Amazon.EC2.Model

The minimum and maximum number of accelerators (GPUs, FPGAs, or Amazon Web Services Inferentia chips) on an instance.

The minimum and maximum number of accelerators (GPUs, FPGAs, or Amazon Web Services Inferentia chips) on an instance. To exclude accelerator-enabled instance types, set Max to 0.

The minimum and maximum amount of total accelerator memory, in MiB.

The minimum and maximum amount of total accelerator memory, in MiB.

Container for the parameters to the AcceptAddressTransfer operation. Accepts an Elastic IP address transfer. For more information, see Accept a transferred Elastic IP address in the Amazon VPC User Guide.

This is the response object from the AcceptAddressTransfer operation.

Container for the parameters to the AcceptCapacityReservationBillingOwnership operation. Accepts a request to assign billing of the available capacity of a shared Capacity Reservation to your account. For more information, see Billing assignment for shared Amazon EC2 Capacity Reservations.

This is the response object from the AcceptCapacityReservationBillingOwnership operation.

Container for the parameters to the AcceptReservedInstancesExchangeQuote operation. Accepts the Convertible Reserved Instance exchange quote described in the GetReservedInstancesExchangeQuote call.

The result of the exchange and whether it was successful.

Container for the parameters to the AcceptTransitGatewayMulticastDomainAssociations operation. Accepts a request to associate subnets with a transit gateway multicast domain.

This is the response object from the AcceptTransitGatewayMulticastDomainAssociations operation.

Container for the parameters to the AcceptTransitGatewayPeeringAttachment operation. Accepts a transit gateway peering attachment request. The peering attachment must be in the pendingAcceptance state.

This is the response object from the AcceptTransitGatewayPeeringAttachment operation.

Container for the parameters to the AcceptTransitGatewayVpcAttachment operation. Accepts a request to attach a VPC to a transit gateway.

The VPC attachment must be in the pendingAcceptance state. Use DescribeTransitGatewayVpcAttachments to view your pending VPC attachment requests. Use RejectTransitGatewayVpcAttachment to reject a VPC attachment request.

This is the response object from the AcceptTransitGatewayVpcAttachment operation.

Container for the parameters to the AcceptVpcEndpointConnections operation. Accepts connection requests to your VPC endpoint service.

This is the response object from the AcceptVpcEndpointConnections operation.

Container for the parameters to the AcceptVpcPeeringConnection operation. Accept a VPC peering connection request. To accept a request, the VPC peering connection must be in the pending-acceptance state, and you must be the owner of the peer VPC. Use DescribeVpcPeeringConnections to view your outstanding VPC peering connection requests.

For an inter-Region VPC peering connection request, you must accept the VPC peering connection in the Region of the accepter VPC.

This is the response object from the AcceptVpcPeeringConnection operation.

Describes a finding for a Network Access Scope.

Describes a path.

Describes a path.

Describes an account attribute.

Describes a value of an account attribute.

Describes a running instance in a Spot Fleet.

Describes a principal.

Add an operating Region to an IPAM. Operating Regions are Amazon Web Services Regions where the IPAM is allowed to manage IP address CIDRs. IPAM only discovers and monitors resources in the Amazon Web Services Regions you select as operating Regions.

For more information about operating Regions, see Create an IPAM in the Amazon VPC IPAM User Guide.

Describes an additional detail for a path analysis. For more information, see Reachability Analyzer additional detail codes.

An entry for a prefix list.

Describes an Elastic IP address, or a carrier IP address.

The attributes associated with an Elastic IP address.

Details on the Elastic IP address transfer. For more information, see Transfer Elastic IP addresses in the Amazon VPC User Guide.

Container for the parameters to the AdvertiseByoipCidr operation. Advertises an IPv4 or IPv6 address range that is provisioned for use with your Amazon Web Services resources through bring your own IP addresses (BYOIP).

You can perform this operation at most once every 10 seconds, even if you specify different address ranges each time.

We recommend that you stop advertising the BYOIP CIDR from other locations when you advertise it from Amazon Web Services. To minimize down time, you can configure your Amazon Web Services resources to use an address from a BYOIP CIDR before it is advertised, and then simultaneously stop advertising it from the current location and start advertising it through Amazon Web Services.

It can take a few minutes before traffic to the specified addresses starts routing to Amazon Web Services because of BGP propagation delays.

To stop advertising the BYOIP CIDR, use WithdrawByoipCidr.

This is the response object from the AdvertiseByoipCidr operation.

Container for the parameters to the AllocateAddress operation. Allocates an Elastic IP address to your Amazon Web Services account. After you allocate the Elastic IP address you can associate it with an instance or network interface. After you release an Elastic IP address, it is released to the IP address pool and can be allocated to a different Amazon Web Services account.

You can allocate an Elastic IP address from an address pool owned by Amazon Web Services or from an address pool created from a public IPv4 address range that you have brought to Amazon Web Services for use with your Amazon Web Services resources using bring your own IP addresses (BYOIP). For more information, see Bring Your Own IP Addresses (BYOIP) in the Amazon EC2 User Guide.

If you release an Elastic IP address, you might be able to recover it. You cannot recover an Elastic IP address that you released after it is allocated to another Amazon Web Services account. To attempt to recover an Elastic IP address that you released, specify it in this operation.

For more information, see Elastic IP Addresses in the Amazon EC2 User Guide.

You can allocate a carrier IP address which is a public IP address from a telecommunication carrier, to a network interface which resides in a subnet in a Wavelength Zone (for example an EC2 instance).

This is the response object from the AllocateAddress operation.

Container for the parameters to the AllocateHosts operation. Allocates a Dedicated Host to your account. At a minimum, specify the supported instance type or instance family, the Availability Zone in which to allocate the host, and the number of hosts to allocate.

Contains the output of AllocateHosts.

Container for the parameters to the AllocateIpamPoolCidr operation. Allocate a CIDR from an IPAM pool. The Region you use should be the IPAM pool locale. The locale is the Amazon Web Services Region where this IPAM pool is available for allocations.

In IPAM, an allocation is a CIDR assignment from an IPAM pool to another IPAM pool or to a resource. For more information, see Allocate CIDRs in the Amazon VPC IPAM User Guide.

This is the response object from the AllocateIpamPoolCidr operation.

Describes a principal.

Describes an potential intermediate component of a feasible path.

Describes a network access control (ACL) rule.

Describes a path component.

Describes a load balancer listener.

Describes a load balancer target.

Describes a header. Reflects any changes made by a component as traffic passes through. The fields of an inbound header are null except for the first component of a path.

Describes a route table route.

Describes a security group rule.

Container for the parameters to the ApplySecurityGroupsToClientVpnTargetNetwork operation. Applies a security group to the association between the target network and the Client VPN endpoint. This action replaces the existing security groups with the specified security groups.

This is the response object from the ApplySecurityGroupsToClientVpnTargetNetwork operation.

An Autonomous System Number (ASN) and BYOIP CIDR association.

Provides authorization for Amazon to bring an Autonomous System Number (ASN) to a specific Amazon Web Services account using bring your own ASN (BYOASN). For details on the format of the message and signature, see Tutorial: Bring your ASN to IPAM in the Amazon VPC IPAM guide.

Describes the private IP addresses assigned to a network interface.

Container for the parameters to the AssignIpv6Addresses operation. Assigns one or more IPv6 addresses to the specified network interface. You can specify one or more specific IPv6 addresses, or you can specify the number of IPv6 addresses to be automatically assigned from within the subnet's IPv6 CIDR block range. You can assign as many IPv6 addresses to a network interface as you can assign private IPv4 addresses, and the limit varies per instance type.

You must specify either the IPv6 addresses or the IPv6 address count in the request.

You can optionally use Prefix Delegation on the network interface. You must specify either the IPV6 Prefix Delegation prefixes, or the IPv6 Prefix Delegation count. For information, see Assigning prefixes to network interfaces in the Amazon EC2 User Guide.

This is the response object from the AssignIpv6Addresses operation.

Container for the parameters to the AssignPrivateIpAddresses operation. Assigns one or more secondary private IP addresses to the specified network interface.

You can specify one or more specific secondary IP addresses, or you can specify the number of secondary IP addresses to be automatically assigned within the subnet's CIDR block range. The number of secondary IP addresses that you can assign to an instance varies by instance type. For more information about Elastic IP addresses, see Elastic IP Addresses in the Amazon EC2 User Guide.

When you move a secondary private IP address to another network interface, any Elastic IP address that is associated with the IP address is also moved.

Remapping an IP address is an asynchronous operation. When you move an IP address from one network interface to another, check network/interfaces/macs/mac/local-ipv4s in the instance metadata to confirm that the remapping is complete.

You must specify either the IP addresses or the IP address count in the request.

You can optionally use Prefix Delegation on the network interface. You must specify either the IPv4 Prefix Delegation prefixes, or the IPv4 Prefix Delegation count. For information, see Assigning prefixes to network interfaces in the Amazon EC2 User Guide.

This is the response object from the AssignPrivateIpAddresses operation.

Container for the parameters to the AssignPrivateNatGatewayAddress operation. Assigns private IPv4 addresses to a private NAT gateway. For more information, see Work with NAT gateways in the Amazon VPC User Guide.

This is the response object from the AssignPrivateNatGatewayAddress operation.

Container for the parameters to the AssociateAddress operation. Associates an Elastic IP address, or carrier IP address (for instances that are in subnets in Wavelength Zones) with an instance or a network interface. Before you can use an Elastic IP address, you must allocate it to your account.

If the Elastic IP address is already associated with a different instance, it is disassociated from that instance and associated with the specified instance. If you associate an Elastic IP address with an instance that has an existing Elastic IP address, the existing address is disassociated from the instance, but remains allocated to your account.

[Subnets in Wavelength Zones] You can associate an IP address from the telecommunication carrier to the instance or network interface.

You cannot associate an Elastic IP address with an interface in a different network border group.

This is the response object from the AssociateAddress operation.

Container for the parameters to the AssociateCapacityReservationBillingOwner operation. Initiates a request to assign billing of the unused capacity of a shared Capacity Reservation to a consumer account that is consolidated under the same Amazon Web Services organizations payer account. For more information, see Billing assignment for shared Amazon EC2 Capacity Reservations.

This is the response object from the AssociateCapacityReservationBillingOwner operation.

Container for the parameters to the AssociateClientVpnTargetNetwork operation. Associates a target network with a Client VPN endpoint. A target network is a subnet in a VPC. You can associate multiple subnets from the same VPC with a Client VPN endpoint. You can associate only one subnet in each Availability Zone. We recommend that you associate at least two subnets to provide Availability Zone redundancy.

If you specified a VPC when you created the Client VPN endpoint or if you have previous subnet associations, the specified subnet must be in the same VPC. To specify a subnet that's in a different VPC, you must first modify the Client VPN endpoint (ModifyClientVpnEndpoint) and change the VPC that's associated with it.

This is the response object from the AssociateClientVpnTargetNetwork operation.

Container for the parameters to the AssociateDhcpOptions operation. Associates a set of DHCP options (that you've previously created) with the specified VPC, or associates no DHCP options with the VPC.

After you associate the options with the VPC, any existing instances and all new instances that you launch in that VPC use the options. You don't need to restart or relaunch the instances. They automatically pick up the changes within a few hours, depending on how frequently the instance renews its DHCP lease. You can explicitly renew the lease using the operating system on the instance.

For more information, see DHCP option sets in the Amazon VPC User Guide.

This is the response object from the AssociateDhcpOptions operation.

Information about the associated IAM roles.

Describes a target network that is associated with a Client VPN endpoint. A target network is a subnet in a VPC.

Container for the parameters to the AssociateEnclaveCertificateIamRole operation. Associates an Identity and Access Management (IAM) role with an Certificate Manager (ACM) certificate. This enables the certificate to be used by the ACM for Nitro Enclaves application inside an enclave. For more information, see Certificate Manager for Nitro Enclaves in the Amazon Web Services Nitro Enclaves User Guide.

When the IAM role is associated with the ACM certificate, the certificate, certificate chain, and encrypted private key are placed in an Amazon S3 location that only the associated IAM role can access. The private key of the certificate is encrypted with an Amazon Web Services managed key that has an attached attestation-based key policy.

To enable the IAM role to access the Amazon S3 object, you must grant it permission to call s3:GetObject on the Amazon S3 bucket returned by the command. To enable the IAM role to access the KMS key, you must grant it permission to call kms:Decrypt on the KMS key returned by the command. For more information, see Grant the role permission to access the certificate and encryption key in the Amazon Web Services Nitro Enclaves User Guide.

This is the response object from the AssociateEnclaveCertificateIamRole operation.

Container for the parameters to the AssociateIamInstanceProfile operation. Associates an IAM instance profile with a running or stopped instance. You cannot associate more than one IAM instance profile with an instance.

This is the response object from the AssociateIamInstanceProfile operation.

Container for the parameters to the AssociateInstanceEventWindow operation. Associates one or more targets with an event window. Only one type of target (instance IDs, Dedicated Host IDs, or tags) can be specified with an event window.

For more information, see Define event windows for scheduled events in the Amazon EC2 User Guide.

This is the response object from the AssociateInstanceEventWindow operation.

Container for the parameters to the AssociateIpamByoasn operation. Associates your Autonomous System Number (ASN) with a BYOIP CIDR that you own in the same Amazon Web Services Region. For more information, see Tutorial: Bring your ASN to IPAM in the Amazon VPC IPAM guide.

After the association succeeds, the ASN is eligible for advertisement. You can view the association with DescribeByoipCidrs. You can advertise the CIDR with AdvertiseByoipCidr.

This is the response object from the AssociateIpamByoasn operation.

Container for the parameters to the AssociateIpamResourceDiscovery operation. Associates an IPAM resource discovery with an Amazon VPC IPAM. A resource discovery is an IPAM component that enables IPAM to manage and monitor resources that belong to the owning account.

This is the response object from the AssociateIpamResourceDiscovery operation.

Container for the parameters to the AssociateNatGatewayAddress operation. Associates Elastic IP addresses (EIPs) and private IPv4 addresses with a public NAT gateway. For more information, see Work with NAT gateways in the Amazon VPC User Guide.

By default, you can associate up to 2 Elastic IP addresses per public NAT gateway. You can increase the limit by requesting a quota adjustment. For more information, see Elastic IP address quotas in the Amazon VPC User Guide.

This is the response object from the AssociateNatGatewayAddress operation.

Container for the parameters to the AssociateRouteTable operation. Associates a subnet in your VPC or an internet gateway or virtual private gateway attached to your VPC with a route table in your VPC. This association causes traffic from the subnet or gateway to be routed according to the routes in the route table. The action returns an association ID, which you need in order to disassociate the route table later. A route table can be associated with multiple subnets.

For more information, see Route tables in the Amazon VPC User Guide.

This is the response object from the AssociateRouteTable operation.

Container for the parameters to the AssociateSecurityGroupVpc operation. Associates a security group with another VPC in the same Region. This enables you to use the same security group with network interfaces and instances in the specified VPC.

• The VPC you want to associate the security group with must be in the same Region.

• You can associate the security group with another VPC if your account owns the VPC or if the VPC was shared with you.

• You must own the security group and the VPC that it was created in.

• You cannot use this feature with default security groups.

• You cannot use this feature with the default VPC.

This is the response object from the AssociateSecurityGroupVpc operation.

Container for the parameters to the AssociateSubnetCidrBlock operation. Associates a CIDR block with your subnet. You can only associate a single IPv6 CIDR block with your subnet.

This is the response object from the AssociateSubnetCidrBlock operation.

Container for the parameters to the AssociateTransitGatewayMulticastDomain operation. Associates the specified subnets and transit gateway attachments with the specified transit gateway multicast domain.

The transit gateway attachment must be in the available state before you can add a resource. Use DescribeTransitGatewayAttachments to see the state of the attachment.

This is the response object from the AssociateTransitGatewayMulticastDomain operation.

Container for the parameters to the AssociateTransitGatewayPolicyTable operation. Associates the specified transit gateway attachment with a transit gateway policy table.

This is the response object from the AssociateTransitGatewayPolicyTable operation.

Container for the parameters to the AssociateTransitGatewayRouteTable operation. Associates the specified attachment with the specified transit gateway route table. You can associate only one route table with an attachment.

This is the response object from the AssociateTransitGatewayRouteTable operation.

Container for the parameters to the AssociateTrunkInterface operation. Associates a branch network interface with a trunk network interface.

Before you create the association, use CreateNetworkInterface command and set the interface type to trunk. You must also create a network interface for each branch network interface that you want to associate with the trunk network interface.

This is the response object from the AssociateTrunkInterface operation.

Container for the parameters to the AssociateVpcCidrBlock operation. Associates a CIDR block with your VPC. You can associate a secondary IPv4 CIDR block, an Amazon-provided IPv6 CIDR block, or an IPv6 CIDR block from an IPv6 address pool that you provisioned through bring your own IP addresses (BYOIP).

You must specify one of the following in the request: an IPv4 CIDR block, an IPv6 pool, or an Amazon-provided IPv6 CIDR block.

For more information about associating CIDR blocks with your VPC and applicable restrictions, see IP addressing for your VPCs and subnets in the Amazon VPC User Guide.

This is the response object from the AssociateVpcCidrBlock operation.

Describes the state of a target network association.

Describes integration options for Amazon Athena.

Container for the parameters to the AttachClassicLinkVpc operation.

This action is deprecated.

Links an EC2-Classic instance to a ClassicLink-enabled VPC through one or more of the VPC security groups. You cannot link an EC2-Classic instance to more than one VPC at a time. You can only link an instance that's in the running state. An instance is automatically unlinked from a VPC when it's stopped - you can link it to the VPC again when you restart it.

After you've linked an instance, you cannot change the VPC security groups that are associated with it. To change the security groups, you must first unlink the instance, and then link it again.

Linking your instance to a VPC is sometimes referred to as attaching your instance.

This is the response object from the AttachClassicLinkVpc operation.

Container for the parameters to the AttachInternetGateway operation. Attaches an internet gateway or a virtual private gateway to a VPC, enabling connectivity between the internet and the VPC. For more information, see Internet gateways in the Amazon VPC User Guide.

This is the response object from the AttachInternetGateway operation.

ENA Express uses Amazon Web Services Scalable Reliable Datagram (SRD) technology to increase the maximum bandwidth used per stream and minimize tail latency of network traffic between EC2 instances. With ENA Express, you can communicate between two EC2 instances in the same subnet within the same account, or in different accounts. Both sending and receiving instances must have ENA Express enabled.

To improve the reliability of network packet delivery, ENA Express reorders network packets on the receiving end by default. However, some UDP-based applications are designed to handle network packets that are out of order to reduce the overhead for packet delivery at the network layer. When ENA Express is enabled, you can specify whether UDP network traffic uses it.

ENA Express is compatible with both TCP and UDP transport protocols. When it's enabled, TCP traffic automatically uses it. However, some UDP-based applications are designed to handle network packets that are out of order, without a need for retransmission, such as live video broadcasting or other near-real-time applications. For UDP traffic, you can specify whether to use ENA Express, based on your application environment needs.

Container for the parameters to the AttachNetworkInterface operation. Attaches a network interface to an instance.

Contains the output of AttachNetworkInterface.

Container for the parameters to the AttachVerifiedAccessTrustProvider operation. Attaches the specified Amazon Web Services Verified Access trust provider to the specified Amazon Web Services Verified Access instance.

