rebase: bump github.com/aws/aws-sdk-go from 1.44.172 to 1.44.180

Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.44.172 to 1.44.180.
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.44.172...v1.44.180)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

go.mod

@@ -4,7 +4,7 @@ go 1.18
 
 require (
 	github.com/IBM/keyprotect-go-client v0.9.2
-	github.com/aws/aws-sdk-go v1.44.172
+	github.com/aws/aws-sdk-go v1.44.180
 	github.com/aws/aws-sdk-go-v2/service/sts v1.17.7
 	github.com/ceph/ceph-csi/api v0.0.0-00010101000000-000000000000
 	// TODO: API for managing subvolume metadata and snapshot metadata requires `ceph_ci_untested` build-tag

go.sum

@@ -140,8 +140,8 @@ github.com/asaskevich/govalidator v0.0.0-20180720115003-f9ffefc3facf/go.mod h1:l
 github.com/asaskevich/govalidator v0.0.0-20190424111038-f61b66f89f4a/go.mod h1:lB+ZfQJz7igIIfQNfa7Ml4HSf2uFQQRzpGGRXenZAgY=
 github.com/aws/aws-sdk-go v1.25.37/go.mod h1:KmX6BPdI08NWTb3/sm4ZGu5ShLoqVDhKgpiN924inxo=
 github.com/aws/aws-sdk-go v1.25.41/go.mod h1:KmX6BPdI08NWTb3/sm4ZGu5ShLoqVDhKgpiN924inxo=
-github.com/aws/aws-sdk-go v1.44.172 h1:JwhHWVkU/UUq8b4kc2ETzoYg6UXlSslK1EthXcXY8kI=
+github.com/aws/aws-sdk-go v1.44.180 h1:VLZuAHI9fa/3WME5JjpVjcPCNfpGHVMiHx8sLHWhMgI=
-github.com/aws/aws-sdk-go v1.44.172/go.mod h1:aVsgQcEevwlmQ7qHE9I3h+dtQgpqhFB+i8Phjh7fkwI=
+github.com/aws/aws-sdk-go v1.44.180/go.mod h1:aVsgQcEevwlmQ7qHE9I3h+dtQgpqhFB+i8Phjh7fkwI=
 github.com/aws/aws-sdk-go-v2 v1.17.3 h1:shN7NlnVzvDUgPQ+1rLMSxY8OWRNDRYtiqe0p/PgrhY=
 github.com/aws/aws-sdk-go-v2 v1.17.3/go.mod h1:uzbQtefpm44goOPmdKyAlXSNcwlRgF3ePWVW6EtJvvw=
 github.com/aws/aws-sdk-go-v2/internal/configsources v1.1.27 h1:I3cakv2Uy1vNmmhRQmFptYDxOvBnwCdNwyw63N0RaRU=

