>unblocked</code>  - Public sharing is not blocked. Users can publicly share
+   *           snapshots.</p>
+   *             </li>
+   *          </ul>
    */
-  ResourceId?: string;
+  State?: SnapshotBlockPublicAccessState;
+}
 
+/**
+ * @public
+ * <p>The architecture type, virtualization type, and other attributes for the instance types.
+ *          When you specify instance attributes, Amazon EC2 will identify instance types with those
+ *          attributes.</p>
+ *          <p>If you specify <code>InstanceRequirementsWithMetadataRequest</code>, you can't specify
+ *          <code>InstanceTypes</code>.</p>
+ */
+export interface InstanceRequirementsWithMetadataRequest {
   /**
    * @public
-   * <p>The type of resource. Note that the <code>tgw-peering</code> resource type has been deprecated.</p>
+   * <p>The architecture type.</p>
    */
-  ResourceType?: TransitGatewayAttachmentResourceType;
+  ArchitectureTypes?: ArchitectureType[];
 
   /**
    * @public
-   * <p>The state of the resource.</p>
+   * <p>The virtualization type.</p>
    */
-  State?: TransitGatewayPropagationState;
+  VirtualizationTypes?: VirtualizationType[];
 
   /**
    * @public
-   * <p>The ID of the transit gateway route table announcement.</p>
+   * <p>The attributes for the instance types. When you specify instance attributes, Amazon EC2 will
+   *          identify instance types with those attributes.</p>
    */
-  TransitGatewayRouteTableAnnouncementId?: string;
+  InstanceRequirements?: InstanceRequirementsRequest;
 }
 
 /**
  * @public
  */
-export interface GetTransitGatewayRouteTablePropagationsResult {
-  /**
-   * @public
-   * <p>Information about the route table propagations.</p>
-   */
-  TransitGatewayRouteTablePropagations?: TransitGatewayRouteTablePropagation[];
-
+export interface GetSpotPlacementScoresRequest {
   /**
    * @public
-   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
+   * <p>The instance types. We recommend that you specify at least three instance types. If you
+   *          specify one or two instance types, or specify variations of a single instance type (for
+   *          example, an <code>m3.xlarge</code> with and without instance storage), the returned
+   *          placement score will always be low. </p>
+   *          <p>If you specify <code>InstanceTypes</code>, you can't specify
+   *             <code>InstanceRequirementsWithMetadata</code>.</p>
    */
-  NextToken?: string;
-}
+  InstanceTypes?: string[];
 
-/**
- * @public
- */
-export interface GetVerifiedAccessEndpointPolicyRequest {
   /**
    * @public
-   * <p>The ID of the Verified Access endpoint.</p>
+   * <p>The target capacity.</p>
    */
-  VerifiedAccessEndpointId: string | undefined;
+  TargetCapacity: number | undefined;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The unit for the target capacity.</p>
+   *          <p>Default: <code>units</code> (translates to number of instances)</p>
    */
-  DryRun?: boolean;
-}
+  TargetCapacityUnitType?: TargetCapacityUnitType;
 
-/**
- * @public
- */
-export interface GetVerifiedAccessEndpointPolicyResult {
   /**
    * @public
-   * <p>The status of the Verified Access policy.</p>
+   * <p>Specify <code>true</code> so that the response returns a list of scored Availability Zones.
+   *          Otherwise, the response returns a list of scored Regions.</p>
+   *          <p>A list of scored Availability Zones is useful if you want to launch all of your Spot
+   *          capacity into a single Availability Zone.</p>
    */
-  PolicyEnabled?: boolean;
+  SingleAvailabilityZone?: boolean;
 
   /**
    * @public
-   * <p>The Verified Access policy document.</p>
+   * <p>The Regions used to narrow down the list of Regions to be scored. Enter the Region code,
+   *          for example, <code>us-east-1</code>.</p>
    */
-  PolicyDocument?: string;
-}
+  RegionNames?: string[];
 
-/**
- * @public
- */
-export interface GetVerifiedAccessGroupPolicyRequest {
   /**
    * @public
-   * <p>The ID of the Verified Access group.</p>
+   * <p>The attributes for the instance types. When you specify instance attributes, Amazon EC2 will
+   *          identify instance types with those attributes.</p>
+   *          <p>If you specify <code>InstanceRequirementsWithMetadata</code>, you can't specify
+   *             <code>InstanceTypes</code>.</p>
    */
-  VerifiedAccessGroupId: string | undefined;
+  InstanceRequirementsWithMetadata?: InstanceRequirementsWithMetadataRequest;
 
   /**
    * @public
@@ -1183,426 +1120,442 @@ export interface GetVerifiedAccessGroupPolicyRequest {
    *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
-}
 
-/**
- * @public
- */
-export interface GetVerifiedAccessGroupPolicyResult {
   /**
    * @public
-   * <p>The status of the Verified Access policy.</p>
+   * <p>The maximum number of items to return for this request.
+   *          To get the next page of items, make another request with the token returned in the output.
+   * 	        For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
    */
-  PolicyEnabled?: boolean;
+  MaxResults?: number;
 
   /**
    * @public
-   * <p>The Verified Access policy document.</p>
+   * <p>The token returned from a previous paginated request. Pagination continues from the end of the items returned by the previous request.</p>
    */
-  PolicyDocument?: string;
+  NextToken?: string;
 }
 
 /**
  * @public
+ * <p>The Spot placement score for this Region or Availability Zone. The score is calculated
+ *          based on the assumption that the <code>capacity-optimized</code> allocation strategy is
+ *          used and that all of the Availability Zones in the Region can be used.</p>
  */
-export interface GetVpnConnectionDeviceSampleConfigurationRequest {
+export interface SpotPlacementScore {
   /**
    * @public
-   * <p>The <code>VpnConnectionId</code> specifies the Site-to-Site VPN connection used for the sample
-   *             configuration.</p>
+   * <p>The Region.</p>
    */
-  VpnConnectionId: string | undefined;
+  Region?: string;
 
   /**
    * @public
-   * <p>Device identifier provided by the <code>GetVpnConnectionDeviceTypes</code> API.</p>
+   * <p>The Availability Zone.</p>
    */
-  VpnConnectionDeviceTypeId: string | undefined;
+  AvailabilityZoneId?: string;
 
   /**
    * @public
-   * <p>The IKE version to be used in the sample configuration file for your customer gateway
-   *             device. You can specify one of the following versions: <code>ikev1</code> or
-   *                 <code>ikev2</code>.</p>
-   */
-  InternetKeyExchangeVersion?: string;
-
-  /**
-   * @public
-   * <p>Checks whether you have the required permissions for the action, without actually
-   *             making the request, and provides an error response. If you have the required
-   *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
-   *                 <code>UnauthorizedOperation</code>.</p>
+   * <p>The placement score, on a scale from <code>1</code> to <code>10</code>. A score of
+   *             <code>10</code> indicates that your Spot request is highly likely to succeed in this
+   *          Region or Availability Zone. A score of <code>1</code> indicates that your Spot request is
+   *          not likely to succeed. </p>
    */
-  DryRun?: boolean;
+  Score?: number;
 }
 
 /**
  * @public
  */
-export interface GetVpnConnectionDeviceSampleConfigurationResult {
+export interface GetSpotPlacementScoresResult {
   /**
    * @public
-   * <p>Sample configuration file for the specified customer gateway device.</p>
+   * <p>The Spot placement score for the top 10 Regions or Availability Zones, scored on a scale
+   *          from 1 to 10. Each score
 reflects how likely it is that each Region or Availability Zone
+   *          will succeed at fulfilling the specified target capacity
 <i>at the time of the Spot
+   *             placement score request</i>. A score of <code>10</code> means that your Spot
+   *          capacity request is highly likely to succeed in that Region or Availability Zone. </p>
+   *          <p>If you request a Spot placement score for Regions, a high score assumes that your fleet
+   *          request will be configured to use all Availability Zones and the
+   *             <code>capacity-optimized</code> allocation strategy. If you request a Spot placement
+   *          score for Availability Zones, a high score assumes that your fleet request will be
+   *          configured to use a single Availability Zone and the <code>capacity-optimized</code>
+   *          allocation strategy.</p>
+   *          <p>Different
 Regions or Availability Zones might return the same score.</p>
+   *          <note>
+   *             <p>The Spot placement score serves as a recommendation only. No score guarantees that your
+   *             Spot request will be fully or partially fulfilled.</p>
+   *          </note>
    */
-  VpnConnectionDeviceSampleConfiguration?: string;
+  SpotPlacementScores?: SpotPlacementScore[];
+
+  /**
+   * @public
+   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there
+   *          are no more items to return.</p>
+   */
+  NextToken?: string;
 }
 
 /**
  * @public
  */
-export interface GetVpnConnectionDeviceTypesRequest {
+export interface GetSubnetCidrReservationsRequest {
   /**
    * @public
-   * <p>The maximum number of results returned by <code>GetVpnConnectionDeviceTypes</code> in
-   *             paginated output. When this parameter is used, <code>GetVpnConnectionDeviceTypes</code>
-   *             only returns <code>MaxResults</code> results in a single page along with a
-   *                 <code>NextToken</code> response element. The remaining results of the initial
-   *             request can be seen by sending another <code>GetVpnConnectionDeviceTypes</code> request
-   *             with the returned <code>NextToken</code> value. This value can be between 200 and 1000.
-   *             If this parameter is not used, then <code>GetVpnConnectionDeviceTypes</code> returns all
-   *             results.</p>
+   * <p>One or more filters.</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>reservationType</code> - The type of reservation (<code>prefix</code> |
+   *                     <code>explicit</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>subnet-id</code> - The ID of the subnet.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>tag</code>:<key> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value.
+   *     For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>tag-key</code> - The key of a tag assigned to the resource. Use this filter to find all resources assigned a tag with a specific key, regardless of the tag value.</p>
+   *             </li>
+   *          </ul>
    */
-  MaxResults?: number;
+  Filters?: Filter[];
 
   /**
    * @public
-   * <p>The <code>NextToken</code> value returned from a previous paginated
-   *                 <code>GetVpnConnectionDeviceTypes</code> request where <code>MaxResults</code> was
-   *             used and the results exceeded the value of that parameter. Pagination continues from the
-   *             end of the previous results that returned the <code>NextToken</code> value. This value
-   *             is null when there are no more results to return. </p>
+   * <p>The ID of the subnet.</p>
    */
-  NextToken?: string;
+  SubnetId: string | undefined;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually
-   *             making the request, and provides an error response. If you have the required
-   *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
-   *                 <code>UnauthorizedOperation</code>.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
-}
 
-/**
- * @public
- * <p>List of customer gateway devices that have a sample configuration file available for
- *             use. You can also see the list of device types with sample configuration files available
- *             under <a href="https://docs.aws.amazon.com/vpn/latest/s2svpn/your-cgw.html">Your customer
- *                 gateway device</a> in the <i>Amazon Web Services Site-to-Site VPN User Guide</i>.</p>
- */
-export interface VpnConnectionDeviceType {
   /**
    * @public
-   * <p>Customer gateway device identifier.</p>
+   * <p>The token for the next page of results.</p>
    */
-  VpnConnectionDeviceTypeId?: string;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>Customer gateway device vendor.</p>
+   * <p>The maximum number of results to return with a single call.
+   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
    */
-  Vendor?: string;
+  MaxResults?: number;
+}
+
+/**
+ * @public
+ */
+export interface GetSubnetCidrReservationsResult {
+  /**
+   * @public
+   * <p>Information about the IPv4 subnet CIDR reservations.</p>
+   */
+  SubnetIpv4CidrReservations?: SubnetCidrReservation[];
 
   /**
    * @public
-   * <p>Customer gateway device platform.</p>
+   * <p>Information about the IPv6 subnet CIDR reservations.</p>
    */
-  Platform?: string;
+  SubnetIpv6CidrReservations?: SubnetCidrReservation[];
 
   /**
    * @public
-   * <p>Customer gateway device software version.</p>
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
    */
-  Software?: string;
+  NextToken?: string;
 }
 
 /**
  * @public
  */
-export interface GetVpnConnectionDeviceTypesResult {
+export interface GetTransitGatewayAttachmentPropagationsRequest {
   /**
    * @public
-   * <p>List of customer gateway devices that have a sample configuration file available for
-   *             use.</p>
+   * <p>The ID of the attachment.</p>
    */
-  VpnConnectionDeviceTypes?: VpnConnectionDeviceType[];
+  TransitGatewayAttachmentId: string | undefined;
 
   /**
    * @public
-   * <p>The <code>NextToken</code> value to include in a future
-   *                 <code>GetVpnConnectionDeviceTypes</code> request. When the results of a
-   *                 <code>GetVpnConnectionDeviceTypes</code> request exceed <code>MaxResults</code>,
-   *             this value can be used to retrieve the next page of results. This value is null when
-   *             there are no more results to return.</p>
+   * <p>One or more filters. The possible values are:</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>transit-gateway-route-table-id</code> - The ID of the transit gateway route table.</p>
+   *             </li>
+   *          </ul>
    */
-  NextToken?: string;
-}
+  Filters?: Filter[];
 
-/**
- * @public
- */
-export interface GetVpnTunnelReplacementStatusRequest {
   /**
    * @public
-   * <p>The ID of the Site-to-Site VPN connection. </p>
+   * <p>The maximum number of results to return with a single call.
+   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
    */
-  VpnConnectionId: string | undefined;
+  MaxResults?: number;
 
   /**
    * @public
-   * <p>The external IP address of the VPN tunnel.</p>
+   * <p>The token for the next page of results.</p>
    */
-  VpnTunnelOutsideIpAddress: string | undefined;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
 }
 
 /**
  * @public
- * <p>Details for Site-to-Site VPN tunnel endpoint maintenance events.</p>
+ * <p>Describes a propagation route table.</p>
  */
-export interface MaintenanceDetails {
-  /**
-   * @public
-   * <p>Verify existence of a pending maintenance.</p>
-   */
-  PendingMaintenance?: string;
-
+export interface TransitGatewayAttachmentPropagation {
   /**
    * @public
-   * <p>The timestamp after which Amazon Web Services will automatically apply maintenance.</p>
+   * <p>The ID of the propagation route table.</p>
    */
-  MaintenanceAutoAppliedAfter?: Date;
+  TransitGatewayRouteTableId?: string;
 
   /**
    * @public
-   * <p>Timestamp of last applied maintenance.</p>
+   * <p>The state of the propagation route table.</p>
    */
-  LastMaintenanceApplied?: Date;
+  State?: TransitGatewayPropagationState;
 }
 
 /**
  * @public
  */
-export interface GetVpnTunnelReplacementStatusResult {
+export interface GetTransitGatewayAttachmentPropagationsResult {
   /**
    * @public
-   * <p>The ID of the Site-to-Site VPN connection. </p>
+   * <p>Information about the propagation route tables.</p>
    */
-  VpnConnectionId?: string;
+  TransitGatewayAttachmentPropagations?: TransitGatewayAttachmentPropagation[];
 
   /**
    * @public
-   * <p>The ID of the transit gateway associated with the VPN connection.</p>
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
    */
-  TransitGatewayId?: string;
+  NextToken?: string;
+}
 
+/**
+ * @public
+ */
+export interface GetTransitGatewayMulticastDomainAssociationsRequest {
   /**
    * @public
-   * <p>The ID of the customer gateway.</p>
+   * <p>The ID of the transit gateway multicast domain.</p>
    */
-  CustomerGatewayId?: string;
+  TransitGatewayMulticastDomainId: string | undefined;
 
   /**
    * @public
-   * <p>The ID of the virtual private gateway.</p>
+   * <p>One or more filters. The possible values are:</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>resource-id</code> - The ID of the resource.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>resource-type</code> - The type of resource. The valid value is: <code>vpc</code>.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>state</code> - The state of the subnet association. Valid values are
+   *                         <code>associated</code> | <code>associating</code> |
+   *                         <code>disassociated</code> | <code>disassociating</code>.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>subnet-id</code> - The ID of the subnet.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>transit-gateway-attachment-id</code> - The id of the transit gateway attachment.</p>
+   *             </li>
+   *          </ul>
    */
-  VpnGatewayId?: string;
+  Filters?: Filter[];
 
   /**
    * @public
-   * <p>The external IP address of the VPN tunnel.</p>
+   * <p>The maximum number of results to return with a single call.
+   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
    */
-  VpnTunnelOutsideIpAddress?: string;
+  MaxResults?: number;
 
   /**
    * @public
-   * <p>Get details of pending tunnel endpoint maintenance.</p>
+   * <p>The token for the next page of results.</p>
    */
-  MaintenanceDetails?: MaintenanceDetails;
+  NextToken?: string;
+
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
 }
 
 /**
  * @public
+ * <p>Describes the resources associated with the transit gateway multicast domain.</p>
  */
-export interface ImportClientVpnClientCertificateRevocationListRequest {
+export interface TransitGatewayMulticastDomainAssociation {
   /**
    * @public
-   * <p>The ID of the Client VPN endpoint to which the client certificate revocation list applies.</p>
+   * <p>The ID of the transit gateway attachment.</p>
    */
-  ClientVpnEndpointId: string | undefined;
+  TransitGatewayAttachmentId?: string;
 
   /**
    * @public
-   * <p>The client certificate revocation list file. For more information, see <a href="https://docs.aws.amazon.com/vpn/latest/clientvpn-admin/cvpn-working-certificates.html#cvpn-working-certificates-generate">Generate a Client Certificate Revocation List</a> in the
-   * 				<i>Client VPN Administrator Guide</i>.</p>
-   */
-  CertificateRevocationList: string | undefined;
-
-  /**
-   * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-   */
-  DryRun?: boolean;
-}
-
-/**
- * @public
- */
-export interface ImportClientVpnClientCertificateRevocationListResult {
-  /**
-   * @public
-   * <p>Returns <code>true</code> if the request succeeds; otherwise, it returns an error.</p>
-   */
-  Return?: boolean;
-}
-
-/**
- * @public
- * <p>Describes the client-specific data.</p>
- */
-export interface ClientData {
-  /**
-   * @public
-   * <p>A user-defined comment about the disk upload.</p>
+   * <p>The ID of the resource.</p>
    */
-  Comment?: string;
+  ResourceId?: string;
 
   /**
    * @public
-   * <p>The time that the disk upload ends.</p>
+   * <p>The type of resource, for example a VPC attachment.</p>
    */
-  UploadEnd?: Date;
+  ResourceType?: TransitGatewayAttachmentResourceType;
 
   /**
    * @public
-   * <p>The size of the uploaded disk image, in GiB.</p>
+   * <p> The ID of the Amazon Web Services account that owns the transit gateway multicast domain association resource.</p>
    */
-  UploadSize?: number;
+  ResourceOwnerId?: string;
 
   /**
    * @public
-   * <p>The time that the disk upload starts.</p>
+   * <p>The subnet associated with the transit gateway multicast domain.</p>
    */
-  UploadStart?: Date;
+  Subnet?: SubnetAssociation;
 }
 
 /**
  * @public
- * <p>Describes the Amazon S3 bucket for the disk image.</p>
  */
-export interface UserBucket {
+export interface GetTransitGatewayMulticastDomainAssociationsResult {
   /**
    * @public
-   * <p>The name of the Amazon S3 bucket where the disk image is located.</p>
+   * <p>Information about the multicast domain associations.</p>
    */
-  S3Bucket?: string;
+  MulticastDomainAssociations?: TransitGatewayMulticastDomainAssociation[];
 
   /**
    * @public
-   * <p>The file name of the disk image.</p>
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
    */
-  S3Key?: string;
+  NextToken?: string;
 }
 
 /**
  * @public
- * <p>Describes the disk container object for an import image task.</p>
  */
-export interface ImageDiskContainer {
-  /**
-   * @public
-   * <p>The description of the disk image.</p>
-   */
-  Description?: string;
-
+export interface GetTransitGatewayPolicyTableAssociationsRequest {
   /**
    * @public
-   * <p>The block device mapping for the disk.</p>
+   * <p>The ID of the transit gateway policy table.</p>
    */
-  DeviceName?: string;
+  TransitGatewayPolicyTableId: string | undefined;
 
   /**
    * @public
-   * <p>The format of the disk image being imported.</p>
-   *          <p>Valid values: <code>OVA</code> | <code>VHD</code> | <code>VHDX</code> | <code>VMDK</code> | <code>RAW</code>
-   *          </p>
+   * <p>The filters associated with the transit gateway policy table.</p>
    */
-  Format?: string;
+  Filters?: Filter[];
 
   /**
    * @public
-   * <p>The ID of the EBS snapshot to be used for importing the snapshot.</p>
+   * <p>The maximum number of results to return with a single call.
+   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
    */
-  SnapshotId?: string;
+  MaxResults?: number;
 
   /**
    * @public
-   * <p>The URL to the Amazon S3-based disk image being imported. The URL can either be a https URL (https://..) or an
-   *    Amazon S3 URL (s3://..)</p>
+   * <p>The token for the next page of results.</p>
    */
-  Url?: string;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The S3 bucket for the disk image.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  UserBucket?: UserBucket;
+  DryRun?: boolean;
 }
 
 /**
  * @public
- * <p>The request information of license configurations.</p>
  */
-export interface ImportImageLicenseConfigurationRequest {
+export interface GetTransitGatewayPolicyTableAssociationsResult {
   /**
    * @public
-   * <p>The ARN of a license configuration.</p>
+   * <p>Returns details about the transit gateway policy table association.</p>
    */
-  LicenseConfigurationArn?: string;
-}
+  Associations?: TransitGatewayPolicyTableAssociation[];
 
-/**
- * @public
- */
-export interface ImportImageRequest {
   /**
    * @public
-   * <p>The architecture of the virtual machine.</p>
-   *          <p>Valid values: <code>i386</code> | <code>x86_64</code>
-   *          </p>
+   * <p>The token for the next page of results.</p>
    */
-  Architecture?: string;
+  NextToken?: string;
+}
 
+/**
+ * @public
+ */
+export interface GetTransitGatewayPolicyTableEntriesRequest {
   /**
    * @public
-   * <p>The client-specific data.</p>
+   * <p>The ID of the transit gateway policy table.</p>
    */
-  ClientData?: ClientData;
+  TransitGatewayPolicyTableId: string | undefined;
 
   /**
    * @public
-   * <p>The token to enable idempotency for VM import requests.</p>
+   * <p>The filters associated with the transit gateway policy table.</p>
    */
-  ClientToken?: string;
+  Filters?: Filter[];
 
   /**
    * @public
-   * <p>A description string for the import image task.</p>
+   * <p>The maximum number of results to return with a single call.
+   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
    */
-  Description?: string;
+  MaxResults?: number;
 
   /**
    * @public
-   * <p>Information about the disk containers.</p>
+   * <p>The token for the next page of results.</p>
    */
-  DiskContainers?: ImageDiskContainer[];
+  NextToken?: string;
 
   /**
    * @public
@@ -1611,378 +1564,443 @@ export interface ImportImageRequest {
    *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
+}
 
+/**
+ * @public
+ * <p>Describes the meta data tags associated with a transit gateway policy rule.</p>
+ */
+export interface TransitGatewayPolicyRuleMetaData {
   /**
    * @public
-   * <p>Specifies whether the destination AMI of the imported image should be encrypted. The default KMS key for EBS is used
-   *    unless you specify a non-default KMS key using <code>KmsKeyId</code>. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSEncryption.html">Amazon EBS Encryption</a> in the
-   *     <i>Amazon Elastic Compute Cloud User Guide</i>.</p>
+   * <p>The key name for the transit gateway policy rule meta data tag.</p>
    */
-  Encrypted?: boolean;
+  MetaDataKey?: string;
 
   /**
    * @public
-   * <p>The target hypervisor platform.</p>
-   *          <p>Valid values: <code>xen</code>
-   *          </p>
+   * <p>The value of the key for the transit gateway policy rule meta data tag.</p>
    */
-  Hypervisor?: string;
+  MetaDataValue?: string;
+}
 
+/**
+ * @public
+ * <p>Describes a rule associated with a transit gateway policy.</p>
+ */
+export interface TransitGatewayPolicyRule {
   /**
    * @public
-   * <p>An identifier for the symmetric KMS key to use when creating the
-   *    encrypted AMI. This parameter is only required if you want to use a non-default KMS key; if this
-   *    parameter is not specified, the default KMS key for EBS is used. If a <code>KmsKeyId</code> is
-   *    specified, the <code>Encrypted</code> flag must also be set. </p>
-   *          <p>The KMS key identifier may be provided in any of the following formats: </p>
-   *          <ul>
-   *             <li>
-   *                <p>Key ID</p>
-   *             </li>
-   *             <li>
-   *                <p>Key alias</p>
-   *             </li>
-   *             <li>
-   *                <p>ARN using key ID. The ID ARN contains the <code>arn:aws:kms</code> namespace, followed by the Region of the key, the Amazon Web Services account ID of the key owner, the <code>key</code> namespace, and then the key ID. For example, arn:aws:kms:<i>us-east-1</i>:<i>012345678910</i>:key/<i>abcd1234-a123-456a-a12b-a123b4cd56ef</i>.</p>
-   *             </li>
-   *             <li>
-   *                <p>ARN using key alias. The alias ARN contains the <code>arn:aws:kms</code> namespace, followed by the Region of the key, the Amazon Web Services account ID of the key owner, the <code>alias</code> namespace, and then the key alias. For example, arn:aws:kms:<i>us-east-1</i>:<i>012345678910</i>:alias/<i>ExampleAlias</i>. </p>
-   *             </li>
-   *          </ul>
-   *          <p>Amazon Web Services parses <code>KmsKeyId</code> asynchronously, meaning that the action you call may appear to complete even
-   *    though you provided an invalid identifier. This action will eventually report failure. </p>
-   *          <p>The specified KMS key must exist in the Region that the AMI is being copied to.</p>
-   *          <p>Amazon EBS does not support asymmetric KMS keys.</p>
+   * <p>The source CIDR block for the transit gateway policy rule.</p>
    */
-  KmsKeyId?: string;
+  SourceCidrBlock?: string;
 
   /**
    * @public
-   * <p>The license type to be used for the Amazon Machine Image (AMI) after importing.</p>
-   *          <p>Specify <code>AWS</code> to replace the source-system license with an Amazon Web Services
-   *    license or <code>BYOL</code> to retain the source-system license. Leaving this parameter
-   *    undefined is the same as choosing <code>AWS</code> when importing a Windows Server operating
-   *    system, and the same as choosing <code>BYOL</code> when importing a Windows client operating
-   *    system (such as Windows 10) or a Linux operating system.</p>
-   *          <p>To use <code>BYOL</code>, you must have existing licenses with rights to use these licenses in a third party
-   *    cloud, such as Amazon Web Services. For more information, see <a href="https://docs.aws.amazon.com/vm-import/latest/userguide/vmimport-image-import.html#prerequisites-image">Prerequisites</a> in the
-   *    VM Import/Export User Guide.</p>
+   * <p>The port range for the transit gateway policy rule. Currently this is set to * (all).</p>
    */
-  LicenseType?: string;
+  SourcePortRange?: string;
 
   /**
    * @public
-   * <p>The operating system of the virtual machine. If you import a VM that is compatible with
-   *    Unified Extensible Firmware Interface (UEFI) using an EBS snapshot, you must specify a value for
-   *    the platform.</p>
-   *          <p>Valid values: <code>Windows</code> | <code>Linux</code>
-   *          </p>
+   * <p>The destination CIDR block for the transit gateway policy rule.</p>
    */
-  Platform?: string;
+  DestinationCidrBlock?: string;
 
   /**
    * @public
-   * <p>The name of the role to use when not using the default role, 'vmimport'.</p>
+   * <p>The port range for the transit gateway policy rule. Currently this is set to * (all).</p>
    */
-  RoleName?: string;
+  DestinationPortRange?: string;
 
   /**
    * @public
-   * <p>The ARNs of the license configurations.</p>
+   * <p>The protocol used by the transit gateway policy rule.</p>
    */
-  LicenseSpecifications?: ImportImageLicenseConfigurationRequest[];
+  Protocol?: string;
 
   /**
    * @public
-   * <p>The tags to apply to the import image task during creation.</p>
+   * <p>The meta data tags used for the transit gateway policy rule.</p>
    */
-  TagSpecifications?: TagSpecification[];
+  MetaData?: TransitGatewayPolicyRuleMetaData;
+}
 
+/**
+ * @public
+ * <p>Describes a transit gateway policy table entry</p>
+ */
+export interface TransitGatewayPolicyTableEntry {
   /**
    * @public
-   * <p>The usage operation value. For more information, see <a href="https://docs.aws.amazon.com/vm-import/latest/userguide/vmie_prereqs.html#prerequisites">Licensing options</a> in the <i>VM Import/Export User Guide</i>.</p>
+   * <p>The rule number for the transit gateway policy table entry.</p>
    */
-  UsageOperation?: string;
+  PolicyRuleNumber?: string;
 
   /**
    * @public
-   * <p>The boot mode of the virtual machine.</p>
-   *          <note>
-   *             <p>The <code>uefi-preferred</code> boot mode isn't supported for importing images. For more
-   *     information, see <a href="https://docs.aws.amazon.com/vm-import/latest/userguide/prerequisites.html#vmimport-boot-modes">Boot modes</a> in
-   *     the <i>VM Import/Export User Guide</i>.</p>
-   *          </note>
+   * <p>The policy rule associated with the transit gateway policy table.</p>
    */
-  BootMode?: BootModeValues;
+  PolicyRule?: TransitGatewayPolicyRule;
+
+  /**
+   * @public
+   * <p>The ID of the target route table.</p>
+   */
+  TargetRouteTableId?: string;
 }
 
 /**
  * @public
  */
-export interface ImportImageResult {
+export interface GetTransitGatewayPolicyTableEntriesResult {
   /**
    * @public
-   * <p>The architecture of the virtual machine.</p>
+   * <p>The entries for the transit gateway policy table.</p>
    */
-  Architecture?: string;
+  TransitGatewayPolicyTableEntries?: TransitGatewayPolicyTableEntry[];
+}
 
+/**
+ * @public
+ */
+export interface GetTransitGatewayPrefixListReferencesRequest {
   /**
    * @public
-   * <p>A description of the import task.</p>
+   * <p>The ID of the transit gateway route table.</p>
    */
-  Description?: string;
+  TransitGatewayRouteTableId: string | undefined;
 
   /**
    * @public
-   * <p>Indicates whether the AMI is encrypted.</p>
-   */
-  Encrypted?: boolean;
-
+   * <p>One or more filters. The possible values are:</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>attachment.resource-id</code> - The ID of the resource for the attachment.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>attachment.resource-type</code> - The type of resource for the
+   *                     attachment. Valid values are <code>vpc</code> | <code>vpn</code> |
+   *                         <code>direct-connect-gateway</code> | <code>peering</code>.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>attachment.transit-gateway-attachment-id</code> - The ID of the attachment.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>is-blackhole</code> - Whether traffic matching the route is blocked (<code>true</code> | <code>false</code>).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>prefix-list-id</code> - The ID of the prefix list.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>prefix-list-owner-id</code> - The ID of the owner of the prefix list.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>state</code> - The state of the prefix list reference (<code>pending</code> | <code>available</code> | <code>modifying</code> | <code>deleting</code>).</p>
+   *             </li>
+   *          </ul>
+   */
+  Filters?: Filter[];
+
   /**
    * @public
-   * <p>The target hypervisor of the import task.</p>
+   * <p>The maximum number of results to return with a single call.
+   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
    */
-  Hypervisor?: string;
+  MaxResults?: number;
 
   /**
    * @public
-   * <p>The ID of the Amazon Machine Image (AMI) created by the import task.</p>
+   * <p>The token for the next page of results.</p>
    */
-  ImageId?: string;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The task ID of the import image task.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  ImportTaskId?: string;
+  DryRun?: boolean;
+}
 
+/**
+ * @public
+ */
+export interface GetTransitGatewayPrefixListReferencesResult {
   /**
    * @public
-   * <p>The identifier for the symmetric KMS key that was used to create the encrypted AMI.</p>
+   * <p>Information about the prefix list references.</p>
    */
-  KmsKeyId?: string;
+  TransitGatewayPrefixListReferences?: TransitGatewayPrefixListReference[];
 
   /**
    * @public
-   * <p>The license type of the virtual machine.</p>
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
    */
-  LicenseType?: string;
+  NextToken?: string;
+}
 
+/**
+ * @public
+ */
+export interface GetTransitGatewayRouteTableAssociationsRequest {
   /**
    * @public
-   * <p>The operating system of the virtual machine.</p>
+   * <p>The ID of the transit gateway route table.</p>
    */
-  Platform?: string;
+  TransitGatewayRouteTableId: string | undefined;
 
   /**
    * @public
-   * <p>The progress of the task.</p>
+   * <p>One or more filters. The possible values are:</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>resource-id</code> - The ID of the resource.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>resource-type</code> - The resource type. Valid values are <code>vpc</code>
+   *                     | <code>vpn</code> | <code>direct-connect-gateway</code> | <code>peering</code>
+   *                     | <code>connect</code>.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>transit-gateway-attachment-id</code> - The ID of the attachment.</p>
+   *             </li>
+   *          </ul>
    */
-  Progress?: string;
+  Filters?: Filter[];
 
   /**
    * @public
-   * <p>Information about the snapshots.</p>
+   * <p>The maximum number of results to return with a single call.
+   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
    */
-  SnapshotDetails?: SnapshotDetail[];
+  MaxResults?: number;
 
   /**
    * @public
-   * <p>A brief status of the task.</p>
+   * <p>The token for the next page of results.</p>
    */
-  Status?: string;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>A detailed status message of the import task.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  StatusMessage?: string;
+  DryRun?: boolean;
+}
 
+/**
+ * @public
+ * <p>Describes an association between a route table and a resource attachment.</p>
+ */
+export interface TransitGatewayRouteTableAssociation {
   /**
    * @public
-   * <p>The ARNs of the license configurations.</p>
+   * <p>The ID of the attachment.</p>
    */
-  LicenseSpecifications?: ImportImageLicenseConfigurationResponse[];
+  TransitGatewayAttachmentId?: string;
 
   /**
    * @public
-   * <p>Any tags assigned to the import image task.</p>
+   * <p>The ID of the resource.</p>
    */
-  Tags?: Tag[];
+  ResourceId?: string;
 
   /**
    * @public
-   * <p>The usage operation value.</p>
+   * <p>The resource type. Note that the <code>tgw-peering</code> resource type has been deprecated.</p>
    */
-  UsageOperation?: string;
-}
+  ResourceType?: TransitGatewayAttachmentResourceType;
 
-/**
- * @public
- * <p>Describes a disk image.</p>
- */
-export interface DiskImageDetail {
   /**
    * @public
-   * <p>The size of the disk image, in GiB.</p>
+   * <p>The state of the association.</p>
    */
-  Bytes: number | undefined;
+  State?: TransitGatewayAssociationState;
+}
 
+/**
+ * @public
+ */
+export interface GetTransitGatewayRouteTableAssociationsResult {
   /**
    * @public
-   * <p>The disk image format.</p>
+   * <p>Information about the associations.</p>
    */
-  Format: DiskImageFormat | undefined;
+  Associations?: TransitGatewayRouteTableAssociation[];
 
   /**
    * @public
-   * <p>A presigned URL for the import manifest stored in Amazon S3 and presented here as an Amazon S3 presigned URL.
-   *    For information about creating a presigned URL for an Amazon S3 object, read the "Query String Request Authentication
-   *    Alternative" section of the <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/RESTAuthentication.html">Authenticating REST Requests</a> topic in the <i>Amazon Simple Storage Service Developer
-   *     Guide</i>.</p>
-   *          <p>For information about the import manifest referenced by this API action, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/manifest.html">VM Import Manifest</a>.</p>
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
    */
-  ImportManifestUrl: string | undefined;
+  NextToken?: string;
 }
 
 /**
  * @public
- * <p>Describes an EBS volume.</p>
  */
-export interface VolumeDetail {
+export interface GetTransitGatewayRouteTablePropagationsRequest {
   /**
    * @public
-   * <p>The size of the volume, in GiB.</p>
+   * <p>The ID of the transit gateway route table.</p>
    */
-  Size: number | undefined;
-}
+  TransitGatewayRouteTableId: string | undefined;
 
-/**
- * @public
- * <p>Describes a disk image.</p>
- */
-export interface DiskImage {
   /**
    * @public
-   * <p>A description of the disk image.</p>
+   * <p>One or more filters. The possible values are:</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>resource-id</code> - The ID of the resource.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>resource-type</code> - The resource type. Valid values are <code>vpc</code>
+   *                     | <code>vpn</code> | <code>direct-connect-gateway</code> | <code>peering</code>
+   *                     | <code>connect</code>.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>transit-gateway-attachment-id</code> - The ID of the attachment.</p>
+   *             </li>
+   *          </ul>
    */
-  Description?: string;
+  Filters?: Filter[];
 
   /**
    * @public
-   * <p>Information about the disk image.</p>
+   * <p>The maximum number of results to return with a single call.
+   * 	To retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>
    */
-  Image?: DiskImageDetail;
+  MaxResults?: number;
 
   /**
    * @public
-   * <p>Information about the volume.</p>
+   * <p>The token for the next page of results.</p>
    */
-  Volume?: VolumeDetail;
-}
+  NextToken?: string;
 
-/**
- * @public
- * <p>Describes the user data for an instance.</p>
- */
-export interface UserData {
   /**
    * @public
-   * <p>The user data. If you are using an Amazon Web Services SDK or command line tool, Base64-encoding is performed for you, and you
-   *    can load the text from a file. Otherwise, you must provide Base64-encoded text.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  Data?: string;
+  DryRun?: boolean;
 }
 
 /**
  * @public
- * <p>Describes the launch specification for VM import.</p>
+ * <p>Describes a route table propagation.</p>
  */
-export interface ImportInstanceLaunchSpecification {
+export interface TransitGatewayRouteTablePropagation {
   /**
    * @public
-   * <p>Reserved.</p>
+   * <p>The ID of the attachment.</p>
    */
-  AdditionalInfo?: string;
+  TransitGatewayAttachmentId?: string;
 
   /**
    * @public
-   * <p>The architecture of the instance.</p>
+   * <p>The ID of the resource.</p>
    */
-  Architecture?: ArchitectureValues;
+  ResourceId?: string;
 
   /**
    * @public
-   * <p>The security group IDs.</p>
+   * <p>The type of resource. Note that the <code>tgw-peering</code> resource type has been deprecated.</p>
    */
-  GroupIds?: string[];
+  ResourceType?: TransitGatewayAttachmentResourceType;
 
   /**
    * @public
-   * <p>The security group names.</p>
+   * <p>The state of the resource.</p>
    */
-  GroupNames?: string[];
+  State?: TransitGatewayPropagationState;
 
   /**
    * @public
-   * <p>Indicates whether an instance stops or terminates when you initiate shutdown from the instance (using the
-   *    operating system command for system shutdown).</p>
+   * <p>The ID of the transit gateway route table announcement.</p>
    */
-  InstanceInitiatedShutdownBehavior?: ShutdownBehavior;
+  TransitGatewayRouteTableAnnouncementId?: string;
+}
 
+/**
+ * @public
+ */
+export interface GetTransitGatewayRouteTablePropagationsResult {
   /**
    * @public
-   * <p>The instance type. For more information about the instance types that you can import, see <a href="https://docs.aws.amazon.com/vm-import/latest/userguide/vmie_prereqs.html#vmimport-instance-types">Instance Types</a> in the
-   *    VM Import/Export User Guide.</p>
+   * <p>Information about the route table propagations.</p>
    */
-  InstanceType?: _InstanceType;
+  TransitGatewayRouteTablePropagations?: TransitGatewayRouteTablePropagation[];
 
   /**
    * @public
-   * <p>Indicates whether monitoring is enabled.</p>
+   * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
    */
-  Monitoring?: boolean;
+  NextToken?: string;
+}
 
+/**
+ * @public
+ */
+export interface GetVerifiedAccessEndpointPolicyRequest {
   /**
    * @public
-   * <p>The placement information for the instance.</p>
+   * <p>The ID of the Verified Access endpoint.</p>
    */
-  Placement?: Placement;
+  VerifiedAccessEndpointId: string | undefined;
 
   /**
    * @public
-   * <p>[EC2-VPC] An available IP address from the IP address range of the subnet.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  PrivateIpAddress?: string;
+  DryRun?: boolean;
+}
 
+/**
+ * @public
+ */
+export interface GetVerifiedAccessEndpointPolicyResult {
   /**
    * @public
-   * <p>[EC2-VPC] The ID of the subnet in which to launch the instance.</p>
+   * <p>The status of the Verified Access policy.</p>
    */
-  SubnetId?: string;
+  PolicyEnabled?: boolean;
 
   /**
    * @public
-   * <p>The Base64-encoded user data to make available to the instance.</p>
+   * <p>The Verified Access policy document.</p>
    */
-  UserData?: UserData;
+  PolicyDocument?: string;
 }
 
 /**
  * @public
  */
-export interface ImportInstanceRequest {
-  /**
-   * @public
-   * <p>A description for the instance being imported.</p>
-   */
-  Description?: string;
-
+export interface GetVerifiedAccessGroupPolicyRequest {
   /**
    * @public
-   * <p>The disk image.</p>
+   * <p>The ID of the Verified Access group.</p>
    */
-  DiskImages?: DiskImage[];
+  VerifiedAccessGroupId: string | undefined;
 
   /**
    * @public
@@ -1991,1843 +2009,1688 @@ export interface ImportInstanceRequest {
    *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
-
-  /**
-   * @public
-   * <p>The launch specification.</p>
-   */
-  LaunchSpecification?: ImportInstanceLaunchSpecification;
-
-  /**
-   * @public
-   * <p>The instance operating system.</p>
-   */
-  Platform: PlatformValues | undefined;
 }
 
 /**
  * @public
  */
-export interface ImportInstanceResult {
+export interface GetVerifiedAccessGroupPolicyResult {
   /**
    * @public
-   * <p>Information about the conversion task.</p>
+   * <p>The status of the Verified Access policy.</p>
    */
-  ConversionTask?: ConversionTask;
+  PolicyEnabled?: boolean;
+
+  /**
+   * @public
+   * <p>The Verified Access policy document.</p>
+   */
+  PolicyDocument?: string;
 }
 
 /**
  * @public
  */
-export interface ImportKeyPairRequest {
+export interface GetVpnConnectionDeviceSampleConfigurationRequest {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The <code>VpnConnectionId</code> specifies the Site-to-Site VPN connection used for the sample
+   *             configuration.</p>
    */
-  DryRun?: boolean;
+  VpnConnectionId: string | undefined;
 
   /**
    * @public
-   * <p>A unique name for the key pair.</p>
+   * <p>Device identifier provided by the <code>GetVpnConnectionDeviceTypes</code> API.</p>
    */
-  KeyName: string | undefined;
+  VpnConnectionDeviceTypeId: string | undefined;
 
   /**
    * @public
-   * <p>The public key. For API calls, the text must be base64-encoded. For command line tools, base64 encoding is performed for you.</p>
+   * <p>The IKE version to be used in the sample configuration file for your customer gateway
+   *             device. You can specify one of the following versions: <code>ikev1</code> or
+   *                 <code>ikev2</code>.</p>
    */
-  PublicKeyMaterial: Uint8Array | undefined;
+  InternetKeyExchangeVersion?: string;
 
   /**
    * @public
-   * <p>The tags to apply to the imported key pair.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually
+   *             making the request, and provides an error response. If you have the required
+   *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
+   *                 <code>UnauthorizedOperation</code>.</p>
    */
-  TagSpecifications?: TagSpecification[];
+  DryRun?: boolean;
 }
 
 /**
  * @public
  */
-export interface ImportKeyPairResult {
+export interface GetVpnConnectionDeviceSampleConfigurationResult {
   /**
    * @public
-   * <ul>
-   *             <li>
-   *                <p>For RSA key pairs, the key fingerprint is the MD5 public key fingerprint as specified in section 4 of RFC 4716.</p>
-   *             </li>
-   *             <li>
-   *                <p>For ED25519 key pairs, the key fingerprint is the base64-encoded SHA-256 digest, which is the default for OpenSSH, starting with <a href="http://www.openssh.com/txt/release-6.8">OpenSSH 6.8</a>.</p>
-   *             </li>
-   *          </ul>
+   * <p>Sample configuration file for the specified customer gateway device.</p>
    */
-  KeyFingerprint?: string;
+  VpnConnectionDeviceSampleConfiguration?: string;
+}
 
+/**
+ * @public
+ */
+export interface GetVpnConnectionDeviceTypesRequest {
   /**
    * @public
-   * <p>The key pair name that you provided.</p>
+   * <p>The maximum number of results returned by <code>GetVpnConnectionDeviceTypes</code> in
+   *             paginated output. When this parameter is used, <code>GetVpnConnectionDeviceTypes</code>
+   *             only returns <code>MaxResults</code> results in a single page along with a
+   *                 <code>NextToken</code> response element. The remaining results of the initial
+   *             request can be seen by sending another <code>GetVpnConnectionDeviceTypes</code> request
+   *             with the returned <code>NextToken</code> value. This value can be between 200 and 1000.
+   *             If this parameter is not used, then <code>GetVpnConnectionDeviceTypes</code> returns all
+   *             results.</p>
    */
-  KeyName?: string;
+  MaxResults?: number;
 
   /**
    * @public
-   * <p>The ID of the resulting key pair.</p>
+   * <p>The <code>NextToken</code> value returned from a previous paginated
+   *                 <code>GetVpnConnectionDeviceTypes</code> request where <code>MaxResults</code> was
+   *             used and the results exceeded the value of that parameter. Pagination continues from the
+   *             end of the previous results that returned the <code>NextToken</code> value. This value
+   *             is null when there are no more results to return. </p>
    */
-  KeyPairId?: string;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The tags applied to the imported key pair.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually
+   *             making the request, and provides an error response. If you have the required
+   *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
+   *                 <code>UnauthorizedOperation</code>.</p>
    */
-  Tags?: Tag[];
+  DryRun?: boolean;
 }
 
 /**
  * @public
- * <p>The disk container object for the import snapshot request.</p>
+ * <p>List of customer gateway devices that have a sample configuration file available for
+ *             use. You can also see the list of device types with sample configuration files available
+ *             under <a href="https://docs.aws.amazon.com/vpn/latest/s2svpn/your-cgw.html">Your customer
+ *                 gateway device</a> in the <i>Amazon Web Services Site-to-Site VPN User Guide</i>.</p>
  */
-export interface SnapshotDiskContainer {
+export interface VpnConnectionDeviceType {
   /**
    * @public
-   * <p>The description of the disk image being imported.</p>
+   * <p>Customer gateway device identifier.</p>
    */
-  Description?: string;
+  VpnConnectionDeviceTypeId?: string;
 
   /**
    * @public
-   * <p>The format of the disk image being imported.</p>
-   *          <p>Valid values: <code>VHD</code> | <code>VMDK</code> | <code>RAW</code>
-   *          </p>
+   * <p>Customer gateway device vendor.</p>
    */
-  Format?: string;
+  Vendor?: string;
 
   /**
    * @public
-   * <p>The URL to the Amazon S3-based disk image being imported. It can either be a https URL (https://..) or an Amazon
-   *    S3 URL (s3://..).</p>
+   * <p>Customer gateway device platform.</p>
    */
-  Url?: string;
+  Platform?: string;
 
   /**
    * @public
-   * <p>The Amazon S3 bucket for the disk image.</p>
+   * <p>Customer gateway device software version.</p>
    */
-  UserBucket?: UserBucket;
+  Software?: string;
 }
 
 /**
  * @public
  */
-export interface ImportSnapshotRequest {
+export interface GetVpnConnectionDeviceTypesResult {
   /**
    * @public
-   * <p>The client-specific data.</p>
+   * <p>List of customer gateway devices that have a sample configuration file available for
+   *             use.</p>
    */
-  ClientData?: ClientData;
+  VpnConnectionDeviceTypes?: VpnConnectionDeviceType[];
 
   /**
    * @public
-   * <p>Token to enable idempotency for VM import requests.</p>
+   * <p>The <code>NextToken</code> value to include in a future
+   *                 <code>GetVpnConnectionDeviceTypes</code> request. When the results of a
+   *                 <code>GetVpnConnectionDeviceTypes</code> request exceed <code>MaxResults</code>,
+   *             this value can be used to retrieve the next page of results. This value is null when
+   *             there are no more results to return.</p>
    */
-  ClientToken?: string;
+  NextToken?: string;
+}
 
+/**
+ * @public
+ */
+export interface GetVpnTunnelReplacementStatusRequest {
   /**
    * @public
-   * <p>The description string for the import snapshot task.</p>
+   * <p>The ID of the Site-to-Site VPN connection. </p>
    */
-  Description?: string;
+  VpnConnectionId: string | undefined;
 
   /**
    * @public
-   * <p>Information about the disk container.</p>
+   * <p>The external IP address of the VPN tunnel.</p>
    */
-  DiskContainer?: SnapshotDiskContainer;
+  VpnTunnelOutsideIpAddress: string | undefined;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
+}
 
+/**
+ * @public
+ * <p>Details for Site-to-Site VPN tunnel endpoint maintenance events.</p>
+ */
+export interface MaintenanceDetails {
   /**
    * @public
-   * <p>Specifies whether the destination snapshot of the imported image should be encrypted. The default KMS key for EBS is
-   *    used unless you specify a non-default KMS key using <code>KmsKeyId</code>. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSEncryption.html">Amazon EBS Encryption</a> in the
-   *     <i>Amazon Elastic Compute Cloud User Guide</i>.</p>
-   */
-  Encrypted?: boolean;
-
-  /**
-   * @public
-   * <p>An identifier for the symmetric KMS key to use when creating the
-   *    encrypted snapshot. This parameter is only required if you want to use a non-default KMS key; if this
-   *    parameter is not specified, the default KMS key for EBS is used. If a <code>KmsKeyId</code> is
-   *    specified, the <code>Encrypted</code> flag must also be set. </p>
-   *          <p>The KMS key identifier may be provided in any of the following formats: </p>
-   *          <ul>
-   *             <li>
-   *                <p>Key ID</p>
-   *             </li>
-   *             <li>
-   *                <p>Key alias</p>
-   *             </li>
-   *             <li>
-   *                <p>ARN using key ID. The ID ARN contains the <code>arn:aws:kms</code> namespace, followed by the Region of the key, the Amazon Web Services account ID of the key owner, the <code>key</code> namespace, and then the key ID. For example, arn:aws:kms:<i>us-east-1</i>:<i>012345678910</i>:key/<i>abcd1234-a123-456a-a12b-a123b4cd56ef</i>.</p>
-   *             </li>
-   *             <li>
-   *                <p>ARN using key alias. The alias ARN contains the <code>arn:aws:kms</code> namespace, followed by the Region of the key, the Amazon Web Services account ID of the key owner, the <code>alias</code> namespace, and then the key alias. For example, arn:aws:kms:<i>us-east-1</i>:<i>012345678910</i>:alias/<i>ExampleAlias</i>. </p>
-   *             </li>
-   *          </ul>
-   *          <p>Amazon Web Services parses <code>KmsKeyId</code> asynchronously, meaning that the action you call may appear to complete even
-   *    though you provided an invalid identifier. This action will eventually report failure. </p>
-   *          <p>The specified KMS key must exist in the Region that the snapshot is being copied to.</p>
-   *          <p>Amazon EBS does not support asymmetric KMS keys.</p>
+   * <p>Verify existence of a pending maintenance.</p>
    */
-  KmsKeyId?: string;
+  PendingMaintenance?: string;
 
   /**
    * @public
-   * <p>The name of the role to use when not using the default role, 'vmimport'.</p>
+   * <p>The timestamp after which Amazon Web Services will automatically apply maintenance.</p>
    */
-  RoleName?: string;
+  MaintenanceAutoAppliedAfter?: Date;
 
   /**
    * @public
-   * <p>The tags to apply to the import snapshot task during creation.</p>
+   * <p>Timestamp of last applied maintenance.</p>
    */
-  TagSpecifications?: TagSpecification[];
+  LastMaintenanceApplied?: Date;
 }
 
 /**
  * @public
  */
-export interface ImportSnapshotResult {
+export interface GetVpnTunnelReplacementStatusResult {
   /**
    * @public
-   * <p>A description of the import snapshot task.</p>
+   * <p>The ID of the Site-to-Site VPN connection. </p>
    */
-  Description?: string;
+  VpnConnectionId?: string;
 
   /**
    * @public
-   * <p>The ID of the import snapshot task.</p>
+   * <p>The ID of the transit gateway associated with the VPN connection.</p>
    */
-  ImportTaskId?: string;
+  TransitGatewayId?: string;
 
   /**
    * @public
-   * <p>Information about the import snapshot task.</p>
+   * <p>The ID of the customer gateway.</p>
    */
-  SnapshotTaskDetail?: SnapshotTaskDetail;
+  CustomerGatewayId?: string;
 
   /**
    * @public
-   * <p>Any tags assigned to the import snapshot task.</p>
+   * <p>The ID of the virtual private gateway.</p>
    */
-  Tags?: Tag[];
-}
+  VpnGatewayId?: string;
 
-/**
- * @public
- */
-export interface ImportVolumeRequest {
   /**
    * @public
-   * <p>The Availability Zone for the resulting EBS volume.</p>
+   * <p>The external IP address of the VPN tunnel.</p>
    */
-  AvailabilityZone: string | undefined;
+  VpnTunnelOutsideIpAddress?: string;
 
   /**
    * @public
-   * <p>A description of the volume.</p>
+   * <p>Get details of pending tunnel endpoint maintenance.</p>
    */
-  Description?: string;
+  MaintenanceDetails?: MaintenanceDetails;
+}
 
+/**
+ * @public
+ */
+export interface ImportClientVpnClientCertificateRevocationListRequest {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The ID of the Client VPN endpoint to which the client certificate revocation list applies.</p>
    */
-  DryRun?: boolean;
+  ClientVpnEndpointId: string | undefined;
 
   /**
    * @public
-   * <p>The disk image.</p>
+   * <p>The client certificate revocation list file. For more information, see <a href="https://docs.aws.amazon.com/vpn/latest/clientvpn-admin/cvpn-working-certificates.html#cvpn-working-certificates-generate">Generate a Client Certificate Revocation List</a> in the
+   * 				<i>Client VPN Administrator Guide</i>.</p>
    */
-  Image: DiskImageDetail | undefined;
+  CertificateRevocationList: string | undefined;
 
   /**
    * @public
-   * <p>The volume size.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  Volume: VolumeDetail | undefined;
+  DryRun?: boolean;
 }
 
 /**
  * @public
  */
-export interface ImportVolumeResult {
+export interface ImportClientVpnClientCertificateRevocationListResult {
   /**
    * @public
-   * <p>Information about the conversion task.</p>
+   * <p>Returns <code>true</code> if the request succeeds; otherwise, it returns an error.</p>
    */
-  ConversionTask?: ConversionTask;
+  Return?: boolean;
 }
 
 /**
  * @public
+ * <p>Describes the client-specific data.</p>
  */
-export interface ListImagesInRecycleBinRequest {
+export interface ClientData {
   /**
    * @public
-   * <p>The IDs of the AMIs to list. Omit this parameter to list all of the AMIs that
-   *       are in the Recycle Bin. You can specify up to 20 IDs in a single request.</p>
+   * <p>A user-defined comment about the disk upload.</p>
    */
-  ImageIds?: string[];
+  Comment?: string;
 
   /**
    * @public
-   * <p>The token returned from a previous paginated request. Pagination continues from the end of the items returned by the previous request.</p>
+   * <p>The time that the disk upload ends.</p>
    */
-  NextToken?: string;
+  UploadEnd?: Date;
 
   /**
    * @public
-   * <p>The maximum number of items to return for this request.
-   *          To get the next page of items, make another request with the token returned in the output.
-   * 	        For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
+   * <p>The size of the uploaded disk image, in GiB.</p>
    */
-  MaxResults?: number;
+  UploadSize?: number;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   * 			and provides an error response. If you have the required permissions, the error response is
-   * 			<code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The time that the disk upload starts.</p>
    */
-  DryRun?: boolean;
+  UploadStart?: Date;
 }
 
 /**
  * @public
- * <p>Information about an AMI that is currently in the Recycle Bin.</p>
+ * <p>Describes the Amazon S3 bucket for the disk image.</p>
  */
-export interface ImageRecycleBinInfo {
+export interface UserBucket {
   /**
    * @public
-   * <p>The ID of the AMI.</p>
+   * <p>The name of the Amazon S3 bucket where the disk image is located.</p>
    */
-  ImageId?: string;
+  S3Bucket?: string;
 
   /**
    * @public
-   * <p>The name of the AMI.</p>
+   * <p>The file name of the disk image.</p>
    */
-  Name?: string;
+  S3Key?: string;
+}
 
+/**
+ * @public
+ * <p>Describes the disk container object for an import image task.</p>
+ */
+export interface ImageDiskContainer {
   /**
    * @public
-   * <p>The description of the AMI.</p>
+   * <p>The description of the disk image.</p>
    */
   Description?: string;
 
   /**
    * @public
-   * <p>The date and time when the AMI entered the Recycle Bin.</p>
+   * <p>The block device mapping for the disk.</p>
    */
-  RecycleBinEnterTime?: Date;
+  DeviceName?: string;
 
   /**
    * @public
-   * <p>The date and time when the AMI is to be permanently deleted from the Recycle Bin.</p>
+   * <p>The format of the disk image being imported.</p>
+   *          <p>Valid values: <code>OVA</code> | <code>VHD</code> | <code>VHDX</code> | <code>VMDK</code> | <code>RAW</code>
+   *          </p>
    */
-  RecycleBinExitTime?: Date;
-}
+  Format?: string;
 
-/**
- * @public
- */
-export interface ListImagesInRecycleBinResult {
   /**
    * @public
-   * <p>Information about the AMIs.</p>
+   * <p>The ID of the EBS snapshot to be used for importing the snapshot.</p>
    */
-  Images?: ImageRecycleBinInfo[];
+  SnapshotId?: string;
 
   /**
    * @public
-   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there
-   *          are no more items to return.</p>
+   * <p>The URL to the Amazon S3-based disk image being imported. The URL can either be a https URL (https://..) or an
+   *    Amazon S3 URL (s3://..)</p>
    */
-  NextToken?: string;
+  Url?: string;
+
+  /**
+   * @public
+   * <p>The S3 bucket for the disk image.</p>
+   */
+  UserBucket?: UserBucket;
 }
 
 /**
  * @public
+ * <p>The request information of license configurations.</p>
  */
-export interface ListSnapshotsInRecycleBinRequest {
+export interface ImportImageLicenseConfigurationRequest {
   /**
    * @public
-   * <p>The maximum number of items to return for this request.
-   * 	To get the next page of items, make another request with the token returned in the output.
-   * 	For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
+   * <p>The ARN of a license configuration.</p>
    */
-  MaxResults?: number;
+  LicenseConfigurationArn?: string;
+}
 
+/**
+ * @public
+ */
+export interface ImportImageRequest {
   /**
    * @public
-   * <p>The token returned from a previous paginated request.
-   *   Pagination continues from the end of the items returned by the previous request.</p>
+   * <p>The architecture of the virtual machine.</p>
+   *          <p>Valid values: <code>i386</code> | <code>x86_64</code>
+   *          </p>
    */
-  NextToken?: string;
+  Architecture?: string;
 
   /**
    * @public
-   * <p>The IDs of the snapshots to list. Omit this parameter to list all of the
-   *       snapshots that are in the Recycle Bin.</p>
+   * <p>The client-specific data.</p>
    */
-  SnapshotIds?: string[];
+  ClientData?: ClientData;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The token to enable idempotency for VM import requests.</p>
    */
-  DryRun?: boolean;
-}
+  ClientToken?: string;
 
-/**
- * @public
- * <p>Information about a snapshot that is currently in the Recycle Bin.</p>
- */
-export interface SnapshotRecycleBinInfo {
   /**
    * @public
-   * <p>The ID of the snapshot.</p>
+   * <p>A description string for the import image task.</p>
    */
-  SnapshotId?: string;
+  Description?: string;
 
   /**
    * @public
-   * <p>The date and time when the snaphsot entered the Recycle Bin.</p>
+   * <p>Information about the disk containers.</p>
    */
-  RecycleBinEnterTime?: Date;
+  DiskContainers?: ImageDiskContainer[];
 
   /**
    * @public
-   * <p>The date and time when the snapshot is to be permanently deleted from the Recycle Bin.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  RecycleBinExitTime?: Date;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The description for the snapshot.</p>
+   * <p>Specifies whether the destination AMI of the imported image should be encrypted. The default KMS key for EBS is used
+   *    unless you specify a non-default KMS key using <code>KmsKeyId</code>. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSEncryption.html">Amazon EBS Encryption</a> in the
+   *     <i>Amazon Elastic Compute Cloud User Guide</i>.</p>
    */
-  Description?: string;
+  Encrypted?: boolean;
 
   /**
    * @public
-   * <p>The ID of the volume from which the snapshot was created.</p>
+   * <p>The target hypervisor platform.</p>
+   *          <p>Valid values: <code>xen</code>
+   *          </p>
    */
-  VolumeId?: string;
-}
+  Hypervisor?: string;
 
-/**
- * @public
- */
-export interface ListSnapshotsInRecycleBinResult {
   /**
    * @public
-   * <p>Information about the snapshots.</p>
+   * <p>An identifier for the symmetric KMS key to use when creating the
+   *    encrypted AMI. This parameter is only required if you want to use a non-default KMS key; if this
+   *    parameter is not specified, the default KMS key for EBS is used. If a <code>KmsKeyId</code> is
+   *    specified, the <code>Encrypted</code> flag must also be set. </p>
+   *          <p>The KMS key identifier may be provided in any of the following formats: </p>
+   *          <ul>
+   *             <li>
+   *                <p>Key ID</p>
+   *             </li>
+   *             <li>
+   *                <p>Key alias</p>
+   *             </li>
+   *             <li>
+   *                <p>ARN using key ID. The ID ARN contains the <code>arn:aws:kms</code> namespace, followed by the Region of the key, the Amazon Web Services account ID of the key owner, the <code>key</code> namespace, and then the key ID. For example, arn:aws:kms:<i>us-east-1</i>:<i>012345678910</i>:key/<i>abcd1234-a123-456a-a12b-a123b4cd56ef</i>.</p>
+   *             </li>
+   *             <li>
+   *                <p>ARN using key alias. The alias ARN contains the <code>arn:aws:kms</code> namespace, followed by the Region of the key, the Amazon Web Services account ID of the key owner, the <code>alias</code> namespace, and then the key alias. For example, arn:aws:kms:<i>us-east-1</i>:<i>012345678910</i>:alias/<i>ExampleAlias</i>. </p>
+   *             </li>
+   *          </ul>
+   *          <p>Amazon Web Services parses <code>KmsKeyId</code> asynchronously, meaning that the action you call may appear to complete even
+   *    though you provided an invalid identifier. This action will eventually report failure. </p>
+   *          <p>The specified KMS key must exist in the Region that the AMI is being copied to.</p>
+   *          <p>Amazon EBS does not support asymmetric KMS keys.</p>
    */
-  Snapshots?: SnapshotRecycleBinInfo[];
+  KmsKeyId?: string;
 
   /**
    * @public
-   * <p>The token to include in another request to get the next page of items.
-   *   This value is <code>null</code> when there are no more items to return.</p>
+   * <p>The license type to be used for the Amazon Machine Image (AMI) after importing.</p>
+   *          <p>Specify <code>AWS</code> to replace the source-system license with an Amazon Web Services
+   *    license or <code>BYOL</code> to retain the source-system license. Leaving this parameter
+   *    undefined is the same as choosing <code>AWS</code> when importing a Windows Server operating
+   *    system, and the same as choosing <code>BYOL</code> when importing a Windows client operating
+   *    system (such as Windows 10) or a Linux operating system.</p>
+   *          <p>To use <code>BYOL</code>, you must have existing licenses with rights to use these licenses in a third party
+   *    cloud, such as Amazon Web Services. For more information, see <a href="https://docs.aws.amazon.com/vm-import/latest/userguide/vmimport-image-import.html#prerequisites-image">Prerequisites</a> in the
+   *    VM Import/Export User Guide.</p>
    */
-  NextToken?: string;
-}
+  LicenseType?: string;
 
-/**
- * @public
- * @enum
- */
-export const LockMode = {
-  compliance: "compliance",
-  governance: "governance",
-} as const;
+  /**
+   * @public
+   * <p>The operating system of the virtual machine. If you import a VM that is compatible with
+   *    Unified Extensible Firmware Interface (UEFI) using an EBS snapshot, you must specify a value for
+   *    the platform.</p>
+   *          <p>Valid values: <code>Windows</code> | <code>Linux</code>
+   *          </p>
+   */
+  Platform?: string;
 
-/**
- * @public
- */
-export type LockMode = (typeof LockMode)[keyof typeof LockMode];
+  /**
+   * @public
+   * <p>The name of the role to use when not using the default role, 'vmimport'.</p>
+   */
+  RoleName?: string;
 
-/**
- * @public
- */
-export interface LockSnapshotRequest {
   /**
    * @public
-   * <p>The ID of the snapshot to lock.</p>
+   * <p>The ARNs of the license configurations.</p>
    */
-  SnapshotId: string | undefined;
+  LicenseSpecifications?: ImportImageLicenseConfigurationRequest[];
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The tags to apply to the import image task during creation.</p>
    */
-  DryRun?: boolean;
+  TagSpecifications?: TagSpecification[];
 
   /**
    * @public
-   * <p>The mode in which to lock the snapshot. Specify one of the following:</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>governance</code> - Locks the snapshot in governance mode. Snapshots locked in governance
-   *           mode can't be deleted until one of the following conditions are met:</p>
-   *                <ul>
-   *                   <li>
-   *                      <p>The lock duration expires.</p>
-   *                   </li>
-   *                   <li>
-   *                      <p>The snapshot is unlocked by a user with the appropriate permissions.</p>
-   *                   </li>
-   *                </ul>
-   *                <p>Users with the appropriate IAM permissions can unlock the snapshot, increase or decrease the lock
-   *           duration, and change the lock mode to <code>compliance</code> at any time.</p>
-   *                <p>If you lock a snapshot in <code>governance</code> mode, omit <b>
-   *           CoolOffPeriod</b>.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>compliance</code> - Locks the snapshot in compliance mode. Snapshots locked in compliance
-   *           mode can't be unlocked by any user. They can be deleted only after the lock duration expires. Users
-   *           can't decrease the lock duration or change the lock mode to <code>governance</code>. However, users
-   *           with appropriate IAM permissions can increase the lock duration at any time.</p>
-   *                <p>If you lock a snapshot in <code>compliance</code> mode, you can optionally specify
-   *           <b>CoolOffPeriod</b>.</p>
-   *             </li>
-   *          </ul>
+   * <p>The usage operation value. For more information, see <a href="https://docs.aws.amazon.com/vm-import/latest/userguide/vmie_prereqs.html#prerequisites">Licensing options</a> in the <i>VM Import/Export User Guide</i>.</p>
    */
-  LockMode: LockMode | undefined;
+  UsageOperation?: string;
 
   /**
    * @public
-   * <p>The cooling-off period during which you can unlock the snapshot or modify the lock settings after
-   *       locking the snapshot in compliance mode, in hours. After the cooling-off period expires, you can't
-   *       unlock or delete the snapshot, decrease the lock duration, or change the lock mode. You can increase
-   *       the lock duration after the cooling-off period expires.</p>
-   *          <p>The cooling-off period is optional when locking a snapshot in compliance mode. If you are locking
-   *       the snapshot in governance mode, omit this parameter.</p>
-   *          <p>To lock the snapshot in compliance mode immediately without a cooling-off period, omit this
-   *       parameter.</p>
-   *          <p>If you are extending the lock duration for a snapshot that is locked in compliance mode after
-   *       the cooling-off period has expired, omit this parameter. If you specify a cooling-period in a such
-   *       a request, the request fails.</p>
-   *          <p>Allowed values: Min 1, max 72.</p>
+   * <p>The boot mode of the virtual machine.</p>
+   *          <note>
+   *             <p>The <code>uefi-preferred</code> boot mode isn't supported for importing images. For more
+   *     information, see <a href="https://docs.aws.amazon.com/vm-import/latest/userguide/prerequisites.html#vmimport-boot-modes">Boot modes</a> in
+   *     the <i>VM Import/Export User Guide</i>.</p>
+   *          </note>
    */
-  CoolOffPeriod?: number;
+  BootMode?: BootModeValues;
+}
 
+/**
+ * @public
+ */
+export interface ImportImageResult {
   /**
    * @public
-   * <p>The period of time for which to lock the snapshot, in days. The snapshot lock will automatically
-   *       expire after this period lapses.</p>
-   *          <p>You must specify either this parameter or <b>ExpirationDate</b>, but
-   *       not both.</p>
-   *          <p>Allowed values: Min: 1, max 36500</p>
+   * <p>The architecture of the virtual machine.</p>
    */
-  LockDuration?: number;
+  Architecture?: string;
 
   /**
    * @public
-   * <p>The date and time at which the snapshot lock is to automatically expire, in the UTC time zone
-   *       (<code>YYYY-MM-DDThh:mm:ss.sssZ</code>).</p>
-   *          <p>You must specify either this parameter or <b>LockDuration</b>, but
-   *       not both.</p>
+   * <p>A description of the import task.</p>
    */
-  ExpirationDate?: Date;
-}
+  Description?: string;
 
-/**
- * @public
- */
-export interface LockSnapshotResult {
   /**
    * @public
-   * <p>The ID of the snapshot</p>
+   * <p>Indicates whether the AMI is encrypted.</p>
    */
-  SnapshotId?: string;
+  Encrypted?: boolean;
 
   /**
    * @public
-   * <p>The state of the snapshot lock. Valid states include:</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>compliance-cooloff</code> - The snapshot has been locked in
-   *           compliance mode but it is still within the cooling-off period. The snapshot can't be
-   *           deleted, but it can be unlocked and the lock settings can be modified by users with
-   *           appropriate permissions.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>governance</code> - The snapshot is locked in governance mode. The
-   *           snapshot can't be deleted, but it can be unlocked and the lock settings can be
-   *           modified by users with appropriate permissions.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>compliance</code> - The snapshot is locked in compliance mode and the
-   *           cooling-off period has expired. The snapshot can't be unlocked or deleted. The lock
-   *           duration can only be increased by users with appropriate permissions.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>expired</code> - The snapshot was locked in compliance or governance
-   *           mode but the lock duration has expired. The snapshot is not locked and can be deleted.</p>
-   *             </li>
-   *          </ul>
+   * <p>The target hypervisor of the import task.</p>
    */
-  LockState?: LockState;
+  Hypervisor?: string;
 
   /**
    * @public
-   * <p>The period of time for which the snapshot is locked, in days.</p>
+   * <p>The ID of the Amazon Machine Image (AMI) created by the import task.</p>
    */
-  LockDuration?: number;
+  ImageId?: string;
 
   /**
    * @public
-   * <p>The compliance mode cooling-off period, in hours.</p>
+   * <p>The task ID of the import image task.</p>
    */
-  CoolOffPeriod?: number;
+  ImportTaskId?: string;
 
   /**
    * @public
-   * <p>The date and time at which the compliance mode cooling-off period expires, in the UTC time zone
-   *       (<code>YYYY-MM-DDThh:mm:ss.sssZ</code>).</p>
+   * <p>The identifier for the symmetric KMS key that was used to create the encrypted AMI.</p>
    */
-  CoolOffPeriodExpiresOn?: Date;
+  KmsKeyId?: string;
 
   /**
    * @public
-   * <p>The date and time at which the snapshot was locked, in the UTC time zone
-   *       (<code>YYYY-MM-DDThh:mm:ss.sssZ</code>).</p>
+   * <p>The license type of the virtual machine.</p>
    */
-  LockCreatedOn?: Date;
+  LicenseType?: string;
 
   /**
    * @public
-   * <p>The date and time at which the lock will expire, in the UTC time zone
-   *       (<code>YYYY-MM-DDThh:mm:ss.sssZ</code>).</p>
+   * <p>The operating system of the virtual machine.</p>
    */
-  LockExpiresOn?: Date;
+  Platform?: string;
 
   /**
    * @public
-   * <p>The date and time at which the lock duration started, in the UTC time zone
-   *       (<code>YYYY-MM-DDThh:mm:ss.sssZ</code>).</p>
+   * <p>The progress of the task.</p>
    */
-  LockDurationStartTime?: Date;
-}
+  Progress?: string;
 
-/**
- * @public
- */
-export interface ModifyAddressAttributeRequest {
   /**
    * @public
-   * <p>[EC2-VPC] The allocation ID.</p>
+   * <p>Information about the snapshots.</p>
    */
-  AllocationId: string | undefined;
+  SnapshotDetails?: SnapshotDetail[];
 
   /**
    * @public
-   * <p>The domain name to modify for the IP address.</p>
+   * <p>A brief status of the task.</p>
    */
-  DomainName?: string;
+  Status?: string;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>A detailed status message of the import task.</p>
    */
-  DryRun?: boolean;
-}
+  StatusMessage?: string;
 
-/**
- * @public
- */
-export interface ModifyAddressAttributeResult {
   /**
    * @public
-   * <p>Information about the Elastic IP address.</p>
+   * <p>The ARNs of the license configurations.</p>
    */
-  Address?: AddressAttribute;
-}
+  LicenseSpecifications?: ImportImageLicenseConfigurationResponse[];
 
-/**
- * @public
- * @enum
- */
-export const ModifyAvailabilityZoneOptInStatus = {
-  not_opted_in: "not-opted-in",
-  opted_in: "opted-in",
-} as const;
+  /**
+   * @public
+   * <p>Any tags assigned to the import image task.</p>
+   */
+  Tags?: Tag[];
 
-/**
- * @public
- */
-export type ModifyAvailabilityZoneOptInStatus =
-  (typeof ModifyAvailabilityZoneOptInStatus)[keyof typeof ModifyAvailabilityZoneOptInStatus];
+  /**
+   * @public
+   * <p>The usage operation value.</p>
+   */
+  UsageOperation?: string;
+}
 
 /**
  * @public
+ * <p>Describes a disk image.</p>
  */
-export interface ModifyAvailabilityZoneGroupRequest {
+export interface DiskImageDetail {
   /**
    * @public
-   * <p>The name of the Availability Zone group, Local Zone group, or Wavelength Zone
-   *       group.</p>
+   * <p>The size of the disk image, in GiB.</p>
    */
-  GroupName: string | undefined;
+  Bytes: number | undefined;
 