This is the response object from the AttachVerifiedAccessTrustProvider operation.

Container for the parameters to the AttachVolume operation. Attaches an EBS volume to a running or stopped instance and exposes it to the instance with the specified device name.

Encrypted EBS volumes must be attached to instances that support Amazon EBS encryption. For more information, see Amazon EBS encryption in the Amazon EBS User Guide.

After you attach an EBS volume, you must make it available. For more information, see Make an EBS volume available for use.

If a volume has an Amazon Web Services Marketplace product code:

• The volume can be attached only to a stopped instance.

• Amazon Web Services Marketplace product codes are copied from the volume to the instance.

• You must be subscribed to the product.

• The instance type and operating system of the instance must support the product. For example, you can't detach a volume from a Windows instance and attach it to a Linux instance.

For more information, see Attach an Amazon EBS volume to an instance in the Amazon EBS User Guide.

Contains the response data from the AttachVolume operation.

Container for the parameters to the AttachVpnGateway operation. Attaches an available virtual private gateway to a VPC. You can attach one virtual private gateway to one VPC at a time.

For more information, see Amazon Web Services Site-to-Site VPN in the Amazon Web Services Site-to-Site VPN User Guide.

Contains the output of AttachVpnGateway.

Information about an authorization rule.

Container for the parameters to the AuthorizeClientVpnIngress operation. Adds an ingress authorization rule to a Client VPN endpoint. Ingress authorization rules act as firewall rules that grant access to networks. You must configure ingress authorization rules to enable clients to access resources in Amazon Web Services or on-premises networks.

This is the response object from the AuthorizeClientVpnIngress operation.

Container for the parameters to the AuthorizeSecurityGroupEgress operation. Adds the specified outbound (egress) rules to a security group.

An outbound rule permits instances to send traffic to the specified IPv4 or IPv6 address ranges, the IP address ranges specified by a prefix list, or the instances that are associated with a source security group. For more information, see Security group rules.

You must specify exactly one of the following destinations: an IPv4 or IPv6 address range, a prefix list, or a security group. You must specify a protocol for each rule (for example, TCP). If the protocol is TCP or UDP, you must also specify a port or port range. If the protocol is ICMP or ICMPv6, you must also specify the ICMP type and code.

Rule changes are propagated to instances associated with the security group as quickly as possible. However, a small delay might occur.

For examples of rules that you can add to security groups for specific access scenarios, see Security group rules for different use cases in the Amazon EC2 User Guide.

For information about security group quotas, see Amazon VPC quotas in the Amazon VPC User Guide.

This is the response object from the AuthorizeSecurityGroupEgress operation.

Container for the parameters to the AuthorizeSecurityGroupIngress operation. Adds the specified inbound (ingress) rules to a security group.

An inbound rule permits instances to receive traffic from the specified IPv4 or IPv6 address range, the IP address ranges that are specified by a prefix list, or the instances that are associated with a destination security group. For more information, see Security group rules.

You must specify exactly one of the following sources: an IPv4 or IPv6 address range, a prefix list, or a security group. You must specify a protocol for each rule (for example, TCP). If the protocol is TCP or UDP, you must also specify a port or port range. If the protocol is ICMP or ICMPv6, you must also specify the ICMP/ICMPv6 type and code.

Rule changes are propagated to instances associated with the security group as quickly as possible. However, a small delay might occur.

For examples of rules that you can add to security groups for specific access scenarios, see Security group rules for different use cases in the Amazon EC2 User Guide.

For more information about security group quotas, see Amazon VPC quotas in the Amazon VPC User Guide.

This is the response object from the AuthorizeSecurityGroupIngress operation.

Describes Availability Zones, Local Zones, and Wavelength Zones.

Describes a message about an Availability Zone, Local Zone, or Wavelength Zone.

The capacity information for instances that can be launched onto the Dedicated Host.

The minimum and maximum baseline bandwidth to Amazon EBS, in Mbps. For more information, see Amazon EBS–optimized instances in the Amazon EC2 User Guide.

The minimum and maximum baseline bandwidth to Amazon EBS, in Mbps. For more information, see Amazon EBS–optimized instances in the Amazon EC2 User Guide.

Describes a block device mapping, which defines the EBS volumes and instance store volumes to attach to an instance at launch.

Container for the parameters to the BundleInstance operation. Bundles an Amazon instance store-backed Windows instance.

During bundling, only the root device volume (C:\) is bundled. Data on other instance store volumes is not preserved.

Contains the output of BundleInstance.

Describes a bundle task.

Describes an error for BundleInstance.

The Autonomous System Number (ASN) and BYOIP CIDR association.

Information about an address range that is provisioned for use with your Amazon Web Services resources through bring your own IP addresses (BYOIP).

Container for the parameters to the CancelBundleTask operation. Cancels a bundling operation for an instance store-backed Windows instance.

Contains the output of CancelBundleTask.

Describes a Capacity Reservation Fleet cancellation error.

Container for the parameters to the CancelCapacityReservationFleets operation. Cancels one or more Capacity Reservation Fleets. When you cancel a Capacity Reservation Fleet, the following happens:

• The Capacity Reservation Fleet's status changes to cancelled.

• The individual Capacity Reservations in the Fleet are cancelled. Instances running in the Capacity Reservations at the time of cancelling the Fleet continue to run in shared capacity.

• The Fleet stops creating new Capacity Reservations.

This is the response object from the CancelCapacityReservationFleets operation.

Container for the parameters to the CancelCapacityReservation operation. Cancels the specified Capacity Reservation, releases the reserved capacity, and changes the Capacity Reservation's state to cancelled.

Instances running in the reserved capacity continue running until you stop them. Stopped instances that target the Capacity Reservation can no longer launch. Modify these instances to either target a different Capacity Reservation, launch On-Demand Instance capacity, or run in any open Capacity Reservation that has matching attributes and sufficient capacity.

This is the response object from the CancelCapacityReservation operation.

Container for the parameters to the CancelConversionTask operation. Cancels an active conversion task. The task can be the import of an instance or volume. The action removes all artifacts of the conversion, including a partially uploaded volume or instance. If the conversion is complete or is in the process of transferring the final disk image, the command fails and returns an exception.

This is the response object from the CancelConversionTask operation.

Container for the parameters to the CancelExportTask operation. Cancels an active export task. The request removes all artifacts of the export, including any partially-created Amazon S3 objects. If the export task is complete or is in the process of transferring the final disk image, the command fails and returns an error.

This is the response object from the CancelExportTask operation.

Container for the parameters to the CancelImageLaunchPermission operation. Removes your Amazon Web Services account from the launch permissions for the specified AMI. For more information, see Cancel having an AMI shared with your Amazon Web Services account in the Amazon EC2 User Guide.

This is the response object from the CancelImageLaunchPermission operation.

Container for the parameters to the CancelImportTask operation. Cancels an in-process import virtual machine or import snapshot task.

This is the response object from the CancelImportTask operation.

Describes a request to cancel a Spot Instance.

Container for the parameters to the CancelReservedInstancesListing operation. Cancels the specified Reserved Instance listing in the Reserved Instance Marketplace.

For more information, see Sell in the Reserved Instance Marketplace in the Amazon EC2 User Guide.

Contains the output of CancelReservedInstancesListing.

Describes a Spot Fleet error.

Describes a Spot Fleet request that was not successfully canceled.

Container for the parameters to the CancelSpotFleetRequests operation. Cancels the specified Spot Fleet requests.

After you cancel a Spot Fleet request, the Spot Fleet launches no new instances.

You must also specify whether a canceled Spot Fleet request should terminate its instances. If you choose to terminate the instances, the Spot Fleet request enters the cancelled_terminating state. Otherwise, the Spot Fleet request enters the cancelled_running state and the instances continue to run until they are interrupted or you terminate them manually.

Restrictions

• You can delete up to 100 fleets in a single request. If you exceed the specified number, no fleets are deleted.

Contains the output of CancelSpotFleetRequests.

Describes a Spot Fleet request that was successfully canceled.

Container for the parameters to the CancelSpotInstanceRequests operation. Cancels one or more Spot Instance requests.

Canceling a Spot Instance request does not terminate running Spot Instances associated with the request.

Contains the output of CancelSpotInstanceRequests.

Information about instance capacity usage for a Capacity Reservation.

The recommended Capacity Block that fits your search requirements.

Describes a Capacity Reservation.

Information about a request to assign billing of the unused capacity of a Capacity Reservation.

Information about a Capacity Reservation Fleet.

Describes a Capacity Reservation Fleet that was successfully cancelled.

Describes a resource group to which a Capacity Reservation has been added.

Information about a Capacity Reservation.

Describes the strategy for using unused Capacity Reservations for fulfilling On-Demand capacity.

This strategy can only be used if the EC2 Fleet is of type instant.

For more information about Capacity Reservations, see On-Demand Capacity Reservations in the Amazon EC2 User Guide. For examples of using Capacity Reservations in an EC2 Fleet, see EC2 Fleet example configurations in the Amazon EC2 User Guide.

Describes the strategy for using unused Capacity Reservations for fulfilling On-Demand capacity.

This strategy can only be used if the EC2 Fleet is of type instant.

For more information about Capacity Reservations, see On-Demand Capacity Reservations in the Amazon EC2 User Guide. For examples of using Capacity Reservations in an EC2 Fleet, see EC2 Fleet example configurations in the Amazon EC2 User Guide.

Describes an instance's Capacity Reservation targeting option. You can specify only one parameter at a time. If you specify CapacityReservationPreference and CapacityReservationTarget, the request fails.

Use the CapacityReservationPreference parameter to configure the instance to run as an On-Demand Instance or to run in any open Capacity Reservation that has matching attributes (instance type, platform, Availability Zone). Use the CapacityReservationTarget parameter to explicitly target a specific Capacity Reservation or a Capacity Reservation group.

Describes the instance's Capacity Reservation targeting preferences. The action returns the capacityReservationPreference response element if the instance is configured to run in On-Demand capacity, or if it is configured in run in any open Capacity Reservation that has matching attributes (instance type, platform, Availability Zone). The action returns the capacityReservationTarget response element if the instance explicily targets a specific Capacity Reservation or Capacity Reservation group.

Describes a target Capacity Reservation or Capacity Reservation group.

Describes a target Capacity Reservation or Capacity Reservation group.

Describes a carrier gateway.

Information about the client certificate used for authentication.

Information about the client certificate to be used for authentication.

Provides authorization for Amazon to bring a specific IP address range to a specific Amazon Web Services account using bring your own IP addresses (BYOIP). For more information, see Configuring your BYOIP address range in the Amazon EC2 User Guide.

Describes an IPv4 CIDR block.

Deprecated.

Describes the ClassicLink DNS support status of a VPC.

Deprecated.

Describes a linked EC2-Classic instance.

Describes a Classic Load Balancer.

Describes the Classic Load Balancers to attach to a Spot Fleet. Spot Fleet registers the running Spot Instances with these Classic Load Balancers.

Describes the state of a client certificate revocation list.

The options for managing connection authorization for new client connections.

The options for managing connection authorization for new client connections.

Describes the client-specific data.

Options for enabling a customizable text banner that will be displayed on Amazon Web Services provided clients when a VPN session is established.

Current state of options for customizable text banner that will be displayed on Amazon Web Services provided clients when a VPN session is established.

Describes the authentication methods used by a Client VPN endpoint. For more information, see Authentication in the Client VPN Administrator Guide.

Describes the authentication method to be used by a Client VPN endpoint. For more information, see Authentication in the Client VPN Administrator Guide.

Describes the state of an authorization rule.

Describes a client connection.

Describes the status of a client connection.

Describes a Client VPN endpoint.

Describes the status of the Client VPN endpoint attribute.

Describes the state of a Client VPN endpoint.

Information about a Client VPN endpoint route.

Describes the state of a Client VPN endpoint route.

Options for sending VPN tunnel logs to CloudWatch.

Options for sending VPN tunnel logs to CloudWatch.

Describes address usage for a customer-owned address pool.

Information about a customer-owned IP address range.

Describes a customer-owned address pool.

Container for the parameters to the ConfirmProductInstance operation. Determines whether a product code is associated with an instance. This action can only be used by the owner of the product code. It is useful when a product code owner must verify whether another user's instance is eligible for support.

This is the response object from the ConfirmProductInstance operation.

Describes the client connection logging options for the Client VPN endpoint.

Information about the client connection logging options for a Client VPN endpoint.

Describes a connection notification for a VPC endpoint or VPC endpoint service.

A security group connection tracking configuration that enables you to set the idle timeout for connection tracking on an Elastic network interface. For more information, see Connection tracking timeouts in the Amazon EC2 User Guide.

A security group connection tracking specification that enables you to set the idle timeout for connection tracking on an Elastic network interface. For more information, see Connection tracking timeouts in the Amazon EC2 User Guide.

A security group connection tracking specification request that enables you to set the idle timeout for connection tracking on an Elastic network interface. For more information, see Connection tracking timeouts in the Amazon EC2 User Guide.

A security group connection tracking specification response that enables you to set the idle timeout for connection tracking on an Elastic network interface. For more information, see Connection tracking timeouts in the Amazon EC2 User Guide.

Describes a conversion task.

Container for the parameters to the CopyFpgaImage operation. Copies the specified Amazon FPGA Image (AFI) to the current Region.

This is the response object from the CopyFpgaImage operation.

Container for the parameters to the CopyImage operation. Initiates an AMI copy operation. You can copy an AMI from one Region to another, or from a Region to an Outpost. You can't copy an AMI from an Outpost to a Region, from one Outpost to another, or within the same Outpost. To copy an AMI to another partition, see CreateStoreImageTask.

When you copy an AMI from one Region to another, the destination Region is the current Region.

When you copy an AMI from a Region to an Outpost, specify the ARN of the Outpost as the destination. Backing snapshots copied to an Outpost are encrypted by default using the default encryption key for the Region or the key that you specify. Outposts do not support unencrypted snapshots.

For information about the prerequisites when copying an AMI, see Copy an AMI in the Amazon EC2 User Guide.

Contains the output of CopyImage.

Container for the parameters to the CopySnapshot operation. Copies a point-in-time snapshot of an EBS volume and stores it in Amazon S3. You can copy a snapshot within the same Region, from one Region to another, or from a Region to an Outpost. You can't copy a snapshot from an Outpost to a Region, from one Outpost to another, or within the same Outpost.

You can use the snapshot to create EBS volumes or Amazon Machine Images (AMIs).

When copying snapshots to a Region, copies of encrypted EBS snapshots remain encrypted. Copies of unencrypted snapshots remain unencrypted, unless you enable encryption for the snapshot copy operation. By default, encrypted snapshot copies use the default KMS key; however, you can specify a different KMS key. To copy an encrypted snapshot that has been shared from another account, you must have permissions for the KMS key used to encrypt the snapshot.

Snapshots copied to an Outpost are encrypted by default using the default encryption key for the Region, or a different key that you specify in the request using KmsKeyId. Outposts do not support unencrypted snapshots. For more information, Amazon EBS local snapshots on Outposts in the Amazon EBS User Guide.

Snapshots created by copying another snapshot have an arbitrary volume ID that should not be used for any purpose.

For more information, see Copy an Amazon EBS snapshot in the Amazon EBS User Guide.

This is the response object from the CopySnapshot operation.

The CPU options for the instance.

The CPU options for the instance. Both the core count and threads per core must be specified in the request.

Container for the parameters to the CreateCapacityReservationBySplitting operation. Create a new Capacity Reservation by splitting the available capacity of the source Capacity Reservation. The new Capacity Reservation will have the same attributes as the source Capacity Reservation except for tags. The source Capacity Reservation must be active and owned by your Amazon Web Services account.

This is the response object from the CreateCapacityReservationBySplitting operation.

Container for the parameters to the CreateCapacityReservationFleet operation. Creates a Capacity Reservation Fleet. For more information, see Create a Capacity Reservation Fleet in the Amazon EC2 User Guide.

This is the response object from the CreateCapacityReservationFleet operation.

Container for the parameters to the CreateCapacityReservation operation. Creates a new Capacity Reservation with the specified attributes.

Capacity Reservations enable you to reserve capacity for your Amazon EC2 instances in a specific Availability Zone for any duration. This gives you the flexibility to selectively add capacity reservations and still get the Regional RI discounts for that usage. By creating Capacity Reservations, you ensure that you always have access to Amazon EC2 capacity when you need it, for as long as you need it. For more information, see Capacity Reservations in the Amazon EC2 User Guide.

Your request to create a Capacity Reservation could fail if Amazon EC2 does not have sufficient capacity to fulfill the request. If your request fails due to Amazon EC2 capacity constraints, either try again at a later time, try in a different Availability Zone, or request a smaller capacity reservation. If your application is flexible across instance types and sizes, try to create a Capacity Reservation with different instance attributes.

Your request could also fail if the requested quantity exceeds your On-Demand Instance limit for the selected instance type. If your request fails due to limit constraints, increase your On-Demand Instance limit for the required instance type and try again. For more information about increasing your instance limits, see Amazon EC2 Service Quotas in the Amazon EC2 User Guide.

This is the response object from the CreateCapacityReservation operation.

Container for the parameters to the CreateCarrierGateway operation. Creates a carrier gateway. For more information about carrier gateways, see Carrier gateways in the Amazon Web Services Wavelength Developer Guide.

This is the response object from the CreateCarrierGateway operation.

Container for the parameters to the CreateClientVpnEndpoint operation. Creates a Client VPN endpoint. A Client VPN endpoint is the resource you create and configure to enable and manage client VPN sessions. It is the destination endpoint at which all client VPN sessions are terminated.

This is the response object from the CreateClientVpnEndpoint operation.

Container for the parameters to the CreateClientVpnRoute operation. Adds a route to a network to a Client VPN endpoint. Each Client VPN endpoint has a route table that describes the available destination network routes. Each route in the route table specifies the path for traffic to specific resources or networks.

This is the response object from the CreateClientVpnRoute operation.

Container for the parameters to the CreateCoipCidr operation. Creates a range of customer-owned IP addresses.

This is the response object from the CreateCoipCidr operation.

Container for the parameters to the CreateCoipPool operation. Creates a pool of customer-owned IP (CoIP) addresses.

This is the response object from the CreateCoipPool operation.

Container for the parameters to the CreateCustomerGateway operation. Provides information to Amazon Web Services about your customer gateway device. The customer gateway device is the appliance at your end of the VPN connection. You must provide the IP address of the customer gateway device’s external interface. The IP address must be static and can be behind a device performing network address translation (NAT).

For devices that use Border Gateway Protocol (BGP), you can also provide the device's BGP Autonomous System Number (ASN). You can use an existing ASN assigned to your network. If you don't have an ASN already, you can use a private ASN. For more information, see Customer gateway options for your Site-to-Site VPN connection in the Amazon Web Services Site-to-Site VPN User Guide.

To create more than one customer gateway with the same VPN type, IP address, and BGP ASN, specify a unique device name for each customer gateway. An identical request returns information about the existing customer gateway; it doesn't create a new customer gateway.

Contains the output of CreateCustomerGateway.

Container for the parameters to the CreateDefaultSubnet operation. Creates a default subnet with a size /20 IPv4 CIDR block in the specified Availability Zone in your default VPC. You can have only one default subnet per Availability Zone. For more information, see Create a default subnet in the Amazon VPC User Guide.

This is the response object from the CreateDefaultSubnet operation.