   /**
    * @public
-   * <p>Indicates whether you are opted in to the Local Zone group or Wavelength Zone group. The
-   *       only valid value is <code>opted-in</code>. You must contact <a href="https://console.aws.amazon.com/support/home#/case/create%3FissueType=customer-service%26serviceCode=general-info%26getting-started%26categoryCode=using-aws%26services">Amazon Web Services Support</a> to opt out of a Local Zone or Wavelength Zone group.</p>
+   * <p>The disk image format.</p>
    */
-  OptInStatus: ModifyAvailabilityZoneOptInStatus | undefined;
+  Format: DiskImageFormat | undefined;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>A presigned URL for the import manifest stored in Amazon S3 and presented here as an Amazon S3 presigned URL.
+   *    For information about creating a presigned URL for an Amazon S3 object, read the "Query String Request Authentication
+   *    Alternative" section of the <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/RESTAuthentication.html">Authenticating REST Requests</a> topic in the <i>Amazon Simple Storage Service Developer
+   *     Guide</i>.</p>
+   *          <p>For information about the import manifest referenced by this API action, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/manifest.html">VM Import Manifest</a>.</p>
    */
-  DryRun?: boolean;
+  ImportManifestUrl: string | undefined;
 }
 
 /**
  * @public
+ * <p>Describes an EBS volume.</p>
  */
-export interface ModifyAvailabilityZoneGroupResult {
+export interface VolumeDetail {
   /**
    * @public
-   * <p>Is <code>true</code> if the request succeeds, and an error otherwise.</p>
+   * <p>The size of the volume, in GiB.</p>
    */
-  Return?: boolean;
+  Size: number | undefined;
 }
 
 /**
  * @public
+ * <p>Describes a disk image.</p>
  */
-export interface ModifyCapacityReservationRequest {
+export interface DiskImage {
   /**
    * @public
-   * <p>The ID of the Capacity Reservation.</p>
+   * <p>A description of the disk image.</p>
    */
-  CapacityReservationId: string | undefined;
+  Description?: string;
 
   /**
    * @public
-   * <p>The number of instances for which to reserve capacity. The number of instances can't be increased or
-   * 		    	decreased by more than <code>1000</code> in a single request.</p>
+   * <p>Information about the disk image.</p>
    */
-  InstanceCount?: number;
+  Image?: DiskImageDetail;
 
   /**
    * @public
-   * <p>The date and time at which the Capacity Reservation expires. When a Capacity Reservation expires, the reserved capacity
-   * 			is released and you can no longer launch instances into it. The Capacity Reservation's state changes to
-   * 				<code>expired</code> when it reaches its end date and time.</p>
-   *          <p>The Capacity Reservation is cancelled within an hour from the specified time. For example, if you specify
-   * 			5/31/2019, 13:30:55, the Capacity Reservation is guaranteed to end between 13:30:55 and 14:30:55 on 5/31/2019.</p>
-   *          <p>You must provide an <code>EndDate</code> value if <code>EndDateType</code> is
-   * 				<code>limited</code>. Omit <code>EndDate</code> if <code>EndDateType</code> is
-   * 				<code>unlimited</code>.</p>
+   * <p>Information about the volume.</p>
    */
-  EndDate?: Date;
+  Volume?: VolumeDetail;
+}
 
+/**
+ * @public
+ * <p>Describes the user data for an instance.</p>
+ */
+export interface UserData {
   /**
    * @public
-   * <p>Indicates the way in which the Capacity Reservation ends. A Capacity Reservation can have one of the following end
-   * 			types:</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>unlimited</code> - The Capacity Reservation remains active until you explicitly cancel it. Do not
-   * 					provide an <code>EndDate</code> value if <code>EndDateType</code> is
-   * 						<code>unlimited</code>.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>limited</code> - The Capacity Reservation expires automatically at a specified date and time. You must
-   * 					provide an <code>EndDate</code> value if <code>EndDateType</code> is
-   * 						<code>limited</code>.</p>
-   *             </li>
-   *          </ul>
-   */
-  EndDateType?: EndDateType;
-
-  /**
-   * @public
-   * <p>Reserved. Capacity Reservations you have created are accepted by default.</p>
+   * <p>The user data. If you are using an Amazon Web Services SDK or command line tool, Base64-encoding is performed for you, and you
+   *    can load the text from a file. Otherwise, you must provide Base64-encoded text.</p>
    */
-  Accept?: boolean;
+  Data?: string;
+}
 
+/**
+ * @public
+ * <p>Describes the launch specification for VM import.</p>
+ */
+export interface ImportInstanceLaunchSpecification {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>Reserved.</p>
    */
-  DryRun?: boolean;
+  AdditionalInfo?: string;
 
   /**
    * @public
-   * <p>Reserved for future use.</p>
+   * <p>The architecture of the instance.</p>
    */
-  AdditionalInfo?: string;
-}
+  Architecture?: ArchitectureValues;
 
-/**
- * @public
- */
-export interface ModifyCapacityReservationResult {
   /**
    * @public
-   * <p>Returns <code>true</code> if the request succeeds; otherwise, it returns an error.</p>
+   * <p>The security group IDs.</p>
    */
-  Return?: boolean;
-}
+  GroupIds?: string[];
 
-/**
- * @public
- */
-export interface ModifyCapacityReservationFleetRequest {
   /**
    * @public
-   * <p>The ID of the Capacity Reservation Fleet to modify.</p>
+   * <p>The security group names.</p>
    */
-  CapacityReservationFleetId: string | undefined;
+  GroupNames?: string[];
 
   /**
    * @public
-   * <p>The total number of capacity units to be reserved by the Capacity Reservation Fleet. This value,
-   * 			together with the instance type weights that you assign to each instance type used by the Fleet
-   * 			determine the number of instances for which the Fleet reserves capacity. Both values are based on
-   * 			units that make sense for your workload. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/crfleet-concepts.html#target-capacity">Total target capacity</a>
-   * 			in the Amazon EC2 User Guide.</p>
+   * <p>Indicates whether an instance stops or terminates when you initiate shutdown from the instance (using the
+   *    operating system command for system shutdown).</p>
    */
-  TotalTargetCapacity?: number;
+  InstanceInitiatedShutdownBehavior?: ShutdownBehavior;
 
   /**
    * @public
-   * <p>The date and time at which the Capacity Reservation Fleet expires. When the Capacity Reservation
-   * 			Fleet expires, its state changes to <code>expired</code> and all of the Capacity Reservations in the
-   * 			Fleet expire.</p>
-   *          <p>The Capacity Reservation Fleet expires within an hour after the specified time. For example, if you
-   * 			specify <code>5/31/2019</code>, <code>13:30:55</code>, the Capacity Reservation Fleet is guaranteed
-   * 			to expire between <code>13:30:55</code> and <code>14:30:55</code> on <code>5/31/2019</code>.</p>
-   *          <p>You can't specify <b>EndDate</b> and <b>
-   * 			RemoveEndDate</b> in the same request.</p>
+   * <p>The instance type. For more information about the instance types that you can import, see <a href="https://docs.aws.amazon.com/vm-import/latest/userguide/vmie_prereqs.html#vmimport-instance-types">Instance Types</a> in the
+   *    VM Import/Export User Guide.</p>
    */
-  EndDate?: Date;
+  InstanceType?: _InstanceType;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>Indicates whether monitoring is enabled.</p>
    */
-  DryRun?: boolean;
+  Monitoring?: boolean;
 
   /**
    * @public
-   * <p>Indicates whether to remove the end date from the Capacity Reservation Fleet. If you remove the
-   * 			end date, the Capacity Reservation Fleet does not expire and it remains active until you explicitly
-   * 			cancel it using the <b>CancelCapacityReservationFleet</b> action.</p>
-   *          <p>You can't specify <b>RemoveEndDate</b> and <b>
-   * 			EndDate</b> in the same request.</p>
+   * <p>The placement information for the instance.</p>
    */
-  RemoveEndDate?: boolean;
-}
+  Placement?: Placement;
 
-/**
- * @public
- */
-export interface ModifyCapacityReservationFleetResult {
   /**
    * @public
-   * <p>Returns <code>true</code> if the request succeeds; otherwise, it returns an error.</p>
+   * <p>[EC2-VPC] An available IP address from the IP address range of the subnet.</p>
    */
-  Return?: boolean;
-}
+  PrivateIpAddress?: string;
 
-/**
- * @public
- * <p>Information about the DNS server to be used.</p>
- */
-export interface DnsServersOptionsModifyStructure {
   /**
    * @public
-   * <p>The IPv4 address range, in CIDR notation, of the DNS servers to be used. You can specify up to
-   * 			two DNS servers. Ensure that the DNS servers can be reached by the clients. The specified values
-   * 			overwrite the existing values.</p>
+   * <p>[EC2-VPC] The ID of the subnet in which to launch the instance.</p>
    */
-  CustomDnsServers?: string[];
+  SubnetId?: string;
 
   /**
    * @public
-   * <p>Indicates whether DNS servers should be used. Specify <code>False</code> to delete the existing DNS
-   * 			servers.</p>
+   * <p>The Base64-encoded user data to make available to the instance.</p>
    */
-  Enabled?: boolean;
+  UserData?: UserData;
 }
 
 /**
  * @public
  */
-export interface ModifyClientVpnEndpointRequest {
+export interface ImportInstanceRequest {
   /**
    * @public
-   * <p>The ID of the Client VPN endpoint to modify.</p>
+   * <p>A description for the instance being imported.</p>
    */
-  ClientVpnEndpointId: string | undefined;
+  Description?: string;
 
   /**
    * @public
-   * <p>The ARN of the server certificate to be used. The server certificate must be provisioned in
-   * 			Certificate Manager (ACM).</p>
+   * <p>The disk image.</p>
    */
-  ServerCertificateArn?: string;
+  DiskImages?: DiskImage[];
 
   /**
    * @public
-   * <p>Information about the client connection logging options.</p>
-   *          <p>If you enable client connection logging, data about client connections is sent to a
-   * 			Cloudwatch Logs log stream. The following information is logged:</p>
-   *          <ul>
-   *             <li>
-   *                <p>Client connection requests</p>
-   *             </li>
-   *             <li>
-   *                <p>Client connection results (successful and unsuccessful)</p>
-   *             </li>
-   *             <li>
-   *                <p>Reasons for unsuccessful client connection requests</p>
-   *             </li>
-   *             <li>
-   *                <p>Client connection termination time</p>
-   *             </li>
-   *          </ul>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  ConnectionLogOptions?: ConnectionLogOptions;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>Information about the DNS servers to be used by Client VPN connections. A Client VPN endpoint can have
-   * 			up to two DNS servers.</p>
+   * <p>The launch specification.</p>
    */
-  DnsServers?: DnsServersOptionsModifyStructure;
+  LaunchSpecification?: ImportInstanceLaunchSpecification;
 
   /**
    * @public
-   * <p>The port number to assign to the Client VPN endpoint for TCP and UDP traffic.</p>
-   *          <p>Valid Values: <code>443</code> | <code>1194</code>
-   *          </p>
-   *          <p>Default Value: <code>443</code>
-   *          </p>
+   * <p>The instance operating system.</p>
    */
-  VpnPort?: number;
+  Platform: PlatformValues | undefined;
+}
 
+/**
+ * @public
+ */
+export interface ImportInstanceResult {
   /**
    * @public
-   * <p>A brief description of the Client VPN endpoint.</p>
+   * <p>Information about the conversion task.</p>
    */
-  Description?: string;
+  ConversionTask?: ConversionTask;
+}
 
+/**
+ * @public
+ */
+export interface ImportKeyPairRequest {
   /**
    * @public
-   * <p>Indicates whether the VPN is split-tunnel.</p>
-   *          <p>For information about split-tunnel VPN endpoints, see <a href="https://docs.aws.amazon.com/vpn/latest/clientvpn-admin/split-tunnel-vpn.html">Split-tunnel Client VPN endpoint</a> in the
-   *         	<i>Client VPN Administrator Guide</i>.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  SplitTunnel?: boolean;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>A unique name for the key pair.</p>
    */
-  DryRun?: boolean;
+  KeyName: string | undefined;
 
   /**
    * @public
-   * <p>The IDs of one or more security groups to apply to the target network.</p>
+   * <p>The public key. For API calls, the text must be base64-encoded. For command line tools, base64 encoding is performed for you.</p>
    */
-  SecurityGroupIds?: string[];
+  PublicKeyMaterial: Uint8Array | undefined;
 
   /**
    * @public
-   * <p>The ID of the VPC to associate with the Client VPN endpoint.</p>
+   * <p>The tags to apply to the imported key pair.</p>
    */
-  VpcId?: string;
+  TagSpecifications?: TagSpecification[];
+}
 
+/**
+ * @public
+ */
+export interface ImportKeyPairResult {
   /**
    * @public
-   * <p>Specify whether to enable the self-service portal for the Client VPN endpoint.</p>
+   * <ul>
+   *             <li>
+   *                <p>For RSA key pairs, the key fingerprint is the MD5 public key fingerprint as specified in section 4 of RFC 4716.</p>
+   *             </li>
+   *             <li>
+   *                <p>For ED25519 key pairs, the key fingerprint is the base64-encoded SHA-256 digest, which is the default for OpenSSH, starting with <a href="http://www.openssh.com/txt/release-6.8">OpenSSH 6.8</a>.</p>
+   *             </li>
+   *          </ul>
    */
-  SelfServicePortal?: SelfServicePortal;
+  KeyFingerprint?: string;
 
   /**
    * @public
-   * <p>The options for managing connection authorization for new client connections.</p>
+   * <p>The key pair name that you provided.</p>
    */
-  ClientConnectOptions?: ClientConnectOptions;
+  KeyName?: string;
 
   /**
    * @public
-   * <p>The maximum VPN session duration time in hours.</p>
-   *          <p>Valid values: <code>8 | 10 | 12 | 24</code>
-   *          </p>
-   *          <p>Default value: <code>24</code>
-   *          </p>
+   * <p>The ID of the resulting key pair.</p>
    */
-  SessionTimeoutHours?: number;
+  KeyPairId?: string;
 
   /**
    * @public
-   * <p>Options for enabling a customizable text banner that will be displayed on
-   * 			Amazon Web Services provided clients when a VPN session is established.</p>
+   * <p>The tags applied to the imported key pair.</p>
    */
-  ClientLoginBannerOptions?: ClientLoginBannerOptions;
+  Tags?: Tag[];
 }
 
 /**
  * @public
+ * <p>The disk container object for the import snapshot request.</p>
  */
-export interface ModifyClientVpnEndpointResult {
+export interface SnapshotDiskContainer {
   /**
    * @public
-   * <p>Returns <code>true</code> if the request succeeds; otherwise, it returns an error.</p>
+   * <p>The description of the disk image being imported.</p>
    */
-  Return?: boolean;
-}
+  Description?: string;
 
-/**
- * @public
- */
-export interface ModifyDefaultCreditSpecificationRequest {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The format of the disk image being imported.</p>
+   *          <p>Valid values: <code>VHD</code> | <code>VMDK</code> | <code>RAW</code>
+   *          </p>
    */
-  DryRun?: boolean;
+  Format?: string;
 
   /**
    * @public
-   * <p>The instance family.</p>
+   * <p>The URL to the Amazon S3-based disk image being imported. It can either be a https URL (https://..) or an Amazon
+   *    S3 URL (s3://..).</p>
    */
-  InstanceFamily: UnlimitedSupportedInstanceFamily | undefined;
+  Url?: string;
 
   /**
    * @public
-   * <p>The credit option for CPU usage of the instance family.</p>
-   *          <p>Valid Values: <code>standard</code> | <code>unlimited</code>
-   *          </p>
+   * <p>The Amazon S3 bucket for the disk image.</p>
    */
-  CpuCredits: string | undefined;
+  UserBucket?: UserBucket;
 }
 
 /**
  * @public
  */
-export interface ModifyDefaultCreditSpecificationResult {
+export interface ImportSnapshotRequest {
   /**
    * @public
-   * <p>The default credit option for CPU usage of the instance family.</p>
+   * <p>The client-specific data.</p>
    */
-  InstanceFamilyCreditSpecification?: InstanceFamilyCreditSpecification;
-}
+  ClientData?: ClientData;
 
-/**
- * @public
- */
-export interface ModifyEbsDefaultKmsKeyIdRequest {
   /**
    * @public
-   * <p>The identifier of the Key Management Service (KMS) KMS key to use for Amazon EBS encryption.
-   *       If this parameter is not specified, your KMS key for Amazon EBS is used. If <code>KmsKeyId</code> is
-   *       specified, the encrypted state must be <code>true</code>.</p>
-   *          <p>You can specify the KMS key using any of the following:</p>
+   * <p>Token to enable idempotency for VM import requests.</p>
+   */
+  ClientToken?: string;
+
+  /**
+   * @public
+   * <p>The description string for the import snapshot task.</p>
+   */
+  Description?: string;
+
+  /**
+   * @public
+   * <p>Information about the disk container.</p>
+   */
+  DiskContainer?: SnapshotDiskContainer;
+
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
+
+  /**
+   * @public
+   * <p>Specifies whether the destination snapshot of the imported image should be encrypted. The default KMS key for EBS is
+   *    used unless you specify a non-default KMS key using <code>KmsKeyId</code>. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSEncryption.html">Amazon EBS Encryption</a> in the
+   *     <i>Amazon Elastic Compute Cloud User Guide</i>.</p>
+   */
+  Encrypted?: boolean;
+
+  /**
+   * @public
+   * <p>An identifier for the symmetric KMS key to use when creating the
+   *    encrypted snapshot. This parameter is only required if you want to use a non-default KMS key; if this
+   *    parameter is not specified, the default KMS key for EBS is used. If a <code>KmsKeyId</code> is
+   *    specified, the <code>Encrypted</code> flag must also be set. </p>
+   *          <p>The KMS key identifier may be provided in any of the following formats: </p>
    *          <ul>
    *             <li>
-   *                <p>Key ID. For example, 1234abcd-12ab-34cd-56ef-1234567890ab.</p>
+   *                <p>Key ID</p>
    *             </li>
    *             <li>
-   *                <p>Key alias. For example, alias/ExampleAlias.</p>
+   *                <p>Key alias</p>
    *             </li>
    *             <li>
-   *                <p>Key ARN. For example, arn:aws:kms:us-east-1:012345678910:key/1234abcd-12ab-34cd-56ef-1234567890ab.</p>
+   *                <p>ARN using key ID. The ID ARN contains the <code>arn:aws:kms</code> namespace, followed by the Region of the key, the Amazon Web Services account ID of the key owner, the <code>key</code> namespace, and then the key ID. For example, arn:aws:kms:<i>us-east-1</i>:<i>012345678910</i>:key/<i>abcd1234-a123-456a-a12b-a123b4cd56ef</i>.</p>
    *             </li>
    *             <li>
-   *                <p>Alias ARN. For example, arn:aws:kms:us-east-1:012345678910:alias/ExampleAlias.</p>
+   *                <p>ARN using key alias. The alias ARN contains the <code>arn:aws:kms</code> namespace, followed by the Region of the key, the Amazon Web Services account ID of the key owner, the <code>alias</code> namespace, and then the key alias. For example, arn:aws:kms:<i>us-east-1</i>:<i>012345678910</i>:alias/<i>ExampleAlias</i>. </p>
    *             </li>
    *          </ul>
-   *          <p>Amazon Web Services authenticates the KMS key asynchronously. Therefore, if you specify an ID, alias, or ARN that is not valid,
-   *       the action can appear to complete, but eventually fails.</p>
+   *          <p>Amazon Web Services parses <code>KmsKeyId</code> asynchronously, meaning that the action you call may appear to complete even
+   *    though you provided an invalid identifier. This action will eventually report failure. </p>
+   *          <p>The specified KMS key must exist in the Region that the snapshot is being copied to.</p>
    *          <p>Amazon EBS does not support asymmetric KMS keys.</p>
    */
-  KmsKeyId: string | undefined;
+  KmsKeyId?: string;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The name of the role to use when not using the default role, 'vmimport'.</p>
    */
-  DryRun?: boolean;
-}
+  RoleName?: string;
 
-/**
- * @public
- */
-export interface ModifyEbsDefaultKmsKeyIdResult {
   /**
    * @public
-   * <p>The Amazon Resource Name (ARN) of the default KMS key for encryption by default.</p>
+   * <p>The tags to apply to the import snapshot task during creation.</p>
    */
-  KmsKeyId?: string;
+  TagSpecifications?: TagSpecification[];
 }
 
 /**
  * @public
  */
-export interface ModifyFleetRequest {
-  /**
-   * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-   */
-  DryRun?: boolean;
-
-  /**
-   * @public
-   * <p>Indicates whether running instances should be terminated if the total target capacity of
-   *          the EC2 Fleet is decreased below the current size of the EC2 Fleet.</p>
-   *          <p>Supported only for fleets of type <code>maintain</code>.</p>
-   */
-  ExcessCapacityTerminationPolicy?: FleetExcessCapacityTerminationPolicy;
-
+export interface ImportSnapshotResult {
   /**
    * @public
-   * <p>The launch template and overrides.</p>
+   * <p>A description of the import snapshot task.</p>
    */
-  LaunchTemplateConfigs?: FleetLaunchTemplateConfigRequest[];
+  Description?: string;
 
   /**
    * @public
-   * <p>The ID of the EC2 Fleet.</p>
+   * <p>The ID of the import snapshot task.</p>
    */
-  FleetId: string | undefined;
+  ImportTaskId?: string;
 
   /**
    * @public
-   * <p>The size of the EC2 Fleet.</p>
+   * <p>Information about the import snapshot task.</p>
    */
-  TargetCapacitySpecification?: TargetCapacitySpecificationRequest;
+  SnapshotTaskDetail?: SnapshotTaskDetail;
 
   /**
    * @public
-   * <p>Reserved.</p>
+   * <p>Any tags assigned to the import snapshot task.</p>
    */
-  Context?: string;
+  Tags?: Tag[];
 }
 
 /**
  * @public
  */
-export interface ModifyFleetResult {
+export interface ImportVolumeRequest {
   /**
    * @public
-   * <p>If the request succeeds, the response returns <code>true</code>. If the request fails,
-   *          no response is returned, and instead an error message is returned.</p>
+   * <p>The Availability Zone for the resulting EBS volume.</p>
    */
-  Return?: boolean;
-}
+  AvailabilityZone: string | undefined;
 
-/**
- * @public
- * <p>Describes a load permission.</p>
- */
-export interface LoadPermissionRequest {
   /**
    * @public
-   * <p>The name of the group.</p>
+   * <p>A description of the volume.</p>
    */
-  Group?: PermissionGroup;
+  Description?: string;
 
   /**
    * @public
-   * <p>The Amazon Web Services account ID.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  UserId?: string;
-}
+  DryRun?: boolean;
 
-/**
- * @public
- * <p>Describes modifications to the load permissions of an Amazon FPGA image (AFI).</p>
- */
-export interface LoadPermissionModifications {
   /**
    * @public
-   * <p>The load permissions to add.</p>
+   * <p>The disk image.</p>
    */
-  Add?: LoadPermissionRequest[];
+  Image: DiskImageDetail | undefined;
 
   /**
    * @public
-   * <p>The load permissions to remove.</p>
+   * <p>The volume size.</p>
    */
-  Remove?: LoadPermissionRequest[];
+  Volume: VolumeDetail | undefined;
 }
 
-/**
- * @public
- * @enum
- */
-export const OperationType = {
-  add: "add",
-  remove: "remove",
-} as const;
-
-/**
- * @public
- */
-export type OperationType = (typeof OperationType)[keyof typeof OperationType];
-
 /**
  * @public
  */
-export interface ModifyFpgaImageAttributeRequest {
+export interface ImportVolumeResult {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>Information about the conversion task.</p>
    */
-  DryRun?: boolean;
+  ConversionTask?: ConversionTask;
+}
 
+/**
+ * @public
+ */
+export interface ListImagesInRecycleBinRequest {
   /**
    * @public
-   * <p>The ID of the AFI.</p>
+   * <p>The IDs of the AMIs to list. Omit this parameter to list all of the AMIs that
+   *       are in the Recycle Bin. You can specify up to 20 IDs in a single request.</p>
    */
-  FpgaImageId: string | undefined;
+  ImageIds?: string[];
 
   /**
    * @public
-   * <p>The name of the attribute.</p>
+   * <p>The token returned from a previous paginated request. Pagination continues from the end of the items returned by the previous request.</p>
    */
-  Attribute?: FpgaImageAttributeName;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>The operation type.</p>
+   * <p>The maximum number of items to return for this request.
+   *          To get the next page of items, make another request with the token returned in the output.
+   * 	        For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
    */
-  OperationType?: OperationType;
+  MaxResults?: number;
 
   /**
    * @public
-   * <p>The Amazon Web Services account IDs. This parameter is valid only when modifying the <code>loadPermission</code> attribute.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   * 			and provides an error response. If you have the required permissions, the error response is
+   * 			<code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  UserIds?: string[];
+  DryRun?: boolean;
+}
 
+/**
+ * @public
+ * <p>Information about an AMI that is currently in the Recycle Bin.</p>
+ */
+export interface ImageRecycleBinInfo {
   /**
    * @public
-   * <p>The user groups. This parameter is valid only when modifying the <code>loadPermission</code> attribute.</p>
+   * <p>The ID of the AMI.</p>
    */
-  UserGroups?: string[];
+  ImageId?: string;
 
   /**
    * @public
-   * <p>The product codes. After you add a product code to an AFI, it can't be removed.
-   * 		    This parameter is valid only when modifying the <code>productCodes</code> attribute.</p>
+   * <p>The name of the AMI.</p>
    */
-  ProductCodes?: string[];
+  Name?: string;
 
   /**
    * @public
-   * <p>The load permission for the AFI.</p>
+   * <p>The description of the AMI.</p>
    */
-  LoadPermission?: LoadPermissionModifications;
+  Description?: string;
 
   /**
    * @public
-   * <p>A description for the AFI.</p>
+   * <p>The date and time when the AMI entered the Recycle Bin.</p>
    */
-  Description?: string;
+  RecycleBinEnterTime?: Date;
 
   /**
    * @public
-   * <p>A name for the AFI.</p>
+   * <p>The date and time when the AMI is to be permanently deleted from the Recycle Bin.</p>
    */
-  Name?: string;
+  RecycleBinExitTime?: Date;
 }
 
 /**
  * @public
  */
-export interface ModifyFpgaImageAttributeResult {
+export interface ListImagesInRecycleBinResult {
   /**
    * @public
-   * <p>Information about the attribute.</p>
+   * <p>Information about the AMIs.</p>
    */
-  FpgaImageAttribute?: FpgaImageAttribute;
+  Images?: ImageRecycleBinInfo[];
+
+  /**
+   * @public
+   * <p>The token to include in another request to get the next page of items. This value is <code>null</code> when there
+   *          are no more items to return.</p>
+   */
+  NextToken?: string;
 }
 
 /**
  * @public
  */
-export interface ModifyHostsRequest {
+export interface ListSnapshotsInRecycleBinRequest {
   /**
    * @public
-   * <p>Specify whether to enable or disable auto-placement.</p>
+   * <p>The maximum number of items to return for this request.
+   * 	To get the next page of items, make another request with the token returned in the output.
+   * 	For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination">Pagination</a>.</p>
    */
-  AutoPlacement?: AutoPlacement;
+  MaxResults?: number;
 
   /**
    * @public
-   * <p>The IDs of the Dedicated Hosts to modify.</p>
+   * <p>The token returned from a previous paginated request.
+   *   Pagination continues from the end of the items returned by the previous request.</p>
    */
-  HostIds: string[] | undefined;
+  NextToken?: string;
 
   /**
    * @public
-   * <p>Indicates whether to enable or disable host recovery for the Dedicated Host. For more
-   *             information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/dedicated-hosts-recovery.html"> Host recovery</a>
-   *             in the <i>Amazon EC2 User Guide</i>.</p>
-   */
-  HostRecovery?: HostRecovery;
-
-  /**
-   * @public
-   * <p>Specifies the instance type to be supported by the Dedicated Host. Specify this
-   *             parameter to modify a Dedicated Host to support only a specific instance type.</p>
-   *          <p>If you want to modify a Dedicated Host to support multiple instance types in its
-   *             current instance family, omit this parameter and specify <b>InstanceFamily</b> instead. You cannot specify <b>InstanceType</b> and <b>InstanceFamily</b> in the
-   *             same request.</p>
-   */
-  InstanceType?: string;
-
-  /**
-   * @public
-   * <p>Specifies the instance family to be supported by the Dedicated Host. Specify this
-   *             parameter to modify a Dedicated Host to support multiple instance types within its
-   *             current instance family.</p>
-   *          <p>If you want to modify a Dedicated Host to support a specific instance type only, omit
-   *             this parameter and specify <b>InstanceType</b> instead. You
-   *             cannot specify <b>InstanceFamily</b> and <b>InstanceType</b> in the same request.</p>
+   * <p>The IDs of the snapshots to list. Omit this parameter to list all of the
+   *       snapshots that are in the Recycle Bin.</p>
    */
-  InstanceFamily?: string;
+  SnapshotIds?: string[];
 
   /**
    * @public
-   * <p>Indicates whether to enable or disable host maintenance for the Dedicated Host. For
-   *             more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/dedicated-hosts-maintenance.html"> Host
-   *                 maintenance</a> in the <i>Amazon EC2 User Guide</i>.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  HostMaintenance?: HostMaintenance;
+  DryRun?: boolean;
 }
 
 /**
  * @public
+ * <p>Information about a snapshot that is currently in the Recycle Bin.</p>
  */
-export interface ModifyHostsResult {
+export interface SnapshotRecycleBinInfo {
   /**
    * @public
-   * <p>The IDs of the Dedicated Hosts that were successfully modified.</p>
+   * <p>The ID of the snapshot.</p>
    */
-  Successful?: string[];
+  SnapshotId?: string;
 
   /**
    * @public
-   * <p>The IDs of the Dedicated Hosts that could not be modified. Check whether the setting
-   *             you requested can be used.</p>
+   * <p>The date and time when the snaphsot entered the Recycle Bin.</p>
    */
-  Unsuccessful?: UnsuccessfulItem[];
-}
+  RecycleBinEnterTime?: Date;
 
-/**
- * @public
- */
-export interface ModifyIdentityIdFormatRequest {
   /**
    * @public
-   * <p>The ARN of the principal, which can be an IAM user, IAM role, or the root user. Specify
-   *        <code>all</code> to modify the ID format for all IAM users, IAM roles, and the root user of
-   *        the account.</p>
+   * <p>The date and time when the snapshot is to be permanently deleted from the Recycle Bin.</p>
    */
-  PrincipalArn: string | undefined;
+  RecycleBinExitTime?: Date;
 
   /**
    * @public
-   * <p>The type of resource: <code>bundle</code> | <code>conversion-task</code> | <code>customer-gateway</code> | <code>dhcp-options</code> |
-   *           <code>elastic-ip-allocation</code> | <code>elastic-ip-association</code> |
-   *           <code>export-task</code> | <code>flow-log</code> | <code>image</code> |
-   *           <code>import-task</code> | <code>internet-gateway</code> | <code>network-acl</code>
-   *           | <code>network-acl-association</code> | <code>network-interface</code> |
-   *           <code>network-interface-attachment</code> | <code>prefix-list</code> |
-   *           <code>route-table</code> | <code>route-table-association</code> |
-   *           <code>security-group</code> | <code>subnet</code> |
-   *           <code>subnet-cidr-block-association</code> | <code>vpc</code> |
-   *           <code>vpc-cidr-block-association</code> | <code>vpc-endpoint</code> | <code>vpc-peering-connection</code> | <code>vpn-connection</code> | <code>vpn-gateway</code>.</p>
-   *          <p>Alternatively, use the <code>all-current</code> option to include all resource types that are
-   *           currently within their opt-in period for longer IDs.</p>
+   * <p>The description for the snapshot.</p>
    */
-  Resource: string | undefined;
+  Description?: string;
 
   /**
    * @public
-   * <p>Indicates whether the resource should use longer IDs (17-character IDs)</p>
+   * <p>The ID of the volume from which the snapshot was created.</p>
    */
-  UseLongIds: boolean | undefined;
+  VolumeId?: string;
 }
 
 /**
  * @public
  */
-export interface ModifyIdFormatRequest {
+export interface ListSnapshotsInRecycleBinResult {
   /**
    * @public
-   * <p>The type of resource: <code>bundle</code> | <code>conversion-task</code> | <code>customer-gateway</code> | <code>dhcp-options</code> |
-   *            <code>elastic-ip-allocation</code> | <code>elastic-ip-association</code> |
-   *            <code>export-task</code> | <code>flow-log</code> | <code>image</code> |
-   *            <code>import-task</code> | <code>internet-gateway</code> | <code>network-acl</code>
-   *            | <code>network-acl-association</code> | <code>network-interface</code> |
-   *            <code>network-interface-attachment</code> | <code>prefix-list</code> |
-   *            <code>route-table</code> | <code>route-table-association</code> |
-   *            <code>security-group</code> | <code>subnet</code> |
-   *            <code>subnet-cidr-block-association</code> | <code>vpc</code> |
-   *            <code>vpc-cidr-block-association</code> | <code>vpc-endpoint</code> | <code>vpc-peering-connection</code> | <code>vpn-connection</code> | <code>vpn-gateway</code>.</p>
-   *          <p>Alternatively, use the <code>all-current</code> option to include all resource types that are
-   *        currently within their opt-in period for longer IDs.</p>
+   * <p>Information about the snapshots.</p>
    */
-  Resource: string | undefined;
+  Snapshots?: SnapshotRecycleBinInfo[];
 
   /**
    * @public
-   * <p>Indicate whether the resource should use longer IDs (17-character IDs).</p>
+   * <p>The token to include in another request to get the next page of items.
+   *   This value is <code>null</code> when there are no more items to return.</p>
    */
-  UseLongIds: boolean | undefined;
+  NextToken?: string;
 }
 
 /**
  * @public
- * <p>Describes a launch permission modification.</p>
+ * @enum
  */
-export interface LaunchPermissionModifications {
-  /**
-   * @public
-   * <p>The Amazon Web Services account ID, organization ARN, or OU ARN to add to the list of launch permissions for the AMI.</p>
-   */
-  Add?: LaunchPermission[];
+export const LockMode = {
+  compliance: "compliance",
+  governance: "governance",
+} as const;
 
-  /**
-   * @public
-   * <p>The Amazon Web Services account ID, organization ARN, or OU ARN to remove from the list of launch permissions for the AMI.</p>
-   */
-  Remove?: LaunchPermission[];
-}
+/**
+ * @public
+ */
+export type LockMode = (typeof LockMode)[keyof typeof LockMode];
 
 /**
  * @public
- * <p>Contains the parameters for ModifyImageAttribute.</p>
  */
-export interface ModifyImageAttributeRequest {
+export interface LockSnapshotRequest {
   /**
    * @public
-   * <p>The name of the attribute to modify.</p>
-   *          <p>Valid values: <code>description</code> | <code>imdsSupport</code> | <code>launchPermission</code>
-   *          </p>
+   * <p>The ID of the snapshot to lock.</p>
    */
-  Attribute?: string;
+  SnapshotId: string | undefined;
 
   /**
    * @public
-   * <p>A new description for the AMI.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  Description?: AttributeValue;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The ID of the AMI.</p>
+   * <p>The mode in which to lock the snapshot. Specify one of the following:</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>governance</code> - Locks the snapshot in governance mode. Snapshots locked in governance
+   *           mode can't be deleted until one of the following conditions are met:</p>
+   *                <ul>
+   *                   <li>
+   *                      <p>The lock duration expires.</p>
+   *                   </li>
+   *                   <li>
+   *                      <p>The snapshot is unlocked by a user with the appropriate permissions.</p>
+   *                   </li>
+   *                </ul>
+   *                <p>Users with the appropriate IAM permissions can unlock the snapshot, increase or decrease the lock
+   *           duration, and change the lock mode to <code>compliance</code> at any time.</p>
+   *                <p>If you lock a snapshot in <code>governance</code> mode, omit <b>
+   *           CoolOffPeriod</b>.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>compliance</code> - Locks the snapshot in compliance mode. Snapshots locked in compliance
+   *           mode can't be unlocked by any user. They can be deleted only after the lock duration expires. Users
+   *           can't decrease the lock duration or change the lock mode to <code>governance</code>. However, users
+   *           with appropriate IAM permissions can increase the lock duration at any time.</p>
+   *                <p>If you lock a snapshot in <code>compliance</code> mode, you can optionally specify
+   *           <b>CoolOffPeriod</b>.</p>
+   *             </li>
+   *          </ul>
    */
-  ImageId: string | undefined;
+  LockMode: LockMode | undefined;
 
   /**
    * @public
-   * <p>A new launch permission for the AMI.</p>
+   * <p>The cooling-off period during which you can unlock the snapshot or modify the lock settings after
+   *       locking the snapshot in compliance mode, in hours. After the cooling-off period expires, you can't
+   *       unlock or delete the snapshot, decrease the lock duration, or change the lock mode. You can increase
+   *       the lock duration after the cooling-off period expires.</p>
+   *          <p>The cooling-off period is optional when locking a snapshot in compliance mode. If you are locking
+   *       the snapshot in governance mode, omit this parameter.</p>
+   *          <p>To lock the snapshot in compliance mode immediately without a cooling-off period, omit this
+   *       parameter.</p>
+   *          <p>If you are extending the lock duration for a snapshot that is locked in compliance mode after
+   *       the cooling-off period has expired, omit this parameter. If you specify a cooling-period in a such
+   *       a request, the request fails.</p>
+   *          <p>Allowed values: Min 1, max 72.</p>
    */
-  LaunchPermission?: LaunchPermissionModifications;
+  CoolOffPeriod?: number;
 
   /**
    * @public
-   * <p>The operation type.
-   *        This parameter can be used only when the <code>Attribute</code> parameter is <code>launchPermission</code>.</p>
+   * <p>The period of time for which to lock the snapshot, in days. The snapshot lock will automatically
+   *       expire after this period lapses.</p>
+   *          <p>You must specify either this parameter or <b>ExpirationDate</b>, but
+   *       not both.</p>
+   *          <p>Allowed values: Min: 1, max 36500</p>
    */
-  OperationType?: OperationType;
+  LockDuration?: number;
 
   /**
    * @public
-   * <p>Not supported.</p>
+   * <p>The date and time at which the snapshot lock is to automatically expire, in the UTC time zone
+   *       (<code>YYYY-MM-DDThh:mm:ss.sssZ</code>).</p>
+   *          <p>You must specify either this parameter or <b>LockDuration</b>, but
+   *       not both.</p>
    */
-  ProductCodes?: string[];
+  ExpirationDate?: Date;
+}
 
+/**
+ * @public
+ */
+export interface LockSnapshotResult {
   /**
    * @public
-   * <p>The user groups.
-   *        This parameter can be used only when the <code>Attribute</code> parameter is <code>launchPermission</code>.</p>
+   * <p>The ID of the snapshot</p>
    */
-  UserGroups?: string[];
+  SnapshotId?: string;
 
   /**
    * @public
-   * <p>The Amazon Web Services account IDs.
-   *        This parameter can be used only when the <code>Attribute</code> parameter is <code>launchPermission</code>.</p>
+   * <p>The state of the snapshot lock. Valid states include:</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>compliance-cooloff</code> - The snapshot has been locked in
+   *           compliance mode but it is still within the cooling-off period. The snapshot can't be
+   *           deleted, but it can be unlocked and the lock settings can be modified by users with
+   *           appropriate permissions.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>governance</code> - The snapshot is locked in governance mode. The
+   *           snapshot can't be deleted, but it can be unlocked and the lock settings can be
+   *           modified by users with appropriate permissions.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>compliance</code> - The snapshot is locked in compliance mode and the
+   *           cooling-off period has expired. The snapshot can't be unlocked or deleted. The lock
+   *           duration can only be increased by users with appropriate permissions.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>expired</code> - The snapshot was locked in compliance or governance
+   *           mode but the lock duration has expired. The snapshot is not locked and can be deleted.</p>
+   *             </li>
+   *          </ul>
    */
-  UserIds?: string[];
+  LockState?: LockState;
 
   /**
    * @public
-   * <p>The value of the attribute being modified.
-   *        This parameter can be used only when the <code>Attribute</code> parameter is <code>description</code> or <code>imdsSupport</code>.</p>
+   * <p>The period of time for which the snapshot is locked, in days.</p>
    */
-  Value?: string;
+  LockDuration?: number;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   * 			and provides an error response. If you have the required permissions, the error response is
-   * 			<code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The compliance mode cooling-off period, in hours.</p>
    */
-  DryRun?: boolean;
+  CoolOffPeriod?: number;
 
   /**
    * @public
-   * <p>The Amazon Resource Name (ARN) of an organization. This parameter can be used only when the <code>Attribute</code> parameter is <code>launchPermission</code>.</p>
+   * <p>The date and time at which the compliance mode cooling-off period expires, in the UTC time zone
+   *       (<code>YYYY-MM-DDThh:mm:ss.sssZ</code>).</p>
    */
-  OrganizationArns?: string[];
-
-  /**
-   * @public
-   * <p>The Amazon Resource Name (ARN) of an organizational unit (OU). This parameter can be used only when the <code>Attribute</code> parameter is <code>launchPermission</code>.</p>
-   */
-  OrganizationalUnitArns?: string[];
+  CoolOffPeriodExpiresOn?: Date;
 
   /**
    * @public
-   * <p>Set to <code>v2.0</code> to indicate that IMDSv2 is specified in the AMI. Instances
-   *       launched from this AMI will have <code>HttpTokens</code> automatically set to
-   *       <code>required</code> so that, by default, the instance requires that IMDSv2 is used when
-   *       requesting instance metadata. In addition, <code>HttpPutResponseHopLimit</code> is set to
-   *       <code>2</code>. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/configuring-IMDS-new-instances.html#configure-IMDS-new-instances-ami-configuration">Configure
-   *         the AMI</a> in the <i>Amazon EC2 User Guide</i>.</p>
-   *          <important>
-   *             <p>Do not use this parameter unless your AMI software supports IMDSv2. After you set the value to <code>v2.0</code>,
-   *         you can't undo it. The only way to “reset” your AMI is to create a new AMI from the underlying snapshot.</p>
-   *          </important>
+   * <p>The date and time at which the snapshot was locked, in the UTC time zone
+   *       (<code>YYYY-MM-DDThh:mm:ss.sssZ</code>).</p>
    */
-  ImdsSupport?: AttributeValue;
-}
+  LockCreatedOn?: Date;
 
-/**
- * @public
- * <p>Describes information used to set up an EBS volume specified in a block device
- *             mapping.</p>
- */
-export interface EbsInstanceBlockDeviceSpecification {
   /**
    * @public
-   * <p>Indicates whether the volume is deleted on instance termination.</p>
+   * <p>The date and time at which the lock will expire, in the UTC time zone
+   *       (<code>YYYY-MM-DDThh:mm:ss.sssZ</code>).</p>
    */
-  DeleteOnTermination?: boolean;
+  LockExpiresOn?: Date;
 
   /**
    * @public
-   * <p>The ID of the EBS volume.</p>
+   * <p>The date and time at which the lock duration started, in the UTC time zone
+   *       (<code>YYYY-MM-DDThh:mm:ss.sssZ</code>).</p>
    */
-  VolumeId?: string;
+  LockDurationStartTime?: Date;
 }
 
 /**
  * @public
- * <p>Describes a block device mapping entry.</p>
  */
-export interface InstanceBlockDeviceMappingSpecification {
+export interface ModifyAddressAttributeRequest {
   /**
    * @public
-   * <p>The device name (for example, <code>/dev/sdh</code> or <code>xvdh</code>).</p>
+   * <p>[EC2-VPC] The allocation ID.</p>
    */
-  DeviceName?: string;
+  AllocationId: string | undefined;
 
   /**
    * @public
-   * <p>Parameters used to automatically set up EBS volumes when the instance is
-   *             launched.</p>
+   * <p>The domain name to modify for the IP address.</p>
    */
-  Ebs?: EbsInstanceBlockDeviceSpecification;
+  DomainName?: string;
 
   /**
    * @public
-   * <p>suppress the specified device included in the block device mapping.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  NoDevice?: string;
+  DryRun?: boolean;
+}
 
+/**
+ * @public
+ */
+export interface ModifyAddressAttributeResult {
   /**
    * @public
-   * <p>The virtual device name.</p>
+   * <p>Information about the Elastic IP address.</p>
    */
-  VirtualName?: string;
+  Address?: AddressAttribute;
 }
 
 /**
  * @public
+ * @enum
  */
-export interface BlobAttributeValue {
-  Value?: Uint8Array;
-}
+export const ModifyAvailabilityZoneOptInStatus = {
+  not_opted_in: "not-opted-in",
+  opted_in: "opted-in",
+} as const;
 
 /**
  * @public
  */
-export interface ModifyInstanceAttributeRequest {
+export type ModifyAvailabilityZoneOptInStatus =
+  (typeof ModifyAvailabilityZoneOptInStatus)[keyof typeof ModifyAvailabilityZoneOptInStatus];
+
+/**
+ * @public
+ */
+export interface ModifyAvailabilityZoneGroupRequest {
   /**
    * @public
-   * <p>Enable or disable source/destination checks, which ensure that the instance is either
-   *             the source or the destination of any traffic that it receives. If the value is
-   *                 <code>true</code>, source/destination checks are enabled; otherwise, they are
-   *             disabled. The default value is <code>true</code>. You must disable source/destination
-   *             checks if the instance runs services such as network address translation, routing, or
-   *             firewalls.</p>
+   * <p>The name of the Availability Zone group, Local Zone group, or Wavelength Zone
+   *       group.</p>
    */
-  SourceDestCheck?: AttributeBooleanValue;
+  GroupName: string | undefined;
 
   /**
    * @public
-   * <p>The name of the attribute to modify.</p>
-   *          <important>
-   *             <p>You can modify the following attributes only: <code>disableApiTermination</code> |
-   *                     <code>instanceType</code> | <code>kernel</code> | <code>ramdisk</code> |
-   *                     <code>instanceInitiatedShutdownBehavior</code> | <code>blockDeviceMapping</code>
-   *                 | <code>userData</code> | <code>sourceDestCheck</code> | <code>groupSet</code> |
-   *                     <code>ebsOptimized</code> | <code>sriovNetSupport</code> |
-   *                     <code>enaSupport</code> | <code>nvmeSupport</code> | <code>disableApiStop</code>
-   *                 | <code>enclaveOptions</code>
-   *             </p>
-   *          </important>
+   * <p>Indicates whether you are opted in to the Local Zone group or Wavelength Zone group. The
+   *       only valid value is <code>opted-in</code>. You must contact <a href="https://console.aws.amazon.com/support/home#/case/create%3FissueType=customer-service%26serviceCode=general-info%26getting-started%26categoryCode=using-aws%26services">Amazon Web Services Support</a> to opt out of a Local Zone or Wavelength Zone group.</p>
    */
-  Attribute?: InstanceAttributeName;
+  OptInStatus: ModifyAvailabilityZoneOptInStatus | undefined;
 
   /**
    * @public
-   * <p>Modifies the <code>DeleteOnTermination</code> attribute for volumes that are currently
-   *             attached. The volume must be owned by the caller. If no value is specified for
-   *                 <code>DeleteOnTermination</code>, the default is <code>true</code> and the volume is
-   *             deleted when the instance is terminated.</p>
-   *          <p>To add instance store volumes to an Amazon EBS-backed instance, you must add them when
-   *             you launch the instance. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/block-device-mapping-concepts.html#Using_OverridingAMIBDM">Update the block device mapping when launching an instance</a> in the
-   *                 <i>Amazon EC2 User Guide</i>.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  BlockDeviceMappings?: InstanceBlockDeviceMappingSpecification[];
+  DryRun?: boolean;
+}
 
+/**
+ * @public
+ */
+export interface ModifyAvailabilityZoneGroupResult {
   /**
    * @public
-   * <p>If the value is <code>true</code>, you can't terminate the instance using the Amazon
-   *             EC2 console, CLI, or API; otherwise, you can. You cannot use this parameter for Spot
-   *             Instances.</p>
+   * <p>Is <code>true</code> if the request succeeds, and an error otherwise.</p>
    */
-  DisableApiTermination?: AttributeBooleanValue;
+  Return?: boolean;
+}
 
+/**
+ * @public
+ */
+export interface ModifyCapacityReservationRequest {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The ID of the Capacity Reservation.</p>
    */
-  DryRun?: boolean;
+  CapacityReservationId: string | undefined;
 
   /**
    * @public
-   * <p>Specifies whether the instance is optimized for Amazon EBS I/O. This optimization
-   *             provides dedicated throughput to Amazon EBS and an optimized configuration stack to
-   *             provide optimal EBS I/O performance. This optimization isn't available with all instance
-   *             types. Additional usage charges apply when using an EBS Optimized instance.</p>
+   * <p>The number of instances for which to reserve capacity. The number of instances can't be increased or
+   * 		    	decreased by more than <code>1000</code> in a single request.</p>
    */
-  EbsOptimized?: AttributeBooleanValue;
+  InstanceCount?: number;
 
   /**
    * @public
-   * <p>Set to <code>true</code> to enable enhanced networking with ENA for the
-   *             instance.</p>
-   *          <p>This option is supported only for HVM instances. Specifying this option with a PV
-   *             instance can make it unreachable.</p>
+   * <p>The date and time at which the Capacity Reservation expires. When a Capacity Reservation expires, the reserved capacity
+   * 			is released and you can no longer launch instances into it. The Capacity Reservation's state changes to
+   * 				<code>expired</code> when it reaches its end date and time.</p>
+   *          <p>The Capacity Reservation is cancelled within an hour from the specified time. For example, if you specify
+   * 			5/31/2019, 13:30:55, the Capacity Reservation is guaranteed to end between 13:30:55 and 14:30:55 on 5/31/2019.</p>
+   *          <p>You must provide an <code>EndDate</code> value if <code>EndDateType</code> is
+   * 				<code>limited</code>. Omit <code>EndDate</code> if <code>EndDateType</code> is
+   * 				<code>unlimited</code>.</p>
    */
-  EnaSupport?: AttributeBooleanValue;
+  EndDate?: Date;
 
   /**
    * @public
-   * <p>Replaces the security groups of the instance with the specified security groups.
-   *             You must specify the ID of at least one security group, even if it's just the default
-   *             security group for the VPC.</p>
+   * <p>Indicates the way in which the Capacity Reservation ends. A Capacity Reservation can have one of the following end
+   * 			types:</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>unlimited</code> - The Capacity Reservation remains active until you explicitly cancel it. Do not
+   * 					provide an <code>EndDate</code> value if <code>EndDateType</code> is
+   * 						<code>unlimited</code>.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>limited</code> - The Capacity Reservation expires automatically at a specified date and time. You must
+   * 					provide an <code>EndDate</code> value if <code>EndDateType</code> is
+   * 						<code>limited</code>.</p>
+   *             </li>
+   *          </ul>
    */
-  Groups?: string[];
+  EndDateType?: EndDateType;
 
   /**
    * @public
-   * <p>The ID of the instance.</p>
+   * <p>Reserved. Capacity Reservations you have created are accepted by default.</p>
    */
-  InstanceId: string | undefined;
+  Accept?: boolean;
 
   /**
    * @public
-   * <p>Specifies whether an instance stops or terminates when you initiate shutdown from the
-   *             instance (using the operating system command for system shutdown).</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  InstanceInitiatedShutdownBehavior?: AttributeValue;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>Changes the instance type to the specified value. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html">Instance
-   *                 types</a> in the <i>Amazon EC2 User Guide</i>. If the instance type is
-   *             not valid, the error returned is <code>InvalidInstanceAttributeValue</code>.</p>
+   * <p>Reserved for future use.</p>
    */
-  InstanceType?: AttributeValue;
+  AdditionalInfo?: string;
+}
 
+/**
+ * @public
+ */
+export interface ModifyCapacityReservationResult {
   /**
    * @public
-   * <p>Changes the instance's kernel to the specified value. We recommend that you use
-   *             PV-GRUB instead of kernels and RAM disks. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/UserProvidedKernels.html">PV-GRUB</a>.</p>
+   * <p>Returns <code>true</code> if the request succeeds; otherwise, it returns an error.</p>
    */
-  Kernel?: AttributeValue;
+  Return?: boolean;
+}
 
+/**
+ * @public
+ */
+export interface ModifyCapacityReservationFleetRequest {
   /**
    * @public
-   * <p>Changes the instance's RAM disk to the specified value. We recommend that you use
-   *             PV-GRUB instead of kernels and RAM disks. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/UserProvidedKernels.html">PV-GRUB</a>.</p>
+   * <p>The ID of the Capacity Reservation Fleet to modify.</p>
    */
-  Ramdisk?: AttributeValue;
+  CapacityReservationFleetId: string | undefined;
 
   /**
    * @public
-   * <p>Set to <code>simple</code> to enable enhanced networking with the Intel 82599 Virtual
-   *             Function interface for the instance.</p>
-   *          <p>There is no way to disable enhanced networking with the Intel 82599 Virtual Function
-   *             interface at this time.</p>
-   *          <p>This option is supported only for HVM instances. Specifying this option with a PV
-   *             instance can make it unreachable.</p>
+   * <p>The total number of capacity units to be reserved by the Capacity Reservation Fleet. This value,
+   * 			together with the instance type weights that you assign to each instance type used by the Fleet
+   * 			determine the number of instances for which the Fleet reserves capacity. Both values are based on
+   * 			units that make sense for your workload. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/crfleet-concepts.html#target-capacity">Total target capacity</a>
+   * 			in the Amazon EC2 User Guide.</p>
    */
-  SriovNetSupport?: AttributeValue;
+  TotalTargetCapacity?: number;
 
   /**
    * @public
-   * <p>Changes the instance's user data to the specified value. If you are using an Amazon Web Services SDK or command line tool, base64-encoding is performed for you, and you
-   *             can load the text from a file. Otherwise, you must provide base64-encoded text.</p>
+   * <p>The date and time at which the Capacity Reservation Fleet expires. When the Capacity Reservation
+   * 			Fleet expires, its state changes to <code>expired</code> and all of the Capacity Reservations in the
+   * 			Fleet expire.</p>
+   *          <p>The Capacity Reservation Fleet expires within an hour after the specified time. For example, if you
+   * 			specify <code>5/31/2019</code>, <code>13:30:55</code>, the Capacity Reservation Fleet is guaranteed
+   * 			to expire between <code>13:30:55</code> and <code>14:30:55</code> on <code>5/31/2019</code>.</p>
+   *          <p>You can't specify <b>EndDate</b> and <b>
+   * 			RemoveEndDate</b> in the same request.</p>
    */
-  UserData?: BlobAttributeValue;
+  EndDate?: Date;
 
   /**
    * @public
-   * <p>A new value for the attribute. Use only with the <code>kernel</code>,
-   *                 <code>ramdisk</code>, <code>userData</code>, <code>disableApiTermination</code>, or
-   *                 <code>instanceInitiatedShutdownBehavior</code> attribute.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  Value?: string;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>Indicates whether an instance is enabled for stop protection. For more information,
-   *             see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Stop_Start.html#Using_StopProtection">Stop
-   *                 Protection</a>.</p>
-   *          <p></p>
-   */
-  DisableApiStop?: AttributeBooleanValue;
-}
-
-/**
- * @public
- * <p>Describes an instance's Capacity Reservation targeting option. You can specify only one parameter
- * 			at a time. If you specify <code>CapacityReservationPreference</code> and
- * 			<code>CapacityReservationTarget</code>, the request fails.</p>
- *          <p>Use the <code>CapacityReservationPreference</code> parameter to configure the instance
- * 			to run as an On-Demand Instance or to run in any <code>open</code> Capacity Reservation that has
- * 			matching attributes (instance type, platform, Availability Zone). Use the
- * 			<code>CapacityReservationTarget</code> parameter to explicitly target a specific
- * 			   	Capacity Reservation or a Capacity Reservation group.</p>
- */
-export interface CapacityReservationSpecification {
-  /**
-   * @public
-   * <p>Indicates the instance's Capacity Reservation preferences. Possible preferences include:</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>open</code> - The instance can run in any <code>open</code> Capacity Reservation that has matching attributes
-   * 				(instance type, platform, Availability Zone).</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>none</code> - The instance avoids running in a Capacity Reservation even if one is available. The
-   * 					instance runs as an On-Demand Instance.</p>
-   *             </li>
-   *          </ul>
-   */
-  CapacityReservationPreference?: CapacityReservationPreference;
-
-  /**
-   * @public
-   * <p>Information about the target Capacity Reservation or Capacity Reservation group.</p>
-   */
-  CapacityReservationTarget?: CapacityReservationTarget;
-}
-
-/**
- * @public
- */
-export interface ModifyInstanceCapacityReservationAttributesRequest {
-  /**
-   * @public
-   * <p>The ID of the instance to be modified.</p>
-   */
-  InstanceId: string | undefined;
-
-  /**
-   * @public
-   * <p>Information about the Capacity Reservation targeting option.</p>
-   */
-  CapacityReservationSpecification: CapacityReservationSpecification | undefined;
-
-  /**
-   * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>Indicates whether to remove the end date from the Capacity Reservation Fleet. If you remove the
+   * 			end date, the Capacity Reservation Fleet does not expire and it remains active until you explicitly
+   * 			cancel it using the <b>CancelCapacityReservationFleet</b> action.</p>
+   *          <p>You can't specify <b>RemoveEndDate</b> and <b>
+   * 			EndDate</b> in the same request.</p>
    */
-  DryRun?: boolean;
+  RemoveEndDate?: boolean;
 }
 
 /**
  * @public
  */
-export interface ModifyInstanceCapacityReservationAttributesResult {
+export interface ModifyCapacityReservationFleetResult {
   /**
    * @public
    * <p>Returns <code>true</code> if the request succeeds; otherwise, it returns an error.</p>
@@ -3837,187 +3700,158 @@ export interface ModifyInstanceCapacityReservationAttributesResult {
 
 /**
  * @public
- * <p>Describes the credit option for CPU usage of a burstable performance instance.</p>
+ * <p>Information about the DNS server to be used.</p>
  */
-export interface InstanceCreditSpecificationRequest {
+export interface DnsServersOptionsModifyStructure {
   /**
    * @public
-   * <p>The ID of the instance.</p>
+   * <p>The IPv4 address range, in CIDR notation, of the DNS servers to be used. You can specify up to
+   * 			two DNS servers. Ensure that the DNS servers can be reached by the clients. The specified values
+   * 			overwrite the existing values.</p>
    */
-  InstanceId: string | undefined;
+  CustomDnsServers?: string[];
 
   /**
    * @public
-   * <p>The credit option for CPU usage of the instance.</p>
-   *          <p>Valid values: <code>standard</code> | <code>unlimited</code>
-   *          </p>
-   *          <p>T3 instances with <code>host</code> tenancy do not support the <code>unlimited</code>
-   *             CPU credit option.</p>
+   * <p>Indicates whether DNS servers should be used. Specify <code>False</code> to delete the existing DNS
+   * 			servers.</p>
    */
-  CpuCredits?: string;
+  Enabled?: boolean;
 }
 
 /**
  * @public
  */
-export interface ModifyInstanceCreditSpecificationRequest {
+export interface ModifyClientVpnEndpointRequest {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The ID of the Client VPN endpoint to modify.</p>
    */
-  DryRun?: boolean;
+  ClientVpnEndpointId: string | undefined;
 
   /**
    * @public
-   * <p>A unique, case-sensitive token that you provide to ensure idempotency of your
-   *             modification request. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html">Ensuring
-   *                 Idempotency</a>.</p>
+   * <p>The ARN of the server certificate to be used. The server certificate must be provisioned in
+   * 			Certificate Manager (ACM).</p>
    */
-  ClientToken?: string;
+  ServerCertificateArn?: string;
 
   /**
    * @public
-   * <p>Information about the credit option for CPU usage.</p>
+   * <p>Information about the client connection logging options.</p>
+   *          <p>If you enable client connection logging, data about client connections is sent to a
+   * 			Cloudwatch Logs log stream. The following information is logged:</p>
+   *          <ul>
+   *             <li>
+   *                <p>Client connection requests</p>
+   *             </li>
+   *             <li>
+   *                <p>Client connection results (successful and unsuccessful)</p>
+   *             </li>
+   *             <li>
+   *                <p>Reasons for unsuccessful client connection requests</p>
+   *             </li>
+   *             <li>
+   *                <p>Client connection termination time</p>
+   *             </li>
+   *          </ul>
    */
-  InstanceCreditSpecifications: InstanceCreditSpecificationRequest[] | undefined;
-}
+  ConnectionLogOptions?: ConnectionLogOptions;
 
-/**
- * @public
- * <p>Describes the burstable performance instance whose credit option for CPU usage was
- *             successfully modified.</p>
- */
-export interface SuccessfulInstanceCreditSpecificationItem {
   /**
    * @public
-   * <p>The ID of the instance.</p>
+   * <p>Information about the DNS servers to be used by Client VPN connections. A Client VPN endpoint can have
+   * 			up to two DNS servers.</p>
    */
-  InstanceId?: string;
-}
-
-/**
- * @public
- * @enum
- */
-export const UnsuccessfulInstanceCreditSpecificationErrorCode = {
-  INCORRECT_INSTANCE_STATE: "IncorrectInstanceState",
-  INSTANCE_CREDIT_SPECIFICATION_NOT_SUPPORTED: "InstanceCreditSpecification.NotSupported",
-  INSTANCE_NOT_FOUND: "InvalidInstanceID.NotFound",
-  INVALID_INSTANCE_ID: "InvalidInstanceID.Malformed",
-} as const;
-
-/**
- * @public
- */
-export type UnsuccessfulInstanceCreditSpecificationErrorCode =
-  (typeof UnsuccessfulInstanceCreditSpecificationErrorCode)[keyof typeof UnsuccessfulInstanceCreditSpecificationErrorCode];
+  DnsServers?: DnsServersOptionsModifyStructure;
 
-/**
- * @public
- * <p>Information about the error for the burstable performance instance whose credit option
- *             for CPU usage was not modified.</p>
- */
-export interface UnsuccessfulInstanceCreditSpecificationItemError {
   /**
    * @public
-   * <p>The error code.</p>
+   * <p>The port number to assign to the Client VPN endpoint for TCP and UDP traffic.</p>
+   *          <p>Valid Values: <code>443</code> | <code>1194</code>
+   *          </p>
+   *          <p>Default Value: <code>443</code>
+   *          </p>
    */
-  Code?: UnsuccessfulInstanceCreditSpecificationErrorCode;
+  VpnPort?: number;
 
   /**
    * @public
-   * <p>The applicable error message.</p>
+   * <p>A brief description of the Client VPN endpoint.</p>
    */
-  Message?: string;
-}
+  Description?: string;
 
-/**
- * @public
- * <p>Describes the burstable performance instance whose credit option for CPU usage was not
- *             modified.</p>
- */
-export interface UnsuccessfulInstanceCreditSpecificationItem {
   /**
    * @public
-   * <p>The ID of the instance.</p>
+   * <p>Indicates whether the VPN is split-tunnel.</p>
+   *          <p>For information about split-tunnel VPN endpoints, see <a href="https://docs.aws.amazon.com/vpn/latest/clientvpn-admin/split-tunnel-vpn.html">Split-tunnel Client VPN endpoint</a> in the
+   *         	<i>Client VPN Administrator Guide</i>.</p>
    */
-  InstanceId?: string;
+  SplitTunnel?: boolean;
 
   /**
    * @public
-   * <p>The applicable error for the burstable performance instance whose credit option for
-   *             CPU usage was not modified.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  Error?: UnsuccessfulInstanceCreditSpecificationItemError;
-}
+  DryRun?: boolean;
 
-/**
- * @public
- */
-export interface ModifyInstanceCreditSpecificationResult {
   /**
    * @public
-   * <p>Information about the instances whose credit option for CPU usage was successfully
-   *             modified.</p>
+   * <p>The IDs of one or more security groups to apply to the target network.</p>
    */
-  SuccessfulInstanceCreditSpecifications?: SuccessfulInstanceCreditSpecificationItem[];
+  SecurityGroupIds?: string[];
 
   /**
    * @public
-   * <p>Information about the instances whose credit option for CPU usage was not
-   *             modified.</p>
+   * <p>The ID of the VPC to associate with the Client VPN endpoint.</p>
    */
-  UnsuccessfulInstanceCreditSpecifications?: UnsuccessfulInstanceCreditSpecificationItem[];
-}
+  VpcId?: string;
 
-/**
- * @public
- */
-export interface ModifyInstanceEventStartTimeRequest {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>Specify whether to enable the self-service portal for the Client VPN endpoint.</p>
    */
-  DryRun?: boolean;
+  SelfServicePortal?: SelfServicePortal;
 
   /**
    * @public
-   * <p>The ID of the instance with the scheduled event.</p>
+   * <p>The options for managing connection authorization for new client connections.</p>
    */
-  InstanceId: string | undefined;
+  ClientConnectOptions?: ClientConnectOptions;
 
   /**
    * @public
-   * <p>The ID of the event whose date and time you are modifying.</p>
+   * <p>The maximum VPN session duration time in hours.</p>
+   *          <p>Valid values: <code>8 | 10 | 12 | 24</code>
+   *          </p>
+   *          <p>Default value: <code>24</code>
+   *          </p>
    */
-  InstanceEventId: string | undefined;
+  SessionTimeoutHours?: number;
 
   /**
    * @public
-   * <p>The new date and time when the event will take place.</p>
+   * <p>Options for enabling a customizable text banner that will be displayed on
+   * 			Amazon Web Services provided clients when a VPN session is established.</p>
    */
-  NotBefore: Date | undefined;
+  ClientLoginBannerOptions?: ClientLoginBannerOptions;
 }
 
 /**
  * @public
  */
-export interface ModifyInstanceEventStartTimeResult {
+export interface ModifyClientVpnEndpointResult {
   /**
    * @public
-   * <p>Information about the event.</p>
+   * <p>Returns <code>true</code> if the request succeeds; otherwise, it returns an error.</p>
    */
-  Event?: InstanceStatusEvent;
+  Return?: boolean;
 }
 
 /**
  * @public
  */
-export interface ModifyInstanceEventWindowRequest {
+export interface ModifyDefaultCreditSpecificationRequest {
   /**
    * @public
    * <p>Checks whether you have the required permissions for the action, without actually making the request,
@@ -4028,1512 +3862,1683 @@ export interface ModifyInstanceEventWindowRequest {
 
   /**
    * @public
-   * <p>The name of the event window.</p>
+   * <p>The instance family.</p>
    */
-  Name?: string;
+  InstanceFamily: UnlimitedSupportedInstanceFamily | undefined;
 
   /**
    * @public
-   * <p>The ID of the event window.</p>
+   * <p>The credit option for CPU usage of the instance family.</p>
+   *          <p>Valid Values: <code>standard</code> | <code>unlimited</code>
+   *          </p>
    */
-  InstanceEventWindowId: string | undefined;
+  CpuCredits: string | undefined;
+}
 
+/**
+ * @public
+ */
+export interface ModifyDefaultCreditSpecificationResult {
   /**
    * @public
-   * <p>The time ranges of the event window.</p>
+   * <p>The default credit option for CPU usage of the instance family.</p>
    */
-  TimeRanges?: InstanceEventWindowTimeRangeRequest[];
-
+  InstanceFamilyCreditSpecification?: InstanceFamilyCreditSpecification;
+}
+
+/**
+ * @public
+ */
+export interface ModifyEbsDefaultKmsKeyIdRequest {
   /**
    * @public
-   * <p>The cron expression of the event window, for example, <code>* 0-4,20-23 * * 1,5</code>.</p>
-   *          <p>Constraints:</p>
+   * <p>The identifier of the Key Management Service (KMS) KMS key to use for Amazon EBS encryption.
+   *       If this parameter is not specified, your KMS key for Amazon EBS is used. If <code>KmsKeyId</code> is
+   *       specified, the encrypted state must be <code>true</code>.</p>
+   *          <p>You can specify the KMS key using any of the following:</p>
    *          <ul>
    *             <li>
-   *                <p>Only hour and day of the week values are supported.</p>
-   *             </li>
-   *             <li>
-   *                <p>For day of the week values, you can specify either integers <code>0</code> through
-   *                   <code>6</code>, or alternative single values <code>SUN</code> through
-   *                   <code>SAT</code>.</p>
-   *             </li>
-   *             <li>
-   *                <p>The minute, month, and year must be specified by <code>*</code>.</p>
+   *                <p>Key ID. For example, 1234abcd-12ab-34cd-56ef-1234567890ab.</p>
    *             </li>
    *             <li>
-   *                <p>The hour value must be one or a multiple range, for example, <code>0-4</code> or
-   *                   <code>0-4,20-23</code>.</p>
+   *                <p>Key alias. For example, alias/ExampleAlias.</p>
    *             </li>
    *             <li>
-   *                <p>Each hour range must be >= 2 hours, for example, <code>0-2</code> or
-   *                   <code>20-23</code>.</p>
+   *                <p>Key ARN. For example, arn:aws:kms:us-east-1:012345678910:key/1234abcd-12ab-34cd-56ef-1234567890ab.</p>
    *             </li>
    *             <li>
-   *                <p>The event window must be >= 4 hours. The combined total time ranges in the event
-   *                window must be >= 4 hours.</p>
+   *                <p>Alias ARN. For example, arn:aws:kms:us-east-1:012345678910:alias/ExampleAlias.</p>
    *             </li>
    *          </ul>
-   *          <p>For more information about cron expressions, see <a href="https://en.wikipedia.org/wiki/Cron">cron</a> on the <i>Wikipedia
-   *             website</i>.</p>
+   *          <p>Amazon Web Services authenticates the KMS key asynchronously. Therefore, if you specify an ID, alias, or ARN that is not valid,
+   *       the action can appear to complete, but eventually fails.</p>
+   *          <p>Amazon EBS does not support asymmetric KMS keys.</p>
    */
-  CronExpression?: string;
-}
+  KmsKeyId: string | undefined;
 
-/**
- * @public
- */
-export interface ModifyInstanceEventWindowResult {
   /**
    * @public
-   * <p>Information about the event window.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  InstanceEventWindow?: InstanceEventWindow;
+  DryRun?: boolean;
 }
 
 /**
  * @public
  */
-export interface ModifyInstanceMaintenanceOptionsRequest {
-  /**
-   * @public
-   * <p>The ID of the instance.</p>
-   */
-  InstanceId: string | undefined;
-
-  /**
-   * @public
-   * <p>Disables the automatic recovery behavior of your instance or sets it to
-   *             default.</p>
-   */
-  AutoRecovery?: InstanceAutoRecoveryState;
-
+export interface ModifyEbsDefaultKmsKeyIdResult {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually
-   *             making the request, and provides an error response. If you have the required
-   *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
-   *                 <code>UnauthorizedOperation</code>.</p>
+   * <p>The Amazon Resource Name (ARN) of the default KMS key for encryption by default.</p>
    */
-  DryRun?: boolean;
+  KmsKeyId?: string;
 }
 
 /**
  * @public
  */
-export interface ModifyInstanceMaintenanceOptionsResult {
+export interface ModifyFleetRequest {
   /**
    * @public
-   * <p>The ID of the instance.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  InstanceId?: string;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>Provides information on the current automatic recovery behavior of your
-   *             instance.</p>
+   * <p>Indicates whether running instances should be terminated if the total target capacity of
+   *          the EC2 Fleet is decreased below the current size of the EC2 Fleet.</p>
+   *          <p>Supported only for fleets of type <code>maintain</code>.</p>
    */
-  AutoRecovery?: InstanceAutoRecoveryState;
-}
+  ExcessCapacityTerminationPolicy?: FleetExcessCapacityTerminationPolicy;
 
-/**
- * @public
- */
-export interface ModifyInstanceMetadataOptionsRequest {
   /**
    * @public
-   * <p>The ID of the instance.</p>
+   * <p>The launch template and overrides.</p>
    */
-  InstanceId: string | undefined;
+  LaunchTemplateConfigs?: FleetLaunchTemplateConfigRequest[];
 
   /**
    * @public
-   * <p>IMDSv2 uses token-backed sessions. Set the use of HTTP tokens to <code>optional</code>
-   *             (in other words, set the use of IMDSv2 to <code>optional</code>) or
-   *                 <code>required</code> (in other words, set the use of IMDSv2 to
-   *                 <code>required</code>).</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>optional</code> - When IMDSv2 is optional, you can choose to retrieve instance metadata with or without
-   *             a session token in your request. If you retrieve the IAM role credentials
-   *             without a token, the IMDSv1 role credentials are returned. If you retrieve the IAM role credentials
-   *             using a valid session token, the IMDSv2 role credentials are returned.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>required</code> - When IMDSv2 is required, you must send a session token
-   *             with any instance metadata retrieval requests. In this state, retrieving the IAM role
-   *             credentials always returns IMDSv2 credentials; IMDSv1 credentials are not available.</p>
-   *             </li>
-   *          </ul>
-   *          <p>Default: <code>optional</code>
-   *          </p>
+   * <p>The ID of the EC2 Fleet.</p>
    */
-  HttpTokens?: HttpTokensState;
+  FleetId: string | undefined;
 
   /**
    * @public
-   * <p>The desired HTTP PUT response hop limit for instance metadata requests. The larger the
-   *             number, the further instance metadata requests can travel. If no parameter is specified,
-   *             the existing state is maintained.</p>
-   *          <p>Possible values: Integers from 1 to 64</p>
+   * <p>The size of the EC2 Fleet.</p>
    */
-  HttpPutResponseHopLimit?: number;
+  TargetCapacitySpecification?: TargetCapacitySpecificationRequest;
 
   /**
    * @public
-   * <p>Enables or disables the HTTP metadata endpoint on your instances. If this parameter is
-   *             not specified, the existing state is maintained.</p>
-   *          <p>If you specify a value of <code>disabled</code>, you cannot access your instance
-   *             metadata.</p>
+   * <p>Reserved.</p>
    */
-  HttpEndpoint?: InstanceMetadataEndpointState;
+  Context?: string;
+}
 
+/**
+ * @public
+ */
+export interface ModifyFleetResult {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually
-   *             making the request, and provides an error response. If you have the required
-   *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
-   *                 <code>UnauthorizedOperation</code>.</p>
+   * <p>If the request succeeds, the response returns <code>true</code>. If the request fails,
+   *          no response is returned, and instead an error message is returned.</p>
    */
-  DryRun?: boolean;
+  Return?: boolean;
+}
 
+/**
+ * @public
+ * <p>Describes a load permission.</p>
+ */
+export interface LoadPermissionRequest {
   /**
    * @public
-   * <p>Enables or disables the IPv6 endpoint for the instance metadata service.
-   *             Applies only if you enabled the HTTP metadata endpoint.</p>
+   * <p>The name of the group.</p>
    */
-  HttpProtocolIpv6?: InstanceMetadataProtocolState;
+  Group?: PermissionGroup;
 