Container for the parameters to the CreateDefaultVpc operation. Creates a default VPC with a size /16 IPv4 CIDR block and a default subnet in each Availability Zone. For more information about the components of a default VPC, see Default VPCs in the Amazon VPC User Guide. You cannot specify the components of the default VPC yourself.

If you deleted your previous default VPC, you can create a default VPC. You cannot have more than one default VPC per Region.

This is the response object from the CreateDefaultVpc operation.

Container for the parameters to the CreateDhcpOptions operation. Creates a custom set of DHCP options. After you create a DHCP option set, you associate it with a VPC. After you associate a DHCP option set with a VPC, all existing and newly launched instances in the VPC use this set of DHCP options.

The following are the individual DHCP options you can specify. For more information, see DHCP option sets in the Amazon VPC User Guide.

• domain-name - If you're using AmazonProvidedDNS in us-east-1, specify ec2.internal. If you're using AmazonProvidedDNS in any other Region, specify region.compute.internal. Otherwise, specify a custom domain name. This value is used to complete unqualified DNS hostnames.

  Some Linux operating systems accept multiple domain names separated by spaces. However, Windows and other Linux operating systems treat the value as a single domain, which results in unexpected behavior. If your DHCP option set is associated with a VPC that has instances running operating systems that treat the value as a single domain, specify only one domain name.

• domain-name-servers - The IP addresses of up to four DNS servers, or AmazonProvidedDNS. To specify multiple domain name servers in a single parameter, separate the IP addresses using commas. To have your instances receive custom DNS hostnames as specified in domain-name, you must specify a custom DNS server.

• ntp-servers - The IP addresses of up to eight Network Time Protocol (NTP) servers (four IPv4 addresses and four IPv6 addresses).

• netbios-name-servers - The IP addresses of up to four NetBIOS name servers.

• netbios-node-type - The NetBIOS node type (1, 2, 4, or 8). We recommend that you specify 2. Broadcast and multicast are not supported. For more information about NetBIOS node types, see RFC 2132.

• ipv6-address-preferred-lease-time - A value (in seconds, minutes, hours, or years) for how frequently a running instance with an IPv6 assigned to it goes through DHCPv6 lease renewal. Acceptable values are between 140 and 2147483647 seconds (approximately 68 years). If no value is entered, the default lease time is 140 seconds. If you use long-term addressing for EC2 instances, you can increase the lease time and avoid frequent lease renewal requests. Lease renewal typically occurs when half of the lease time has elapsed.

This is the response object from the CreateDhcpOptions operation.

Container for the parameters to the CreateEgressOnlyInternetGateway operation. [IPv6 only] Creates an egress-only internet gateway for your VPC. An egress-only internet gateway is used to enable outbound communication over IPv6 from instances in your VPC to the internet, and prevents hosts outside of your VPC from initiating an IPv6 connection with your instance.

This is the response object from the CreateEgressOnlyInternetGateway operation.

Describes the instances that could not be launched by the fleet.

Describes the instances that were launched by the fleet.

Container for the parameters to the CreateFleet operation. Creates an EC2 Fleet that contains the configuration information for On-Demand Instances and Spot Instances. Instances are launched immediately if there is available capacity.

A single EC2 Fleet can include multiple launch specifications that vary by instance type, AMI, Availability Zone, or subnet.

For more information, see EC2 Fleet in the Amazon EC2 User Guide.

This is the response object from the CreateFleet operation.

Container for the parameters to the CreateFlowLogs operation. Creates one or more flow logs to capture information about IP traffic for a specific network interface, subnet, or VPC.

Flow log data for a monitored network interface is recorded as flow log records, which are log events consisting of fields that describe the traffic flow. For more information, see Flow log records in the Amazon VPC User Guide.

When publishing to CloudWatch Logs, flow log records are published to a log group, and each network interface has a unique log stream in the log group. When publishing to Amazon S3, flow log records for all of the monitored network interfaces are published to a single log file object that is stored in the specified bucket.

For more information, see VPC Flow Logs in the Amazon VPC User Guide.

This is the response object from the CreateFlowLogs operation.

Container for the parameters to the CreateFpgaImage operation. Creates an Amazon FPGA Image (AFI) from the specified design checkpoint (DCP).

The create operation is asynchronous. To verify that the AFI is ready for use, check the output logs.

An AFI contains the FPGA bitstream that is ready to download to an FPGA. You can securely deploy an AFI on multiple FPGA-accelerated instances. For more information, see the Amazon Web Services FPGA Hardware Development Kit.

This is the response object from the CreateFpgaImage operation.

Container for the parameters to the CreateImage operation. Creates an Amazon EBS-backed AMI from an Amazon EBS-backed instance that is either running or stopped.

If you customized your instance with instance store volumes or Amazon EBS volumes in addition to the root device volume, the new AMI contains block device mapping information for those volumes. When you launch an instance from this new AMI, the instance automatically launches with those additional volumes.

For more information, see Create an Amazon EBS-backed Linux AMI in the Amazon Elastic Compute Cloud User Guide.

This is the response object from the CreateImage operation.

Container for the parameters to the CreateInstanceConnectEndpoint operation. Creates an EC2 Instance Connect Endpoint.

An EC2 Instance Connect Endpoint allows you to connect to an instance, without requiring the instance to have a public IPv4 address. For more information, see Connect to your instances without requiring a public IPv4 address using EC2 Instance Connect Endpoint in the Amazon EC2 User Guide.

This is the response object from the CreateInstanceConnectEndpoint operation.

Container for the parameters to the CreateInstanceEventWindow operation. Creates an event window in which scheduled events for the associated Amazon EC2 instances can run.

You can define either a set of time ranges or a cron expression when creating the event window, but not both. All event window times are in UTC.

You can create up to 200 event windows per Amazon Web Services Region.

When you create the event window, targets (instance IDs, Dedicated Host IDs, or tags) are not yet associated with it. To ensure that the event window can be used, you must associate one or more targets with it by using the AssociateInstanceEventWindow API.

For more information, see Define event windows for scheduled events in the Amazon EC2 User Guide.

This is the response object from the CreateInstanceEventWindow operation.

Container for the parameters to the CreateInstanceExportTask operation. Exports a running or stopped instance to an Amazon S3 bucket.

For information about the prerequisites for your Amazon S3 bucket, supported operating systems, image formats, and known limitations for the types of instances you can export, see Exporting an instance as a VM Using VM Import/Export in the VM Import/Export User Guide.

This is the response object from the CreateInstanceExportTask operation.

Container for the parameters to the CreateInternetGateway operation. Creates an internet gateway for use with a VPC. After creating the internet gateway, you attach it to a VPC using AttachInternetGateway.

For more information, see Internet gateways in the Amazon VPC User Guide.

This is the response object from the CreateInternetGateway operation.

Container for the parameters to the CreateIpamExternalResourceVerificationToken operation. Create a verification token. A verification token is an Amazon Web Services-generated random value that you can use to prove ownership of an external resource. For example, you can use a verification token to validate that you control a public IP address range when you bring an IP address range to Amazon Web Services (BYOIP).

This is the response object from the CreateIpamExternalResourceVerificationToken operation.

Container for the parameters to the CreateIpamPool operation. Create an IP address pool for Amazon VPC IP Address Manager (IPAM). In IPAM, a pool is a collection of contiguous IP addresses CIDRs. Pools enable you to organize your IP addresses according to your routing and security needs. For example, if you have separate routing and security needs for development and production applications, you can create a pool for each.

For more information, see Create a top-level pool in the Amazon VPC IPAM User Guide.

This is the response object from the CreateIpamPool operation.

Container for the parameters to the CreateIpam operation. Create an IPAM. Amazon VPC IP Address Manager (IPAM) is a VPC feature that you can use to automate your IP address management workflows including assigning, tracking, troubleshooting, and auditing IP addresses across Amazon Web Services Regions and accounts throughout your Amazon Web Services Organization.

For more information, see Create an IPAM in the Amazon VPC IPAM User Guide.

Container for the parameters to the CreateIpamResourceDiscovery operation. Creates an IPAM resource discovery. A resource discovery is an IPAM component that enables IPAM to manage and monitor resources that belong to the owning account.

This is the response object from the CreateIpamResourceDiscovery operation.

This is the response object from the CreateIpam operation.

Container for the parameters to the CreateIpamScope operation. Create an IPAM scope. In IPAM, a scope is the highest-level container within IPAM. An IPAM contains two default scopes. Each scope represents the IP space for a single network. The private scope is intended for all private IP address space. The public scope is intended for all public IP address space. Scopes enable you to reuse IP addresses across multiple unconnected networks without causing IP address overlap or conflict.

For more information, see Add a scope in the Amazon VPC IPAM User Guide.

This is the response object from the CreateIpamScope operation.

Container for the parameters to the CreateKeyPair operation. Creates an ED25519 or 2048-bit RSA key pair with the specified name and in the specified PEM or PPK format. Amazon EC2 stores the public key and displays the private key for you to save to a file. The private key is returned as an unencrypted PEM encoded PKCS#1 private key or an unencrypted PPK formatted private key for use with PuTTY. If a key with the specified name already exists, Amazon EC2 returns an error.

The key pair returned to you is available only in the Amazon Web Services Region in which you create it. If you prefer, you can create your own key pair using a third-party tool and upload it to any Region using ImportKeyPair.

You can have up to 5,000 key pairs per Amazon Web Services Region.

For more information, see Amazon EC2 key pairs in the Amazon Elastic Compute Cloud User Guide.

Contains the response data from the CreateKeyPair operation.

Container for the parameters to the CreateLaunchTemplate operation. Creates a launch template.

A launch template contains the parameters to launch an instance. When you launch an instance using RunInstances, you can specify a launch template instead of providing the launch parameters in the request. For more information, see Launch an instance from a launch template in the Amazon EC2 User Guide.

To clone an existing launch template as the basis for a new launch template, use the Amazon EC2 console. The API, SDKs, and CLI do not support cloning a template. For more information, see Create a launch template from an existing launch template in the Amazon EC2 User Guide.

This is the response object from the CreateLaunchTemplate operation.

Container for the parameters to the CreateLaunchTemplateVersion operation. Creates a new version of a launch template. You must specify an existing launch template, either by name or ID. You can determine whether the new version inherits parameters from a source version, and add or overwrite parameters as needed.

Launch template versions are numbered in the order in which they are created. You can't specify, change, or replace the numbering of launch template versions.

Launch templates are immutable; after you create a launch template, you can't modify it. Instead, you can create a new version of the launch template that includes the changes that you require.

For more information, see Modify a launch template (manage launch template versions) in the Amazon EC2 User Guide.

This is the response object from the CreateLaunchTemplateVersion operation.

Container for the parameters to the CreateLocalGatewayRoute operation. Creates a static route for the specified local gateway route table. You must specify one of the following targets:

• LocalGatewayVirtualInterfaceGroupId

• NetworkInterfaceId

This is the response object from the CreateLocalGatewayRoute operation.

Container for the parameters to the CreateLocalGatewayRouteTable operation. Creates a local gateway route table.

This is the response object from the CreateLocalGatewayRouteTable operation.

Container for the parameters to the CreateLocalGatewayRouteTableVirtualInterfaceGroupAssociation operation. Creates a local gateway route table virtual interface group association.

This is the response object from the CreateLocalGatewayRouteTableVirtualInterfaceGroupAssociation operation.

Container for the parameters to the CreateLocalGatewayRouteTableVpcAssociation operation. Associates the specified VPC with the specified local gateway route table.

This is the response object from the CreateLocalGatewayRouteTableVpcAssociation operation.

Container for the parameters to the CreateManagedPrefixList operation. Creates a managed prefix list. You can specify one or more entries for the prefix list. Each entry consists of a CIDR block and an optional description.

This is the response object from the CreateManagedPrefixList operation.

Container for the parameters to the CreateNatGateway operation. Creates a NAT gateway in the specified subnet. This action creates a network interface in the specified subnet with a private IP address from the IP address range of the subnet. You can create either a public NAT gateway or a private NAT gateway.

With a public NAT gateway, internet-bound traffic from a private subnet can be routed to the NAT gateway, so that instances in a private subnet can connect to the internet.

With a private NAT gateway, private communication is routed across VPCs and on-premises networks through a transit gateway or virtual private gateway. Common use cases include running large workloads behind a small pool of allowlisted IPv4 addresses, preserving private IPv4 addresses, and communicating between overlapping networks.

For more information, see NAT gateways in the Amazon VPC User Guide.

This is the response object from the CreateNatGateway operation.

Container for the parameters to the CreateNetworkAclEntry operation. Creates an entry (a rule) in a network ACL with the specified rule number. Each network ACL has a set of numbered ingress rules and a separate set of numbered egress rules. When determining whether a packet should be allowed in or out of a subnet associated with the ACL, we process the entries in the ACL according to the rule numbers, in ascending order. Each network ACL has a set of ingress rules and a separate set of egress rules.

We recommend that you leave room between the rule numbers (for example, 100, 110, 120, ...), and not number them one right after the other (for example, 101, 102, 103, ...). This makes it easier to add a rule between existing ones without having to renumber the rules.

After you add an entry, you can't modify it; you must either replace it, or create an entry and delete the old one.

For more information about network ACLs, see Network ACLs in the Amazon VPC User Guide.

This is the response object from the CreateNetworkAclEntry operation.

Container for the parameters to the CreateNetworkAcl operation. Creates a network ACL in a VPC. Network ACLs provide an optional layer of security (in addition to security groups) for the instances in your VPC.

For more information, see Network ACLs in the Amazon VPC User Guide.

This is the response object from the CreateNetworkAcl operation.

Container for the parameters to the CreateNetworkInsightsAccessScope operation. Creates a Network Access Scope.

Amazon Web Services Network Access Analyzer enables cloud networking and cloud operations teams to verify that their networks on Amazon Web Services conform to their network security and governance objectives. For more information, see the Amazon Web Services Network Access Analyzer Guide.

This is the response object from the CreateNetworkInsightsAccessScope operation.

Container for the parameters to the CreateNetworkInsightsPath operation. Creates a path to analyze for reachability.

Reachability Analyzer enables you to analyze and debug network reachability between two resources in your virtual private cloud (VPC). For more information, see the Reachability Analyzer Guide.

This is the response object from the CreateNetworkInsightsPath operation.

Container for the parameters to the CreateNetworkInterfacePermission operation. Grants an Amazon Web Services-authorized account permission to attach the specified network interface to an instance in their account.

You can grant permission to a single Amazon Web Services account only, and only one account at a time.

Contains the output of CreateNetworkInterfacePermission.

Container for the parameters to the CreateNetworkInterface operation. Creates a network interface in the specified subnet.

The number of IP addresses you can assign to a network interface varies by instance type.

For more information about network interfaces, see Elastic network interfaces in the Amazon EC2 User Guide.

This is the response object from the CreateNetworkInterface operation.

Container for the parameters to the CreatePlacementGroup operation. Creates a placement group in which to launch instances. The strategy of the placement group determines how the instances are organized within the group.

A cluster placement group is a logical grouping of instances within a single Availability Zone that benefit from low network latency, high network throughput. A spread placement group places instances on distinct hardware. A partition placement group places groups of instances in different partitions, where instances in one partition do not share the same hardware with instances in another partition.

For more information, see Placement groups in the Amazon EC2 User Guide.

This is the response object from the CreatePlacementGroup operation.

Container for the parameters to the CreatePublicIpv4Pool operation. Creates a public IPv4 address pool. A public IPv4 pool is an EC2 IP address pool required for the public IPv4 CIDRs that you own and bring to Amazon Web Services to manage with IPAM. IPv6 addresses you bring to Amazon Web Services, however, use IPAM pools only. To monitor the status of pool creation, use DescribePublicIpv4Pools.

This is the response object from the CreatePublicIpv4Pool operation.

Container for the parameters to the CreateReplaceRootVolumeTask operation. Replaces the EBS-backed root volume for a running instance with a new volume that is restored to the original root volume's launch state, that is restored to a specific snapshot taken from the original root volume, or that is restored from an AMI that has the same key characteristics as that of the instance.

For more information, see Replace a root volume in the Amazon EC2 User Guide.

This is the response object from the CreateReplaceRootVolumeTask operation.

Container for the parameters to the CreateReservedInstancesListing operation. Creates a listing for Amazon EC2 Standard Reserved Instances to be sold in the Reserved Instance Marketplace. You can submit one Standard Reserved Instance listing at a time. To get a list of your Standard Reserved Instances, you can use the DescribeReservedInstances operation.

Only Standard Reserved Instances can be sold in the Reserved Instance Marketplace. Convertible Reserved Instances cannot be sold.

The Reserved Instance Marketplace matches sellers who want to resell Standard Reserved Instance capacity that they no longer need with buyers who want to purchase additional capacity. Reserved Instances bought and sold through the Reserved Instance Marketplace work like any other Reserved Instances.

To sell your Standard Reserved Instances, you must first register as a seller in the Reserved Instance Marketplace. After completing the registration process, you can create a Reserved Instance Marketplace listing of some or all of your Standard Reserved Instances, and specify the upfront price to receive for them. Your Standard Reserved Instance listings then become available for purchase. To view the details of your Standard Reserved Instance listing, you can use the DescribeReservedInstancesListings operation.

For more information, see Sell in the Reserved Instance Marketplace in the Amazon EC2 User Guide.

Contains the output of CreateReservedInstancesListing.

Container for the parameters to the CreateRestoreImageTask operation. Starts a task that restores an AMI from an Amazon S3 object that was previously created by using CreateStoreImageTask.

To use this API, you must have the required permissions. For more information, see Permissions for storing and restoring AMIs using Amazon S3 in the Amazon EC2 User Guide.

For more information, see Store and restore an AMI using Amazon S3 in the Amazon EC2 User Guide.

This is the response object from the CreateRestoreImageTask operation.

Container for the parameters to the CreateRoute operation. Creates a route in a route table within a VPC.

You must specify either a destination CIDR block or a prefix list ID. You must also specify exactly one of the resources from the parameter list.

When determining how to route traffic, we use the route with the most specific match. For example, traffic is destined for the IPv4 address 192.0.2.3, and the route table includes the following two IPv4 routes:

• 192.0.2.0/24 (goes to some target A)

• 192.0.2.0/28 (goes to some target B)

Both routes apply to the traffic destined for 192.0.2.3. However, the second route in the list covers a smaller number of IP addresses and is therefore more specific, so we use that route to determine where to target the traffic.

For more information about route tables, see Route tables in the Amazon VPC User Guide.

This is the response object from the CreateRoute operation.

Container for the parameters to the CreateRouteTable operation. Creates a route table for the specified VPC. After you create a route table, you can add routes and associate the table with a subnet.

For more information, see Route tables in the Amazon VPC User Guide.

This is the response object from the CreateRouteTable operation.

Container for the parameters to the CreateSecurityGroup operation. Creates a security group.

A security group acts as a virtual firewall for your instance to control inbound and outbound traffic. For more information, see Amazon EC2 security groups in the Amazon Elastic Compute Cloud User Guide and Security groups for your VPC in the Amazon Virtual Private Cloud User Guide.

When you create a security group, you specify a friendly name of your choice. You can't have two security groups for the same VPC with the same name.

You have a default security group for use in your VPC. If you don't specify a security group when you launch an instance, the instance is launched into the appropriate default security group. A default security group includes a default rule that grants instances unrestricted network access to each other.

You can add or remove rules from your security groups using AuthorizeSecurityGroupIngress, AuthorizeSecurityGroupEgress, RevokeSecurityGroupIngress, and RevokeSecurityGroupEgress.