   /**
    * @public
-   * <p>Set to <code>enabled</code> to allow access to instance tags from the instance
-   *             metadata. Set to <code>disabled</code> to turn off access to instance tags from the
-   *             instance metadata. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Using_Tags.html#work-with-tags-in-IMDS">Work with
-   *                 instance tags using the instance metadata</a>.</p>
-   *          <p>Default: <code>disabled</code>
-   *          </p>
+   * <p>The Amazon Web Services account ID.</p>
    */
-  InstanceMetadataTags?: InstanceMetadataTagsState;
+  UserId?: string;
 }
 
 /**
  * @public
+ * <p>Describes modifications to the load permissions of an Amazon FPGA image (AFI).</p>
  */
-export interface ModifyInstanceMetadataOptionsResult {
+export interface LoadPermissionModifications {
   /**
    * @public
-   * <p>The ID of the instance.</p>
+   * <p>The load permissions to add.</p>
    */
-  InstanceId?: string;
+  Add?: LoadPermissionRequest[];
 
   /**
    * @public
-   * <p>The metadata options for the instance.</p>
+   * <p>The load permissions to remove.</p>
    */
-  InstanceMetadataOptions?: InstanceMetadataOptionsResponse;
+  Remove?: LoadPermissionRequest[];
 }
 
 /**
  * @public
  * @enum
  */
-export const HostTenancy = {
-  dedicated: "dedicated",
-  host: "host",
+export const OperationType = {
+  add: "add",
+  remove: "remove",
 } as const;
 
 /**
  * @public
  */
-export type HostTenancy = (typeof HostTenancy)[keyof typeof HostTenancy];
+export type OperationType = (typeof OperationType)[keyof typeof OperationType];
 
 /**
  * @public
  */
-export interface ModifyInstancePlacementRequest {
+export interface ModifyFpgaImageAttributeRequest {
   /**
    * @public
-   * <p>The affinity setting for the instance.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  Affinity?: Affinity;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The name of the placement group in which to place the instance. For spread placement
-   *             groups, the instance must have a tenancy of <code>default</code>. For cluster and
-   *             partition placement groups, the instance must have a tenancy of <code>default</code> or
-   *                 <code>dedicated</code>.</p>
-   *          <p>To remove an instance from a placement group, specify an empty string ("").</p>
+   * <p>The ID of the AFI.</p>
    */
-  GroupName?: string;
+  FpgaImageId: string | undefined;
 
   /**
    * @public
-   * <p>The ID of the Dedicated Host with which to associate the instance.</p>
+   * <p>The name of the attribute.</p>
    */
-  HostId?: string;
+  Attribute?: FpgaImageAttributeName;
 
   /**
    * @public
-   * <p>The ID of the instance that you are modifying.</p>
+   * <p>The operation type.</p>
    */
-  InstanceId: string | undefined;
+  OperationType?: OperationType;
 
   /**
    * @public
-   * <p>The tenancy for the instance.</p>
-   *          <note>
-   *             <p>For T3 instances, you must launch the instance on a Dedicated Host to use a
-   *                 tenancy of <code>host</code>. You can't change the tenancy from
-   *                 <code>host</code> to <code>dedicated</code> or <code>default</code>.
-   *                 Attempting to make one of these unsupported tenancy changes results in an
-   *                 <code>InvalidRequest</code> error code.</p>
-   *          </note>
+   * <p>The Amazon Web Services account IDs. This parameter is valid only when modifying the <code>loadPermission</code> attribute.</p>
    */
-  Tenancy?: HostTenancy;
+  UserIds?: string[];
 
   /**
    * @public
-   * <p>The number of the partition in which to place the instance. Valid only if the
-   *             placement group strategy is set to <code>partition</code>.</p>
+   * <p>The user groups. This parameter is valid only when modifying the <code>loadPermission</code> attribute.</p>
    */
-  PartitionNumber?: number;
+  UserGroups?: string[];
 
   /**
    * @public
-   * <p>The ARN of the host resource group in which to place the instance. The instance must
-   *             have a tenancy of <code>host</code> to specify this parameter.</p>
+   * <p>The product codes. After you add a product code to an AFI, it can't be removed.
+   * 		    This parameter is valid only when modifying the <code>productCodes</code> attribute.</p>
    */
-  HostResourceGroupArn?: string;
+  ProductCodes?: string[];
 
   /**
    * @public
-   * <p>The Group Id of a placement group. You must specify the Placement Group <b>Group Id</b> to launch an instance in a shared placement
-   *             group.</p>
+   * <p>The load permission for the AFI.</p>
    */
-  GroupId?: string;
+  LoadPermission?: LoadPermissionModifications;
+
+  /**
+   * @public
+   * <p>A description for the AFI.</p>
+   */
+  Description?: string;
+
+  /**
+   * @public
+   * <p>A name for the AFI.</p>
+   */
+  Name?: string;
 }
 
 /**
  * @public
  */
-export interface ModifyInstancePlacementResult {
+export interface ModifyFpgaImageAttributeResult {
   /**
    * @public
-   * <p>Is <code>true</code> if the request succeeds, and an error otherwise.</p>
+   * <p>Information about the attribute.</p>
    */
-  Return?: boolean;
+  FpgaImageAttribute?: FpgaImageAttribute;
 }
 
 /**
  * @public
- * <p>Remove an operating Region from an IPAM. Operating Regions are Amazon Web Services Regions where the IPAM is allowed to manage IP address CIDRs. IPAM only discovers and monitors resources in the Amazon Web Services Regions you select as operating Regions.</p>
- *          <p>For more information about operating Regions, see <a href="https://docs.aws.amazon.com/vpc/latest/ipam/create-ipam.html">Create an IPAM</a> in the <i>Amazon VPC IPAM User Guide</i>
- *          </p>
  */
-export interface RemoveIpamOperatingRegion {
+export interface ModifyHostsRequest {
   /**
    * @public
-   * <p>The name of the operating Region you want to remove.</p>
+   * <p>Specify whether to enable or disable auto-placement.</p>
    */
-  RegionName?: string;
-}
+  AutoPlacement?: AutoPlacement;
 
-/**
- * @public
- */
-export interface ModifyIpamRequest {
   /**
    * @public
-   * <p>A check for whether you have the required permissions for the action without actually making the request
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The IDs of the Dedicated Hosts to modify.</p>
    */
-  DryRun?: boolean;
+  HostIds: string[] | undefined;
 
   /**
    * @public
-   * <p>The ID of the IPAM you want to modify.</p>
+   * <p>Indicates whether to enable or disable host recovery for the Dedicated Host. For more
+   *             information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/dedicated-hosts-recovery.html"> Host recovery</a>
+   *             in the <i>Amazon EC2 User Guide</i>.</p>
    */
-  IpamId: string | undefined;
+  HostRecovery?: HostRecovery;
 
   /**
    * @public
-   * <p>The description of the IPAM you want to modify.</p>
+   * <p>Specifies the instance type to be supported by the Dedicated Host. Specify this
+   *             parameter to modify a Dedicated Host to support only a specific instance type.</p>
+   *          <p>If you want to modify a Dedicated Host to support multiple instance types in its
+   *             current instance family, omit this parameter and specify <b>InstanceFamily</b> instead. You cannot specify <b>InstanceType</b> and <b>InstanceFamily</b> in the
+   *             same request.</p>
    */
-  Description?: string;
+  InstanceType?: string;
 
   /**
    * @public
-   * <p>Choose the operating Regions for the IPAM. Operating Regions are Amazon Web Services Regions where the IPAM is allowed to manage IP address CIDRs. IPAM only discovers and monitors resources in the Amazon Web Services Regions you select as operating Regions.</p>
-   *          <p>For more information about operating Regions, see <a href="https://docs.aws.amazon.com/vpc/latest/ipam/create-ipam.html">Create an IPAM</a> in the <i>Amazon VPC IPAM User Guide</i>.</p>
+   * <p>Specifies the instance family to be supported by the Dedicated Host. Specify this
+   *             parameter to modify a Dedicated Host to support multiple instance types within its
+   *             current instance family.</p>
+   *          <p>If you want to modify a Dedicated Host to support a specific instance type only, omit
+   *             this parameter and specify <b>InstanceType</b> instead. You
+   *             cannot specify <b>InstanceFamily</b> and <b>InstanceType</b> in the same request.</p>
    */
-  AddOperatingRegions?: AddIpamOperatingRegion[];
+  InstanceFamily?: string;
 
   /**
    * @public
-   * <p>The operating Regions to remove.</p>
+   * <p>Indicates whether to enable or disable host maintenance for the Dedicated Host. For
+   *             more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/dedicated-hosts-maintenance.html"> Host
+   *                 maintenance</a> in the <i>Amazon EC2 User Guide</i>.</p>
    */
-  RemoveOperatingRegions?: RemoveIpamOperatingRegion[];
+  HostMaintenance?: HostMaintenance;
 }
 
 /**
  * @public
  */
-export interface ModifyIpamResult {
+export interface ModifyHostsResult {
   /**
    * @public
-   * <p>The results of the modification.</p>
+   * <p>The IDs of the Dedicated Hosts that were successfully modified.</p>
    */
-  Ipam?: Ipam;
+  Successful?: string[];
+
+  /**
+   * @public
+   * <p>The IDs of the Dedicated Hosts that could not be modified. Check whether the setting
+   *             you requested can be used.</p>
+   */
+  Unsuccessful?: UnsuccessfulItem[];
 }
 
 /**
  * @public
  */
-export interface ModifyIpamPoolRequest {
+export interface ModifyIdentityIdFormatRequest {
   /**
    * @public
-   * <p>A check for whether you have the required permissions for the action without actually making the request
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The ARN of the principal, which can be an IAM user, IAM role, or the root user. Specify
+   *        <code>all</code> to modify the ID format for all IAM users, IAM roles, and the root user of
+   *        the account.</p>
    */
-  DryRun?: boolean;
+  PrincipalArn: string | undefined;
 
   /**
    * @public
-   * <p>The ID of the IPAM pool you want to modify.</p>
+   * <p>The type of resource: <code>bundle</code> | <code>conversion-task</code> | <code>customer-gateway</code> | <code>dhcp-options</code> |
+   *           <code>elastic-ip-allocation</code> | <code>elastic-ip-association</code> |
+   *           <code>export-task</code> | <code>flow-log</code> | <code>image</code> |
+   *           <code>import-task</code> | <code>internet-gateway</code> | <code>network-acl</code>
+   *           | <code>network-acl-association</code> | <code>network-interface</code> |
+   *           <code>network-interface-attachment</code> | <code>prefix-list</code> |
+   *           <code>route-table</code> | <code>route-table-association</code> |
+   *           <code>security-group</code> | <code>subnet</code> |
+   *           <code>subnet-cidr-block-association</code> | <code>vpc</code> |
+   *           <code>vpc-cidr-block-association</code> | <code>vpc-endpoint</code> | <code>vpc-peering-connection</code> | <code>vpn-connection</code> | <code>vpn-gateway</code>.</p>
+   *          <p>Alternatively, use the <code>all-current</code> option to include all resource types that are
+   *           currently within their opt-in period for longer IDs.</p>
    */
-  IpamPoolId: string | undefined;
+  Resource: string | undefined;
 
   /**
    * @public
-   * <p>The description of the IPAM pool you want to modify.</p>
+   * <p>Indicates whether the resource should use longer IDs (17-character IDs)</p>
    */
-  Description?: string;
+  UseLongIds: boolean | undefined;
+}
 
+/**
+ * @public
+ */
+export interface ModifyIdFormatRequest {
   /**
    * @public
-   * <p>If true, IPAM will continuously look for resources within the CIDR range of this pool
-   *          and automatically import them as allocations into your IPAM. The CIDRs that will be allocated for
-   *          these resources must not already be allocated to other resources in order for the import to succeed. IPAM will import
-   *          a CIDR regardless of its compliance with the pool's allocation rules, so a resource might be imported and subsequently
-   *          marked as noncompliant. If IPAM discovers multiple CIDRs that overlap, IPAM will import the largest CIDR only. If IPAM
-   *          discovers multiple CIDRs with matching CIDRs, IPAM will randomly import one of them only.
-   *       </p>
-   *          <p>A locale must be set on the pool for this feature to work.</p>
+   * <p>The type of resource: <code>bundle</code> | <code>conversion-task</code> | <code>customer-gateway</code> | <code>dhcp-options</code> |
+   *            <code>elastic-ip-allocation</code> | <code>elastic-ip-association</code> |
+   *            <code>export-task</code> | <code>flow-log</code> | <code>image</code> |
+   *            <code>import-task</code> | <code>internet-gateway</code> | <code>network-acl</code>
+   *            | <code>network-acl-association</code> | <code>network-interface</code> |
+   *            <code>network-interface-attachment</code> | <code>prefix-list</code> |
+   *            <code>route-table</code> | <code>route-table-association</code> |
+   *            <code>security-group</code> | <code>subnet</code> |
+   *            <code>subnet-cidr-block-association</code> | <code>vpc</code> |
+   *            <code>vpc-cidr-block-association</code> | <code>vpc-endpoint</code> | <code>vpc-peering-connection</code> | <code>vpn-connection</code> | <code>vpn-gateway</code>.</p>
+   *          <p>Alternatively, use the <code>all-current</code> option to include all resource types that are
+   *        currently within their opt-in period for longer IDs.</p>
    */
-  AutoImport?: boolean;
+  Resource: string | undefined;
 
   /**
    * @public
-   * <p>The minimum netmask length required for CIDR allocations in this IPAM pool to be compliant. Possible
-   *          netmask lengths for IPv4 addresses are 0 - 32. Possible netmask lengths for IPv6 addresses are  0 - 128. The minimum netmask
-   *          length must be less than the maximum netmask length.</p>
+   * <p>Indicate whether the resource should use longer IDs (17-character IDs).</p>
    */
-  AllocationMinNetmaskLength?: number;
+  UseLongIds: boolean | undefined;
+}
+
+/**
+ * @public
+ * <p>Describes a launch permission modification.</p>
+ */
+export interface LaunchPermissionModifications {
+  /**
+   * @public
+   * <p>The Amazon Web Services account ID, organization ARN, or OU ARN to add to the list of launch permissions for the AMI.</p>
+   */
+  Add?: LaunchPermission[];
 
   /**
    * @public
-   * <p>The maximum netmask length possible for CIDR allocations in this IPAM pool to be compliant. Possible
-   *          netmask lengths for IPv4 addresses are 0 - 32. Possible netmask lengths for IPv6 addresses are  0 - 128.The maximum netmask
-   *          length must be greater than the minimum netmask length.</p>
+   * <p>The Amazon Web Services account ID, organization ARN, or OU ARN to remove from the list of launch permissions for the AMI.</p>
    */
-  AllocationMaxNetmaskLength?: number;
+  Remove?: LaunchPermission[];
+}
 
+/**
+ * @public
+ * <p>Contains the parameters for ModifyImageAttribute.</p>
+ */
+export interface ModifyImageAttributeRequest {
   /**
    * @public
-   * <p>The default netmask length for allocations added to this pool. If, for example, the CIDR assigned to this pool is 10.0.0.0/8 and you enter 16 here, new allocations will default to 10.0.0.0/16.</p>
+   * <p>The name of the attribute to modify.</p>
+   *          <p>Valid values: <code>description</code> | <code>imdsSupport</code> | <code>launchPermission</code>
+   *          </p>
    */
-  AllocationDefaultNetmaskLength?: number;
+  Attribute?: string;
 
   /**
    * @public
-   * <p>Clear the default netmask length allocation rule for this pool.</p>
+   * <p>A new description for the AMI.</p>
    */
-  ClearAllocationDefaultNetmaskLength?: boolean;
+  Description?: AttributeValue;
 
   /**
    * @public
-   * <p>Add tag allocation rules to a pool. For more information about allocation rules, see <a href="https://docs.aws.amazon.com/vpc/latest/ipam/create-top-ipam.html">Create a top-level pool</a> in the <i>Amazon VPC IPAM User Guide</i>.</p>
+   * <p>The ID of the AMI.</p>
    */
-  AddAllocationResourceTags?: RequestIpamResourceTag[];
+  ImageId: string | undefined;
 
   /**
    * @public
-   * <p>Remove tag allocation rules from a pool.</p>
+   * <p>A new launch permission for the AMI.</p>
    */
-  RemoveAllocationResourceTags?: RequestIpamResourceTag[];
-}
+  LaunchPermission?: LaunchPermissionModifications;
 
-/**
- * @public
- */
-export interface ModifyIpamPoolResult {
   /**
    * @public
-   * <p>The results of the modification.</p>
+   * <p>The operation type.
+   *        This parameter can be used only when the <code>Attribute</code> parameter is <code>launchPermission</code>.</p>
    */
-  IpamPool?: IpamPool;
-}
+  OperationType?: OperationType;
 
-/**
- * @public
- */
-export interface ModifyIpamResourceCidrRequest {
   /**
    * @public
-   * <p>A check for whether you have the required permissions for the action without actually making the request
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>Not supported.</p>
    */
-  DryRun?: boolean;
+  ProductCodes?: string[];
 
   /**
    * @public
-   * <p>The ID of the resource you want to modify.</p>
+   * <p>The user groups.
+   *        This parameter can be used only when the <code>Attribute</code> parameter is <code>launchPermission</code>.</p>
    */
-  ResourceId: string | undefined;
+  UserGroups?: string[];
 
   /**
    * @public
-   * <p>The CIDR of the resource you want to modify.</p>
+   * <p>The Amazon Web Services account IDs.
+   *        This parameter can be used only when the <code>Attribute</code> parameter is <code>launchPermission</code>.</p>
    */
-  ResourceCidr: string | undefined;
+  UserIds?: string[];
 
   /**
    * @public
-   * <p>The Amazon Web Services Region of the resource you want to modify.</p>
+   * <p>The value of the attribute being modified.
+   *        This parameter can be used only when the <code>Attribute</code> parameter is <code>description</code> or <code>imdsSupport</code>.</p>
    */
-  ResourceRegion: string | undefined;
+  Value?: string;
 
   /**
    * @public
-   * <p>The ID of the current scope that the resource CIDR is in.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   * 			and provides an error response. If you have the required permissions, the error response is
+   * 			<code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  CurrentIpamScopeId: string | undefined;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The ID of the scope you want to transfer the resource CIDR to.</p>
+   * <p>The Amazon Resource Name (ARN) of an organization. This parameter can be used only when the <code>Attribute</code> parameter is <code>launchPermission</code>.</p>
    */
-  DestinationIpamScopeId?: string;
+  OrganizationArns?: string[];
 
   /**
    * @public
-   * <p>Determines if the resource is monitored by IPAM. If a resource is monitored, the resource is discovered by IPAM and you can view details about the resource’s CIDR.</p>
+   * <p>The Amazon Resource Name (ARN) of an organizational unit (OU). This parameter can be used only when the <code>Attribute</code> parameter is <code>launchPermission</code>.</p>
    */
-  Monitored: boolean | undefined;
-}
+  OrganizationalUnitArns?: string[];
 
-/**
- * @public
- */
-export interface ModifyIpamResourceCidrResult {
   /**
    * @public
-   * <p>The CIDR of the resource.</p>
+   * <p>Set to <code>v2.0</code> to indicate that IMDSv2 is specified in the AMI. Instances
+   *       launched from this AMI will have <code>HttpTokens</code> automatically set to
+   *       <code>required</code> so that, by default, the instance requires that IMDSv2 is used when
+   *       requesting instance metadata. In addition, <code>HttpPutResponseHopLimit</code> is set to
+   *       <code>2</code>. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/configuring-IMDS-new-instances.html#configure-IMDS-new-instances-ami-configuration">Configure
+   *         the AMI</a> in the <i>Amazon EC2 User Guide</i>.</p>
+   *          <important>
+   *             <p>Do not use this parameter unless your AMI software supports IMDSv2. After you set the value to <code>v2.0</code>,
+   *         you can't undo it. The only way to “reset” your AMI is to create a new AMI from the underlying snapshot.</p>
+   *          </important>
    */
-  IpamResourceCidr?: IpamResourceCidr;
+  ImdsSupport?: AttributeValue;
 }
 
 /**
  * @public
+ * <p>Describes information used to set up an EBS volume specified in a block device
+ *             mapping.</p>
  */
-export interface ModifyIpamResourceDiscoveryRequest {
+export interface EbsInstanceBlockDeviceSpecification {
   /**
    * @public
-   * <p>A check for whether you have the required permissions for the action without actually making the request
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>Indicates whether the volume is deleted on instance termination.</p>
    */
-  DryRun?: boolean;
+  DeleteOnTermination?: boolean;
 
   /**
    * @public
-   * <p>A resource discovery ID.</p>
+   * <p>The ID of the EBS volume.</p>
    */
-  IpamResourceDiscoveryId: string | undefined;
+  VolumeId?: string;
+}
 
+/**
+ * @public
+ * <p>Describes a block device mapping entry.</p>
+ */
+export interface InstanceBlockDeviceMappingSpecification {
   /**
    * @public
-   * <p>A resource discovery description.</p>
+   * <p>The device name (for example, <code>/dev/sdh</code> or <code>xvdh</code>).</p>
    */
-  Description?: string;
+  DeviceName?: string;
 
   /**
    * @public
-   * <p>Add operating Regions to the resource discovery. Operating Regions are Amazon Web Services Regions where the IPAM is allowed to manage IP address CIDRs. IPAM only discovers and monitors resources in the Amazon Web Services Regions you select as operating Regions.</p>
+   * <p>Parameters used to automatically set up EBS volumes when the instance is
+   *             launched.</p>
    */
-  AddOperatingRegions?: AddIpamOperatingRegion[];
+  Ebs?: EbsInstanceBlockDeviceSpecification;
 
   /**
    * @public
-   * <p>Remove operating Regions.</p>
+   * <p>suppress the specified device included in the block device mapping.</p>
    */
-  RemoveOperatingRegions?: RemoveIpamOperatingRegion[];
+  NoDevice?: string;
+
+  /**
+   * @public
+   * <p>The virtual device name.</p>
+   */
+  VirtualName?: string;
 }
 
 /**
  * @public
  */
-export interface ModifyIpamResourceDiscoveryResult {
-  /**
-   * @public
-   * <p>A resource discovery.</p>
-   */
-  IpamResourceDiscovery?: IpamResourceDiscovery;
+export interface BlobAttributeValue {
+  Value?: Uint8Array;
 }
 
 /**
  * @public
  */
-export interface ModifyIpamScopeRequest {
+export interface ModifyInstanceAttributeRequest {
   /**
    * @public
-   * <p>A check for whether you have the required permissions for the action without actually making the request
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>Enable or disable source/destination checks, which ensure that the instance is either
+   *             the source or the destination of any traffic that it receives. If the value is
+   *                 <code>true</code>, source/destination checks are enabled; otherwise, they are
+   *             disabled. The default value is <code>true</code>. You must disable source/destination
+   *             checks if the instance runs services such as network address translation, routing, or
+   *             firewalls.</p>
    */
-  DryRun?: boolean;
+  SourceDestCheck?: AttributeBooleanValue;
 
   /**
    * @public
-   * <p>The ID of the scope you want to modify.</p>
+   * <p>The name of the attribute to modify.</p>
+   *          <important>
+   *             <p>You can modify the following attributes only: <code>disableApiTermination</code> |
+   *                     <code>instanceType</code> | <code>kernel</code> | <code>ramdisk</code> |
+   *                     <code>instanceInitiatedShutdownBehavior</code> | <code>blockDeviceMapping</code>
+   *                 | <code>userData</code> | <code>sourceDestCheck</code> | <code>groupSet</code> |
+   *                     <code>ebsOptimized</code> | <code>sriovNetSupport</code> |
+   *                     <code>enaSupport</code> | <code>nvmeSupport</code> | <code>disableApiStop</code>
+   *                 | <code>enclaveOptions</code>
+   *             </p>
+   *          </important>
    */
-  IpamScopeId: string | undefined;
+  Attribute?: InstanceAttributeName;
 
   /**
    * @public
-   * <p>The description of the scope you want to modify.</p>
+   * <p>Modifies the <code>DeleteOnTermination</code> attribute for volumes that are currently
+   *             attached. The volume must be owned by the caller. If no value is specified for
+   *                 <code>DeleteOnTermination</code>, the default is <code>true</code> and the volume is
+   *             deleted when the instance is terminated.</p>
+   *          <p>To add instance store volumes to an Amazon EBS-backed instance, you must add them when
+   *             you launch the instance. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/block-device-mapping-concepts.html#Using_OverridingAMIBDM">Update the block device mapping when launching an instance</a> in the
+   *                 <i>Amazon EC2 User Guide</i>.</p>
    */
-  Description?: string;
-}
+  BlockDeviceMappings?: InstanceBlockDeviceMappingSpecification[];
 
-/**
- * @public
- */
-export interface ModifyIpamScopeResult {
   /**
    * @public
-   * <p>The results of the modification.</p>
+   * <p>If the value is <code>true</code>, you can't terminate the instance using the Amazon
+   *             EC2 console, CLI, or API; otherwise, you can. You cannot use this parameter for Spot
+   *             Instances.</p>
    */
-  IpamScope?: IpamScope;
-}
+  DisableApiTermination?: AttributeBooleanValue;
 
-/**
- * @public
- */
-export interface ModifyLaunchTemplateRequest {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually
-   *             making the request, and provides an error response. If you have the required
-   *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
-   *                 <code>UnauthorizedOperation</code>.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
 
   /**
    * @public
-   * <p>Unique, case-sensitive identifier you provide to ensure the idempotency of the
-   *             request. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html">Ensuring
-   *                 idempotency</a>.</p>
-   *          <p>Constraint: Maximum 128 ASCII characters.</p>
+   * <p>Specifies whether the instance is optimized for Amazon EBS I/O. This optimization
+   *             provides dedicated throughput to Amazon EBS and an optimized configuration stack to
+   *             provide optimal EBS I/O performance. This optimization isn't available with all instance
+   *             types. Additional usage charges apply when using an EBS Optimized instance.</p>
    */
-  ClientToken?: string;
+  EbsOptimized?: AttributeBooleanValue;
 
   /**
    * @public
-   * <p>The ID of the launch template.</p>
-   *          <p>You must specify either the <code>LaunchTemplateId</code> or the
-   *                 <code>LaunchTemplateName</code>, but not both.</p>
+   * <p>Set to <code>true</code> to enable enhanced networking with ENA for the
+   *             instance.</p>
+   *          <p>This option is supported only for HVM instances. Specifying this option with a PV
+   *             instance can make it unreachable.</p>
    */
-  LaunchTemplateId?: string;
+  EnaSupport?: AttributeBooleanValue;
 
   /**
    * @public
-   * <p>The name of the launch template.</p>
-   *          <p>You must specify either the <code>LaunchTemplateName</code> or the
-   *                 <code>LaunchTemplateId</code>, but not both.</p>
+   * <p>Replaces the security groups of the instance with the specified security groups.
+   *             You must specify the ID of at least one security group, even if it's just the default
+   *             security group for the VPC.</p>
    */
-  LaunchTemplateName?: string;
+  Groups?: string[];
 
   /**
    * @public
-   * <p>The version number of the launch template to set as the default version.</p>
+   * <p>The ID of the instance.</p>
    */
-  DefaultVersion?: string;
-}
+  InstanceId: string | undefined;
 
-/**
- * @public
- */
-export interface ModifyLaunchTemplateResult {
   /**
    * @public
-   * <p>Information about the launch template.</p>
+   * <p>Specifies whether an instance stops or terminates when you initiate shutdown from the
+   *             instance (using the operating system command for system shutdown).</p>
    */
-  LaunchTemplate?: LaunchTemplate;
-}
+  InstanceInitiatedShutdownBehavior?: AttributeValue;
 
-/**
- * @public
- */
-export interface ModifyLocalGatewayRouteRequest {
   /**
    * @public
-   * <p>The CIDR block used for destination matches. The value that you provide must match the CIDR of an existing route in the table.</p>
+   * <p>Changes the instance type to the specified value. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html">Instance
+   *                 types</a> in the <i>Amazon EC2 User Guide</i>. If the instance type is
+   *             not valid, the error returned is <code>InvalidInstanceAttributeValue</code>.</p>
    */
-  DestinationCidrBlock?: string;
+  InstanceType?: AttributeValue;
 
   /**
    * @public
-   * <p>The ID of the local gateway route table.</p>
+   * <p>Changes the instance's kernel to the specified value. We recommend that you use
+   *             PV-GRUB instead of kernels and RAM disks. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/UserProvidedKernels.html">PV-GRUB</a>.</p>
    */
-  LocalGatewayRouteTableId: string | undefined;
+  Kernel?: AttributeValue;
 
   /**
    * @public
-   * <p>
-   *          The ID of the virtual interface group.
-   *       </p>
+   * <p>Changes the instance's RAM disk to the specified value. We recommend that you use
+   *             PV-GRUB instead of kernels and RAM disks. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/UserProvidedKernels.html">PV-GRUB</a>.</p>
    */
-  LocalGatewayVirtualInterfaceGroupId?: string;
+  Ramdisk?: AttributeValue;
 
   /**
    * @public
-   * <p>The ID of the network interface.</p>
+   * <p>Set to <code>simple</code> to enable enhanced networking with the Intel 82599 Virtual
+   *             Function interface for the instance.</p>
+   *          <p>There is no way to disable enhanced networking with the Intel 82599 Virtual Function
+   *             interface at this time.</p>
+   *          <p>This option is supported only for HVM instances. Specifying this option with a PV
+   *             instance can make it unreachable.</p>
    */
-  NetworkInterfaceId?: string;
+  SriovNetSupport?: AttributeValue;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>Changes the instance's user data to the specified value. If you are using an Amazon Web Services SDK or command line tool, base64-encoding is performed for you, and you
+   *             can load the text from a file. Otherwise, you must provide base64-encoded text.</p>
    */
-  DryRun?: boolean;
+  UserData?: BlobAttributeValue;
 
   /**
    * @public
-   * <p>
-   *          The ID of the prefix list. Use a prefix list in place of <code>DestinationCidrBlock</code>. You
-   *          cannot use <code>DestinationPrefixListId</code> and <code>DestinationCidrBlock</code> in the same request.
-   *       </p>
+   * <p>A new value for the attribute. Use only with the <code>kernel</code>,
+   *                 <code>ramdisk</code>, <code>userData</code>, <code>disableApiTermination</code>, or
+   *                 <code>instanceInitiatedShutdownBehavior</code> attribute.</p>
    */
-  DestinationPrefixListId?: string;
-}
+  Value?: string;
 
-/**
- * @public
- */
-export interface ModifyLocalGatewayRouteResult {
   /**
    * @public
-   * <p>Information about the local gateway route table.</p>
+   * <p>Indicates whether an instance is enabled for stop protection. For more information,
+   *             see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Stop_Start.html#Using_StopProtection">Stop
+   *                 Protection</a>.</p>
+   *          <p></p>
    */
-  Route?: LocalGatewayRoute;
+  DisableApiStop?: AttributeBooleanValue;
 }
 
 /**
  * @public
- * <p>An entry for a prefix list.</p>
+ * <p>Describes an instance's Capacity Reservation targeting option. You can specify only one parameter
+ * 			at a time. If you specify <code>CapacityReservationPreference</code> and
+ * 			<code>CapacityReservationTarget</code>, the request fails.</p>
+ *          <p>Use the <code>CapacityReservationPreference</code> parameter to configure the instance
+ * 			to run as an On-Demand Instance or to run in any <code>open</code> Capacity Reservation that has
+ * 			matching attributes (instance type, platform, Availability Zone). Use the
+ * 			<code>CapacityReservationTarget</code> parameter to explicitly target a specific
+ * 			   	Capacity Reservation or a Capacity Reservation group.</p>
  */
-export interface RemovePrefixListEntry {
+export interface CapacityReservationSpecification {
   /**
    * @public
-   * <p>The CIDR block.</p>
+   * <p>Indicates the instance's Capacity Reservation preferences. Possible preferences include:</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>open</code> - The instance can run in any <code>open</code> Capacity Reservation that has matching attributes
+   * 				(instance type, platform, Availability Zone).</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>none</code> - The instance avoids running in a Capacity Reservation even if one is available. The
+   * 					instance runs as an On-Demand Instance.</p>
+   *             </li>
+   *          </ul>
    */
-  Cidr: string | undefined;
+  CapacityReservationPreference?: CapacityReservationPreference;
+
+  /**
+   * @public
+   * <p>Information about the target Capacity Reservation or Capacity Reservation group.</p>
+   */
+  CapacityReservationTarget?: CapacityReservationTarget;
 }
 
 /**
  * @public
  */
-export interface ModifyManagedPrefixListRequest {
+export interface ModifyInstanceCapacityReservationAttributesRequest {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The ID of the instance to be modified.</p>
    */
-  DryRun?: boolean;
+  InstanceId: string | undefined;
 
   /**
    * @public
-   * <p>The ID of the prefix list.</p>
+   * <p>Information about the Capacity Reservation targeting option.</p>
    */
-  PrefixListId: string | undefined;
+  CapacityReservationSpecification: CapacityReservationSpecification | undefined;
 
   /**
    * @public
-   * <p>The current version of the prefix list.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  CurrentVersion?: number;
+  DryRun?: boolean;
+}
 
+/**
+ * @public
+ */
+export interface ModifyInstanceCapacityReservationAttributesResult {
   /**
    * @public
-   * <p>A name for the prefix list.</p>
+   * <p>Returns <code>true</code> if the request succeeds; otherwise, it returns an error.</p>
    */
-  PrefixListName?: string;
+  Return?: boolean;
+}
 
+/**
+ * @public
+ * <p>Describes the credit option for CPU usage of a burstable performance instance.</p>
+ */
+export interface InstanceCreditSpecificationRequest {
   /**
    * @public
-   * <p>One or more entries to add to the prefix list.</p>
+   * <p>The ID of the instance.</p>
    */
-  AddEntries?: AddPrefixListEntry[];
+  InstanceId: string | undefined;
 
   /**
    * @public
-   * <p>One or more entries to remove from the prefix list.</p>
-   */
-  RemoveEntries?: RemovePrefixListEntry[];
+   * <p>The credit option for CPU usage of the instance.</p>
+   *          <p>Valid values: <code>standard</code> | <code>unlimited</code>
+   *          </p>
+   *          <p>T3 instances with <code>host</code> tenancy do not support the <code>unlimited</code>
+   *             CPU credit option.</p>
+   */
+  CpuCredits?: string;
+}
 
+/**
+ * @public
+ */
+export interface ModifyInstanceCreditSpecificationRequest {
   /**
    * @public
-   * <p>The maximum number of entries for the prefix list. You cannot modify the entries
-   *             of a prefix list and modify the size of a prefix list at the same time.</p>
-   *          <p>If any of the resources that reference the prefix list cannot support the new
-   *             maximum size, the modify operation fails. Check the state message for the IDs of
-   *             the first ten resources that do not support the new maximum size.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  MaxEntries?: number;
+  DryRun?: boolean;
+
+  /**
+   * @public
+   * <p>A unique, case-sensitive token that you provide to ensure idempotency of your
+   *             modification request. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html">Ensuring
+   *                 Idempotency</a>.</p>
+   */
+  ClientToken?: string;
+
+  /**
+   * @public
+   * <p>Information about the credit option for CPU usage.</p>
+   */
+  InstanceCreditSpecifications: InstanceCreditSpecificationRequest[] | undefined;
 }
 
 /**
  * @public
+ * <p>Describes the burstable performance instance whose credit option for CPU usage was
+ *             successfully modified.</p>
  */
-export interface ModifyManagedPrefixListResult {
+export interface SuccessfulInstanceCreditSpecificationItem {
   /**
    * @public
-   * <p>Information about the prefix list.</p>
+   * <p>The ID of the instance.</p>
    */
-  PrefixList?: ManagedPrefixList;
+  InstanceId?: string;
 }
 
 /**
  * @public
- * <p>Describes an attachment change.</p>
+ * @enum
  */
-export interface NetworkInterfaceAttachmentChanges {
+export const UnsuccessfulInstanceCreditSpecificationErrorCode = {
+  INCORRECT_INSTANCE_STATE: "IncorrectInstanceState",
+  INSTANCE_CREDIT_SPECIFICATION_NOT_SUPPORTED: "InstanceCreditSpecification.NotSupported",
+  INSTANCE_NOT_FOUND: "InvalidInstanceID.NotFound",
+  INVALID_INSTANCE_ID: "InvalidInstanceID.Malformed",
+} as const;
+
+/**
+ * @public
+ */
+export type UnsuccessfulInstanceCreditSpecificationErrorCode =
+  (typeof UnsuccessfulInstanceCreditSpecificationErrorCode)[keyof typeof UnsuccessfulInstanceCreditSpecificationErrorCode];
+
+/**
+ * @public
+ * <p>Information about the error for the burstable performance instance whose credit option
+ *             for CPU usage was not modified.</p>
+ */
+export interface UnsuccessfulInstanceCreditSpecificationItemError {
   /**
    * @public
-   * <p>The ID of the network interface attachment.</p>
+   * <p>The error code.</p>
    */
-  AttachmentId?: string;
+  Code?: UnsuccessfulInstanceCreditSpecificationErrorCode;
 
   /**
    * @public
-   * <p>Indicates whether the network interface is deleted when the instance is terminated.</p>
+   * <p>The applicable error message.</p>
    */
-  DeleteOnTermination?: boolean;
+  Message?: string;
 }
 
 /**
  * @public
- * <p>Contains the parameters for ModifyNetworkInterfaceAttribute.</p>
+ * <p>Describes the burstable performance instance whose credit option for CPU usage was not
+ *             modified.</p>
  */
-export interface ModifyNetworkInterfaceAttributeRequest {
+export interface UnsuccessfulInstanceCreditSpecificationItem {
   /**
    * @public
-   * <p>Information about the interface attachment. If modifying the <code>delete on
-   * 				termination</code> attribute, you must specify the ID of the interface
-   * 			attachment.</p>
+   * <p>The ID of the instance.</p>
    */
-  Attachment?: NetworkInterfaceAttachmentChanges;
+  InstanceId?: string;
 
   /**
    * @public
-   * <p>A description for the network interface.</p>
+   * <p>The applicable error for the burstable performance instance whose credit option for
+   *             CPU usage was not modified.</p>
    */
-  Description?: AttributeValue;
+  Error?: UnsuccessfulInstanceCreditSpecificationItemError;
+}
 
+/**
+ * @public
+ */
+export interface ModifyInstanceCreditSpecificationResult {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *             and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *             Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>Information about the instances whose credit option for CPU usage was successfully
+   *             modified.</p>
    */
-  DryRun?: boolean;
+  SuccessfulInstanceCreditSpecifications?: SuccessfulInstanceCreditSpecificationItem[];
 
   /**
    * @public
-   * <p>Changes the security groups for the network interface. The new set of groups you specify replaces the current set. You must specify at least one group, even if it's just the default security group in the VPC. You must specify the ID of the security group, not the name.</p>
+   * <p>Information about the instances whose credit option for CPU usage was not
+   *             modified.</p>
    */
-  Groups?: string[];
+  UnsuccessfulInstanceCreditSpecifications?: UnsuccessfulInstanceCreditSpecificationItem[];
+}
 
+/**
+ * @public
+ */
+export interface ModifyInstanceEventStartTimeRequest {
   /**
    * @public
-   * <p>The ID of the network interface.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  NetworkInterfaceId: string | undefined;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>Enable or disable source/destination checks, which ensure that the instance
-   *             is either the source or the destination of any traffic that it receives.
-   *             If the value is <code>true</code>, source/destination checks are enabled;
-   *             otherwise, they are disabled. The default value is <code>true</code>.
-   *             You must disable source/destination checks if the instance runs services
-   *             such as network address translation, routing, or firewalls.</p>
+   * <p>The ID of the instance with the scheduled event.</p>
    */
-  SourceDestCheck?: AttributeBooleanValue;
+  InstanceId: string | undefined;
 
   /**
    * @public
-   * <p>Updates the ENA Express configuration for the network interface that’s attached to the
-   * 			instance.</p>
+   * <p>The ID of the event whose date and time you are modifying.</p>
    */
-  EnaSrdSpecification?: EnaSrdSpecification;
+  InstanceEventId: string | undefined;
 
   /**
    * @public
-   * <p>If you’re modifying a network interface in a dual-stack or IPv6-only subnet, you have
-   *             the option to assign a primary IPv6 IP address. A primary IPv6 address is an IPv6 GUA
-   *             address associated with an ENI that you have enabled to use a primary IPv6 address. Use
-   *             this option if the instance that this ENI will be attached to relies on its IPv6 address
-   *             not changing. Amazon Web Services will automatically assign an IPv6 address associated
-   *             with the ENI attached to your instance to be the primary IPv6 address. Once you enable
-   *             an IPv6 GUA address to be a primary IPv6, you cannot disable it. When you enable an IPv6
-   *             GUA address to be a primary IPv6, the first IPv6 GUA will be made the primary IPv6
-   *             address until the instance is terminated or the network interface is detached. If you
-   *             have multiple IPv6 addresses associated with an ENI attached to your instance and you
-   *             enable a primary IPv6 address, the first IPv6 GUA address associated with the ENI
-   *             becomes the primary IPv6 address.</p>
+   * <p>The new date and time when the event will take place.</p>
    */
-  EnablePrimaryIpv6?: boolean;
+  NotBefore: Date | undefined;
 }
 
 /**
  * @public
  */
-export interface ModifyPrivateDnsNameOptionsRequest {
+export interface ModifyInstanceEventStartTimeResult {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually
-   *             making the request, and provides an error response. If you have the required
-   *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
-   *                 <code>UnauthorizedOperation</code>.</p>
+   * <p>Information about the event.</p>
+   */
+  Event?: InstanceStatusEvent;
+}
+
+/**
+ * @public
+ */
+export interface ModifyInstanceEventWindowRequest {
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
 
   /**
    * @public
-   * <p>The ID of the instance.</p>
+   * <p>The name of the event window.</p>
    */
-  InstanceId: string | undefined;
+  Name?: string;
 
   /**
    * @public
-   * <p>The type of hostname for EC2 instances. For IPv4 only subnets, an instance DNS name
-   *             must be based on the instance IPv4 address. For IPv6 only subnets, an instance DNS name
-   *             must be based on the instance ID. For dual-stack subnets, you can specify whether DNS
-   *             names use the instance IPv4 address or the instance ID.</p>
+   * <p>The ID of the event window.</p>
    */
-  PrivateDnsHostnameType?: HostnameType;
+  InstanceEventWindowId: string | undefined;
 
   /**
    * @public
-   * <p>Indicates whether to respond to DNS queries for instance hostnames with DNS A
-   *             records.</p>
+   * <p>The time ranges of the event window.</p>
    */
-  EnableResourceNameDnsARecord?: boolean;
+  TimeRanges?: InstanceEventWindowTimeRangeRequest[];
 
   /**
    * @public
-   * <p>Indicates whether to respond to DNS queries for instance hostnames with DNS AAAA
-   *             records.</p>
+   * <p>The cron expression of the event window, for example, <code>* 0-4,20-23 * * 1,5</code>.</p>
+   *          <p>Constraints:</p>
+   *          <ul>
+   *             <li>
+   *                <p>Only hour and day of the week values are supported.</p>
+   *             </li>
+   *             <li>
+   *                <p>For day of the week values, you can specify either integers <code>0</code> through
+   *                   <code>6</code>, or alternative single values <code>SUN</code> through
+   *                   <code>SAT</code>.</p>
+   *             </li>
+   *             <li>
+   *                <p>The minute, month, and year must be specified by <code>*</code>.</p>
+   *             </li>
+   *             <li>
+   *                <p>The hour value must be one or a multiple range, for example, <code>0-4</code> or
+   *                   <code>0-4,20-23</code>.</p>
+   *             </li>
+   *             <li>
+   *                <p>Each hour range must be >= 2 hours, for example, <code>0-2</code> or
+   *                   <code>20-23</code>.</p>
+   *             </li>
+   *             <li>
+   *                <p>The event window must be >= 4 hours. The combined total time ranges in the event
+   *                window must be >= 4 hours.</p>
+   *             </li>
+   *          </ul>
+   *          <p>For more information about cron expressions, see <a href="https://en.wikipedia.org/wiki/Cron">cron</a> on the <i>Wikipedia
+   *             website</i>.</p>
    */
-  EnableResourceNameDnsAAAARecord?: boolean;
+  CronExpression?: string;
 }
 
 /**
  * @public
  */
-export interface ModifyPrivateDnsNameOptionsResult {
+export interface ModifyInstanceEventWindowResult {
   /**
    * @public
-   * <p>Returns <code>true</code> if the request succeeds; otherwise, it returns an
-   *             error.</p>
+   * <p>Information about the event window.</p>
    */
-  Return?: boolean;
+  InstanceEventWindow?: InstanceEventWindow;
 }
 
 /**
  * @public
- * <p>Contains the parameters for ModifyReservedInstances.</p>
  */
-export interface ModifyReservedInstancesRequest {
+export interface ModifyInstanceMaintenanceOptionsRequest {
   /**
    * @public
-   * <p>The IDs of the Reserved Instances to modify.</p>
+   * <p>The ID of the instance.</p>
    */
-  ReservedInstancesIds: string[] | undefined;
+  InstanceId: string | undefined;
 
   /**
    * @public
-   * <p>A unique, case-sensitive token you provide to ensure idempotency of your modification request. For more information, see
-   *    		<a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html">Ensuring Idempotency</a>.</p>
+   * <p>Disables the automatic recovery behavior of your instance or sets it to
+   *             default.</p>
    */
-  ClientToken?: string;
+  AutoRecovery?: InstanceAutoRecoveryState;
 
   /**
    * @public
-   * <p>The configuration settings for the Reserved Instances to modify.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually
+   *             making the request, and provides an error response. If you have the required
+   *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
+   *                 <code>UnauthorizedOperation</code>.</p>
    */
-  TargetConfigurations: ReservedInstancesConfiguration[] | undefined;
+  DryRun?: boolean;
 }
 
 /**
  * @public
- * <p>Contains the output of ModifyReservedInstances.</p>
  */
-export interface ModifyReservedInstancesResult {
+export interface ModifyInstanceMaintenanceOptionsResult {
   /**
    * @public
-   * <p>The ID for the modification.</p>
+   * <p>The ID of the instance.</p>
    */
-  ReservedInstancesModificationId?: string;
-}
+  InstanceId?: string;
 
-/**
- * @public
- * <p>Describes a security group rule.</p>
- *          <p>You must specify exactly one of the following parameters, based on the rule type:</p>
- *          <ul>
- *             <li>
- *                <p>CidrIpv4</p>
- *             </li>
- *             <li>
- *                <p>CidrIpv6</p>
- *             </li>
- *             <li>
- *                <p>PrefixListId</p>
- *             </li>
- *             <li>
- *                <p>ReferencedGroupId</p>
- *             </li>
- *          </ul>
- *          <p>When you modify a rule, you cannot change the rule type. For example, if the rule
- *             uses an IPv4 address range, you must use <code>CidrIpv4</code> to specify a new IPv4
- *             address range.</p>
- */
-export interface SecurityGroupRuleRequest {
   /**
    * @public
-   * <p>The IP protocol name (<code>tcp</code>, <code>udp</code>, <code>icmp</code>,
-   *                 <code>icmpv6</code>) or number (see <a href="http://www.iana.org/assignments/protocol-numbers/protocol-numbers.xhtml">Protocol Numbers</a>). </p>
-   *          <p>Use <code>-1</code> to specify all protocols.</p>
+   * <p>Provides information on the current automatic recovery behavior of your
+   *             instance.</p>
    */
-  IpProtocol?: string;
+  AutoRecovery?: InstanceAutoRecoveryState;
+}
 
+/**
+ * @public
+ */
+export interface ModifyInstanceMetadataOptionsRequest {
   /**
    * @public
-   * <p>If the protocol is TCP or UDP, this is the start of the port range.
-   *             If the protocol is ICMP or ICMPv6, this is the type number. A value of -1 indicates all ICMP/ICMPv6 types.
-   *             If you specify all ICMP/ICMPv6 types, you must specify all ICMP/ICMPv6 codes.</p>
+   * <p>The ID of the instance.</p>
    */
-  FromPort?: number;
+  InstanceId: string | undefined;
 
   /**
    * @public
-   * <p>If the protocol is TCP or UDP, this is the end of the port range.
-   *             If the protocol is ICMP or ICMPv6, this is the code. A value of -1 indicates all ICMP/ICMPv6 codes.
-   *             If you specify all ICMP/ICMPv6 types, you must specify all ICMP/ICMPv6 codes.</p>
+   * <p>IMDSv2 uses token-backed sessions. Set the use of HTTP tokens to <code>optional</code>
+   *             (in other words, set the use of IMDSv2 to <code>optional</code>) or
+   *                 <code>required</code> (in other words, set the use of IMDSv2 to
+   *                 <code>required</code>).</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>optional</code> - When IMDSv2 is optional, you can choose to retrieve instance metadata with or without
+   *             a session token in your request. If you retrieve the IAM role credentials
+   *             without a token, the IMDSv1 role credentials are returned. If you retrieve the IAM role credentials
+   *             using a valid session token, the IMDSv2 role credentials are returned.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>required</code> - When IMDSv2 is required, you must send a session token
+   *             with any instance metadata retrieval requests. In this state, retrieving the IAM role
+   *             credentials always returns IMDSv2 credentials; IMDSv1 credentials are not available.</p>
+   *             </li>
+   *          </ul>
+   *          <p>Default: <code>optional</code>
+   *          </p>
    */
-  ToPort?: number;
+  HttpTokens?: HttpTokensState;
 
   /**
    * @public
-   * <p>The IPv4 CIDR range. To specify a single IPv4 address, use the /32 prefix length. </p>
+   * <p>The desired HTTP PUT response hop limit for instance metadata requests. The larger the
+   *             number, the further instance metadata requests can travel. If no parameter is specified,
+   *             the existing state is maintained.</p>
+   *          <p>Possible values: Integers from 1 to 64</p>
    */
-  CidrIpv4?: string;
+  HttpPutResponseHopLimit?: number;
 
   /**
    * @public
-   * <p>The IPv6 CIDR range. To specify a single IPv6 address, use the /128 prefix length.</p>
+   * <p>Enables or disables the HTTP metadata endpoint on your instances. If this parameter is
+   *             not specified, the existing state is maintained.</p>
+   *          <p>If you specify a value of <code>disabled</code>, you cannot access your instance
+   *             metadata.</p>
    */
-  CidrIpv6?: string;
+  HttpEndpoint?: InstanceMetadataEndpointState;
 
   /**
    * @public
-   * <p>The ID of the prefix list.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually
+   *             making the request, and provides an error response. If you have the required
+   *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
+   *                 <code>UnauthorizedOperation</code>.</p>
    */
-  PrefixListId?: string;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The ID of the security group that is referenced in the security group rule.</p>
+   * <p>Enables or disables the IPv6 endpoint for the instance metadata service.
+   *             Applies only if you enabled the HTTP metadata endpoint.</p>
    */
-  ReferencedGroupId?: string;
+  HttpProtocolIpv6?: InstanceMetadataProtocolState;
 
   /**
    * @public
-   * <p>The description of the security group rule.</p>
+   * <p>Set to <code>enabled</code> to allow access to instance tags from the instance
+   *             metadata. Set to <code>disabled</code> to turn off access to instance tags from the
+   *             instance metadata. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Using_Tags.html#work-with-tags-in-IMDS">Work with
+   *                 instance tags using the instance metadata</a>.</p>
+   *          <p>Default: <code>disabled</code>
+   *          </p>
    */
-  Description?: string;
+  InstanceMetadataTags?: InstanceMetadataTagsState;
 }
 
 /**
  * @public
- * <p>Describes an update to a security group rule.</p>
  */
-export interface SecurityGroupRuleUpdate {
+export interface ModifyInstanceMetadataOptionsResult {
   /**
    * @public
-   * <p>The ID of the security group rule.</p>
+   * <p>The ID of the instance.</p>
    */
-  SecurityGroupRuleId: string | undefined;
+  InstanceId?: string;
 
   /**
    * @public
-   * <p>Information about the security group rule.</p>
+   * <p>The metadata options for the instance.</p>
    */
-  SecurityGroupRule?: SecurityGroupRuleRequest;
+  InstanceMetadataOptions?: InstanceMetadataOptionsResponse;
 }
 
 /**
  * @public
+ * @enum
  */
-export interface ModifySecurityGroupRulesRequest {
-  /**
-   * @public
-   * <p>The ID of the security group.</p>
-   */
-  GroupId: string | undefined;
-
-  /**
-   * @public
-   * <p>Information about the security group properties to update.</p>
-   */
-  SecurityGroupRules: SecurityGroupRuleUpdate[] | undefined;
-
-  /**
-   * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-   */
-  DryRun?: boolean;
-}
+export const HostTenancy = {
+  dedicated: "dedicated",
+  host: "host",
+} as const;
 
 /**
  * @public
  */
-export interface ModifySecurityGroupRulesResult {
-  /**
-   * @public
-   * <p>Returns <code>true</code> if the request succeeds; otherwise, returns an error.</p>
-   */
-  Return?: boolean;
-}
+export type HostTenancy = (typeof HostTenancy)[keyof typeof HostTenancy];
 
 /**
  * @public
- * <p>Describes modifications to the list of create volume permissions for a volume.</p>
  */
-export interface CreateVolumePermissionModifications {
-  /**
-   * @public
-   * <p>Adds the specified Amazon Web Services account ID or group to the list.</p>
-   */
-  Add?: CreateVolumePermission[];
-
+export interface ModifyInstancePlacementRequest {
   /**
    * @public
-   * <p>Removes the specified Amazon Web Services account ID or group from the list.</p>
+   * <p>The affinity setting for the instance.</p>
    */
-  Remove?: CreateVolumePermission[];
-}
+  Affinity?: Affinity;
 
-/**
- * @public
- */
-export interface ModifySnapshotAttributeRequest {
   /**
    * @public
-   * <p>The snapshot attribute to modify. Only volume creation permissions can be modified.</p>
+   * <p>The name of the placement group in which to place the instance. For spread placement
+   *             groups, the instance must have a tenancy of <code>default</code>. For cluster and
+   *             partition placement groups, the instance must have a tenancy of <code>default</code> or
+   *                 <code>dedicated</code>.</p>
+   *          <p>To remove an instance from a placement group, specify an empty string ("").</p>
    */
-  Attribute?: SnapshotAttributeName;
+  GroupName?: string;
 
   /**
    * @public
-   * <p>A JSON representation of the snapshot attribute modification.</p>
+   * <p>The ID of the Dedicated Host with which to associate the instance.</p>
    */
-  CreateVolumePermission?: CreateVolumePermissionModifications;
+  HostId?: string;
 
   /**
    * @public
-   * <p>The group to modify for the snapshot.</p>
+   * <p>The ID of the instance that you are modifying.</p>
    */
-  GroupNames?: string[];
+  InstanceId: string | undefined;
 
   /**
    * @public
-   * <p>The type of operation to perform to the attribute.</p>
+   * <p>The tenancy for the instance.</p>
+   *          <note>
+   *             <p>For T3 instances, you must launch the instance on a Dedicated Host to use a
+   *                 tenancy of <code>host</code>. You can't change the tenancy from
+   *                 <code>host</code> to <code>dedicated</code> or <code>default</code>.
+   *                 Attempting to make one of these unsupported tenancy changes results in an
+   *                 <code>InvalidRequest</code> error code.</p>
+   *          </note>
    */
-  OperationType?: OperationType;
+  Tenancy?: HostTenancy;
 
   /**
    * @public
-   * <p>The ID of the snapshot.</p>
+   * <p>The number of the partition in which to place the instance. Valid only if the
+   *             placement group strategy is set to <code>partition</code>.</p>
    */
-  SnapshotId: string | undefined;
+  PartitionNumber?: number;
 
   /**
    * @public
-   * <p>The account ID to modify for the snapshot.</p>
+   * <p>The ARN of the host resource group in which to place the instance. The instance must
+   *             have a tenancy of <code>host</code> to specify this parameter.</p>
    */
-  UserIds?: string[];
+  HostResourceGroupArn?: string;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The Group Id of a placement group. You must specify the Placement Group <b>Group Id</b> to launch an instance in a shared placement
+   *             group.</p>
    */
-  DryRun?: boolean;
+  GroupId?: string;
 }
 
 /**
  * @public
- * @enum
  */
-export const TargetStorageTier = {
-  archive: "archive",
-} as const;
+export interface ModifyInstancePlacementResult {
+  /**
+   * @public
+   * <p>Is <code>true</code> if the request succeeds, and an error otherwise.</p>
+   */
+  Return?: boolean;
+}
 
 /**
  * @public
+ * <p>Remove an operating Region from an IPAM. Operating Regions are Amazon Web Services Regions where the IPAM is allowed to manage IP address CIDRs. IPAM only discovers and monitors resources in the Amazon Web Services Regions you select as operating Regions.</p>
+ *          <p>For more information about operating Regions, see <a href="https://docs.aws.amazon.com/vpc/latest/ipam/create-ipam.html">Create an IPAM</a> in the <i>Amazon VPC IPAM User Guide</i>
+ *          </p>
  */
-export type TargetStorageTier = (typeof TargetStorageTier)[keyof typeof TargetStorageTier];
+export interface RemoveIpamOperatingRegion {
+  /**
+   * @public
+   * <p>The name of the operating Region you want to remove.</p>
+   */
+  RegionName?: string;
+}
 
 /**
  * @public
  */
-export interface ModifySnapshotTierRequest {
+export interface ModifyIpamRequest {
   /**
    * @public
-   * <p>The ID of the snapshot.</p>
+   * <p>A check for whether you have the required permissions for the action without actually making the request
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  SnapshotId: string | undefined;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The name of the storage tier. You must specify <code>archive</code>.</p>
+   * <p>The ID of the IPAM you want to modify.</p>
    */
-  StorageTier?: TargetStorageTier;
+  IpamId: string | undefined;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The description of the IPAM you want to modify.</p>
    */
-  DryRun?: boolean;
-}
+  Description?: string;
 
-/**
- * @public
- */
-export interface ModifySnapshotTierResult {
   /**
    * @public
-   * <p>The ID of the snapshot.</p>
+   * <p>Choose the operating Regions for the IPAM. Operating Regions are Amazon Web Services Regions where the IPAM is allowed to manage IP address CIDRs. IPAM only discovers and monitors resources in the Amazon Web Services Regions you select as operating Regions.</p>
+   *          <p>For more information about operating Regions, see <a href="https://docs.aws.amazon.com/vpc/latest/ipam/create-ipam.html">Create an IPAM</a> in the <i>Amazon VPC IPAM User Guide</i>.</p>
    */
-  SnapshotId?: string;
+  AddOperatingRegions?: AddIpamOperatingRegion[];
 
   /**
    * @public
-   * <p>The date and time when the archive process was started.</p>
+   * <p>The operating Regions to remove.</p>
    */
-  TieringStartTime?: Date;
+  RemoveOperatingRegions?: RemoveIpamOperatingRegion[];
+
+  /**
+   * @public
+   * <p>IPAM is offered in a Free Tier and an Advanced Tier. For more information about the features available in each tier and the costs associated with the tiers, see <a href="http://aws.amazon.com/vpc/pricing/">Amazon VPC pricing > IPAM tab</a>.</p>
+   */
+  Tier?: IpamTier;
 }
 
 /**
  * @public
- * <p>Contains the parameters for ModifySpotFleetRequest.</p>
  */
-export interface ModifySpotFleetRequestRequest {
+export interface ModifyIpamResult {
   /**
    * @public
-   * <p>Indicates whether running instances should be terminated if the target capacity
-   *             of the Spot Fleet request is decreased below the current size of the Spot Fleet.</p>
-   *          <p>Supported only for fleets of type <code>maintain</code>.</p>
+   * <p>The results of the modification.</p>
    */
-  ExcessCapacityTerminationPolicy?: ExcessCapacityTerminationPolicy;
+  Ipam?: Ipam;
+}
 
+/**
+ * @public
+ */
+export interface ModifyIpamPoolRequest {
   /**
    * @public
-   * <p>The launch template and overrides. You can only use this parameter if you specified a
-   *             launch template (<code>LaunchTemplateConfigs</code>) in your Spot Fleet request. If you
-   *             specified <code>LaunchSpecifications</code> in your Spot Fleet request, then omit this
-   *             parameter.</p>
+   * <p>A check for whether you have the required permissions for the action without actually making the request
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  LaunchTemplateConfigs?: LaunchTemplateConfig[];
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The ID of the Spot Fleet request.</p>
+   * <p>The ID of the IPAM pool you want to modify.</p>
    */
-  SpotFleetRequestId: string | undefined;
+  IpamPoolId: string | undefined;
 
   /**
    * @public
-   * <p>The size of the fleet.</p>
+   * <p>The description of the IPAM pool you want to modify.</p>
    */
-  TargetCapacity?: number;
+  Description?: string;
 
   /**
    * @public
-   * <p>The number of On-Demand Instances in the fleet.</p>
+   * <p>If true, IPAM will continuously look for resources within the CIDR range of this pool
+   *          and automatically import them as allocations into your IPAM. The CIDRs that will be allocated for
+   *          these resources must not already be allocated to other resources in order for the import to succeed. IPAM will import
+   *          a CIDR regardless of its compliance with the pool's allocation rules, so a resource might be imported and subsequently
+   *          marked as noncompliant. If IPAM discovers multiple CIDRs that overlap, IPAM will import the largest CIDR only. If IPAM
+   *          discovers multiple CIDRs with matching CIDRs, IPAM will randomly import one of them only.
+   *       </p>
+   *          <p>A locale must be set on the pool for this feature to work.</p>
    */
-  OnDemandTargetCapacity?: number;
+  AutoImport?: boolean;
 
   /**
    * @public
-   * <p>Reserved.</p>
+   * <p>The minimum netmask length required for CIDR allocations in this IPAM pool to be compliant. Possible
+   *          netmask lengths for IPv4 addresses are 0 - 32. Possible netmask lengths for IPv6 addresses are  0 - 128. The minimum netmask
+   *          length must be less than the maximum netmask length.</p>
    */
-  Context?: string;
-}
+  AllocationMinNetmaskLength?: number;
 
-/**
- * @public
- * <p>Contains the output of ModifySpotFleetRequest.</p>
- */
-export interface ModifySpotFleetRequestResponse {
   /**
    * @public
-   * <p>If the request succeeds, the response returns <code>true</code>. If the request fails,
-   *             no response is returned, and instead an error message is returned.</p>
+   * <p>The maximum netmask length possible for CIDR allocations in this IPAM pool to be compliant. Possible
+   *          netmask lengths for IPv4 addresses are 0 - 32. Possible netmask lengths for IPv6 addresses are  0 - 128.The maximum netmask
+   *          length must be greater than the minimum netmask length.</p>
    */
-  Return?: boolean;
-}
+  AllocationMaxNetmaskLength?: number;
 
-/**
- * @public
- */
-export interface ModifySubnetAttributeRequest {
   /**
    * @public
-   * <p>Specify <code>true</code> to indicate that network interfaces created in the
-   *             specified subnet should be assigned an IPv6 address. This includes a network interface
-   *             that's created when launching an instance into the subnet (the instance therefore
-   *             receives an IPv6 address). </p>
-   *          <p>If you enable the IPv6 addressing feature for your subnet, your network interface
-   *             or instance only receives an IPv6 address if it's created using version
-   *                 <code>2016-11-15</code> or later of the Amazon EC2 API.</p>
+   * <p>The default netmask length for allocations added to this pool. If, for example, the CIDR assigned to this pool is 10.0.0.0/8 and you enter 16 here, new allocations will default to 10.0.0.0/16.</p>
    */
-  AssignIpv6AddressOnCreation?: AttributeBooleanValue;
+  AllocationDefaultNetmaskLength?: number;
 
   /**
    * @public
-   * <p>Specify <code>true</code> to indicate that network interfaces attached to instances created in the
-   *             specified subnet should be assigned a public IPv4 address.</p>
+   * <p>Clear the default netmask length allocation rule for this pool.</p>
    */
-  MapPublicIpOnLaunch?: AttributeBooleanValue;
+  ClearAllocationDefaultNetmaskLength?: boolean;
 
   /**
    * @public
-   * <p>The ID of the subnet.</p>
+   * <p>Add tag allocation rules to a pool. For more information about allocation rules, see <a href="https://docs.aws.amazon.com/vpc/latest/ipam/create-top-ipam.html">Create a top-level pool</a> in the <i>Amazon VPC IPAM User Guide</i>.</p>
    */
-  SubnetId: string | undefined;
+  AddAllocationResourceTags?: RequestIpamResourceTag[];
 
   /**
    * @public
-   * <p>Specify <code>true</code> to indicate that network interfaces  attached to instances created in the
-   *             specified subnet should be assigned a customer-owned IPv4 address.</p>
-   *          <p>When this value is <code>true</code>, you must specify the customer-owned IP pool using <code>CustomerOwnedIpv4Pool</code>.</p>
+   * <p>Remove tag allocation rules from a pool.</p>
    */
-  MapCustomerOwnedIpOnLaunch?: AttributeBooleanValue;
+  RemoveAllocationResourceTags?: RequestIpamResourceTag[];
+}
 
+/**
+ * @public
+ */
+export interface ModifyIpamPoolResult {
   /**
    * @public
-   * <p>The customer-owned IPv4 address pool associated with the subnet.</p>
-   *          <p>You must set this value when you specify <code>true</code> for <code>MapCustomerOwnedIpOnLaunch</code>.</p>
+   * <p>The results of the modification.</p>
    */
-  CustomerOwnedIpv4Pool?: string;
+  IpamPool?: IpamPool;
+}
 
+/**
+ * @public
+ */
+export interface ModifyIpamResourceCidrRequest {
   /**
    * @public
-   * <p>Indicates whether DNS queries made to the Amazon-provided DNS Resolver in this subnet
-   *             should return synthetic IPv6 addresses for IPv4-only destinations.</p>
+   * <p>A check for whether you have the required permissions for the action without actually making the request
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  EnableDns64?: AttributeBooleanValue;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The type of hostname to assign to instances in the subnet at launch. For IPv4-only and dual-stack (IPv4 and IPv6) subnets, an
-   *             instance DNS name can be based on the instance IPv4 address (ip-name) or the instance ID (resource-name). For IPv6 only subnets, an instance
-   *             DNS name must be based on the instance ID (resource-name).</p>
+   * <p>The ID of the resource you want to modify.</p>
    */
-  PrivateDnsHostnameTypeOnLaunch?: HostnameType;
+  ResourceId: string | undefined;
 
   /**
    * @public
-   * <p>Indicates whether to respond to DNS queries for instance hostnames with DNS A records.</p>
+   * <p>The CIDR of the resource you want to modify.</p>
    */
-  EnableResourceNameDnsARecordOnLaunch?: AttributeBooleanValue;
+  ResourceCidr: string | undefined;
 
   /**
    * @public
-   * <p>Indicates whether to respond to DNS queries for instance hostnames with DNS AAAA records.</p>
+   * <p>The Amazon Web Services Region of the resource you want to modify.</p>
    */
-  EnableResourceNameDnsAAAARecordOnLaunch?: AttributeBooleanValue;
+  ResourceRegion: string | undefined;
 
   /**
    * @public
-   * <p>
-   *             Indicates the device position for local network interfaces in this subnet. For example,
-   *             <code>1</code> indicates local network interfaces in this subnet are the secondary
-   *             network interface (eth1). A local network interface cannot be the primary network
-   *             interface (eth0).
-   *         </p>
+   * <p>The ID of the current scope that the resource CIDR is in.</p>
    */
-  EnableLniAtDeviceIndex?: number;
+  CurrentIpamScopeId: string | undefined;
 
   /**
    * @public
-   * <p>
-   *             Specify <code>true</code> to indicate that local network interfaces at the current
-   *             position should be disabled.
-   *         </p>
+   * <p>The ID of the scope you want to transfer the resource CIDR to.</p>
    */
-  DisableLniAtDeviceIndex?: AttributeBooleanValue;
+  DestinationIpamScopeId?: string;
+
+  /**
+   * @public
+   * <p>Determines if the resource is monitored by IPAM. If a resource is monitored, the resource is discovered by IPAM and you can view details about the resource’s CIDR.</p>
+   */
+  Monitored: boolean | undefined;
 }
 
 /**
  * @public
  */
-export interface ModifyTrafficMirrorFilterNetworkServicesRequest {
+export interface ModifyIpamResourceCidrResult {
   /**
    * @public
-   * <p>The ID of the Traffic Mirror filter.</p>
+   * <p>The CIDR of the resource.</p>
    */
-  TrafficMirrorFilterId: string | undefined;
+  IpamResourceCidr?: IpamResourceCidr;
+}
 
+/**
+ * @public
+ */
+export interface ModifyIpamResourceDiscoveryRequest {
   /**
    * @public
-   * <p>The network service, for example Amazon DNS, that you want to mirror.</p>
+   * <p>A check for whether you have the required permissions for the action without actually making the request
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  AddNetworkServices?: TrafficMirrorNetworkService[];
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The network service, for example Amazon DNS, that you no longer want to mirror.</p>
+   * <p>A resource discovery ID.</p>
    */
-  RemoveNetworkServices?: TrafficMirrorNetworkService[];
+  IpamResourceDiscoveryId: string | undefined;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>A resource discovery description.</p>
    */
-  DryRun?: boolean;
-}
+  Description?: string;
 
-/**
- * @public
- */
-export interface ModifyTrafficMirrorFilterNetworkServicesResult {
   /**
    * @public
-   * <p>The Traffic Mirror filter that the network service is associated with.</p>
+   * <p>Add operating Regions to the resource discovery. Operating Regions are Amazon Web Services Regions where the IPAM is allowed to manage IP address CIDRs. IPAM only discovers and monitors resources in the Amazon Web Services Regions you select as operating Regions.</p>
    */
-  TrafficMirrorFilter?: TrafficMirrorFilter;
-}
+  AddOperatingRegions?: AddIpamOperatingRegion[];
 
-/**
- * @public
- * @enum
- */
-export const TrafficMirrorFilterRuleField = {
-  description: "description",
-  destination_port_range: "destination-port-range",
-  protocol: "protocol",
-  source_port_range: "source-port-range",
-} as const;
+  /**
+   * @public
+   * <p>Remove operating Regions.</p>
+   */
+  RemoveOperatingRegions?: RemoveIpamOperatingRegion[];
+}
 
 /**
  * @public
  */
-export type TrafficMirrorFilterRuleField =
-  (typeof TrafficMirrorFilterRuleField)[keyof typeof TrafficMirrorFilterRuleField];
+export interface ModifyIpamResourceDiscoveryResult {
+  /**
+   * @public
+   * <p>A resource discovery.</p>
+   */
+  IpamResourceDiscovery?: IpamResourceDiscovery;
+}
 
 /**
  * @public
  */
-export interface ModifyTrafficMirrorFilterRuleRequest {
+export interface ModifyIpamScopeRequest {
   /**
    * @public
-   * <p>The ID of the Traffic Mirror rule.</p>
+   * <p>A check for whether you have the required permissions for the action without actually making the request
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  TrafficMirrorFilterRuleId: string | undefined;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The type of traffic to assign to the rule.</p>
+   * <p>The ID of the scope you want to modify.</p>
    */
-  TrafficDirection?: TrafficDirection;
+  IpamScopeId: string | undefined;
 
   /**
    * @public
-   * <p>The number of the Traffic Mirror rule. This number must be unique for each Traffic Mirror rule in a given
-   *          direction. The rules are processed in ascending order by rule number.</p>
+   * <p>The description of the scope you want to modify.</p>
    */
-  RuleNumber?: number;
+  Description?: string;
+}
 
+/**
+ * @public
+ */
+export interface ModifyIpamScopeResult {
   /**
    * @public
-   * <p>The action to assign to the rule.</p>
+   * <p>The results of the modification.</p>
    */
-  RuleAction?: TrafficMirrorRuleAction;
+  IpamScope?: IpamScope;
+}
 
+/**
+ * @public
+ */
+export interface ModifyLaunchTemplateRequest {
   /**
    * @public
-   * <p>The destination ports that are associated with the Traffic Mirror rule.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually
+   *             making the request, and provides an error response. If you have the required
+   *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
+   *                 <code>UnauthorizedOperation</code>.</p>
    */
-  DestinationPortRange?: TrafficMirrorPortRangeRequest;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The port range to assign to the Traffic Mirror rule.</p>
+   * <p>Unique, case-sensitive identifier you provide to ensure the idempotency of the
+   *             request. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html">Ensuring
+   *                 idempotency</a>.</p>
+   *          <p>Constraint: Maximum 128 ASCII characters.</p>
    */
-  SourcePortRange?: TrafficMirrorPortRangeRequest;
+  ClientToken?: string;
 
   /**
    * @public
-   * <p>The protocol, for example TCP, to assign to the Traffic Mirror rule.</p>
+   * <p>The ID of the launch template.</p>
+   *          <p>You must specify either the <code>LaunchTemplateId</code> or the
+   *                 <code>LaunchTemplateName</code>, but not both.</p>
    */
-  Protocol?: number;
+  LaunchTemplateId?: string;
 
   /**
    * @public
-   * <p>The destination CIDR block to assign to the Traffic Mirror rule.</p>
+   * <p>The name of the launch template.</p>
+   *          <p>You must specify either the <code>LaunchTemplateName</code> or the
+   *                 <code>LaunchTemplateId</code>, but not both.</p>
+   */
+  LaunchTemplateName?: string;
+
+  /**
+   * @public
+   * <p>The version number of the launch template to set as the default version.</p>
+   */
+  DefaultVersion?: string;
+}
+
+/**
+ * @public
+ */
+export interface ModifyLaunchTemplateResult {
+  /**
+   * @public
+   * <p>Information about the launch template.</p>
+   */
+  LaunchTemplate?: LaunchTemplate;
+}
+
+/**
+ * @public
+ */
+export interface ModifyLocalGatewayRouteRequest {
+  /**
+   * @public
+   * <p>The CIDR block used for destination matches. The value that you provide must match the CIDR of an existing route in the table.</p>
    */
   DestinationCidrBlock?: string;
 
   /**
    * @public
-   * <p>The source CIDR block to assign to the Traffic Mirror rule.</p>
+   * <p>The ID of the local gateway route table.</p>
    */
-  SourceCidrBlock?: string;
+  LocalGatewayRouteTableId: string | undefined;
 
   /**
    * @public
-   * <p>The description to assign to the Traffic Mirror rule.</p>
+   * <p>
+   *          The ID of the virtual interface group.
+   *       </p>
    */
-  Description?: string;
+  LocalGatewayVirtualInterfaceGroupId?: string;
 