For more information about VPC security group limits, see Amazon VPC Limits.

This is the response object from the CreateSecurityGroup operation.

Container for the parameters to the CreateSnapshot operation. Creates a snapshot of an EBS volume and stores it in Amazon S3. You can use snapshots for backups, to make copies of EBS volumes, and to save data before shutting down an instance.

You can create snapshots of volumes in a Region and volumes on an Outpost. If you create a snapshot of a volume in a Region, the snapshot must be stored in the same Region as the volume. If you create a snapshot of a volume on an Outpost, the snapshot can be stored on the same Outpost as the volume, or in the Region for that Outpost.

When a snapshot is created, any Amazon Web Services Marketplace product codes that are associated with the source volume are propagated to the snapshot.

You can take a snapshot of an attached volume that is in use. However, snapshots only capture data that has been written to your Amazon EBS volume at the time the snapshot command is issued; this might exclude any data that has been cached by any applications or the operating system. If you can pause any file systems on the volume long enough to take a snapshot, your snapshot should be complete. However, if you cannot pause all file writes to the volume, you should unmount the volume from within the instance, issue the snapshot command, and then remount the volume to ensure a consistent and complete snapshot. You may remount and use your volume while the snapshot status is pending.

When you create a snapshot for an EBS volume that serves as a root device, we recommend that you stop the instance before taking the snapshot.

Snapshots that are taken from encrypted volumes are automatically encrypted. Volumes that are created from encrypted snapshots are also automatically encrypted. Your encrypted volumes and any associated snapshots always remain protected.

You can tag your snapshots during creation. For more information, see Tag your Amazon EC2 resources in the Amazon EC2 User Guide.

For more information, see Amazon EBS and Amazon EBS encryption in the Amazon EBS User Guide.

Contains the response data from the CreateSnapshot operation.

Container for the parameters to the CreateSnapshots operation. Creates crash-consistent snapshots of multiple EBS volumes and stores the data in S3. Volumes are chosen by specifying an instance. Any attached volumes will produce one snapshot each that is crash-consistent across the instance.

You can include all of the volumes currently attached to the instance, or you can exclude the root volume or specific data (non-root) volumes from the multi-volume snapshot set.

You can create multi-volume snapshots of instances in a Region and instances on an Outpost. If you create snapshots from an instance in a Region, the snapshots must be stored in the same Region as the instance. If you create snapshots from an instance on an Outpost, the snapshots can be stored on the same Outpost as the instance, or in the Region for that Outpost.

This is the response object from the CreateSnapshots operation.

Container for the parameters to the CreateSpotDatafeedSubscription operation. Creates a data feed for Spot Instances, enabling you to view Spot Instance usage logs. You can create one data feed per Amazon Web Services account. For more information, see Spot Instance data feed in the Amazon EC2 User Guide.

Contains the output of CreateSpotDatafeedSubscription.

Container for the parameters to the CreateStoreImageTask operation. Stores an AMI as a single object in an Amazon S3 bucket.

To use this API, you must have the required permissions. For more information, see Permissions for storing and restoring AMIs using Amazon S3 in the Amazon EC2 User Guide.

For more information, see Store and restore an AMI using Amazon S3 in the Amazon EC2 User Guide.

This is the response object from the CreateStoreImageTask operation.

Container for the parameters to the CreateSubnetCidrReservation operation. Creates a subnet CIDR reservation. For more information, see Subnet CIDR reservations in the Amazon VPC User Guide and Manage prefixes for your network interfaces in the Amazon EC2 User Guide.

This is the response object from the CreateSubnetCidrReservation operation.

Container for the parameters to the CreateSubnet operation. Creates a subnet in the specified VPC. For an IPv4 only subnet, specify an IPv4 CIDR block. If the VPC has an IPv6 CIDR block, you can create an IPv6 only subnet or a dual stack subnet instead. For an IPv6 only subnet, specify an IPv6 CIDR block. For a dual stack subnet, specify both an IPv4 CIDR block and an IPv6 CIDR block.

A subnet CIDR block must not overlap the CIDR block of an existing subnet in the VPC. After you create a subnet, you can't change its CIDR block.

The allowed size for an IPv4 subnet is between a /28 netmask (16 IP addresses) and a /16 netmask (65,536 IP addresses). Amazon Web Services reserves both the first four and the last IPv4 address in each subnet's CIDR block. They're not available for your use.

If you've associated an IPv6 CIDR block with your VPC, you can associate an IPv6 CIDR block with a subnet when you create it.

If you add more than one subnet to a VPC, they're set up in a star topology with a logical router in the middle.

When you stop an instance in a subnet, it retains its private IPv4 address. It's therefore possible to have a subnet with no running instances (they're all stopped), but no remaining IP addresses available.

For more information, see Subnets in the Amazon VPC User Guide.

This is the response object from the CreateSubnet operation.

Container for the parameters to the CreateTags operation. Adds or overwrites only the specified tags for the specified Amazon EC2 resource or resources. When you specify an existing tag key, the value is overwritten with the new value. Each resource can have a maximum of 50 tags. Each tag consists of a key and optional value. Tag keys must be unique per resource.

For more information about tags, see Tag your Amazon EC2 resources in the Amazon Elastic Compute Cloud User Guide. For more information about creating IAM policies that control users' access to resources based on tags, see Supported resource-level permissions for Amazon EC2 API actions in the Amazon Elastic Compute Cloud User Guide.

This is the response object from the CreateTags operation.

Container for the parameters to the CreateTrafficMirrorFilter operation. Creates a Traffic Mirror filter.

A Traffic Mirror filter is a set of rules that defines the traffic to mirror.

By default, no traffic is mirrored. To mirror traffic, use CreateTrafficMirrorFilterRule to add Traffic Mirror rules to the filter. The rules you add define what traffic gets mirrored. You can also use ModifyTrafficMirrorFilterNetworkServices to mirror supported network services.

This is the response object from the CreateTrafficMirrorFilter operation.

Container for the parameters to the CreateTrafficMirrorFilterRule operation. Creates a Traffic Mirror filter rule.

A Traffic Mirror rule defines the Traffic Mirror source traffic to mirror.

You need the Traffic Mirror filter ID when you create the rule.

This is the response object from the CreateTrafficMirrorFilterRule operation.

Container for the parameters to the CreateTrafficMirrorSession operation. Creates a Traffic Mirror session.

A Traffic Mirror session actively copies packets from a Traffic Mirror source to a Traffic Mirror target. Create a filter, and then assign it to the session to define a subset of the traffic to mirror, for example all TCP traffic.

The Traffic Mirror source and the Traffic Mirror target (monitoring appliances) can be in the same VPC, or in a different VPC connected via VPC peering or a transit gateway.

By default, no traffic is mirrored. Use CreateTrafficMirrorFilter to create filter rules that specify the traffic to mirror.

This is the response object from the CreateTrafficMirrorSession operation.

Container for the parameters to the CreateTrafficMirrorTarget operation. Creates a target for your Traffic Mirror session.

A Traffic Mirror target is the destination for mirrored traffic. The Traffic Mirror source and the Traffic Mirror target (monitoring appliances) can be in the same VPC, or in different VPCs connected via VPC peering or a transit gateway.

A Traffic Mirror target can be a network interface, a Network Load Balancer, or a Gateway Load Balancer endpoint.

To use the target in a Traffic Mirror session, use CreateTrafficMirrorSession.

This is the response object from the CreateTrafficMirrorTarget operation.

Container for the parameters to the CreateTransitGatewayConnectPeer operation. Creates a Connect peer for a specified transit gateway Connect attachment between a transit gateway and an appliance.

The peer address and transit gateway address must be the same IP address family (IPv4 or IPv6).

For more information, see Connect peers in the Amazon Web Services Transit Gateways Guide.

This is the response object from the CreateTransitGatewayConnectPeer operation.

Container for the parameters to the CreateTransitGatewayConnect operation. Creates a Connect attachment from a specified transit gateway attachment. A Connect attachment is a GRE-based tunnel attachment that you can use to establish a connection between a transit gateway and an appliance.

A Connect attachment uses an existing VPC or Amazon Web Services Direct Connect attachment as the underlying transport mechanism.

The options for a Connect attachment.

This is the response object from the CreateTransitGatewayConnect operation.

Container for the parameters to the CreateTransitGatewayMulticastDomain operation. Creates a multicast domain using the specified transit gateway.

The transit gateway must be in the available state before you create a domain. Use DescribeTransitGateways to see the state of transit gateway.

The options for the transit gateway multicast domain.

This is the response object from the CreateTransitGatewayMulticastDomain operation.

Container for the parameters to the CreateTransitGatewayPeeringAttachment operation. Requests a transit gateway peering attachment between the specified transit gateway (requester) and a peer transit gateway (accepter). The peer transit gateway can be in your account or a different Amazon Web Services account.

After you create the peering attachment, the owner of the accepter transit gateway must accept the attachment request.

Describes whether dynamic routing is enabled or disabled for the transit gateway peering request.

This is the response object from the CreateTransitGatewayPeeringAttachment operation.

Container for the parameters to the CreateTransitGatewayPolicyTable operation. Creates a transit gateway policy table.

This is the response object from the CreateTransitGatewayPolicyTable operation.

Container for the parameters to the CreateTransitGatewayPrefixListReference operation. Creates a reference (route) to a prefix list in a specified transit gateway route table.

This is the response object from the CreateTransitGatewayPrefixListReference operation.

Container for the parameters to the CreateTransitGateway operation. Creates a transit gateway.

You can use a transit gateway to interconnect your virtual private clouds (VPC) and on-premises networks. After the transit gateway enters the available state, you can attach your VPCs and VPN connections to the transit gateway.

To attach your VPCs, use CreateTransitGatewayVpcAttachment.

To attach a VPN connection, use CreateCustomerGateway to create a customer gateway and specify the ID of the customer gateway and the ID of the transit gateway in a call to CreateVpnConnection.

When you create a transit gateway, we create a default transit gateway route table and use it as the default association route table and the default propagation route table. You can use CreateTransitGatewayRouteTable to create additional transit gateway route tables. If you disable automatic route propagation, we do not create a default transit gateway route table. You can use EnableTransitGatewayRouteTablePropagation to propagate routes from a resource attachment to a transit gateway route table. If you disable automatic associations, you can use AssociateTransitGatewayRouteTable to associate a resource attachment with a transit gateway route table.

This is the response object from the CreateTransitGateway operation.

Container for the parameters to the CreateTransitGatewayRoute operation. Creates a static route for the specified transit gateway route table.

This is the response object from the CreateTransitGatewayRoute operation.

Container for the parameters to the CreateTransitGatewayRouteTableAnnouncement operation. Advertises a new transit gateway route table.

This is the response object from the CreateTransitGatewayRouteTableAnnouncement operation.

Container for the parameters to the CreateTransitGatewayRouteTable operation. Creates a route table for the specified transit gateway.

This is the response object from the CreateTransitGatewayRouteTable operation.

Container for the parameters to the CreateTransitGatewayVpcAttachment operation. Attaches the specified VPC to the specified transit gateway.

If you attach a VPC with a CIDR range that overlaps the CIDR range of a VPC that is already attached, the new VPC CIDR range is not propagated to the default propagation route table.

To send VPC traffic to an attached transit gateway, add a route to the VPC route table using CreateRoute.

Describes the options for a VPC attachment.

This is the response object from the CreateTransitGatewayVpcAttachment operation.

Describes the network interface options when creating an Amazon Web Services Verified Access endpoint using the network-interface type.

Describes the load balancer options when creating an Amazon Web Services Verified Access endpoint using the load-balancer type.

Container for the parameters to the CreateVerifiedAccessEndpoint operation. An Amazon Web Services Verified Access endpoint is where you define your application along with an optional endpoint-level access policy.

This is the response object from the CreateVerifiedAccessEndpoint operation.

Container for the parameters to the CreateVerifiedAccessGroup operation. An Amazon Web Services Verified Access group is a collection of Amazon Web Services Verified Access endpoints who's associated applications have similar security requirements. Each instance within a Verified Access group shares an Verified Access policy. For example, you can group all Verified Access instances associated with "sales" applications together and use one common Verified Access policy.

This is the response object from the CreateVerifiedAccessGroup operation.

Container for the parameters to the CreateVerifiedAccessInstance operation. An Amazon Web Services Verified Access instance is a regional entity that evaluates application requests and grants access only when your security requirements are met.

This is the response object from the CreateVerifiedAccessInstance operation.

Describes the options when creating an Amazon Web Services Verified Access trust provider using the device type.

Describes the options when creating an Amazon Web Services Verified Access trust provider using the user type.

Container for the parameters to the CreateVerifiedAccessTrustProvider operation. A trust provider is a third-party entity that creates, maintains, and manages identity information for users and devices. When an application request is made, the identity information sent by the trust provider is evaluated by Verified Access before allowing or denying the application request.

This is the response object from the CreateVerifiedAccessTrustProvider operation.

Describes the user or group to be added or removed from the list of create volume permissions for a volume.

Describes modifications to the list of create volume permissions for a volume.

Container for the parameters to the CreateVolume operation. Creates an EBS volume that can be attached to an instance in the same Availability Zone.

You can create a new empty volume or restore a volume from an EBS snapshot. Any Amazon Web Services Marketplace product codes from the snapshot are propagated to the volume.

You can create encrypted volumes. Encrypted volumes must be attached to instances that support Amazon EBS encryption. Volumes that are created from encrypted snapshots are also automatically encrypted. For more information, see Amazon EBS encryption in the Amazon EBS User Guide.

You can tag your volumes during creation. For more information, see Tag your Amazon EC2 resources in the Amazon EC2 User Guide.

For more information, see Create an Amazon EBS volume in the Amazon EBS User Guide.

Contains the response data from the CreateVolume operation.

Container for the parameters to the CreateVpcEndpointConnectionNotification operation. Creates a connection notification for a specified VPC endpoint or VPC endpoint service. A connection notification notifies you of specific endpoint events. You must create an SNS topic to receive notifications. For more information, see Creating an Amazon SNS topic in the Amazon SNS Developer Guide.

You can create a connection notification for interface endpoints only.

This is the response object from the CreateVpcEndpointConnectionNotification operation.

Container for the parameters to the CreateVpcEndpoint operation. Creates a VPC endpoint. A VPC endpoint provides a private connection between the specified VPC and the specified endpoint service. You can use an endpoint service provided by Amazon Web Services, an Amazon Web Services Marketplace Partner, or another Amazon Web Services account. For more information, see the Amazon Web Services PrivateLink User Guide.

This is the response object from the CreateVpcEndpoint operation.

Container for the parameters to the CreateVpcEndpointServiceConfiguration operation. Creates a VPC endpoint service to which service consumers (Amazon Web Services accounts, users, and IAM roles) can connect.

Before you create an endpoint service, you must create one of the following for your service:

• A Network Load Balancer. Service consumers connect to your service using an interface endpoint.

• A Gateway Load Balancer. Service consumers connect to your service using a Gateway Load Balancer endpoint.

If you set the private DNS name, you must prove that you own the private DNS domain name.

For more information, see the Amazon Web Services PrivateLink Guide.

This is the response object from the CreateVpcEndpointServiceConfiguration operation.

Container for the parameters to the CreateVpcPeeringConnection operation. Requests a VPC peering connection between two VPCs: a requester VPC that you own and an accepter VPC with which to create the connection. The accepter VPC can belong to another Amazon Web Services account and can be in a different Region to the requester VPC. The requester VPC and accepter VPC cannot have overlapping CIDR blocks.

Limitations and rules apply to a VPC peering connection. For more information, see the VPC peering limitations in the VPC Peering Guide.

The owner of the accepter VPC must accept the peering request to activate the peering connection. The VPC peering connection request expires after 7 days, after which it cannot be accepted or rejected.

If you create a VPC peering connection request between VPCs with overlapping CIDR blocks, the VPC peering connection has a status of failed.

This is the response object from the CreateVpcPeeringConnection operation.

Container for the parameters to the CreateVpc operation. Creates a VPC with the specified CIDR blocks. For more information, see IP addressing for your VPCs and subnets in the Amazon VPC User Guide.

You can optionally request an IPv6 CIDR block for the VPC. You can request an Amazon-provided IPv6 CIDR block from Amazon's pool of IPv6 addresses or an IPv6 CIDR block from an IPv6 address pool that you provisioned through bring your own IP addresses (BYOIP).

By default, each instance that you launch in the VPC has the default DHCP options, which include only a default DNS server that we provide (AmazonProvidedDNS). For more information, see DHCP option sets in the Amazon VPC User Guide.

You can specify the instance tenancy value for the VPC when you create it. You can't change this value for the VPC after you create it. For more information, see Dedicated Instances in the Amazon EC2 User Guide.

This is the response object from the CreateVpc operation.

Container for the parameters to the CreateVpnConnection operation. Creates a VPN connection between an existing virtual private gateway or transit gateway and a customer gateway. The supported connection type is ipsec.1.

The response includes information that you need to give to your network administrator to configure your customer gateway.

If you decide to shut down your VPN connection for any reason and later create a new VPN connection, you must reconfigure your customer gateway with the new information returned from this call.

This is an idempotent operation. If you perform the operation more than once, Amazon EC2 doesn't return an error.

For more information, see Amazon Web Services Site-to-Site VPN in the Amazon Web Services Site-to-Site VPN User Guide.

Contains the output of CreateVpnConnection.

Container for the parameters to the CreateVpnConnectionRoute operation. Creates a static route associated with a VPN connection between an existing virtual private gateway and a VPN customer gateway. The static route allows traffic to be routed from the virtual private gateway to the VPN customer gateway.

For more information, see Amazon Web Services Site-to-Site VPN in the Amazon Web Services Site-to-Site VPN User Guide.

This is the response object from the CreateVpnConnectionRoute operation.

Container for the parameters to the CreateVpnGateway operation. Creates a virtual private gateway. A virtual private gateway is the endpoint on the VPC side of your VPN connection. You can create a virtual private gateway before creating the VPC itself.

For more information, see Amazon Web Services Site-to-Site VPN in the Amazon Web Services Site-to-Site VPN User Guide.

Contains the output of CreateVpnGateway.

Describes the credit option for CPU usage of a T instance.

The credit option for CPU usage of a T instance.

Describes a customer gateway.

A query used for retrieving network health data.

The response to a DataQuery.

Container for the parameters to the DeleteCarrierGateway operation. Deletes a carrier gateway.

If you do not delete the route that contains the carrier gateway as the Target, the route is a blackhole route. For information about how to delete a route, see DeleteRoute.

This is the response object from the DeleteCarrierGateway operation.

Container for the parameters to the DeleteClientVpnEndpoint operation. Deletes the specified Client VPN endpoint. You must disassociate all target networks before you can delete a Client VPN endpoint.

This is the response object from the DeleteClientVpnEndpoint operation.

Container for the parameters to the DeleteClientVpnRoute operation. Deletes a route from a Client VPN endpoint. You can only delete routes that you manually added using the CreateClientVpnRoute action. You cannot delete routes that were automatically added when associating a subnet. To remove routes that have been automatically added, disassociate the target subnet from the Client VPN endpoint.

This is the response object from the DeleteClientVpnRoute operation.

Container for the parameters to the DeleteCoipCidr operation. Deletes a range of customer-owned IP addresses.

This is the response object from the DeleteCoipCidr operation.

Container for the parameters to the DeleteCoipPool operation. Deletes a pool of customer-owned IP (CoIP) addresses.

This is the response object from the DeleteCoipPool operation.

Container for the parameters to the DeleteCustomerGateway operation. Deletes the specified customer gateway. You must delete the VPN connection before you can delete the customer gateway.

This is the response object from the DeleteCustomerGateway operation.

Container for the parameters to the DeleteDhcpOptions operation. Deletes the specified set of DHCP options. You must disassociate the set of DHCP options before you can delete it. You can disassociate the set of DHCP options by associating either a new set of options or the default set of options with the VPC.

This is the response object from the DeleteDhcpOptions operation.

Container for the parameters to the DeleteEgressOnlyInternetGateway operation. Deletes an egress-only internet gateway.

This is the response object from the DeleteEgressOnlyInternetGateway operation.

Describes an EC2 Fleet error.

Describes an EC2 Fleet that was not successfully deleted.

Container for the parameters to the DeleteFleets operation. Deletes the specified EC2 Fleets.

After you delete an EC2 Fleet, it launches no new instances.

You must also specify whether a deleted EC2 Fleet should terminate its instances. If you choose to terminate the instances, the EC2 Fleet enters the deleted_terminating state. Otherwise, the EC2 Fleet enters the deleted_running state, and the instances continue to run until they are interrupted or you terminate them manually.

For instant fleets, EC2 Fleet must terminate the instances when the fleet is deleted. Up to 1000 instances can be terminated in a single request to delete instant fleets. A deleted instant fleet with running instances is not supported.

Restrictions

• You can delete up to 25 fleets of type instant in a single request.

• You can delete up to 100 fleets of type maintain or request in a single request.

• You can delete up to 125 fleets in a single request, provided you do not exceed the quota for each fleet type, as specified above.

• If you exceed the specified number of fleets to delete, no fleets are deleted.

For more information, see Delete an EC2 Fleet in the Amazon EC2 User Guide.

This is the response object from the DeleteFleets operation.

Describes an EC2 Fleet that was successfully deleted.

Container for the parameters to the DeleteFlowLogs operation. Deletes one or more flow logs.

This is the response object from the DeleteFlowLogs operation.

Container for the parameters to the DeleteFpgaImage operation. Deletes the specified Amazon FPGA Image (AFI).

This is the response object from the DeleteFpgaImage operation.

Container for the parameters to the DeleteInstanceConnectEndpoint operation. Deletes the specified EC2 Instance Connect Endpoint.

This is the response object from the DeleteInstanceConnectEndpoint operation.

Container for the parameters to the DeleteInstanceEventWindow operation. Deletes the specified event window.

For more information, see Define event windows for scheduled events in the Amazon EC2 User Guide.

This is the response object from the DeleteInstanceEventWindow operation.

Container for the parameters to the DeleteInternetGateway operation. Deletes the specified internet gateway. You must detach the internet gateway from the VPC before you can delete it.

This is the response object from the DeleteInternetGateway operation.

Container for the parameters to the DeleteIpamExternalResourceVerificationToken operation. Delete a verification token. A verification token is an Amazon Web Services-generated random value that you can use to prove ownership of an external resource. For example, you can use a verification token to validate that you control a public IP address range when you bring an IP address range to Amazon Web Services (BYOIP).

This is the response object from the DeleteIpamExternalResourceVerificationToken operation.

Container for the parameters to the DeleteIpamPool operation. Delete an IPAM pool.

You cannot delete an IPAM pool if there are allocations in it or CIDRs provisioned to it. To release allocations, see ReleaseIpamPoolAllocation. To deprovision pool CIDRs, see DeprovisionIpamPoolCidr.

For more information, see Delete a pool in the Amazon VPC IPAM User Guide.

This is the response object from the DeleteIpamPool operation.

Container for the parameters to the DeleteIpam operation. Delete an IPAM. Deleting an IPAM removes all monitored data associated with the IPAM including the historical data for CIDRs.

For more information, see Delete an IPAM in the Amazon VPC IPAM User Guide.

Container for the parameters to the DeleteIpamResourceDiscovery operation. Deletes an IPAM resource discovery. A resource discovery is an IPAM component that enables IPAM to manage and monitor resources that belong to the owning account.

This is the response object from the DeleteIpamResourceDiscovery operation.

This is the response object from the DeleteIpam operation.

Container for the parameters to the DeleteIpamScope operation. Delete the scope for an IPAM. You cannot delete the default scopes.

For more information, see Delete a scope in the Amazon VPC IPAM User Guide.

This is the response object from the DeleteIpamScope operation.

Container for the parameters to the DeleteKeyPair operation. Deletes the specified key pair, by removing the public key from Amazon EC2.

This is the response object from the DeleteKeyPair operation.

Container for the parameters to the DeleteLaunchTemplate operation. Deletes a launch template. Deleting a launch template deletes all of its versions.

This is the response object from the DeleteLaunchTemplate operation.

Container for the parameters to the DeleteLaunchTemplateVersions operation. Deletes one or more versions of a launch template.

You can't delete the default version of a launch template; you must first assign a different version as the default. If the default version is the only version for the launch template, you must delete the entire launch template using DeleteLaunchTemplate.

You can delete up to 200 launch template versions in a single request. To delete more than 200 versions in a single request, use DeleteLaunchTemplate, which deletes the launch template and all of its versions.

For more information, see Delete a launch template version in the Amazon EC2 User Guide.

This is the response object from the DeleteLaunchTemplateVersions operation.

Describes a launch template version that could not be deleted.

Describes a launch template version that was successfully deleted.

Container for the parameters to the DeleteLocalGatewayRoute operation. Deletes the specified route from the specified local gateway route table.

This is the response object from the DeleteLocalGatewayRoute operation.

Container for the parameters to the DeleteLocalGatewayRouteTable operation. Deletes a local gateway route table.

This is the response object from the DeleteLocalGatewayRouteTable operation.

Container for the parameters to the DeleteLocalGatewayRouteTableVirtualInterfaceGroupAssociation operation. Deletes a local gateway route table virtual interface group association.

This is the response object from the DeleteLocalGatewayRouteTableVirtualInterfaceGroupAssociation operation.

Container for the parameters to the DeleteLocalGatewayRouteTableVpcAssociation operation. Deletes the specified association between a VPC and local gateway route table.

This is the response object from the DeleteLocalGatewayRouteTableVpcAssociation operation.

Container for the parameters to the DeleteManagedPrefixList operation. Deletes the specified managed prefix list. You must first remove all references to the prefix list in your resources.

This is the response object from the DeleteManagedPrefixList operation.

Container for the parameters to the DeleteNatGateway operation. Deletes the specified NAT gateway. Deleting a public NAT gateway disassociates its Elastic IP address, but does not release the address from your account. Deleting a NAT gateway does not delete any NAT gateway routes in your route tables.

This is the response object from the DeleteNatGateway operation.

Container for the parameters to the DeleteNetworkAclEntry operation. Deletes the specified ingress or egress entry (rule) from the specified network ACL.

This is the response object from the DeleteNetworkAclEntry operation.

Container for the parameters to the DeleteNetworkAcl operation. Deletes the specified network ACL. You can't delete the ACL if it's associated with any subnets. You can't delete the default network ACL.

This is the response object from the DeleteNetworkAcl operation.

Container for the parameters to the DeleteNetworkInsightsAccessScopeAnalysis operation. Deletes the specified Network Access Scope analysis.

This is the response object from the DeleteNetworkInsightsAccessScopeAnalysis operation.

Container for the parameters to the DeleteNetworkInsightsAccessScope operation. Deletes the specified Network Access Scope.

This is the response object from the DeleteNetworkInsightsAccessScope operation.

Container for the parameters to the DeleteNetworkInsightsAnalysis operation. Deletes the specified network insights analysis.

This is the response object from the DeleteNetworkInsightsAnalysis operation.

Container for the parameters to the DeleteNetworkInsightsPath operation. Deletes the specified path.

This is the response object from the DeleteNetworkInsightsPath operation.

Container for the parameters to the DeleteNetworkInterfacePermission operation. Deletes a permission for a network interface. By default, you cannot delete the permission if the account for which you're removing the permission has attached the network interface to an instance. However, you can force delete the permission, regardless of any attachment.

Contains the output for DeleteNetworkInterfacePermission.

Container for the parameters to the DeleteNetworkInterface operation. Deletes the specified network interface. You must detach the network interface before you can delete it.

This is the response object from the DeleteNetworkInterface operation.

Container for the parameters to the DeletePlacementGroup operation. Deletes the specified placement group. You must terminate all instances in the placement group before you can delete the placement group. For more information, see Placement groups in the Amazon EC2 User Guide.

This is the response object from the DeletePlacementGroup operation.

Container for the parameters to the DeletePublicIpv4Pool operation. Delete a public IPv4 pool. A public IPv4 pool is an EC2 IP address pool required for the public IPv4 CIDRs that you own and bring to Amazon Web Services to manage with IPAM. IPv6 addresses you bring to Amazon Web Services, however, use IPAM pools only.

This is the response object from the DeletePublicIpv4Pool operation.

Describes the error for a Reserved Instance whose queued purchase could not be deleted.

Container for the parameters to the DeleteQueuedReservedInstances operation. Deletes the queued purchases for the specified Reserved Instances.

This is the response object from the DeleteQueuedReservedInstances operation.

Container for the parameters to the DeleteRoute operation. Deletes the specified route from the specified route table.

This is the response object from the DeleteRoute operation.

Container for the parameters to the DeleteRouteTable operation. Deletes the specified route table. You must disassociate the route table from any subnets before you can delete it. You can't delete the main route table.

This is the response object from the DeleteRouteTable operation.

Container for the parameters to the DeleteSecurityGroup operation. Deletes a security group.

If you attempt to delete a security group that is associated with an instance or network interface, is referenced by another security group in the same VPC, or has a VPC association, the operation fails with DependencyViolation.

This is the response object from the DeleteSecurityGroup operation.

Container for the parameters to the DeleteSnapshot operation. Deletes the specified snapshot.

When you make periodic snapshots of a volume, the snapshots are incremental, and only the blocks on the device that have changed since your last snapshot are saved in the new snapshot. When you delete a snapshot, only the data not needed for any other snapshot is removed. So regardless of which prior snapshots have been deleted, all active snapshots will have access to all the information needed to restore the volume.

You cannot delete a snapshot of the root device of an EBS volume used by a registered AMI. You must first de-register the AMI before you can delete the snapshot.

For more information, see Delete an Amazon EBS snapshot in the Amazon EBS User Guide.

This is the response object from the DeleteSnapshot operation.

Container for the parameters to the DeleteSpotDatafeedSubscription operation. Deletes the data feed for Spot Instances.

This is the response object from the DeleteSpotDatafeedSubscription operation.

Container for the parameters to the DeleteSubnetCidrReservation operation. Deletes a subnet CIDR reservation.

This is the response object from the DeleteSubnetCidrReservation operation.

Container for the parameters to the DeleteSubnet operation. Deletes the specified subnet. You must terminate all running instances in the subnet before you can delete the subnet.

This is the response object from the DeleteSubnet operation.

Container for the parameters to the DeleteTags operation. Deletes the specified set of tags from the specified set of resources.

To list the current tags, use DescribeTags. For more information about tags, see Tag your Amazon EC2 resources in the Amazon Elastic Compute Cloud User Guide.

This is the response object from the DeleteTags operation.

Container for the parameters to the DeleteTrafficMirrorFilter operation. Deletes the specified Traffic Mirror filter.

You cannot delete a Traffic Mirror filter that is in use by a Traffic Mirror session.

This is the response object from the DeleteTrafficMirrorFilter operation.

Container for the parameters to the DeleteTrafficMirrorFilterRule operation. Deletes the specified Traffic Mirror rule.

This is the response object from the DeleteTrafficMirrorFilterRule operation.

Container for the parameters to the DeleteTrafficMirrorSession operation. Deletes the specified Traffic Mirror session.

This is the response object from the DeleteTrafficMirrorSession operation.

Container for the parameters to the DeleteTrafficMirrorTarget operation. Deletes the specified Traffic Mirror target.

You cannot delete a Traffic Mirror target that is in use by a Traffic Mirror session.

This is the response object from the DeleteTrafficMirrorTarget operation.

Container for the parameters to the DeleteTransitGatewayConnectPeer operation. Deletes the specified Connect peer.

This is the response object from the DeleteTransitGatewayConnectPeer operation.

Container for the parameters to the DeleteTransitGatewayConnect operation. Deletes the specified Connect attachment. You must first delete any Connect peers for the attachment.

This is the response object from the DeleteTransitGatewayConnect operation.

Container for the parameters to the DeleteTransitGatewayMulticastDomain operation. Deletes the specified transit gateway multicast domain.

This is the response object from the DeleteTransitGatewayMulticastDomain operation.

Container for the parameters to the DeleteTransitGatewayPeeringAttachment operation. Deletes a transit gateway peering attachment.

This is the response object from the DeleteTransitGatewayPeeringAttachment operation.

Container for the parameters to the DeleteTransitGatewayPolicyTable operation. Deletes the specified transit gateway policy table.

This is the response object from the DeleteTransitGatewayPolicyTable operation.

Container for the parameters to the DeleteTransitGatewayPrefixListReference operation. Deletes a reference (route) to a prefix list in a specified transit gateway route table.

This is the response object from the DeleteTransitGatewayPrefixListReference operation.

Container for the parameters to the DeleteTransitGateway operation. Deletes the specified transit gateway.

This is the response object from the DeleteTransitGateway operation.

Container for the parameters to the DeleteTransitGatewayRoute operation. Deletes the specified route from the specified transit gateway route table.

This is the response object from the DeleteTransitGatewayRoute operation.

Container for the parameters to the DeleteTransitGatewayRouteTableAnnouncement operation. Advertises to the transit gateway that a transit gateway route table is deleted.

This is the response object from the DeleteTransitGatewayRouteTableAnnouncement operation.

Container for the parameters to the DeleteTransitGatewayRouteTable operation. Deletes the specified transit gateway route table. If there are any route tables associated with the transit gateway route table, you must first run DisassociateRouteTable before you can delete the transit gateway route table. This removes any route tables associated with the transit gateway route table.

This is the response object from the DeleteTransitGatewayRouteTable operation.

Container for the parameters to the DeleteTransitGatewayVpcAttachment operation. Deletes the specified VPC attachment.

This is the response object from the DeleteTransitGatewayVpcAttachment operation.

Container for the parameters to the DeleteVerifiedAccessEndpoint operation. Delete an Amazon Web Services Verified Access endpoint.

This is the response object from the DeleteVerifiedAccessEndpoint operation.

Container for the parameters to the DeleteVerifiedAccessGroup operation. Delete an Amazon Web Services Verified Access group.

This is the response object from the DeleteVerifiedAccessGroup operation.

Container for the parameters to the DeleteVerifiedAccessInstance operation. Delete an Amazon Web Services Verified Access instance.

This is the response object from the DeleteVerifiedAccessInstance operation.

Container for the parameters to the DeleteVerifiedAccessTrustProvider operation. Delete an Amazon Web Services Verified Access trust provider.

This is the response object from the DeleteVerifiedAccessTrustProvider operation.

Container for the parameters to the DeleteVolume operation. Deletes the specified EBS volume. The volume must be in the available state (not attached to an instance).

The volume can remain in the deleting state for several minutes.

For more information, see Delete an Amazon EBS volume in the Amazon EBS User Guide.

This is the response object from the DeleteVolume operation.

Container for the parameters to the DeleteVpcEndpointConnectionNotifications operation. Deletes the specified VPC endpoint connection notifications.

This is the response object from the DeleteVpcEndpointConnectionNotifications operation.

Container for the parameters to the DeleteVpcEndpointServiceConfigurations operation. Deletes the specified VPC endpoint service configurations. Before you can delete an endpoint service configuration, you must reject any Available or PendingAcceptance interface endpoint connections that are attached to the service.

This is the response object from the DeleteVpcEndpointServiceConfigurations operation.

Container for the parameters to the DeleteVpcEndpoints operation. Deletes the specified VPC endpoints.

When you delete a gateway endpoint, we delete the endpoint routes in the route tables for the endpoint.

When you delete a Gateway Load Balancer endpoint, we delete its endpoint network interfaces. You can only delete Gateway Load Balancer endpoints when the routes that are associated with the endpoint are deleted.

When you delete an interface endpoint, we delete its endpoint network interfaces.

This is the response object from the DeleteVpcEndpoints operation.

Container for the parameters to the DeleteVpcPeeringConnection operation. Deletes a VPC peering connection. Either the owner of the requester VPC or the owner of the accepter VPC can delete the VPC peering connection if it's in the active state. The owner of the requester VPC can delete a VPC peering connection in the pending-acceptance state. You cannot delete a VPC peering connection that's in the failed or rejected state.

Returns information about the DeleteVpcPeeringConnection response metadata. The DeleteVpcPeeringConnection operation has a void result type.

Container for the parameters to the DeleteVpc operation. Deletes the specified VPC. You must detach or delete all gateways and resources that are associated with the VPC before you can delete it. For example, you must terminate all instances running in the VPC, delete all security groups associated with the VPC (except the default one), delete all route tables associated with the VPC (except the default one), and so on. When you delete the VPC, it deletes the default security group, network ACL, and route table for the VPC.

If you created a flow log for the VPC that you are deleting, note that flow logs for deleted VPCs are eventually automatically removed.

This is the response object from the DeleteVpc operation.

Container for the parameters to the DeleteVpnConnection operation. Deletes the specified VPN connection.

If you're deleting the VPC and its associated components, we recommend that you detach the virtual private gateway from the VPC and delete the VPC before deleting the VPN connection. If you believe that the tunnel credentials for your VPN connection have been compromised, you can delete the VPN connection and create a new one that has new keys, without needing to delete the VPC or virtual private gateway. If you create a new VPN connection, you must reconfigure the customer gateway device using the new configuration information returned with the new VPN connection ID.

For certificate-based authentication, delete all Certificate Manager (ACM) private certificates used for the Amazon Web Services-side tunnel endpoints for the VPN connection before deleting the VPN connection.

This is the response object from the DeleteVpnConnection operation.

Container for the parameters to the DeleteVpnConnectionRoute operation. Deletes the specified static route associated with a VPN connection between an existing virtual private gateway and a VPN customer gateway. The static route allows traffic to be routed from the virtual private gateway to the VPN customer gateway.

This is the response object from the DeleteVpnConnectionRoute operation.

Container for the parameters to the DeleteVpnGateway operation. Deletes the specified virtual private gateway. You must first detach the virtual private gateway from the VPC. Note that you don't need to delete the virtual private gateway if you plan to delete and recreate the VPN connection between your VPC and your network.

This is the response object from the DeleteVpnGateway operation.

Container for the parameters to the DeprovisionByoipCidr operation. Releases the specified address range that you provisioned for use with your Amazon Web Services resources through bring your own IP addresses (BYOIP) and deletes the corresponding address pool.

Before you can release an address range, you must stop advertising it using WithdrawByoipCidr and you must not have any IP addresses allocated from its address range.

This is the response object from the DeprovisionByoipCidr operation.

Container for the parameters to the DeprovisionIpamByoasn operation. Deprovisions your Autonomous System Number (ASN) from your Amazon Web Services account. This action can only be called after any BYOIP CIDR associations are removed from your Amazon Web Services account with DisassociateIpamByoasn. For more information, see Tutorial: Bring your ASN to IPAM in the Amazon VPC IPAM guide.