   /**
    * @public
-   * <p>The properties that you want to remove from the Traffic Mirror filter rule.</p>
-   *          <p>When you remove a property from a Traffic Mirror filter rule, the property is set to the default.</p>
+   * <p>The ID of the network interface.</p>
    */
-  RemoveFields?: TrafficMirrorFilterRuleField[];
+  NetworkInterfaceId?: string;
 
   /**
    * @public
@@ -5542,424 +5547,484 @@ export interface ModifyTrafficMirrorFilterRuleRequest {
    *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
-}
 
-/**
- * @public
- */
-export interface ModifyTrafficMirrorFilterRuleResult {
   /**
    * @public
-   * <p>Modifies a Traffic Mirror rule.</p>
+   * <p>
+   *          The ID of the prefix list. Use a prefix list in place of <code>DestinationCidrBlock</code>. You
+   *          cannot use <code>DestinationPrefixListId</code> and <code>DestinationCidrBlock</code> in the same request.
+   *       </p>
    */
-  TrafficMirrorFilterRule?: TrafficMirrorFilterRule;
+  DestinationPrefixListId?: string;
 }
 
-/**
- * @public
- * @enum
- */
-export const TrafficMirrorSessionField = {
-  description: "description",
-  packet_length: "packet-length",
-  virtual_network_id: "virtual-network-id",
-} as const;
-
-/**
- * @public
- */
-export type TrafficMirrorSessionField = (typeof TrafficMirrorSessionField)[keyof typeof TrafficMirrorSessionField];
-
 /**
  * @public
  */
-export interface ModifyTrafficMirrorSessionRequest {
+export interface ModifyLocalGatewayRouteResult {
   /**
    * @public
-   * <p>The ID of the Traffic Mirror session.</p>
+   * <p>Information about the local gateway route table.</p>
    */
-  TrafficMirrorSessionId: string | undefined;
+  Route?: LocalGatewayRoute;
+}
 
+/**
+ * @public
+ * <p>An entry for a prefix list.</p>
+ */
+export interface RemovePrefixListEntry {
   /**
    * @public
-   * <p>The Traffic Mirror target. The target must be in the same VPC as the source, or have a VPC peering connection with the source.</p>
+   * <p>The CIDR block.</p>
    */
-  TrafficMirrorTargetId?: string;
+  Cidr: string | undefined;
+}
 
+/**
+ * @public
+ */
+export interface ModifyManagedPrefixListRequest {
   /**
    * @public
-   * <p>The ID of the Traffic Mirror filter.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  TrafficMirrorFilterId?: string;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The number of bytes in each packet to mirror. These are bytes after the VXLAN header. To mirror a subset, set this to the length (in bytes) to mirror. For example, if you set this value to 100, then the first 100 bytes that meet the filter criteria are copied to the target. Do not specify this parameter when you want to mirror the entire packet.</p>
-   *          <p>For sessions with Network Load Balancer (NLB) traffic mirror targets, the default <code>PacketLength</code> will be set to 8500. Valid values are 1-8500. Setting a <code>PacketLength</code> greater than 8500 will result in an error response.</p>
+   * <p>The ID of the prefix list.</p>
    */
-  PacketLength?: number;
+  PrefixListId: string | undefined;
 
   /**
    * @public
-   * <p>The session number determines the order in which sessions are evaluated when an interface is used by multiple sessions. The first session with a matching filter is the one that mirrors the packets.</p>
-   *          <p>Valid values are 1-32766.</p>
+   * <p>The current version of the prefix list.</p>
    */
-  SessionNumber?: number;
+  CurrentVersion?: number;
 
   /**
    * @public
-   * <p>The virtual network ID of the Traffic Mirror session.</p>
+   * <p>A name for the prefix list.</p>
    */
-  VirtualNetworkId?: number;
+  PrefixListName?: string;
 
   /**
    * @public
-   * <p>The description to assign to the Traffic Mirror session.</p>
+   * <p>One or more entries to add to the prefix list.</p>
    */
-  Description?: string;
+  AddEntries?: AddPrefixListEntry[];
 
   /**
    * @public
-   * <p>The properties that you want to remove from the Traffic Mirror session.</p>
-   *          <p>When you remove a property from a Traffic Mirror session, the property is set to the default.</p>
+   * <p>One or more entries to remove from the prefix list.</p>
    */
-  RemoveFields?: TrafficMirrorSessionField[];
+  RemoveEntries?: RemovePrefixListEntry[];
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The maximum number of entries for the prefix list. You cannot modify the entries
+   *             of a prefix list and modify the size of a prefix list at the same time.</p>
+   *          <p>If any of the resources that reference the prefix list cannot support the new
+   *             maximum size, the modify operation fails. Check the state message for the IDs of
+   *             the first ten resources that do not support the new maximum size.</p>
    */
-  DryRun?: boolean;
+  MaxEntries?: number;
 }
 
 /**
  * @public
  */
-export interface ModifyTrafficMirrorSessionResult {
+export interface ModifyManagedPrefixListResult {
   /**
    * @public
-   * <p>Information about the Traffic Mirror session.</p>
+   * <p>Information about the prefix list.</p>
    */
-  TrafficMirrorSession?: TrafficMirrorSession;
+  PrefixList?: ManagedPrefixList;
 }
 
 /**
  * @public
- * <p>The transit gateway options.</p>
+ * <p>Describes an attachment change.</p>
  */
-export interface ModifyTransitGatewayOptions {
+export interface NetworkInterfaceAttachmentChanges {
   /**
    * @public
-   * <p>Adds IPv4 or IPv6 CIDR blocks for the transit gateway. Must be a size /24 CIDR block or larger for IPv4, or a size /64 CIDR block or larger for IPv6.</p>
+   * <p>The ID of the network interface attachment.</p>
    */
-  AddTransitGatewayCidrBlocks?: string[];
+  AttachmentId?: string;
 
   /**
    * @public
-   * <p>Removes CIDR blocks for the transit gateway.</p>
+   * <p>Indicates whether the network interface is deleted when the instance is terminated.</p>
    */
-  RemoveTransitGatewayCidrBlocks?: string[];
+  DeleteOnTermination?: boolean;
+}
 
+/**
+ * @public
+ * <p>Contains the parameters for ModifyNetworkInterfaceAttribute.</p>
+ */
+export interface ModifyNetworkInterfaceAttributeRequest {
   /**
    * @public
-   * <p>Enable or disable Equal Cost Multipath Protocol support.</p>
+   * <p>Information about the interface attachment. If modifying the <code>delete on
+   * 				termination</code> attribute, you must specify the ID of the interface
+   * 			attachment.</p>
    */
-  VpnEcmpSupport?: VpnEcmpSupportValue;
+  Attachment?: NetworkInterfaceAttachmentChanges;
 
   /**
    * @public
-   * <p>Enable or disable DNS support.</p>
+   * <p>A description for the network interface.</p>
    */
-  DnsSupport?: DnsSupportValue;
+  Description?: AttributeValue;
 
   /**
    * @public
-   * <p>Enable or disable automatic acceptance of attachment requests.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *             and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *             Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  AutoAcceptSharedAttachments?: AutoAcceptSharedAttachmentsValue;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>Enable or disable automatic association with the default association route table.</p>
+   * <p>Changes the security groups for the network interface. The new set of groups you specify replaces the current set. You must specify at least one group, even if it's just the default security group in the VPC. You must specify the ID of the security group, not the name.</p>
    */
-  DefaultRouteTableAssociation?: DefaultRouteTableAssociationValue;
+  Groups?: string[];
 
   /**
    * @public
-   * <p>The ID of the default association route table.</p>
+   * <p>The ID of the network interface.</p>
    */
-  AssociationDefaultRouteTableId?: string;
+  NetworkInterfaceId: string | undefined;
 
   /**
    * @public
-   * <p>Enable or disable automatic propagation of routes to the default propagation route table.</p>
+   * <p>Enable or disable source/destination checks, which ensure that the instance
+   *             is either the source or the destination of any traffic that it receives.
+   *             If the value is <code>true</code>, source/destination checks are enabled;
+   *             otherwise, they are disabled. The default value is <code>true</code>.
+   *             You must disable source/destination checks if the instance runs services
+   *             such as network address translation, routing, or firewalls.</p>
    */
-  DefaultRouteTablePropagation?: DefaultRouteTablePropagationValue;
+  SourceDestCheck?: AttributeBooleanValue;
 
   /**
    * @public
-   * <p>The ID of the default propagation route table.</p>
+   * <p>Updates the ENA Express configuration for the network interface that’s attached to the
+   * 			instance.</p>
    */
-  PropagationDefaultRouteTableId?: string;
+  EnaSrdSpecification?: EnaSrdSpecification;
 
   /**
    * @public
-   * <p>A private Autonomous System Number (ASN) for the Amazon side of a BGP session.
-   *             The range is 64512 to 65534 for 16-bit ASNs and 4200000000 to 4294967294 for 32-bit ASNs.</p>
-   *          <p>The modify ASN operation is not allowed on a transit gateway with active BGP sessions. You must first delete all transit gateway attachments that have BGP configured prior to modifying the ASN on the transit gateway.</p>
+   * <p>If you’re modifying a network interface in a dual-stack or IPv6-only subnet, you have
+   *             the option to assign a primary IPv6 IP address. A primary IPv6 address is an IPv6 GUA
+   *             address associated with an ENI that you have enabled to use a primary IPv6 address. Use
+   *             this option if the instance that this ENI will be attached to relies on its IPv6 address
+   *             not changing. Amazon Web Services will automatically assign an IPv6 address associated
+   *             with the ENI attached to your instance to be the primary IPv6 address. Once you enable
+   *             an IPv6 GUA address to be a primary IPv6, you cannot disable it. When you enable an IPv6
+   *             GUA address to be a primary IPv6, the first IPv6 GUA will be made the primary IPv6
+   *             address until the instance is terminated or the network interface is detached. If you
+   *             have multiple IPv6 addresses associated with an ENI attached to your instance and you
+   *             enable a primary IPv6 address, the first IPv6 GUA address associated with the ENI
+   *             becomes the primary IPv6 address.</p>
    */
-  AmazonSideAsn?: number;
+  EnablePrimaryIpv6?: boolean;
+
+  /**
+   * @public
+   * <p>A connection tracking specification.</p>
+   */
+  ConnectionTrackingSpecification?: ConnectionTrackingSpecificationRequest;
 }
 
 /**
  * @public
  */
-export interface ModifyTransitGatewayRequest {
+export interface ModifyPrivateDnsNameOptionsRequest {
   /**
    * @public
-   * <p>The ID of the transit gateway.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually
+   *             making the request, and provides an error response. If you have the required
+   *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
+   *                 <code>UnauthorizedOperation</code>.</p>
    */
-  TransitGatewayId: string | undefined;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The description for the transit gateway.</p>
+   * <p>The ID of the instance.</p>
    */
-  Description?: string;
+  InstanceId: string | undefined;
 
   /**
    * @public
-   * <p>The options to modify.</p>
+   * <p>The type of hostname for EC2 instances. For IPv4 only subnets, an instance DNS name
+   *             must be based on the instance IPv4 address. For IPv6 only subnets, an instance DNS name
+   *             must be based on the instance ID. For dual-stack subnets, you can specify whether DNS
+   *             names use the instance IPv4 address or the instance ID.</p>
    */
-  Options?: ModifyTransitGatewayOptions;
+  PrivateDnsHostnameType?: HostnameType;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>Indicates whether to respond to DNS queries for instance hostnames with DNS A
+   *             records.</p>
    */
-  DryRun?: boolean;
-}
+  EnableResourceNameDnsARecord?: boolean;
 
-/**
- * @public
- */
-export interface ModifyTransitGatewayResult {
   /**
    * @public
-   * <p>Information about the transit gateway.</p>
+   * <p>Indicates whether to respond to DNS queries for instance hostnames with DNS AAAA
+   *             records.</p>
    */
-  TransitGateway?: TransitGateway;
+  EnableResourceNameDnsAAAARecord?: boolean;
 }
 
 /**
  * @public
  */
-export interface ModifyTransitGatewayPrefixListReferenceRequest {
-  /**
-   * @public
-   * <p>The ID of the transit gateway route table.</p>
-   */
-  TransitGatewayRouteTableId: string | undefined;
-
+export interface ModifyPrivateDnsNameOptionsResult {
   /**
    * @public
-   * <p>The ID of the prefix list.</p>
+   * <p>Returns <code>true</code> if the request succeeds; otherwise, it returns an
+   *             error.</p>
    */
-  PrefixListId: string | undefined;
+  Return?: boolean;
+}
 
+/**
+ * @public
+ * <p>Contains the parameters for ModifyReservedInstances.</p>
+ */
+export interface ModifyReservedInstancesRequest {
   /**
    * @public
-   * <p>The ID of the attachment to which traffic is routed.</p>
+   * <p>The IDs of the Reserved Instances to modify.</p>
    */
-  TransitGatewayAttachmentId?: string;
+  ReservedInstancesIds: string[] | undefined;
 
   /**
    * @public
-   * <p>Indicates whether to drop traffic that matches this route.</p>
+   * <p>A unique, case-sensitive token you provide to ensure idempotency of your modification request. For more information, see
+   *    		<a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html">Ensuring Idempotency</a>.</p>
    */
-  Blackhole?: boolean;
+  ClientToken?: string;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The configuration settings for the Reserved Instances to modify.</p>
    */
-  DryRun?: boolean;
+  TargetConfigurations: ReservedInstancesConfiguration[] | undefined;
 }
 
 /**
  * @public
+ * <p>Contains the output of ModifyReservedInstances.</p>
  */
-export interface ModifyTransitGatewayPrefixListReferenceResult {
+export interface ModifyReservedInstancesResult {
   /**
    * @public
-   * <p>Information about the prefix list reference.</p>
+   * <p>The ID for the modification.</p>
    */
-  TransitGatewayPrefixListReference?: TransitGatewayPrefixListReference;
+  ReservedInstancesModificationId?: string;
 }
 
 /**
  * @public
- * <p>Describes the options for a VPC attachment.</p>
+ * <p>Describes a security group rule.</p>
+ *          <p>You must specify exactly one of the following parameters, based on the rule type:</p>
+ *          <ul>
+ *             <li>
+ *                <p>CidrIpv4</p>
+ *             </li>
+ *             <li>
+ *                <p>CidrIpv6</p>
+ *             </li>
+ *             <li>
+ *                <p>PrefixListId</p>
+ *             </li>
+ *             <li>
+ *                <p>ReferencedGroupId</p>
+ *             </li>
+ *          </ul>
+ *          <p>When you modify a rule, you cannot change the rule type. For example, if the rule
+ *             uses an IPv4 address range, you must use <code>CidrIpv4</code> to specify a new IPv4
+ *             address range.</p>
  */
-export interface ModifyTransitGatewayVpcAttachmentRequestOptions {
+export interface SecurityGroupRuleRequest {
   /**
    * @public
-   * <p>Enable or disable DNS support. The default is <code>enable</code>.</p>
+   * <p>The IP protocol name (<code>tcp</code>, <code>udp</code>, <code>icmp</code>,
+   *                 <code>icmpv6</code>) or number (see <a href="http://www.iana.org/assignments/protocol-numbers/protocol-numbers.xhtml">Protocol Numbers</a>). </p>
+   *          <p>Use <code>-1</code> to specify all protocols.</p>
    */
-  DnsSupport?: DnsSupportValue;
+  IpProtocol?: string;
 
   /**
    * @public
-   * <p>Enable or disable IPv6 support. The default is <code>enable</code>.</p>
+   * <p>If the protocol is TCP or UDP, this is the start of the port range.
+   *             If the protocol is ICMP or ICMPv6, this is the type number. A value of -1 indicates all ICMP/ICMPv6 types.
+   *             If you specify all ICMP/ICMPv6 types, you must specify all ICMP/ICMPv6 codes.</p>
    */
-  Ipv6Support?: Ipv6SupportValue;
+  FromPort?: number;
 
   /**
    * @public
-   * <p>Enable or disable support for appliance mode. If enabled, a traffic flow between a source and destination uses the same Availability Zone for the VPC attachment for the lifetime of that flow. The default is <code>disable</code>.</p>
+   * <p>If the protocol is TCP or UDP, this is the end of the port range.
+   *             If the protocol is ICMP or ICMPv6, this is the code. A value of -1 indicates all ICMP/ICMPv6 codes.
+   *             If you specify all ICMP/ICMPv6 types, you must specify all ICMP/ICMPv6 codes.</p>
    */
-  ApplianceModeSupport?: ApplianceModeSupportValue;
-}
+  ToPort?: number;
 
-/**
- * @public
- */
-export interface ModifyTransitGatewayVpcAttachmentRequest {
   /**
    * @public
-   * <p>The ID of the attachment.</p>
+   * <p>The IPv4 CIDR range. To specify a single IPv4 address, use the /32 prefix length. </p>
    */
-  TransitGatewayAttachmentId: string | undefined;
+  CidrIpv4?: string;
 
   /**
    * @public
-   * <p>The IDs of one or more subnets to add. You can specify at most one subnet per Availability Zone.</p>
+   * <p>The IPv6 CIDR range. To specify a single IPv6 address, use the /128 prefix length.</p>
    */
-  AddSubnetIds?: string[];
+  CidrIpv6?: string;
 
   /**
    * @public
-   * <p>The IDs of one or more subnets to remove.</p>
+   * <p>The ID of the prefix list.</p>
    */
-  RemoveSubnetIds?: string[];
+  PrefixListId?: string;
 
   /**
    * @public
-   * <p>The new VPC attachment options.</p>
+   * <p>The ID of the security group that is referenced in the security group rule.</p>
    */
-  Options?: ModifyTransitGatewayVpcAttachmentRequestOptions;
+  ReferencedGroupId?: string;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The description of the security group rule.</p>
    */
-  DryRun?: boolean;
+  Description?: string;
 }
 
 /**
  * @public
+ * <p>Describes an update to a security group rule.</p>
  */
-export interface ModifyTransitGatewayVpcAttachmentResult {
+export interface SecurityGroupRuleUpdate {
   /**
    * @public
-   * <p>Information about the modified attachment.</p>
+   * <p>The ID of the security group rule.</p>
    */
-  TransitGatewayVpcAttachment?: TransitGatewayVpcAttachment;
+  SecurityGroupRuleId: string | undefined;
+
+  /**
+   * @public
+   * <p>Information about the security group rule.</p>
+   */
+  SecurityGroupRule?: SecurityGroupRuleRequest;
 }
 
 /**
  * @public
- * <p>Describes a load balancer when creating an Amazon Web Services Verified Access endpoint using the
- *             <code>load-balancer</code> type.</p>
  */
-export interface ModifyVerifiedAccessEndpointLoadBalancerOptions {
+export interface ModifySecurityGroupRulesRequest {
   /**
    * @public
-   * <p>The IDs of the subnets.</p>
+   * <p>The ID of the security group.</p>
    */
-  SubnetIds?: string[];
+  GroupId: string | undefined;
 
   /**
    * @public
-   * <p>The IP protocol.</p>
+   * <p>Information about the security group properties to update.</p>
    */
-  Protocol?: VerifiedAccessEndpointProtocol;
+  SecurityGroupRules: SecurityGroupRuleUpdate[] | undefined;
 
   /**
    * @public
-   * <p>The IP port number.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  Port?: number;
+  DryRun?: boolean;
 }
 
 /**
  * @public
- * <p>Describes the options when modifying a Verified Access endpoint with the
- *             <code>network-interface</code> type.</p>
  */
-export interface ModifyVerifiedAccessEndpointEniOptions {
+export interface ModifySecurityGroupRulesResult {
   /**
    * @public
-   * <p>The IP protocol.</p>
+   * <p>Returns <code>true</code> if the request succeeds; otherwise, returns an error.</p>
    */
-  Protocol?: VerifiedAccessEndpointProtocol;
+  Return?: boolean;
+}
+
+/**
+ * @public
+ * <p>Describes modifications to the list of create volume permissions for a volume.</p>
+ */
+export interface CreateVolumePermissionModifications {
+  /**
+   * @public
+   * <p>Adds the specified Amazon Web Services account ID or group to the list.</p>
+   */
+  Add?: CreateVolumePermission[];
 
   /**
    * @public
-   * <p>The IP port number.</p>
+   * <p>Removes the specified Amazon Web Services account ID or group from the list.</p>
    */
-  Port?: number;
+  Remove?: CreateVolumePermission[];
 }
 
 /**
  * @public
  */
-export interface ModifyVerifiedAccessEndpointRequest {
+export interface ModifySnapshotAttributeRequest {
   /**
    * @public
-   * <p>The ID of the Verified Access endpoint.</p>
+   * <p>The snapshot attribute to modify. Only volume creation permissions can be modified.</p>
    */
-  VerifiedAccessEndpointId: string | undefined;
+  Attribute?: SnapshotAttributeName;
 
   /**
    * @public
-   * <p>The ID of the Verified Access group.</p>
+   * <p>A JSON representation of the snapshot attribute modification.</p>
    */
-  VerifiedAccessGroupId?: string;
+  CreateVolumePermission?: CreateVolumePermissionModifications;
 
   /**
    * @public
-   * <p>The load balancer details if creating the Verified Access endpoint as
-   *          <code>load-balancer</code>type.</p>
+   * <p>The group to modify for the snapshot.</p>
    */
-  LoadBalancerOptions?: ModifyVerifiedAccessEndpointLoadBalancerOptions;
+  GroupNames?: string[];
 
   /**
    * @public
-   * <p>The network interface options.</p>
+   * <p>The type of operation to perform to the attribute.</p>
    */
-  NetworkInterfaceOptions?: ModifyVerifiedAccessEndpointEniOptions;
+  OperationType?: OperationType;
 
   /**
    * @public
-   * <p>A description for the Verified Access endpoint.</p>
+   * <p>The ID of the snapshot.</p>
    */
-  Description?: string;
+  SnapshotId: string | undefined;
 
   /**
    * @public
-   * <p>A unique, case-sensitive token that you provide to ensure idempotency of your
-   *             modification request. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html">Ensuring Idempotency</a>.</p>
+   * <p>The account ID to modify for the snapshot.</p>
    */
-  ClientToken?: string;
+  UserIds?: string[];
 
   /**
    * @public
@@ -5972,43 +6037,32 @@ export interface ModifyVerifiedAccessEndpointRequest {
 
 /**
  * @public
+ * @enum
  */
-export interface ModifyVerifiedAccessEndpointResult {
-  /**
-   * @public
-   * <p>Details about the Verified Access endpoint.</p>
-   */
-  VerifiedAccessEndpoint?: VerifiedAccessEndpoint;
-}
+export const TargetStorageTier = {
+  archive: "archive",
+} as const;
 
 /**
  * @public
  */
-export interface ModifyVerifiedAccessEndpointPolicyRequest {
-  /**
-   * @public
-   * <p>The ID of the Verified Access endpoint.</p>
-   */
-  VerifiedAccessEndpointId: string | undefined;
-
-  /**
-   * @public
-   * <p>The status of the Verified Access policy.</p>
-   */
-  PolicyEnabled?: boolean;
+export type TargetStorageTier = (typeof TargetStorageTier)[keyof typeof TargetStorageTier];
 
+/**
+ * @public
+ */
+export interface ModifySnapshotTierRequest {
   /**
    * @public
-   * <p>The Verified Access policy document.</p>
+   * <p>The ID of the snapshot.</p>
    */
-  PolicyDocument?: string;
+  SnapshotId: string | undefined;
 
   /**
    * @public
-   * <p>A unique, case-sensitive token that you provide to ensure idempotency of your
-   *             modification request. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html">Ensuring Idempotency</a>.</p>
+   * <p>The name of the storage tier. You must specify <code>archive</code>.</p>
    */
-  ClientToken?: string;
+  StorageTier?: TargetStorageTier;
 
   /**
    * @public
@@ -6017,785 +6071,734 @@ export interface ModifyVerifiedAccessEndpointPolicyRequest {
    *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
-
-  /**
-   * @public
-   * <p>The options for server side encryption.</p>
-   */
-  SseSpecification?: VerifiedAccessSseSpecificationRequest;
 }
 
 /**
  * @public
  */
-export interface ModifyVerifiedAccessEndpointPolicyResult {
+export interface ModifySnapshotTierResult {
   /**
    * @public
-   * <p>The status of the Verified Access policy.</p>
+   * <p>The ID of the snapshot.</p>
    */
-  PolicyEnabled?: boolean;
+  SnapshotId?: string;
 
   /**
    * @public
-   * <p>The Verified Access policy document.</p>
+   * <p>The date and time when the archive process was started.</p>
    */
-  PolicyDocument?: string;
+  TieringStartTime?: Date;
+}
 
+/**
+ * @public
+ * <p>Contains the parameters for ModifySpotFleetRequest.</p>
+ */
+export interface ModifySpotFleetRequestRequest {
   /**
    * @public
-   * <p>The options in use for server side encryption.</p>
+   * <p>Indicates whether running instances should be terminated if the target capacity
+   *             of the Spot Fleet request is decreased below the current size of the Spot Fleet.</p>
+   *          <p>Supported only for fleets of type <code>maintain</code>.</p>
    */
-  SseSpecification?: VerifiedAccessSseSpecificationResponse;
-}
+  ExcessCapacityTerminationPolicy?: ExcessCapacityTerminationPolicy;
 
-/**
- * @public
- */
-export interface ModifyVerifiedAccessGroupRequest {
   /**
    * @public
-   * <p>The ID of the Verified Access group.</p>
+   * <p>The launch template and overrides. You can only use this parameter if you specified a
+   *             launch template (<code>LaunchTemplateConfigs</code>) in your Spot Fleet request. If you
+   *             specified <code>LaunchSpecifications</code> in your Spot Fleet request, then omit this
+   *             parameter.</p>
    */
-  VerifiedAccessGroupId: string | undefined;
+  LaunchTemplateConfigs?: LaunchTemplateConfig[];
 
   /**
    * @public
-   * <p>The ID of the Verified Access instance.</p>
+   * <p>The ID of the Spot Fleet request.</p>
    */
-  VerifiedAccessInstanceId?: string;
+  SpotFleetRequestId: string | undefined;
 
   /**
    * @public
-   * <p>A description for the Verified Access group.</p>
+   * <p>The size of the fleet.</p>
    */
-  Description?: string;
+  TargetCapacity?: number;
 
   /**
    * @public
-   * <p>A unique, case-sensitive token that you provide to ensure idempotency of your
-   *             modification request. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html">Ensuring Idempotency</a>.</p>
+   * <p>The number of On-Demand Instances in the fleet.</p>
    */
-  ClientToken?: string;
+  OnDemandTargetCapacity?: number;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>Reserved.</p>
    */
-  DryRun?: boolean;
+  Context?: string;
 }
 
 /**
  * @public
+ * <p>Contains the output of ModifySpotFleetRequest.</p>
  */
-export interface ModifyVerifiedAccessGroupResult {
+export interface ModifySpotFleetRequestResponse {
   /**
    * @public
-   * <p>Details about the Verified Access group.</p>
+   * <p>If the request succeeds, the response returns <code>true</code>. If the request fails,
+   *             no response is returned, and instead an error message is returned.</p>
    */
-  VerifiedAccessGroup?: VerifiedAccessGroup;
+  Return?: boolean;
 }
 
 /**
  * @public
  */
-export interface ModifyVerifiedAccessGroupPolicyRequest {
+export interface ModifySubnetAttributeRequest {
   /**
    * @public
-   * <p>The ID of the Verified Access group.</p>
+   * <p>Specify <code>true</code> to indicate that network interfaces created in the
+   *             specified subnet should be assigned an IPv6 address. This includes a network interface
+   *             that's created when launching an instance into the subnet (the instance therefore
+   *             receives an IPv6 address). </p>
+   *          <p>If you enable the IPv6 addressing feature for your subnet, your network interface
+   *             or instance only receives an IPv6 address if it's created using version
+   *                 <code>2016-11-15</code> or later of the Amazon EC2 API.</p>
    */
-  VerifiedAccessGroupId: string | undefined;
+  AssignIpv6AddressOnCreation?: AttributeBooleanValue;
 
   /**
    * @public
-   * <p>The status of the Verified Access policy.</p>
+   * <p>Specify <code>true</code> to indicate that network interfaces attached to instances created in the
+   *             specified subnet should be assigned a public IPv4 address.</p>
    */
-  PolicyEnabled?: boolean;
+  MapPublicIpOnLaunch?: AttributeBooleanValue;
 
   /**
    * @public
-   * <p>The Verified Access policy document.</p>
+   * <p>The ID of the subnet.</p>
    */
-  PolicyDocument?: string;
+  SubnetId: string | undefined;
 
   /**
    * @public
-   * <p>A unique, case-sensitive token that you provide to ensure idempotency of your
-   *             modification request. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html">Ensuring Idempotency</a>.</p>
+   * <p>Specify <code>true</code> to indicate that network interfaces  attached to instances created in the
+   *             specified subnet should be assigned a customer-owned IPv4 address.</p>
+   *          <p>When this value is <code>true</code>, you must specify the customer-owned IP pool using <code>CustomerOwnedIpv4Pool</code>.</p>
    */
-  ClientToken?: string;
+  MapCustomerOwnedIpOnLaunch?: AttributeBooleanValue;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The customer-owned IPv4 address pool associated with the subnet.</p>
+   *          <p>You must set this value when you specify <code>true</code> for <code>MapCustomerOwnedIpOnLaunch</code>.</p>
    */
-  DryRun?: boolean;
+  CustomerOwnedIpv4Pool?: string;
 
   /**
    * @public
-   * <p>The options for server side encryption.</p>
+   * <p>Indicates whether DNS queries made to the Amazon-provided DNS Resolver in this subnet
+   *             should return synthetic IPv6 addresses for IPv4-only destinations.</p>
    */
-  SseSpecification?: VerifiedAccessSseSpecificationRequest;
-}
+  EnableDns64?: AttributeBooleanValue;
 
-/**
- * @public
- */
-export interface ModifyVerifiedAccessGroupPolicyResult {
   /**
    * @public
-   * <p>The status of the Verified Access policy.</p>
+   * <p>The type of hostname to assign to instances in the subnet at launch. For IPv4-only and dual-stack (IPv4 and IPv6) subnets, an
+   *             instance DNS name can be based on the instance IPv4 address (ip-name) or the instance ID (resource-name). For IPv6 only subnets, an instance
+   *             DNS name must be based on the instance ID (resource-name).</p>
    */
-  PolicyEnabled?: boolean;
+  PrivateDnsHostnameTypeOnLaunch?: HostnameType;
 
   /**
    * @public
-   * <p>The Verified Access policy document.</p>
+   * <p>Indicates whether to respond to DNS queries for instance hostnames with DNS A records.</p>
    */
-  PolicyDocument?: string;
+  EnableResourceNameDnsARecordOnLaunch?: AttributeBooleanValue;
 
   /**
    * @public
-   * <p>The options in use for server side encryption.</p>
+   * <p>Indicates whether to respond to DNS queries for instance hostnames with DNS AAAA records.</p>
    */
-  SseSpecification?: VerifiedAccessSseSpecificationResponse;
+  EnableResourceNameDnsAAAARecordOnLaunch?: AttributeBooleanValue;
+
+  /**
+   * @public
+   * <p>
+   *             Indicates the device position for local network interfaces in this subnet. For example,
+   *             <code>1</code> indicates local network interfaces in this subnet are the secondary
+   *             network interface (eth1). A local network interface cannot be the primary network
+   *             interface (eth0).
+   *         </p>
+   */
+  EnableLniAtDeviceIndex?: number;
+
+  /**
+   * @public
+   * <p>
+   *             Specify <code>true</code> to indicate that local network interfaces at the current
+   *             position should be disabled.
+   *         </p>
+   */
+  DisableLniAtDeviceIndex?: AttributeBooleanValue;
 }
 
 /**
  * @public
  */
-export interface ModifyVerifiedAccessInstanceRequest {
+export interface ModifyTrafficMirrorFilterNetworkServicesRequest {
   /**
    * @public
-   * <p>The ID of the Verified Access instance.</p>
+   * <p>The ID of the Traffic Mirror filter.</p>
    */
-  VerifiedAccessInstanceId: string | undefined;
+  TrafficMirrorFilterId: string | undefined;
 
   /**
    * @public
-   * <p>A description for the Verified Access instance.</p>
+   * <p>The network service, for example Amazon DNS, that you want to mirror.</p>
    */
-  Description?: string;
+  AddNetworkServices?: TrafficMirrorNetworkService[];
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The network service, for example Amazon DNS, that you no longer want to mirror.</p>
    */
-  DryRun?: boolean;
+  RemoveNetworkServices?: TrafficMirrorNetworkService[];
 
   /**
    * @public
-   * <p>A unique, case-sensitive token that you provide to ensure idempotency of your
-   *             modification request. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html">Ensuring Idempotency</a>.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  ClientToken?: string;
+  DryRun?: boolean;
 }
 
 /**
  * @public
  */
-export interface ModifyVerifiedAccessInstanceResult {
+export interface ModifyTrafficMirrorFilterNetworkServicesResult {
   /**
    * @public
-   * <p>Details about the Verified Access instance.</p>
+   * <p>The Traffic Mirror filter that the network service is associated with.</p>
    */
-  VerifiedAccessInstance?: VerifiedAccessInstance;
+  TrafficMirrorFilter?: TrafficMirrorFilter;
 }
 
 /**
  * @public
- * <p>Options for CloudWatch Logs as a logging destination.</p>
+ * @enum
  */
-export interface VerifiedAccessLogCloudWatchLogsDestinationOptions {
-  /**
-   * @public
-   * <p>Indicates whether logging is enabled.</p>
-   */
-  Enabled: boolean | undefined;
+export const TrafficMirrorFilterRuleField = {
+  description: "description",
+  destination_port_range: "destination-port-range",
+  protocol: "protocol",
+  source_port_range: "source-port-range",
+} as const;
 
-  /**
-   * @public
-   * <p>The ID of the CloudWatch Logs log group.</p>
-   */
-  LogGroup?: string;
-}
+/**
+ * @public
+ */
+export type TrafficMirrorFilterRuleField =
+  (typeof TrafficMirrorFilterRuleField)[keyof typeof TrafficMirrorFilterRuleField];
 
 /**
  * @public
- * <p>Describes Amazon Kinesis Data Firehose logging options.</p>
  */
-export interface VerifiedAccessLogKinesisDataFirehoseDestinationOptions {
+export interface ModifyTrafficMirrorFilterRuleRequest {
   /**
    * @public
-   * <p>Indicates whether logging is enabled.</p>
+   * <p>The ID of the Traffic Mirror rule.</p>
    */
-  Enabled: boolean | undefined;
+  TrafficMirrorFilterRuleId: string | undefined;
 
   /**
    * @public
-   * <p>The ID of the delivery stream.</p>
+   * <p>The type of traffic to assign to the rule.</p>
    */
-  DeliveryStream?: string;
-}
+  TrafficDirection?: TrafficDirection;
 
-/**
- * @public
- * <p>Options for Amazon S3 as a logging destination.</p>
- */
-export interface VerifiedAccessLogS3DestinationOptions {
   /**
    * @public
-   * <p>Indicates whether logging is enabled.</p>
+   * <p>The number of the Traffic Mirror rule. This number must be unique for each Traffic Mirror rule in a given
+   *          direction. The rules are processed in ascending order by rule number.</p>
    */
-  Enabled: boolean | undefined;
+  RuleNumber?: number;
 
   /**
    * @public
-   * <p>The bucket name.</p>
+   * <p>The action to assign to the rule.</p>
    */
-  BucketName?: string;
+  RuleAction?: TrafficMirrorRuleAction;
 
   /**
    * @public
-   * <p>The bucket prefix.</p>
+   * <p>The destination ports that are associated with the Traffic Mirror rule.</p>
    */
-  Prefix?: string;
+  DestinationPortRange?: TrafficMirrorPortRangeRequest;
 
   /**
    * @public
-   * <p>The ID of the Amazon Web Services account that owns the Amazon S3 bucket.</p>
+   * <p>The port range to assign to the Traffic Mirror rule.</p>
    */
-  BucketOwner?: string;
-}
+  SourcePortRange?: TrafficMirrorPortRangeRequest;
 
-/**
- * @public
- * <p>Options for Verified Access logs.</p>
- */
-export interface VerifiedAccessLogOptions {
   /**
    * @public
-   * <p>Sends Verified Access logs to Amazon S3.</p>
+   * <p>The protocol, for example TCP, to assign to the Traffic Mirror rule.</p>
    */
-  S3?: VerifiedAccessLogS3DestinationOptions;
+  Protocol?: number;
 
   /**
    * @public
-   * <p>Sends Verified Access logs to CloudWatch Logs.</p>
+   * <p>The destination CIDR block to assign to the Traffic Mirror rule.</p>
    */
-  CloudWatchLogs?: VerifiedAccessLogCloudWatchLogsDestinationOptions;
+  DestinationCidrBlock?: string;
 
   /**
    * @public
-   * <p>Sends Verified Access logs to Kinesis.</p>
+   * <p>The source CIDR block to assign to the Traffic Mirror rule.</p>
    */
-  KinesisDataFirehose?: VerifiedAccessLogKinesisDataFirehoseDestinationOptions;
+  SourceCidrBlock?: string;
 
   /**
    * @public
-   * <p>The logging version.</p>
-   *          <p>Valid values: <code>ocsf-0.1</code> | <code>ocsf-1.0.0-rc.2</code>
-   *          </p>
+   * <p>The description to assign to the Traffic Mirror rule.</p>
    */
-  LogVersion?: string;
+  Description?: string;
 
   /**
    * @public
-   * <p>Indicates whether to include trust data sent by trust providers in the logs.</p>
+   * <p>The properties that you want to remove from the Traffic Mirror filter rule.</p>
+   *          <p>When you remove a property from a Traffic Mirror filter rule, the property is set to the default.</p>
    */
-  IncludeTrustContext?: boolean;
+  RemoveFields?: TrafficMirrorFilterRuleField[];
+
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
 }
 
 /**
  * @public
  */
-export interface ModifyVerifiedAccessInstanceLoggingConfigurationRequest {
+export interface ModifyTrafficMirrorFilterRuleResult {
   /**
    * @public
-   * <p>The ID of the Verified Access instance.</p>
-   */
-  VerifiedAccessInstanceId: string | undefined;
-
-  /**
-   * @public
-   * <p>The configuration options for Verified Access instances.</p>
+   * <p>Modifies a Traffic Mirror rule.</p>
    */
-  AccessLogs: VerifiedAccessLogOptions | undefined;
+  TrafficMirrorFilterRule?: TrafficMirrorFilterRule;
+}
 
-  /**
-   * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-   */
-  DryRun?: boolean;
+/**
+ * @public
+ * @enum
+ */
+export const TrafficMirrorSessionField = {
+  description: "description",
+  packet_length: "packet-length",
+  virtual_network_id: "virtual-network-id",
+} as const;
 
-  /**
-   * @public
-   * <p>A unique, case-sensitive token that you provide to ensure idempotency of your
-   *             modification request. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html">Ensuring Idempotency</a>.</p>
-   */
-  ClientToken?: string;
-}
+/**
+ * @public
+ */
+export type TrafficMirrorSessionField = (typeof TrafficMirrorSessionField)[keyof typeof TrafficMirrorSessionField];
 
 /**
  * @public
  */
-export interface ModifyVerifiedAccessInstanceLoggingConfigurationResult {
+export interface ModifyTrafficMirrorSessionRequest {
   /**
    * @public
-   * <p>The logging configuration for the Verified Access instance.</p>
+   * <p>The ID of the Traffic Mirror session.</p>
    */
-  LoggingConfiguration?: VerifiedAccessInstanceLoggingConfiguration;
-}
+  TrafficMirrorSessionId: string | undefined;
 
-/**
- * @public
- * <p>Modifies the configuration of the specified device-based Amazon Web Services Verified Access trust provider.</p>
- */
-export interface ModifyVerifiedAccessTrustProviderDeviceOptions {
   /**
    * @public
-   * <p> The URL Amazon Web Services Verified Access will use to verify the authenticity of the device tokens. </p>
+   * <p>The Traffic Mirror target. The target must be in the same VPC as the source, or have a VPC peering connection with the source.</p>
    */
-  PublicSigningKeyUrl?: string;
-}
+  TrafficMirrorTargetId?: string;
 
-/**
- * @public
- * <p>Options for an OpenID Connect-compatible user-identity trust provider.</p>
- */
-export interface ModifyVerifiedAccessTrustProviderOidcOptions {
   /**
    * @public
-   * <p>The OIDC issuer.</p>
+   * <p>The ID of the Traffic Mirror filter.</p>
    */
-  Issuer?: string;
+  TrafficMirrorFilterId?: string;
 
   /**
    * @public
-   * <p>The OIDC authorization endpoint.</p>
+   * <p>The number of bytes in each packet to mirror. These are bytes after the VXLAN header. To mirror a subset, set this to the length (in bytes) to mirror. For example, if you set this value to 100, then the first 100 bytes that meet the filter criteria are copied to the target. Do not specify this parameter when you want to mirror the entire packet.</p>
+   *          <p>For sessions with Network Load Balancer (NLB) traffic mirror targets, the default <code>PacketLength</code> will be set to 8500. Valid values are 1-8500. Setting a <code>PacketLength</code> greater than 8500 will result in an error response.</p>
    */
-  AuthorizationEndpoint?: string;
+  PacketLength?: number;
 
   /**
    * @public
-   * <p>The OIDC token endpoint.</p>
+   * <p>The session number determines the order in which sessions are evaluated when an interface is used by multiple sessions. The first session with a matching filter is the one that mirrors the packets.</p>
+   *          <p>Valid values are 1-32766.</p>
    */
-  TokenEndpoint?: string;
+  SessionNumber?: number;
 
   /**
    * @public
-   * <p>The OIDC user info endpoint.</p>
+   * <p>The virtual network ID of the Traffic Mirror session.</p>
    */
-  UserInfoEndpoint?: string;
+  VirtualNetworkId?: number;
 
   /**
    * @public
-   * <p>The client identifier.</p>
+   * <p>The description to assign to the Traffic Mirror session.</p>
    */
-  ClientId?: string;
+  Description?: string;
 
   /**
    * @public
-   * <p>The client secret.</p>
+   * <p>The properties that you want to remove from the Traffic Mirror session.</p>
+   *          <p>When you remove a property from a Traffic Mirror session, the property is set to the default.</p>
    */
-  ClientSecret?: string;
+  RemoveFields?: TrafficMirrorSessionField[];
 
   /**
    * @public
-   * <p>OpenID Connect (OIDC) scopes are used by an application during authentication to authorize access to a user's details. Each scope returns a specific set of user attributes.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  Scope?: string;
+  DryRun?: boolean;
 }
 
 /**
  * @public
  */
-export interface ModifyVerifiedAccessTrustProviderRequest {
+export interface ModifyTrafficMirrorSessionResult {
   /**
    * @public
-   * <p>The ID of the Verified Access trust provider.</p>
+   * <p>Information about the Traffic Mirror session.</p>
    */
-  VerifiedAccessTrustProviderId: string | undefined;
+  TrafficMirrorSession?: TrafficMirrorSession;
+}
 
+/**
+ * @public
+ * <p>The transit gateway options.</p>
+ */
+export interface ModifyTransitGatewayOptions {
   /**
    * @public
-   * <p>The options for an OpenID Connect-compatible user-identity trust provider.</p>
+   * <p>Adds IPv4 or IPv6 CIDR blocks for the transit gateway. Must be a size /24 CIDR block or larger for IPv4, or a size /64 CIDR block or larger for IPv6.</p>
    */
-  OidcOptions?: ModifyVerifiedAccessTrustProviderOidcOptions;
+  AddTransitGatewayCidrBlocks?: string[];
 
   /**
    * @public
-   * <p>The options for a device-based trust provider. This parameter is required when the
-   *          provider type is <code>device</code>.</p>
+   * <p>Removes CIDR blocks for the transit gateway.</p>
    */
-  DeviceOptions?: ModifyVerifiedAccessTrustProviderDeviceOptions;
+  RemoveTransitGatewayCidrBlocks?: string[];
 
   /**
    * @public
-   * <p>A description for the Verified Access trust provider.</p>
+   * <p>Enable or disable Equal Cost Multipath Protocol support.</p>
    */
-  Description?: string;
+  VpnEcmpSupport?: VpnEcmpSupportValue;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>Enable or disable DNS support.</p>
    */
-  DryRun?: boolean;
+  DnsSupport?: DnsSupportValue;
 
   /**
    * @public
-   * <p>A unique, case-sensitive token that you provide to ensure idempotency of your
-   *             modification request. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html">Ensuring Idempotency</a>.</p>
+   * <p>Enable or disable automatic acceptance of attachment requests.</p>
    */
-  ClientToken?: string;
+  AutoAcceptSharedAttachments?: AutoAcceptSharedAttachmentsValue;
 
   /**
    * @public
-   * <p>The options for server side encryption.</p>
+   * <p>Enable or disable automatic association with the default association route table.</p>
    */
-  SseSpecification?: VerifiedAccessSseSpecificationRequest;
-}
+  DefaultRouteTableAssociation?: DefaultRouteTableAssociationValue;
 
-/**
- * @public
- */
-export interface ModifyVerifiedAccessTrustProviderResult {
   /**
    * @public
-   * <p>Details about the Verified Access trust provider.</p>
+   * <p>The ID of the default association route table.</p>
    */
-  VerifiedAccessTrustProvider?: VerifiedAccessTrustProvider;
-}
+  AssociationDefaultRouteTableId?: string;
 
-/**
- * @public
- */
-export interface ModifyVolumeRequest {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>Enable or disable automatic propagation of routes to the default propagation route table.</p>
    */
-  DryRun?: boolean;
+  DefaultRouteTablePropagation?: DefaultRouteTablePropagationValue;
 
   /**
    * @public
-   * <p>The ID of the volume.</p>
+   * <p>The ID of the default propagation route table.</p>
    */
-  VolumeId: string | undefined;
+  PropagationDefaultRouteTableId?: string;
 
   /**
    * @public
-   * <p>The target size of the volume, in GiB. The target volume size must be greater than or
-   *       equal to the existing size of the volume.</p>
-   *          <p>The following are the supported volumes sizes for each volume type:</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>gp2</code> and <code>gp3</code>: 1-16,384</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>io1</code> and <code>io2</code>: 4-16,384</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>st1</code> and <code>sc1</code>: 125-16,384</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>standard</code>: 1-1,024</p>
-   *             </li>
-   *          </ul>
-   *          <p>Default: The existing size is retained.</p>
+   * <p>A private Autonomous System Number (ASN) for the Amazon side of a BGP session.
+   *             The range is 64512 to 65534 for 16-bit ASNs and 4200000000 to 4294967294 for 32-bit ASNs.</p>
+   *          <p>The modify ASN operation is not allowed on a transit gateway with active BGP sessions. You must first delete all transit gateway attachments that have BGP configured prior to modifying the ASN on the transit gateway.</p>
    */
-  Size?: number;
+  AmazonSideAsn?: number;
+}
 
+/**
+ * @public
+ */
+export interface ModifyTransitGatewayRequest {
   /**
    * @public
-   * <p>The target EBS volume type of the volume. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSVolumeTypes.html">Amazon EBS volume types</a> in the <i>Amazon Elastic Compute Cloud User Guide</i>.</p>
-   *          <p>Default: The existing type is retained.</p>
+   * <p>The ID of the transit gateway.</p>
    */
-  VolumeType?: VolumeType;
+  TransitGatewayId: string | undefined;
 
   /**
    * @public
-   * <p>The target IOPS rate of the volume. This parameter is valid only for <code>gp3</code>, <code>io1</code>, and <code>io2</code> volumes.</p>
-   *          <p>The following are the supported values for each volume type:</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>gp3</code>: 3,000-16,000 IOPS</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>io1</code>: 100-64,000 IOPS</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>io2</code>: 100-64,000 IOPS</p>
-   *             </li>
-   *          </ul>
-   *          <p>Default: The existing value is retained if you keep the same volume type. If you change
-   *       the volume type to <code>io1</code>, <code>io2</code>, or <code>gp3</code>, the default is 3,000.</p>
+   * <p>The description for the transit gateway.</p>
    */
-  Iops?: number;
+  Description?: string;
 
   /**
    * @public
-   * <p>The target throughput of the volume, in MiB/s. This parameter is valid only for <code>gp3</code> volumes.
-   *       The maximum value is 1,000.</p>
-   *          <p>Default: The existing value is retained if the source and target volume type is <code>gp3</code>.
-   *       Otherwise, the default value is 125.</p>
-   *          <p>Valid Range: Minimum value of 125. Maximum value of 1000.</p>
+   * <p>The options to modify.</p>
    */
-  Throughput?: number;
+  Options?: ModifyTransitGatewayOptions;
 
   /**
    * @public
-   * <p>Specifies whether to enable Amazon EBS Multi-Attach. If you enable Multi-Attach, you can attach the
-   * 		volume to up to 16 <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html#ec2-nitro-instances">
-   * 			Nitro-based instances</a> in the same Availability Zone. This parameter is
-   * 		supported with <code>io1</code> and <code>io2</code> volumes only. For more information, see
-   * 		<a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-volumes-multi.html">
-   * 			Amazon EBS Multi-Attach</a> in the <i>Amazon Elastic Compute Cloud User Guide</i>.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  MultiAttachEnabled?: boolean;
+  DryRun?: boolean;
 }
 
 /**
  * @public
  */
-export interface ModifyVolumeResult {
+export interface ModifyTransitGatewayResult {
   /**
    * @public
-   * <p>Information about the volume modification.</p>
+   * <p>Information about the transit gateway.</p>
    */
-  VolumeModification?: VolumeModification;
+  TransitGateway?: TransitGateway;
 }
 
 /**
  * @public
  */
-export interface ModifyVolumeAttributeRequest {
+export interface ModifyTransitGatewayPrefixListReferenceRequest {
   /**
    * @public
-   * <p>Indicates whether the volume should be auto-enabled for I/O operations.</p>
+   * <p>The ID of the transit gateway route table.</p>
    */
-  AutoEnableIO?: AttributeBooleanValue;
+  TransitGatewayRouteTableId: string | undefined;
 
   /**
    * @public
-   * <p>The ID of the volume.</p>
+   * <p>The ID of the prefix list.</p>
    */
-  VolumeId: string | undefined;
+  PrefixListId: string | undefined;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The ID of the attachment to which traffic is routed.</p>
    */
-  DryRun?: boolean;
-}
-
-/**
- * @public
- */
-export interface ModifyVpcAttributeRequest {
-  /**
-   * @public
-   * <p>Indicates whether the instances launched in the VPC get DNS hostnames. If enabled, instances in the VPC get DNS hostnames; otherwise, they do not.</p>
-   *          <p>You cannot modify the DNS resolution and DNS hostnames attributes in the same request. Use separate requests for each attribute. You can only enable DNS hostnames if you've enabled DNS support.</p>
-   */
-  EnableDnsHostnames?: AttributeBooleanValue;
+  TransitGatewayAttachmentId?: string;
 
   /**
    * @public
-   * <p>Indicates whether the DNS resolution is supported for the VPC. If enabled, queries to
-   * 			the Amazon provided DNS server at the 169.254.169.253 IP address, or the reserved IP
-   * 			address at the base of the VPC network range "plus two" succeed. If disabled, the Amazon
-   * 			provided DNS service in the VPC that resolves public DNS hostnames to IP addresses is
-   * 			not enabled.</p>
-   *          <p>You cannot modify the DNS resolution and DNS hostnames attributes in the same request. Use separate requests for each attribute.</p>
+   * <p>Indicates whether to drop traffic that matches this route.</p>
    */
-  EnableDnsSupport?: AttributeBooleanValue;
+  Blackhole?: boolean;
 
   /**
    * @public
-   * <p>The ID of the VPC.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  VpcId: string | undefined;
+  DryRun?: boolean;
+}
 
+/**
+ * @public
+ */
+export interface ModifyTransitGatewayPrefixListReferenceResult {
   /**
    * @public
-   * <p>Indicates whether Network Address Usage metrics are enabled for your VPC.</p>
+   * <p>Information about the prefix list reference.</p>
    */
-  EnableNetworkAddressUsageMetrics?: AttributeBooleanValue;
+  TransitGatewayPrefixListReference?: TransitGatewayPrefixListReference;
 }
 
 /**
  * @public
+ * <p>Describes the options for a VPC attachment.</p>
  */
-export interface ModifyVpcEndpointRequest {
+export interface ModifyTransitGatewayVpcAttachmentRequestOptions {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>Enable or disable DNS support. The default is <code>enable</code>.</p>
    */
-  DryRun?: boolean;
+  DnsSupport?: DnsSupportValue;
 
   /**
    * @public
-   * <p>The ID of the endpoint.</p>
+   * <p>Enable or disable IPv6 support. The default is <code>enable</code>.</p>
    */
-  VpcEndpointId: string | undefined;
+  Ipv6Support?: Ipv6SupportValue;
 
   /**
    * @public
-   * <p>(Gateway endpoint) Specify <code>true</code> to reset the policy document to the
-   *             default policy. The default policy allows full access to the service.</p>
+   * <p>Enable or disable support for appliance mode. If enabled, a traffic flow between a source and destination uses the same Availability Zone for the VPC attachment for the lifetime of that flow. The default is <code>disable</code>.</p>
    */
-  ResetPolicy?: boolean;
+  ApplianceModeSupport?: ApplianceModeSupportValue;
+}
 
+/**
+ * @public
+ */
+export interface ModifyTransitGatewayVpcAttachmentRequest {
   /**
    * @public
-   * <p>(Interface and gateway endpoints) A policy to attach to the endpoint that controls access to the service. The policy must
-   *             be in valid JSON format.</p>
+   * <p>The ID of the attachment.</p>
    */
-  PolicyDocument?: string;
+  TransitGatewayAttachmentId: string | undefined;
 
   /**
    * @public
-   * <p>(Gateway endpoint) The IDs of the route tables to associate with the endpoint.</p>
+   * <p>The IDs of one or more subnets to add. You can specify at most one subnet per Availability Zone.</p>
    */
-  AddRouteTableIds?: string[];
+  AddSubnetIds?: string[];
 
   /**
    * @public
-   * <p>(Gateway endpoint) The IDs of the route tables to disassociate from the endpoint.</p>
+   * <p>The IDs of one or more subnets to remove.</p>
    */
-  RemoveRouteTableIds?: string[];
+  RemoveSubnetIds?: string[];
 
   /**
    * @public
-   * <p>(Interface and Gateway Load Balancer endpoints) The IDs of the subnets in which to serve the endpoint.
-   *             For a Gateway Load Balancer endpoint, you can specify only one subnet.</p>
+   * <p>The new VPC attachment options.</p>
    */
-  AddSubnetIds?: string[];
+  Options?: ModifyTransitGatewayVpcAttachmentRequestOptions;
 
   /**
    * @public
-   * <p>(Interface endpoint) The IDs of the subnets from which to remove the endpoint.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  RemoveSubnetIds?: string[];
+  DryRun?: boolean;
+}
 
+/**
+ * @public
+ */
+export interface ModifyTransitGatewayVpcAttachmentResult {
   /**
    * @public
-   * <p>(Interface endpoint) The IDs of the security groups to associate with the endpoint network interfaces.</p>
+   * <p>Information about the modified attachment.</p>
    */
-  AddSecurityGroupIds?: string[];
+  TransitGatewayVpcAttachment?: TransitGatewayVpcAttachment;
+}
 
+/**
+ * @public
+ * <p>Describes a load balancer when creating an Amazon Web Services Verified Access endpoint using the
+ *             <code>load-balancer</code> type.</p>
+ */
+export interface ModifyVerifiedAccessEndpointLoadBalancerOptions {
   /**
    * @public
-   * <p>(Interface endpoint) The IDs of the security groups to disassociate from the endpoint network interfaces.</p>
+   * <p>The IDs of the subnets.</p>
    */
-  RemoveSecurityGroupIds?: string[];
+  SubnetIds?: string[];
 
   /**
    * @public
-   * <p>The IP address type for the endpoint.</p>
+   * <p>The IP protocol.</p>
    */
-  IpAddressType?: IpAddressType;
+  Protocol?: VerifiedAccessEndpointProtocol;
 
   /**
    * @public
-   * <p>The DNS options for the endpoint.</p>
+   * <p>The IP port number.</p>
    */
-  DnsOptions?: DnsOptionsSpecification;
+  Port?: number;
+}
 
+/**
+ * @public
+ * <p>Describes the options when modifying a Verified Access endpoint with the
+ *             <code>network-interface</code> type.</p>
+ */
+export interface ModifyVerifiedAccessEndpointEniOptions {
   /**
    * @public
-   * <p>(Interface endpoint) Indicates whether a private hosted zone is associated with the VPC.</p>
+   * <p>The IP protocol.</p>
    */
-  PrivateDnsEnabled?: boolean;
+  Protocol?: VerifiedAccessEndpointProtocol;
 
   /**
    * @public
-   * <p>The subnet configurations for the endpoint.</p>
+   * <p>The IP port number.</p>
    */
-  SubnetConfigurations?: SubnetConfiguration[];
+  Port?: number;
 }
 
 /**
  * @public
  */
-export interface ModifyVpcEndpointResult {
+export interface ModifyVerifiedAccessEndpointRequest {
   /**
    * @public
-   * <p>Returns <code>true</code> if the request succeeds; otherwise, it returns an error.</p>
+   * <p>The ID of the Verified Access endpoint.</p>
    */
-  Return?: boolean;
-}
+  VerifiedAccessEndpointId: string | undefined;
 
-/**
- * @public
- */
-export interface ModifyVpcEndpointConnectionNotificationRequest {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The ID of the Verified Access group.</p>
    */
-  DryRun?: boolean;
+  VerifiedAccessGroupId?: string;
 
   /**
    * @public
-   * <p>The ID of the notification.</p>
+   * <p>The load balancer details if creating the Verified Access endpoint as
+   *          <code>load-balancer</code>type.</p>
    */
-  ConnectionNotificationId: string | undefined;
+  LoadBalancerOptions?: ModifyVerifiedAccessEndpointLoadBalancerOptions;
 
   /**
    * @public
-   * <p>The ARN for the SNS topic for the notification.</p>
+   * <p>The network interface options.</p>
    */
-  ConnectionNotificationArn?: string;
+  NetworkInterfaceOptions?: ModifyVerifiedAccessEndpointEniOptions;
 
   /**
    * @public
-   * <p>The events for the endpoint. Valid values are <code>Accept</code>,
-   *                 <code>Connect</code>, <code>Delete</code>, and <code>Reject</code>.</p>
+   * <p>A description for the Verified Access endpoint.</p>
    */
-  ConnectionEvents?: string[];
-}
+  Description?: string;
 
-/**
- * @public
- */
-export interface ModifyVpcEndpointConnectionNotificationResult {
   /**
    * @public
-   * <p>Returns <code>true</code> if the request succeeds; otherwise, it returns an error.</p>
+   * <p>A unique, case-sensitive token that you provide to ensure idempotency of your
+   *             modification request. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html">Ensuring Idempotency</a>.</p>
    */
-  ReturnValue?: boolean;
-}
+  ClientToken?: string;
 
-/**
- * @public
- */
-export interface ModifyVpcEndpointServiceConfigurationRequest {
   /**
    * @public
    * <p>Checks whether you have the required permissions for the action, without actually making the request,
@@ -6803,764 +6806,791 @@ export interface ModifyVpcEndpointServiceConfigurationRequest {
    *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
+}
 
+/**
+ * @public
+ */
+export interface ModifyVerifiedAccessEndpointResult {
   /**
    * @public
-   * <p>The ID of the service.</p>
+   * <p>Details about the Verified Access endpoint.</p>
    */
-  ServiceId: string | undefined;
+  VerifiedAccessEndpoint?: VerifiedAccessEndpoint;
+}
 
+/**
+ * @public
+ */
+export interface ModifyVerifiedAccessEndpointPolicyRequest {
   /**
    * @public
-   * <p>(Interface endpoint configuration) The private DNS name to assign to the endpoint service.</p>
+   * <p>The ID of the Verified Access endpoint.</p>
    */
-  PrivateDnsName?: string;
+  VerifiedAccessEndpointId: string | undefined;
 
   /**
    * @public
-   * <p>(Interface endpoint configuration) Removes the private DNS name of the endpoint service.</p>
+   * <p>The status of the Verified Access policy.</p>
    */
-  RemovePrivateDnsName?: boolean;
+  PolicyEnabled?: boolean;
 
   /**
    * @public
-   * <p>Indicates whether requests to create an endpoint to your service must be accepted.</p>
+   * <p>The Verified Access policy document.</p>
    */
-  AcceptanceRequired?: boolean;
+  PolicyDocument?: string;
 
   /**
    * @public
-   * <p>The Amazon Resource Names (ARNs) of Network Load Balancers to add to your service
-   *             configuration.</p>
+   * <p>A unique, case-sensitive token that you provide to ensure idempotency of your
+   *             modification request. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html">Ensuring Idempotency</a>.</p>
    */
-  AddNetworkLoadBalancerArns?: string[];
+  ClientToken?: string;
 
   /**
    * @public
-   * <p>The Amazon Resource Names (ARNs) of Network Load Balancers to remove from your service
-   *             configuration.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  RemoveNetworkLoadBalancerArns?: string[];
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The Amazon Resource Names (ARNs) of Gateway Load Balancers to add to your service
-   *             configuration.</p>
+   * <p>The options for server side encryption.</p>
    */
-  AddGatewayLoadBalancerArns?: string[];
+  SseSpecification?: VerifiedAccessSseSpecificationRequest;
+}
 
+/**
+ * @public
+ */
+export interface ModifyVerifiedAccessEndpointPolicyResult {
   /**
    * @public
-   * <p>The Amazon Resource Names (ARNs) of Gateway Load Balancers to remove from your service
-   *             configuration.</p>
+   * <p>The status of the Verified Access policy.</p>
    */
-  RemoveGatewayLoadBalancerArns?: string[];
+  PolicyEnabled?: boolean;
 
   /**
    * @public
-   * <p>The IP address types to add to your service configuration.</p>
+   * <p>The Verified Access policy document.</p>
    */
-  AddSupportedIpAddressTypes?: string[];
+  PolicyDocument?: string;
 
   /**
    * @public
-   * <p>The IP address types to remove from your service configuration.</p>
+   * <p>The options in use for server side encryption.</p>
    */
-  RemoveSupportedIpAddressTypes?: string[];
+  SseSpecification?: VerifiedAccessSseSpecificationResponse;
 }
 
 /**
  * @public
  */
-export interface ModifyVpcEndpointServiceConfigurationResult {
+export interface ModifyVerifiedAccessGroupRequest {
   /**
    * @public
-   * <p>Returns <code>true</code> if the request succeeds; otherwise, it returns an error.</p>
+   * <p>The ID of the Verified Access group.</p>
    */
-  Return?: boolean;
-}
+  VerifiedAccessGroupId: string | undefined;
 
-/**
- * @public
- */
-export interface ModifyVpcEndpointServicePayerResponsibilityRequest {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The ID of the Verified Access instance.</p>
    */
-  DryRun?: boolean;
+  VerifiedAccessInstanceId?: string;
 
   /**
    * @public
-   * <p>The ID of the service.</p>
+   * <p>A description for the Verified Access group.</p>
    */
-  ServiceId: string | undefined;
+  Description?: string;
 
   /**
    * @public
-   * <p>The entity that is responsible for the endpoint costs. The default is the endpoint owner.
-   *             If you set the payer responsibility to the service owner, you cannot set it back to the
-   *             endpoint owner.</p>
+   * <p>A unique, case-sensitive token that you provide to ensure idempotency of your
+   *             modification request. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html">Ensuring Idempotency</a>.</p>
    */
-  PayerResponsibility: PayerResponsibility | undefined;
+  ClientToken?: string;
+
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
 }
 
 /**
  * @public
  */
-export interface ModifyVpcEndpointServicePayerResponsibilityResult {
+export interface ModifyVerifiedAccessGroupResult {
   /**
    * @public
-   * <p>Returns <code>true</code> if the request succeeds; otherwise, it returns an error.</p>
+   * <p>Details about the Verified Access group.</p>
    */
-  ReturnValue?: boolean;
+  VerifiedAccessGroup?: VerifiedAccessGroup;
 }
 
 /**
  * @public
  */
-export interface ModifyVpcEndpointServicePermissionsRequest {
+export interface ModifyVerifiedAccessGroupPolicyRequest {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The ID of the Verified Access group.</p>
    */
-  DryRun?: boolean;
+  VerifiedAccessGroupId: string | undefined;
 
   /**
    * @public
-   * <p>The ID of the service.</p>
+   * <p>The status of the Verified Access policy.</p>
    */
-  ServiceId: string | undefined;
+  PolicyEnabled?: boolean;
 
   /**
    * @public
-   * <p>The Amazon Resource Names (ARN) of the principals.
-   * 	        Permissions are granted to the principals in this list.
-   * 	        To grant permissions to all principals, specify an asterisk (*).</p>
+   * <p>The Verified Access policy document.</p>
    */
-  AddAllowedPrincipals?: string[];
+  PolicyDocument?: string;
 
   /**
    * @public
-   * <p>The Amazon Resource Names (ARN) of the principals.
-   * 	        Permissions are revoked for principals in this list.</p>
+   * <p>A unique, case-sensitive token that you provide to ensure idempotency of your
+   *             modification request. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html">Ensuring Idempotency</a>.</p>
    */
-  RemoveAllowedPrincipals?: string[];
-}
+  ClientToken?: string;
 
-/**
- * @public
- */
-export interface ModifyVpcEndpointServicePermissionsResult {
   /**
    * @public
-   * <p>Information about the added principals.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  AddedPrincipals?: AddedPrincipal[];
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>Returns <code>true</code> if the request succeeds; otherwise, it returns an error.</p>
+   * <p>The options for server side encryption.</p>
    */
-  ReturnValue?: boolean;
+  SseSpecification?: VerifiedAccessSseSpecificationRequest;
 }
 
 /**
  * @public
- * <p>The VPC peering connection options.</p>
  */
-export interface PeeringConnectionOptionsRequest {
+export interface ModifyVerifiedAccessGroupPolicyResult {
   /**
    * @public
-   * <p>If true, enables a local VPC to resolve public DNS hostnames to private IP addresses
-   *         when queried from instances in the peer VPC.</p>
+   * <p>The status of the Verified Access policy.</p>
    */
-  AllowDnsResolutionFromRemoteVpc?: boolean;
+  PolicyEnabled?: boolean;
 
   /**
    * @public
-   * <p>Deprecated.</p>
+   * <p>The Verified Access policy document.</p>
    */
-  AllowEgressFromLocalClassicLinkToRemoteVpc?: boolean;
+  PolicyDocument?: string;
 
   /**
    * @public
-   * <p>Deprecated.</p>
+   * <p>The options in use for server side encryption.</p>
    */
-  AllowEgressFromLocalVpcToRemoteClassicLink?: boolean;
+  SseSpecification?: VerifiedAccessSseSpecificationResponse;
 }
 
 /**
  * @public
  */
-export interface ModifyVpcPeeringConnectionOptionsRequest {
+export interface ModifyVerifiedAccessInstanceRequest {
   /**
    * @public
-   * <p>The VPC peering connection options for the accepter VPC.</p>
+   * <p>The ID of the Verified Access instance.</p>
    */
-  AccepterPeeringConnectionOptions?: PeeringConnectionOptionsRequest;
+  VerifiedAccessInstanceId: string | undefined;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>A description for the Verified Access instance.</p>
    */
-  DryRun?: boolean;
+  Description?: string;
 
   /**
    * @public
-   * <p>The VPC peering connection options for the requester VPC.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  RequesterPeeringConnectionOptions?: PeeringConnectionOptionsRequest;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The ID of the VPC peering connection.</p>
+   * <p>A unique, case-sensitive token that you provide to ensure idempotency of your
+   *             modification request. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html">Ensuring Idempotency</a>.</p>
    */
-  VpcPeeringConnectionId: string | undefined;
+  ClientToken?: string;
 }
 
 /**
  * @public
- * <p>Describes the VPC peering connection options.</p>
  */
-export interface PeeringConnectionOptions {
+export interface ModifyVerifiedAccessInstanceResult {
   /**
    * @public
-   * <p>If true, the public DNS hostnames of instances in the specified VPC resolve to private
-   *             IP addresses when queried from instances in the peer VPC.</p>
+   * <p>Details about the Verified Access instance.</p>
    */
-  AllowDnsResolutionFromRemoteVpc?: boolean;
+  VerifiedAccessInstance?: VerifiedAccessInstance;
+}
 
+/**
+ * @public
+ * <p>Options for CloudWatch Logs as a logging destination.</p>
+ */
+export interface VerifiedAccessLogCloudWatchLogsDestinationOptions {
   /**
    * @public
-   * <p>Deprecated.</p>
+   * <p>Indicates whether logging is enabled.</p>
    */
-  AllowEgressFromLocalClassicLinkToRemoteVpc?: boolean;
+  Enabled: boolean | undefined;
 
   /**
    * @public
-   * <p>Deprecated.</p>
+   * <p>The ID of the CloudWatch Logs log group.</p>
    */
-  AllowEgressFromLocalVpcToRemoteClassicLink?: boolean;
+  LogGroup?: string;
 }
 
 /**
  * @public
+ * <p>Describes Amazon Kinesis Data Firehose logging options.</p>
  */
-export interface ModifyVpcPeeringConnectionOptionsResult {
+export interface VerifiedAccessLogKinesisDataFirehoseDestinationOptions {
   /**
    * @public
-   * <p>Information about the VPC peering connection options for the accepter VPC.</p>
+   * <p>Indicates whether logging is enabled.</p>
    */
-  AccepterPeeringConnectionOptions?: PeeringConnectionOptions;
+  Enabled: boolean | undefined;
 
   /**
    * @public
-   * <p>Information about the VPC peering connection options for the requester VPC.</p>
+   * <p>The ID of the delivery stream.</p>
    */
-  RequesterPeeringConnectionOptions?: PeeringConnectionOptions;
+  DeliveryStream?: string;
 }
 
 /**
  * @public
- * @enum
- */
-export const VpcTenancy = {
-  default: "default",
-} as const;
-
-/**
- * @public
- */
-export type VpcTenancy = (typeof VpcTenancy)[keyof typeof VpcTenancy];
-
-/**
- * @public
+ * <p>Options for Amazon S3 as a logging destination.</p>
  */
-export interface ModifyVpcTenancyRequest {
+export interface VerifiedAccessLogS3DestinationOptions {
   /**
    * @public
-   * <p>The ID of the VPC.</p>
+   * <p>Indicates whether logging is enabled.</p>
    */
-  VpcId: string | undefined;
+  Enabled: boolean | undefined;
 
   /**
    * @public
-   * <p>The instance tenancy attribute for the VPC. </p>
+   * <p>The bucket name.</p>
    */
-  InstanceTenancy: VpcTenancy | undefined;
+  BucketName?: string;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The bucket prefix.</p>
    */
-  DryRun?: boolean;
-}
+  Prefix?: string;
 
-/**
- * @public
- */
-export interface ModifyVpcTenancyResult {
   /**
    * @public
-   * <p>Returns <code>true</code> if the request succeeds; otherwise, returns an
-   *             error.</p>
+   * <p>The ID of the Amazon Web Services account that owns the Amazon S3 bucket.</p>
    */
-  ReturnValue?: boolean;
+  BucketOwner?: string;
 }
 
 /**
  * @public
+ * <p>Options for Verified Access logs.</p>
  */
-export interface ModifyVpnConnectionRequest {
-  /**
-   * @public
-   * <p>The ID of the VPN connection.</p>
-   */
-  VpnConnectionId: string | undefined;
-
+export interface VerifiedAccessLogOptions {
   /**
    * @public
-   * <p>The ID of the transit gateway.</p>
+   * <p>Sends Verified Access logs to Amazon S3.</p>
    */
-  TransitGatewayId?: string;
+  S3?: VerifiedAccessLogS3DestinationOptions;
 
   /**
    * @public
-   * <p>The ID of the customer gateway at your end of the VPN connection.</p>
+   * <p>Sends Verified Access logs to CloudWatch Logs.</p>
    */
-  CustomerGatewayId?: string;
+  CloudWatchLogs?: VerifiedAccessLogCloudWatchLogsDestinationOptions;
 
   /**
    * @public
-   * <p>The ID of the virtual private gateway at the Amazon Web Services side of the VPN
-   *             connection.</p>
+   * <p>Sends Verified Access logs to Kinesis.</p>
    */
-  VpnGatewayId?: string;
+  KinesisDataFirehose?: VerifiedAccessLogKinesisDataFirehoseDestinationOptions;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually
-   *             making the request, and provides an error response. If you have the required
-   *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
-   *                 <code>UnauthorizedOperation</code>.</p>
+   * <p>The logging version.</p>
+   *          <p>Valid values: <code>ocsf-0.1</code> | <code>ocsf-1.0.0-rc.2</code>
+   *          </p>
    */
-  DryRun?: boolean;
-}
+  LogVersion?: string;
 
-/**
- * @public
- */
-export interface ModifyVpnConnectionResult {
   /**
    * @public
-   * <p>Information about the VPN connection.</p>
+   * <p>Indicates whether to include trust data sent by trust providers in the logs.</p>
    */
-  VpnConnection?: VpnConnection;
+  IncludeTrustContext?: boolean;
 }
 
 /**
  * @public
  */
-export interface ModifyVpnConnectionOptionsRequest {
-  /**
-   * @public
-   * <p>The ID of the Site-to-Site VPN connection. </p>
-   */
-  VpnConnectionId: string | undefined;
-
+export interface ModifyVerifiedAccessInstanceLoggingConfigurationRequest {
   /**
    * @public
-   * <p>The IPv4 CIDR on the customer gateway (on-premises) side of the VPN connection.</p>
-   *          <p>Default: <code>0.0.0.0/0</code>
-   *          </p>
+   * <p>The ID of the Verified Access instance.</p>
    */
-  LocalIpv4NetworkCidr?: string;
+  VerifiedAccessInstanceId: string | undefined;
 
   /**
    * @public
-   * <p>The IPv4 CIDR on the Amazon Web Services side of the VPN connection.</p>
-   *          <p>Default: <code>0.0.0.0/0</code>
-   *          </p>
+   * <p>The configuration options for Verified Access instances.</p>
    */
-  RemoteIpv4NetworkCidr?: string;
+  AccessLogs: VerifiedAccessLogOptions | undefined;
 