This is the response object from the DeprovisionIpamByoasn operation.

Container for the parameters to the DeprovisionIpamPoolCidr operation. Deprovision a CIDR provisioned from an IPAM pool. If you deprovision a CIDR from a pool that has a source pool, the CIDR is recycled back into the source pool. For more information, see Deprovision pool CIDRs in the Amazon VPC IPAM User Guide.

This is the response object from the DeprovisionIpamPoolCidr operation.

Container for the parameters to the DeprovisionPublicIpv4PoolCidr operation. Deprovision a CIDR from a public IPv4 pool.

This is the response object from the DeprovisionPublicIpv4PoolCidr operation.

Container for the parameters to the DeregisterImage operation. Deregisters the specified AMI. After you deregister an AMI, it can't be used to launch new instances.

If you deregister an AMI that matches a Recycle Bin retention rule, the AMI is retained in the Recycle Bin for the specified retention period. For more information, see Recycle Bin in the Amazon EC2 User Guide.

When you deregister an AMI, it doesn't affect any instances that you've already launched from the AMI. You'll continue to incur usage costs for those instances until you terminate them.

When you deregister an Amazon EBS-backed AMI, it doesn't affect the snapshot that was created for the root volume of the instance during the AMI creation process. When you deregister an instance store-backed AMI, it doesn't affect the files that you uploaded to Amazon S3 when you created the AMI.

This is the response object from the DeregisterImage operation.

Container for the parameters to the DeregisterInstanceEventNotificationAttributes operation. Deregisters tag keys to prevent tags that have the specified tag keys from being included in scheduled event notifications for resources in the Region.

This is the response object from the DeregisterInstanceEventNotificationAttributes operation.

Information about the tag keys to deregister for the current Region. You can either specify individual tag keys or deregister all tag keys in the current Region. You must specify either IncludeAllTagsOfInstance or InstanceTagKeys in the request

Container for the parameters to the DeregisterTransitGatewayMulticastGroupMembers operation. Deregisters the specified members (network interfaces) from the transit gateway multicast group.

This is the response object from the DeregisterTransitGatewayMulticastGroupMembers operation.

Container for the parameters to the DeregisterTransitGatewayMulticastGroupSources operation. Deregisters the specified sources (network interfaces) from the transit gateway multicast group.

This is the response object from the DeregisterTransitGatewayMulticastGroupSources operation.

Container for the parameters to the DescribeAccountAttributes operation. Describes attributes of your Amazon Web Services account. The following are the supported account attributes:

• default-vpc: The ID of the default VPC for your account, or none.

• max-instances: This attribute is no longer supported. The returned value does not reflect your actual vCPU limit for running On-Demand Instances. For more information, see On-Demand Instance Limits in the Amazon Elastic Compute Cloud User Guide.

• max-elastic-ips: The maximum number of Elastic IP addresses that you can allocate.

• supported-platforms: This attribute is deprecated.

• vpc-max-elastic-ips: The maximum number of Elastic IP addresses that you can allocate.

• vpc-max-security-groups-per-interface: The maximum number of security groups that you can assign to a network interface.

This is the response object from the DescribeAccountAttributes operation.

Container for the parameters to the DescribeAddressesAttribute operation. Describes the attributes of the specified Elastic IP addresses. For requirements, see Using reverse DNS for email applications.

This is the response object from the DescribeAddressesAttribute operation.

Container for the parameters to the DescribeAddresses operation. Describes the specified Elastic IP addresses or all of your Elastic IP addresses.

This is the response object from the DescribeAddresses operation.

Container for the parameters to the DescribeAddressTransfers operation. Describes an Elastic IP address transfer. For more information, see Transfer Elastic IP addresses in the Amazon VPC User Guide.

When you transfer an Elastic IP address, there is a two-step handshake between the source and transfer Amazon Web Services accounts. When the source account starts the transfer, the transfer account has seven days to accept the Elastic IP address transfer. During those seven days, the source account can view the pending transfer by using this action. After seven days, the transfer expires and ownership of the Elastic IP address returns to the source account. Accepted transfers are visible to the source account for 14 days after the transfers have been accepted.

This is the response object from the DescribeAddressTransfers operation.

Container for the parameters to the DescribeAggregateIdFormat operation. Describes the longer ID format settings for all resource types in a specific Region. This request is useful for performing a quick audit to determine whether a specific Region is fully opted in for longer IDs (17-character IDs).

This request only returns information about resource types that support longer IDs.

The following resource types support longer IDs: bundle | conversion-task | customer-gateway | dhcp-options | elastic-ip-allocation | elastic-ip-association | export-task | flow-log | image | import-task | instance | internet-gateway | network-acl | network-acl-association | network-interface | network-interface-attachment | prefix-list | reservation | route-table | route-table-association | security-group | snapshot | subnet | subnet-cidr-block-association | volume | vpc | vpc-cidr-block-association | vpc-endpoint | vpc-peering-connection | vpn-connection | vpn-gateway.

This is the response object from the DescribeAggregateIdFormat operation.

Container for the parameters to the DescribeAvailabilityZones operation. Describes the Availability Zones, Local Zones, and Wavelength Zones that are available to you. If there is an event impacting a zone, you can use this request to view the state and any provided messages for that zone.

For more information about Availability Zones, Local Zones, and Wavelength Zones, see Regions and zones in the Amazon EC2 User Guide.

This is the response object from the DescribeAvailabilityZones operation.

Container for the parameters to the DescribeAwsNetworkPerformanceMetricSubscriptions operation. Describes the current Infrastructure Performance metric subscriptions.

This is the response object from the DescribeAwsNetworkPerformanceMetricSubscriptions operation.

Container for the parameters to the DescribeBundleTasks operation. Describes the specified bundle tasks or all of your bundle tasks.

Completed bundle tasks are listed for only a limited time. If your bundle task is no longer in the list, you can still register an AMI from it. Just use RegisterImage with the Amazon S3 bucket name and image manifest name you provided to the bundle task.

This is the response object from the DescribeBundleTasks operation.

Container for the parameters to the DescribeByoipCidrs operation. Describes the IP address ranges that were specified in calls to ProvisionByoipCidr.

To describe the address pools that were created when you provisioned the address ranges, use DescribePublicIpv4Pools or DescribeIpv6Pools.

This is the response object from the DescribeByoipCidrs operation.

Container for the parameters to the DescribeCapacityBlockOfferings operation. Describes Capacity Block offerings available for purchase in the Amazon Web Services Region that you're currently using. With Capacity Blocks, you purchase a specific instance type for a period of time.

This is the response object from the DescribeCapacityBlockOfferings operation.

Container for the parameters to the DescribeCapacityReservationBillingRequests operation. Describes a request to assign the billing of the unused capacity of a Capacity Reservation. For more information, see Billing assignment for shared Amazon EC2 Capacity Reservations.

This is the response object from the DescribeCapacityReservationBillingRequests operation.

Container for the parameters to the DescribeCapacityReservationFleets operation. Describes one or more Capacity Reservation Fleets.

This is the response object from the DescribeCapacityReservationFleets operation.

Container for the parameters to the DescribeCapacityReservations operation. Describes one or more of your Capacity Reservations. The results describe only the Capacity Reservations in the Amazon Web Services Region that you're currently using.

This is the response object from the DescribeCapacityReservations operation.

Container for the parameters to the DescribeCarrierGateways operation. Describes one or more of your carrier gateways.

This is the response object from the DescribeCarrierGateways operation.

Container for the parameters to the DescribeClassicLinkInstances operation.

This action is deprecated.

Describes your linked EC2-Classic instances. This request only returns information about EC2-Classic instances linked to a VPC through ClassicLink. You cannot use this request to return information about other instances.

This is the response object from the DescribeClassicLinkInstances operation.

Container for the parameters to the DescribeClientVpnAuthorizationRules operation. Describes the authorization rules for a specified Client VPN endpoint.

This is the response object from the DescribeClientVpnAuthorizationRules operation.

Container for the parameters to the DescribeClientVpnConnections operation. Describes active client connections and connections that have been terminated within the last 60 minutes for the specified Client VPN endpoint.

This is the response object from the DescribeClientVpnConnections operation.

Container for the parameters to the DescribeClientVpnEndpoints operation. Describes one or more Client VPN endpoints in the account.

This is the response object from the DescribeClientVpnEndpoints operation.

Container for the parameters to the DescribeClientVpnRoutes operation. Describes the routes for the specified Client VPN endpoint.

This is the response object from the DescribeClientVpnRoutes operation.

Container for the parameters to the DescribeClientVpnTargetNetworks operation. Describes the target networks associated with the specified Client VPN endpoint.

This is the response object from the DescribeClientVpnTargetNetworks operation.

Container for the parameters to the DescribeCoipPools operation. Describes the specified customer-owned address pools or all of your customer-owned address pools.

This is the response object from the DescribeCoipPools operation.

Container for the parameters to the DescribeConversionTasks operation. Describes the specified conversion tasks or all your conversion tasks. For more information, see the VM Import/Export User Guide.

For information about the import manifest referenced by this API action, see VM Import Manifest.

This is the response object from the DescribeConversionTasks operation.

Container for the parameters to the DescribeCustomerGateways operation. Describes one or more of your VPN customer gateways.

For more information, see Amazon Web Services Site-to-Site VPN in the Amazon Web Services Site-to-Site VPN User Guide.

Contains the output of DescribeCustomerGateways.

Container for the parameters to the DescribeDhcpOptions operation. Describes your DHCP option sets. The default is to describe all your DHCP option sets. Alternatively, you can specify specific DHCP option set IDs or filter the results to include only the DHCP option sets that match specific criteria.

For more information, see DHCP option sets in the Amazon VPC User Guide.

This is the response object from the DescribeDhcpOptions operation.

Container for the parameters to the DescribeEgressOnlyInternetGateways operation. Describes your egress-only internet gateways. The default is to describe all your egress-only internet gateways. Alternatively, you can specify specific egress-only internet gateway IDs or filter the results to include only the egress-only internet gateways that match specific criteria.

This is the response object from the DescribeEgressOnlyInternetGateways operation.

Container for the parameters to the DescribeElasticGpus operation.

Amazon Elastic Graphics reached end of life on January 8, 2024.

Describes the Elastic Graphics accelerator associated with your instances.

This is the response object from the DescribeElasticGpus operation.

Container for the parameters to the DescribeExportImageTasks operation. Describes the specified export image tasks or all of your export image tasks.

This is the response object from the DescribeExportImageTasks operation.

Container for the parameters to the DescribeExportTasks operation. Describes the specified export instance tasks or all of your export instance tasks.

This is the response object from the DescribeExportTasks operation.

Container for the parameters to the DescribeFastLaunchImages operation. Describe details for Windows AMIs that are configured for Windows fast launch.

This is the response object from the DescribeFastLaunchImages operation.

Describe details about a Windows image with Windows fast launch enabled that meets the requested criteria. Criteria are defined by the DescribeFastLaunchImages action filters.

Container for the parameters to the DescribeFastSnapshotRestores operation. Describes the state of fast snapshot restores for your snapshots.

This is the response object from the DescribeFastSnapshotRestores operation.

Describes fast snapshot restores for a snapshot.

Describes the instances that could not be launched by the fleet.

Container for the parameters to the DescribeFleetHistory operation. Describes the events for the specified EC2 Fleet during the specified time.

EC2 Fleet events are delayed by up to 30 seconds before they can be described. This ensures that you can query by the last evaluated time and not miss a recorded event. EC2 Fleet events are available for 48 hours.

For more information, see Monitor fleet events using Amazon EventBridge in the Amazon EC2 User Guide.

This is the response object from the DescribeFleetHistory operation.

Container for the parameters to the DescribeFleetInstances operation. Describes the running instances for the specified EC2 Fleet.

Currently, DescribeFleetInstances does not support fleets of type instant. Instead, use DescribeFleets, specifying the instant fleet ID in the request.

For more information, see Describe your EC2 Fleet in the Amazon EC2 User Guide.

This is the response object from the DescribeFleetInstances operation.

Describes the instances that were launched by the fleet.

Container for the parameters to the DescribeFleets operation. Describes the specified EC2 Fleet or all of your EC2 Fleets.

If a fleet is of type instant, you must specify the fleet ID in the request, otherwise the fleet does not appear in the response.

For more information, see Describe your EC2 Fleet in the Amazon EC2 User Guide.

This is the response object from the DescribeFleets operation.

Container for the parameters to the DescribeFlowLogs operation. Describes one or more flow logs.

To view the published flow log records, you must view the log destination. For example, the CloudWatch Logs log group, the Amazon S3 bucket, or the Kinesis Data Firehose delivery stream.

This is the response object from the DescribeFlowLogs operation.

Container for the parameters to the DescribeFpgaImageAttribute operation. Describes the specified attribute of the specified Amazon FPGA Image (AFI).

This is the response object from the DescribeFpgaImageAttribute operation.

Container for the parameters to the DescribeFpgaImages operation. Describes the Amazon FPGA Images (AFIs) available to you. These include public AFIs, private AFIs that you own, and AFIs owned by other Amazon Web Services accounts for which you have load permissions.

This is the response object from the DescribeFpgaImages operation.

Container for the parameters to the DescribeHostReservationOfferings operation. Describes the Dedicated Host reservations that are available to purchase.

The results describe all of the Dedicated Host reservation offerings, including offerings that might not match the instance family and Region of your Dedicated Hosts. When purchasing an offering, ensure that the instance family and Region of the offering matches that of the Dedicated Hosts with which it is to be associated. For more information about supported instance types, see Dedicated Hosts in the Amazon EC2 User Guide.

This is the response object from the DescribeHostReservationOfferings operation.

Container for the parameters to the DescribeHostReservations operation. Describes reservations that are associated with Dedicated Hosts in your account.

This is the response object from the DescribeHostReservations operation.

Container for the parameters to the DescribeHosts operation. Describes the specified Dedicated Hosts or all your Dedicated Hosts.

The results describe only the Dedicated Hosts in the Region you're currently using. All listed instances consume capacity on your Dedicated Host. Dedicated Hosts that have recently been released are listed with the state released.

This is the response object from the DescribeHosts operation.

Container for the parameters to the DescribeIamInstanceProfileAssociations operation. Describes your IAM instance profile associations.

This is the response object from the DescribeIamInstanceProfileAssociations operation.

Container for the parameters to the DescribeIdentityIdFormat operation. Describes the ID format settings for resources for the specified IAM user, IAM role, or root user. For example, you can view the resource types that are enabled for longer IDs. This request only returns information about resource types whose ID formats can be modified; it does not return information about other resource types. For more information, see Resource IDs in the Amazon Elastic Compute Cloud User Guide.

The following resource types support longer IDs: bundle | conversion-task | customer-gateway | dhcp-options | elastic-ip-allocation | elastic-ip-association | export-task | flow-log | image | import-task | instance | internet-gateway | network-acl | network-acl-association | network-interface | network-interface-attachment | prefix-list | reservation | route-table | route-table-association | security-group | snapshot | subnet | subnet-cidr-block-association | volume | vpc | vpc-cidr-block-association | vpc-endpoint | vpc-peering-connection | vpn-connection | vpn-gateway.

These settings apply to the principal specified in the request. They do not apply to the principal that makes the request.

This is the response object from the DescribeIdentityIdFormat operation.

Container for the parameters to the DescribeIdFormat operation. Describes the ID format settings for your resources on a per-Region basis, for example, to view which resource types are enabled for longer IDs. This request only returns information about resource types whose ID formats can be modified; it does not return information about other resource types.

The following resource types support longer IDs: bundle | conversion-task | customer-gateway | dhcp-options | elastic-ip-allocation | elastic-ip-association | export-task | flow-log | image | import-task | instance | internet-gateway | network-acl | network-acl-association | network-interface | network-interface-attachment | prefix-list | reservation | route-table | route-table-association | security-group | snapshot | subnet | subnet-cidr-block-association | volume | vpc | vpc-cidr-block-association | vpc-endpoint | vpc-peering-connection | vpn-connection | vpn-gateway.

These settings apply to the IAM user who makes the request; they do not apply to the entire Amazon Web Services account. By default, an IAM user defaults to the same settings as the root user, unless they explicitly override the settings by running the ModifyIdFormat command. Resources created with longer IDs are visible to all IAM users, regardless of these settings and provided that they have permission to use the relevant Describe command for the resource type.

This is the response object from the DescribeIdFormat operation.

Container for the parameters to the DescribeImageAttribute operation. Describes the specified attribute of the specified AMI. You can specify only one attribute at a time.

The order of the elements in the response, including those within nested structures, might vary. Applications should not assume the elements appear in a particular order.

Contains the response data from the DescribeImageAttribute operation.

Container for the parameters to the DescribeImages operation. Describes the specified images (AMIs, AKIs, and ARIs) available to you or all of the images available to you.

The images available to you include public images, private images that you own, and private images owned by other Amazon Web Services accounts for which you have explicit launch permissions.

Recently deregistered images appear in the returned results for a short interval and then return empty results. After all instances that reference a deregistered AMI are terminated, specifying the ID of the image will eventually return an error indicating that the AMI ID cannot be found.

This is the response object from the DescribeImages operation.

Container for the parameters to the DescribeImportImageTasks operation. Displays details about an import virtual machine or import snapshot tasks that are already created.

This is the response object from the DescribeImportImageTasks operation.

Container for the parameters to the DescribeImportSnapshotTasks operation. Describes your import snapshot tasks.

This is the response object from the DescribeImportSnapshotTasks operation.

Container for the parameters to the DescribeInstanceAttribute operation. Describes the specified attribute of the specified instance. You can specify only one attribute at a time. Valid attribute values are: instanceType | kernel | ramdisk | userData | disableApiTermination | instanceInitiatedShutdownBehavior | rootDeviceName | blockDeviceMapping | productCodes | sourceDestCheck | groupSet | ebsOptimized | sriovNetSupport

Contains the response data from the DescribeInstanceAttribute operation.

Container for the parameters to the DescribeInstanceConnectEndpoints operation. Describes the specified EC2 Instance Connect Endpoints or all EC2 Instance Connect Endpoints.

This is the response object from the DescribeInstanceConnectEndpoints operation.

Container for the parameters to the DescribeInstanceCreditSpecifications operation. Describes the credit option for CPU usage of the specified burstable performance instances. The credit options are standard and unlimited.

If you do not specify an instance ID, Amazon EC2 returns burstable performance instances with the unlimited credit option, as well as instances that were previously configured as T2, T3, and T3a with the unlimited credit option. For example, if you resize a T2 instance, while it is configured as unlimited, to an M4 instance, Amazon EC2 returns the M4 instance.

If you specify one or more instance IDs, Amazon EC2 returns the credit option (standard or unlimited) of those instances. If you specify an instance ID that is not valid, such as an instance that is not a burstable performance instance, an error is returned.

Recently terminated instances might appear in the returned results. This interval is usually less than one hour.

If an Availability Zone is experiencing a service disruption and you specify instance IDs in the affected zone, or do not specify any instance IDs at all, the call fails. If you specify only instance IDs in an unaffected zone, the call works normally.

For more information, see Burstable performance instances in the Amazon EC2 User Guide.

This is the response object from the DescribeInstanceCreditSpecifications operation.

Container for the parameters to the DescribeInstanceEventNotificationAttributes operation. Describes the tag keys that are registered to appear in scheduled event notifications for resources in the current Region.

This is the response object from the DescribeInstanceEventNotificationAttributes operation.

Container for the parameters to the DescribeInstanceEventWindows operation. Describes the specified event windows or all event windows.

If you specify event window IDs, the output includes information for only the specified event windows. If you specify filters, the output includes information for only those event windows that meet the filter criteria. If you do not specify event windows IDs or filters, the output includes information for all event windows, which can affect performance. We recommend that you use pagination to ensure that the operation returns quickly and successfully.

For more information, see Define event windows for scheduled events in the Amazon EC2 User Guide.

This is the response object from the DescribeInstanceEventWindows operation.

Container for the parameters to the DescribeInstanceImageMetadata operation. Describes the AMI that was used to launch an instance, even if the AMI is deprecated, deregistered, or made private (no longer public or shared with your account).

If you specify instance IDs, the output includes information for only the specified instances. If you specify filters, the output includes information for only those instances that meet the filter criteria. If you do not specify instance IDs or filters, the output includes information for all instances, which can affect performance.

If you specify an instance ID that is not valid, an instance that doesn't exist, or an instance that you do not own, an error (InvalidInstanceID.NotFound) is returned.

Recently terminated instances might appear in the returned results. This interval is usually less than one hour.

In the rare case where an Availability Zone is experiencing a service disruption and you specify instance IDs that are in the affected Availability Zone, or do not specify any instance IDs at all, the call fails. If you specify only instance IDs that are in an unaffected Availability Zone, the call works normally.

This is the response object from the DescribeInstanceImageMetadata operation.

Container for the parameters to the DescribeInstances operation. Describes the specified instances or all instances.

If you specify instance IDs, the output includes information for only the specified instances. If you specify filters, the output includes information for only those instances that meet the filter criteria. If you do not specify instance IDs or filters, the output includes information for all instances, which can affect performance. We recommend that you use pagination to ensure that the operation returns quickly and successfully.

If you specify an instance ID that is not valid, an error is returned. If you specify an instance that you do not own, it is not included in the output.

Recently terminated instances might appear in the returned results. This interval is usually less than one hour.

If you describe instances in the rare case where an Availability Zone is experiencing a service disruption and you specify instance IDs that are in the affected zone, or do not specify any instance IDs at all, the call fails. If you describe instances and specify only instance IDs that are in an unaffected zone, the call works normally.

This is the response object from the DescribeInstances operation.

Container for the parameters to the DescribeInstanceStatus operation. Describes the status of the specified instances or all of your instances. By default, only running instances are described, unless you specifically indicate to return the status of all instances.

Instance status includes the following components:

• Status checks - Amazon EC2 performs status checks on running EC2 instances to identify hardware and software issues. For more information, see Status checks for your instances and Troubleshoot instances with failed status checks in the Amazon EC2 User Guide.

• Scheduled events - Amazon EC2 can schedule events (such as reboot, stop, or terminate) for your instances related to hardware issues, software updates, or system maintenance. For more information, see Scheduled events for your instances in the Amazon EC2 User Guide.

• Instance state - You can manage your instances from the moment you launch them through their termination. For more information, see Instance lifecycle in the Amazon EC2 User Guide.

This is the response object from the DescribeInstanceStatus operation.

Container for the parameters to the DescribeInstanceTopology operation. Describes a tree-based hierarchy that represents the physical host placement of your EC2 instances within an Availability Zone or Local Zone. You can use this information to determine the relative proximity of your EC2 instances within the Amazon Web Services network to support your tightly coupled workloads.

Limitations

• Supported zones

  • Availability Zone

  • Local Zone

• Supported instance types

  • hpc6a.48xlarge | hpc6id.32xlarge | hpc7a.12xlarge | hpc7a.24xlarge | hpc7a.48xlarge | hpc7a.96xlarge | hpc7g.4xlarge | hpc7g.8xlarge | hpc7g.16xlarge

  • p3dn.24xlarge | p4d.24xlarge | p4de.24xlarge | p5.48xlarge | p5e.48xlarge

  • trn1.2xlarge | trn1.32xlarge | trn1n.32xlarge

For more information, see Amazon EC2 instance topology in the Amazon EC2 User Guide.

This is the response object from the DescribeInstanceTopology operation.

Container for the parameters to the DescribeInstanceTypeOfferings operation. Lists the instance types that are offered for the specified location. If no location is specified, the default is to list the instance types that are offered in the current Region.

This is the response object from the DescribeInstanceTypeOfferings operation.

Container for the parameters to the DescribeInstanceTypes operation. Describes the specified instance types. By default, all instance types for the current Region are described. Alternatively, you can filter the results.

This is the response object from the DescribeInstanceTypes operation.

Container for the parameters to the DescribeInternetGateways operation. Describes your internet gateways. The default is to describe all your internet gateways. Alternatively, you can specify specific internet gateway IDs or filter the results to include only the internet gateways that match specific criteria.

This is the response object from the DescribeInternetGateways operation.

Container for the parameters to the DescribeIpamByoasn operation. Describes your Autonomous System Numbers (ASNs), their provisioning statuses, and the BYOIP CIDRs with which they are associated. For more information, see Tutorial: Bring your ASN to IPAM in the Amazon VPC IPAM guide.

This is the response object from the DescribeIpamByoasn operation.

Container for the parameters to the DescribeIpamExternalResourceVerificationTokens operation. Describe verification tokens. A verification token is an Amazon Web Services-generated random value that you can use to prove ownership of an external resource. For example, you can use a verification token to validate that you control a public IP address range when you bring an IP address range to Amazon Web Services (BYOIP).

This is the response object from the DescribeIpamExternalResourceVerificationTokens operation.

Container for the parameters to the DescribeIpamPools operation. Get information about your IPAM pools.

This is the response object from the DescribeIpamPools operation.

Container for the parameters to the DescribeIpamResourceDiscoveries operation. Describes IPAM resource discoveries. A resource discovery is an IPAM component that enables IPAM to manage and monitor resources that belong to the owning account.

This is the response object from the DescribeIpamResourceDiscoveries operation.

Container for the parameters to the DescribeIpamResourceDiscoveryAssociations operation. Describes resource discovery association with an Amazon VPC IPAM. An associated resource discovery is a resource discovery that has been associated with an IPAM..

This is the response object from the DescribeIpamResourceDiscoveryAssociations operation.

Container for the parameters to the DescribeIpamScopes operation. Get information about your IPAM scopes.

This is the response object from the DescribeIpamScopes operation.

Container for the parameters to the DescribeIpams operation. Get information about your IPAM pools.

For more information, see What is IPAM? in the Amazon VPC IPAM User Guide.

This is the response object from the DescribeIpams operation.

Container for the parameters to the DescribeIpv6Pools operation. Describes your IPv6 address pools.

This is the response object from the DescribeIpv6Pools operation.

Container for the parameters to the DescribeKeyPairs operation. Describes the specified key pairs or all of your key pairs.

For more information about key pairs, see Amazon EC2 key pairs in the Amazon Elastic Compute Cloud User Guide.

This is the response object from the DescribeKeyPairs operation.

Container for the parameters to the DescribeLaunchTemplates operation. Describes one or more launch templates.

This is the response object from the DescribeLaunchTemplates operation.

Container for the parameters to the DescribeLaunchTemplateVersions operation. Describes one or more versions of a specified launch template. You can describe all versions, individual versions, or a range of versions. You can also describe all the latest versions or all the default versions of all the launch templates in your account.

This is the response object from the DescribeLaunchTemplateVersions operation.

Container for the parameters to the DescribeLocalGatewayRouteTables operation. Describes one or more local gateway route tables. By default, all local gateway route tables are described. Alternatively, you can filter the results.

This is the response object from the DescribeLocalGatewayRouteTables operation.

Container for the parameters to the DescribeLocalGatewayRouteTableVirtualInterfaceGroupAssociations operation. Describes the associations between virtual interface groups and local gateway route tables.

This is the response object from the DescribeLocalGatewayRouteTableVirtualInterfaceGroupAssociations operation.

Container for the parameters to the DescribeLocalGatewayRouteTableVpcAssociations operation. Describes the specified associations between VPCs and local gateway route tables.

This is the response object from the DescribeLocalGatewayRouteTableVpcAssociations operation.

Container for the parameters to the DescribeLocalGateways operation. Describes one or more local gateways. By default, all local gateways are described. Alternatively, you can filter the results.

This is the response object from the DescribeLocalGateways operation.

Container for the parameters to the DescribeLocalGatewayVirtualInterfaceGroups operation. Describes the specified local gateway virtual interface groups.

This is the response object from the DescribeLocalGatewayVirtualInterfaceGroups operation.

Container for the parameters to the DescribeLocalGatewayVirtualInterfaces operation. Describes the specified local gateway virtual interfaces.

This is the response object from the DescribeLocalGatewayVirtualInterfaces operation.

Container for the parameters to the DescribeLockedSnapshots operation. Describes the lock status for a snapshot.

This is the response object from the DescribeLockedSnapshots operation.

Container for the parameters to the DescribeMacHosts operation. Describes the specified EC2 Mac Dedicated Host or all of your EC2 Mac Dedicated Hosts.

This is the response object from the DescribeMacHosts operation.

Container for the parameters to the DescribeManagedPrefixLists operation. Describes your managed prefix lists and any Amazon Web Services-managed prefix lists.

To view the entries for your prefix list, use GetManagedPrefixListEntries.

This is the response object from the DescribeManagedPrefixLists operation.

Container for the parameters to the DescribeMovingAddresses operation.

This action is deprecated.

Describes your Elastic IP addresses that are being moved from or being restored to the EC2-Classic platform. This request does not return information about any other Elastic IP addresses in your account.

This is the response object from the DescribeMovingAddresses operation.

Container for the parameters to the DescribeNatGateways operation. Describes your NAT gateways. The default is to describe all your NAT gateways. Alternatively, you can specify specific NAT gateway IDs or filter the results to include only the NAT gateways that match specific criteria.

This is the response object from the DescribeNatGateways operation.

Container for the parameters to the DescribeNetworkAcls operation. Describes your network ACLs. The default is to describe all your network ACLs. Alternatively, you can specify specific network ACL IDs or filter the results to include only the network ACLs that match specific criteria.

For more information, see Network ACLs in the Amazon VPC User Guide.

This is the response object from the DescribeNetworkAcls operation.

Container for the parameters to the DescribeNetworkInsightsAccessScopeAnalyses operation. Describes the specified Network Access Scope analyses.

This is the response object from the DescribeNetworkInsightsAccessScopeAnalyses operation.

Container for the parameters to the DescribeNetworkInsightsAccessScopes operation. Describes the specified Network Access Scopes.

This is the response object from the DescribeNetworkInsightsAccessScopes operation.

Container for the parameters to the DescribeNetworkInsightsAnalyses operation. Describes one or more of your network insights analyses.

This is the response object from the DescribeNetworkInsightsAnalyses operation.

Container for the parameters to the DescribeNetworkInsightsPaths operation. Describes one or more of your paths.

This is the response object from the DescribeNetworkInsightsPaths operation.

Container for the parameters to the DescribeNetworkInterfaceAttribute operation. Describes a network interface attribute. You can specify only one attribute at a time.

Contains the output of DescribeNetworkInterfaceAttribute.

Container for the parameters to the DescribeNetworkInterfacePermissions operation. Describes the permissions for your network interfaces.

Contains the output for DescribeNetworkInterfacePermissions.

Container for the parameters to the DescribeNetworkInterfaces operation. Describes one or more of your network interfaces.

If you have a large number of network interfaces, the operation fails unless you use pagination or one of the following filters: group-id, mac-address, private-dns-name, private-ip-address, private-dns-name, subnet-id, or vpc-id.

This is the response object from the DescribeNetworkInterfaces operation.

Container for the parameters to the DescribePlacementGroups operation. Describes the specified placement groups or all of your placement groups.

To describe a specific placement group that is shared with your account, you must specify the ID of the placement group using the GroupId parameter. Specifying the name of a shared placement group using the GroupNames parameter will result in an error.

For more information, see Placement groups in the Amazon EC2 User Guide.

This is the response object from the DescribePlacementGroups operation.

Container for the parameters to the DescribePrefixLists operation. Describes available Amazon Web Services services in a prefix list format, which includes the prefix list name and prefix list ID of the service and the IP address range for the service.

We recommend that you use DescribeManagedPrefixLists instead.

This is the response object from the DescribePrefixLists operation.

Container for the parameters to the DescribePrincipalIdFormat operation. Describes the ID format settings for the root user and all IAM roles and IAM users that have explicitly specified a longer ID (17-character ID) preference.

By default, all IAM roles and IAM users default to the same ID settings as the root user, unless they explicitly override the settings. This request is useful for identifying those IAM users and IAM roles that have overridden the default ID settings.

The following resource types support longer IDs: bundle | conversion-task | customer-gateway | dhcp-options | elastic-ip-allocation | elastic-ip-association | export-task | flow-log | image | import-task | instance | internet-gateway | network-acl | network-acl-association | network-interface | network-interface-attachment | prefix-list | reservation | route-table | route-table-association | security-group | snapshot | subnet | subnet-cidr-block-association | volume | vpc | vpc-cidr-block-association | vpc-endpoint | vpc-peering-connection | vpn-connection | vpn-gateway.

This is the response object from the DescribePrincipalIdFormat operation.

Container for the parameters to the DescribePublicIpv4Pools operation. Describes the specified IPv4 address pools.

This is the response object from the DescribePublicIpv4Pools operation.

Container for the parameters to the DescribeRegions operation. Describes the Regions that are enabled for your account, or all Regions.

For a list of the Regions supported by Amazon EC2, see Amazon EC2 service endpoints.

For information about enabling and disabling Regions for your account, see Specify which Amazon Web Services Regions your account can use in the Amazon Web Services Account Management Reference Guide.

This is the response object from the DescribeRegions operation.

Container for the parameters to the DescribeReplaceRootVolumeTasks operation. Describes a root volume replacement task. For more information, see Replace a root volume in the Amazon EC2 User Guide.

This is the response object from the DescribeReplaceRootVolumeTasks operation.

Container for the parameters to the DescribeReservedInstancesListings operation. Describes your account's Reserved Instance listings in the Reserved Instance Marketplace.

The Reserved Instance Marketplace matches sellers who want to resell Reserved Instance capacity that they no longer need with buyers who want to purchase additional capacity. Reserved Instances bought and sold through the Reserved Instance Marketplace work like any other Reserved Instances.

As a seller, you choose to list some or all of your Reserved Instances, and you specify the upfront price to receive for them. Your Reserved Instances are then listed in the Reserved Instance Marketplace and are available for purchase.

As a buyer, you specify the configuration of the Reserved Instance to purchase, and the Marketplace matches what you're searching for with what's available. The Marketplace first sells the lowest priced Reserved Instances to you, and continues to sell available Reserved Instance listings to you until your demand is met. You are charged based on the total price of all of the listings that you purchase.

For more information, see Sell in the Reserved Instance Marketplace in the Amazon EC2 User Guide.

Contains the output of DescribeReservedInstancesListings.

Container for the parameters to the DescribeReservedInstancesModifications operation. Describes the modifications made to your Reserved Instances. If no parameter is specified, information about all your Reserved Instances modification requests is returned. If a modification ID is specified, only information about the specific modification is returned.

For more information, see Modify Reserved Instances in the Amazon EC2 User Guide.

Contains the output of DescribeReservedInstancesModifications.

Container for the parameters to the DescribeReservedInstancesOfferings operation. Describes Reserved Instance offerings that are available for purchase. With Reserved Instances, you purchase the right to launch instances for a period of time. During that time period, you do not receive insufficient capacity errors, and you pay a lower usage rate than the rate charged for On-Demand instances for the actual time used.

If you have listed your own Reserved Instances for sale in the Reserved Instance Marketplace, they will be excluded from these results. This is to ensure that you do not purchase your own Reserved Instances.

For more information, see Sell in the Reserved Instance Marketplace in the Amazon EC2 User Guide.

Contains the output of DescribeReservedInstancesOfferings.

Container for the parameters to the DescribeReservedInstances operation. Describes one or more of the Reserved Instances that you purchased.

For more information about Reserved Instances, see Reserved Instances in the Amazon EC2 User Guide.

Contains the output for DescribeReservedInstances.

Container for the parameters to the DescribeRouteTables operation. Describes your route tables. The default is to describe all your route tables. Alternatively, you can specify specific route table IDs or filter the results to include only the route tables that match specific criteria.

Each subnet in your VPC must be associated with a route table. If a subnet is not explicitly associated with any route table, it is implicitly associated with the main route table. This command does not return the subnet ID for implicit associations.

For more information, see Route tables in the Amazon VPC User Guide.

Contains the output of DescribeRouteTables.

Container for the parameters to the DescribeScheduledInstanceAvailability operation. Finds available schedules that meet the specified criteria.

You can search for an available schedule no more than 3 months in advance. You must meet the minimum required duration of 1,200 hours per year. For example, the minimum daily schedule is 4 hours, the minimum weekly schedule is 24 hours, and the minimum monthly schedule is 100 hours.

After you find a schedule that meets your needs, call PurchaseScheduledInstances to purchase Scheduled Instances with that schedule.

Contains the output of DescribeScheduledInstanceAvailability.

Container for the parameters to the DescribeScheduledInstances operation. Describes the specified Scheduled Instances or all your Scheduled Instances.

Contains the output of DescribeScheduledInstances.

Container for the parameters to the DescribeSecurityGroupReferences operation. Describes the VPCs on the other side of a VPC peering or Transit Gateway connection that are referencing the security groups you've specified in this request.

This is the response object from the DescribeSecurityGroupReferences operation.

Container for the parameters to the DescribeSecurityGroupRules operation. Describes one or more of your security group rules.

This is the response object from the DescribeSecurityGroupRules operation.

Container for the parameters to the DescribeSecurityGroups operation. Describes the specified security groups or all of your security groups.

This is the response object from the DescribeSecurityGroups operation.

Container for the parameters to the DescribeSecurityGroupVpcAssociations operation. Describes security group VPC associations made with AssociateSecurityGroupVpc.

This is the response object from the DescribeSecurityGroupVpcAssociations operation.

Container for the parameters to the DescribeSnapshotAttribute operation. Describes the specified attribute of the specified snapshot. You can specify only one attribute at a time.

For more information about EBS snapshots, see Amazon EBS snapshots in the Amazon EBS User Guide.

This is the response object from the DescribeSnapshotAttribute operation.

Container for the parameters to the DescribeSnapshots operation. Describes the specified EBS snapshots available to you or all of the EBS snapshots available to you.

The snapshots available to you include public snapshots, private snapshots that you own, and private snapshots owned by other Amazon Web Services accounts for which you have explicit create volume permissions.

The create volume permissions fall into the following categories:

• public: The owner of the snapshot granted create volume permissions for the snapshot to the all group. All Amazon Web Services accounts have create volume permissions for these snapshots.

• explicit: The owner of the snapshot granted create volume permissions to a specific Amazon Web Services account.

• implicit: An Amazon Web Services account has implicit create volume permissions for all snapshots it owns.

The list of snapshots returned can be filtered by specifying snapshot IDs, snapshot owners, or Amazon Web Services accounts with create volume permissions. If no options are specified, Amazon EC2 returns all snapshots for which you have create volume permissions.

If you specify one or more snapshot IDs, only snapshots that have the specified IDs are returned. If you specify an invalid snapshot ID, an error is returned. If you specify a snapshot ID for which you do not have access, it is not included in the returned results.