   /**
    * @public
-   * <p>The IPv6 CIDR on the customer gateway (on-premises) side of the VPN connection.</p>
-   *          <p>Default: <code>::/0</code>
-   *          </p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  LocalIpv6NetworkCidr?: string;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The IPv6 CIDR on the Amazon Web Services side of the VPN connection.</p>
-   *          <p>Default: <code>::/0</code>
-   *          </p>
+   * <p>A unique, case-sensitive token that you provide to ensure idempotency of your
+   *             modification request. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html">Ensuring Idempotency</a>.</p>
    */
-  RemoteIpv6NetworkCidr?: string;
+  ClientToken?: string;
+}
 
+/**
+ * @public
+ */
+export interface ModifyVerifiedAccessInstanceLoggingConfigurationResult {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The logging configuration for the Verified Access instance.</p>
    */
-  DryRun?: boolean;
+  LoggingConfiguration?: VerifiedAccessInstanceLoggingConfiguration;
 }
 
 /**
  * @public
+ * <p>Modifies the configuration of the specified device-based Amazon Web Services Verified Access trust provider.</p>
  */
-export interface ModifyVpnConnectionOptionsResult {
+export interface ModifyVerifiedAccessTrustProviderDeviceOptions {
   /**
    * @public
-   * <p>Information about the VPN connection.</p>
+   * <p> The URL Amazon Web Services Verified Access will use to verify the authenticity of the device tokens. </p>
    */
-  VpnConnection?: VpnConnection;
+  PublicSigningKeyUrl?: string;
 }
 
 /**
  * @public
+ * <p>Options for an OpenID Connect-compatible user-identity trust provider.</p>
  */
-export interface ModifyVpnTunnelCertificateRequest {
+export interface ModifyVerifiedAccessTrustProviderOidcOptions {
   /**
    * @public
-   * <p>The ID of the Amazon Web Services Site-to-Site VPN connection.</p>
+   * <p>The OIDC issuer.</p>
    */
-  VpnConnectionId: string | undefined;
+  Issuer?: string;
 
   /**
    * @public
-   * <p>The external IP address of the VPN tunnel.</p>
+   * <p>The OIDC authorization endpoint.</p>
    */
-  VpnTunnelOutsideIpAddress: string | undefined;
+  AuthorizationEndpoint?: string;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually
-   *             making the request, and provides an error response. If you have the required
-   *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
-   *                 <code>UnauthorizedOperation</code>.</p>
+   * <p>The OIDC token endpoint.</p>
+   */
+  TokenEndpoint?: string;
+
+  /**
+   * @public
+   * <p>The OIDC user info endpoint.</p>
+   */
+  UserInfoEndpoint?: string;
+
+  /**
+   * @public
+   * <p>The client identifier.</p>
+   */
+  ClientId?: string;
+
+  /**
+   * @public
+   * <p>The client secret.</p>
+   */
+  ClientSecret?: string;
+
+  /**
+   * @public
+   * <p>OpenID Connect (OIDC) scopes are used by an application during authentication to authorize access to a user's details. Each scope returns a specific set of user attributes.</p>
+   */
+  Scope?: string;
+}
+
+/**
+ * @public
+ */
+export interface ModifyVerifiedAccessTrustProviderRequest {
+  /**
+   * @public
+   * <p>The ID of the Verified Access trust provider.</p>
+   */
+  VerifiedAccessTrustProviderId: string | undefined;
+
+  /**
+   * @public
+   * <p>The options for an OpenID Connect-compatible user-identity trust provider.</p>
+   */
+  OidcOptions?: ModifyVerifiedAccessTrustProviderOidcOptions;
+
+  /**
+   * @public
+   * <p>The options for a device-based trust provider. This parameter is required when the
+   *          provider type is <code>device</code>.</p>
+   */
+  DeviceOptions?: ModifyVerifiedAccessTrustProviderDeviceOptions;
+
+  /**
+   * @public
+   * <p>A description for the Verified Access trust provider.</p>
+   */
+  Description?: string;
+
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
+
+  /**
+   * @public
+   * <p>A unique, case-sensitive token that you provide to ensure idempotency of your
+   *             modification request. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html">Ensuring Idempotency</a>.</p>
+   */
+  ClientToken?: string;
+
+  /**
+   * @public
+   * <p>The options for server side encryption.</p>
+   */
+  SseSpecification?: VerifiedAccessSseSpecificationRequest;
 }
 
 /**
  * @public
  */
-export interface ModifyVpnTunnelCertificateResult {
+export interface ModifyVerifiedAccessTrustProviderResult {
   /**
    * @public
-   * <p>Information about the VPN connection.</p>
+   * <p>Details about the Verified Access trust provider.</p>
    */
-  VpnConnection?: VpnConnection;
+  VerifiedAccessTrustProvider?: VerifiedAccessTrustProvider;
 }
 
 /**
  * @public
- * <p>The Amazon Web Services Site-to-Site VPN tunnel options to modify.</p>
  */
-export interface ModifyVpnTunnelOptionsSpecification {
+export interface ModifyVolumeRequest {
   /**
    * @public
-   * <p>The range of inside IPv4 addresses for the tunnel. Any specified CIDR blocks must be
-   *             unique across all VPN connections that use the same virtual private gateway. </p>
-   *          <p>Constraints: A size /30 CIDR block from the <code>169.254.0.0/16</code> range. The
-   *             following CIDR blocks are reserved and cannot be used:</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
+
+  /**
+   * @public
+   * <p>The ID of the volume.</p>
+   */
+  VolumeId: string | undefined;
+
+  /**
+   * @public
+   * <p>The target size of the volume, in GiB. The target volume size must be greater than or
+   *       equal to the existing size of the volume.</p>
+   *          <p>The following are the supported volumes sizes for each volume type:</p>
    *          <ul>
    *             <li>
    *                <p>
-   *                   <code>169.254.0.0/30</code>
-   *                </p>
+   *                   <code>gp2</code> and <code>gp3</code>: 1-16,384</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>169.254.1.0/30</code>
-   *                </p>
+   *                   <code>io1</code> and <code>io2</code>: 4-16,384</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>169.254.2.0/30</code>
-   *                </p>
+   *                   <code>st1</code> and <code>sc1</code>: 125-16,384</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>169.254.3.0/30</code>
-   *                </p>
+   *                   <code>standard</code>: 1-1,024</p>
    *             </li>
+   *          </ul>
+   *          <p>Default: The existing size is retained.</p>
+   */
+  Size?: number;
+
+  /**
+   * @public
+   * <p>The target EBS volume type of the volume. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSVolumeTypes.html">Amazon EBS volume types</a> in the <i>Amazon Elastic Compute Cloud User Guide</i>.</p>
+   *          <p>Default: The existing type is retained.</p>
+   */
+  VolumeType?: VolumeType;
+
+  /**
+   * @public
+   * <p>The target IOPS rate of the volume. This parameter is valid only for <code>gp3</code>, <code>io1</code>, and <code>io2</code> volumes.</p>
+   *          <p>The following are the supported values for each volume type:</p>
+   *          <ul>
    *             <li>
    *                <p>
-   *                   <code>169.254.4.0/30</code>
-   *                </p>
+   *                   <code>gp3</code>: 3,000-16,000 IOPS</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>169.254.5.0/30</code>
-   *                </p>
+   *                   <code>io1</code>: 100-64,000 IOPS</p>
    *             </li>
    *             <li>
    *                <p>
-   *                   <code>169.254.169.252/30</code>
-   *                </p>
+   *                   <code>io2</code>: 100-64,000 IOPS</p>
    *             </li>
    *          </ul>
+   *          <p>Default: The existing value is retained if you keep the same volume type. If you change
+   *       the volume type to <code>io1</code>, <code>io2</code>, or <code>gp3</code>, the default is 3,000.</p>
    */
-  TunnelInsideCidr?: string;
+  Iops?: number;
 
   /**
    * @public
-   * <p>The range of inside IPv6 addresses for the tunnel. Any specified CIDR blocks must be
-   *             unique across all VPN connections that use the same transit gateway.</p>
-   *          <p>Constraints: A size /126 CIDR block from the local <code>fd00::/8</code> range.</p>
+   * <p>The target throughput of the volume, in MiB/s. This parameter is valid only for <code>gp3</code> volumes.
+   *       The maximum value is 1,000.</p>
+   *          <p>Default: The existing value is retained if the source and target volume type is <code>gp3</code>.
+   *       Otherwise, the default value is 125.</p>
+   *          <p>Valid Range: Minimum value of 125. Maximum value of 1000.</p>
    */
-  TunnelInsideIpv6Cidr?: string;
+  Throughput?: number;
 
   /**
    * @public
-   * <p>The pre-shared key (PSK) to establish initial authentication between the virtual
-   *             private gateway and the customer gateway.</p>
-   *          <p>Constraints: Allowed characters are alphanumeric characters, periods (.), and
-   *             underscores (_). Must be between 8 and 64 characters in length and cannot start with
-   *             zero (0).</p>
+   * <p>Specifies whether to enable Amazon EBS Multi-Attach. If you enable Multi-Attach, you can attach the
+   * 		volume to up to 16 <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html#ec2-nitro-instances">
+   * 			Nitro-based instances</a> in the same Availability Zone. This parameter is
+   * 		supported with <code>io1</code> and <code>io2</code> volumes only. For more information, see
+   * 		<a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-volumes-multi.html">
+   * 			Amazon EBS Multi-Attach</a> in the <i>Amazon Elastic Compute Cloud User Guide</i>.</p>
    */
-  PreSharedKey?: string;
+  MultiAttachEnabled?: boolean;
+}
 
+/**
+ * @public
+ */
+export interface ModifyVolumeResult {
   /**
    * @public
-   * <p>The lifetime for phase 1 of the IKE negotiation, in seconds.</p>
-   *          <p>Constraints: A value between 900 and 28,800.</p>
-   *          <p>Default: <code>28800</code>
-   *          </p>
+   * <p>Information about the volume modification.</p>
    */
-  Phase1LifetimeSeconds?: number;
+  VolumeModification?: VolumeModification;
+}
 
+/**
+ * @public
+ */
+export interface ModifyVolumeAttributeRequest {
   /**
    * @public
-   * <p>The lifetime for phase 2 of the IKE negotiation, in seconds.</p>
-   *          <p>Constraints: A value between 900 and 3,600. The value must be less than the value for
-   *                 <code>Phase1LifetimeSeconds</code>.</p>
-   *          <p>Default: <code>3600</code>
-   *          </p>
+   * <p>Indicates whether the volume should be auto-enabled for I/O operations.</p>
    */
-  Phase2LifetimeSeconds?: number;
+  AutoEnableIO?: AttributeBooleanValue;
 
   /**
    * @public
-   * <p>The margin time, in seconds, before the phase 2 lifetime expires, during which the
-   *                 Amazon Web Services side of the VPN connection performs an IKE rekey. The exact time
-   *             of the rekey is randomly selected based on the value for
-   *                 <code>RekeyFuzzPercentage</code>.</p>
-   *          <p>Constraints: A value between 60 and half of <code>Phase2LifetimeSeconds</code>.</p>
-   *          <p>Default: <code>540</code>
-   *          </p>
+   * <p>The ID of the volume.</p>
    */
-  RekeyMarginTimeSeconds?: number;
+  VolumeId: string | undefined;
 
   /**
    * @public
-   * <p>The percentage of the rekey window (determined by <code>RekeyMarginTimeSeconds</code>)
-   *             during which the rekey time is randomly selected.</p>
-   *          <p>Constraints: A value between 0 and 100.</p>
-   *          <p>Default: <code>100</code>
-   *          </p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  RekeyFuzzPercentage?: number;
+  DryRun?: boolean;
+}
 
+/**
+ * @public
+ */
+export interface ModifyVpcAttributeRequest {
   /**
    * @public
-   * <p>The number of packets in an IKE replay window.</p>
-   *          <p>Constraints: A value between 64 and 2048.</p>
-   *          <p>Default: <code>1024</code>
-   *          </p>
+   * <p>Indicates whether the instances launched in the VPC get DNS hostnames. If enabled, instances in the VPC get DNS hostnames; otherwise, they do not.</p>
+   *          <p>You cannot modify the DNS resolution and DNS hostnames attributes in the same request. Use separate requests for each attribute. You can only enable DNS hostnames if you've enabled DNS support.</p>
    */
-  ReplayWindowSize?: number;
+  EnableDnsHostnames?: AttributeBooleanValue;
 
   /**
    * @public
-   * <p>The number of seconds after which a DPD timeout occurs. A DPD timeout of 40 seconds means that the VPN endpoint will consider the peer dead 30 seconds after the first failed keep-alive.</p>
-   *          <p>Constraints: A value greater than or equal to 30.</p>
-   *          <p>Default: <code>40</code>
-   *          </p>
+   * <p>Indicates whether the DNS resolution is supported for the VPC. If enabled, queries to
+   * 			the Amazon provided DNS server at the 169.254.169.253 IP address, or the reserved IP
+   * 			address at the base of the VPC network range "plus two" succeed. If disabled, the Amazon
+   * 			provided DNS service in the VPC that resolves public DNS hostnames to IP addresses is
+   * 			not enabled.</p>
+   *          <p>You cannot modify the DNS resolution and DNS hostnames attributes in the same request. Use separate requests for each attribute.</p>
    */
-  DPDTimeoutSeconds?: number;
+  EnableDnsSupport?: AttributeBooleanValue;
 
   /**
    * @public
-   * <p>The action to take after DPD timeout occurs. Specify <code>restart</code> to restart
-   *             the IKE initiation. Specify <code>clear</code> to end the IKE session.</p>
-   *          <p>Valid Values: <code>clear</code> | <code>none</code> | <code>restart</code>
-   *          </p>
-   *          <p>Default: <code>clear</code>
-   *          </p>
+   * <p>The ID of the VPC.</p>
    */
-  DPDTimeoutAction?: string;
+  VpcId: string | undefined;
 
   /**
    * @public
-   * <p>One or more encryption algorithms that are permitted for the VPN tunnel for phase 1
-   *             IKE negotiations.</p>
-   *          <p>Valid values: <code>AES128</code> | <code>AES256</code> | <code>AES128-GCM-16</code> |
-   *                 <code>AES256-GCM-16</code>
-   *          </p>
+   * <p>Indicates whether Network Address Usage metrics are enabled for your VPC.</p>
    */
-  Phase1EncryptionAlgorithms?: Phase1EncryptionAlgorithmsRequestListValue[];
+  EnableNetworkAddressUsageMetrics?: AttributeBooleanValue;
+}
 
+/**
+ * @public
+ */
+export interface ModifyVpcEndpointRequest {
   /**
    * @public
-   * <p>One or more encryption algorithms that are permitted for the VPN tunnel for phase 2
-   *             IKE negotiations.</p>
-   *          <p>Valid values: <code>AES128</code> | <code>AES256</code> | <code>AES128-GCM-16</code> |
-   *                 <code>AES256-GCM-16</code>
-   *          </p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  Phase2EncryptionAlgorithms?: Phase2EncryptionAlgorithmsRequestListValue[];
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>One or more integrity algorithms that are permitted for the VPN tunnel for phase 1 IKE
-   *             negotiations.</p>
-   *          <p>Valid values: <code>SHA1</code> | <code>SHA2-256</code> | <code>SHA2-384</code> |
-   *                 <code>SHA2-512</code>
-   *          </p>
+   * <p>The ID of the endpoint.</p>
    */
-  Phase1IntegrityAlgorithms?: Phase1IntegrityAlgorithmsRequestListValue[];
+  VpcEndpointId: string | undefined;
 
   /**
    * @public
-   * <p>One or more integrity algorithms that are permitted for the VPN tunnel for phase 2 IKE
-   *             negotiations.</p>
-   *          <p>Valid values: <code>SHA1</code> | <code>SHA2-256</code> | <code>SHA2-384</code> |
-   *                 <code>SHA2-512</code>
-   *          </p>
+   * <p>(Gateway endpoint) Specify <code>true</code> to reset the policy document to the
+   *             default policy. The default policy allows full access to the service.</p>
    */
-  Phase2IntegrityAlgorithms?: Phase2IntegrityAlgorithmsRequestListValue[];
+  ResetPolicy?: boolean;
 
   /**
    * @public
-   * <p>One or more Diffie-Hellman group numbers that are permitted for the VPN tunnel for
-   *             phase 1 IKE negotiations.</p>
-   *          <p>Valid values: <code>2</code> | <code>14</code> | <code>15</code> | <code>16</code> |
-   *                 <code>17</code> | <code>18</code> | <code>19</code> | <code>20</code> |
-   *                 <code>21</code> | <code>22</code> | <code>23</code> | <code>24</code>
-   *          </p>
+   * <p>(Interface and gateway endpoints) A policy to attach to the endpoint that controls access to the service. The policy must
+   *             be in valid JSON format.</p>
    */
-  Phase1DHGroupNumbers?: Phase1DHGroupNumbersRequestListValue[];
+  PolicyDocument?: string;
 
   /**
    * @public
-   * <p>One or more Diffie-Hellman group numbers that are permitted for the VPN tunnel for
-   *             phase 2 IKE negotiations.</p>
-   *          <p>Valid values: <code>2</code> | <code>5</code> | <code>14</code> | <code>15</code> |
-   *                 <code>16</code> | <code>17</code> | <code>18</code> | <code>19</code> |
-   *                 <code>20</code> | <code>21</code> | <code>22</code> | <code>23</code> |
-   *                 <code>24</code>
-   *          </p>
+   * <p>(Gateway endpoint) The IDs of the route tables to associate with the endpoint.</p>
    */
-  Phase2DHGroupNumbers?: Phase2DHGroupNumbersRequestListValue[];
+  AddRouteTableIds?: string[];
 
   /**
    * @public
-   * <p>The IKE versions that are permitted for the VPN tunnel.</p>
-   *          <p>Valid values: <code>ikev1</code> | <code>ikev2</code>
-   *          </p>
+   * <p>(Gateway endpoint) The IDs of the route tables to disassociate from the endpoint.</p>
    */
-  IKEVersions?: IKEVersionsRequestListValue[];
+  RemoveRouteTableIds?: string[];
 
   /**
    * @public
-   * <p>The action to take when the establishing the tunnel for the VPN connection. By
-   *             default, your customer gateway device must initiate the IKE negotiation and bring up the
-   *             tunnel. Specify <code>start</code> for Amazon Web Services to initiate the IKE
-   *             negotiation.</p>
-   *          <p>Valid Values: <code>add</code> | <code>start</code>
-   *          </p>
-   *          <p>Default: <code>add</code>
-   *          </p>
+   * <p>(Interface and Gateway Load Balancer endpoints) The IDs of the subnets in which to serve the endpoint.
+   *             For a Gateway Load Balancer endpoint, you can specify only one subnet.</p>
    */
-  StartupAction?: string;
+  AddSubnetIds?: string[];
 
   /**
    * @public
-   * <p>Options for logging VPN tunnel activity.</p>
+   * <p>(Interface endpoint) The IDs of the subnets from which to remove the endpoint.</p>
    */
-  LogOptions?: VpnTunnelLogOptionsSpecification;
+  RemoveSubnetIds?: string[];
 
   /**
    * @public
-   * <p>Turn on or off tunnel endpoint lifecycle control feature.</p>
+   * <p>(Interface endpoint) The IDs of the security groups to associate with the endpoint network interfaces.</p>
    */
-  EnableTunnelLifecycleControl?: boolean;
-}
+  AddSecurityGroupIds?: string[];
 
-/**
- * @public
- */
-export interface ModifyVpnTunnelOptionsRequest {
   /**
    * @public
-   * <p>The ID of the Amazon Web Services Site-to-Site VPN connection.</p>
+   * <p>(Interface endpoint) The IDs of the security groups to disassociate from the endpoint network interfaces.</p>
    */
-  VpnConnectionId: string | undefined;
+  RemoveSecurityGroupIds?: string[];
 
   /**
    * @public
-   * <p>The external IP address of the VPN tunnel.</p>
+   * <p>The IP address type for the endpoint.</p>
    */
-  VpnTunnelOutsideIpAddress: string | undefined;
+  IpAddressType?: IpAddressType;
 
   /**
    * @public
-   * <p>The tunnel options to modify.</p>
+   * <p>The DNS options for the endpoint.</p>
    */
-  TunnelOptions: ModifyVpnTunnelOptionsSpecification | undefined;
+  DnsOptions?: DnsOptionsSpecification;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually
-   *             making the request, and provides an error response. If you have the required
-   *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
-   *                 <code>UnauthorizedOperation</code>.</p>
+   * <p>(Interface endpoint) Indicates whether a private hosted zone is associated with the VPC.</p>
    */
-  DryRun?: boolean;
+  PrivateDnsEnabled?: boolean;
 
   /**
    * @public
-   * <p>Choose whether or not to trigger immediate tunnel replacement. This is only applicable when turning on or off <code>EnableTunnelLifecycleControl</code>.</p>
-   *          <p>Valid values: <code>True</code> | <code>False</code>
-   *          </p>
+   * <p>The subnet configurations for the endpoint.</p>
    */
-  SkipTunnelReplacement?: boolean;
+  SubnetConfigurations?: SubnetConfiguration[];
 }
 
 /**
  * @public
  */
-export interface ModifyVpnTunnelOptionsResult {
+export interface ModifyVpcEndpointResult {
   /**
    * @public
-   * <p>Information about the VPN connection.</p>
+   * <p>Returns <code>true</code> if the request succeeds; otherwise, it returns an error.</p>
    */
-  VpnConnection?: VpnConnection;
+  Return?: boolean;
 }
 
 /**
  * @public
  */
-export interface MonitorInstancesRequest {
-  /**
-   * @public
-   * <p>The IDs of the instances.</p>
-   */
-  InstanceIds: string[] | undefined;
-
+export interface ModifyVpcEndpointConnectionNotificationRequest {
   /**
    * @public
    * <p>Checks whether you have the required permissions for the action, without actually making the request,
@@ -7568,41 +7598,42 @@ export interface MonitorInstancesRequest {
    *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
-}
 
-/**
- * @public
- * <p>Describes the monitoring of an instance.</p>
- */
-export interface InstanceMonitoring {
   /**
    * @public
-   * <p>The ID of the instance.</p>
+   * <p>The ID of the notification.</p>
    */
-  InstanceId?: string;
+  ConnectionNotificationId: string | undefined;
 
   /**
    * @public
-   * <p>The monitoring for the instance.</p>
+   * <p>The ARN for the SNS topic for the notification.</p>
    */
-  Monitoring?: Monitoring;
+  ConnectionNotificationArn?: string;
+
+  /**
+   * @public
+   * <p>The events for the endpoint. Valid values are <code>Accept</code>,
+   *                 <code>Connect</code>, <code>Delete</code>, and <code>Reject</code>.</p>
+   */
+  ConnectionEvents?: string[];
 }
 
 /**
  * @public
  */
-export interface MonitorInstancesResult {
+export interface ModifyVpcEndpointConnectionNotificationResult {
   /**
    * @public
-   * <p>The monitoring information.</p>
+   * <p>Returns <code>true</code> if the request succeeds; otherwise, it returns an error.</p>
    */
-  InstanceMonitorings?: InstanceMonitoring[];
+  ReturnValue?: boolean;
 }
 
 /**
  * @public
  */
-export interface MoveAddressToVpcRequest {
+export interface ModifyVpcEndpointServiceConfigurationRequest {
   /**
    * @public
    * <p>Checks whether you have the required permissions for the action, without actually making the request,
@@ -7613,137 +7644,122 @@ export interface MoveAddressToVpcRequest {
 
   /**
    * @public
-   * <p>The Elastic IP address.</p>
+   * <p>The ID of the service.</p>
    */
-  PublicIp: string | undefined;
-}
+  ServiceId: string | undefined;
 
-/**
- * @public
- * @enum
- */
-export const Status = {
-  inClassic: "InClassic",
-  inVpc: "InVpc",
-  moveInProgress: "MoveInProgress",
-} as const;
+  /**
+   * @public
+   * <p>(Interface endpoint configuration) The private DNS name to assign to the endpoint service.</p>
+   */
+  PrivateDnsName?: string;
 
-/**
- * @public
- */
-export type Status = (typeof Status)[keyof typeof Status];
+  /**
+   * @public
+   * <p>(Interface endpoint configuration) Removes the private DNS name of the endpoint service.</p>
+   */
+  RemovePrivateDnsName?: boolean;
 
-/**
- * @public
- */
-export interface MoveAddressToVpcResult {
   /**
    * @public
-   * <p>The allocation ID for the Elastic IP address.</p>
+   * <p>Indicates whether requests to create an endpoint to your service must be accepted.</p>
    */
-  AllocationId?: string;
+  AcceptanceRequired?: boolean;
 
   /**
    * @public
-   * <p>The status of the move of the IP address.</p>
+   * <p>The Amazon Resource Names (ARNs) of Network Load Balancers to add to your service
+   *             configuration.</p>
    */
-  Status?: Status;
-}
+  AddNetworkLoadBalancerArns?: string[];
 
-/**
- * @public
- */
-export interface MoveByoipCidrToIpamRequest {
   /**
    * @public
-   * <p>A check for whether you have the required permissions for the action without actually making the request
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The Amazon Resource Names (ARNs) of Network Load Balancers to remove from your service
+   *             configuration.</p>
    */
-  DryRun?: boolean;
+  RemoveNetworkLoadBalancerArns?: string[];
 
   /**
    * @public
-   * <p>The BYOIP CIDR.</p>
+   * <p>The Amazon Resource Names (ARNs) of Gateway Load Balancers to add to your service
+   *             configuration.</p>
    */
-  Cidr: string | undefined;
+  AddGatewayLoadBalancerArns?: string[];
 
   /**
    * @public
-   * <p>The IPAM pool ID.</p>
+   * <p>The Amazon Resource Names (ARNs) of Gateway Load Balancers to remove from your service
+   *             configuration.</p>
    */
-  IpamPoolId: string | undefined;
+  RemoveGatewayLoadBalancerArns?: string[];
 
   /**
    * @public
-   * <p>The Amazon Web Services account ID of the owner of the IPAM pool.</p>
+   * <p>The IP address types to add to your service configuration.</p>
    */
-  IpamPoolOwner: string | undefined;
-}
+  AddSupportedIpAddressTypes?: string[];
 
-/**
- * @public
- */
-export interface MoveByoipCidrToIpamResult {
   /**
    * @public
-   * <p>The BYOIP CIDR.</p>
+   * <p>The IP address types to remove from your service configuration.</p>
    */
-  ByoipCidr?: ByoipCidr;
+  RemoveSupportedIpAddressTypes?: string[];
 }
 
 /**
  * @public
- * <p>Provides authorization for Amazon to bring a specific IP address range to a specific
- *           Amazon Web Services account using bring your own IP addresses (BYOIP). For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-byoip.html#prepare-for-byoip">Configuring your BYOIP address range</a> in the <i>Amazon Elastic Compute Cloud User Guide</i>.</p>
  */
-export interface CidrAuthorizationContext {
-  /**
-   * @public
-   * <p>The plain-text authorization message for the prefix and account.</p>
-   */
-  Message: string | undefined;
-
+export interface ModifyVpcEndpointServiceConfigurationResult {
   /**
    * @public
-   * <p>The signed authorization message for the prefix and account.</p>
+   * <p>Returns <code>true</code> if the request succeeds; otherwise, it returns an error.</p>
    */
-  Signature: string | undefined;
+  Return?: boolean;
 }
 
 /**
  * @public
  */
-export interface ProvisionByoipCidrRequest {
+export interface ModifyVpcEndpointServicePayerResponsibilityRequest {
   /**
    * @public
-   * <p>The public IPv4 or IPv6 address range, in CIDR notation. The most specific IPv4 prefix that you can
-   *          specify is /24. The most specific IPv6 prefix you can specify is /56. The address range cannot overlap with another address range that you've
-   *          brought to this or another Region.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  Cidr: string | undefined;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>A signed document that proves that you are authorized to bring the specified IP address
-   *          range to Amazon using BYOIP.</p>
+   * <p>The ID of the service.</p>
    */
-  CidrAuthorizationContext?: CidrAuthorizationContext;
+  ServiceId: string | undefined;
 
   /**
    * @public
-   * <p>(IPv6 only) Indicate whether the address range will be publicly advertised to the
-   *             internet.</p>
-   *          <p>Default: true</p>
+   * <p>The entity that is responsible for the endpoint costs. The default is the endpoint owner.
+   *             If you set the payer responsibility to the service owner, you cannot set it back to the
+   *             endpoint owner.</p>
    */
-  PubliclyAdvertisable?: boolean;
+  PayerResponsibility: PayerResponsibility | undefined;
+}
 
+/**
+ * @public
+ */
+export interface ModifyVpcEndpointServicePayerResponsibilityResult {
   /**
    * @public
-   * <p>A description for the address range and the address pool.</p>
+   * <p>Returns <code>true</code> if the request succeeds; otherwise, it returns an error.</p>
    */
-  Description?: string;
+  ReturnValue?: boolean;
+}
 
+/**
+ * @public
+ */
+export interface ModifyVpcEndpointServicePermissionsRequest {
   /**
    * @public
    * <p>Checks whether you have the required permissions for the action, without actually making the request,
@@ -7754,107 +7770,81 @@ export interface ProvisionByoipCidrRequest {
 
   /**
    * @public
-   * <p>The tags to apply to the address pool.</p>
+   * <p>The ID of the service.</p>
    */
-  PoolTagSpecifications?: TagSpecification[];
+  ServiceId: string | undefined;
 
   /**
    * @public
-   * <p>Reserved.</p>
+   * <p>The Amazon Resource Names (ARN) of the principals.
+   * 	        Permissions are granted to the principals in this list.
+   * 	        To grant permissions to all principals, specify an asterisk (*).</p>
    */
-  MultiRegion?: boolean;
-}
+  AddAllowedPrincipals?: string[];
 
-/**
- * @public
- */
-export interface ProvisionByoipCidrResult {
   /**
    * @public
-   * <p>Information about the address range.</p>
+   * <p>The Amazon Resource Names (ARN) of the principals.
+   * 	        Permissions are revoked for principals in this list.</p>
    */
-  ByoipCidr?: ByoipCidr;
+  RemoveAllowedPrincipals?: string[];
 }
 
 /**
  * @public
- * <p>A signed document that proves that you are authorized to bring the specified IP address range to Amazon using BYOIP.</p>
  */
-export interface IpamCidrAuthorizationContext {
+export interface ModifyVpcEndpointServicePermissionsResult {
   /**
    * @public
-   * <p>The plain-text authorization message for the prefix and account.</p>
+   * <p>Information about the added principals.</p>
    */
-  Message?: string;
+  AddedPrincipals?: AddedPrincipal[];
 
   /**
    * @public
-   * <p>The signed authorization message for the prefix and account.</p>
+   * <p>Returns <code>true</code> if the request succeeds; otherwise, it returns an error.</p>
    */
-  Signature?: string;
+  ReturnValue?: boolean;
 }
 
 /**
  * @public
+ * <p>The VPC peering connection options.</p>
  */
-export interface ProvisionIpamPoolCidrRequest {
-  /**
-   * @public
-   * <p>A check for whether you have the required permissions for the action without actually making the request
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-   */
-  DryRun?: boolean;
-
-  /**
-   * @public
-   * <p>The ID of the IPAM pool to which you want to assign a CIDR.</p>
-   */
-  IpamPoolId: string | undefined;
-
-  /**
-   * @public
-   * <p>The CIDR you want to assign to the IPAM pool. Either "NetmaskLength" or "Cidr" is required. This value will be null if you specify "NetmaskLength" and will be filled in during the provisioning process.</p>
-   */
-  Cidr?: string;
-
+export interface PeeringConnectionOptionsRequest {
   /**
    * @public
-   * <p>A signed document that proves that you are authorized to bring a specified IP address range to Amazon using BYOIP. This option applies to public pools only.</p>
+   * <p>If true, enables a local VPC to resolve public DNS hostnames to private IP addresses
+   *         when queried from instances in the peer VPC.</p>
    */
-  CidrAuthorizationContext?: IpamCidrAuthorizationContext;
+  AllowDnsResolutionFromRemoteVpc?: boolean;
 
   /**
    * @public
-   * <p>The netmask length of the CIDR you'd like to provision to a pool. Can be used for provisioning Amazon-provided IPv6 CIDRs to top-level pools and for provisioning CIDRs to pools with source pools. Cannot be used to provision BYOIP CIDRs to top-level pools. Either "NetmaskLength" or "Cidr" is required.</p>
+   * <p>Deprecated.</p>
    */
-  NetmaskLength?: number;
+  AllowEgressFromLocalClassicLinkToRemoteVpc?: boolean;
 
   /**
    * @public
-   * <p>A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html">Ensuring Idempotency</a>.</p>
+   * <p>Deprecated.</p>
    */
-  ClientToken?: string;
+  AllowEgressFromLocalVpcToRemoteClassicLink?: boolean;
 }
 
 /**
  * @public
  */
-export interface ProvisionIpamPoolCidrResult {
+export interface ModifyVpcPeeringConnectionOptionsRequest {
   /**
    * @public
-   * <p>Information about the provisioned CIDR.</p>
+   * <p>The VPC peering connection options for the accepter VPC.</p>
    */
-  IpamPoolCidr?: IpamPoolCidr;
-}
+  AccepterPeeringConnectionOptions?: PeeringConnectionOptionsRequest;
 
-/**
- * @public
- */
-export interface ProvisionPublicIpv4PoolCidrRequest {
   /**
    * @public
-   * <p>A check for whether you have the required permissions for the action without actually making the request
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
    *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
    *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
@@ -7862,498 +7852,595 @@ export interface ProvisionPublicIpv4PoolCidrRequest {
 
   /**
    * @public
-   * <p>The ID of the IPAM pool you would like to use to allocate this CIDR.</p>
+   * <p>The VPC peering connection options for the requester VPC.</p>
    */
-  IpamPoolId: string | undefined;
+  RequesterPeeringConnectionOptions?: PeeringConnectionOptionsRequest;
 
   /**
    * @public
-   * <p>The ID of the public IPv4 pool you would like to use for this CIDR.</p>
+   * <p>The ID of the VPC peering connection.</p>
    */
-  PoolId: string | undefined;
+  VpcPeeringConnectionId: string | undefined;
+}
 
+/**
+ * @public
+ * <p>Describes the VPC peering connection options.</p>
+ */
+export interface PeeringConnectionOptions {
   /**
    * @public
-   * <p>The netmask length of the CIDR you would like to allocate to the public IPv4 pool.</p>
+   * <p>If true, the public DNS hostnames of instances in the specified VPC resolve to private
+   *             IP addresses when queried from instances in the peer VPC.</p>
    */
-  NetmaskLength: number | undefined;
+  AllowDnsResolutionFromRemoteVpc?: boolean;
+
+  /**
+   * @public
+   * <p>Deprecated.</p>
+   */
+  AllowEgressFromLocalClassicLinkToRemoteVpc?: boolean;
+
+  /**
+   * @public
+   * <p>Deprecated.</p>
+   */
+  AllowEgressFromLocalVpcToRemoteClassicLink?: boolean;
 }
 
 /**
  * @public
  */
-export interface ProvisionPublicIpv4PoolCidrResult {
+export interface ModifyVpcPeeringConnectionOptionsResult {
   /**
    * @public
-   * <p>The ID of the pool that you want to provision the CIDR to.</p>
+   * <p>Information about the VPC peering connection options for the accepter VPC.</p>
    */
-  PoolId?: string;
+  AccepterPeeringConnectionOptions?: PeeringConnectionOptions;
 
   /**
    * @public
-   * <p>Information about the address range of the public IPv4 pool.</p>
+   * <p>Information about the VPC peering connection options for the requester VPC.</p>
    */
-  PoolAddressRange?: PublicIpv4PoolRange;
+  RequesterPeeringConnectionOptions?: PeeringConnectionOptions;
 }
 
 /**
  * @public
+ * @enum
  */
-export interface PurchaseCapacityBlockRequest {
-  /**
-   * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-   */
-  DryRun?: boolean;
+export const VpcTenancy = {
+  default: "default",
+} as const;
+
+/**
+ * @public
+ */
+export type VpcTenancy = (typeof VpcTenancy)[keyof typeof VpcTenancy];
 
+/**
+ * @public
+ */
+export interface ModifyVpcTenancyRequest {
   /**
    * @public
-   * <p>The tags to apply to the Capacity Block during launch.</p>
+   * <p>The ID of the VPC.</p>
    */
-  TagSpecifications?: TagSpecification[];
+  VpcId: string | undefined;
 
   /**
    * @public
-   * <p>The ID of the Capacity Block offering.</p>
+   * <p>The instance tenancy attribute for the VPC. </p>
    */
-  CapacityBlockOfferingId: string | undefined;
+  InstanceTenancy: VpcTenancy | undefined;
 
   /**
    * @public
-   * <p>The type of operating system for which to reserve capacity.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  InstancePlatform: CapacityReservationInstancePlatform | undefined;
+  DryRun?: boolean;
 }
 
 /**
  * @public
  */
-export interface PurchaseCapacityBlockResult {
+export interface ModifyVpcTenancyResult {
   /**
    * @public
-   * <p>The Capacity Reservation.</p>
+   * <p>Returns <code>true</code> if the request succeeds; otherwise, returns an
+   *             error.</p>
    */
-  CapacityReservation?: CapacityReservation;
+  ReturnValue?: boolean;
 }
 
 /**
  * @public
  */
-export interface PurchaseHostReservationRequest {
+export interface ModifyVpnConnectionRequest {
   /**
    * @public
-   * <p>Unique, case-sensitive identifier that you provide to ensure the idempotency of the request. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html">Ensuring Idempotency</a>.</p>
+   * <p>The ID of the VPN connection.</p>
    */
-  ClientToken?: string;
+  VpnConnectionId: string | undefined;
 
   /**
    * @public
-   * <p>The currency in which the <code>totalUpfrontPrice</code>, <code>LimitPrice</code>, and
-   *                 <code>totalHourlyPrice</code> amounts are specified. At this time, the only
-   *             supported currency is <code>USD</code>.</p>
+   * <p>The ID of the transit gateway.</p>
    */
-  CurrencyCode?: CurrencyCodeValues;
+  TransitGatewayId?: string;
 
   /**
    * @public
-   * <p>The IDs of the Dedicated Hosts with which the reservation will be associated.</p>
+   * <p>The ID of the customer gateway at your end of the VPN connection.</p>
    */
-  HostIdSet: string[] | undefined;
+  CustomerGatewayId?: string;
 
   /**
    * @public
-   * <p>The specified limit is checked against the total upfront cost of the reservation
-   *             (calculated as the offering's upfront cost multiplied by the host count). If the total
-   *             upfront cost is greater than the specified price limit, the request fails. This is used
-   *             to ensure that the purchase does not exceed the expected upfront cost of the purchase.
-   *             At this time, the only supported currency is <code>USD</code>. For example, to indicate
-   *             a limit price of USD 100, specify 100.00.</p>
+   * <p>The ID of the virtual private gateway at the Amazon Web Services side of the VPN
+   *             connection.</p>
    */
-  LimitPrice?: string;
+  VpnGatewayId?: string;
 
   /**
    * @public
-   * <p>The ID of the offering.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually
+   *             making the request, and provides an error response. If you have the required
+   *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
+   *                 <code>UnauthorizedOperation</code>.</p>
    */
-  OfferingId: string | undefined;
+  DryRun?: boolean;
+}
 
+/**
+ * @public
+ */
+export interface ModifyVpnConnectionResult {
   /**
    * @public
-   * <p>The tags to apply to the Dedicated Host Reservation during purchase.</p>
+   * <p>Information about the VPN connection.</p>
    */
-  TagSpecifications?: TagSpecification[];
+  VpnConnection?: VpnConnection;
 }
 
 /**
  * @public
  */
-export interface PurchaseHostReservationResult {
+export interface ModifyVpnConnectionOptionsRequest {
   /**
    * @public
-   * <p>Unique, case-sensitive identifier that you provide to ensure the idempotency of the request. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html">Ensuring Idempotency</a>.</p>
+   * <p>The ID of the Site-to-Site VPN connection. </p>
    */
-  ClientToken?: string;
+  VpnConnectionId: string | undefined;
 
   /**
    * @public
-   * <p>The currency in which the <code>totalUpfrontPrice</code> and
-   *                 <code>totalHourlyPrice</code> amounts are specified. At this time, the only
-   *             supported currency is <code>USD</code>.</p>
+   * <p>The IPv4 CIDR on the customer gateway (on-premises) side of the VPN connection.</p>
+   *          <p>Default: <code>0.0.0.0/0</code>
+   *          </p>
    */
-  CurrencyCode?: CurrencyCodeValues;
+  LocalIpv4NetworkCidr?: string;
 
   /**
    * @public
-   * <p>Describes the details of the purchase.</p>
+   * <p>The IPv4 CIDR on the Amazon Web Services side of the VPN connection.</p>
+   *          <p>Default: <code>0.0.0.0/0</code>
+   *          </p>
    */
-  Purchase?: Purchase[];
+  RemoteIpv4NetworkCidr?: string;
 
   /**
    * @public
-   * <p>The total hourly price of the reservation calculated per hour.</p>
+   * <p>The IPv6 CIDR on the customer gateway (on-premises) side of the VPN connection.</p>
+   *          <p>Default: <code>::/0</code>
+   *          </p>
    */
-  TotalHourlyPrice?: string;
+  LocalIpv6NetworkCidr?: string;
 
   /**
    * @public
-   * <p>The total amount charged to your account when you purchase the reservation.</p>
+   * <p>The IPv6 CIDR on the Amazon Web Services side of the VPN connection.</p>
+   *          <p>Default: <code>::/0</code>
+   *          </p>
    */
-  TotalUpfrontPrice?: string;
-}
+  RemoteIpv6NetworkCidr?: string;
 
-/**
- * @public
- * <p>Describes the limit price of a Reserved Instance offering.</p>
- */
-export interface ReservedInstanceLimitPrice {
   /**
    * @public
-   * <p>Used for Reserved Instance Marketplace offerings. Specifies the limit price on the total order (instanceCount * price).</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  Amount?: number;
+  DryRun?: boolean;
+}
 
+/**
+ * @public
+ */
+export interface ModifyVpnConnectionOptionsResult {
   /**
    * @public
-   * <p>The currency in which the <code>limitPrice</code> amount is specified.
-   * 				At this time, the only supported currency is <code>USD</code>.</p>
+   * <p>Information about the VPN connection.</p>
    */
-  CurrencyCode?: CurrencyCodeValues;
+  VpnConnection?: VpnConnection;
 }
 
 /**
  * @public
- * <p>Contains the parameters for PurchaseReservedInstancesOffering.</p>
  */
-export interface PurchaseReservedInstancesOfferingRequest {
+export interface ModifyVpnTunnelCertificateRequest {
   /**
    * @public
-   * <p>The number of Reserved Instances to purchase.</p>
+   * <p>The ID of the Amazon Web Services Site-to-Site VPN connection.</p>
    */
-  InstanceCount: number | undefined;
+  VpnConnectionId: string | undefined;
 
   /**
    * @public
-   * <p>The ID of the Reserved Instance offering to purchase.</p>
+   * <p>The external IP address of the VPN tunnel.</p>
    */
-  ReservedInstancesOfferingId: string | undefined;
+  VpnTunnelOutsideIpAddress: string | undefined;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *        and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *        Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually
+   *             making the request, and provides an error response. If you have the required
+   *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
+   *                 <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
+}
 
+/**
+ * @public
+ */
+export interface ModifyVpnTunnelCertificateResult {
   /**
    * @public
-   * <p>Specified for Reserved Instance Marketplace offerings to limit the total order and ensure that the Reserved Instances are not purchased at unexpected prices.</p>
-   */
-  LimitPrice?: ReservedInstanceLimitPrice;
-
-  /**
-   * @public
-   * <p>The time at which to purchase the Reserved Instance, in UTC format (for example, <i>YYYY</i>-<i>MM</i>-<i>DD</i>T<i>HH</i>:<i>MM</i>:<i>SS</i>Z).</p>
+   * <p>Information about the VPN connection.</p>
    */
-  PurchaseTime?: Date;
+  VpnConnection?: VpnConnection;
 }
 
 /**
  * @public
- * <p>Contains the output of PurchaseReservedInstancesOffering.</p>
+ * <p>The Amazon Web Services Site-to-Site VPN tunnel options to modify.</p>
  */
-export interface PurchaseReservedInstancesOfferingResult {
+export interface ModifyVpnTunnelOptionsSpecification {
   /**
    * @public
-   * <p>The IDs of the purchased Reserved Instances. If your purchase crosses into a discounted
-   *       pricing tier, the final Reserved Instances IDs might change. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/concepts-reserved-instances-application.html#crossing-pricing-tiers">Crossing
-   *         pricing tiers</a> in the <i>Amazon Elastic Compute Cloud User Guide</i>.</p>
+   * <p>The range of inside IPv4 addresses for the tunnel. Any specified CIDR blocks must be
+   *             unique across all VPN connections that use the same virtual private gateway. </p>
+   *          <p>Constraints: A size /30 CIDR block from the <code>169.254.0.0/16</code> range. The
+   *             following CIDR blocks are reserved and cannot be used:</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>169.254.0.0/30</code>
+   *                </p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>169.254.1.0/30</code>
+   *                </p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>169.254.2.0/30</code>
+   *                </p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>169.254.3.0/30</code>
+   *                </p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>169.254.4.0/30</code>
+   *                </p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>169.254.5.0/30</code>
+   *                </p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>169.254.169.252/30</code>
+   *                </p>
+   *             </li>
+   *          </ul>
    */
-  ReservedInstancesId?: string;
-}
+  TunnelInsideCidr?: string;
 
-/**
- * @public
- * <p>Describes a request to purchase Scheduled Instances.</p>
- */
-export interface PurchaseRequest {
   /**
    * @public
-   * <p>The number of instances.</p>
+   * <p>The range of inside IPv6 addresses for the tunnel. Any specified CIDR blocks must be
+   *             unique across all VPN connections that use the same transit gateway.</p>
+   *          <p>Constraints: A size /126 CIDR block from the local <code>fd00::/8</code> range.</p>
    */
-  InstanceCount: number | undefined;
+  TunnelInsideIpv6Cidr?: string;
 
   /**
    * @public
-   * <p>The purchase token.</p>
+   * <p>The pre-shared key (PSK) to establish initial authentication between the virtual
+   *             private gateway and the customer gateway.</p>
+   *          <p>Constraints: Allowed characters are alphanumeric characters, periods (.), and
+   *             underscores (_). Must be between 8 and 64 characters in length and cannot start with
+   *             zero (0).</p>
    */
-  PurchaseToken: string | undefined;
-}
+  PreSharedKey?: string;
 
-/**
- * @public
- * <p>Contains the parameters for PurchaseScheduledInstances.</p>
- */
-export interface PurchaseScheduledInstancesRequest {
   /**
    * @public
-   * <p>Unique, case-sensitive identifier that ensures the idempotency of the request.
-   *          For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html">Ensuring Idempotency</a>.</p>
+   * <p>The lifetime for phase 1 of the IKE negotiation, in seconds.</p>
+   *          <p>Constraints: A value between 900 and 28,800.</p>
+   *          <p>Default: <code>28800</code>
+   *          </p>
    */
-  ClientToken?: string;
+  Phase1LifetimeSeconds?: number;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The lifetime for phase 2 of the IKE negotiation, in seconds.</p>
+   *          <p>Constraints: A value between 900 and 3,600. The value must be less than the value for
+   *                 <code>Phase1LifetimeSeconds</code>.</p>
+   *          <p>Default: <code>3600</code>
+   *          </p>
    */
-  DryRun?: boolean;
+  Phase2LifetimeSeconds?: number;
 
   /**
    * @public
-   * <p>The purchase requests.</p>
+   * <p>The margin time, in seconds, before the phase 2 lifetime expires, during which the
+   *                 Amazon Web Services side of the VPN connection performs an IKE rekey. The exact time
+   *             of the rekey is randomly selected based on the value for
+   *                 <code>RekeyFuzzPercentage</code>.</p>
+   *          <p>Constraints: A value between 60 and half of <code>Phase2LifetimeSeconds</code>.</p>
+   *          <p>Default: <code>540</code>
+   *          </p>
    */
-  PurchaseRequests: PurchaseRequest[] | undefined;
-}
+  RekeyMarginTimeSeconds?: number;
 
-/**
- * @public
- * <p>Contains the output of PurchaseScheduledInstances.</p>
- */
-export interface PurchaseScheduledInstancesResult {
   /**
    * @public
-   * <p>Information about the Scheduled Instances.</p>
+   * <p>The percentage of the rekey window (determined by <code>RekeyMarginTimeSeconds</code>)
+   *             during which the rekey time is randomly selected.</p>
+   *          <p>Constraints: A value between 0 and 100.</p>
+   *          <p>Default: <code>100</code>
+   *          </p>
    */
-  ScheduledInstanceSet?: ScheduledInstance[];
-}
+  RekeyFuzzPercentage?: number;
 
-/**
- * @public
- */
-export interface RebootInstancesRequest {
   /**
    * @public
-   * <p>The instance IDs.</p>
+   * <p>The number of packets in an IKE replay window.</p>
+   *          <p>Constraints: A value between 64 and 2048.</p>
+   *          <p>Default: <code>1024</code>
+   *          </p>
    */
-  InstanceIds: string[] | undefined;
+  ReplayWindowSize?: number;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The number of seconds after which a DPD timeout occurs. A DPD timeout of 40 seconds means that the VPN endpoint will consider the peer dead 30 seconds after the first failed keep-alive.</p>
+   *          <p>Constraints: A value greater than or equal to 30.</p>
+   *          <p>Default: <code>40</code>
+   *          </p>
    */
-  DryRun?: boolean;
-}
+  DPDTimeoutSeconds?: number;
 
-/**
- * @public
- * <p>Contains the parameters for RegisterImage.</p>
- */
-export interface RegisterImageRequest {
   /**
    * @public
-   * <p>The full path to your AMI manifest in Amazon S3 storage. The specified bucket must have the
-   *    		<code>aws-exec-read</code> canned access control list (ACL) to ensure that it can be accessed
-   *    		by Amazon EC2. For more information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/acl-overview.html#canned-acl">Canned ACLs</a> in the
-   *    		<i>Amazon S3 Service Developer Guide</i>.</p>
+   * <p>The action to take after DPD timeout occurs. Specify <code>restart</code> to restart
+   *             the IKE initiation. Specify <code>clear</code> to end the IKE session.</p>
+   *          <p>Valid Values: <code>clear</code> | <code>none</code> | <code>restart</code>
+   *          </p>
+   *          <p>Default: <code>clear</code>
+   *          </p>
    */
-  ImageLocation?: string;
+  DPDTimeoutAction?: string;
 
   /**
    * @public
-   * <p>The architecture of the AMI.</p>
-   *          <p>Default: For Amazon EBS-backed AMIs, <code>i386</code>.
-   *         For instance store-backed AMIs, the architecture specified in the manifest file.</p>
+   * <p>One or more encryption algorithms that are permitted for the VPN tunnel for phase 1
+   *             IKE negotiations.</p>
+   *          <p>Valid values: <code>AES128</code> | <code>AES256</code> | <code>AES128-GCM-16</code> |
+   *                 <code>AES256-GCM-16</code>
+   *          </p>
    */
-  Architecture?: ArchitectureValues;
+  Phase1EncryptionAlgorithms?: Phase1EncryptionAlgorithmsRequestListValue[];
 
   /**
    * @public
-   * <p>The block device mapping entries.</p>
-   *          <p>If you specify an Amazon EBS volume using the ID of an Amazon EBS snapshot, you can't specify the encryption state of the volume.</p>
-   *          <p>If you create an AMI on an Outpost, then all backing snapshots must be on the same
-   *       Outpost or in the Region of that Outpost. AMIs on an Outpost that include local snapshots can
-   *       be used to launch instances on the same Outpost only. For more information, <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/snapshots-outposts.html#ami">Amazon EBS local
-   *         snapshots on Outposts</a> in the <i>Amazon EC2 User Guide</i>.</p>
+   * <p>One or more encryption algorithms that are permitted for the VPN tunnel for phase 2
+   *             IKE negotiations.</p>
+   *          <p>Valid values: <code>AES128</code> | <code>AES256</code> | <code>AES128-GCM-16</code> |
+   *                 <code>AES256-GCM-16</code>
+   *          </p>
    */
-  BlockDeviceMappings?: BlockDeviceMapping[];
+  Phase2EncryptionAlgorithms?: Phase2EncryptionAlgorithmsRequestListValue[];
 
   /**
    * @public
-   * <p>A description for your AMI.</p>
+   * <p>One or more integrity algorithms that are permitted for the VPN tunnel for phase 1 IKE
+   *             negotiations.</p>
+   *          <p>Valid values: <code>SHA1</code> | <code>SHA2-256</code> | <code>SHA2-384</code> |
+   *                 <code>SHA2-512</code>
+   *          </p>
    */
-  Description?: string;
+  Phase1IntegrityAlgorithms?: Phase1IntegrityAlgorithmsRequestListValue[];
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   * 			and provides an error response. If you have the required permissions, the error response is
-   * 			<code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>One or more integrity algorithms that are permitted for the VPN tunnel for phase 2 IKE
+   *             negotiations.</p>
+   *          <p>Valid values: <code>SHA1</code> | <code>SHA2-256</code> | <code>SHA2-384</code> |
+   *                 <code>SHA2-512</code>
+   *          </p>
    */
-  DryRun?: boolean;
+  Phase2IntegrityAlgorithms?: Phase2IntegrityAlgorithmsRequestListValue[];
 
   /**
    * @public
-   * <p>Set to <code>true</code> to enable enhanced networking with ENA for the AMI and any instances that you launch from the AMI.</p>
-   *          <p>This option is supported only for HVM AMIs. Specifying this option with a PV AMI can make instances launched from the AMI unreachable.</p>
+   * <p>One or more Diffie-Hellman group numbers that are permitted for the VPN tunnel for
+   *             phase 1 IKE negotiations.</p>
+   *          <p>Valid values: <code>2</code> | <code>14</code> | <code>15</code> | <code>16</code> |
+   *                 <code>17</code> | <code>18</code> | <code>19</code> | <code>20</code> |
+   *                 <code>21</code> | <code>22</code> | <code>23</code> | <code>24</code>
+   *          </p>
    */
-  EnaSupport?: boolean;
+  Phase1DHGroupNumbers?: Phase1DHGroupNumbersRequestListValue[];
 
   /**
    * @public
-   * <p>The ID of the kernel.</p>
+   * <p>One or more Diffie-Hellman group numbers that are permitted for the VPN tunnel for
+   *             phase 2 IKE negotiations.</p>
+   *          <p>Valid values: <code>2</code> | <code>5</code> | <code>14</code> | <code>15</code> |
+   *                 <code>16</code> | <code>17</code> | <code>18</code> | <code>19</code> |
+   *                 <code>20</code> | <code>21</code> | <code>22</code> | <code>23</code> |
+   *                 <code>24</code>
+   *          </p>
    */
-  KernelId?: string;
+  Phase2DHGroupNumbers?: Phase2DHGroupNumbersRequestListValue[];
 
   /**
    * @public
-   * <p>A name for your AMI.</p>
-   *          <p>Constraints: 3-128 alphanumeric characters, parentheses (()), square brackets ([]), spaces ( ), periods (.), slashes (/), dashes (-), single quotes ('), at-signs (@), or underscores(_)</p>
+   * <p>The IKE versions that are permitted for the VPN tunnel.</p>
+   *          <p>Valid values: <code>ikev1</code> | <code>ikev2</code>
+   *          </p>
    */
-  Name: string | undefined;
+  IKEVersions?: IKEVersionsRequestListValue[];
 
   /**
    * @public
-   * <p>The billing product codes. Your account must be authorized to specify billing product codes.</p>
-   *          <p>If your account is not authorized to specify billing product codes, you can publish AMIs
-   *       that include billable software and list them on the Amazon Web Services Marketplace. You must first register as a seller
-   *       on the Amazon Web Services Marketplace. For more information, see <a href="https://docs.aws.amazon.com/marketplace/latest/userguide/user-guide-for-sellers.html">Getting started as a
-   *         seller</a> and <a href="https://docs.aws.amazon.com/marketplace/latest/userguide/ami-products.html">AMI-based
-   *         products</a> in the <i>Amazon Web Services Marketplace Seller Guide</i>.</p>
+   * <p>The action to take when the establishing the tunnel for the VPN connection. By
+   *             default, your customer gateway device must initiate the IKE negotiation and bring up the
+   *             tunnel. Specify <code>start</code> for Amazon Web Services to initiate the IKE
+   *             negotiation.</p>
+   *          <p>Valid Values: <code>add</code> | <code>start</code>
+   *          </p>
+   *          <p>Default: <code>add</code>
+   *          </p>
    */
-  BillingProducts?: string[];
+  StartupAction?: string;
 
   /**
    * @public
-   * <p>The ID of the RAM disk.</p>
+   * <p>Options for logging VPN tunnel activity.</p>
    */
-  RamdiskId?: string;
+  LogOptions?: VpnTunnelLogOptionsSpecification;
 
   /**
    * @public
-   * <p>The device name of the root device volume (for example, <code>/dev/sda1</code>).</p>
+   * <p>Turn on or off tunnel endpoint lifecycle control feature.</p>
    */
-  RootDeviceName?: string;
+  EnableTunnelLifecycleControl?: boolean;
+}
 
+/**
+ * @public
+ */
+export interface ModifyVpnTunnelOptionsRequest {
   /**
    * @public
-   * <p>Set to <code>simple</code> to enable enhanced networking with the Intel 82599 Virtual Function interface for the AMI and any instances that you launch from the AMI.</p>
-   *          <p>There is no way to disable <code>sriovNetSupport</code> at this time.</p>
-   *          <p>This option is supported only for HVM AMIs. Specifying this option with a PV AMI can make instances launched from the AMI unreachable.</p>
+   * <p>The ID of the Amazon Web Services Site-to-Site VPN connection.</p>
    */
-  SriovNetSupport?: string;
+  VpnConnectionId: string | undefined;
 
   /**
    * @public
-   * <p>The type of virtualization (<code>hvm</code> | <code>paravirtual</code>).</p>
-   *          <p>Default: <code>paravirtual</code>
-   *          </p>
+   * <p>The external IP address of the VPN tunnel.</p>
    */
-  VirtualizationType?: string;
+  VpnTunnelOutsideIpAddress: string | undefined;
 
   /**
    * @public
-   * <p>The boot mode of the AMI. A value of <code>uefi-preferred</code> indicates that the AMI supports both UEFI and Legacy BIOS.</p>
-   *          <note>
-   *             <p>The operating system contained in the AMI must be configured to support the specified boot mode.</p>
-   *          </note>
-   *          <p>For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ami-boot.html">Boot modes</a> in the
-   *         <i>Amazon EC2 User Guide</i>.</p>
+   * <p>The tunnel options to modify.</p>
    */
-  BootMode?: BootModeValues;
+  TunnelOptions: ModifyVpnTunnelOptionsSpecification | undefined;
 
   /**
-   * @public
-   * <p>Set to <code>v2.0</code> to enable Trusted Platform Module (TPM) support. For more
-   *       information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/nitrotpm.html">NitroTPM</a> in the <i>Amazon EC2 User Guide</i>.</p>
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually
+   *             making the request, and provides an error response. If you have the required
+   *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
+   *                 <code>UnauthorizedOperation</code>.</p>
    */
-  TpmSupport?: TpmSupportValues;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>Base64 representation of the non-volatile UEFI variable store. To retrieve the UEFI data,
-   *       use the <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetInstanceUefiData">GetInstanceUefiData</a> command. You can inspect and modify the UEFI data by using the
-   *         <a href="https://github.com/awslabs/python-uefivars">python-uefivars tool</a> on
-   *       GitHub. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/uefi-secure-boot.html">UEFI Secure Boot</a> in the
-   *         <i>Amazon EC2 User Guide</i>.</p>
+   * <p>Choose whether or not to trigger immediate tunnel replacement. This is only applicable when turning on or off <code>EnableTunnelLifecycleControl</code>.</p>
+   *          <p>Valid values: <code>True</code> | <code>False</code>
+   *          </p>
    */
-  UefiData?: string;
+  SkipTunnelReplacement?: boolean;
+}
 
+/**
+ * @public
+ */
+export interface ModifyVpnTunnelOptionsResult {
   /**
    * @public
-   * <p>Set to <code>v2.0</code> to indicate that IMDSv2 is specified in the AMI. Instances
-   *       launched from this AMI will have <code>HttpTokens</code> automatically set to
-   *         <code>required</code> so that, by default, the instance requires that IMDSv2 is used when
-   *       requesting instance metadata. In addition, <code>HttpPutResponseHopLimit</code> is set to
-   *         <code>2</code>. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/configuring-IMDS-new-instances.html#configure-IMDS-new-instances-ami-configuration">Configure
-   *         the AMI</a> in the <i>Amazon EC2 User Guide</i>.</p>
-   *          <note>
-   *             <p>If you set the value to <code>v2.0</code>, make sure that your AMI software can support IMDSv2.</p>
-   *          </note>
+   * <p>Information about the VPN connection.</p>
    */
-  ImdsSupport?: ImdsSupportValues;
+  VpnConnection?: VpnConnection;
 }
 
 /**
  * @public
- * <p>Contains the output of RegisterImage.</p>
  */
-export interface RegisterImageResult {
+export interface MonitorInstancesRequest {
   /**
    * @public
-   * <p>The ID of the newly registered AMI.</p>
+   * <p>The IDs of the instances.</p>
    */
-  ImageId?: string;
+  InstanceIds: string[] | undefined;
+
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
 }
 
 /**
  * @public
- * <p>Information about the tag keys to register for the current Region. You can either specify
- *       	individual tag keys or register all tag keys in the current Region. You must specify either
- *       	<code>IncludeAllTagsOfInstance</code> or <code>InstanceTagKeys</code> in the request</p>
+ * <p>Describes the monitoring of an instance.</p>
  */
-export interface RegisterInstanceTagAttributeRequest {
+export interface InstanceMonitoring {
   /**
    * @public
-   * <p>Indicates whether to register all tag keys in the current Region. Specify <code>true</code>
-   *       	to register all tag keys.</p>
+   * <p>The ID of the instance.</p>
    */
-  IncludeAllTagsOfInstance?: boolean;
+  InstanceId?: string;
 
   /**
    * @public
-   * <p>The tag keys to register.</p>
+   * <p>The monitoring for the instance.</p>
    */
-  InstanceTagKeys?: string[];
+  Monitoring?: Monitoring;
 }
 
 /**
  * @public
  */
-export interface RegisterInstanceEventNotificationAttributesRequest {
+export interface MonitorInstancesResult {
+  /**
+   * @public
+   * <p>The monitoring information.</p>
+   */
+  InstanceMonitorings?: InstanceMonitoring[];
+}
+
+/**
+ * @public
+ */
+export interface MoveAddressToVpcRequest {
   /**
    * @public
    * <p>Checks whether you have the required permissions for the action, without actually making the request,
@@ -8364,109 +8451,136 @@ export interface RegisterInstanceEventNotificationAttributesRequest {
 
   /**
    * @public
-   * <p>Information about the tag keys to register.</p>
+   * <p>The Elastic IP address.</p>
    */
-  InstanceTagAttribute: RegisterInstanceTagAttributeRequest | undefined;
+  PublicIp: string | undefined;
 }
 
 /**
  * @public
+ * @enum
  */
-export interface RegisterInstanceEventNotificationAttributesResult {
+export const Status = {
+  inClassic: "InClassic",
+  inVpc: "InVpc",
+  moveInProgress: "MoveInProgress",
+} as const;
+
+/**
+ * @public
+ */
+export type Status = (typeof Status)[keyof typeof Status];
+
+/**
+ * @public
+ */
+export interface MoveAddressToVpcResult {
   /**
    * @public
-   * <p>The resulting set of tag keys.</p>
+   * <p>The allocation ID for the Elastic IP address.</p>
    */
-  InstanceTagAttribute?: InstanceTagNotificationAttribute;
+  AllocationId?: string;
+
+  /**
+   * @public
+   * <p>The status of the move of the IP address.</p>
+   */
+  Status?: Status;
 }
 
 /**
  * @public
  */
-export interface RegisterTransitGatewayMulticastGroupMembersRequest {
+export interface MoveByoipCidrToIpamRequest {
   /**
    * @public
-   * <p>The ID of the transit gateway multicast domain.</p>
+   * <p>A check for whether you have the required permissions for the action without actually making the request
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  TransitGatewayMulticastDomainId: string | undefined;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The IP address assigned to the  transit gateway multicast group.</p>
+   * <p>The BYOIP CIDR.</p>
    */
-  GroupIpAddress?: string;
+  Cidr: string | undefined;
 
   /**
    * @public
-   * <p>The group members' network interface IDs to register with the  transit gateway multicast group.</p>
+   * <p>The IPAM pool ID.</p>
    */
-  NetworkInterfaceIds: string[] | undefined;
+  IpamPoolId: string | undefined;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The Amazon Web Services account ID of the owner of the IPAM pool.</p>
    */
-  DryRun?: boolean;
+  IpamPoolOwner: string | undefined;
 }
 
 /**
  * @public
- * <p>Describes the registered  transit gateway multicast group members.</p>
  */
-export interface TransitGatewayMulticastRegisteredGroupMembers {
+export interface MoveByoipCidrToIpamResult {
   /**
    * @public
-   * <p>The ID of the transit gateway multicast domain.</p>
+   * <p>The BYOIP CIDR.</p>
    */
-  TransitGatewayMulticastDomainId?: string;
+  ByoipCidr?: ByoipCidr;
+}
 
+/**
+ * @public
+ * <p>Provides authorization for Amazon to bring a specific IP address range to a specific
+ *           Amazon Web Services account using bring your own IP addresses (BYOIP). For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-byoip.html#prepare-for-byoip">Configuring your BYOIP address range</a> in the <i>Amazon Elastic Compute Cloud User Guide</i>.</p>
+ */
+export interface CidrAuthorizationContext {
   /**
    * @public
-   * <p>The ID of the registered network interfaces.</p>
+   * <p>The plain-text authorization message for the prefix and account.</p>
    */
-  RegisteredNetworkInterfaceIds?: string[];
+  Message: string | undefined;
 
   /**
    * @public
-   * <p>The IP address assigned to the  transit gateway multicast group.</p>
+   * <p>The signed authorization message for the prefix and account.</p>
    */
-  GroupIpAddress?: string;
+  Signature: string | undefined;
 }
 
 /**
  * @public
  */
-export interface RegisterTransitGatewayMulticastGroupMembersResult {
+export interface ProvisionByoipCidrRequest {
   /**
    * @public
-   * <p>Information about the registered  transit gateway multicast group members.</p>
+   * <p>The public IPv4 or IPv6 address range, in CIDR notation. The most specific IPv4 prefix that you can
+   *          specify is /24. The most specific IPv6 prefix you can specify is /56. The address range cannot overlap with another address range that you've
+   *          brought to this or another Region.</p>
    */
-  RegisteredMulticastGroupMembers?: TransitGatewayMulticastRegisteredGroupMembers;
-}
+  Cidr: string | undefined;
 
-/**
- * @public
- */
-export interface RegisterTransitGatewayMulticastGroupSourcesRequest {
   /**
    * @public
-   * <p>The ID of the transit gateway multicast domain.</p>
+   * <p>A signed document that proves that you are authorized to bring the specified IP address
+   *          range to Amazon using BYOIP.</p>
    */
-  TransitGatewayMulticastDomainId: string | undefined;
+  CidrAuthorizationContext?: CidrAuthorizationContext;
 
   /**
    * @public
-   * <p>The IP address assigned to the  transit gateway multicast group.</p>
+   * <p>(IPv6 only) Indicate whether the address range will be publicly advertised to the
+   *             internet.</p>
+   *          <p>Default: true</p>
    */
-  GroupIpAddress?: string;
+  PubliclyAdvertisable?: boolean;
 
   /**
    * @public
-   * <p>The group sources' network interface IDs to register with the  transit gateway multicast group.</p>
+   * <p>A description for the address range and the address pool.</p>
    */
-  NetworkInterfaceIds: string[] | undefined;
+  Description?: string;
 
   /**
    * @public
@@ -8475,152 +8589,171 @@ export interface RegisterTransitGatewayMulticastGroupSourcesRequest {
    *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
-}
 
-/**
- * @public
- * <p>Describes the members registered with the  transit gateway multicast group.</p>
- */
-export interface TransitGatewayMulticastRegisteredGroupSources {
   /**
    * @public
-   * <p>The ID of the transit gateway multicast domain.</p>
+   * <p>The tags to apply to the address pool.</p>
    */
-  TransitGatewayMulticastDomainId?: string;
+  PoolTagSpecifications?: TagSpecification[];
 
   /**
    * @public
-   * <p>The IDs of the network interfaces members registered with the  transit gateway multicast group.</p>
+   * <p>Reserved.</p>
    */
-  RegisteredNetworkInterfaceIds?: string[];
+  MultiRegion?: boolean;
+}
 
+/**
+ * @public
+ */
+export interface ProvisionByoipCidrResult {
   /**
    * @public
-   * <p>The IP address assigned to the  transit gateway multicast group.</p>
+   * <p>Information about the address range.</p>
    */
-  GroupIpAddress?: string;
+  ByoipCidr?: ByoipCidr;
 }
 
 /**
  * @public
+ * <p>Provides authorization for Amazon to bring an Autonomous System Number (ASN) to a specific Amazon Web Services account using bring your own ASN (BYOASN).
+ *             For details on the format of the message and signature, see <a href="https://docs.aws.amazon.com/vpc/latest/ipam/tutorials-byoasn.html">Tutorial: Bring your ASN to IPAM</a> in the <i>Amazon VPC IPAM guide</i>.</p>
  */
-export interface RegisterTransitGatewayMulticastGroupSourcesResult {
+export interface AsnAuthorizationContext {
   /**
    * @public
-   * <p>Information about the  transit gateway multicast group sources.</p>
+   * <p>The authorization context's message.</p>
    */
-  RegisteredMulticastGroupSources?: TransitGatewayMulticastRegisteredGroupSources;
+  Message: string | undefined;
+
+  /**
+   * @public
+   * <p>The authorization context's signature.</p>
+   */
+  Signature: string | undefined;
 }
 
 /**
  * @public
  */
-export interface RejectTransitGatewayMulticastDomainAssociationsRequest {
+export interface ProvisionIpamByoasnRequest {
   /**
    * @public
-   * <p>The ID of the transit gateway multicast domain.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  TransitGatewayMulticastDomainId?: string;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The ID of the transit gateway attachment.</p>
+   * <p>An IPAM ID.</p>
    */
-  TransitGatewayAttachmentId?: string;
+  IpamId: string | undefined;
 
   /**
    * @public
-   * <p>The IDs of the subnets to associate with the transit gateway multicast domain.</p>
+   * <p>A public 2-byte or 4-byte ASN.</p>
    */
-  SubnetIds?: string[];
+  Asn: string | undefined;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>An ASN authorization context.</p>
    */
-  DryRun?: boolean;
+  AsnAuthorizationContext: AsnAuthorizationContext | undefined;
 }
 
 /**
  * @public
  */
-export interface RejectTransitGatewayMulticastDomainAssociationsResult {
+export interface ProvisionIpamByoasnResult {
   /**
    * @public
-   * <p>Information about the multicast domain associations.</p>
+   * <p>An ASN and BYOIP CIDR association.</p>
    */
-  Associations?: TransitGatewayMulticastDomainAssociations;
+  Byoasn?: Byoasn;
 }
 
 /**
  * @public
+ * <p>A signed document that proves that you are authorized to bring the specified IP address range to Amazon using BYOIP.</p>
  */
-export interface RejectTransitGatewayPeeringAttachmentRequest {
+export interface IpamCidrAuthorizationContext {
   /**
    * @public
-   * <p>The ID of the transit gateway peering attachment.</p>
+   * <p>The plain-text authorization message for the prefix and account.</p>
    */
-  TransitGatewayAttachmentId: string | undefined;
+  Message?: string;
+
+  /**
+   * @public
+   * <p>The signed authorization message for the prefix and account.</p>
+   */
+  Signature?: string;
+}
+
+/**
+ * @public
+ */
+export interface ProvisionIpamPoolCidrRequest {
+  /**
+   * @public
+   * <p>A check for whether you have the required permissions for the action without actually making the request
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
+
+  /**
+   * @public
+   * <p>The ID of the IPAM pool to which you want to assign a CIDR.</p>
+   */
+  IpamPoolId: string | undefined;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The CIDR you want to assign to the IPAM pool. Either "NetmaskLength" or "Cidr" is required. This value will be null if you specify "NetmaskLength" and will be filled in during the provisioning process.</p>
    */
-  DryRun?: boolean;
-}
+  Cidr?: string;
 
-/**
- * @public
- */
-export interface RejectTransitGatewayPeeringAttachmentResult {
   /**
    * @public
-   * <p>The transit gateway peering attachment.</p>
+   * <p>A signed document that proves that you are authorized to bring a specified IP address range to Amazon using BYOIP. This option applies to public pools only.</p>
    */
-  TransitGatewayPeeringAttachment?: TransitGatewayPeeringAttachment;
-}
+  CidrAuthorizationContext?: IpamCidrAuthorizationContext;
 
-/**
- * @public
- */
-export interface RejectTransitGatewayVpcAttachmentRequest {
   /**
    * @public
-   * <p>The ID of the attachment.</p>
+   * <p>The netmask length of the CIDR you'd like to provision to a pool. Can be used for provisioning Amazon-provided IPv6 CIDRs to top-level pools and for provisioning CIDRs to pools with source pools. Cannot be used to provision BYOIP CIDRs to top-level pools. Either "NetmaskLength" or "Cidr" is required.</p>
    */
-  TransitGatewayAttachmentId: string | undefined;
+  NetmaskLength?: number;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html">Ensuring Idempotency</a>.</p>
    */
-  DryRun?: boolean;
+  ClientToken?: string;
 }
 
 /**
  * @public
  */
-export interface RejectTransitGatewayVpcAttachmentResult {
+export interface ProvisionIpamPoolCidrResult {
   /**
    * @public
-   * <p>Information about the attachment.</p>
+   * <p>Information about the provisioned CIDR.</p>
    */
-  TransitGatewayVpcAttachment?: TransitGatewayVpcAttachment;
+  IpamPoolCidr?: IpamPoolCidr;
 }
 
 /**
  * @public
  */
-export interface RejectVpcEndpointConnectionsRequest {
+export interface ProvisionPublicIpv4PoolCidrRequest {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   * <p>A check for whether you have the required permissions for the action without actually making the request
    *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
    *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
@@ -8628,483 +8761,545 @@ export interface RejectVpcEndpointConnectionsRequest {
 
   /**
    * @public
-   * <p>The ID of the service.</p>
+   * <p>The ID of the IPAM pool you would like to use to allocate this CIDR.</p>
    */
-  ServiceId: string | undefined;
+  IpamPoolId: string | undefined;
+
+  /**
+   * @public
+   * <p>The ID of the public IPv4 pool you would like to use for this CIDR.</p>
+   */
+  PoolId: string | undefined;
 
   /**
    * @public
-   * <p>The IDs of the VPC endpoints.</p>
+   * <p>The netmask length of the CIDR you would like to allocate to the public IPv4 pool.</p>
    */
-  VpcEndpointIds: string[] | undefined;
+  NetmaskLength: number | undefined;
 }
 
 /**
  * @public
  */
-export interface RejectVpcEndpointConnectionsResult {
+export interface ProvisionPublicIpv4PoolCidrResult {
+  /**
+   * @public
+   * <p>The ID of the pool that you want to provision the CIDR to.</p>
+   */
+  PoolId?: string;
+
   /**
    * @public
-   * <p>Information about the endpoints that were not rejected, if applicable.</p>
+   * <p>Information about the address range of the public IPv4 pool.</p>
    */
-  Unsuccessful?: UnsuccessfulItem[];
+  PoolAddressRange?: PublicIpv4PoolRange;
 }
 
 /**
  * @public
  */
-export interface RejectVpcPeeringConnectionRequest {
+export interface PurchaseCapacityBlockRequest {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
 
   /**
    * @public
-   * <p>The ID of the VPC peering connection.</p>
+   * <p>The tags to apply to the Capacity Block during launch.</p>
    */
-  VpcPeeringConnectionId: string | undefined;
-}
+  TagSpecifications?: TagSpecification[];
 
-/**
- * @public
- */
-export interface RejectVpcPeeringConnectionResult {
   /**
    * @public
-   * <p>Returns <code>true</code> if the request succeeds; otherwise, it returns an error.</p>
+   * <p>The ID of the Capacity Block offering.</p>
    */
-  Return?: boolean;
+  CapacityBlockOfferingId: string | undefined;
+
+  /**
+   * @public
+   * <p>The type of operating system for which to reserve capacity.</p>
+   */
+  InstancePlatform: CapacityReservationInstancePlatform | undefined;
 }
 
 /**
  * @public
  */
-export interface ReleaseAddressRequest {
+export interface PurchaseCapacityBlockResult {
   /**
    * @public
-   * <p>The allocation ID. This parameter is required.</p>
+   * <p>The Capacity Reservation.</p>
    */
-  AllocationId?: string;
+  CapacityReservation?: CapacityReservation;
+}
 
+/**
+ * @public
+ */
+export interface PurchaseHostReservationRequest {
   /**
    * @public
-   * <p>Deprecated.</p>
+   * <p>Unique, case-sensitive identifier that you provide to ensure the idempotency of the request. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html">Ensuring Idempotency</a>.</p>
    */
-  PublicIp?: string;
+  ClientToken?: string;
 
   /**
    * @public
-   * <p>The set of Availability Zones, Local Zones, or Wavelength Zones from which Amazon Web Services advertises
-   *       IP addresses.</p>
-   *          <p>If you provide an incorrect network border group, you receive an <code>InvalidAddress.NotFound</code> error.</p>
+   * <p>The currency in which the <code>totalUpfrontPrice</code>, <code>LimitPrice</code>, and
+   *                 <code>totalHourlyPrice</code> amounts are specified. At this time, the only
+   *             supported currency is <code>USD</code>.</p>
    */
-  NetworkBorderGroup?: string;
+  CurrencyCode?: CurrencyCodeValues;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The IDs of the Dedicated Hosts with which the reservation will be associated.</p>
    */
-  DryRun?: boolean;
-}
+  HostIdSet: string[] | undefined;
 
-/**
- * @public
- */
-export interface ReleaseHostsRequest {
   /**
    * @public
-   * <p>The IDs of the Dedicated Hosts to release.</p>
+   * <p>The specified limit is checked against the total upfront cost of the reservation
+   *             (calculated as the offering's upfront cost multiplied by the host count). If the total
+   *             upfront cost is greater than the specified price limit, the request fails. This is used
+   *             to ensure that the purchase does not exceed the expected upfront cost of the purchase.
+   *             At this time, the only supported currency is <code>USD</code>. For example, to indicate
+   *             a limit price of USD 100, specify 100.00.</p>
    */
-  HostIds: string[] | undefined;
-}
+  LimitPrice?: string;
 
-/**
- * @public
- */
-export interface ReleaseHostsResult {
   /**
    * @public
-   * <p>The IDs of the Dedicated Hosts that were successfully released.</p>
+   * <p>The ID of the offering.</p>
    */
-  Successful?: string[];
+  OfferingId: string | undefined;
 
   /**
    * @public
-   * <p>The IDs of the Dedicated Hosts that could not be released, including an error
-   *             message.</p>
+   * <p>The tags to apply to the Dedicated Host Reservation during purchase.</p>
    */
-  Unsuccessful?: UnsuccessfulItem[];
+  TagSpecifications?: TagSpecification[];
 }
 
 /**
  * @public
  */
-export interface ReleaseIpamPoolAllocationRequest {
+export interface PurchaseHostReservationResult {
   /**
    * @public
-   * <p>A check for whether you have the required permissions for the action without actually making the request
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>Unique, case-sensitive identifier that you provide to ensure the idempotency of the request. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html">Ensuring Idempotency</a>.</p>
    */
-  DryRun?: boolean;
+  ClientToken?: string;
 
   /**
    * @public
-   * <p>The ID of the IPAM pool which contains the allocation you want to release.</p>
+   * <p>The currency in which the <code>totalUpfrontPrice</code> and
+   *                 <code>totalHourlyPrice</code> amounts are specified. At this time, the only
+   *             supported currency is <code>USD</code>.</p>
    */
-  IpamPoolId: string | undefined;
+  CurrencyCode?: CurrencyCodeValues;
 
   /**
    * @public
-   * <p>The CIDR of the allocation you want to release.</p>
+   * <p>Describes the details of the purchase.</p>
    */
-  Cidr: string | undefined;
+  Purchase?: Purchase[];
 
   /**
    * @public
-   * <p>The ID of the allocation.</p>
+   * <p>The total hourly price of the reservation calculated per hour.</p>
    */
-  IpamPoolAllocationId: string | undefined;
-}
+  TotalHourlyPrice?: string;
 
-/**
- * @public
- */
-export interface ReleaseIpamPoolAllocationResult {
   /**
    * @public
-   * <p>Indicates if the release was successful.</p>
+   * <p>The total amount charged to your account when you purchase the reservation.</p>
    */
-  Success?: boolean;
+  TotalUpfrontPrice?: string;
 }
 
 /**
  * @public
+ * <p>Describes the limit price of a Reserved Instance offering.</p>
  */
-export interface ReplaceIamInstanceProfileAssociationRequest {
+export interface ReservedInstanceLimitPrice {
   /**
    * @public
-   * <p>The IAM instance profile.</p>
+   * <p>Used for Reserved Instance Marketplace offerings. Specifies the limit price on the total order (instanceCount * price).</p>
    */
-  IamInstanceProfile: IamInstanceProfileSpecification | undefined;
+  Amount?: number;
 
   /**
    * @public
-   * <p>The ID of the existing IAM instance profile association.</p>
+   * <p>The currency in which the <code>limitPrice</code> amount is specified.
+   * 				At this time, the only supported currency is <code>USD</code>.</p>
    */
-  AssociationId: string | undefined;
+  CurrencyCode?: CurrencyCodeValues;
 }
 
 /**
  * @public
+ * <p>Contains the parameters for PurchaseReservedInstancesOffering.</p>
  */
-export interface ReplaceIamInstanceProfileAssociationResult {
+export interface PurchaseReservedInstancesOfferingRequest {
   /**
    * @public
-   * <p>Information about the IAM instance profile association.</p>
+   * <p>The number of Reserved Instances to purchase.</p>
    */
-  IamInstanceProfileAssociation?: IamInstanceProfileAssociation;
-}
+  InstanceCount: number | undefined;
 
-/**
- * @public
- */
-export interface ReplaceNetworkAclAssociationRequest {
   /**
    * @public
-   * <p>The ID of the current association between the original network ACL and the subnet.</p>
+   * <p>The ID of the Reserved Instance offering to purchase.</p>
    */
-  AssociationId: string | undefined;
+  ReservedInstancesOfferingId: string | undefined;
 
   /**
    * @public
    * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   *        and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *        Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
 
   /**
    * @public
-   * <p>The ID of the new network ACL to associate with the subnet.</p>
+   * <p>Specified for Reserved Instance Marketplace offerings to limit the total order and ensure that the Reserved Instances are not purchased at unexpected prices.</p>
    */
-  NetworkAclId: string | undefined;
-}
+  LimitPrice?: ReservedInstanceLimitPrice;
 
-/**
- * @public
- */
-export interface ReplaceNetworkAclAssociationResult {
   /**
    * @public
-   * <p>The ID of the new association.</p>
+   * <p>The time at which to purchase the Reserved Instance, in UTC format (for example, <i>YYYY</i>-<i>MM</i>-<i>DD</i>T<i>HH</i>:<i>MM</i>:<i>SS</i>Z).</p>
    */
-  NewAssociationId?: string;
+  PurchaseTime?: Date;
 }
 
 /**
  * @public
+ * <p>Contains the output of PurchaseReservedInstancesOffering.</p>
  */
-export interface ReplaceNetworkAclEntryRequest {
-  /**
-   * @public
-   * <p>The IPv4 network range to allow or deny, in CIDR notation (for example
-   *                 <code>172.16.0.0/24</code>).</p>
-   */
-  CidrBlock?: string;
-
+export interface PurchaseReservedInstancesOfferingResult {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The IDs of the purchased Reserved Instances. If your purchase crosses into a discounted
+   *       pricing tier, the final Reserved Instances IDs might change. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/concepts-reserved-instances-application.html#crossing-pricing-tiers">Crossing
+   *         pricing tiers</a> in the <i>Amazon Elastic Compute Cloud User Guide</i>.</p>
    */
-  DryRun?: boolean;
+  ReservedInstancesId?: string;
+}
 
+/**
+ * @public
+ * <p>Describes a request to purchase Scheduled Instances.</p>
+ */
+export interface PurchaseRequest {
   /**
    * @public
-   * <p>Indicates whether to replace the egress rule.</p>
-   *          <p>Default: If no value is specified, we replace the ingress rule.</p>
+   * <p>The number of instances.</p>
    */
-  Egress: boolean | undefined;
+  InstanceCount: number | undefined;
 
   /**
    * @public
-   * <p>ICMP protocol: The ICMP or ICMPv6 type and code. Required if specifying protocol
-   * 		        1 (ICMP) or protocol 58 (ICMPv6) with an IPv6 CIDR block.</p>
+   * <p>The purchase token.</p>
    */
-  IcmpTypeCode?: IcmpTypeCode;
+  PurchaseToken: string | undefined;
+}
 
+/**
+ * @public
+ * <p>Contains the parameters for PurchaseScheduledInstances.</p>
+ */
+export interface PurchaseScheduledInstancesRequest {
   /**
    * @public
-   * <p>The IPv6 network range to allow or deny, in CIDR notation (for example
-   *                 <code>2001:bd8:1234:1a00::/64</code>).</p>
+   * <p>Unique, case-sensitive identifier that ensures the idempotency of the request.
+   *          For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html">Ensuring Idempotency</a>.</p>
    */
-  Ipv6CidrBlock?: string;
+  ClientToken?: string;
 
   /**
    * @public
-   * <p>The ID of the ACL.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  NetworkAclId: string | undefined;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>TCP or UDP protocols: The range of ports the rule applies to.
-   * 		        Required if specifying protocol 6 (TCP) or 17 (UDP).</p>
+   * <p>The purchase requests.</p>
    */
-  PortRange?: PortRange;
+  PurchaseRequests: PurchaseRequest[] | undefined;
+}
 
+/**
+ * @public
+ * <p>Contains the output of PurchaseScheduledInstances.</p>
+ */
+export interface PurchaseScheduledInstancesResult {
   /**
    * @public
-   * <p>The protocol number. A value of "-1" means all protocols. If you specify "-1" or a
-   *            protocol number other than "6" (TCP), "17" (UDP), or "1" (ICMP), traffic on all ports is
-   *            allowed, regardless of any ports or ICMP types or codes that you specify. If you specify
-   *            protocol "58" (ICMPv6) and specify an IPv4 CIDR block, traffic for all ICMP types and
-   *            codes allowed, regardless of any that you specify. If you specify protocol "58" (ICMPv6)
-   *            and specify an IPv6 CIDR block, you must specify an ICMP type and code.</p>
+   * <p>Information about the Scheduled Instances.</p>
    */
-  Protocol: string | undefined;
+  ScheduledInstanceSet?: ScheduledInstance[];
+}
 
+/**
+ * @public
+ */
+export interface RebootInstancesRequest {
   /**
    * @public
-   * <p>Indicates whether to allow or deny the traffic that matches the rule.</p>
+   * <p>The instance IDs.</p>
    */
-  RuleAction: RuleAction | undefined;
+  InstanceIds: string[] | undefined;
 
   /**
    * @public
-   * <p>The rule number of the entry to replace.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  RuleNumber: number | undefined;
+  DryRun?: boolean;
 }
 
 /**
  * @public
+ * <p>Contains the parameters for RegisterImage.</p>
  */
-export interface ReplaceRouteRequest {
+export interface RegisterImageRequest {
   /**
    * @public
-   * <p>The IPv4 CIDR address block used for the destination match. The value that you
-   * 			provide must match the CIDR of an existing route in the table.</p>
+   * <p>The full path to your AMI manifest in Amazon S3 storage. The specified bucket must have the
+   *    		<code>aws-exec-read</code> canned access control list (ACL) to ensure that it can be accessed
+   *    		by Amazon EC2. For more information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/acl-overview.html#canned-acl">Canned ACLs</a> in the
+   *    		<i>Amazon S3 Service Developer Guide</i>.</p>
    */
-  DestinationCidrBlock?: string;
+  ImageLocation?: string;
+
+  /**
+   * @public
+   * <p>The architecture of the AMI.</p>
+   *          <p>Default: For Amazon EBS-backed AMIs, <code>i386</code>.
+   *         For instance store-backed AMIs, the architecture specified in the manifest file.</p>
+   */
+  Architecture?: ArchitectureValues;
 
   /**
    * @public
-   * <p>The IPv6 CIDR address block used for the destination match. The value that you
-   * 			provide must match the CIDR of an existing route in the table.</p>
+   * <p>The block device mapping entries.</p>
+   *          <p>If you specify an Amazon EBS volume using the ID of an Amazon EBS snapshot, you can't specify the encryption state of the volume.</p>
+   *          <p>If you create an AMI on an Outpost, then all backing snapshots must be on the same
+   *       Outpost or in the Region of that Outpost. AMIs on an Outpost that include local snapshots can
+   *       be used to launch instances on the same Outpost only. For more information, <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/snapshots-outposts.html#ami">Amazon EBS local
+   *         snapshots on Outposts</a> in the <i>Amazon EC2 User Guide</i>.</p>
    */
-  DestinationIpv6CidrBlock?: string;
+  BlockDeviceMappings?: BlockDeviceMapping[];
 
   /**
    * @public
-   * <p>The ID of the prefix list for the route.</p>
+   * <p>A description for your AMI.</p>
    */
-  DestinationPrefixListId?: string;
+  Description?: string;
 
   /**
    * @public
    * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * 			and provides an error response. If you have the required permissions, the error response is
+   * 			<code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
   DryRun?: boolean;
 
   /**
    * @public
-   * <p>The ID of a VPC endpoint. Supported for Gateway Load Balancer endpoints only.</p>
-   */
-  VpcEndpointId?: string;
-
-  /**
-   * @public
-   * <p>[IPv6 traffic only] The ID of an egress-only internet gateway.</p>
+   * <p>Set to <code>true</code> to enable enhanced networking with ENA for the AMI and any instances that you launch from the AMI.</p>
+   *          <p>This option is supported only for HVM AMIs. Specifying this option with a PV AMI can make instances launched from the AMI unreachable.</p>
    */
-  EgressOnlyInternetGatewayId?: string;
+  EnaSupport?: boolean;
 
   /**
    * @public
-   * <p>The ID of an internet gateway or virtual private gateway.</p>
+   * <p>The ID of the kernel.</p>
    */
-  GatewayId?: string;
+  KernelId?: string;
 
   /**
    * @public
-   * <p>The ID of a NAT instance in your VPC.</p>
+   * <p>A name for your AMI.</p>
+   *          <p>Constraints: 3-128 alphanumeric characters, parentheses (()), square brackets ([]), spaces ( ), periods (.), slashes (/), dashes (-), single quotes ('), at-signs (@), or underscores(_)</p>
    */
-  InstanceId?: string;
+  Name: string | undefined;
 
   /**
    * @public
-   * <p>Specifies whether to reset the local route to its default target (<code>local</code>).</p>
+   * <p>The billing product codes. Your account must be authorized to specify billing product codes.</p>
+   *          <p>If your account is not authorized to specify billing product codes, you can publish AMIs
+   *       that include billable software and list them on the Amazon Web Services Marketplace. You must first register as a seller
+   *       on the Amazon Web Services Marketplace. For more information, see <a href="https://docs.aws.amazon.com/marketplace/latest/userguide/user-guide-for-sellers.html">Getting started as a
+   *         seller</a> and <a href="https://docs.aws.amazon.com/marketplace/latest/userguide/ami-products.html">AMI-based
+   *         products</a> in the <i>Amazon Web Services Marketplace Seller Guide</i>.</p>
    */
-  LocalTarget?: boolean;
+  BillingProducts?: string[];
 
   /**
    * @public
-   * <p>[IPv4 traffic only] The ID of a NAT gateway.</p>
+   * <p>The ID of the RAM disk.</p>
    */
-  NatGatewayId?: string;
+  RamdiskId?: string;
 
   /**
    * @public
-   * <p>The ID of a transit gateway.</p>
+   * <p>The device name of the root device volume (for example, <code>/dev/sda1</code>).</p>
    */
-  TransitGatewayId?: string;
+  RootDeviceName?: string;
 
   /**
    * @public
-   * <p>The ID of the local gateway.</p>
+   * <p>Set to <code>simple</code> to enable enhanced networking with the Intel 82599 Virtual Function interface for the AMI and any instances that you launch from the AMI.</p>
+   *          <p>There is no way to disable <code>sriovNetSupport</code> at this time.</p>
+   *          <p>This option is supported only for HVM AMIs. Specifying this option with a PV AMI can make instances launched from the AMI unreachable.</p>
    */
-  LocalGatewayId?: string;
+  SriovNetSupport?: string;
 
   /**
    * @public
-   * <p>[IPv4 traffic only] The ID of a carrier gateway.</p>
+   * <p>The type of virtualization (<code>hvm</code> | <code>paravirtual</code>).</p>
+   *          <p>Default: <code>paravirtual</code>
+   *          </p>
    */
-  CarrierGatewayId?: string;
+  VirtualizationType?: string;
 
   /**
    * @public
-   * <p>The ID of a network interface.</p>
+   * <p>The boot mode of the AMI. A value of <code>uefi-preferred</code> indicates that the AMI supports both UEFI and Legacy BIOS.</p>
+   *          <note>
+   *             <p>The operating system contained in the AMI must be configured to support the specified boot mode.</p>
+   *          </note>
+   *          <p>For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ami-boot.html">Boot modes</a> in the
+   *         <i>Amazon EC2 User Guide</i>.</p>
    */
-  NetworkInterfaceId?: string;
+  BootMode?: BootModeValues;
 
   /**
    * @public
-   * <p>The ID of the route table.</p>
+   * <p>Set to <code>v2.0</code> to enable Trusted Platform Module (TPM) support. For more
+   *       information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/nitrotpm.html">NitroTPM</a> in the <i>Amazon EC2 User Guide</i>.</p>
    */
-  RouteTableId: string | undefined;
+  TpmSupport?: TpmSupportValues;
 
   /**
    * @public
-   * <p>The ID of a VPC peering connection.</p>
+   * <p>Base64 representation of the non-volatile UEFI variable store. To retrieve the UEFI data,
+   *       use the <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetInstanceUefiData">GetInstanceUefiData</a> command. You can inspect and modify the UEFI data by using the
+   *         <a href="https://github.com/awslabs/python-uefivars">python-uefivars tool</a> on
+   *       GitHub. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/uefi-secure-boot.html">UEFI Secure Boot</a> in the
+   *         <i>Amazon EC2 User Guide</i>.</p>
    */
-  VpcPeeringConnectionId?: string;
+  UefiData?: string;
 
   /**
    * @public
-   * <p>The Amazon Resource Name (ARN) of the core network.</p>
+   * <p>Set to <code>v2.0</code> to indicate that IMDSv2 is specified in the AMI. Instances
+   *       launched from this AMI will have <code>HttpTokens</code> automatically set to
+   *         <code>required</code> so that, by default, the instance requires that IMDSv2 is used when
+   *       requesting instance metadata. In addition, <code>HttpPutResponseHopLimit</code> is set to
+   *         <code>2</code>. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/configuring-IMDS-new-instances.html#configure-IMDS-new-instances-ami-configuration">Configure
+   *         the AMI</a> in the <i>Amazon EC2 User Guide</i>.</p>
+   *          <note>
+   *             <p>If you set the value to <code>v2.0</code>, make sure that your AMI software can support IMDSv2.</p>
+   *          </note>
    */
-  CoreNetworkArn?: string;
+  ImdsSupport?: ImdsSupportValues;
 }
 
 /**
  * @public
+ * <p>Contains the output of RegisterImage.</p>
  */
-export interface ReplaceRouteTableAssociationRequest {
+export interface RegisterImageResult {
   /**
    * @public
-   * <p>The association ID.</p>
+   * <p>The ID of the newly registered AMI.</p>
    */
-  AssociationId: string | undefined;
+  ImageId?: string;
+}
 
+/**
+ * @public
+ * <p>Information about the tag keys to register for the current Region. You can either specify
+ *       	individual tag keys or register all tag keys in the current Region. You must specify either
+ *       	<code>IncludeAllTagsOfInstance</code> or <code>InstanceTagKeys</code> in the request</p>
+ */
+export interface RegisterInstanceTagAttributeRequest {
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>Indicates whether to register all tag keys in the current Region. Specify <code>true</code>
+   *       	to register all tag keys.</p>
    */
-  DryRun?: boolean;
+  IncludeAllTagsOfInstance?: boolean;
 
   /**
    * @public
-   * <p>The ID of the new route table to associate with the subnet.</p>
+   * <p>The tag keys to register.</p>
    */
-  RouteTableId: string | undefined;
+  InstanceTagKeys?: string[];
 }
 
 /**
  * @public
  */
-export interface ReplaceRouteTableAssociationResult {
+export interface RegisterInstanceEventNotificationAttributesRequest {
   /**
    * @public
-   * <p>The ID of the new association.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  NewAssociationId?: string;
+  DryRun?: boolean;
 
   /**
    * @public
-   * <p>The state of the association.</p>
+   * <p>Information about the tag keys to register.</p>
    */
-  AssociationState?: RouteTableAssociationState;
+  InstanceTagAttribute: RegisterInstanceTagAttributeRequest | undefined;
 }
 
 /**
  * @public
  */
-export interface ReplaceTransitGatewayRouteRequest {
+export interface RegisterInstanceEventNotificationAttributesResult {
   /**
    * @public
-   * <p>The CIDR range used for the destination match. Routing decisions are based on the most specific match.</p>
+   * <p>The resulting set of tag keys.</p>
    */
-  DestinationCidrBlock: string | undefined;
+  InstanceTagAttribute?: InstanceTagNotificationAttribute;
+}
 
+/**
+ * @public
+ */
+export interface RegisterTransitGatewayMulticastGroupMembersRequest {
   /**
    * @public
-   * <p>The ID of the route table.</p>
+   * <p>The ID of the transit gateway multicast domain.</p>
    */
-  TransitGatewayRouteTableId: string | undefined;
+  TransitGatewayMulticastDomainId: string | undefined;
 
   /**
    * @public
-   * <p>The ID of the attachment.</p>
+   * <p>The IP address assigned to the  transit gateway multicast group.</p>
    */
-  TransitGatewayAttachmentId?: string;
+  GroupIpAddress?: string;
 
   /**
    * @public
-   * <p>Indicates whether traffic matching this route is to be dropped.</p>
+   * <p>The group members' network interface IDs to register with the  transit gateway multicast group.</p>
    */
-  Blackhole?: boolean;
+  NetworkInterfaceIds: string[] | undefined;
 
   /**
    * @public
@@ -9117,215 +9312,122 @@ export interface ReplaceTransitGatewayRouteRequest {
 
 /**
  * @public
+ * <p>Describes the registered  transit gateway multicast group members.</p>
  */
-export interface ReplaceTransitGatewayRouteResult {
-  /**
-   * @public
-   * <p>Information about the modified route.</p>
-   */
-  Route?: TransitGatewayRoute;
-}
-
-/**
- * @public
- */
-export interface ReplaceVpnTunnelRequest {
-  /**
-   * @public
-   * <p>The ID of the Site-to-Site VPN connection. </p>
-   */
-  VpnConnectionId: string | undefined;
-
+export interface TransitGatewayMulticastRegisteredGroupMembers {
   /**
    * @public
-   * <p>The external IP address of the VPN tunnel.</p>
+   * <p>The ID of the transit gateway multicast domain.</p>
    */
-  VpnTunnelOutsideIpAddress: string | undefined;
+  TransitGatewayMulticastDomainId?: string;
 
   /**
    * @public
-   * <p>Trigger pending tunnel endpoint maintenance.</p>
+   * <p>The ID of the registered network interfaces.</p>
    */
-  ApplyPendingMaintenance?: boolean;
+  RegisteredNetworkInterfaceIds?: string[];
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The IP address assigned to the  transit gateway multicast group.</p>
    */
-  DryRun?: boolean;
+  GroupIpAddress?: string;
 }
 
 /**
  * @public
  */
-export interface ReplaceVpnTunnelResult {
+export interface RegisterTransitGatewayMulticastGroupMembersResult {
   /**
    * @public
-   * <p>Confirmation of replace tunnel operation.</p>
+   * <p>Information about the registered  transit gateway multicast group members.</p>
    */
-  Return?: boolean;
+  RegisteredMulticastGroupMembers?: TransitGatewayMulticastRegisteredGroupMembers;
 }
 
-/**
- * @public
- * @enum
- */
-export const ReportInstanceReasonCodes = {
-  instance_stuck_in_state: "instance-stuck-in-state",
-  not_accepting_credentials: "not-accepting-credentials",
-  other: "other",
-  password_not_available: "password-not-available",
-  performance_ebs_volume: "performance-ebs-volume",
-  performance_instance_store: "performance-instance-store",
-  performance_network: "performance-network",
-  performance_other: "performance-other",
-  unresponsive: "unresponsive",
-} as const;
-
-/**
- * @public
- */
-export type ReportInstanceReasonCodes = (typeof ReportInstanceReasonCodes)[keyof typeof ReportInstanceReasonCodes];
-
-/**
- * @public
- * @enum
- */
-export const ReportStatusType = {
-  impaired: "impaired",
-  ok: "ok",
-} as const;
-
 /**
  * @public
  */
-export type ReportStatusType = (typeof ReportStatusType)[keyof typeof ReportStatusType];
-
-/**
- * @public
- */
-export interface ReportInstanceStatusRequest {
+export interface RegisterTransitGatewayMulticastGroupSourcesRequest {
   /**
    * @public
-   * <p>Descriptive text about the health state of your instance.</p>
+   * <p>The ID of the transit gateway multicast domain.</p>
    */
-  Description?: string;
+  TransitGatewayMulticastDomainId: string | undefined;
 
   /**
    * @public
-   * <p>Checks whether you have the required permissions for the action, without actually making the request,
-   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   * <p>The IP address assigned to the  transit gateway multicast group.</p>
    */
-  DryRun?: boolean;
+  GroupIpAddress?: string;
 
   /**
    * @public
-   * <p>The time at which the reported instance health state ended.</p>
+   * <p>The group sources' network interface IDs to register with the  transit gateway multicast group.</p>
    */
-  EndTime?: Date;
+  NetworkInterfaceIds: string[] | undefined;
 
   /**
    * @public
-   * <p>The instances.</p>
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
    */
-  Instances: string[] | undefined;
+  DryRun?: boolean;
+}
 
+/**
+ * @public
+ * <p>Describes the members registered with the  transit gateway multicast group.</p>
+ */
+export interface TransitGatewayMulticastRegisteredGroupSources {
   /**
    * @public
-   * <p>The reason codes that describe the health state of your instance.</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>instance-stuck-in-state</code>: My instance is stuck in a state.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>unresponsive</code>: My instance is unresponsive.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>not-accepting-credentials</code>: My instance is not accepting my
-   *                     credentials.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>password-not-available</code>: A password is not available for my
-   *                     instance.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>performance-network</code>: My instance is experiencing performance
-   *                     problems that I believe are network related.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>performance-instance-store</code>: My instance is experiencing performance
-   *                     problems that I believe are related to the instance stores.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>performance-ebs-volume</code>: My instance is experiencing performance
-   *                     problems that I believe are related to an EBS volume.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>performance-other</code>: My instance is experiencing performance
-   *                     problems.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>other</code>: [explain using the description parameter]</p>
-   *             </li>
-   *          </ul>
+   * <p>The ID of the transit gateway multicast domain.</p>
    */
-  ReasonCodes: ReportInstanceReasonCodes[] | undefined;
+  TransitGatewayMulticastDomainId?: string;
 
   /**
    * @public
-   * <p>The time at which the reported instance health state began.</p>
+   * <p>The IDs of the network interfaces members registered with the  transit gateway multicast group.</p>
    */
-  StartTime?: Date;
+  RegisteredNetworkInterfaceIds?: string[];
 
   /**
    * @public
-   * <p>The status of all instances listed.</p>
+   * <p>The IP address assigned to the  transit gateway multicast group.</p>
    */
-  Status: ReportStatusType | undefined;
+  GroupIpAddress?: string;
 }
 
 /**
  * @public
- * <p>Contains the parameters for RequestSpotFleet.</p>
  */
-export interface RequestSpotFleetRequest {
-  /**
-   * @public
-   * <p>Checks whether you have the required permissions for the action, without actually
-   *             making the request, and provides an error response. If you have the required
-   *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
-   *                 <code>UnauthorizedOperation</code>.</p>
-   */
-  DryRun?: boolean;
-
+export interface RegisterTransitGatewayMulticastGroupSourcesResult {
   /**
    * @public
-   * <p>The configuration for the Spot Fleet request.</p>
+   * <p>Information about the  transit gateway multicast group sources.</p>
    */
-  SpotFleetRequestConfig: SpotFleetRequestConfigData | undefined;
+  RegisteredMulticastGroupSources?: TransitGatewayMulticastRegisteredGroupSources;
 }
 
 /**
- * @public
- * <p>Contains the output of RequestSpotFleet.</p>
+ * @internal
  */
-export interface RequestSpotFleetResponse {
-  /**
-   * @public
-   * <p>The ID of the Spot Fleet request.</p>
-   */
-  SpotFleetRequestId?: string;
-}
+export const GetLaunchTemplateDataResultFilterSensitiveLog = (obj: GetLaunchTemplateDataResult): any => ({
+  ...obj,
+  ...(obj.LaunchTemplateData && {
+    LaunchTemplateData: ResponseLaunchTemplateDataFilterSensitiveLog(obj.LaunchTemplateData),
+  }),
+});
+
+/**
+ * @internal
+ */
+export const GetPasswordDataResultFilterSensitiveLog = (obj: GetPasswordDataResult): any => ({
+  ...obj,
+  ...(obj.PasswordData && { PasswordData: SENSITIVE_STRING }),
+});
 
 /**
  * @internal
@@ -9538,13 +9640,3 @@ export const ModifyVpnTunnelOptionsResultFilterSensitiveLog = (obj: ModifyVpnTun
   ...obj,
   ...(obj.VpnConnection && { VpnConnection: VpnConnectionFilterSensitiveLog(obj.VpnConnection) }),
 });
-
-/**
- * @internal
- */
-export const RequestSpotFleetRequestFilterSensitiveLog = (obj: RequestSpotFleetRequest): any => ({
-  ...obj,
-  ...(obj.SpotFleetRequestConfig && {
-    SpotFleetRequestConfig: SpotFleetRequestConfigDataFilterSensitiveLog(obj.SpotFleetRequestConfig),
-  }),
-});
diff --git a/clients/client-ec2/src/models/models_7.ts b/clients/client-ec2/src/models/models_7.ts
index ef808f6b7aa4a..776d131db2bd0 100644
--- a/clients/client-ec2/src/models/models_7.ts
+++ b/clients/client-ec2/src/models/models_7.ts
@@ -7,11 +7,18 @@ import {
   AddressAttributeName,
   ByoipCidr,
   ClientVpnAuthorizationRuleStatus,
+  IamInstanceProfileAssociation,
   IamInstanceProfileSpecification,
   IpPermission,
   NatGatewayAddress,
+  PortRange,
+  RouteTableAssociationState,
   TagSpecification,
   TransitGatewayAttachmentResourceType,
+  TransitGatewayMulticastDomainAssociations,
+  TransitGatewayPeeringAttachment,
+  TransitGatewayVpcAttachment,
+  UnsuccessfulItem,
 } from "./models_0";
 import {
   AmdSevSnpSpecification,
@@ -19,19 +26,22 @@ import {
   CreditSpecificationRequest,
   ElasticGpuSpecification,
   HostnameType,
+  IcmpTypeCode,
   InstanceInterruptionBehavior,
   InstanceIpv6Address,
   LocalGatewayRoute,
   ManagedPrefixList,
   MarketType,
   Placement,
+  RuleAction,
   ShutdownBehavior,
   SpotInstanceType,
 } from "./models_1";
 import { SnapshotState, SSEType, TransitGatewayRoute } from "./models_2";
-import { ClientVpnConnectionStatus, Filter, InstanceAttributeName } from "./models_3";
+import { ClientVpnConnectionStatus, Filter } from "./models_3";
 import {
   HttpTokensState,
+  InstanceAttributeName,
   InstanceAutoRecoveryState,
   InstanceMetadataEndpointState,
   InstanceMetadataProtocolState,
@@ -42,12 +52,829 @@ import {
   NetworkInsightsAnalysis,
   RunInstancesMonitoringEnabled,
   SnapshotAttributeName,
+  SpotFleetRequestConfigData,
+  SpotFleetRequestConfigDataFilterSensitiveLog,
   SpotInstanceRequest,
   SpotInstanceRequestFilterSensitiveLog,
   SpotPlacement,
 } from "./models_4";
 import { CapacityReservationSpecification, InstanceMonitoring, Status } from "./models_6";
 
+/**
+ * @public
+ */
+export interface RejectTransitGatewayMulticastDomainAssociationsRequest {
+  /**
+   * @public
+   * <p>The ID of the transit gateway multicast domain.</p>
+   */
+  TransitGatewayMulticastDomainId?: string;
+
+  /**
+   * @public
+   * <p>The ID of the transit gateway attachment.</p>
+   */
+  TransitGatewayAttachmentId?: string;
+
+  /**
+   * @public
+   * <p>The IDs of the subnets to associate with the transit gateway multicast domain.</p>
+   */
+  SubnetIds?: string[];
+
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
+}
+
+/**
+ * @public
+ */
+export interface RejectTransitGatewayMulticastDomainAssociationsResult {
+  /**
+   * @public
+   * <p>Information about the multicast domain associations.</p>
+   */
+  Associations?: TransitGatewayMulticastDomainAssociations;
+}
+
+/**
+ * @public
+ */
+export interface RejectTransitGatewayPeeringAttachmentRequest {
+  /**
+   * @public
+   * <p>The ID of the transit gateway peering attachment.</p>
+   */
+  TransitGatewayAttachmentId: string | undefined;
+
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
+}
+
+/**
+ * @public
+ */
+export interface RejectTransitGatewayPeeringAttachmentResult {
+  /**
+   * @public
+   * <p>The transit gateway peering attachment.</p>
+   */
+  TransitGatewayPeeringAttachment?: TransitGatewayPeeringAttachment;
+}
+
+/**
+ * @public
+ */
+export interface RejectTransitGatewayVpcAttachmentRequest {
+  /**
+   * @public
+   * <p>The ID of the attachment.</p>
+   */
+  TransitGatewayAttachmentId: string | undefined;
+
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
+}
+
+/**
+ * @public
+ */
+export interface RejectTransitGatewayVpcAttachmentResult {
+  /**
+   * @public
+   * <p>Information about the attachment.</p>
+   */
+  TransitGatewayVpcAttachment?: TransitGatewayVpcAttachment;
+}
+
+/**
+ * @public
+ */
+export interface RejectVpcEndpointConnectionsRequest {
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
+
+  /**
+   * @public
+   * <p>The ID of the service.</p>
+   */
+  ServiceId: string | undefined;
+
+  /**
+   * @public
+   * <p>The IDs of the VPC endpoints.</p>
+   */
+  VpcEndpointIds: string[] | undefined;
+}
+
+/**
+ * @public
+ */
+export interface RejectVpcEndpointConnectionsResult {
+  /**
+   * @public
+   * <p>Information about the endpoints that were not rejected, if applicable.</p>
+   */
+  Unsuccessful?: UnsuccessfulItem[];
+}
+
+/**
+ * @public
+ */
+export interface RejectVpcPeeringConnectionRequest {
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
+
+  /**
+   * @public
+   * <p>The ID of the VPC peering connection.</p>
+   */
+  VpcPeeringConnectionId: string | undefined;
+}
+
+/**
+ * @public
+ */
+export interface RejectVpcPeeringConnectionResult {
+  /**
+   * @public
+   * <p>Returns <code>true</code> if the request succeeds; otherwise, it returns an error.</p>
+   */
+  Return?: boolean;
+}
+
+/**
+ * @public
+ */
+export interface ReleaseAddressRequest {
+  /**
+   * @public
+   * <p>The allocation ID. This parameter is required.</p>
+   */
+  AllocationId?: string;
+
+  /**
+   * @public
+   * <p>Deprecated.</p>
+   */
+  PublicIp?: string;
+
+  /**
+   * @public
+   * <p>The set of Availability Zones, Local Zones, or Wavelength Zones from which Amazon Web Services advertises
+   *       IP addresses.</p>
+   *          <p>If you provide an incorrect network border group, you receive an <code>InvalidAddress.NotFound</code> error.</p>
+   */
+  NetworkBorderGroup?: string;
+
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
+}
+
+/**
+ * @public
+ */
+export interface ReleaseHostsRequest {
+  /**
+   * @public
+   * <p>The IDs of the Dedicated Hosts to release.</p>
+   */
+  HostIds: string[] | undefined;
+}
+
+/**
+ * @public
+ */
+export interface ReleaseHostsResult {
+  /**
+   * @public
+   * <p>The IDs of the Dedicated Hosts that were successfully released.</p>
+   */
+  Successful?: string[];
+
+  /**
+   * @public
+   * <p>The IDs of the Dedicated Hosts that could not be released, including an error
+   *             message.</p>
+   */
+  Unsuccessful?: UnsuccessfulItem[];
+}
+
+/**
+ * @public
+ */
+export interface ReleaseIpamPoolAllocationRequest {
+  /**
+   * @public
+   * <p>A check for whether you have the required permissions for the action without actually making the request
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
+
+  /**
+   * @public
+   * <p>The ID of the IPAM pool which contains the allocation you want to release.</p>
+   */
+  IpamPoolId: string | undefined;
+
+  /**
+   * @public
+   * <p>The CIDR of the allocation you want to release.</p>
+   */
+  Cidr: string | undefined;
+
+  /**
+   * @public
+   * <p>The ID of the allocation.</p>
+   */
+  IpamPoolAllocationId: string | undefined;
+}
+
+/**
+ * @public
+ */
+export interface ReleaseIpamPoolAllocationResult {
+  /**
+   * @public
+   * <p>Indicates if the release was successful.</p>
+   */
+  Success?: boolean;
+}
+
+/**
+ * @public
+ */
+export interface ReplaceIamInstanceProfileAssociationRequest {
+  /**
+   * @public
+   * <p>The IAM instance profile.</p>
+   */
+  IamInstanceProfile: IamInstanceProfileSpecification | undefined;
+
+  /**
+   * @public
+   * <p>The ID of the existing IAM instance profile association.</p>
+   */
+  AssociationId: string | undefined;
+}
+
+/**
+ * @public
+ */
+export interface ReplaceIamInstanceProfileAssociationResult {
+  /**
+   * @public
+   * <p>Information about the IAM instance profile association.</p>
+   */
+  IamInstanceProfileAssociation?: IamInstanceProfileAssociation;
+}
+
+/**
+ * @public
+ */
+export interface ReplaceNetworkAclAssociationRequest {
+  /**
+   * @public
+   * <p>The ID of the current association between the original network ACL and the subnet.</p>
+   */
+  AssociationId: string | undefined;
+
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
+
+  /**
+   * @public
+   * <p>The ID of the new network ACL to associate with the subnet.</p>
+   */
+  NetworkAclId: string | undefined;
+}
+
+/**
+ * @public
+ */
+export interface ReplaceNetworkAclAssociationResult {
+  /**
+   * @public
+   * <p>The ID of the new association.</p>
+   */
+  NewAssociationId?: string;
+}
+
+/**
+ * @public
+ */
+export interface ReplaceNetworkAclEntryRequest {
+  /**
+   * @public
+   * <p>The IPv4 network range to allow or deny, in CIDR notation (for example
+   *                 <code>172.16.0.0/24</code>).</p>
+   */
+  CidrBlock?: string;
+
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
+
+  /**
+   * @public
+   * <p>Indicates whether to replace the egress rule.</p>
+   *          <p>Default: If no value is specified, we replace the ingress rule.</p>
+   */
+  Egress: boolean | undefined;
+
+  /**
+   * @public
+   * <p>ICMP protocol: The ICMP or ICMPv6 type and code. Required if specifying protocol
+   * 		        1 (ICMP) or protocol 58 (ICMPv6) with an IPv6 CIDR block.</p>
+   */
+  IcmpTypeCode?: IcmpTypeCode;
+
+  /**
+   * @public
+   * <p>The IPv6 network range to allow or deny, in CIDR notation (for example
+   *                 <code>2001:bd8:1234:1a00::/64</code>).</p>
+   */
+  Ipv6CidrBlock?: string;
+
+  /**
+   * @public
+   * <p>The ID of the ACL.</p>
+   */
+  NetworkAclId: string | undefined;
+
+  /**
+   * @public
+   * <p>TCP or UDP protocols: The range of ports the rule applies to.
+   * 		        Required if specifying protocol 6 (TCP) or 17 (UDP).</p>
+   */
+  PortRange?: PortRange;
+
+  /**
+   * @public
+   * <p>The protocol number. A value of "-1" means all protocols. If you specify "-1" or a
+   *            protocol number other than "6" (TCP), "17" (UDP), or "1" (ICMP), traffic on all ports is
+   *            allowed, regardless of any ports or ICMP types or codes that you specify. If you specify
+   *            protocol "58" (ICMPv6) and specify an IPv4 CIDR block, traffic for all ICMP types and
+   *            codes allowed, regardless of any that you specify. If you specify protocol "58" (ICMPv6)
+   *            and specify an IPv6 CIDR block, you must specify an ICMP type and code.</p>
+   */
+  Protocol: string | undefined;
+
+  /**
+   * @public
+   * <p>Indicates whether to allow or deny the traffic that matches the rule.</p>
+   */
+  RuleAction: RuleAction | undefined;
+
+  /**
+   * @public
+   * <p>The rule number of the entry to replace.</p>
+   */
+  RuleNumber: number | undefined;
+}
+
+/**
+ * @public
+ */
+export interface ReplaceRouteRequest {
+  /**
+   * @public
+   * <p>The IPv4 CIDR address block used for the destination match. The value that you
+   * 			provide must match the CIDR of an existing route in the table.</p>
+   */
+  DestinationCidrBlock?: string;
+
+  /**
+   * @public
+   * <p>The IPv6 CIDR address block used for the destination match. The value that you
+   * 			provide must match the CIDR of an existing route in the table.</p>
+   */
+  DestinationIpv6CidrBlock?: string;
+
+  /**
+   * @public
+   * <p>The ID of the prefix list for the route.</p>
+   */
+  DestinationPrefixListId?: string;
+
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
+
+  /**
+   * @public
+   * <p>The ID of a VPC endpoint. Supported for Gateway Load Balancer endpoints only.</p>
+   */
+  VpcEndpointId?: string;
+
+  /**
+   * @public
+   * <p>[IPv6 traffic only] The ID of an egress-only internet gateway.</p>
+   */
+  EgressOnlyInternetGatewayId?: string;
+
+  /**
+   * @public
+   * <p>The ID of an internet gateway or virtual private gateway.</p>
+   */
+  GatewayId?: string;
+
+  /**
+   * @public
+   * <p>The ID of a NAT instance in your VPC.</p>
+   */
+  InstanceId?: string;
+
+  /**
+   * @public
+   * <p>Specifies whether to reset the local route to its default target (<code>local</code>).</p>
+   */
+  LocalTarget?: boolean;
+
+  /**
+   * @public
+   * <p>[IPv4 traffic only] The ID of a NAT gateway.</p>
+   */
+  NatGatewayId?: string;
+
+  /**
+   * @public
+   * <p>The ID of a transit gateway.</p>
+   */
+  TransitGatewayId?: string;
+
+  /**
+   * @public
+   * <p>The ID of the local gateway.</p>
+   */
+  LocalGatewayId?: string;
+
+  /**
+   * @public
+   * <p>[IPv4 traffic only] The ID of a carrier gateway.</p>
+   */
+  CarrierGatewayId?: string;
+
+  /**
+   * @public
+   * <p>The ID of a network interface.</p>
+   */
+  NetworkInterfaceId?: string;
+
+  /**
+   * @public
+   * <p>The ID of the route table.</p>
+   */
+  RouteTableId: string | undefined;
+
+  /**
+   * @public
+   * <p>The ID of a VPC peering connection.</p>
+   */
+  VpcPeeringConnectionId?: string;
+
+  /**
+   * @public
+   * <p>The Amazon Resource Name (ARN) of the core network.</p>
+   */
+  CoreNetworkArn?: string;
+}
+
+/**
+ * @public
+ */
+export interface ReplaceRouteTableAssociationRequest {
+  /**
+   * @public
+   * <p>The association ID.</p>
+   */
+  AssociationId: string | undefined;
+
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
+
+  /**
+   * @public
+   * <p>The ID of the new route table to associate with the subnet.</p>
+   */
+  RouteTableId: string | undefined;
+}
+
+/**
+ * @public
+ */
+export interface ReplaceRouteTableAssociationResult {
+  /**
+   * @public
+   * <p>The ID of the new association.</p>
+   */
+  NewAssociationId?: string;
+
+  /**
+   * @public
+   * <p>The state of the association.</p>
+   */
+  AssociationState?: RouteTableAssociationState;
+}
+
+/**
+ * @public
+ */
+export interface ReplaceTransitGatewayRouteRequest {
+  /**
+   * @public
+   * <p>The CIDR range used for the destination match. Routing decisions are based on the most specific match.</p>
+   */
+  DestinationCidrBlock: string | undefined;
+
+  /**
+   * @public
+   * <p>The ID of the route table.</p>
+   */
+  TransitGatewayRouteTableId: string | undefined;
+
+  /**
+   * @public
+   * <p>The ID of the attachment.</p>
+   */
+  TransitGatewayAttachmentId?: string;
+
+  /**
+   * @public
+   * <p>Indicates whether traffic matching this route is to be dropped.</p>
+   */
+  Blackhole?: boolean;
+
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
+}
+
+/**
+ * @public
+ */
+export interface ReplaceTransitGatewayRouteResult {
+  /**
+   * @public
+   * <p>Information about the modified route.</p>
+   */
+  Route?: TransitGatewayRoute;
+}
+
+/**
+ * @public
+ */
+export interface ReplaceVpnTunnelRequest {
+  /**
+   * @public
+   * <p>The ID of the Site-to-Site VPN connection. </p>
+   */
+  VpnConnectionId: string | undefined;
+
+  /**
+   * @public
+   * <p>The external IP address of the VPN tunnel.</p>
+   */
+  VpnTunnelOutsideIpAddress: string | undefined;
+
+  /**
+   * @public
+   * <p>Trigger pending tunnel endpoint maintenance.</p>
+   */
+  ApplyPendingMaintenance?: boolean;
+
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
+}
+
+/**
+ * @public
+ */
+export interface ReplaceVpnTunnelResult {
+  /**
+   * @public
+   * <p>Confirmation of replace tunnel operation.</p>
+   */
+  Return?: boolean;
+}
+
+/**
+ * @public
+ * @enum
+ */
+export const ReportInstanceReasonCodes = {
+  instance_stuck_in_state: "instance-stuck-in-state",
+  not_accepting_credentials: "not-accepting-credentials",
+  other: "other",
+  password_not_available: "password-not-available",
+  performance_ebs_volume: "performance-ebs-volume",
+  performance_instance_store: "performance-instance-store",
+  performance_network: "performance-network",
+  performance_other: "performance-other",
+  unresponsive: "unresponsive",
+} as const;
+
+/**
+ * @public
+ */
+export type ReportInstanceReasonCodes = (typeof ReportInstanceReasonCodes)[keyof typeof ReportInstanceReasonCodes];
+
+/**
+ * @public
+ * @enum
+ */
+export const ReportStatusType = {
+  impaired: "impaired",
+  ok: "ok",
+} as const;
+
+/**
+ * @public
+ */
+export type ReportStatusType = (typeof ReportStatusType)[keyof typeof ReportStatusType];
+
+/**
+ * @public
+ */
+export interface ReportInstanceStatusRequest {
+  /**
+   * @public
+   * <p>Descriptive text about the health state of your instance.</p>
+   */
+  Description?: string;
+
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually making the request,
+   *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+   *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
+
+  /**
+   * @public
+   * <p>The time at which the reported instance health state ended.</p>
+   */
+  EndTime?: Date;
+
+  /**
+   * @public
+   * <p>The instances.</p>
+   */
+  Instances: string[] | undefined;
+
+  /**
+   * @public
+   * <p>The reason codes that describe the health state of your instance.</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>instance-stuck-in-state</code>: My instance is stuck in a state.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>unresponsive</code>: My instance is unresponsive.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>not-accepting-credentials</code>: My instance is not accepting my
+   *                     credentials.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>password-not-available</code>: A password is not available for my
+   *                     instance.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>performance-network</code>: My instance is experiencing performance
+   *                     problems that I believe are network related.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>performance-instance-store</code>: My instance is experiencing performance
+   *                     problems that I believe are related to the instance stores.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>performance-ebs-volume</code>: My instance is experiencing performance
+   *                     problems that I believe are related to an EBS volume.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>performance-other</code>: My instance is experiencing performance
+   *                     problems.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>other</code>: [explain using the description parameter]</p>
+   *             </li>
+   *          </ul>
+   */
+  ReasonCodes: ReportInstanceReasonCodes[] | undefined;
+
+  /**
+   * @public
+   * <p>The time at which the reported instance health state began.</p>
+   */
+  StartTime?: Date;
+
+  /**
+   * @public
+   * <p>The status of all instances listed.</p>
+   */
+  Status: ReportStatusType | undefined;
+}
+
+/**
+ * @public
+ * <p>Contains the parameters for RequestSpotFleet.</p>
+ */
+export interface RequestSpotFleetRequest {
+  /**
+   * @public
+   * <p>Checks whether you have the required permissions for the action, without actually
+   *             making the request, and provides an error response. If you have the required
+   *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
+   *                 <code>UnauthorizedOperation</code>.</p>
+   */
+  DryRun?: boolean;
+
+  /**
+   * @public
+   * <p>The configuration for the Spot Fleet request.</p>
+   */
+  SpotFleetRequestConfig: SpotFleetRequestConfigData | undefined;
+}
+
+/**
+ * @public
+ * <p>Contains the output of RequestSpotFleet.</p>
+ */
+export interface RequestSpotFleetResponse {
+  /**
+   * @public
+   * <p>The ID of the Spot Fleet request.</p>
+   */
+  SpotFleetRequestId?: string;
+}
+
 /**
  * @public
  * <p>Describes the launch specification for an instance.</p>
@@ -3258,6 +4085,16 @@ export interface WithdrawByoipCidrResult {
   ByoipCidr?: ByoipCidr;
 }
 
+/**
+ * @internal
+ */
+export const RequestSpotFleetRequestFilterSensitiveLog = (obj: RequestSpotFleetRequest): any => ({
+  ...obj,
+  ...(obj.SpotFleetRequestConfig && {
+    SpotFleetRequestConfig: SpotFleetRequestConfigDataFilterSensitiveLog(obj.SpotFleetRequestConfig),
+  }),
+});
+
 /**
  * @internal
  */
diff --git a/clients/client-ec2/src/protocols/Aws_ec2.ts b/clients/client-ec2/src/protocols/Aws_ec2.ts
index 22e75f241c8fc..2c0cac17f1ff2 100644
--- a/clients/client-ec2/src/protocols/Aws_ec2.ts
+++ b/clients/client-ec2/src/protocols/Aws_ec2.ts
@@ -96,6 +96,10 @@ import {
   AssociateInstanceEventWindowCommandInput,
   AssociateInstanceEventWindowCommandOutput,
 } from "../commands/AssociateInstanceEventWindowCommand";
+import {
+  AssociateIpamByoasnCommandInput,
+  AssociateIpamByoasnCommandOutput,
+} from "../commands/AssociateIpamByoasnCommand";
 import {
   AssociateIpamResourceDiscoveryCommandInput,
   AssociateIpamResourceDiscoveryCommandOutput,
@@ -694,6 +698,10 @@ import {
   DeprovisionByoipCidrCommandInput,
   DeprovisionByoipCidrCommandOutput,
 } from "../commands/DeprovisionByoipCidrCommand";
+import {
+  DeprovisionIpamByoasnCommandInput,
+  DeprovisionIpamByoasnCommandOutput,
+} from "../commands/DeprovisionIpamByoasnCommand";
 import {
   DeprovisionIpamPoolCidrCommandInput,
   DeprovisionIpamPoolCidrCommandOutput,
@@ -909,6 +917,7 @@ import {
   DescribeInternetGatewaysCommandInput,
   DescribeInternetGatewaysCommandOutput,
 } from "../commands/DescribeInternetGatewaysCommand";
+import { DescribeIpamByoasnCommandInput, DescribeIpamByoasnCommandOutput } from "../commands/DescribeIpamByoasnCommand";
 import { DescribeIpamPoolsCommandInput, DescribeIpamPoolsCommandOutput } from "../commands/DescribeIpamPoolsCommand";
 import {
   DescribeIpamResourceDiscoveriesCommandInput,
@@ -1336,6 +1345,10 @@ import {
   DisassociateInstanceEventWindowCommandInput,
   DisassociateInstanceEventWindowCommandOutput,
 } from "../commands/DisassociateInstanceEventWindowCommand";
+import {
+  DisassociateIpamByoasnCommandInput,
+  DisassociateIpamByoasnCommandOutput,
+} from "../commands/DisassociateIpamByoasnCommand";
 import {
   DisassociateIpamResourceDiscoveryCommandInput,
   DisassociateIpamResourceDiscoveryCommandOutput,
@@ -1510,6 +1523,10 @@ import {
   GetIpamDiscoveredAccountsCommandInput,
   GetIpamDiscoveredAccountsCommandOutput,
 } from "../commands/GetIpamDiscoveredAccountsCommand";
+import {
+  GetIpamDiscoveredPublicAddressesCommandInput,
+  GetIpamDiscoveredPublicAddressesCommandOutput,
+} from "../commands/GetIpamDiscoveredPublicAddressesCommand";
 import {
   GetIpamDiscoveredResourceCidrsCommandInput,
   GetIpamDiscoveredResourceCidrsCommandOutput,
@@ -1864,6 +1881,10 @@ import {
   MoveByoipCidrToIpamCommandOutput,
 } from "../commands/MoveByoipCidrToIpamCommand";
 import { ProvisionByoipCidrCommandInput, ProvisionByoipCidrCommandOutput } from "../commands/ProvisionByoipCidrCommand";
+import {
+  ProvisionIpamByoasnCommandInput,
+  ProvisionIpamByoasnCommandOutput,
+} from "../commands/ProvisionIpamByoasnCommand";
 import {
   ProvisionIpamPoolCidrCommandInput,
   ProvisionIpamPoolCidrCommandOutput,
@@ -2139,6 +2160,7 @@ import {
   AnalysisSecurityGroupRule,
   ApplySecurityGroupsToClientVpnTargetNetworkRequest,
   ApplySecurityGroupsToClientVpnTargetNetworkResult,
+  AsnAssociation,
   AssignedPrivateIpAddress,
   AssignIpv6AddressesRequest,
   AssignIpv6AddressesResult,
@@ -2157,6 +2179,8 @@ import {
   AssociateIamInstanceProfileResult,
   AssociateInstanceEventWindowRequest,
   AssociateInstanceEventWindowResult,
+  AssociateIpamByoasnRequest,
+  AssociateIpamByoasnResult,
   AssociateIpamResourceDiscoveryRequest,
   AssociateIpamResourceDiscoveryResult,
   AssociateNatGatewayAddressRequest,
@@ -2223,7 +2247,6 @@ import {
   CapacityAllocation,
   CapacityReservation,
   CapacityReservationFleetCancellationState,
-  CarrierGateway,
   CidrBlock,
   ClientVpnAuthorizationRuleStatus,
   ConfirmProductInstanceRequest,
@@ -2239,9 +2262,7 @@ import {
   CreateCapacityReservationRequest,
   CreateCapacityReservationResult,
   CreateCarrierGatewayRequest,
-  CreateCarrierGatewayResult,
   DeviceOptions,
-  DirectoryServiceAuthenticationRequest,
   EnaSrdSpecification,
   EnaSrdUdpSpecification,
   Explanation,
@@ -2334,6 +2355,7 @@ import {
   CapacityReservationOptionsRequest,
   CapacityReservationTarget,
   CapacityReservationTargetResponse,
+  CarrierGateway,
   CertificateAuthenticationRequest,
   ClientConnectOptions,
   ClientLoginBannerOptions,
@@ -2343,7 +2365,11 @@ import {
   CoipCidr,
   CoipPool,
   ConnectionLogOptions,
+  ConnectionTrackingConfiguration,
+  ConnectionTrackingSpecification,
+  ConnectionTrackingSpecificationRequest,
   CpuManufacturer,
+  CreateCarrierGatewayResult,
   CreateClientVpnEndpointRequest,
   CreateClientVpnEndpointResult,
   CreateClientVpnRouteRequest,
@@ -2412,16 +2438,14 @@ import {
   CreateNetworkInsightsAccessScopeResult,
   CreateNetworkInsightsPathRequest,
   CreateNetworkInsightsPathResult,
-  CreateNetworkInterfacePermissionRequest,
-  CreateNetworkInterfacePermissionResult,
   CreateNetworkInterfaceRequest,
-  CreateNetworkInterfaceResult,
   CreditSpecification,
   CreditSpecificationRequest,
   CustomerGateway,
   DestinationOptionsRequest,
   DhcpConfiguration,
   DhcpOptions,
+  DirectoryServiceAuthenticationRequest,
   EbsBlockDevice,
   Ec2InstanceConnectEndpoint,
   EgressOnlyInternetGateway,
@@ -2455,12 +2479,13 @@ import {
   Ipam,
   IpamOperatingRegion,
   IpamPool,
+  IpamPoolSourceResource,
+  IpamPoolSourceResourceRequest,
   IpamResourceDiscovery,
   IpamResourceTag,
   IpamScope,
   Ipv4PrefixSpecificationRequest,
   Ipv4PrefixSpecificationResponse,
-  Ipv6PrefixSpecification,
   Ipv6PrefixSpecificationRequest,
   Ipv6PrefixSpecificationResponse,
   KeyPair,
@@ -2524,15 +2549,11 @@ import {
   NetworkInsightsAccessScope,
   NetworkInsightsAccessScopeContent,
   NetworkInsightsPath,
-  NetworkInterface,
   NetworkInterfaceAssociation,
   NetworkInterfaceAttachment,
   NetworkInterfaceCount,
   NetworkInterfaceCountRequest,
   NetworkInterfaceIpv6Address,
-  NetworkInterfacePermission,
-  NetworkInterfacePermissionState,
-  NetworkInterfacePrivateIpAddress,
   NewDhcpConfiguration,
   OnDemandOptionsRequest,
   PathFilter,
@@ -2563,6 +2584,9 @@ import {
   CloudWatchLogOptions,
   CloudWatchLogOptionsSpecification,
   ConnectionNotification,
+  CreateNetworkInterfacePermissionRequest,
+  CreateNetworkInterfacePermissionResult,
+  CreateNetworkInterfaceResult,
   CreatePlacementGroupRequest,
   CreatePlacementGroupResult,
   CreatePublicIpv4PoolRequest,
@@ -2708,17 +2732,6 @@ import {
   DeleteManagedPrefixListRequest,
   DeleteManagedPrefixListResult,
   DeleteNatGatewayRequest,
-  DeleteNatGatewayResult,
-  DeleteNetworkAclEntryRequest,
-  DeleteNetworkAclRequest,
-  DeleteNetworkInsightsAccessScopeAnalysisRequest,
-  DeleteNetworkInsightsAccessScopeAnalysisResult,
-  DeleteNetworkInsightsAccessScopeRequest,
-  DeleteNetworkInsightsAccessScopeResult,
-  DeleteNetworkInsightsAnalysisRequest,
-  DeleteNetworkInsightsAnalysisResult,
-  DeleteNetworkInsightsPathRequest,
-  DeleteNetworkInsightsPathResult,
   DnsEntry,
   DnsOptions,
   DnsOptionsSpecification,
@@ -2726,7 +2739,12 @@ import {
   IKEVersionsRequestListValue,
   InstanceEventWindowStateChange,
   InstanceSpecification,
+  Ipv6PrefixSpecification,
   LastError,
+  NetworkInterface,
+  NetworkInterfacePermission,
+  NetworkInterfacePermissionState,
+  NetworkInterfacePrivateIpAddress,
   Phase1DHGroupNumbersListValue,
   Phase1DHGroupNumbersRequestListValue,
   Phase1EncryptionAlgorithmsListValue,
@@ -2805,11 +2823,11 @@ import {
 } from "../models/models_2";
 import {
   AssociatedTargetNetwork,
-  AttributeBooleanValue,
   AuthorizationRule,
   AvailabilityZone,
   AvailabilityZoneMessage,
   AvailableCapacity,
+  Byoasn,
   CapacityBlockOffering,
   CapacityReservationFleet,
   CapacityReservationOptions,
@@ -2825,6 +2843,17 @@ import {
   ClientVpnRoute,
   ConnectionLogResponseOptions,
   ConversionTask,
+  DeleteNatGatewayResult,
+  DeleteNetworkAclEntryRequest,
+  DeleteNetworkAclRequest,
+  DeleteNetworkInsightsAccessScopeAnalysisRequest,
+  DeleteNetworkInsightsAccessScopeAnalysisResult,
+  DeleteNetworkInsightsAccessScopeRequest,
+  DeleteNetworkInsightsAccessScopeResult,
+  DeleteNetworkInsightsAnalysisRequest,
+  DeleteNetworkInsightsAnalysisResult,
+  DeleteNetworkInsightsPathRequest,
+  DeleteNetworkInsightsPathResult,
   DeleteNetworkInterfacePermissionRequest,
   DeleteNetworkInterfacePermissionResult,
   DeleteNetworkInterfaceRequest,
@@ -2896,6 +2925,8 @@ import {
   DeleteVpnGatewayRequest,
   DeprovisionByoipCidrRequest,
   DeprovisionByoipCidrResult,
+  DeprovisionIpamByoasnRequest,
+  DeprovisionIpamByoasnResult,
   DeprovisionIpamPoolCidrRequest,
   DeprovisionIpamPoolCidrResult,
   DeprovisionPublicIpv4PoolCidrRequest,
@@ -3000,20 +3031,12 @@ import {
   DescribeImportImageTasksRequest,
   DescribeImportImageTasksResult,
   DescribeImportSnapshotTasksRequest,
-  DescribeImportSnapshotTasksResult,
-  DescribeInstanceAttributeRequest,
-  DescribeInstanceConnectEndpointsRequest,
-  DescribeInstanceConnectEndpointsResult,
-  DescribeInstanceCreditSpecificationsRequest,
-  DescribeInstanceCreditSpecificationsResult,
   DestinationOptionsResponse,
   DirectoryServiceAuthentication,
   DiskImageDescription,
   DiskImageVolumeDescription,
-  EbsInstanceBlockDevice,
   ElasticGpuHealth,
   ElasticGpus,
-  EnclaveOptions,
   EventInformation,
   ExportImageTask,
   ExportTaskS3Location,
@@ -3043,12 +3066,8 @@ import {
   ImportImageTask,
   ImportInstanceTaskDetails,
   ImportInstanceVolumeDetailItem,
-  ImportSnapshotTask,
   ImportVolumeTaskDetails,
-  InstanceAttribute,
-  InstanceBlockDeviceMapping,
   InstanceCapacity,
-  InstanceCreditSpecification,
   InstanceTagNotificationAttribute,
   IpamPoolCidr,
   IpamPoolCidrFailureReason,
@@ -3058,7 +3077,6 @@ import {
   PciId,
   ProductCode,
   SnapshotDetail,
-  SnapshotTaskDetail,
   SpotOptions,
   Subscription,
   SuccessfulQueuedPurchaseDeletion,
@@ -3071,12 +3089,20 @@ import {
 } from "../models/models_3";
 import {
   ArchitectureType,
+  AttributeBooleanValue,
   BootModeType,
   CapacityReservationSpecificationResponse,
   ClassicLoadBalancer,
   ClassicLoadBalancersConfig,
+  ConnectionTrackingSpecificationResponse,
   CpuOptions,
   CreateVolumePermission,
+  DescribeImportSnapshotTasksResult,
+  DescribeInstanceAttributeRequest,
+  DescribeInstanceConnectEndpointsRequest,
+  DescribeInstanceConnectEndpointsResult,
+  DescribeInstanceCreditSpecificationsRequest,
+  DescribeInstanceCreditSpecificationsResult,
   DescribeInstanceEventNotificationAttributesRequest,
   DescribeInstanceEventNotificationAttributesResult,
   DescribeInstanceEventWindowsRequest,
@@ -3093,6 +3119,8 @@ import {
   DescribeInstanceTypesResult,
   DescribeInternetGatewaysRequest,
   DescribeInternetGatewaysResult,
+  DescribeIpamByoasnRequest,
+  DescribeIpamByoasnResult,
   DescribeIpamPoolsRequest,
   DescribeIpamPoolsResult,
   DescribeIpamResourceDiscoveriesRequest,
@@ -3203,27 +3231,14 @@ import {
   DescribeStoreImageTasksResult,
   DescribeSubnetsRequest,
   DescribeSubnetsResult,
-  DescribeTagsRequest,
-  DescribeTagsResult,
-  DescribeTrafficMirrorFiltersRequest,
-  DescribeTrafficMirrorFiltersResult,
-  DescribeTrafficMirrorSessionsRequest,
-  DescribeTrafficMirrorSessionsResult,
-  DescribeTrafficMirrorTargetsRequest,
-  DescribeTrafficMirrorTargetsResult,
-  DescribeTransitGatewayAttachmentsRequest,
-  DescribeTransitGatewayAttachmentsResult,
-  DescribeTransitGatewayConnectPeersRequest,
-  DescribeTransitGatewayConnectPeersResult,
-  DescribeTransitGatewayConnectsRequest,
-  DescribeTransitGatewayConnectsResult,
-  DescribeTransitGatewayMulticastDomainsRequest,
   DiskInfo,
   EbsInfo,
+  EbsInstanceBlockDevice,
   EbsOptimizedInfo,
   EfaInfo,
   ElasticGpuAssociation,
   ElasticInferenceAcceleratorAssociation,
+  EnclaveOptions,
   FpgaDeviceInfo,
   FpgaDeviceMemoryInfo,
   FpgaInfo,
@@ -3232,12 +3247,16 @@ import {
   GpuInfo,
   HibernationOptions,
   HistoryRecord,
+  ImportSnapshotTask,
   InferenceAcceleratorInfo,
   InferenceDeviceInfo,
   InferenceDeviceMemoryInfo,
   Instance,
   InstanceAttachmentEnaSrdSpecification,
   InstanceAttachmentEnaSrdUdpSpecification,
+  InstanceAttribute,
+  InstanceBlockDeviceMapping,
+  InstanceCreditSpecification,
   InstanceIpv4Prefix,
   InstanceIpv6Prefix,
   InstanceMaintenanceOptions,
@@ -3304,6 +3323,7 @@ import {
   SecurityGroupReference,
   SlotDateTimeRangeRequest,
   SlotStartTimeRangeRequest,
+  SnapshotTaskDetail,
   SnapshotTierStatus,
   SpotCapacityRebalance,
   SpotFleetLaunchSpecification,
@@ -3320,11 +3340,8 @@ import {
   StaleSecurityGroup,
   StoreImageTaskResult,
   SupportedAdditionalProcessorFeature,
-  TagDescription,
   TargetGroup,
   TargetGroupsConfig,
-  TransitGatewayAttachment,
-  TransitGatewayAttachmentAssociation,
   UsageClassType,
   VCpuInfo,
 } from "../models/models_4";
@@ -3337,6 +3354,21 @@ import {
   CoipAddressUsage,
   DataQuery,
   DataResponse,
+  DescribeTagsRequest,
+  DescribeTagsResult,
+  DescribeTrafficMirrorFiltersRequest,
+  DescribeTrafficMirrorFiltersResult,
+  DescribeTrafficMirrorSessionsRequest,
+  DescribeTrafficMirrorSessionsResult,
+  DescribeTrafficMirrorTargetsRequest,
+  DescribeTrafficMirrorTargetsResult,
+  DescribeTransitGatewayAttachmentsRequest,
+  DescribeTransitGatewayAttachmentsResult,
+  DescribeTransitGatewayConnectPeersRequest,
+  DescribeTransitGatewayConnectPeersResult,
+  DescribeTransitGatewayConnectsRequest,
+  DescribeTransitGatewayConnectsResult,
+  DescribeTransitGatewayMulticastDomainsRequest,
   DescribeTransitGatewayMulticastDomainsResult,
   DescribeTransitGatewayPeeringAttachmentsRequest,
   DescribeTransitGatewayPeeringAttachmentsResult,
@@ -3446,6 +3478,8 @@ import {
   DisassociateIamInstanceProfileResult,
   DisassociateInstanceEventWindowRequest,
   DisassociateInstanceEventWindowResult,
+  DisassociateIpamByoasnRequest,
+  DisassociateIpamByoasnResult,
   DisassociateIpamResourceDiscoveryRequest,
   DisassociateIpamResourceDiscoveryResult,
   DisassociateNatGatewayAddressRequest,
@@ -3546,32 +3580,14 @@ import {
   GetIpamAddressHistoryResult,
   GetIpamDiscoveredAccountsRequest,
   GetIpamDiscoveredAccountsResult,
+  GetIpamDiscoveredPublicAddressesRequest,
+  GetIpamDiscoveredPublicAddressesResult,
   GetIpamDiscoveredResourceCidrsRequest,
   GetIpamDiscoveredResourceCidrsResult,
   GetIpamPoolAllocationsRequest,
   GetIpamPoolAllocationsResult,
   GetIpamPoolCidrsRequest,
   GetIpamPoolCidrsResult,
-  GetIpamResourceCidrsRequest,
-  GetIpamResourceCidrsResult,
-  GetLaunchTemplateDataRequest,
-  GetLaunchTemplateDataResult,
-  GetManagedPrefixListAssociationsRequest,
-  GetManagedPrefixListAssociationsResult,
-  GetManagedPrefixListEntriesRequest,
-  GetManagedPrefixListEntriesResult,
-  GetNetworkInsightsAccessScopeAnalysisFindingsRequest,
-  GetNetworkInsightsAccessScopeAnalysisFindingsResult,
-  GetNetworkInsightsAccessScopeContentRequest,
-  GetNetworkInsightsAccessScopeContentResult,
-  GetPasswordDataRequest,
-  GetPasswordDataResult,
-  GetReservedInstancesExchangeQuoteRequest,
-  GetReservedInstancesExchangeQuoteResult,
-  GetSecurityGroupsForVpcRequest,
-  GetSecurityGroupsForVpcResult,
-  GetSerialConsoleAccessStatusRequest,
-  GetSerialConsoleAccessStatusResult,
   InstanceEventWindowDisassociationRequest,
   InstanceFamilyCreditSpecification,
   InstanceTypeInfoFromInstanceRequirements,
@@ -3579,21 +3595,20 @@ import {
   IntegrateServices,
   IpamAddressHistoryRecord,
   IpamDiscoveredAccount,
+  IpamDiscoveredPublicAddress,
   IpamDiscoveredResourceCidr,
   IpamDiscoveryFailureReason,
-  IpamResourceCidr,
+  IpamPublicAddressSecurityGroup,
+  IpamPublicAddressTag,
+  IpamPublicAddressTags,
   Ipv6CidrAssociation,
   MetricPoint,
-  PrefixListAssociation,
-  PrefixListEntry,
   PrivateDnsDetails,
   Purchase,
-  ReservationValue,
-  ReservedInstanceReservationValue,
-  SecurityGroupForVpc,
   ServiceDetail,
-  TargetConfiguration,
-  TargetReservationValue,
+  TagDescription,
+  TransitGatewayAttachment,
+  TransitGatewayAttachmentAssociation,
   TransitGatewayPropagation,
   VerifiedAccessInstanceLoggingConfiguration,
   VerifiedAccessLogCloudWatchLogsDestination,
@@ -3612,6 +3627,7 @@ import {
   VpcEndpointConnection,
 } from "../models/models_5";
 import {
+  AsnAuthorizationContext,
   BlobAttributeValue,
   CapacityReservationSpecification,
   CidrAuthorizationContext,
@@ -3621,6 +3637,26 @@ import {
   DiskImageDetail,
   DnsServersOptionsModifyStructure,
   EbsInstanceBlockDeviceSpecification,
+  GetIpamResourceCidrsRequest,
+  GetIpamResourceCidrsResult,
+  GetLaunchTemplateDataRequest,
+  GetLaunchTemplateDataResult,
+  GetManagedPrefixListAssociationsRequest,
+  GetManagedPrefixListAssociationsResult,
+  GetManagedPrefixListEntriesRequest,
+  GetManagedPrefixListEntriesResult,
+  GetNetworkInsightsAccessScopeAnalysisFindingsRequest,
+  GetNetworkInsightsAccessScopeAnalysisFindingsResult,
+  GetNetworkInsightsAccessScopeContentRequest,
+  GetNetworkInsightsAccessScopeContentResult,
+  GetPasswordDataRequest,
+  GetPasswordDataResult,
+  GetReservedInstancesExchangeQuoteRequest,
+  GetReservedInstancesExchangeQuoteResult,
+  GetSecurityGroupsForVpcRequest,
+  GetSecurityGroupsForVpcResult,
+  GetSerialConsoleAccessStatusRequest,
+  GetSerialConsoleAccessStatusResult,
   GetSnapshotBlockPublicAccessStateRequest,
   GetSnapshotBlockPublicAccessStateResult,
   GetSpotPlacementScoresRequest,
@@ -3672,6 +3708,7 @@ import {
   InstanceMonitoring,
   InstanceRequirementsWithMetadataRequest,
   IpamCidrAuthorizationContext,
+  IpamResourceCidr,
   LaunchPermissionModifications,
   ListImagesInRecycleBinRequest,
   ListImagesInRecycleBinResult,
@@ -3817,8 +3854,12 @@ import {
   NetworkInterfaceAttachmentChanges,
   PeeringConnectionOptions,
   PeeringConnectionOptionsRequest,
+  PrefixListAssociation,
+  PrefixListEntry,
   ProvisionByoipCidrRequest,
   ProvisionByoipCidrResult,
+  ProvisionIpamByoasnRequest,
+  ProvisionIpamByoasnResult,
   ProvisionIpamPoolCidrRequest,
   ProvisionIpamPoolCidrResult,
   ProvisionPublicIpv4PoolCidrRequest,
@@ -3842,46 +3883,20 @@ import {
   RegisterTransitGatewayMulticastGroupMembersResult,
   RegisterTransitGatewayMulticastGroupSourcesRequest,
   RegisterTransitGatewayMulticastGroupSourcesResult,
-  RejectTransitGatewayMulticastDomainAssociationsRequest,
-  RejectTransitGatewayMulticastDomainAssociationsResult,
-  RejectTransitGatewayPeeringAttachmentRequest,
-  RejectTransitGatewayPeeringAttachmentResult,
-  RejectTransitGatewayVpcAttachmentRequest,
-  RejectTransitGatewayVpcAttachmentResult,
-  RejectVpcEndpointConnectionsRequest,
-  RejectVpcEndpointConnectionsResult,
-  RejectVpcPeeringConnectionRequest,
-  RejectVpcPeeringConnectionResult,
-  ReleaseAddressRequest,
-  ReleaseHostsRequest,
-  ReleaseHostsResult,
-  ReleaseIpamPoolAllocationRequest,
-  ReleaseIpamPoolAllocationResult,
   RemoveIpamOperatingRegion,
   RemovePrefixListEntry,
-  ReplaceIamInstanceProfileAssociationRequest,
-  ReplaceIamInstanceProfileAssociationResult,
-  ReplaceNetworkAclAssociationRequest,
-  ReplaceNetworkAclAssociationResult,
-  ReplaceNetworkAclEntryRequest,
-  ReplaceRouteRequest,
-  ReplaceRouteTableAssociationRequest,
-  ReplaceRouteTableAssociationResult,
-  ReplaceTransitGatewayRouteRequest,
-  ReplaceTransitGatewayRouteResult,
-  ReplaceVpnTunnelRequest,
-  ReplaceVpnTunnelResult,
-  ReportInstanceReasonCodes,
-  ReportInstanceStatusRequest,
-  RequestSpotFleetRequest,
-  RequestSpotFleetResponse,
+  ReservationValue,
   ReservedInstanceLimitPrice,
+  ReservedInstanceReservationValue,
+  SecurityGroupForVpc,
   SecurityGroupRuleRequest,
   SecurityGroupRuleUpdate,
   SnapshotDiskContainer,
   SnapshotRecycleBinInfo,
   SpotPlacementScore,
   SuccessfulInstanceCreditSpecificationItem,
+  TargetConfiguration,
+  TargetReservationValue,
   TrafficMirrorFilterRuleField,
   TrafficMirrorSessionField,
   TransitGatewayAttachmentPropagation,
@@ -3916,6 +3931,37 @@ import {
   LaunchTemplateSpecification,
   LicenseConfigurationRequest,
   PrivateDnsNameOptionsRequest,
+  RejectTransitGatewayMulticastDomainAssociationsRequest,
+  RejectTransitGatewayMulticastDomainAssociationsResult,
+  RejectTransitGatewayPeeringAttachmentRequest,
+  RejectTransitGatewayPeeringAttachmentResult,
+  RejectTransitGatewayVpcAttachmentRequest,
+  RejectTransitGatewayVpcAttachmentResult,
+  RejectVpcEndpointConnectionsRequest,
+  RejectVpcEndpointConnectionsResult,
+  RejectVpcPeeringConnectionRequest,
+  RejectVpcPeeringConnectionResult,
+  ReleaseAddressRequest,
+  ReleaseHostsRequest,
+  ReleaseHostsResult,
+  ReleaseIpamPoolAllocationRequest,
+  ReleaseIpamPoolAllocationResult,
+  ReplaceIamInstanceProfileAssociationRequest,
+  ReplaceIamInstanceProfileAssociationResult,
+  ReplaceNetworkAclAssociationRequest,
+  ReplaceNetworkAclAssociationResult,
+  ReplaceNetworkAclEntryRequest,
+  ReplaceRouteRequest,
+  ReplaceRouteTableAssociationRequest,
+  ReplaceRouteTableAssociationResult,
+  ReplaceTransitGatewayRouteRequest,
+  ReplaceTransitGatewayRouteResult,
+  ReplaceVpnTunnelRequest,
+  ReplaceVpnTunnelResult,
+  ReportInstanceReasonCodes,
+  ReportInstanceStatusRequest,
+  RequestSpotFleetRequest,
+  RequestSpotFleetResponse,
   RequestSpotInstancesRequest,
   RequestSpotInstancesResult,
   RequestSpotLaunchSpecification,
@@ -4356,6 +4402,23 @@ export const se_AssociateInstanceEventWindowCommand = async (
   return buildHttpRpcRequest(context, headers, "/", undefined, body);
 };
 