If you specify one or more snapshot owners using the OwnerIds option, only snapshots from the specified owners and for which you have access are returned. The results can include the Amazon Web Services account IDs of the specified owners, amazon for snapshots owned by Amazon, or self for snapshots that you own.

If you specify a list of restorable users, only snapshots with create snapshot permissions for those users are returned. You can specify Amazon Web Services account IDs (if you own the snapshots), self for snapshots for which you own or have explicit permissions, or all for public snapshots.

If you are describing a long list of snapshots, we recommend that you paginate the output to make the list more manageable. For more information, see Pagination.

To get the state of fast snapshot restores for a snapshot, use DescribeFastSnapshotRestores.

For more information about EBS snapshots, see Amazon EBS snapshots in the Amazon EBS User Guide.

This is the response object from the DescribeSnapshots operation.

Container for the parameters to the DescribeSnapshotTierStatus operation. Describes the storage tier status of one or more Amazon EBS snapshots.

This is the response object from the DescribeSnapshotTierStatus operation.

Container for the parameters to the DescribeSpotDatafeedSubscription operation. Describes the data feed for Spot Instances. For more information, see Spot Instance data feed in the Amazon EC2 User Guide.

Contains the output of DescribeSpotDatafeedSubscription.

Container for the parameters to the DescribeSpotFleetInstances operation. Describes the running instances for the specified Spot Fleet.

Contains the output of DescribeSpotFleetInstances.

Container for the parameters to the DescribeSpotFleetRequestHistory operation. Describes the events for the specified Spot Fleet request during the specified time.

Spot Fleet events are delayed by up to 30 seconds before they can be described. This ensures that you can query by the last evaluated time and not miss a recorded event. Spot Fleet events are available for 48 hours.

For more information, see Monitor fleet events using Amazon EventBridge in the Amazon EC2 User Guide.

Contains the output of DescribeSpotFleetRequestHistory.

Container for the parameters to the DescribeSpotFleetRequests operation. Describes your Spot Fleet requests.

Spot Fleet requests are deleted 48 hours after they are canceled and their instances are terminated.

Contains the output of DescribeSpotFleetRequests.

Container for the parameters to the DescribeSpotInstanceRequests operation. Describes the specified Spot Instance requests.

You can use DescribeSpotInstanceRequests to find a running Spot Instance by examining the response. If the status of the Spot Instance is fulfilled, the instance ID appears in the response and contains the identifier of the instance. Alternatively, you can use DescribeInstances with a filter to look for instances where the instance lifecycle is spot.

We recommend that you set MaxResults to a value between 5 and 1000 to limit the number of items returned. This paginates the output, which makes the list more manageable and returns the items faster. If the list of items exceeds your MaxResults value, then that number of items is returned along with a NextToken value that can be passed to a subsequent DescribeSpotInstanceRequests request to retrieve the remaining items.

Spot Instance requests are deleted four hours after they are canceled and their instances are terminated.

Contains the output of DescribeSpotInstanceRequests.

Container for the parameters to the DescribeSpotPriceHistory operation. Describes the Spot price history. For more information, see Spot Instance pricing history in the Amazon EC2 User Guide.

When you specify a start and end time, the operation returns the prices of the instance types within that time range. It also returns the last price change before the start time, which is the effective price as of the start time.

Contains the output of DescribeSpotPriceHistory.

Container for the parameters to the DescribeStaleSecurityGroups operation. Describes the stale security group rules for security groups referenced across a VPC peering connection, transit gateway connection, or with a security group VPC association. Rules are stale when they reference a deleted security group. Rules can also be stale if they reference a security group in a peer VPC for which the VPC peering connection has been deleted, across a transit gateway where the transit gateway has been deleted (or the transit gateway security group referencing feature has been disabled), or if a security group VPC association has been disassociated.

This is the response object from the DescribeStaleSecurityGroups operation.

Container for the parameters to the DescribeStoreImageTasks operation. Describes the progress of the AMI store tasks. You can describe the store tasks for specified AMIs. If you don't specify the AMIs, you get a paginated list of store tasks from the last 31 days.

For each AMI task, the response indicates if the task is InProgress, Completed, or Failed. For tasks InProgress, the response shows the estimated progress as a percentage.

Tasks are listed in reverse chronological order. Currently, only tasks from the past 31 days can be viewed.

To use this API, you must have the required permissions. For more information, see Permissions for storing and restoring AMIs using Amazon S3 in the Amazon EC2 User Guide.

For more information, see Store and restore an AMI using Amazon S3 in the Amazon EC2 User Guide.

This is the response object from the DescribeStoreImageTasks operation.

Container for the parameters to the DescribeSubnets operation. Describes your subnets. The default is to describe all your subnets. Alternatively, you can specify specific subnet IDs or filter the results to include only the subnets that match specific criteria.

For more information, see Subnets in the Amazon VPC User Guide.

This is the response object from the DescribeSubnets operation.

Container for the parameters to the DescribeTags operation. Describes the specified tags for your EC2 resources.

For more information about tags, see Tag your Amazon EC2 resources in the Amazon Elastic Compute Cloud User Guide.

This is the response object from the DescribeTags operation.

Container for the parameters to the DescribeTrafficMirrorFilterRules operation. Describe traffic mirror filters that determine the traffic that is mirrored.

This is the response object from the DescribeTrafficMirrorFilterRules operation.

Container for the parameters to the DescribeTrafficMirrorFilters operation. Describes one or more Traffic Mirror filters.

This is the response object from the DescribeTrafficMirrorFilters operation.

Container for the parameters to the DescribeTrafficMirrorSessions operation. Describes one or more Traffic Mirror sessions. By default, all Traffic Mirror sessions are described. Alternatively, you can filter the results.

This is the response object from the DescribeTrafficMirrorSessions operation.

Container for the parameters to the DescribeTrafficMirrorTargets operation. Information about one or more Traffic Mirror targets.

This is the response object from the DescribeTrafficMirrorTargets operation.

Container for the parameters to the DescribeTransitGatewayAttachments operation. Describes one or more attachments between resources and transit gateways. By default, all attachments are described. Alternatively, you can filter the results by attachment ID, attachment state, resource ID, or resource owner.

This is the response object from the DescribeTransitGatewayAttachments operation.

Container for the parameters to the DescribeTransitGatewayConnectPeers operation. Describes one or more Connect peers.

This is the response object from the DescribeTransitGatewayConnectPeers operation.

Container for the parameters to the DescribeTransitGatewayConnects operation. Describes one or more Connect attachments.

This is the response object from the DescribeTransitGatewayConnects operation.

Container for the parameters to the DescribeTransitGatewayMulticastDomains operation. Describes one or more transit gateway multicast domains.

This is the response object from the DescribeTransitGatewayMulticastDomains operation.

Container for the parameters to the DescribeTransitGatewayPeeringAttachments operation. Describes your transit gateway peering attachments.

This is the response object from the DescribeTransitGatewayPeeringAttachments operation.

Container for the parameters to the DescribeTransitGatewayPolicyTables operation. Describes one or more transit gateway route policy tables.

This is the response object from the DescribeTransitGatewayPolicyTables operation.

Container for the parameters to the DescribeTransitGatewayRouteTableAnnouncements operation. Describes one or more transit gateway route table advertisements.

This is the response object from the DescribeTransitGatewayRouteTableAnnouncements operation.

Container for the parameters to the DescribeTransitGatewayRouteTables operation. Describes one or more transit gateway route tables. By default, all transit gateway route tables are described. Alternatively, you can filter the results.

This is the response object from the DescribeTransitGatewayRouteTables operation.

Container for the parameters to the DescribeTransitGateways operation. Describes one or more transit gateways. By default, all transit gateways are described. Alternatively, you can filter the results.

This is the response object from the DescribeTransitGateways operation.

Container for the parameters to the DescribeTransitGatewayVpcAttachments operation. Describes one or more VPC attachments. By default, all VPC attachments are described. Alternatively, you can filter the results.

This is the response object from the DescribeTransitGatewayVpcAttachments operation.

Container for the parameters to the DescribeTrunkInterfaceAssociations operation. Describes one or more network interface trunk associations.

This is the response object from the DescribeTrunkInterfaceAssociations operation.

Container for the parameters to the DescribeVerifiedAccessEndpoints operation. Describes the specified Amazon Web Services Verified Access endpoints.

This is the response object from the DescribeVerifiedAccessEndpoints operation.

Container for the parameters to the DescribeVerifiedAccessGroups operation. Describes the specified Verified Access groups.

This is the response object from the DescribeVerifiedAccessGroups operation.

Container for the parameters to the DescribeVerifiedAccessInstanceLoggingConfigurations operation. Describes the specified Amazon Web Services Verified Access instances.

This is the response object from the DescribeVerifiedAccessInstanceLoggingConfigurations operation.

Container for the parameters to the DescribeVerifiedAccessInstances operation. Describes the specified Amazon Web Services Verified Access instances.

This is the response object from the DescribeVerifiedAccessInstances operation.

Container for the parameters to the DescribeVerifiedAccessTrustProviders operation. Describes the specified Amazon Web Services Verified Access trust providers.

This is the response object from the DescribeVerifiedAccessTrustProviders operation.

Container for the parameters to the DescribeVolumeAttribute operation. Describes the specified attribute of the specified volume. You can specify only one attribute at a time.

For more information about EBS volumes, see Amazon EBS volumes in the Amazon EBS User Guide.

This is the response object from the DescribeVolumeAttribute operation.

Container for the parameters to the DescribeVolumesModifications operation. Describes the most recent volume modification request for the specified EBS volumes.

For more information, see Monitor the progress of volume modifications in the Amazon EBS User Guide.

This is the response object from the DescribeVolumesModifications operation.

Container for the parameters to the DescribeVolumes operation. Describes the specified EBS volumes or all of your EBS volumes.

If you are describing a long list of volumes, we recommend that you paginate the output to make the list more manageable. For more information, see Pagination.

For more information about EBS volumes, see Amazon EBS volumes in the Amazon EBS User Guide.

This is the response object from the DescribeVolumes operation.

Container for the parameters to the DescribeVolumeStatus operation. Describes the status of the specified volumes. Volume status provides the result of the checks performed on your volumes to determine events that can impair the performance of your volumes. The performance of a volume can be affected if an issue occurs on the volume's underlying host. If the volume's underlying host experiences a power outage or system issue, after the system is restored, there could be data inconsistencies on the volume. Volume events notify you if this occurs. Volume actions notify you if any action needs to be taken in response to the event.

The DescribeVolumeStatus operation provides the following information about the specified volumes:

Status: Reflects the current status of the volume. The possible values are ok, impaired , warning, or insufficient-data. If all checks pass, the overall status of the volume is ok. If the check fails, the overall status is impaired. If the status is insufficient-data, then the checks might still be taking place on your volume at the time. We recommend that you retry the request. For more information about volume status, see Monitor the status of your volumes in the Amazon EBS User Guide.

Events: Reflect the cause of a volume status and might require you to take action. For example, if your volume returns an impaired status, then the volume event might be potential-data-inconsistency. This means that your volume has been affected by an issue with the underlying host, has all I/O operations disabled, and might have inconsistent data.

Actions: Reflect the actions you might have to take in response to an event. For example, if the status of the volume is impaired and the volume event shows potential-data-inconsistency, then the action shows enable-volume-io. This means that you may want to enable the I/O operations for the volume by calling the EnableVolumeIO action and then check the volume for data consistency.

Volume status is based on the volume status checks, and does not reflect the volume state. Therefore, volume status does not indicate volumes in the error state (for example, when a volume is incapable of accepting I/O.)

This is the response object from the DescribeVolumeStatus operation.

Container for the parameters to the DescribeVpcAttribute operation. Describes the specified attribute of the specified VPC. You can specify only one attribute at a time.

This is the response object from the DescribeVpcAttribute operation.

Container for the parameters to the DescribeVpcClassicLinkDnsSupport operation.

This action is deprecated.

Describes the ClassicLink DNS support status of one or more VPCs. If enabled, the DNS hostname of a linked EC2-Classic instance resolves to its private IP address when addressed from an instance in the VPC to which it's linked. Similarly, the DNS hostname of an instance in a VPC resolves to its private IP address when addressed from a linked EC2-Classic instance.

This is the response object from the DescribeVpcClassicLinkDnsSupport operation.

Container for the parameters to the DescribeVpcClassicLink operation.

This action is deprecated.

Describes the ClassicLink status of the specified VPCs.

This is the response object from the DescribeVpcClassicLink operation.

Container for the parameters to the DescribeVpcEndpointConnectionNotifications operation. Describes the connection notifications for VPC endpoints and VPC endpoint services.

This is the response object from the DescribeVpcEndpointConnectionNotifications operation.

Container for the parameters to the DescribeVpcEndpointConnections operation. Describes the VPC endpoint connections to your VPC endpoint services, including any endpoints that are pending your acceptance.

This is the response object from the DescribeVpcEndpointConnections operation.

Container for the parameters to the DescribeVpcEndpointServiceConfigurations operation. Describes the VPC endpoint service configurations in your account (your services).

This is the response object from the DescribeVpcEndpointServiceConfigurations operation.

Container for the parameters to the DescribeVpcEndpointServicePermissions operation. Describes the principals (service consumers) that are permitted to discover your VPC endpoint service.

This is the response object from the DescribeVpcEndpointServicePermissions operation.

Container for the parameters to the DescribeVpcEndpointServices operation. Describes available services to which you can create a VPC endpoint.

When the service provider and the consumer have different accounts in multiple Availability Zones, and the consumer views the VPC endpoint service information, the response only includes the common Availability Zones. For example, when the service provider account uses us-east-1a and us-east-1c and the consumer uses us-east-1a and us-east-1b, the response includes the VPC endpoint services in the common Availability Zone, us-east-1a.

This is the response object from the DescribeVpcEndpointServices operation.

Container for the parameters to the DescribeVpcEndpoints operation. Describes your VPC endpoints. The default is to describe all your VPC endpoints. Alternatively, you can specify specific VPC endpoint IDs or filter the results to include only the VPC endpoints that match specific criteria.

This is the response object from the DescribeVpcEndpoints operation.

Container for the parameters to the DescribeVpcPeeringConnections operation. Describes your VPC peering connections. The default is to describe all your VPC peering connections. Alternatively, you can specify specific VPC peering connection IDs or filter the results to include only the VPC peering connections that match specific criteria.

This is the response object from the DescribeVpcPeeringConnections operation.

Container for the parameters to the DescribeVpcs operation. Describes your VPCs. The default is to describe all your VPCs. Alternatively, you can specify specific VPC IDs or filter the results to include only the VPCs that match specific criteria.

This is the response object from the DescribeVpcs operation.

Container for the parameters to the DescribeVpnConnections operation. Describes one or more of your VPN connections.

For more information, see Amazon Web Services Site-to-Site VPN in the Amazon Web Services Site-to-Site VPN User Guide.

Contains the output of DescribeVpnConnections.

Container for the parameters to the DescribeVpnGateways operation. Describes one or more of your virtual private gateways.

For more information, see Amazon Web Services Site-to-Site VPN in the Amazon Web Services Site-to-Site VPN User Guide.

Contains the output of DescribeVpnGateways.

Describes the destination options for a flow log.

Describes the destination options for a flow log.

Container for the parameters to the DetachClassicLinkVpc operation.

This action is deprecated.

Unlinks (detaches) a linked EC2-Classic instance from a VPC. After the instance has been unlinked, the VPC security groups are no longer associated with it. An instance is automatically unlinked from a VPC when it's stopped.

This is the response object from the DetachClassicLinkVpc operation.

Container for the parameters to the DetachInternetGateway operation. Detaches an internet gateway from a VPC, disabling connectivity between the internet and the VPC. The VPC must not contain any running instances with Elastic IP addresses or public IPv4 addresses.

This is the response object from the DetachInternetGateway operation.

Container for the parameters to the DetachNetworkInterface operation. Detaches a network interface from an instance.

This is the response object from the DetachNetworkInterface operation.

Container for the parameters to the DetachVerifiedAccessTrustProvider operation. Detaches the specified Amazon Web Services Verified Access trust provider from the specified Amazon Web Services Verified Access instance.

This is the response object from the DetachVerifiedAccessTrustProvider operation.

Container for the parameters to the DetachVolume operation. Detaches an EBS volume from an instance. Make sure to unmount any file systems on the device within your operating system before detaching the volume. Failure to do so can result in the volume becoming stuck in the busy state while detaching. If this happens, detachment can be delayed indefinitely until you unmount the volume, force detachment, reboot the instance, or all three. If an EBS volume is the root device of an instance, it can't be detached while the instance is running. To detach the root volume, stop the instance first.

When a volume with an Amazon Web Services Marketplace product code is detached from an instance, the product code is no longer associated with the instance.

You can't detach or force detach volumes that are attached to Amazon ECS or Fargate tasks. Attempting to do this results in the UnsupportedOperationException exception with the Unable to detach volume attached to ECS tasks error message.

For more information, see Detach an Amazon EBS volume in the Amazon EBS User Guide.

Contains the response data from the DetachVolume operation.

Container for the parameters to the DetachVpnGateway operation. Detaches a virtual private gateway from a VPC. You do this if you're planning to turn off the VPC and not use it anymore. You can confirm a virtual private gateway has been completely detached from a VPC by describing the virtual private gateway (any attachments to the virtual private gateway are also described).

You must wait for the attachment's state to switch to detached before you can delete the VPC or attach a different VPC to the virtual private gateway.

This is the response object from the DetachVpnGateway operation.

Describes the options for an Amazon Web Services Verified Access device-identity based trust provider.

Describes a DHCP configuration option.

The set of DHCP options.

Describes an Active Directory.

Describes the Active Directory to be used for client authentication.

Container for the parameters to the DisableAddressTransfer operation. Disables Elastic IP address transfer. For more information, see Transfer Elastic IP addresses in the Amazon VPC User Guide.

This is the response object from the DisableAddressTransfer operation.

Container for the parameters to the DisableAwsNetworkPerformanceMetricSubscription operation. Disables Infrastructure Performance metric subscriptions.

This is the response object from the DisableAwsNetworkPerformanceMetricSubscription operation.

Container for the parameters to the DisableEbsEncryptionByDefault operation. Disables EBS encryption by default for your account in the current Region.

After you disable encryption by default, you can still create encrypted volumes by enabling encryption when you create each volume.

Disabling encryption by default does not change the encryption status of your existing volumes.

For more information, see Amazon EBS encryption in the Amazon EBS User Guide.

This is the response object from the DisableEbsEncryptionByDefault operation.

Container for the parameters to the DisableFastLaunch operation. Discontinue Windows fast launch for a Windows AMI, and clean up existing pre-provisioned snapshots. After you disable Windows fast launch, the AMI uses the standard launch process for each new instance. Amazon EC2 must remove all pre-provisioned snapshots before you can enable Windows fast launch again.

You can only change these settings for Windows AMIs that you own or that have been shared with you.

This is the response object from the DisableFastLaunch operation.

Contains information about the errors that occurred when disabling fast snapshot restores.

Container for the parameters to the DisableFastSnapshotRestores operation. Disables fast snapshot restores for the specified snapshots in the specified Availability Zones.

This is the response object from the DisableFastSnapshotRestores operation.

Describes an error that occurred when disabling fast snapshot restores.

Contains information about an error that occurred when disabling fast snapshot restores.

Describes fast snapshot restores that were successfully disabled.