+/**
+ * serializeAws_ec2AssociateIpamByoasnCommand
+ */
+export const se_AssociateIpamByoasnCommand = async (
+  input: AssociateIpamByoasnCommandInput,
+  context: __SerdeContext
+): Promise<__HttpRequest> => {
+  const headers: __HeaderBag = SHARED_HEADERS;
+  let body: any;
+  body = buildFormUrlencodedString({
+    ...se_AssociateIpamByoasnRequest(input, context),
+    Action: "AssociateIpamByoasn",
+    Version: "2016-11-15",
+  });
+  return buildHttpRpcRequest(context, headers, "/", undefined, body);
+};
+
 /**
  * serializeAws_ec2AssociateIpamResourceDiscoveryCommand
  */
@@ -7586,6 +7649,23 @@ export const se_DeprovisionByoipCidrCommand = async (
   return buildHttpRpcRequest(context, headers, "/", undefined, body);
 };
 
+/**
+ * serializeAws_ec2DeprovisionIpamByoasnCommand
+ */
+export const se_DeprovisionIpamByoasnCommand = async (
+  input: DeprovisionIpamByoasnCommandInput,
+  context: __SerdeContext
+): Promise<__HttpRequest> => {
+  const headers: __HeaderBag = SHARED_HEADERS;
+  let body: any;
+  body = buildFormUrlencodedString({
+    ...se_DeprovisionIpamByoasnRequest(input, context),
+    Action: "DeprovisionIpamByoasn",
+    Version: "2016-11-15",
+  });
+  return buildHttpRpcRequest(context, headers, "/", undefined, body);
+};
+
 /**
  * serializeAws_ec2DeprovisionIpamPoolCidrCommand
  */
@@ -8640,6 +8720,23 @@ export const se_DescribeInternetGatewaysCommand = async (
   return buildHttpRpcRequest(context, headers, "/", undefined, body);
 };
 
+/**
+ * serializeAws_ec2DescribeIpamByoasnCommand
+ */
+export const se_DescribeIpamByoasnCommand = async (
+  input: DescribeIpamByoasnCommandInput,
+  context: __SerdeContext
+): Promise<__HttpRequest> => {
+  const headers: __HeaderBag = SHARED_HEADERS;
+  let body: any;
+  body = buildFormUrlencodedString({
+    ...se_DescribeIpamByoasnRequest(input, context),
+    Action: "DescribeIpamByoasn",
+    Version: "2016-11-15",
+  });
+  return buildHttpRpcRequest(context, headers, "/", undefined, body);
+};
+
 /**
  * serializeAws_ec2DescribeIpamPoolsCommand
  */
@@ -10646,6 +10743,23 @@ export const se_DisassociateInstanceEventWindowCommand = async (
   return buildHttpRpcRequest(context, headers, "/", undefined, body);
 };
 
+/**
+ * serializeAws_ec2DisassociateIpamByoasnCommand
+ */
+export const se_DisassociateIpamByoasnCommand = async (
+  input: DisassociateIpamByoasnCommandInput,
+  context: __SerdeContext
+): Promise<__HttpRequest> => {
+  const headers: __HeaderBag = SHARED_HEADERS;
+  let body: any;
+  body = buildFormUrlencodedString({
+    ...se_DisassociateIpamByoasnRequest(input, context),
+    Action: "DisassociateIpamByoasn",
+    Version: "2016-11-15",
+  });
+  return buildHttpRpcRequest(context, headers, "/", undefined, body);
+};
+
 /**
  * serializeAws_ec2DisassociateIpamResourceDiscoveryCommand
  */
@@ -11462,6 +11576,23 @@ export const se_GetIpamDiscoveredAccountsCommand = async (
   return buildHttpRpcRequest(context, headers, "/", undefined, body);
 };
 
+/**
+ * serializeAws_ec2GetIpamDiscoveredPublicAddressesCommand
+ */
+export const se_GetIpamDiscoveredPublicAddressesCommand = async (
+  input: GetIpamDiscoveredPublicAddressesCommandInput,
+  context: __SerdeContext
+): Promise<__HttpRequest> => {
+  const headers: __HeaderBag = SHARED_HEADERS;
+  let body: any;
+  body = buildFormUrlencodedString({
+    ...se_GetIpamDiscoveredPublicAddressesRequest(input, context),
+    Action: "GetIpamDiscoveredPublicAddresses",
+    Version: "2016-11-15",
+  });
+  return buildHttpRpcRequest(context, headers, "/", undefined, body);
+};
+
 /**
  * serializeAws_ec2GetIpamDiscoveredResourceCidrsCommand
  */
@@ -13247,6 +13378,23 @@ export const se_ProvisionByoipCidrCommand = async (
   return buildHttpRpcRequest(context, headers, "/", undefined, body);
 };
 
+/**
+ * serializeAws_ec2ProvisionIpamByoasnCommand
+ */
+export const se_ProvisionIpamByoasnCommand = async (
+  input: ProvisionIpamByoasnCommandInput,
+  context: __SerdeContext
+): Promise<__HttpRequest> => {
+  const headers: __HeaderBag = SHARED_HEADERS;
+  let body: any;
+  body = buildFormUrlencodedString({
+    ...se_ProvisionIpamByoasnRequest(input, context),
+    Action: "ProvisionIpamByoasn",
+    Version: "2016-11-15",
+  });
+  return buildHttpRpcRequest(context, headers, "/", undefined, body);
+};
+
 /**
  * serializeAws_ec2ProvisionIpamPoolCidrCommand
  */
@@ -15189,6 +15337,46 @@ const de_AssociateInstanceEventWindowCommandError = async (
   });
 };
 
+/**
+ * deserializeAws_ec2AssociateIpamByoasnCommand
+ */
+export const de_AssociateIpamByoasnCommand = async (
+  output: __HttpResponse,
+  context: __SerdeContext
+): Promise<AssociateIpamByoasnCommandOutput> => {
+  if (output.statusCode >= 300) {
+    return de_AssociateIpamByoasnCommandError(output, context);
+  }
+  const data: any = await parseBody(output.body, context);
+  let contents: any = {};
+  contents = de_AssociateIpamByoasnResult(data, context);
+  const response: AssociateIpamByoasnCommandOutput = {
+    $metadata: deserializeMetadata(output),
+    ...contents,
+  };
+  return response;
+};
+
+/**
+ * deserializeAws_ec2AssociateIpamByoasnCommandError
+ */
+const de_AssociateIpamByoasnCommandError = async (
+  output: __HttpResponse,
+  context: __SerdeContext
+): Promise<AssociateIpamByoasnCommandOutput> => {
+  const parsedOutput: any = {
+    ...output,
+    body: await parseErrorBody(output.body, context),
+  };
+  const errorCode = loadEc2ErrorCode(output, parsedOutput.body);
+  const parsedBody = parsedOutput.body;
+  return throwDefaultError({
+    output,
+    parsedBody: parsedBody.Errors.Error,
+    errorCode,
+  });
+};
+
 /**
  * deserializeAws_ec2AssociateIpamResourceDiscoveryCommand
  */
@@ -22714,6 +22902,46 @@ const de_DeprovisionByoipCidrCommandError = async (
   });
 };
 
+/**
+ * deserializeAws_ec2DeprovisionIpamByoasnCommand
+ */
+export const de_DeprovisionIpamByoasnCommand = async (
+  output: __HttpResponse,
+  context: __SerdeContext
+): Promise<DeprovisionIpamByoasnCommandOutput> => {
+  if (output.statusCode >= 300) {
+    return de_DeprovisionIpamByoasnCommandError(output, context);
+  }
+  const data: any = await parseBody(output.body, context);
+  let contents: any = {};
+  contents = de_DeprovisionIpamByoasnResult(data, context);
+  const response: DeprovisionIpamByoasnCommandOutput = {
+    $metadata: deserializeMetadata(output),
+    ...contents,
+  };
+  return response;
+};
+
+/**
+ * deserializeAws_ec2DeprovisionIpamByoasnCommandError
+ */
+const de_DeprovisionIpamByoasnCommandError = async (
+  output: __HttpResponse,
+  context: __SerdeContext
+): Promise<DeprovisionIpamByoasnCommandOutput> => {
+  const parsedOutput: any = {
+    ...output,
+    body: await parseErrorBody(output.body, context),
+  };
+  const errorCode = loadEc2ErrorCode(output, parsedOutput.body);
+  const parsedBody = parsedOutput.body;
+  return throwDefaultError({
+    output,
+    parsedBody: parsedBody.Errors.Error,
+    errorCode,
+  });
+};
+
 /**
  * deserializeAws_ec2DeprovisionIpamPoolCidrCommand
  */
@@ -25191,6 +25419,46 @@ const de_DescribeInternetGatewaysCommandError = async (
   });
 };
 
+/**
+ * deserializeAws_ec2DescribeIpamByoasnCommand
+ */
+export const de_DescribeIpamByoasnCommand = async (
+  output: __HttpResponse,
+  context: __SerdeContext
+): Promise<DescribeIpamByoasnCommandOutput> => {
+  if (output.statusCode >= 300) {
+    return de_DescribeIpamByoasnCommandError(output, context);
+  }
+  const data: any = await parseBody(output.body, context);
+  let contents: any = {};
+  contents = de_DescribeIpamByoasnResult(data, context);
+  const response: DescribeIpamByoasnCommandOutput = {
+    $metadata: deserializeMetadata(output),
+    ...contents,
+  };
+  return response;
+};
+
+/**
+ * deserializeAws_ec2DescribeIpamByoasnCommandError
+ */
+const de_DescribeIpamByoasnCommandError = async (
+  output: __HttpResponse,
+  context: __SerdeContext
+): Promise<DescribeIpamByoasnCommandOutput> => {
+  const parsedOutput: any = {
+    ...output,
+    body: await parseErrorBody(output.body, context),
+  };
+  const errorCode = loadEc2ErrorCode(output, parsedOutput.body);
+  const parsedBody = parsedOutput.body;
+  return throwDefaultError({
+    output,
+    parsedBody: parsedBody.Errors.Error,
+    errorCode,
+  });
+};
+
 /**
  * deserializeAws_ec2DescribeIpamPoolsCommand
  */
@@ -29896,6 +30164,46 @@ const de_DisassociateInstanceEventWindowCommandError = async (
   });
 };
 
+/**
+ * deserializeAws_ec2DisassociateIpamByoasnCommand
+ */
+export const de_DisassociateIpamByoasnCommand = async (
+  output: __HttpResponse,
+  context: __SerdeContext
+): Promise<DisassociateIpamByoasnCommandOutput> => {
+  if (output.statusCode >= 300) {
+    return de_DisassociateIpamByoasnCommandError(output, context);
+  }
+  const data: any = await parseBody(output.body, context);
+  let contents: any = {};
+  contents = de_DisassociateIpamByoasnResult(data, context);
+  const response: DisassociateIpamByoasnCommandOutput = {
+    $metadata: deserializeMetadata(output),
+    ...contents,
+  };
+  return response;
+};
+
+/**
+ * deserializeAws_ec2DisassociateIpamByoasnCommandError
+ */
+const de_DisassociateIpamByoasnCommandError = async (
+  output: __HttpResponse,
+  context: __SerdeContext
+): Promise<DisassociateIpamByoasnCommandOutput> => {
+  const parsedOutput: any = {
+    ...output,
+    body: await parseErrorBody(output.body, context),
+  };
+  const errorCode = loadEc2ErrorCode(output, parsedOutput.body);
+  const parsedBody = parsedOutput.body;
+  return throwDefaultError({
+    output,
+    parsedBody: parsedBody.Errors.Error,
+    errorCode,
+  });
+};
+
 /**
  * deserializeAws_ec2DisassociateIpamResourceDiscoveryCommand
  */
@@ -31807,6 +32115,46 @@ const de_GetIpamDiscoveredAccountsCommandError = async (
   });
 };
 
+/**
+ * deserializeAws_ec2GetIpamDiscoveredPublicAddressesCommand
+ */
+export const de_GetIpamDiscoveredPublicAddressesCommand = async (
+  output: __HttpResponse,
+  context: __SerdeContext
+): Promise<GetIpamDiscoveredPublicAddressesCommandOutput> => {
+  if (output.statusCode >= 300) {
+    return de_GetIpamDiscoveredPublicAddressesCommandError(output, context);
+  }
+  const data: any = await parseBody(output.body, context);
+  let contents: any = {};
+  contents = de_GetIpamDiscoveredPublicAddressesResult(data, context);
+  const response: GetIpamDiscoveredPublicAddressesCommandOutput = {
+    $metadata: deserializeMetadata(output),
+    ...contents,
+  };
+  return response;
+};
+
+/**
+ * deserializeAws_ec2GetIpamDiscoveredPublicAddressesCommandError
+ */
+const de_GetIpamDiscoveredPublicAddressesCommandError = async (
+  output: __HttpResponse,
+  context: __SerdeContext
+): Promise<GetIpamDiscoveredPublicAddressesCommandOutput> => {
+  const parsedOutput: any = {
+    ...output,
+    body: await parseErrorBody(output.body, context),
+  };
+  const errorCode = loadEc2ErrorCode(output, parsedOutput.body);
+  const parsedBody = parsedOutput.body;
+  return throwDefaultError({
+    output,
+    parsedBody: parsedBody.Errors.Error,
+    errorCode,
+  });
+};
+
 /**
  * deserializeAws_ec2GetIpamDiscoveredResourceCidrsCommand
  */
@@ -35980,6 +36328,46 @@ const de_ProvisionByoipCidrCommandError = async (
   });
 };
 
+/**
+ * deserializeAws_ec2ProvisionIpamByoasnCommand
+ */
+export const de_ProvisionIpamByoasnCommand = async (
+  output: __HttpResponse,
+  context: __SerdeContext
+): Promise<ProvisionIpamByoasnCommandOutput> => {
+  if (output.statusCode >= 300) {
+    return de_ProvisionIpamByoasnCommandError(output, context);
+  }
+  const data: any = await parseBody(output.body, context);
+  let contents: any = {};
+  contents = de_ProvisionIpamByoasnResult(data, context);
+  const response: ProvisionIpamByoasnCommandOutput = {
+    $metadata: deserializeMetadata(output),
+    ...contents,
+  };
+  return response;
+};
+
+/**
+ * deserializeAws_ec2ProvisionIpamByoasnCommandError
+ */
+const de_ProvisionIpamByoasnCommandError = async (
+  output: __HttpResponse,
+  context: __SerdeContext
+): Promise<ProvisionIpamByoasnCommandOutput> => {
+  const parsedOutput: any = {
+    ...output,
+    body: await parseErrorBody(output.body, context),
+  };
+  const errorCode = loadEc2ErrorCode(output, parsedOutput.body);
+  const parsedBody = parsedOutput.body;
+  return throwDefaultError({
+    output,
+    parsedBody: parsedBody.Errors.Error,
+    errorCode,
+  });
+};
+
 /**
  * deserializeAws_ec2ProvisionIpamPoolCidrCommand
  */
@@ -38955,6 +39343,9 @@ const se_AdvertiseByoipCidrRequest = (input: AdvertiseByoipCidrRequest, context:
   if (input.Cidr != null) {
     entries["Cidr"] = input.Cidr;
   }
+  if (input.Asn != null) {
+    entries["Asn"] = input.Asn;
+  }
   if (input.DryRun != null) {
     entries["DryRun"] = input.DryRun;
   }
@@ -39081,6 +39472,16 @@ const se_AllocateIpamPoolCidrRequest = (input: AllocateIpamPoolCidrRequest, cont
   if (input.PreviewNextCidr != null) {
     entries["PreviewNextCidr"] = input.PreviewNextCidr;
   }
+  if (input.AllowedCidrs != null) {
+    const memberEntries = se_IpamPoolAllocationAllowedCidrs(input.AllowedCidrs, context);
+    if (input.AllowedCidrs?.length === 0) {
+      entries.AllowedCidr = [];
+    }
+    Object.entries(memberEntries).forEach(([key, value]) => {
+      const loc = `AllowedCidr.${key.substring(key.indexOf(".") + 1)}`;
+      entries[loc] = value;
+    });
+  }
   if (input.DisallowedCidrs != null) {
     const memberEntries = se_IpamPoolAllocationDisallowedCidrs(input.DisallowedCidrs, context);
     if (input.DisallowedCidrs?.length === 0) {
@@ -39204,6 +39605,20 @@ const se_ArnList = (input: string[], context: __SerdeContext): any => {
   return entries;
 };
 
+/**
+ * serializeAws_ec2AsnAuthorizationContext
+ */
+const se_AsnAuthorizationContext = (input: AsnAuthorizationContext, context: __SerdeContext): any => {
+  const entries: any = {};
+  if (input.Message != null) {
+    entries["Message"] = input.Message;
+  }
+  if (input.Signature != null) {
+    entries["Signature"] = input.Signature;
+  }
+  return entries;
+};
+
 /**
  * serializeAws_ec2AssetIdList
  */
@@ -39464,6 +39879,23 @@ const se_AssociateInstanceEventWindowRequest = (
   return entries;
 };
 
+/**
+ * serializeAws_ec2AssociateIpamByoasnRequest
+ */
+const se_AssociateIpamByoasnRequest = (input: AssociateIpamByoasnRequest, context: __SerdeContext): any => {
+  const entries: any = {};
+  if (input.DryRun != null) {
+    entries["DryRun"] = input.DryRun;
+  }
+  if (input.Asn != null) {
+    entries["Asn"] = input.Asn;
+  }
+  if (input.Cidr != null) {
+    entries["Cidr"] = input.Cidr;
+  }
+  return entries;
+};
+
 /**
  * serializeAws_ec2AssociateIpamResourceDiscoveryRequest
  */
@@ -39568,6 +40000,12 @@ const se_AssociateSubnetCidrBlockRequest = (input: AssociateSubnetCidrBlockReque
   if (input.SubnetId != null) {
     entries["SubnetId"] = input.SubnetId;
   }
+  if (input.Ipv6IpamPoolId != null) {
+    entries["Ipv6IpamPoolId"] = input.Ipv6IpamPoolId;
+  }
+  if (input.Ipv6NetmaskLength != null) {
+    entries["Ipv6NetmaskLength"] = input.Ipv6NetmaskLength;
+  }
   return entries;
 };
 
@@ -40800,6 +41238,26 @@ const se_ConnectionNotificationIdsList = (input: string[], context: __SerdeConte
   return entries;
 };
 
+/**
+ * serializeAws_ec2ConnectionTrackingSpecificationRequest
+ */
+const se_ConnectionTrackingSpecificationRequest = (
+  input: ConnectionTrackingSpecificationRequest,
+  context: __SerdeContext
+): any => {
+  const entries: any = {};
+  if (input.TcpEstablishedTimeout != null) {
+    entries["TcpEstablishedTimeout"] = input.TcpEstablishedTimeout;
+  }
+  if (input.UdpStreamTimeout != null) {
+    entries["UdpStreamTimeout"] = input.UdpStreamTimeout;
+  }
+  if (input.UdpTimeout != null) {
+    entries["UdpTimeout"] = input.UdpTimeout;
+  }
+  return entries;
+};
+
 /**
  * serializeAws_ec2ConversionIdStringList
  */
@@ -41848,6 +42306,13 @@ const se_CreateIpamPoolRequest = (input: CreateIpamPoolRequest, context: __Serde
   if (input.PublicIpSource != null) {
     entries["PublicIpSource"] = input.PublicIpSource;
   }
+  if (input.SourceResource != null) {
+    const memberEntries = se_IpamPoolSourceResourceRequest(input.SourceResource, context);
+    Object.entries(memberEntries).forEach(([key, value]) => {
+      const loc = `SourceResource.${key}`;
+      entries[loc] = value;
+    });
+  }
   return entries;
 };
 
@@ -41888,6 +42353,9 @@ const se_CreateIpamRequest = (input: CreateIpamRequest, context: __SerdeContext)
   if (input.ClientToken != null) {
     entries["ClientToken"] = input.ClientToken;
   }
+  if (input.Tier != null) {
+    entries["Tier"] = input.Tier;
+  }
   return entries;
 };
 
@@ -42603,6 +43071,13 @@ const se_CreateNetworkInterfaceRequest = (input: CreateNetworkInterfaceRequest,
   if (input.EnablePrimaryIpv6 != null) {
     entries["EnablePrimaryIpv6"] = input.EnablePrimaryIpv6;
   }
+  if (input.ConnectionTrackingSpecification != null) {
+    const memberEntries = se_ConnectionTrackingSpecificationRequest(input.ConnectionTrackingSpecification, context);
+    Object.entries(memberEntries).forEach(([key, value]) => {
+      const loc = `ConnectionTrackingSpecification.${key}`;
+      entries[loc] = value;
+    });
+  }
   return entries;
 };
 
@@ -43061,6 +43536,18 @@ const se_CreateSubnetRequest = (input: CreateSubnetRequest, context: __SerdeCont
   if (input.Ipv6Native != null) {
     entries["Ipv6Native"] = input.Ipv6Native;
   }
+  if (input.Ipv4IpamPoolId != null) {
+    entries["Ipv4IpamPoolId"] = input.Ipv4IpamPoolId;
+  }
+  if (input.Ipv4NetmaskLength != null) {
+    entries["Ipv4NetmaskLength"] = input.Ipv4NetmaskLength;
+  }
+  if (input.Ipv6IpamPoolId != null) {
+    entries["Ipv6IpamPoolId"] = input.Ipv6IpamPoolId;
+  }
+  if (input.Ipv6NetmaskLength != null) {
+    entries["Ipv6NetmaskLength"] = input.Ipv6NetmaskLength;
+  }
   return entries;
 };
 
@@ -44868,6 +45355,9 @@ const se_DeleteIpamPoolRequest = (input: DeleteIpamPoolRequest, context: __Serde
   if (input.IpamPoolId != null) {
     entries["IpamPoolId"] = input.IpamPoolId;
   }
+  if (input.Cascade != null) {
+    entries["Cascade"] = input.Cascade;
+  }
   return entries;
 };
 
@@ -45936,6 +46426,23 @@ const se_DeprovisionByoipCidrRequest = (input: DeprovisionByoipCidrRequest, cont
   return entries;
 };
 
+/**
+ * serializeAws_ec2DeprovisionIpamByoasnRequest
+ */
+const se_DeprovisionIpamByoasnRequest = (input: DeprovisionIpamByoasnRequest, context: __SerdeContext): any => {
+  const entries: any = {};
+  if (input.DryRun != null) {
+    entries["DryRun"] = input.DryRun;
+  }
+  if (input.IpamId != null) {
+    entries["IpamId"] = input.IpamId;
+  }
+  if (input.Asn != null) {
+    entries["Asn"] = input.Asn;
+  }
+  return entries;
+};
+
 /**
  * serializeAws_ec2DeprovisionIpamPoolCidrRequest
  */
@@ -47987,6 +48494,23 @@ const se_DescribeInternetGatewaysRequest = (input: DescribeInternetGatewaysReque
   return entries;
 };
 
+/**
+ * serializeAws_ec2DescribeIpamByoasnRequest
+ */
+const se_DescribeIpamByoasnRequest = (input: DescribeIpamByoasnRequest, context: __SerdeContext): any => {
+  const entries: any = {};
+  if (input.DryRun != null) {
+    entries["DryRun"] = input.DryRun;
+  }
+  if (input.MaxResults != null) {
+    entries["MaxResults"] = input.MaxResults;
+  }
+  if (input.NextToken != null) {
+    entries["NextToken"] = input.NextToken;
+  }
+  return entries;
+};
+
 /**
  * serializeAws_ec2DescribeIpamPoolsRequest
  */
@@ -51962,6 +52486,23 @@ const se_DisassociateInstanceEventWindowRequest = (
   return entries;
 };
 
+/**
+ * serializeAws_ec2DisassociateIpamByoasnRequest
+ */
+const se_DisassociateIpamByoasnRequest = (input: DisassociateIpamByoasnRequest, context: __SerdeContext): any => {
+  const entries: any = {};
+  if (input.DryRun != null) {
+    entries["DryRun"] = input.DryRun;
+  }
+  if (input.Asn != null) {
+    entries["Asn"] = input.Asn;
+  }
+  if (input.Cidr != null) {
+    entries["Cidr"] = input.Cidr;
+  }
+  return entries;
+};
+
 /**
  * serializeAws_ec2DisassociateIpamResourceDiscoveryRequest
  */
@@ -53781,6 +54322,42 @@ const se_GetIpamDiscoveredAccountsRequest = (input: GetIpamDiscoveredAccountsReq
   return entries;
 };
 
+/**
+ * serializeAws_ec2GetIpamDiscoveredPublicAddressesRequest
+ */
+const se_GetIpamDiscoveredPublicAddressesRequest = (
+  input: GetIpamDiscoveredPublicAddressesRequest,
+  context: __SerdeContext
+): any => {
+  const entries: any = {};
+  if (input.DryRun != null) {
+    entries["DryRun"] = input.DryRun;
+  }
+  if (input.IpamResourceDiscoveryId != null) {
+    entries["IpamResourceDiscoveryId"] = input.IpamResourceDiscoveryId;
+  }
+  if (input.AddressRegion != null) {
+    entries["AddressRegion"] = input.AddressRegion;
+  }
+  if (input.Filters != null) {
+    const memberEntries = se_FilterList(input.Filters, context);
+    if (input.Filters?.length === 0) {
+      entries.Filter = [];
+    }
+    Object.entries(memberEntries).forEach(([key, value]) => {
+      const loc = `Filter.${key.substring(key.indexOf(".") + 1)}`;
+      entries[loc] = value;
+    });
+  }
+  if (input.NextToken != null) {
+    entries["NextToken"] = input.NextToken;
+  }
+  if (input.MaxResults != null) {
+    entries["MaxResults"] = input.MaxResults;
+  }
+  return entries;
+};
+
 /**
  * serializeAws_ec2GetIpamDiscoveredResourceCidrsRequest
  */
@@ -55696,6 +56273,13 @@ const se_InstanceNetworkInterfaceSpecification = (
       entries[loc] = value;
     });
   }
+  if (input.ConnectionTrackingSpecification != null) {
+    const memberEntries = se_ConnectionTrackingSpecificationRequest(input.ConnectionTrackingSpecification, context);
+    Object.entries(memberEntries).forEach(([key, value]) => {
+      const loc = `ConnectionTrackingSpecification.${key}`;
+      entries[loc] = value;
+    });
+  }
   return entries;
 };
 
@@ -56217,6 +56801,22 @@ const se_IpamCidrAuthorizationContext = (input: IpamCidrAuthorizationContext, co
   return entries;
 };
 
+/**
+ * serializeAws_ec2IpamPoolAllocationAllowedCidrs
+ */
+const se_IpamPoolAllocationAllowedCidrs = (input: string[], context: __SerdeContext): any => {
+  const entries: any = {};
+  let counter = 1;
+  for (const entry of input) {
+    if (entry === null) {
+      continue;
+    }
+    entries[`Item.${counter}`] = entry;
+    counter++;
+  }
+  return entries;
+};
+
 /**
  * serializeAws_ec2IpamPoolAllocationDisallowedCidrs
  */
@@ -56233,6 +56833,26 @@ const se_IpamPoolAllocationDisallowedCidrs = (input: string[], context: __SerdeC
   return entries;
 };
 
+/**
+ * serializeAws_ec2IpamPoolSourceResourceRequest
+ */
+const se_IpamPoolSourceResourceRequest = (input: IpamPoolSourceResourceRequest, context: __SerdeContext): any => {
+  const entries: any = {};
+  if (input.ResourceId != null) {
+    entries["ResourceId"] = input.ResourceId;
+  }
+  if (input.ResourceType != null) {
+    entries["ResourceType"] = input.ResourceType;
+  }
+  if (input.ResourceRegion != null) {
+    entries["ResourceRegion"] = input.ResourceRegion;
+  }
+  if (input.ResourceOwner != null) {
+    entries["ResourceOwner"] = input.ResourceOwner;
+  }
+  return entries;
+};
+
 /**
  * serializeAws_ec2IpList
  */
@@ -57054,6 +57674,13 @@ const se_LaunchTemplateInstanceNetworkInterfaceSpecificationRequest = (
       entries[loc] = value;
     });
   }
+  if (input.ConnectionTrackingSpecification != null) {
+    const memberEntries = se_ConnectionTrackingSpecificationRequest(input.ConnectionTrackingSpecification, context);
+    Object.entries(memberEntries).forEach(([key, value]) => {
+      const loc = `ConnectionTrackingSpecification.${key}`;
+      entries[loc] = value;
+    });
+  }
   return entries;
 };
 
@@ -58550,6 +59177,9 @@ const se_ModifyIpamRequest = (input: ModifyIpamRequest, context: __SerdeContext)
       entries[loc] = value;
     });
   }
+  if (input.Tier != null) {
+    entries["Tier"] = input.Tier;
+  }
   return entries;
 };
 
@@ -58786,6 +59416,13 @@ const se_ModifyNetworkInterfaceAttributeRequest = (
   if (input.EnablePrimaryIpv6 != null) {
     entries["EnablePrimaryIpv6"] = input.EnablePrimaryIpv6;
   }
+  if (input.ConnectionTrackingSpecification != null) {
+    const memberEntries = se_ConnectionTrackingSpecificationRequest(input.ConnectionTrackingSpecification, context);
+    Object.entries(memberEntries).forEach(([key, value]) => {
+      const loc = `ConnectionTrackingSpecification.${key}`;
+      entries[loc] = value;
+    });
+  }
   return entries;
 };
 
@@ -61418,6 +62055,30 @@ const se_ProvisionByoipCidrRequest = (input: ProvisionByoipCidrRequest, context:
   return entries;
 };
 
+/**
+ * serializeAws_ec2ProvisionIpamByoasnRequest
+ */
+const se_ProvisionIpamByoasnRequest = (input: ProvisionIpamByoasnRequest, context: __SerdeContext): any => {
+  const entries: any = {};
+  if (input.DryRun != null) {
+    entries["DryRun"] = input.DryRun;
+  }
+  if (input.IpamId != null) {
+    entries["IpamId"] = input.IpamId;
+  }
+  if (input.Asn != null) {
+    entries["Asn"] = input.Asn;
+  }
+  if (input.AsnAuthorizationContext != null) {
+    const memberEntries = se_AsnAuthorizationContext(input.AsnAuthorizationContext, context);
+    Object.entries(memberEntries).forEach(([key, value]) => {
+      const loc = `AsnAuthorizationContext.${key}`;
+      entries[loc] = value;
+    });
+  }
+  return entries;
+};
+
 /**
  * serializeAws_ec2ProvisionIpamPoolCidrRequest
  */
@@ -67848,6 +68509,37 @@ const de_ArnList = (output: any, context: __SerdeContext): string[] => {
     });
 };
 
+/**
+ * deserializeAws_ec2AsnAssociation
+ */
+const de_AsnAssociation = (output: any, context: __SerdeContext): AsnAssociation => {
+  const contents: any = {};
+  if (output["asn"] !== undefined) {
+    contents.Asn = __expectString(output["asn"]);
+  }
+  if (output["cidr"] !== undefined) {
+    contents.Cidr = __expectString(output["cidr"]);
+  }
+  if (output["statusMessage"] !== undefined) {
+    contents.StatusMessage = __expectString(output["statusMessage"]);
+  }
+  if (output["state"] !== undefined) {
+    contents.State = __expectString(output["state"]);
+  }
+  return contents;
+};
+
+/**
+ * deserializeAws_ec2AsnAssociationSet
+ */
+const de_AsnAssociationSet = (output: any, context: __SerdeContext): AsnAssociation[] => {
+  return (output || [])
+    .filter((e: any) => e != null)
+    .map((entry: any) => {
+      return de_AsnAssociation(entry, context);
+    });
+};
+
 /**
  * deserializeAws_ec2AssignedPrivateIpAddress
  */
@@ -68084,6 +68776,17 @@ const de_AssociateInstanceEventWindowResult = (
   return contents;
 };
 
+/**
+ * deserializeAws_ec2AssociateIpamByoasnResult
+ */
+const de_AssociateIpamByoasnResult = (output: any, context: __SerdeContext): AssociateIpamByoasnResult => {
+  const contents: any = {};
+  if (output["asnAssociation"] !== undefined) {
+    contents.AsnAssociation = de_AsnAssociation(output["asnAssociation"], context);
+  }
+  return contents;
+};
+
 /**
  * deserializeAws_ec2AssociateIpamResourceDiscoveryResult
  */
@@ -68669,6 +69372,37 @@ const de_BundleTaskList = (output: any, context: __SerdeContext): BundleTask[] =
     });
 };
 
+/**
+ * deserializeAws_ec2Byoasn
+ */
+const de_Byoasn = (output: any, context: __SerdeContext): Byoasn => {
+  const contents: any = {};
+  if (output["asn"] !== undefined) {
+    contents.Asn = __expectString(output["asn"]);
+  }
+  if (output["ipamId"] !== undefined) {
+    contents.IpamId = __expectString(output["ipamId"]);
+  }
+  if (output["statusMessage"] !== undefined) {
+    contents.StatusMessage = __expectString(output["statusMessage"]);
+  }
+  if (output["state"] !== undefined) {
+    contents.State = __expectString(output["state"]);
+  }
+  return contents;
+};
+
+/**
+ * deserializeAws_ec2ByoasnSet
+ */
+const de_ByoasnSet = (output: any, context: __SerdeContext): Byoasn[] => {
+  return (output || [])
+    .filter((e: any) => e != null)
+    .map((entry: any) => {
+      return de_Byoasn(entry, context);
+    });
+};
+
 /**
  * deserializeAws_ec2ByoipCidr
  */
@@ -68680,6 +69414,14 @@ const de_ByoipCidr = (output: any, context: __SerdeContext): ByoipCidr => {
   if (output["description"] !== undefined) {
     contents.Description = __expectString(output["description"]);
   }
+  if (output.asnAssociationSet === "") {
+    contents.AsnAssociations = [];
+  } else if (output["asnAssociationSet"] !== undefined && output["asnAssociationSet"]["item"] !== undefined) {
+    contents.AsnAssociations = de_AsnAssociationSet(
+      __getArrayIfSingleItem(output["asnAssociationSet"]["item"]),
+      context
+    );
+  }
   if (output["statusMessage"] !== undefined) {
     contents.StatusMessage = __expectString(output["statusMessage"]);
   }
@@ -70045,6 +70787,80 @@ const de_ConnectionNotificationSet = (output: any, context: __SerdeContext): Con
     });
 };
 
+/**
+ * deserializeAws_ec2ConnectionTrackingConfiguration
+ */
+const de_ConnectionTrackingConfiguration = (output: any, context: __SerdeContext): ConnectionTrackingConfiguration => {
+  const contents: any = {};
+  if (output["tcpEstablishedTimeout"] !== undefined) {
+    contents.TcpEstablishedTimeout = __strictParseInt32(output["tcpEstablishedTimeout"]) as number;
+  }
+  if (output["udpStreamTimeout"] !== undefined) {
+    contents.UdpStreamTimeout = __strictParseInt32(output["udpStreamTimeout"]) as number;
+  }
+  if (output["udpTimeout"] !== undefined) {
+    contents.UdpTimeout = __strictParseInt32(output["udpTimeout"]) as number;
+  }
+  return contents;
+};
+
+/**
+ * deserializeAws_ec2ConnectionTrackingSpecification
+ */
+const de_ConnectionTrackingSpecification = (output: any, context: __SerdeContext): ConnectionTrackingSpecification => {
+  const contents: any = {};
+  if (output["tcpEstablishedTimeout"] !== undefined) {
+    contents.TcpEstablishedTimeout = __strictParseInt32(output["tcpEstablishedTimeout"]) as number;
+  }
+  if (output["udpTimeout"] !== undefined) {
+    contents.UdpTimeout = __strictParseInt32(output["udpTimeout"]) as number;
+  }
+  if (output["udpStreamTimeout"] !== undefined) {
+    contents.UdpStreamTimeout = __strictParseInt32(output["udpStreamTimeout"]) as number;
+  }
+  return contents;
+};
+
+/**
+ * deserializeAws_ec2ConnectionTrackingSpecificationRequest
+ */
+const de_ConnectionTrackingSpecificationRequest = (
+  output: any,
+  context: __SerdeContext
+): ConnectionTrackingSpecificationRequest => {
+  const contents: any = {};
+  if (output["TcpEstablishedTimeout"] !== undefined) {
+    contents.TcpEstablishedTimeout = __strictParseInt32(output["TcpEstablishedTimeout"]) as number;
+  }
+  if (output["UdpStreamTimeout"] !== undefined) {
+    contents.UdpStreamTimeout = __strictParseInt32(output["UdpStreamTimeout"]) as number;
+  }
+  if (output["UdpTimeout"] !== undefined) {
+    contents.UdpTimeout = __strictParseInt32(output["UdpTimeout"]) as number;
+  }
+  return contents;
+};
+
+/**
+ * deserializeAws_ec2ConnectionTrackingSpecificationResponse
+ */
+const de_ConnectionTrackingSpecificationResponse = (
+  output: any,
+  context: __SerdeContext
+): ConnectionTrackingSpecificationResponse => {
+  const contents: any = {};
+  if (output["tcpEstablishedTimeout"] !== undefined) {
+    contents.TcpEstablishedTimeout = __strictParseInt32(output["tcpEstablishedTimeout"]) as number;
+  }
+  if (output["udpStreamTimeout"] !== undefined) {
+    contents.UdpStreamTimeout = __strictParseInt32(output["udpStreamTimeout"]) as number;
+  }
+  if (output["udpTimeout"] !== undefined) {
+    contents.UdpTimeout = __strictParseInt32(output["udpTimeout"]) as number;
+  }
+  return contents;
+};
+
 /**
  * deserializeAws_ec2ConversionTask
  */
@@ -72411,6 +73227,17 @@ const de_DeprovisionedAddressSet = (output: any, context: __SerdeContext): strin
     });
 };
 
+/**
+ * deserializeAws_ec2DeprovisionIpamByoasnResult
+ */
+const de_DeprovisionIpamByoasnResult = (output: any, context: __SerdeContext): DeprovisionIpamByoasnResult => {
+  const contents: any = {};
+  if (output["byoasn"] !== undefined) {
+    contents.Byoasn = de_Byoasn(output["byoasn"], context);
+  }
+  return contents;
+};
+
 /**
  * deserializeAws_ec2DeprovisionIpamPoolCidrResult
  */
@@ -73702,6 +74529,22 @@ const de_DescribeInternetGatewaysResult = (output: any, context: __SerdeContext)
   return contents;
 };
 
+/**
+ * deserializeAws_ec2DescribeIpamByoasnResult
+ */
+const de_DescribeIpamByoasnResult = (output: any, context: __SerdeContext): DescribeIpamByoasnResult => {
+  const contents: any = {};
+  if (output.byoasnSet === "") {
+    contents.Byoasns = [];
+  } else if (output["byoasnSet"] !== undefined && output["byoasnSet"]["item"] !== undefined) {
+    contents.Byoasns = de_ByoasnSet(__getArrayIfSingleItem(output["byoasnSet"]["item"]), context);
+  }
+  if (output["nextToken"] !== undefined) {
+    contents.NextToken = __expectString(output["nextToken"]);
+  }
+  return contents;
+};
+
 /**
  * deserializeAws_ec2DescribeIpamPoolsResult
  */
@@ -76226,6 +77069,17 @@ const de_DisassociateInstanceEventWindowResult = (
   return contents;
 };
 
+/**
+ * deserializeAws_ec2DisassociateIpamByoasnResult
+ */
+const de_DisassociateIpamByoasnResult = (output: any, context: __SerdeContext): DisassociateIpamByoasnResult => {
+  const contents: any = {};
+  if (output["asnAssociation"] !== undefined) {
+    contents.AsnAssociation = de_AsnAssociation(output["asnAssociation"], context);
+  }
+  return contents;
+};
+
 /**
  * deserializeAws_ec2DisassociateIpamResourceDiscoveryResult
  */
@@ -78773,6 +79627,34 @@ const de_GetIpamDiscoveredAccountsResult = (output: any, context: __SerdeContext
   return contents;
 };
 
+/**
+ * deserializeAws_ec2GetIpamDiscoveredPublicAddressesResult
+ */
+const de_GetIpamDiscoveredPublicAddressesResult = (
+  output: any,
+  context: __SerdeContext
+): GetIpamDiscoveredPublicAddressesResult => {
+  const contents: any = {};
+  if (output.ipamDiscoveredPublicAddressSet === "") {
+    contents.IpamDiscoveredPublicAddresses = [];
+  } else if (
+    output["ipamDiscoveredPublicAddressSet"] !== undefined &&
+    output["ipamDiscoveredPublicAddressSet"]["item"] !== undefined
+  ) {
+    contents.IpamDiscoveredPublicAddresses = de_IpamDiscoveredPublicAddressSet(
+      __getArrayIfSingleItem(output["ipamDiscoveredPublicAddressSet"]["item"]),
+      context
+    );
+  }
+  if (output["oldestSampleTime"] !== undefined) {
+    contents.OldestSampleTime = __expectNonNull(__parseRfc3339DateTimeWithOffset(output["oldestSampleTime"]));
+  }
+  if (output["nextToken"] !== undefined) {
+    contents.NextToken = __expectString(output["nextToken"]);
+  }
+  return contents;
+};
+
 /**
  * deserializeAws_ec2GetIpamDiscoveredResourceCidrsResult
  */
@@ -81430,6 +82312,12 @@ const de_InstanceNetworkInterface = (output: any, context: __SerdeContext): Inst
   } else if (output["ipv6PrefixSet"] !== undefined && output["ipv6PrefixSet"]["item"] !== undefined) {
     contents.Ipv6Prefixes = de_InstanceIpv6PrefixList(__getArrayIfSingleItem(output["ipv6PrefixSet"]["item"]), context);
   }
+  if (output["connectionTrackingConfiguration"] !== undefined) {
+    contents.ConnectionTrackingConfiguration = de_ConnectionTrackingSpecificationResponse(
+      output["connectionTrackingConfiguration"],
+      context
+    );
+  }
   return contents;
 };
 
@@ -81592,6 +82480,12 @@ const de_InstanceNetworkInterfaceSpecification = (
   if (output["EnaSrdSpecification"] !== undefined) {
     contents.EnaSrdSpecification = de_EnaSrdSpecificationRequest(output["EnaSrdSpecification"], context);
   }
+  if (output["ConnectionTrackingSpecification"] !== undefined) {
+    contents.ConnectionTrackingSpecification = de_ConnectionTrackingSpecificationRequest(
+      output["ConnectionTrackingSpecification"],
+      context
+    );
+  }
   return contents;
 };
 
@@ -82374,6 +83268,12 @@ const de_Ipam = (output: any, context: __SerdeContext): Ipam => {
       output["resourceDiscoveryAssociationCount"]
     ) as number;
   }
+  if (output["stateMessage"] !== undefined) {
+    contents.StateMessage = __expectString(output["stateMessage"]);
+  }
+  if (output["tier"] !== undefined) {
+    contents.Tier = __expectString(output["tier"]);
+  }
   return contents;
 };
 
@@ -82467,6 +83367,87 @@ const de_IpamDiscoveredAccountSet = (output: any, context: __SerdeContext): Ipam
     });
 };
 
+/**
+ * deserializeAws_ec2IpamDiscoveredPublicAddress
+ */
+const de_IpamDiscoveredPublicAddress = (output: any, context: __SerdeContext): IpamDiscoveredPublicAddress => {
+  const contents: any = {};
+  if (output["ipamResourceDiscoveryId"] !== undefined) {
+    contents.IpamResourceDiscoveryId = __expectString(output["ipamResourceDiscoveryId"]);
+  }
+  if (output["addressRegion"] !== undefined) {
+    contents.AddressRegion = __expectString(output["addressRegion"]);
+  }
+  if (output["address"] !== undefined) {
+    contents.Address = __expectString(output["address"]);
+  }
+  if (output["addressOwnerId"] !== undefined) {
+    contents.AddressOwnerId = __expectString(output["addressOwnerId"]);
+  }
+  if (output["addressAllocationId"] !== undefined) {
+    contents.AddressAllocationId = __expectString(output["addressAllocationId"]);
+  }
+  if (output["associationStatus"] !== undefined) {
+    contents.AssociationStatus = __expectString(output["associationStatus"]);
+  }
+  if (output["addressType"] !== undefined) {
+    contents.AddressType = __expectString(output["addressType"]);
+  }
+  if (output["service"] !== undefined) {
+    contents.Service = __expectString(output["service"]);
+  }
+  if (output["serviceResource"] !== undefined) {
+    contents.ServiceResource = __expectString(output["serviceResource"]);
+  }
+  if (output["vpcId"] !== undefined) {
+    contents.VpcId = __expectString(output["vpcId"]);
+  }
+  if (output["subnetId"] !== undefined) {
+    contents.SubnetId = __expectString(output["subnetId"]);
+  }
+  if (output["publicIpv4PoolId"] !== undefined) {
+    contents.PublicIpv4PoolId = __expectString(output["publicIpv4PoolId"]);
+  }
+  if (output["networkInterfaceId"] !== undefined) {
+    contents.NetworkInterfaceId = __expectString(output["networkInterfaceId"]);
+  }
+  if (output["networkInterfaceDescription"] !== undefined) {
+    contents.NetworkInterfaceDescription = __expectString(output["networkInterfaceDescription"]);
+  }
+  if (output["instanceId"] !== undefined) {
+    contents.InstanceId = __expectString(output["instanceId"]);
+  }
+  if (output["tags"] !== undefined) {
+    contents.Tags = de_IpamPublicAddressTags(output["tags"], context);
+  }
+  if (output["networkBorderGroup"] !== undefined) {
+    contents.NetworkBorderGroup = __expectString(output["networkBorderGroup"]);
+  }
+  if (output.securityGroupSet === "") {
+    contents.SecurityGroups = [];
+  } else if (output["securityGroupSet"] !== undefined && output["securityGroupSet"]["item"] !== undefined) {
+    contents.SecurityGroups = de_IpamPublicAddressSecurityGroupList(
+      __getArrayIfSingleItem(output["securityGroupSet"]["item"]),
+      context
+    );
+  }
+  if (output["sampleTime"] !== undefined) {
+    contents.SampleTime = __expectNonNull(__parseRfc3339DateTimeWithOffset(output["sampleTime"]));
+  }
+  return contents;
+};
+
+/**
+ * deserializeAws_ec2IpamDiscoveredPublicAddressSet
+ */
+const de_IpamDiscoveredPublicAddressSet = (output: any, context: __SerdeContext): IpamDiscoveredPublicAddress[] => {
+  return (output || [])
+    .filter((e: any) => e != null)
+    .map((entry: any) => {
+      return de_IpamDiscoveredPublicAddress(entry, context);
+    });
+};
+
 /**
  * deserializeAws_ec2IpamDiscoveredResourceCidr
  */
@@ -82638,6 +83619,9 @@ const de_IpamPool = (output: any, context: __SerdeContext): IpamPool => {
   if (output["publicIpSource"] !== undefined) {
     contents.PublicIpSource = __expectString(output["publicIpSource"]);
   }
+  if (output["sourceResource"] !== undefined) {
+    contents.SourceResource = de_IpamPoolSourceResource(output["sourceResource"], context);
+  }
   return contents;
 };
 
@@ -82740,6 +83724,92 @@ const de_IpamPoolSet = (output: any, context: __SerdeContext): IpamPool[] => {
     });
 };
 
+/**
+ * deserializeAws_ec2IpamPoolSourceResource
+ */
+const de_IpamPoolSourceResource = (output: any, context: __SerdeContext): IpamPoolSourceResource => {
+  const contents: any = {};
+  if (output["resourceId"] !== undefined) {
+    contents.ResourceId = __expectString(output["resourceId"]);
+  }
+  if (output["resourceType"] !== undefined) {
+    contents.ResourceType = __expectString(output["resourceType"]);
+  }
+  if (output["resourceRegion"] !== undefined) {
+    contents.ResourceRegion = __expectString(output["resourceRegion"]);
+  }
+  if (output["resourceOwner"] !== undefined) {
+    contents.ResourceOwner = __expectString(output["resourceOwner"]);
+  }
+  return contents;
+};
+
+/**
+ * deserializeAws_ec2IpamPublicAddressSecurityGroup
+ */
+const de_IpamPublicAddressSecurityGroup = (output: any, context: __SerdeContext): IpamPublicAddressSecurityGroup => {
+  const contents: any = {};
+  if (output["groupName"] !== undefined) {
+    contents.GroupName = __expectString(output["groupName"]);
+  }
+  if (output["groupId"] !== undefined) {
+    contents.GroupId = __expectString(output["groupId"]);
+  }
+  return contents;
+};
+
+/**
+ * deserializeAws_ec2IpamPublicAddressSecurityGroupList
+ */
+const de_IpamPublicAddressSecurityGroupList = (
+  output: any,
+  context: __SerdeContext
+): IpamPublicAddressSecurityGroup[] => {
+  return (output || [])
+    .filter((e: any) => e != null)
+    .map((entry: any) => {
+      return de_IpamPublicAddressSecurityGroup(entry, context);
+    });
+};
+
+/**
+ * deserializeAws_ec2IpamPublicAddressTag
+ */
+const de_IpamPublicAddressTag = (output: any, context: __SerdeContext): IpamPublicAddressTag => {
+  const contents: any = {};
+  if (output["key"] !== undefined) {
+    contents.Key = __expectString(output["key"]);
+  }
+  if (output["value"] !== undefined) {
+    contents.Value = __expectString(output["value"]);
+  }
+  return contents;
+};
+
+/**
+ * deserializeAws_ec2IpamPublicAddressTagList
+ */
+const de_IpamPublicAddressTagList = (output: any, context: __SerdeContext): IpamPublicAddressTag[] => {
+  return (output || [])
+    .filter((e: any) => e != null)
+    .map((entry: any) => {
+      return de_IpamPublicAddressTag(entry, context);
+    });
+};
+
+/**
+ * deserializeAws_ec2IpamPublicAddressTags
+ */
+const de_IpamPublicAddressTags = (output: any, context: __SerdeContext): IpamPublicAddressTags => {
+  const contents: any = {};
+  if (output.eipTagSet === "") {
+    contents.EipTags = [];
+  } else if (output["eipTagSet"] !== undefined && output["eipTagSet"]["item"] !== undefined) {
+    contents.EipTags = de_IpamPublicAddressTagList(__getArrayIfSingleItem(output["eipTagSet"]["item"]), context);
+  }
+  return contents;
+};
+
 /**
  * deserializeAws_ec2IpamResourceCidr
  */
@@ -83983,6 +85053,12 @@ const de_LaunchTemplateInstanceNetworkInterfaceSpecification = (
   if (output["enaSrdSpecification"] !== undefined) {
     contents.EnaSrdSpecification = de_LaunchTemplateEnaSrdSpecification(output["enaSrdSpecification"], context);
   }
+  if (output["connectionTrackingSpecification"] !== undefined) {
+    contents.ConnectionTrackingSpecification = de_ConnectionTrackingSpecification(
+      output["connectionTrackingSpecification"],
+      context
+    );
+  }
   return contents;
 };
 
@@ -86380,6 +87456,12 @@ const de_NetworkInterface = (output: any, context: __SerdeContext): NetworkInter
   if (output["availabilityZone"] !== undefined) {
     contents.AvailabilityZone = __expectString(output["availabilityZone"]);
   }
+  if (output["connectionTrackingConfiguration"] !== undefined) {
+    contents.ConnectionTrackingConfiguration = de_ConnectionTrackingConfiguration(
+      output["connectionTrackingConfiguration"],
+      context
+    );
+  }
   if (output["description"] !== undefined) {
     contents.Description = __expectString(output["description"]);
   }
@@ -87797,6 +88879,17 @@ const de_ProvisionedBandwidth = (output: any, context: __SerdeContext): Provisio
   return contents;
 };
 
+/**
+ * deserializeAws_ec2ProvisionIpamByoasnResult
+ */
+const de_ProvisionIpamByoasnResult = (output: any, context: __SerdeContext): ProvisionIpamByoasnResult => {
+  const contents: any = {};
+  if (output["byoasn"] !== undefined) {
+    contents.Byoasn = de_Byoasn(output["byoasn"], context);
+  }
+  return contents;
+};
+
 /**
  * deserializeAws_ec2ProvisionIpamPoolCidrResult
  */
diff --git a/codegen/sdk-codegen/aws-models/ec2.json b/codegen/sdk-codegen/aws-models/ec2.json
index b21a7cc53e1cb..1ae6172b7a7fb 100644
--- a/codegen/sdk-codegen/aws-models/ec2.json
+++ b/codegen/sdk-codegen/aws-models/ec2.json
@@ -1449,6 +1449,12 @@
             "smithy.api#required": {}
           }
         },
+        "Asn": {
+          "target": "com.amazonaws.ec2#String",
+          "traits": {
+            "smithy.api#documentation": "<p>The public 2-byte or 4-byte ASN that you want to advertise.</p>"
+          }
+        },
         "DryRun": {
           "target": "com.amazonaws.ec2#Boolean",
           "traits": {
@@ -1820,6 +1826,13 @@
             "smithy.api#documentation": "<p>A preview of the next available CIDR in a pool.</p>"
           }
         },
+        "AllowedCidrs": {
+          "target": "com.amazonaws.ec2#IpamPoolAllocationAllowedCidrs",
+          "traits": {
+            "smithy.api#documentation": "<p>Include a particular CIDR range that can be returned by the pool. Allowed CIDRs are only allowed if using netmask length for allocation.</p>",
+            "smithy.api#xmlName": "AllowedCidr"
+          }
+        },
         "DisallowedCidrs": {
           "target": "com.amazonaws.ec2#IpamPoolAllocationDisallowedCidrs",
           "traits": {
@@ -2155,6 +2168,9 @@
         {
           "target": "com.amazonaws.ec2#AssociateInstanceEventWindow"
         },
+        {
+          "target": "com.amazonaws.ec2#AssociateIpamByoasn"
+        },
         {
           "target": "com.amazonaws.ec2#AssociateIpamResourceDiscovery"
         },
@@ -2725,6 +2741,9 @@
         {
           "target": "com.amazonaws.ec2#DeprovisionByoipCidr"
         },
+        {
+          "target": "com.amazonaws.ec2#DeprovisionIpamByoasn"
+        },
         {
           "target": "com.amazonaws.ec2#DeprovisionIpamPoolCidr"
         },
@@ -2911,6 +2930,9 @@
         {
           "target": "com.amazonaws.ec2#DescribeInternetGateways"
         },
+        {
+          "target": "com.amazonaws.ec2#DescribeIpamByoasn"
+        },
         {
           "target": "com.amazonaws.ec2#DescribeIpamPools"
         },
@@ -3265,6 +3287,9 @@
         {
           "target": "com.amazonaws.ec2#DisassociateInstanceEventWindow"
         },
+        {
+          "target": "com.amazonaws.ec2#DisassociateIpamByoasn"
+        },
         {
           "target": "com.amazonaws.ec2#DisassociateIpamResourceDiscovery"
         },
@@ -3409,6 +3434,9 @@
         {
           "target": "com.amazonaws.ec2#GetIpamDiscoveredAccounts"
         },
+        {
+          "target": "com.amazonaws.ec2#GetIpamDiscoveredPublicAddresses"
+        },
         {
           "target": "com.amazonaws.ec2#GetIpamDiscoveredResourceCidrs"
         },
@@ -3724,6 +3752,9 @@
         {
           "target": "com.amazonaws.ec2#ProvisionByoipCidr"
         },
+        {
+          "target": "com.amazonaws.ec2#ProvisionIpamByoasn"
+        },
         {
           "target": "com.amazonaws.ec2#ProvisionIpamPoolCidr"
         },
@@ -5633,6 +5664,161 @@
         }
       }
     },
+    "com.amazonaws.ec2#AsnAssociation": {
+      "type": "structure",
+      "members": {
+        "Asn": {
+          "target": "com.amazonaws.ec2#String",
+          "traits": {
+            "aws.protocols#ec2QueryName": "Asn",
+            "smithy.api#documentation": "<p>The association's ASN.</p>",
+            "smithy.api#xmlName": "asn"
+          }
+        },
+        "Cidr": {
+          "target": "com.amazonaws.ec2#String",
+          "traits": {
+            "aws.protocols#ec2QueryName": "Cidr",
+            "smithy.api#documentation": "<p>The association's CIDR.</p>",
+            "smithy.api#xmlName": "cidr"
+          }
+        },
+        "StatusMessage": {
+          "target": "com.amazonaws.ec2#String",
+          "traits": {
+            "aws.protocols#ec2QueryName": "StatusMessage",
+            "smithy.api#documentation": "<p>The association's status message.</p>",
+            "smithy.api#xmlName": "statusMessage"
+          }
+        },
+        "State": {
+          "target": "com.amazonaws.ec2#AsnAssociationState",
+          "traits": {
+            "aws.protocols#ec2QueryName": "State",
+            "smithy.api#documentation": "<p>The association's state.</p>",
+            "smithy.api#xmlName": "state"
+          }
+        }
+      },
+      "traits": {
+        "smithy.api#documentation": "<p>An Autonomous System Number (ASN) and BYOIP CIDR association.</p>"
+      }
+    },
+    "com.amazonaws.ec2#AsnAssociationSet": {
+      "type": "list",
+      "member": {
+        "target": "com.amazonaws.ec2#AsnAssociation",
+        "traits": {
+          "smithy.api#xmlName": "item"
+        }
+      }
+    },
+    "com.amazonaws.ec2#AsnAssociationState": {
+      "type": "enum",
+      "members": {
+        "disassociated": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "disassociated"
+          }
+        },
+        "failed_disassociation": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "failed-disassociation"
+          }
+        },
+        "failed_association": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "failed-association"
+          }
+        },
+        "pending_disassociation": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "pending-disassociation"
+          }
+        },
+        "pending_association": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "pending-association"
+          }
+        },
+        "associated": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "associated"
+          }
+        }
+      }
+    },
+    "com.amazonaws.ec2#AsnAuthorizationContext": {
+      "type": "structure",
+      "members": {
+        "Message": {
+          "target": "com.amazonaws.ec2#String",
+          "traits": {
+            "smithy.api#clientOptional": {},
+            "smithy.api#documentation": "<p>The authorization context's message.</p>",
+            "smithy.api#required": {}
+          }
+        },
+        "Signature": {
+          "target": "com.amazonaws.ec2#String",
+          "traits": {
+            "smithy.api#clientOptional": {},
+            "smithy.api#documentation": "<p>The authorization context's signature.</p>",
+            "smithy.api#required": {}
+          }
+        }
+      },
+      "traits": {
+        "smithy.api#documentation": "<p>Provides authorization for Amazon to bring an Autonomous System Number (ASN) to a specific Amazon Web Services account using bring your own ASN (BYOASN). \n            For details on the format of the message and signature, see <a href=\"https://docs.aws.amazon.com/vpc/latest/ipam/tutorials-byoasn.html\">Tutorial: Bring your ASN to IPAM</a> in the <i>Amazon VPC IPAM guide</i>.</p>"
+      }
+    },
+    "com.amazonaws.ec2#AsnState": {
+      "type": "enum",
+      "members": {
+        "deprovisioned": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "deprovisioned"
+          }
+        },
+        "failed_deprovision": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "failed-deprovision"
+          }
+        },
+        "failed_provision": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "failed-provision"
+          }
+        },
+        "pending_deprovision": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "pending-deprovision"
+          }
+        },
+        "pending_provision": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "pending-provision"
+          }
+        },
+        "provisioned": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "provisioned"
+          }
+        }
+      }
+    },
     "com.amazonaws.ec2#AssetId": {
       "type": "string"
     },
@@ -6372,6 +6558,64 @@
         "smithy.api#output": {}
       }
     },
+    "com.amazonaws.ec2#AssociateIpamByoasn": {
+      "type": "operation",
+      "input": {
+        "target": "com.amazonaws.ec2#AssociateIpamByoasnRequest"
+      },
+      "output": {
+        "target": "com.amazonaws.ec2#AssociateIpamByoasnResult"
+      },
+      "traits": {
+        "smithy.api#documentation": "<p>Associates your Autonomous System Number (ASN) with a BYOIP CIDR that you own in the same Amazon Web Services Region. \n            For more information, see <a href=\"https://docs.aws.amazon.com/vpc/latest/ipam/tutorials-byoasn.html\">Tutorial: Bring your ASN to IPAM</a> in the <i>Amazon VPC IPAM guide</i>.</p>\n         <p>After the association succeeds, the ASN is eligible for \n            advertisement. You can view the association with <a href=\"https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeByoipCidrs.html\">DescribeByoipCidrs</a>. You can advertise the CIDR with <a href=\"https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_AdvertiseByoipCidr.html\">AdvertiseByoipCidr</a>.</p>"
+      }
+    },
+    "com.amazonaws.ec2#AssociateIpamByoasnRequest": {
+      "type": "structure",
+      "members": {
+        "DryRun": {
+          "target": "com.amazonaws.ec2#Boolean",
+          "traits": {
+            "smithy.api#documentation": "<p>Checks whether you have the required permissions for the action, without actually making the request, \n   and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. \n   Otherwise, it is <code>UnauthorizedOperation</code>.</p>"
+          }
+        },
+        "Asn": {
+          "target": "com.amazonaws.ec2#String",
+          "traits": {
+            "smithy.api#clientOptional": {},
+            "smithy.api#documentation": "<p>A public 2-byte or 4-byte ASN.</p>",
+            "smithy.api#required": {}
+          }
+        },
+        "Cidr": {
+          "target": "com.amazonaws.ec2#String",
+          "traits": {
+            "smithy.api#clientOptional": {},
+            "smithy.api#documentation": "<p>The BYOIP CIDR you want to associate with an ASN.</p>",
+            "smithy.api#required": {}
+          }
+        }
+      },
+      "traits": {
+        "smithy.api#input": {}
+      }
+    },
+    "com.amazonaws.ec2#AssociateIpamByoasnResult": {
+      "type": "structure",
+      "members": {
+        "AsnAssociation": {
+          "target": "com.amazonaws.ec2#AsnAssociation",
+          "traits": {
+            "aws.protocols#ec2QueryName": "AsnAssociation",
+            "smithy.api#documentation": "<p>The ASN and BYOIP CIDR association.</p>",
+            "smithy.api#xmlName": "asnAssociation"
+          }
+        }
+      },
+      "traits": {
+        "smithy.api#output": {}
+      }
+    },
     "com.amazonaws.ec2#AssociateIpamResourceDiscovery": {
       "type": "operation",
       "input": {
@@ -6616,7 +6860,7 @@
         "target": "com.amazonaws.ec2#AssociateSubnetCidrBlockResult"
       },
       "traits": {
-        "smithy.api#documentation": "<p>Associates a CIDR block with your subnet. You can only associate a single IPv6 CIDR\n            block with your subnet. An IPv6 CIDR block must have a prefix length of /64.</p>"
+        "smithy.api#documentation": "<p>Associates a CIDR block with your subnet. You can only associate a single IPv6 CIDR\n            block with your subnet.</p>"
       }
     },
     "com.amazonaws.ec2#AssociateSubnetCidrBlockRequest": {
@@ -6626,9 +6870,7 @@
           "target": "com.amazonaws.ec2#String",
           "traits": {
             "aws.protocols#ec2QueryName": "Ipv6CidrBlock",
-            "smithy.api#clientOptional": {},
-            "smithy.api#documentation": "<p>The IPv6 CIDR block for your subnet. The subnet must have a /64 prefix\n            length.</p>",
-            "smithy.api#required": {},
+            "smithy.api#documentation": "<p>The IPv6 CIDR block for your subnet.</p>",
             "smithy.api#xmlName": "ipv6CidrBlock"
           }
         },
@@ -6641,6 +6883,18 @@
             "smithy.api#required": {},
             "smithy.api#xmlName": "subnetId"
           }
+        },
+        "Ipv6IpamPoolId": {
+          "target": "com.amazonaws.ec2#IpamPoolId",
+          "traits": {
+            "smithy.api#documentation": "<p>An IPv6 IPAM pool ID.</p>"
+          }
+        },
+        "Ipv6NetmaskLength": {
+          "target": "com.amazonaws.ec2#NetmaskLength",
+          "traits": {
+            "smithy.api#documentation": "<p>An IPv6 netmask length.</p>"
+          }
         }
       },
       "traits": {
@@ -6862,7 +7116,7 @@
         "target": "com.amazonaws.ec2#AssociateTrunkInterfaceResult"
       },
       "traits": {
-        "smithy.api#documentation": "<note>\n            <p>This API action is currently in <b>limited preview only</b>. \n                If you are interested in using this feature, contact your account manager.</p>\n         </note>\n         <p>Associates a branch network interface with a trunk network interface.</p>\n         <p>Before you create the association, run the <a href=\"https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateNetworkInterface.html\">create-network-interface</a> command and set\n            <code>--interface-type</code> to <code>trunk</code>. You must also create a network interface for each branch network interface that you want to associate with the trunk network interface.</p>"
+        "smithy.api#documentation": "<p>Associates a branch network interface with a trunk network interface.</p>\n         <p>Before you create the association, run the <a href=\"https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateNetworkInterface.html\">create-network-interface</a> command and set\n            <code>--interface-type</code> to <code>trunk</code>. You must also create a network interface for each branch network interface that you want to associate with the trunk network interface.</p>"
       }
     },
     "com.amazonaws.ec2#AssociateTrunkInterfaceRequest": {
@@ -6947,7 +7201,7 @@
         "target": "com.amazonaws.ec2#AssociateVpcCidrBlockResult"
       },
       "traits": {
-        "smithy.api#documentation": "<p>Associates a CIDR block with your VPC. You can associate a secondary IPv4 CIDR block,\n            an Amazon-provided IPv6 CIDR block, or an IPv6 CIDR block from an IPv6 address pool that\n            you provisioned through bring your own IP addresses (<a href=\"https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-byoip.html\">BYOIP</a>). The IPv6 CIDR block size is fixed\n            at /56.</p>\n         <p>You must specify one of the following in the request: an IPv4 CIDR block, an IPv6\n            pool, or an Amazon-provided IPv6 CIDR block.</p>\n         <p>For more information about associating CIDR blocks with your VPC and applicable\n            restrictions, see <a href=\"https://docs.aws.amazon.com/vpc/latest/userguide/vpc-ip-addressing.html\">IP addressing for your VPCs and subnets</a> \n            in the <i>Amazon VPC User Guide</i>.</p>"
+        "smithy.api#documentation": "<p>Associates a CIDR block with your VPC. You can associate a secondary IPv4 CIDR block,\n            an Amazon-provided IPv6 CIDR block, or an IPv6 CIDR block from an IPv6 address pool that\n            you provisioned through bring your own IP addresses (<a href=\"https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-byoip.html\">BYOIP</a>). </p>\n         <p>You must specify one of the following in the request: an IPv4 CIDR block, an IPv6\n            pool, or an Amazon-provided IPv6 CIDR block.</p>\n         <p>For more information about associating CIDR blocks with your VPC and applicable\n            restrictions, see <a href=\"https://docs.aws.amazon.com/vpc/latest/userguide/vpc-ip-addressing.html\">IP addressing for your VPCs and subnets</a> \n            in the <i>Amazon VPC User Guide</i>.</p>"
       }
     },
     "com.amazonaws.ec2#AssociateVpcCidrBlockRequest": {
@@ -6957,7 +7211,7 @@
           "target": "com.amazonaws.ec2#Boolean",
           "traits": {
             "aws.protocols#ec2QueryName": "AmazonProvidedIpv6CidrBlock",
-            "smithy.api#documentation": "<p>Requests an Amazon-provided IPv6 CIDR block with a /56 prefix length for the VPC. You cannot specify the range of IPv6 addresses, or the size of the CIDR block.</p>",
+            "smithy.api#documentation": "<p>Requests an Amazon-provided IPv6 CIDR block with a /56 prefix length for the VPC. You\n            cannot specify the range of IPv6 addresses or the size of the CIDR block.</p>",
             "smithy.api#xmlName": "amazonProvidedIpv6CidrBlock"
           }
         },
@@ -7735,7 +7989,7 @@
         }
       },
       "traits": {
-        "smithy.api#documentation": "<p>ENA Express uses Amazon Web Services Scalable Reliable Datagram (SRD) technology to increase the \n\t\t\tmaximum bandwidth used per stream and minimize tail latency of network traffic between EC2 instances. \n\t\t\tWith ENA Express, you can communicate between two EC2 instances in the same subnet within the same \n\t\t\taccount, or in different accounts. Both sending and receiving instances must have ENA Express enabled.</p>\n         <p>To improve the reliability of network packet delivery, ENA Express reorders network packets on the \n\t\t\treceiving end by default. However, some UDP-based applications are designed to handle network packets \n\t\t\tthat are out of order to reduce the overhead for packet delivery at the network layer. When ENA Express \n\t\t\tis enabled, you can specify whether UDP network traffic uses it.</p>"
+        "smithy.api#documentation": "<p>ENA Express uses Amazon Web Services Scalable Reliable Datagram (SRD) technology to increase the\n\t\t\tmaximum bandwidth used per stream and minimize tail latency of network traffic between EC2 instances.\n\t\t\tWith ENA Express, you can communicate between two EC2 instances in the same subnet within the same\n\t\t\taccount, or in different accounts. Both sending and receiving instances must have ENA Express enabled.</p>\n         <p>To improve the reliability of network packet delivery, ENA Express reorders network packets on the\n\t\t\treceiving end by default. However, some UDP-based applications are designed to handle network packets\n\t\t\tthat are out of order to reduce the overhead for packet delivery at the network layer. When ENA Express\n\t\t\tis enabled, you can specify whether UDP network traffic uses it.</p>"
       }
     },
     "com.amazonaws.ec2#AttachmentEnaSrdUdpSpecification": {
@@ -7745,13 +7999,13 @@
           "target": "com.amazonaws.ec2#Boolean",
           "traits": {
             "aws.protocols#ec2QueryName": "EnaSrdUdpEnabled",
-            "smithy.api#documentation": "<p>Indicates whether UDP traffic to and from the instance uses ENA Express. To specify this setting, \n\t\t\tyou must first enable ENA Express.</p>",
+            "smithy.api#documentation": "<p>Indicates whether UDP traffic to and from the instance uses ENA Express. To specify this setting,\n\t\t\tyou must first enable ENA Express.</p>",
             "smithy.api#xmlName": "enaSrdUdpEnabled"
           }
         }
       },
       "traits": {
-        "smithy.api#documentation": "<p>ENA Express is compatible with both TCP and UDP transport protocols. When it's enabled, TCP traffic \n\t\t\tautomatically uses it. However, some UDP-based applications are designed to handle network packets that are \n\t\t\tout of order, without a need for retransmission, such as live video broadcasting or other near-real-time \n\t\t\tapplications. For UDP traffic, you can specify whether to use ENA Express, based on your application \n\t\t\tenvironment needs.</p>"
+        "smithy.api#documentation": "<p>ENA Express is compatible with both TCP and UDP transport protocols. When it's enabled, TCP traffic\n\t\t\tautomatically uses it. However, some UDP-based applications are designed to handle network packets that are\n\t\t\tout of order, without a need for retransmission, such as live video broadcasting or other near-real-time\n\t\t\tapplications. For UDP traffic, you can specify whether to use ENA Express, based on your application\n\t\t\tenvironment needs.</p>"
       }
     },
     "com.amazonaws.ec2#AttachmentStatus": {
@@ -9065,6 +9319,55 @@
     "com.amazonaws.ec2#BurstablePerformanceFlag": {
       "type": "boolean"
     },
+    "com.amazonaws.ec2#Byoasn": {
+      "type": "structure",
+      "members": {
+        "Asn": {
+          "target": "com.amazonaws.ec2#String",
+          "traits": {
+            "aws.protocols#ec2QueryName": "Asn",
+            "smithy.api#documentation": "<p>A public 2-byte or 4-byte ASN.</p>",
+            "smithy.api#xmlName": "asn"
+          }
+        },
+        "IpamId": {
+          "target": "com.amazonaws.ec2#IpamId",
+          "traits": {
+            "aws.protocols#ec2QueryName": "IpamId",
+            "smithy.api#documentation": "<p>An IPAM ID.</p>",
+            "smithy.api#xmlName": "ipamId"
+          }
+        },
+        "StatusMessage": {
+          "target": "com.amazonaws.ec2#String",
+          "traits": {
+            "aws.protocols#ec2QueryName": "StatusMessage",
+            "smithy.api#documentation": "<p>The status message.</p>",
+            "smithy.api#xmlName": "statusMessage"
+          }
+        },
+        "State": {
+          "target": "com.amazonaws.ec2#AsnState",
+          "traits": {
+            "aws.protocols#ec2QueryName": "State",
+            "smithy.api#documentation": "<p>The provisioning state of the BYOASN.</p>",
+            "smithy.api#xmlName": "state"
+          }
+        }
+      },
+      "traits": {
+        "smithy.api#documentation": "<p>The Autonomous System Number (ASN) and BYOIP CIDR association.</p>"
+      }
+    },
+    "com.amazonaws.ec2#ByoasnSet": {
+      "type": "list",
+      "member": {
+        "target": "com.amazonaws.ec2#Byoasn",
+        "traits": {
+          "smithy.api#xmlName": "item"
+        }
+      }
+    },
     "com.amazonaws.ec2#ByoipCidr": {
       "type": "structure",
       "members": {
@@ -9084,6 +9387,14 @@
             "smithy.api#xmlName": "description"
           }
         },
+        "AsnAssociations": {
+          "target": "com.amazonaws.ec2#AsnAssociationSet",
+          "traits": {
+            "aws.protocols#ec2QueryName": "AsnAssociationSet",
+            "smithy.api#documentation": "<p>The BYOIP CIDR associations with ASNs.</p>",
+            "smithy.api#xmlName": "asnAssociationSet"
+          }
+        },
         "StatusMessage": {
           "target": "com.amazonaws.ec2#String",
           "traits": {
@@ -12660,6 +12971,128 @@
         }
       }
     },
+    "com.amazonaws.ec2#ConnectionTrackingConfiguration": {
+      "type": "structure",
+      "members": {
+        "TcpEstablishedTimeout": {
+          "target": "com.amazonaws.ec2#Integer",
+          "traits": {
+            "aws.protocols#ec2QueryName": "TcpEstablishedTimeout",
+            "smithy.api#documentation": "<p>Timeout (in seconds) for idle TCP\n\t\t\t\t\t\tconnections in an established state. Min: 60 seconds. Max: 432000 seconds (5\n\t\t\t\t\t\tdays). Default: 432000 seconds. Recommended: Less than 432000 seconds.</p>",
+            "smithy.api#xmlName": "tcpEstablishedTimeout"
+          }
+        },
+        "UdpStreamTimeout": {
+          "target": "com.amazonaws.ec2#Integer",
+          "traits": {
+            "aws.protocols#ec2QueryName": "UdpStreamTimeout",
+            "smithy.api#documentation": "<p>Timeout (in seconds) for idle UDP\n\t\t\t\t\t\tflows classified as streams which have seen more than one request-response\n\t\t\t\t\t\ttransaction. Min: 60 seconds. Max: 180 seconds (3 minutes). Default: 180\n\t\t\t\t\t\tseconds.</p>",
+            "smithy.api#xmlName": "udpStreamTimeout"
+          }
+        },
+        "UdpTimeout": {
+          "target": "com.amazonaws.ec2#Integer",
+          "traits": {
+            "aws.protocols#ec2QueryName": "UdpTimeout",
+            "smithy.api#documentation": "<p>Timeout (in seconds) for idle UDP flows that\n\t\t\t\t\t\thave seen traffic only in a single direction or a single request-response\n\t\t\t\t\t\ttransaction. Min: 30 seconds. Max: 60 seconds. Default: 30 seconds.</p>",
+            "smithy.api#xmlName": "udpTimeout"
+          }
+        }
+      },
+      "traits": {
+        "smithy.api#documentation": "<p>A security group connection tracking configuration that enables you to set the idle timeout for connection tracking on an Elastic network interface. For more information, see <a href=\"https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-connection-tracking.html#connection-tracking-timeouts\">Connection tracking timeouts</a> in the <i>Amazon Elastic Compute Cloud User Guide</i>.</p>"
+      }
+    },
+    "com.amazonaws.ec2#ConnectionTrackingSpecification": {
+      "type": "structure",
+      "members": {
+        "TcpEstablishedTimeout": {
+          "target": "com.amazonaws.ec2#Integer",
+          "traits": {
+            "aws.protocols#ec2QueryName": "TcpEstablishedTimeout",
+            "smithy.api#documentation": "<p>Timeout (in seconds) for idle TCP\n\t\t\t\t\t\tconnections in an established state. Min: 60 seconds. Max: 432000 seconds (5\n\t\t\t\t\t\tdays). Default: 432000 seconds. Recommended: Less than 432000 seconds.</p>",
+            "smithy.api#xmlName": "tcpEstablishedTimeout"
+          }
+        },
+        "UdpTimeout": {
+          "target": "com.amazonaws.ec2#Integer",
+          "traits": {
+            "aws.protocols#ec2QueryName": "UdpTimeout",
+            "smithy.api#documentation": "<p>Timeout (in seconds) for idle UDP flows that\n\t\t\t\t\t\thave seen traffic only in a single direction or a single request-response\n\t\t\t\t\t\ttransaction. Min: 30 seconds. Max: 60 seconds. Default: 30 seconds.</p>",
+            "smithy.api#xmlName": "udpTimeout"
+          }
+        },
+        "UdpStreamTimeout": {
+          "target": "com.amazonaws.ec2#Integer",
+          "traits": {
+            "aws.protocols#ec2QueryName": "UdpStreamTimeout",
+            "smithy.api#documentation": "<p>Timeout (in seconds) for idle UDP\n\t\t\t\t\t\tflows classified as streams which have seen more than one request-response\n\t\t\t\t\t\ttransaction. Min: 60 seconds. Max: 180 seconds (3 minutes). Default: 180\n\t\t\t\t\t\tseconds.</p>",
+            "smithy.api#xmlName": "udpStreamTimeout"
+          }
+        }
+      },
+      "traits": {
+        "smithy.api#documentation": "<p>A security group connection tracking specification that enables you to set the idle timeout for connection tracking on an Elastic network interface. For more information, see <a href=\"https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-connection-tracking.html#connection-tracking-timeouts\">Connection tracking timeouts</a> in the <i>Amazon Elastic Compute Cloud User Guide</i>.</p>"
+      }
+    },
+    "com.amazonaws.ec2#ConnectionTrackingSpecificationRequest": {
+      "type": "structure",
+      "members": {
+        "TcpEstablishedTimeout": {
+          "target": "com.amazonaws.ec2#Integer",
+          "traits": {
+            "smithy.api#documentation": "<p>Timeout (in seconds) for idle TCP\n\t\t\t\t\t\tconnections in an established state. Min: 60 seconds. Max: 432000 seconds (5\n\t\t\t\t\t\tdays). Default: 432000 seconds. Recommended: Less than 432000 seconds.</p>"
+          }
+        },
+        "UdpStreamTimeout": {
+          "target": "com.amazonaws.ec2#Integer",
+          "traits": {
+            "smithy.api#documentation": "<p>Timeout (in seconds) for idle UDP\n\t\t\t\t\t\tflows classified as streams which have seen more than one request-response\n\t\t\t\t\t\ttransaction. Min: 60 seconds. Max: 180 seconds (3 minutes). Default: 180\n\t\t\t\t\t\tseconds.</p>"
+          }
+        },
+        "UdpTimeout": {
+          "target": "com.amazonaws.ec2#Integer",
+          "traits": {
+            "smithy.api#documentation": "<p>Timeout (in seconds) for idle UDP flows that\n\t\t\t\t\t\thave seen traffic only in a single direction or a single request-response\n\t\t\t\t\t\ttransaction. Min: 30 seconds. Max: 60 seconds. Default: 30 seconds.</p>"
+          }
+        }
+      },
+      "traits": {
+        "smithy.api#documentation": "<p>A security group connection tracking specification request that enables you to set the idle timeout for connection tracking on an Elastic network interface. For more information, see <a href=\"https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-connection-tracking.html#connection-tracking-timeouts\">Connection tracking timeouts</a> in the <i>Amazon Elastic Compute Cloud User Guide</i>.</p>"
+      }
+    },
+    "com.amazonaws.ec2#ConnectionTrackingSpecificationResponse": {
+      "type": "structure",
+      "members": {
+        "TcpEstablishedTimeout": {
+          "target": "com.amazonaws.ec2#Integer",
+          "traits": {
+            "aws.protocols#ec2QueryName": "TcpEstablishedTimeout",
+            "smithy.api#documentation": "<p>Timeout (in seconds) for idle TCP\n\t\t\t\t\t\tconnections in an established state. Min: 60 seconds. Max: 432000 seconds (5\n\t\t\t\t\t\tdays). Default: 432000 seconds. Recommended: Less than 432000 seconds.</p>",
+            "smithy.api#xmlName": "tcpEstablishedTimeout"
+          }
+        },
+        "UdpStreamTimeout": {
+          "target": "com.amazonaws.ec2#Integer",
+          "traits": {
+            "aws.protocols#ec2QueryName": "UdpStreamTimeout",
+            "smithy.api#documentation": "<p>Timeout (in seconds) for idle UDP\n\t\t\t\t\t\tflows classified as streams which have seen more than one request-response\n\t\t\t\t\t\ttransaction. Min: 60 seconds. Max: 180 seconds (3 minutes). Default: 180\n\t\t\t\t\t\tseconds.</p>",
+            "smithy.api#xmlName": "udpStreamTimeout"
+          }
+        },
+        "UdpTimeout": {
+          "target": "com.amazonaws.ec2#Integer",
+          "traits": {
+            "aws.protocols#ec2QueryName": "UdpTimeout",
+            "smithy.api#documentation": "<p>Timeout (in seconds) for idle UDP flows that\n\t\t\t\t\t\thave seen traffic only in a single direction or a single request-response\n\t\t\t\t\t\ttransaction. Min: 30 seconds. Max: 60 seconds. Default: 30 seconds.</p>",
+            "smithy.api#xmlName": "udpTimeout"
+          }
+        }
+      },
+      "traits": {
+        "smithy.api#documentation": "<p>A security group connection tracking specification response that enables you to set the idle timeout for connection tracking on an Elastic network interface. For more information, see <a href=\"https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-connection-tracking.html#connection-tracking-timeouts\">Connection tracking timeouts</a> in the <i>Amazon Elastic Compute Cloud User Guide</i>.</p>"
+      }
+    },
     "com.amazonaws.ec2#ConnectivityType": {
       "type": "enum",
       "members": {
@@ -15380,6 +15813,12 @@
           "traits": {
             "smithy.api#documentation": "<p>The IP address source for pools in the public scope. Only used for provisioning IP address CIDRs to pools in the public scope. Default is <code>byoip</code>. For more information, see <a href=\"https://docs.aws.amazon.com/vpc/latest/ipam/intro-create-ipv6-pools.html\">Create IPv6 pools</a> in the <i>Amazon VPC IPAM User Guide</i>. \n         By default, you can add only one Amazon-provided IPv6 CIDR block to a top-level IPv6 pool if PublicIpSource is <code>amazon</code>. For information on increasing the default limit, see <a href=\"https://docs.aws.amazon.com/vpc/latest/ipam/quotas-ipam.html\"> Quotas for your IPAM</a> in the <i>Amazon VPC IPAM User Guide</i>.</p>"
           }
+        },
+        "SourceResource": {
+          "target": "com.amazonaws.ec2#IpamPoolSourceResourceRequest",
+          "traits": {
+            "smithy.api#documentation": "<p>The resource used to provision CIDRs to a resource planning pool.</p>"
+          }
         }
       },
       "traits": {
@@ -15437,6 +15876,12 @@
             "smithy.api#documentation": "<p>A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. For more information, see <a href=\"https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html\">Ensuring Idempotency</a>.</p>",
             "smithy.api#idempotencyToken": {}
           }
+        },
+        "Tier": {
+          "target": "com.amazonaws.ec2#IpamTier",
+          "traits": {
+            "smithy.api#documentation": "<p>IPAM is offered in a Free Tier and an Advanced Tier. For more information about the features available in each tier and the costs associated with the tiers, see <a href=\"http://aws.amazon.com/vpc/pricing/\">Amazon VPC pricing > IPAM tab</a>.</p>"
+          }
         }
       },
       "traits": {
@@ -17036,6 +17481,12 @@
           "traits": {
             "smithy.api#documentation": "<p>If you’re creating a network interface in a dual-stack or IPv6-only subnet, you have\n            the option to assign a primary IPv6 IP address. A primary IPv6 address is an IPv6 GUA\n            address associated with an ENI that you have enabled to use a primary IPv6 address. Use this option if the instance that\n            this ENI will be attached to relies on its IPv6 address not changing. Amazon Web Services\n            will automatically assign an IPv6 address associated with the ENI attached to your\n            instance to be the primary IPv6 address. Once you enable an IPv6 GUA address to be a\n            primary IPv6, you cannot disable it. When you enable an IPv6 GUA address to be a primary\n            IPv6, the first IPv6 GUA will be made the primary IPv6 address until the instance is\n            terminated or the network interface is detached. If you have multiple IPv6 addresses\n            associated with an ENI attached to your instance and you enable a primary IPv6 address,\n            the first IPv6 GUA address associated with the ENI becomes the primary IPv6\n            address.</p>"
           }
+        },
+        "ConnectionTrackingSpecification": {
+          "target": "com.amazonaws.ec2#ConnectionTrackingSpecificationRequest",
+          "traits": {
+            "smithy.api#documentation": "<p>A connection tracking specification for the network interface.</p>"
+          }
         }
       },
       "traits": {
@@ -18089,7 +18540,7 @@
         "target": "com.amazonaws.ec2#CreateSubnetResult"
       },
       "traits": {
-        "smithy.api#documentation": "<p>Creates a subnet in the specified VPC. For an IPv4 only subnet, specify an IPv4 CIDR block.\n            If the VPC has an IPv6 CIDR block, you can create an IPv6 only subnet or a dual stack subnet instead.\n            For an IPv6 only subnet, specify an IPv6 CIDR block. For a dual stack subnet, specify both\n            an IPv4 CIDR block and an IPv6 CIDR block.</p>\n         <p>A subnet CIDR block must not overlap the CIDR block of an existing subnet in the VPC.\n            After you create a subnet, you can't change its CIDR block.</p>\n         <p>The allowed size for an IPv4 subnet is between a /28 netmask (16 IP addresses) and  \n            a /16 netmask (65,536 IP addresses). Amazon Web Services reserves both the first four and \n            the last IPv4 address in each subnet's CIDR block. They're not available for your use.</p>\n         <p>If you've associated an IPv6 CIDR block with your VPC, you can associate an IPv6 CIDR block \n            with a subnet when you create it. The allowed block size for an IPv6 subnet is a /64 netmask.</p>\n         <p>If you add more than one subnet to a VPC, they're set up in a star topology with a\n            logical router in the middle.</p>\n         <p>When you stop an instance in a subnet, it retains its private IPv4 address. It's\n            therefore possible to have a subnet with no running instances (they're all stopped), but\n            no remaining IP addresses available.</p>\n         <p>For more information, see <a href=\"https://docs.aws.amazon.com/vpc/latest/userguide/configure-subnets.html\">Subnets</a> in the <i>Amazon VPC User Guide</i>.</p>",
+        "smithy.api#documentation": "<p>Creates a subnet in the specified VPC. For an IPv4 only subnet, specify an IPv4 CIDR block.\n            If the VPC has an IPv6 CIDR block, you can create an IPv6 only subnet or a dual stack subnet instead.\n            For an IPv6 only subnet, specify an IPv6 CIDR block. For a dual stack subnet, specify both\n            an IPv4 CIDR block and an IPv6 CIDR block.</p>\n         <p>A subnet CIDR block must not overlap the CIDR block of an existing subnet in the VPC.\n            After you create a subnet, you can't change its CIDR block.</p>\n         <p>The allowed size for an IPv4 subnet is between a /28 netmask (16 IP addresses) and  \n            a /16 netmask (65,536 IP addresses). Amazon Web Services reserves both the first four and \n            the last IPv4 address in each subnet's CIDR block. They're not available for your use.</p>\n         <p>If you've associated an IPv6 CIDR block with your VPC, you can associate an IPv6 CIDR\n            block with a subnet when you create it. </p>\n         <p>If you add more than one subnet to a VPC, they're set up in a star topology with a\n            logical router in the middle.</p>\n         <p>When you stop an instance in a subnet, it retains its private IPv4 address. It's\n            therefore possible to have a subnet with no running instances (they're all stopped), but\n            no remaining IP addresses available.</p>\n         <p>For more information, see <a href=\"https://docs.aws.amazon.com/vpc/latest/userguide/configure-subnets.html\">Subnets</a> in the <i>Amazon VPC User Guide</i>.</p>",
         "smithy.api#examples": [
           {
             "title": "To create a subnet",
@@ -18222,7 +18673,7 @@
         "Ipv6CidrBlock": {
           "target": "com.amazonaws.ec2#String",
           "traits": {
-            "smithy.api#documentation": "<p>The IPv6 network range for the subnet, in CIDR notation. The subnet size must use a\n            /64 prefix length.</p>\n         <p>This parameter is required for an IPv6 only subnet.</p>"
+            "smithy.api#documentation": "<p>The IPv6 network range for the subnet, in CIDR notation. This parameter is required\n            for an IPv6 only subnet.</p>"
           }
         },
         "OutpostArn": {
@@ -18252,6 +18703,30 @@
           "traits": {
             "smithy.api#documentation": "<p>Indicates whether to create an IPv6 only subnet.</p>"
           }
+        },
+        "Ipv4IpamPoolId": {
+          "target": "com.amazonaws.ec2#IpamPoolId",
+          "traits": {
+            "smithy.api#documentation": "<p>An IPv4 IPAM pool ID for the subnet.</p>"
+          }
+        },
+        "Ipv4NetmaskLength": {
+          "target": "com.amazonaws.ec2#NetmaskLength",
+          "traits": {
+            "smithy.api#documentation": "<p>An IPv4 netmask length for the subnet.</p>"
+          }
+        },
+        "Ipv6IpamPoolId": {
+          "target": "com.amazonaws.ec2#IpamPoolId",
+          "traits": {
+            "smithy.api#documentation": "<p>An IPv6 IPAM pool ID for the subnet.</p>"
+          }
+        },
+        "Ipv6NetmaskLength": {
+          "target": "com.amazonaws.ec2#NetmaskLength",
+          "traits": {
+            "smithy.api#documentation": "<p>An IPv6 netmask length for the subnet.</p>"
+          }
         }
       },
       "traits": {
@@ -20301,7 +20776,7 @@
         "target": "com.amazonaws.ec2#CreateVpcResult"
       },
       "traits": {
-        "smithy.api#documentation": "<p>Creates a VPC with the specified CIDR blocks. For more information, see <a href=\"https://docs.aws.amazon.com/vpc/latest/userguide/vpc-ip-addressing.html\">IP addressing for your VPCs and subnets</a> in the \n        <i>Amazon VPC User Guide</i>.</p>\n         <p>You can optionally request an IPv6 CIDR block for the VPC. You can request an Amazon-provided \n           IPv6 CIDR block from Amazon's pool of IPv6 addresses, or an IPv6 CIDR block from an IPv6 address \n           pool that you provisioned through bring your own IP addresses (<a href=\"https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-byoip.html\">BYOIP</a>).</p>\n         <p>By default, each instance that you launch in the VPC has the default DHCP options, which\n\t\t\tinclude only a default DNS server that we provide (AmazonProvidedDNS). For more\n\t\t\tinformation, see <a href=\"https://docs.aws.amazon.com/vpc/latest/userguide/VPC_DHCP_Options.html\">DHCP option sets</a> in the <i>Amazon VPC User Guide</i>.</p>\n         <p>You can specify the instance tenancy value for the VPC when you create it. You can't change\n          this value for the VPC after you create it. For more information, see <a href=\"https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/dedicated-instance.html\">Dedicated Instances</a> in the\n          <i>Amazon EC2 User Guide</i>.</p>",
+        "smithy.api#documentation": "<p>Creates a VPC with the specified CIDR blocks. For more information, see <a href=\"https://docs.aws.amazon.com/vpc/latest/userguide/vpc-ip-addressing.html\">IP addressing for your VPCs and subnets</a> in the \n        <i>Amazon VPC User Guide</i>.</p>\n         <p>You can optionally request an IPv6 CIDR block for the VPC. You can request an\n            Amazon-provided IPv6 CIDR block from Amazon's pool of IPv6 addresses or an IPv6 CIDR\n            block from an IPv6 address pool that you provisioned through bring your own IP addresses\n                (<a href=\"https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-byoip.html\">BYOIP</a>).</p>\n         <p>By default, each instance that you launch in the VPC has the default DHCP options, which\n\t\t\tinclude only a default DNS server that we provide (AmazonProvidedDNS). For more\n\t\t\tinformation, see <a href=\"https://docs.aws.amazon.com/vpc/latest/userguide/VPC_DHCP_Options.html\">DHCP option sets</a> in the <i>Amazon VPC User Guide</i>.</p>\n         <p>You can specify the instance tenancy value for the VPC when you create it. You can't change\n          this value for the VPC after you create it. For more information, see <a href=\"https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/dedicated-instance.html\">Dedicated Instances</a> in the\n          <i>Amazon EC2 User Guide</i>.</p>",
         "smithy.api#examples": [
           {
             "title": "To create a VPC",
@@ -22304,6 +22779,12 @@
             "smithy.api#documentation": "<p>The ID of the pool to delete.</p>",
             "smithy.api#required": {}
           }
+        },
+        "Cascade": {
+          "target": "com.amazonaws.ec2#Boolean",
+          "traits": {
+            "smithy.api#documentation": "<p>Enables you to quickly delete an IPAM pool and all resources within that pool, including\n         provisioned CIDRs, allocations, and other pools.</p>\n         <important>\n            <p>You can only use this option to delete pools in the private scope or pools in the public scope with a source resource. A source resource is a resource used to provision CIDRs to a resource planning pool.</p>\n         </important>"
+          }
         }
       },
       "traits": {
@@ -25620,6 +26101,64 @@
         "smithy.api#output": {}
       }
     },
+    "com.amazonaws.ec2#DeprovisionIpamByoasn": {
+      "type": "operation",
+      "input": {
+        "target": "com.amazonaws.ec2#DeprovisionIpamByoasnRequest"
+      },
+      "output": {
+        "target": "com.amazonaws.ec2#DeprovisionIpamByoasnResult"
+      },
+      "traits": {
+        "smithy.api#documentation": "<p>Deprovisions your Autonomous System Number (ASN) from your Amazon Web Services account. This action can only be called after any BYOIP CIDR associations are removed from your Amazon Web Services account with <a href=\"https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DisassociateIpamByoasn.html\">DisassociateIpamByoasn</a>.\n            For more information, see <a href=\"https://docs.aws.amazon.com/vpc/latest/ipam/tutorials-byoasn.html\">Tutorial: Bring your ASN to IPAM</a> in the <i>Amazon VPC IPAM guide</i>.</p>"
+      }
+    },
+    "com.amazonaws.ec2#DeprovisionIpamByoasnRequest": {
+      "type": "structure",
+      "members": {
+        "DryRun": {
+          "target": "com.amazonaws.ec2#Boolean",
+          "traits": {
+            "smithy.api#documentation": "<p>Checks whether you have the required permissions for the action, without actually making the request, \n   and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. \n   Otherwise, it is <code>UnauthorizedOperation</code>.</p>"
+          }
+        },
+        "IpamId": {
+          "target": "com.amazonaws.ec2#IpamId",
+          "traits": {
+            "smithy.api#clientOptional": {},
+            "smithy.api#documentation": "<p>The IPAM ID.</p>",
+            "smithy.api#required": {}
+          }
+        },
+        "Asn": {
+          "target": "com.amazonaws.ec2#String",
+          "traits": {
+            "smithy.api#clientOptional": {},
+            "smithy.api#documentation": "<p>An ASN.</p>",
+            "smithy.api#required": {}
+          }
+        }
+      },
+      "traits": {
+        "smithy.api#input": {}
+      }
+    },
+    "com.amazonaws.ec2#DeprovisionIpamByoasnResult": {
+      "type": "structure",
+      "members": {
+        "Byoasn": {
+          "target": "com.amazonaws.ec2#Byoasn",
+          "traits": {
+            "aws.protocols#ec2QueryName": "Byoasn",
+            "smithy.api#documentation": "<p>An ASN and BYOIP CIDR association.</p>",
+            "smithy.api#xmlName": "byoasn"
+          }
+        }
+      },
+      "traits": {
+        "smithy.api#output": {}
+      }
+    },
     "com.amazonaws.ec2#DeprovisionIpamPoolCidr": {
       "type": "operation",
       "input": {
@@ -31538,6 +32077,77 @@
         "smithy.api#output": {}
       }
     },
+    "com.amazonaws.ec2#DescribeIpamByoasn": {
+      "type": "operation",
+      "input": {
+        "target": "com.amazonaws.ec2#DescribeIpamByoasnRequest"
+      },
+      "output": {
+        "target": "com.amazonaws.ec2#DescribeIpamByoasnResult"
+      },
+      "traits": {
+        "smithy.api#documentation": "<p>Describes your Autonomous System Numbers (ASNs), their provisioning statuses, and the BYOIP CIDRs with which they are associated. For more information, see <a href=\"https://docs.aws.amazon.com/vpc/latest/ipam/tutorials-byoasn.html\">Tutorial: Bring your ASN to IPAM</a> in the <i>Amazon VPC IPAM guide</i>.</p>"
+      }
+    },
+    "com.amazonaws.ec2#DescribeIpamByoasnMaxResults": {
+      "type": "integer",
+      "traits": {
+        "smithy.api#range": {
+          "min": 1,
+          "max": 100
+        }
+      }
+    },
+    "com.amazonaws.ec2#DescribeIpamByoasnRequest": {
+      "type": "structure",
+      "members": {
+        "DryRun": {
+          "target": "com.amazonaws.ec2#Boolean",
+          "traits": {
+            "smithy.api#documentation": "<p>Checks whether you have the required permissions for the action, without actually making the request, \n   and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. \n   Otherwise, it is <code>UnauthorizedOperation</code>.</p>"
+          }
+        },
+        "MaxResults": {
+          "target": "com.amazonaws.ec2#DescribeIpamByoasnMaxResults",
+          "traits": {
+            "smithy.api#documentation": "<p>The maximum number of results to return with a single call.\n\tTo retrieve the remaining results, make another call with the returned <code>nextToken</code> value.</p>"
+          }
+        },
+        "NextToken": {
+          "target": "com.amazonaws.ec2#NextToken",
+          "traits": {
+            "smithy.api#documentation": "<p>The token for the next page of results.</p>"
+          }
+        }
+      },
+      "traits": {
+        "smithy.api#input": {}
+      }
+    },
+    "com.amazonaws.ec2#DescribeIpamByoasnResult": {
+      "type": "structure",
+      "members": {
+        "Byoasns": {
+          "target": "com.amazonaws.ec2#ByoasnSet",
+          "traits": {
+            "aws.protocols#ec2QueryName": "ByoasnSet",
+            "smithy.api#documentation": "<p>ASN and BYOIP CIDR associations.</p>",
+            "smithy.api#xmlName": "byoasnSet"
+          }
+        },
+        "NextToken": {
+          "target": "com.amazonaws.ec2#String",
+          "traits": {
+            "aws.protocols#ec2QueryName": "NextToken",
+            "smithy.api#documentation": "<p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>",
+            "smithy.api#xmlName": "nextToken"
+          }
+        }
+      },
+      "traits": {
+        "smithy.api#output": {}
+      }
+    },
     "com.amazonaws.ec2#DescribeIpamPools": {
       "type": "operation",
       "input": {
@@ -38491,7 +39101,7 @@
         "target": "com.amazonaws.ec2#DescribeTrunkInterfaceAssociationsResult"
       },
       "traits": {
-        "smithy.api#documentation": "<note>\n            <p>This API action is currently in <b>limited preview only</b>. \n                If you are interested in using this feature, contact your account manager.</p>\n         </note>\n         <p>Describes one or more network interface trunk associations.</p>",
+        "smithy.api#documentation": "<p>Describes one or more network interface trunk associations.</p>",
         "smithy.api#paginated": {
           "inputToken": "NextToken",
           "outputToken": "NextToken",
@@ -42697,6 +43307,64 @@
         "smithy.api#output": {}
       }
     },
+    "com.amazonaws.ec2#DisassociateIpamByoasn": {
+      "type": "operation",
+      "input": {
+        "target": "com.amazonaws.ec2#DisassociateIpamByoasnRequest"
+      },
+      "output": {
+        "target": "com.amazonaws.ec2#DisassociateIpamByoasnResult"
+      },
+      "traits": {
+        "smithy.api#documentation": "<p>Remove the association between your Autonomous System Number (ASN) and your BYOIP CIDR. You may want to use this action to disassociate an ASN from a CIDR or if you want to swap ASNs. \n            For more information, see <a href=\"https://docs.aws.amazon.com/vpc/latest/ipam/tutorials-byoasn.html\">Tutorial: Bring your ASN to IPAM</a> in the <i>Amazon VPC IPAM guide</i>.</p>"
+      }
+    },
+    "com.amazonaws.ec2#DisassociateIpamByoasnRequest": {
+      "type": "structure",
+      "members": {
+        "DryRun": {
+          "target": "com.amazonaws.ec2#Boolean",
+          "traits": {
+            "smithy.api#documentation": "<p>Checks whether you have the required permissions for the action, without actually making the request, \n   and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. \n   Otherwise, it is <code>UnauthorizedOperation</code>.</p>"
+          }
+        },
+        "Asn": {
+          "target": "com.amazonaws.ec2#String",
+          "traits": {
+            "smithy.api#clientOptional": {},
+            "smithy.api#documentation": "<p>A public 2-byte or 4-byte ASN.</p>",
+            "smithy.api#required": {}
+          }
+        },
+        "Cidr": {
+          "target": "com.amazonaws.ec2#String",
+          "traits": {
+            "smithy.api#clientOptional": {},
+            "smithy.api#documentation": "<p>A BYOIP CIDR.</p>",
+            "smithy.api#required": {}
+          }
+        }
+      },
+      "traits": {
+        "smithy.api#input": {}
+      }
+    },
+    "com.amazonaws.ec2#DisassociateIpamByoasnResult": {
+      "type": "structure",
+      "members": {
+        "AsnAssociation": {
+          "target": "com.amazonaws.ec2#AsnAssociation",
+          "traits": {
+            "aws.protocols#ec2QueryName": "AsnAssociation",
+            "smithy.api#documentation": "<p>An ASN and BYOIP CIDR association.</p>",
+            "smithy.api#xmlName": "asnAssociation"
+          }
+        }
+      },
+      "traits": {
+        "smithy.api#output": {}
+      }
+    },
     "com.amazonaws.ec2#DisassociateIpamResourceDiscovery": {
       "type": "operation",
       "input": {
@@ -43112,7 +43780,7 @@
         "target": "com.amazonaws.ec2#DisassociateTrunkInterfaceResult"
       },
       "traits": {
-        "smithy.api#documentation": "<note>\n            <p>This API action is currently in <b>limited preview only</b>. \n                If you are interested in using this feature, contact your account manager.</p>\n         </note>\n         <p>Removes an association between a branch network interface with a trunk network interface.</p>"
+        "smithy.api#documentation": "<p>Removes an association between a branch network interface with a trunk network interface.</p>"
       }
     },
     "com.amazonaws.ec2#DisassociateTrunkInterfaceRequest": {
@@ -44573,7 +45241,7 @@
         }
       },
       "traits": {
-        "smithy.api#documentation": "<p>ENA Express uses Amazon Web Services Scalable Reliable Datagram (SRD) technology to increase the \n\t\t\tmaximum bandwidth used per stream and minimize tail latency of network traffic between EC2 instances. \n\t\t\tWith ENA Express, you can communicate between two EC2 instances in the same subnet within the same \n\t\t\taccount, or in different accounts. Both sending and receiving instances must have ENA Express enabled.</p>\n         <p>To improve the reliability of network packet delivery, ENA Express reorders network packets on the \n\t\t\treceiving end by default. However, some UDP-based applications are designed to handle network packets \n\t\t\tthat are out of order to reduce the overhead for packet delivery at the network layer. When ENA Express \n\t\t\tis enabled, you can specify whether UDP network traffic uses it.</p>"
+        "smithy.api#documentation": "<p>ENA Express uses Amazon Web Services Scalable Reliable Datagram (SRD) technology to increase the\n\t\t\tmaximum bandwidth used per stream and minimize tail latency of network traffic between EC2 instances.\n\t\t\tWith ENA Express, you can communicate between two EC2 instances in the same subnet within the same\n\t\t\taccount, or in different accounts. Both sending and receiving instances must have ENA Express enabled.</p>\n         <p>To improve the reliability of network packet delivery, ENA Express reorders network packets on the\n\t\t\treceiving end by default. However, some UDP-based applications are designed to handle network packets\n\t\t\tthat are out of order to reduce the overhead for packet delivery at the network layer. When ENA Express\n\t\t\tis enabled, you can specify whether UDP network traffic uses it.</p>"
       }
     },
     "com.amazonaws.ec2#EnaSrdSpecificationRequest": {
@@ -44605,12 +45273,12 @@
         "EnaSrdUdpEnabled": {
           "target": "com.amazonaws.ec2#Boolean",
           "traits": {
-            "smithy.api#documentation": "<p>Indicates whether UDP traffic to and from the instance uses ENA Express. To specify this setting, \n\t\t\tyou must first enable ENA Express.</p>"
+            "smithy.api#documentation": "<p>Indicates whether UDP traffic to and from the instance uses ENA Express. To specify this setting,\n\t\t\tyou must first enable ENA Express.</p>"
           }
         }
       },
       "traits": {
-        "smithy.api#documentation": "<p>ENA Express is compatible with both TCP and UDP transport protocols. When it's enabled, TCP traffic \n\t\t\tautomatically uses it. However, some UDP-based applications are designed to handle network packets that are \n\t\t\tout of order, without a need for retransmission, such as live video broadcasting or other near-real-time \n\t\t\tapplications. For UDP traffic, you can specify whether to use ENA Express, based on your application \n\t\t\tenvironment needs.</p>"
+        "smithy.api#documentation": "<p>ENA Express is compatible with both TCP and UDP transport protocols. When it's enabled, TCP traffic\n\t\t\tautomatically uses it. However, some UDP-based applications are designed to handle network packets that are\n\t\t\tout of order, without a need for retransmission, such as live video broadcasting or other near-real-time\n\t\t\tapplications. For UDP traffic, you can specify whether to use ENA Express, based on your application\n\t\t\tenvironment needs.</p>"
       }
     },
     "com.amazonaws.ec2#EnaSrdUdpSpecificationRequest": {
@@ -50554,6 +51222,99 @@
         "smithy.api#output": {}
       }
     },
+    "com.amazonaws.ec2#GetIpamDiscoveredPublicAddresses": {
+      "type": "operation",
+      "input": {
+        "target": "com.amazonaws.ec2#GetIpamDiscoveredPublicAddressesRequest"
+      },
+      "output": {
+        "target": "com.amazonaws.ec2#GetIpamDiscoveredPublicAddressesResult"
+      },
+      "traits": {
+        "smithy.api#documentation": "<p>Gets the public IP addresses that have been discovered by IPAM.</p>"
+      }
+    },
+    "com.amazonaws.ec2#GetIpamDiscoveredPublicAddressesRequest": {
+      "type": "structure",
+      "members": {
+        "DryRun": {
+          "target": "com.amazonaws.ec2#Boolean",
+          "traits": {
+            "smithy.api#documentation": "<p>A check for whether you have the required permissions for the action without actually making the request \n   and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. \n   Otherwise, it is <code>UnauthorizedOperation</code>.</p>"
+          }
+        },
+        "IpamResourceDiscoveryId": {
+          "target": "com.amazonaws.ec2#IpamResourceDiscoveryId",
+          "traits": {
+            "smithy.api#clientOptional": {},
+            "smithy.api#documentation": "<p>An IPAM resource discovery ID.</p>",
+            "smithy.api#required": {}
+          }
+        },
+        "AddressRegion": {
+          "target": "com.amazonaws.ec2#String",
+          "traits": {
+            "smithy.api#clientOptional": {},
+            "smithy.api#documentation": "<p>The Amazon Web Services Region for the IP address.</p>",
+            "smithy.api#required": {}
+          }
+        },
+        "Filters": {
+          "target": "com.amazonaws.ec2#FilterList",
+          "traits": {
+            "smithy.api#documentation": "<p>Filters.</p>",
+            "smithy.api#xmlName": "Filter"
+          }
+        },
+        "NextToken": {
+          "target": "com.amazonaws.ec2#NextToken",
+          "traits": {
+            "smithy.api#documentation": "<p>The token for the next page of results.</p>"
+          }
+        },
+        "MaxResults": {
+          "target": "com.amazonaws.ec2#IpamMaxResults",
+          "traits": {
+            "smithy.api#documentation": "<p>The maximum number of IPAM discovered public addresses to return in one page of results.</p>"
+          }
+        }
+      },
+      "traits": {
+        "smithy.api#input": {}
+      }
+    },
+    "com.amazonaws.ec2#GetIpamDiscoveredPublicAddressesResult": {
+      "type": "structure",
+      "members": {
+        "IpamDiscoveredPublicAddresses": {
+          "target": "com.amazonaws.ec2#IpamDiscoveredPublicAddressSet",
+          "traits": {
+            "aws.protocols#ec2QueryName": "IpamDiscoveredPublicAddressSet",
+            "smithy.api#documentation": "<p>IPAM discovered public addresses.</p>",
+            "smithy.api#xmlName": "ipamDiscoveredPublicAddressSet"
+          }
+        },
+        "OldestSampleTime": {
+          "target": "com.amazonaws.ec2#MillisecondDateTime",
+          "traits": {
+            "aws.protocols#ec2QueryName": "OldestSampleTime",
+            "smithy.api#documentation": "<p>The oldest successful resource discovery time.</p>",
+            "smithy.api#xmlName": "oldestSampleTime"
+          }
+        },
+        "NextToken": {
+          "target": "com.amazonaws.ec2#NextToken",
+          "traits": {
+            "aws.protocols#ec2QueryName": "NextToken",
+            "smithy.api#documentation": "<p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>",
+            "smithy.api#xmlName": "nextToken"
+          }
+        }
+      },
+      "traits": {
+        "smithy.api#output": {}
+      }
+    },
     "com.amazonaws.ec2#GetIpamDiscoveredResourceCidrs": {
       "type": "operation",
       "input": {
@@ -56098,7 +56859,7 @@
           "target": "com.amazonaws.ec2#PlatformValues",
           "traits": {
             "aws.protocols#ec2QueryName": "Platform",
-            "smithy.api#documentation": "<p>The value is <code>Windows</code> for Windows instances; otherwise blank.</p>",
+            "smithy.api#documentation": "<p>The platform. This value is <code>windows</code> for Windows instances; otherwise, it is empty.</p>",
             "smithy.api#xmlName": "platform"
           }
         },
@@ -56504,7 +57265,7 @@
         }
       },
       "traits": {
-        "smithy.api#documentation": "<p>ENA Express uses Amazon Web Services Scalable Reliable Datagram (SRD) technology to increase the \n\t\t\tmaximum bandwidth used per stream and minimize tail latency of network traffic between EC2 instances. \n\t\t\tWith ENA Express, you can communicate between two EC2 instances in the same subnet within the same \n\t\t\taccount, or in different accounts. Both sending and receiving instances must have ENA Express enabled.</p>\n         <p>To improve the reliability of network packet delivery, ENA Express reorders network packets on the \n\t\t\treceiving end by default. However, some UDP-based applications are designed to handle network packets \n\t\t\tthat are out of order to reduce the overhead for packet delivery at the network layer. When ENA Express \n\t\t\tis enabled, you can specify whether UDP network traffic uses it.</p>"
+        "smithy.api#documentation": "<p>ENA Express uses Amazon Web Services Scalable Reliable Datagram (SRD) technology to increase the\n\t\t\tmaximum bandwidth used per stream and minimize tail latency of network traffic between EC2 instances.\n\t\t\tWith ENA Express, you can communicate between two EC2 instances in the same subnet within the same\n\t\t\taccount, or in different accounts. Both sending and receiving instances must have ENA Express enabled.</p>\n         <p>To improve the reliability of network packet delivery, ENA Express reorders network packets on the\n\t\t\treceiving end by default. However, some UDP-based applications are designed to handle network packets\n\t\t\tthat are out of order to reduce the overhead for packet delivery at the network layer. When ENA Express\n\t\t\tis enabled, you can specify whether UDP network traffic uses it.</p>"
       }
     },
     "com.amazonaws.ec2#InstanceAttachmentEnaSrdUdpSpecification": {
@@ -56514,13 +57275,13 @@
           "target": "com.amazonaws.ec2#Boolean",
           "traits": {
             "aws.protocols#ec2QueryName": "EnaSrdUdpEnabled",
-            "smithy.api#documentation": "<p>Indicates whether UDP traffic to and from the instance uses ENA Express. To specify this setting, \n\t\t\tyou must first enable ENA Express.</p>",
+            "smithy.api#documentation": "<p>Indicates whether UDP traffic to and from the instance uses ENA Express. To specify this setting,\n\t\t\tyou must first enable ENA Express.</p>",
             "smithy.api#xmlName": "enaSrdUdpEnabled"
           }
         }
       },
       "traits": {
-        "smithy.api#documentation": "<p>ENA Express is compatible with both TCP and UDP transport protocols. When it's enabled, TCP traffic \n\t\t\tautomatically uses it. However, some UDP-based applications are designed to handle network packets that are \n\t\t\tout of order, without a need for retransmission, such as live video broadcasting or other near-real-time \n\t\t\tapplications. For UDP traffic, you can specify whether to use ENA Express, based on your application \n\t\t\tenvironment needs.</p>"
+        "smithy.api#documentation": "<p>ENA Express is compatible with both TCP and UDP transport protocols. When it's enabled, TCP traffic\n\t\t\tautomatically uses it. However, some UDP-based applications are designed to handle network packets that are\n\t\t\tout of order, without a need for retransmission, such as live video broadcasting or other near-real-time\n\t\t\tapplications. For UDP traffic, you can specify whether to use ENA Express, based on your application\n\t\t\tenvironment needs.</p>"
       }
     },
     "com.amazonaws.ec2#InstanceAttribute": {
@@ -58077,6 +58838,14 @@
             "smithy.api#documentation": "<p>The IPv6 delegated prefixes that are assigned to the network interface.</p>",
             "smithy.api#xmlName": "ipv6PrefixSet"
           }
+        },
+        "ConnectionTrackingConfiguration": {
+          "target": "com.amazonaws.ec2#ConnectionTrackingSpecificationResponse",
+          "traits": {
+            "aws.protocols#ec2QueryName": "ConnectionTrackingConfiguration",
+            "smithy.api#documentation": "<p>A security group connection tracking configuration that enables you to set the timeout for connection tracking on an Elastic network interface. For more information, see <a href=\"https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-connection-tracking.html#connection-tracking-timeouts\">Connection tracking timeouts</a> in the <i>Amazon Elastic Compute Cloud User Guide</i>.</p>",
+            "smithy.api#xmlName": "connectionTrackingConfiguration"
+          }
         }
       },
       "traits": {
@@ -58186,7 +58955,7 @@
           "target": "com.amazonaws.ec2#InstanceAttachmentEnaSrdSpecification",
           "traits": {
             "aws.protocols#ec2QueryName": "EnaSrdSpecification",
-            "smithy.api#documentation": "<p>Contains the ENA Express settings for the network interface that's attached \n\t\t\tto the instance.</p>",
+            "smithy.api#documentation": "<p>Contains the ENA Express settings for the network interface that's attached\n\t\t\tto the instance.</p>",
             "smithy.api#xmlName": "enaSrdSpecification"
           }
         }
@@ -58355,7 +59124,13 @@
         "EnaSrdSpecification": {
           "target": "com.amazonaws.ec2#EnaSrdSpecificationRequest",
           "traits": {
-            "smithy.api#documentation": "<p>Specifies the ENA Express settings for the network interface that's attached to \n\t\t\tthe instance.</p>"
+            "smithy.api#documentation": "<p>Specifies the ENA Express settings for the network interface that's attached to\n\t\t\tthe instance.</p>"
+          }
+        },
+        "ConnectionTrackingSpecification": {
+          "target": "com.amazonaws.ec2#ConnectionTrackingSpecificationRequest",
+          "traits": {
+            "smithy.api#documentation": "<p>A security group connection tracking specification that enables you to set the timeout for connection tracking on an Elastic network interface. For more information, see <a href=\"https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-connection-tracking.html#connection-tracking-timeouts\">Connection tracking timeouts</a> in the <i>Amazon Elastic Compute Cloud User Guide</i>.</p>"
           }
         }
       },
@@ -64751,6 +65526,22 @@
             "smithy.api#documentation": "<p>The IPAM's resource discovery association count.</p>",
             "smithy.api#xmlName": "resourceDiscoveryAssociationCount"
           }
+        },
+        "StateMessage": {
+          "target": "com.amazonaws.ec2#String",
+          "traits": {
+            "aws.protocols#ec2QueryName": "StateMessage",
+            "smithy.api#documentation": "<p>The state message.</p>",
+            "smithy.api#xmlName": "stateMessage"
+          }
+        },
+        "Tier": {
+          "target": "com.amazonaws.ec2#IpamTier",
+          "traits": {
+            "aws.protocols#ec2QueryName": "Tier",
+            "smithy.api#documentation": "<p>IPAM is offered in a Free Tier and an Advanced Tier. For more information about the features available in each tier and the costs associated with the tiers, see <a href=\"http://aws.amazon.com/vpc/pricing/\">Amazon VPC pricing > IPAM tab</a>.</p>",
+            "smithy.api#xmlName": "tier"
+          }
         }
       },
       "traits": {
@@ -65029,6 +65820,175 @@
         }
       }
     },
+    "com.amazonaws.ec2#IpamDiscoveredPublicAddress": {
+      "type": "structure",
+      "members": {
+        "IpamResourceDiscoveryId": {
+          "target": "com.amazonaws.ec2#IpamResourceDiscoveryId",
+          "traits": {
+            "aws.protocols#ec2QueryName": "IpamResourceDiscoveryId",
+            "smithy.api#documentation": "<p>The resource discovery ID.</p>",
+            "smithy.api#xmlName": "ipamResourceDiscoveryId"
+          }
+        },
+        "AddressRegion": {
+          "target": "com.amazonaws.ec2#String",
+          "traits": {
+            "aws.protocols#ec2QueryName": "AddressRegion",
+            "smithy.api#documentation": "<p>The Region of the resource the IP address is assigned to.</p>",
+            "smithy.api#xmlName": "addressRegion"
+          }
+        },
+        "Address": {
+          "target": "com.amazonaws.ec2#String",
+          "traits": {
+            "aws.protocols#ec2QueryName": "Address",
+            "smithy.api#documentation": "<p>The IP address.</p>",
+            "smithy.api#xmlName": "address"
+          }
+        },
+        "AddressOwnerId": {
+          "target": "com.amazonaws.ec2#String",
+          "traits": {
+            "aws.protocols#ec2QueryName": "AddressOwnerId",
+            "smithy.api#documentation": "<p>The ID of the owner of the resource the IP address is assigned to.</p>",
+            "smithy.api#xmlName": "addressOwnerId"
+          }
+        },
+        "AddressAllocationId": {
+          "target": "com.amazonaws.ec2#String",
+          "traits": {
+            "aws.protocols#ec2QueryName": "AddressAllocationId",
+            "smithy.api#documentation": "<p>The allocation ID of the resource the IP address is assigned to.</p>",
+            "smithy.api#xmlName": "addressAllocationId"
+          }
+        },
+        "AssociationStatus": {
+          "target": "com.amazonaws.ec2#IpamPublicAddressAssociationStatus",
+          "traits": {
+            "aws.protocols#ec2QueryName": "AssociationStatus",
+            "smithy.api#documentation": "<p>The association status.</p>",
+            "smithy.api#xmlName": "associationStatus"
+          }
+        },
+        "AddressType": {
+          "target": "com.amazonaws.ec2#IpamPublicAddressType",
+          "traits": {
+            "aws.protocols#ec2QueryName": "AddressType",
+            "smithy.api#documentation": "<p>The IP address type.</p>",
+            "smithy.api#xmlName": "addressType"
+          }
+        },
+        "Service": {
+          "target": "com.amazonaws.ec2#IpamPublicAddressAwsService",
+          "traits": {
+            "aws.protocols#ec2QueryName": "Service",
+            "smithy.api#documentation": "<p>The Amazon Web Services service associated with the IP address.</p>",
+            "smithy.api#xmlName": "service"
+          }
+        },
+        "ServiceResource": {
+          "target": "com.amazonaws.ec2#String",
+          "traits": {
+            "aws.protocols#ec2QueryName": "ServiceResource",
+            "smithy.api#documentation": "<p>The resource ARN or ID.</p>",
+            "smithy.api#xmlName": "serviceResource"
+          }
+        },
+        "VpcId": {
+          "target": "com.amazonaws.ec2#String",
+          "traits": {
+            "aws.protocols#ec2QueryName": "VpcId",
+            "smithy.api#documentation": "<p>The ID of the VPC that the resource with the assigned IP address is in.</p>",
+            "smithy.api#xmlName": "vpcId"
+          }
+        },
+        "SubnetId": {
+          "target": "com.amazonaws.ec2#String",
+          "traits": {
+            "aws.protocols#ec2QueryName": "SubnetId",
+            "smithy.api#documentation": "<p>The ID of the subnet that the resource with the assigned IP address is in.</p>",
+            "smithy.api#xmlName": "subnetId"
+          }
+        },
+        "PublicIpv4PoolId": {
+          "target": "com.amazonaws.ec2#String",
+          "traits": {
+            "aws.protocols#ec2QueryName": "PublicIpv4PoolId",
+            "smithy.api#documentation": "<p>The ID of the public IPv4 pool that the resource with the assigned IP address is from.</p>",
+            "smithy.api#xmlName": "publicIpv4PoolId"
+          }
+        },
+        "NetworkInterfaceId": {
+          "target": "com.amazonaws.ec2#String",
+          "traits": {
+            "aws.protocols#ec2QueryName": "NetworkInterfaceId",
+            "smithy.api#documentation": "<p>The network interface ID of the resource with the assigned IP address.</p>",
+            "smithy.api#xmlName": "networkInterfaceId"
+          }
+        },
+        "NetworkInterfaceDescription": {
+          "target": "com.amazonaws.ec2#String",
+          "traits": {
+            "aws.protocols#ec2QueryName": "NetworkInterfaceDescription",
+            "smithy.api#documentation": "<p>The description of the network interface that IP address is assigned to.</p>",
+            "smithy.api#xmlName": "networkInterfaceDescription"
+          }
+        },
+        "InstanceId": {
+          "target": "com.amazonaws.ec2#String",
+          "traits": {
+            "aws.protocols#ec2QueryName": "InstanceId",
+            "smithy.api#documentation": "<p>The instance ID of the instance the assigned IP address is assigned to.</p>",
+            "smithy.api#xmlName": "instanceId"
+          }
+        },
+        "Tags": {
+          "target": "com.amazonaws.ec2#IpamPublicAddressTags",
+          "traits": {
+            "aws.protocols#ec2QueryName": "Tags",
+            "smithy.api#documentation": "<p>Tags associated with the IP address.</p>",
+            "smithy.api#xmlName": "tags"
+          }
+        },
+        "NetworkBorderGroup": {
+          "target": "com.amazonaws.ec2#String",
+          "traits": {
+            "aws.protocols#ec2QueryName": "NetworkBorderGroup",
+            "smithy.api#documentation": "<p>The network border group that the resource that the IP address is assigned to is in.</p>",
+            "smithy.api#xmlName": "networkBorderGroup"
+          }
+        },
+        "SecurityGroups": {
+          "target": "com.amazonaws.ec2#IpamPublicAddressSecurityGroupList",
+          "traits": {
+            "aws.protocols#ec2QueryName": "SecurityGroupSet",
+            "smithy.api#documentation": "<p>Security groups associated with the resource that the IP address is assigned to.</p>",
+            "smithy.api#xmlName": "securityGroupSet"
+          }
+        },
+        "SampleTime": {
+          "target": "com.amazonaws.ec2#MillisecondDateTime",
+          "traits": {
+            "aws.protocols#ec2QueryName": "SampleTime",
+            "smithy.api#documentation": "<p>The last successful resource discovery time.</p>",
+            "smithy.api#xmlName": "sampleTime"
+          }
+        }
+      },
+      "traits": {
+        "smithy.api#documentation": "<p>A public IP Address discovered by IPAM.</p>"
+      }
+    },
+    "com.amazonaws.ec2#IpamDiscoveredPublicAddressSet": {
+      "type": "list",
+      "member": {
+        "target": "com.amazonaws.ec2#IpamDiscoveredPublicAddress",
+        "traits": {
+          "smithy.api#xmlName": "item"
+        }
+      }
+    },
     "com.amazonaws.ec2#IpamDiscoveredResourceCidr": {
       "type": "structure",
       "members": {
@@ -65360,7 +66320,7 @@
           "target": "com.amazonaws.ec2#String",
           "traits": {
             "aws.protocols#ec2QueryName": "StateMessage",
-            "smithy.api#documentation": "<p>A message related to the failed creation of an IPAM pool.</p>",
+            "smithy.api#documentation": "<p>The state message.</p>",
             "smithy.api#xmlName": "stateMessage"
           }
         },
@@ -65451,6 +66411,13 @@
             "smithy.api#documentation": "<p>The IP address source for pools in the public scope. Only used for provisioning IP address CIDRs to pools in the public scope. Default is <code>BYOIP</code>. For more information, see <a href=\"https://docs.aws.amazon.com/vpc/latest/ipam/intro-create-ipv6-pools.html\">Create IPv6 pools</a> in the <i>Amazon VPC IPAM User Guide</i>. \n         By default, you can add only one Amazon-provided IPv6 CIDR block to a top-level IPv6 pool. For information on increasing the default limit, see <a href=\"https://docs.aws.amazon.com/vpc/latest/ipam/quotas-ipam.html\"> Quotas for your IPAM</a> in the <i>Amazon VPC IPAM User Guide</i>.</p>",
             "smithy.api#xmlName": "publicIpSource"
           }
+        },
+        "SourceResource": {
+          "target": "com.amazonaws.ec2#IpamPoolSourceResource",
+          "traits": {
+            "aws.protocols#ec2QueryName": "SourceResource",
+            "smithy.api#xmlName": "sourceResource"
+          }
         }
       },
       "traits": {
@@ -65521,6 +66488,15 @@
         "smithy.api#documentation": "<p>In IPAM, an allocation is a CIDR assignment from an IPAM pool to another IPAM pool or to a resource.</p>"
       }
     },
+    "com.amazonaws.ec2#IpamPoolAllocationAllowedCidrs": {
+      "type": "list",
+      "member": {
+        "target": "com.amazonaws.ec2#String",
+        "traits": {
+          "smithy.api#xmlName": "item"
+        }
+      }
+    },
     "com.amazonaws.ec2#IpamPoolAllocationDisallowedCidrs": {
       "type": "list",
       "member": {
@@ -65559,6 +66535,12 @@
           "traits": {
             "smithy.api#enumValue": "custom"
           }
+        },
+        "subnet": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "subnet"
+          }
         }
       }
     },
@@ -65765,6 +66747,89 @@
         }
       }
     },
+    "com.amazonaws.ec2#IpamPoolSourceResource": {
+      "type": "structure",
+      "members": {
+        "ResourceId": {
+          "target": "com.amazonaws.ec2#String",
+          "traits": {
+            "aws.protocols#ec2QueryName": "ResourceId",
+            "smithy.api#documentation": "<p>The source resource ID.</p>",
+            "smithy.api#xmlName": "resourceId"
+          }
+        },
+        "ResourceType": {
+          "target": "com.amazonaws.ec2#IpamPoolSourceResourceType",
+          "traits": {
+            "aws.protocols#ec2QueryName": "ResourceType",
+            "smithy.api#documentation": "<p>The source resource type.</p>",
+            "smithy.api#xmlName": "resourceType"
+          }
+        },
+        "ResourceRegion": {
+          "target": "com.amazonaws.ec2#String",
+          "traits": {
+            "aws.protocols#ec2QueryName": "ResourceRegion",
+            "smithy.api#documentation": "<p>The source resource Region.</p>",
+            "smithy.api#xmlName": "resourceRegion"
+          }
+        },
+        "ResourceOwner": {
+          "target": "com.amazonaws.ec2#String",
+          "traits": {
+            "aws.protocols#ec2QueryName": "ResourceOwner",
+            "smithy.api#documentation": "<p>The source resource owner.</p>",
+            "smithy.api#xmlName": "resourceOwner"
+          }
+        }
+      },
+      "traits": {
+        "smithy.api#documentation": "<p>The resource used to provision CIDRs to a resource planning pool.</p>"
+      }
+    },
+    "com.amazonaws.ec2#IpamPoolSourceResourceRequest": {
+      "type": "structure",
+      "members": {
+        "ResourceId": {
+          "target": "com.amazonaws.ec2#String",
+          "traits": {
+            "smithy.api#documentation": "<p>The source resource ID.</p>"
+          }
+        },
+        "ResourceType": {
+          "target": "com.amazonaws.ec2#IpamPoolSourceResourceType",
+          "traits": {
+            "smithy.api#documentation": "<p>The source resource type.</p>"
+          }
+        },
+        "ResourceRegion": {
+          "target": "com.amazonaws.ec2#String",
+          "traits": {
+            "smithy.api#documentation": "<p>The source resource Region.</p>"
+          }
+        },
+        "ResourceOwner": {
+          "target": "com.amazonaws.ec2#String",
+          "traits": {
+            "smithy.api#documentation": "<p>The source resource owner.</p>"
+          }
+        }
+      },
+      "traits": {
+        "smithy.api#documentation": "<p>The resource used to provision CIDRs to a resource planning pool.</p>"
+      }
+    },
+    "com.amazonaws.ec2#IpamPoolSourceResourceType": {
+      "type": "enum",
+      "members": {
+        "vpc": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "vpc"
+          }
+        }
+      }
+    },
     "com.amazonaws.ec2#IpamPoolState": {
       "type": "enum",
       "members": {
@@ -65842,6 +66907,199 @@
         }
       }
     },
+    "com.amazonaws.ec2#IpamPublicAddressAssociationStatus": {
+      "type": "enum",
+      "members": {
+        "ASSOCIATED": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "associated"
+          }
+        },
+        "DISASSOCIATED": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "disassociated"
+          }
+        }
+      }
+    },
+    "com.amazonaws.ec2#IpamPublicAddressAwsService": {
+      "type": "enum",
+      "members": {
+        "NAT_GATEWAY": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "nat-gateway"
+          }
+        },
+        "DMS": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "database-migration-service"
+          }
+        },
+        "REDSHIFT": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "redshift"
+          }
+        },
+        "ECS": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "elastic-container-service"
+          }
+        },
+        "RDS": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "relational-database-service"
+          }
+        },
+        "S2S_VPN": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "site-to-site-vpn"
+          }
+        },
+        "EC2_LB": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "load-balancer"
+          }
+        },
+        "AGA": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "global-accelerator"
+          }
+        },
+        "OTHER": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "other"
+          }
+        }
+      }
+    },
+    "com.amazonaws.ec2#IpamPublicAddressSecurityGroup": {
+      "type": "structure",
+      "members": {
+        "GroupName": {
+          "target": "com.amazonaws.ec2#String",
+          "traits": {
+            "aws.protocols#ec2QueryName": "GroupName",
+            "smithy.api#documentation": "<p>The security group's name.</p>",
+            "smithy.api#xmlName": "groupName"
+          }
+        },
+        "GroupId": {
+          "target": "com.amazonaws.ec2#String",
+          "traits": {
+            "aws.protocols#ec2QueryName": "GroupId",
+            "smithy.api#documentation": "<p>The security group's ID.</p>",
+            "smithy.api#xmlName": "groupId"
+          }
+        }
+      },
+      "traits": {
+        "smithy.api#documentation": "<p>The security group that the resource with the public IP address is in.</p>"
+      }
+    },
+    "com.amazonaws.ec2#IpamPublicAddressSecurityGroupList": {
+      "type": "list",
+      "member": {
+        "target": "com.amazonaws.ec2#IpamPublicAddressSecurityGroup",
+        "traits": {
+          "smithy.api#xmlName": "item"
+        }
+      }
+    },
+    "com.amazonaws.ec2#IpamPublicAddressTag": {
+      "type": "structure",
+      "members": {
+        "Key": {
+          "target": "com.amazonaws.ec2#String",
+          "traits": {
+            "aws.protocols#ec2QueryName": "Key",
+            "smithy.api#documentation": "<p>The tag's key.</p>",
+            "smithy.api#xmlName": "key"
+          }
+        },
+        "Value": {
+          "target": "com.amazonaws.ec2#String",
+          "traits": {
+            "aws.protocols#ec2QueryName": "Value",
+            "smithy.api#documentation": "<p>The tag's value.</p>",
+            "smithy.api#xmlName": "value"
+          }
+        }
+      },
+      "traits": {
+        "smithy.api#documentation": "<p>A tag for a public IP address discovered by IPAM.</p>"
+      }
+    },
+    "com.amazonaws.ec2#IpamPublicAddressTagList": {
+      "type": "list",
+      "member": {
+        "target": "com.amazonaws.ec2#IpamPublicAddressTag",
+        "traits": {
+          "smithy.api#xmlName": "item"
+        }
+      }
+    },
+    "com.amazonaws.ec2#IpamPublicAddressTags": {
+      "type": "structure",
+      "members": {
+        "EipTags": {
+          "target": "com.amazonaws.ec2#IpamPublicAddressTagList",
+          "traits": {
+            "aws.protocols#ec2QueryName": "EipTagSet",
+            "smithy.api#documentation": "<p>Tags for an Elastic IP address.</p>",
+            "smithy.api#xmlName": "eipTagSet"
+          }
+        }
+      },
+      "traits": {
+        "smithy.api#documentation": "<p>Tags for a public IP address discovered by IPAM.</p>"
+      }
+    },
+    "com.amazonaws.ec2#IpamPublicAddressType": {
+      "type": "enum",
+      "members": {
+        "SERVICE_MANAGED_IP": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "service-managed-ip"
+          }
+        },
+        "SERVICE_MANAGED_BYOIP": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "service-managed-byoip"
+          }
+        },
+        "AMAZON_OWNED_EIP": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "amazon-owned-eip"
+          }
+        },
+        "BYOIP": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "byoip"
+          }
+        },
+        "EC2_PUBLIC_IP": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "ec2-public-ip"
+          }
+        }
+      }
+    },
     "com.amazonaws.ec2#IpamResourceCidr": {
       "type": "structure",
       "members": {
@@ -66380,6 +67638,12 @@
           "traits": {
             "smithy.api#enumValue": "ipv6-pool"
           }
+        },
+        "eni": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "eni"
+          }
         }
       }
     },
@@ -66671,6 +67935,23 @@
         }
       }
     },
+    "com.amazonaws.ec2#IpamTier": {
+      "type": "enum",
+      "members": {
+        "free": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "free"
+          }
+        },
+        "advanced": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "advanced"
+          }
+        }
+      }
+    },
     "com.amazonaws.ec2#Ipv4PoolCoipId": {
       "type": "string"
     },
@@ -68583,6 +69864,14 @@
             "smithy.api#documentation": "<p>Contains the ENA Express settings for instances launched from your launch template.</p>",
             "smithy.api#xmlName": "enaSrdSpecification"
           }
+        },
+        "ConnectionTrackingSpecification": {
+          "target": "com.amazonaws.ec2#ConnectionTrackingSpecification",
+          "traits": {
+            "aws.protocols#ec2QueryName": "ConnectionTrackingSpecification",
+            "smithy.api#documentation": "<p>A security group connection tracking specification that enables you to set the timeout for connection tracking on an Elastic network interface. For more information, see <a href=\"https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-connection-tracking.html#connection-tracking-timeouts\">Connection tracking timeouts</a> in the <i>Amazon Elastic Compute Cloud User Guide</i>.</p>",
+            "smithy.api#xmlName": "connectionTrackingSpecification"
+          }
         }
       },
       "traits": {
@@ -68729,6 +70018,12 @@
           "traits": {
             "smithy.api#documentation": "<p>Configure ENA Express settings for your launch template.</p>"
           }
+        },
+        "ConnectionTrackingSpecification": {
+          "target": "com.amazonaws.ec2#ConnectionTrackingSpecificationRequest",
+          "traits": {
+            "smithy.api#documentation": "<p>A security group connection tracking specification that enables you to set the timeout for connection tracking on an Elastic network interface. For more information, see <a href=\"https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-connection-tracking.html#connection-tracking-timeouts\">Connection tracking timeouts</a> in the <i>Amazon Elastic Compute Cloud User Guide</i>.</p>"
+          }
         }
       },
       "traits": {
@@ -73016,6 +74311,12 @@
             "smithy.api#documentation": "<p>The operating Regions to remove.</p>",
             "smithy.api#xmlName": "RemoveOperatingRegion"
           }
+        },
+        "Tier": {
+          "target": "com.amazonaws.ec2#IpamTier",
+          "traits": {
+            "smithy.api#documentation": "<p>IPAM is offered in a Free Tier and an Advanced Tier. For more information about the features available in each tier and the costs associated with the tiers, see <a href=\"http://aws.amazon.com/vpc/pricing/\">Amazon VPC pricing > IPAM tab</a>.</p>"
+          }
         }
       },
       "traits": {
@@ -73583,6 +74884,12 @@
           "traits": {
             "smithy.api#documentation": "<p>If you’re modifying a network interface in a dual-stack or IPv6-only subnet, you have\n            the option to assign a primary IPv6 IP address. A primary IPv6 address is an IPv6 GUA\n            address associated with an ENI that you have enabled to use a primary IPv6 address. Use\n            this option if the instance that this ENI will be attached to relies on its IPv6 address\n            not changing. Amazon Web Services will automatically assign an IPv6 address associated\n            with the ENI attached to your instance to be the primary IPv6 address. Once you enable\n            an IPv6 GUA address to be a primary IPv6, you cannot disable it. When you enable an IPv6\n            GUA address to be a primary IPv6, the first IPv6 GUA will be made the primary IPv6\n            address until the instance is terminated or the network interface is detached. If you\n            have multiple IPv6 addresses associated with an ENI attached to your instance and you\n            enable a primary IPv6 address, the first IPv6 GUA address associated with the ENI\n            becomes the primary IPv6 address.</p>"
           }
+        },
+        "ConnectionTrackingSpecification": {
+          "target": "com.amazonaws.ec2#ConnectionTrackingSpecificationRequest",
+          "traits": {
+            "smithy.api#documentation": "<p>A connection tracking specification.</p>"
+          }
         }
       },
       "traits": {
@@ -78079,6 +79386,14 @@
             "smithy.api#xmlName": "availabilityZone"
           }
         },
+        "ConnectionTrackingConfiguration": {
+          "target": "com.amazonaws.ec2#ConnectionTrackingConfiguration",
+          "traits": {
+            "aws.protocols#ec2QueryName": "ConnectionTrackingConfiguration",
+            "smithy.api#documentation": "<p>A security group connection tracking configuration that enables you to set the timeout for connection tracking on an Elastic network interface. For more information, see <a href=\"https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-connection-tracking.html#connection-tracking-timeouts\">Connection tracking timeouts</a> in the <i>Amazon Elastic Compute Cloud User Guide</i>.</p>",
+            "smithy.api#xmlName": "connectionTrackingConfiguration"
+          }
+        },
         "Description": {
           "target": "com.amazonaws.ec2#String",
           "traits": {
@@ -81635,6 +82950,72 @@
         "smithy.api#output": {}
       }
     },
+    "com.amazonaws.ec2#ProvisionIpamByoasn": {
+      "type": "operation",
+      "input": {
+        "target": "com.amazonaws.ec2#ProvisionIpamByoasnRequest"
+      },
+      "output": {
+        "target": "com.amazonaws.ec2#ProvisionIpamByoasnResult"
+      },
+      "traits": {
+        "smithy.api#documentation": "<p>Provisions your Autonomous System Number (ASN) for use in your Amazon Web Services account. This action requires authorization context for Amazon to bring the ASN to an Amazon Web Services account. For more information, see <a href=\"https://docs.aws.amazon.com/vpc/latest/ipam/tutorials-byoasn.html\">Tutorial: Bring your ASN to IPAM</a> in the <i>Amazon VPC IPAM guide</i>.</p>"
+      }
+    },
+    "com.amazonaws.ec2#ProvisionIpamByoasnRequest": {
+      "type": "structure",
+      "members": {
+        "DryRun": {
+          "target": "com.amazonaws.ec2#Boolean",
+          "traits": {
+            "smithy.api#documentation": "<p>Checks whether you have the required permissions for the action, without actually making the request, \n   and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. \n   Otherwise, it is <code>UnauthorizedOperation</code>.</p>"
+          }
+        },
+        "IpamId": {
+          "target": "com.amazonaws.ec2#IpamId",
+          "traits": {
+            "smithy.api#clientOptional": {},
+            "smithy.api#documentation": "<p>An IPAM ID.</p>",
+            "smithy.api#required": {}
+          }
+        },
+        "Asn": {
+          "target": "com.amazonaws.ec2#String",
+          "traits": {
+            "smithy.api#clientOptional": {},
+            "smithy.api#documentation": "<p>A public 2-byte or 4-byte ASN.</p>",
+            "smithy.api#required": {}
+          }
+        },
+        "AsnAuthorizationContext": {
+          "target": "com.amazonaws.ec2#AsnAuthorizationContext",
+          "traits": {
+            "smithy.api#clientOptional": {},
+            "smithy.api#documentation": "<p>An ASN authorization context.</p>",
+            "smithy.api#required": {}
+          }
+        }
+      },
+      "traits": {
+        "smithy.api#input": {}
+      }
+    },
+    "com.amazonaws.ec2#ProvisionIpamByoasnResult": {
+      "type": "structure",
+      "members": {
+        "Byoasn": {
+          "target": "com.amazonaws.ec2#Byoasn",
+          "traits": {
+            "aws.protocols#ec2QueryName": "Byoasn",
+            "smithy.api#documentation": "<p>An ASN and BYOIP CIDR association.</p>",
+            "smithy.api#xmlName": "byoasn"
+          }
+        }
+      },
+      "traits": {
+        "smithy.api#output": {}
+      }
+    },
     "com.amazonaws.ec2#ProvisionIpamPoolCidr": {
       "type": "operation",
       "input": {
@@ -99078,7 +100459,7 @@
         }
       },
       "traits": {
-        "smithy.api#documentation": "<note>\n            <p>Currently available in <b>limited preview only</b>. \n                If you are interested in using this feature, contact your account manager.</p>\n         </note>\n         <p>Information about an association between a branch network interface with a trunk network interface.</p>"
+        "smithy.api#documentation": "<p>Information about an association between a branch network interface with a trunk network interface.</p>"
       }
     },
     "com.amazonaws.ec2#TrunkInterfaceAssociationId": {