vendor/github.com/aws/aws-sdk-go/aws/endpoints/defaults.go

@@ -3913,6 +3913,9 @@ var awsPartition = partition{
 					},
 					Deprecated: boxedTrue,
 				},
+				endpointKey{
+					Region: "me-central-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "me-south-1",
 				}: endpoint{},
@@ -4140,6 +4143,43 @@ var awsPartition = partition{
 				},
 			},
 		},
+		"cleanrooms": service{
+			Endpoints: serviceEndpoints{
+				endpointKey{
+					Region: "ap-northeast-1",
+				}: endpoint{},
+				endpointKey{
+					Region: "ap-northeast-2",
+				}: endpoint{},
+				endpointKey{
+					Region: "ap-southeast-1",
+				}: endpoint{},
+				endpointKey{
+					Region: "ap-southeast-2",
+				}: endpoint{},
+				endpointKey{
+					Region: "eu-central-1",
+				}: endpoint{},
+				endpointKey{
+					Region: "eu-north-1",
+				}: endpoint{},
+				endpointKey{
+					Region: "eu-west-1",
+				}: endpoint{},
+				endpointKey{
+					Region: "eu-west-2",
+				}: endpoint{},
+				endpointKey{
+					Region: "us-east-1",
+				}: endpoint{},
+				endpointKey{
+					Region: "us-east-2",
+				}: endpoint{},
+				endpointKey{
+					Region: "us-west-2",
+				}: endpoint{},
+			},
+		},
 		"cloud9": service{
 			Endpoints: serviceEndpoints{
 				endpointKey{
@@ -13977,6 +14017,141 @@ var awsPartition = partition{
 				},
 			},
 		},
+		"kendra-ranking": service{
+			Defaults: endpointDefaults{
+				defaultKey{}: endpoint{
+					DNSSuffix: "api.aws",
+				},
+				defaultKey{
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname:  "{service}-fips.{region}.{dnsSuffix}",
+					DNSSuffix: "api.aws",
+				},
+			},
+			Endpoints: serviceEndpoints{
+				endpointKey{
+					Region: "af-south-1",
+				}: endpoint{
+					Hostname: "kendra-ranking.af-south-1.api.aws",
+				},
+				endpointKey{
+					Region: "ap-east-1",
+				}: endpoint{
+					Hostname: "kendra-ranking.ap-east-1.api.aws",
+				},
+				endpointKey{
+					Region: "ap-northeast-2",
+				}: endpoint{
+					Hostname: "kendra-ranking.ap-northeast-2.api.aws",
+				},
+				endpointKey{
+					Region: "ap-northeast-3",
+				}: endpoint{
+					Hostname: "kendra-ranking.ap-northeast-3.api.aws",
+				},
+				endpointKey{
+					Region: "ap-south-2",
+				}: endpoint{
+					Hostname: "kendra-ranking.ap-south-2.api.aws",
+				},
+				endpointKey{
+					Region: "ap-southeast-1",
+				}: endpoint{
+					Hostname: "kendra-ranking.ap-southeast-1.api.aws",
+				},
+				endpointKey{
+					Region: "ap-southeast-2",
+				}: endpoint{
+					Hostname: "kendra-ranking.ap-southeast-2.api.aws",
+				},
+				endpointKey{
+					Region: "ap-southeast-3",
+				}: endpoint{
+					Hostname: "kendra-ranking.ap-southeast-3.api.aws",
+				},
+				endpointKey{
+					Region: "ca-central-1",
+				}: endpoint{
+					Hostname: "kendra-ranking.ca-central-1.api.aws",
+				},
+				endpointKey{
+					Region: "eu-central-1",
+				}: endpoint{
+					Hostname: "kendra-ranking.eu-central-1.api.aws",
+				},
+				endpointKey{
+					Region: "eu-central-2",
+				}: endpoint{
+					Hostname: "kendra-ranking.eu-central-2.api.aws",
+				},
+				endpointKey{
+					Region: "eu-north-1",
+				}: endpoint{
+					Hostname: "kendra-ranking.eu-north-1.api.aws",
+				},
+				endpointKey{
+					Region: "eu-south-1",
+				}: endpoint{
+					Hostname: "kendra-ranking.eu-south-1.api.aws",
+				},
+				endpointKey{
+					Region: "eu-south-2",
+				}: endpoint{
+					Hostname: "kendra-ranking.eu-south-2.api.aws",
+				},
+				endpointKey{
+					Region: "eu-west-1",
+				}: endpoint{
+					Hostname: "kendra-ranking.eu-west-1.api.aws",
+				},
+				endpointKey{
+					Region: "eu-west-2",
+				}: endpoint{
+					Hostname: "kendra-ranking.eu-west-2.api.aws",
+				},
+				endpointKey{
+					Region: "eu-west-3",
+				}: endpoint{
+					Hostname: "kendra-ranking.eu-west-3.api.aws",
+				},
+				endpointKey{
+					Region: "me-central-1",
+				}: endpoint{
+					Hostname: "kendra-ranking.me-central-1.api.aws",
+				},
+				endpointKey{
+					Region: "me-south-1",
+				}: endpoint{
+					Hostname: "kendra-ranking.me-south-1.api.aws",
+				},
+				endpointKey{
+					Region: "sa-east-1",
+				}: endpoint{
+					Hostname: "kendra-ranking.sa-east-1.api.aws",
+				},
+				endpointKey{
+					Region: "us-east-1",
+				}: endpoint{
+					Hostname: "kendra-ranking.us-east-1.api.aws",
+				},
+				endpointKey{
+					Region: "us-east-2",
+				}: endpoint{
+					Hostname: "kendra-ranking.us-east-2.api.aws",
+				},
+				endpointKey{
+					Region: "us-west-1",
+				}: endpoint{
+					Hostname: "kendra-ranking.us-west-1.api.aws",
+				},
+				endpointKey{
+					Region: "us-west-2",
+				}: endpoint{
+					Hostname: "kendra-ranking.us-west-2.api.aws",
+				},
+			},
+		},
 		"kinesis": service{
 			Endpoints: serviceEndpoints{
 				endpointKey{
@@ -20889,6 +21064,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "eu-west-3",
 				}: endpoint{},
+				endpointKey{
+					Region: "me-central-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "me-south-1",
 				}: endpoint{},
@@ -22622,6 +22800,9 @@ var awsPartition = partition{
 					},
 					Deprecated: boxedTrue,
 				},
+				endpointKey{
+					Region: "me-central-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "me-south-1",
 				}: endpoint{},
@@ -24650,6 +24831,9 @@ var awsPartition = partition{
 		},
 		"ssm-sap": service{
 			Endpoints: serviceEndpoints{
+				endpointKey{
+					Region: "ap-southeast-2",
+				}: endpoint{},
 				endpointKey{
 					Region: "us-east-1",
 				}: endpoint{},
@@ -26949,6 +27133,15 @@ var awsPartition = partition{
 					},
 					Deprecated: boxedTrue,
 				},
+				endpointKey{
+					Region: "fips-me-central-1",
+				}: endpoint{
+					Hostname: "waf-regional-fips.me-central-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "me-central-1",
+					},
+					Deprecated: boxedTrue,
+				},
 				endpointKey{
 					Region: "fips-me-south-1",
 				}: endpoint{
@@ -27003,6 +27196,23 @@ var awsPartition = partition{
 					},
 					Deprecated: boxedTrue,
 				},
+				endpointKey{
+					Region: "me-central-1",
+				}: endpoint{
+					Hostname: "waf-regional.me-central-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "me-central-1",
+					},
+				},
+				endpointKey{
+					Region:  "me-central-1",
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname: "waf-regional-fips.me-central-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "me-central-1",
+					},
+				},
 				endpointKey{
 					Region: "me-south-1",
 				}: endpoint{
@@ -27525,6 +27735,15 @@ var awsPartition = partition{
 					},
 					Deprecated: boxedTrue,
 				},
+				endpointKey{
+					Region: "fips-me-central-1",
+				}: endpoint{
+					Hostname: "wafv2-fips.me-central-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "me-central-1",
+					},
+					Deprecated: boxedTrue,
+				},
 				endpointKey{
 					Region: "fips-me-south-1",
 				}: endpoint{
@@ -27579,6 +27798,23 @@ var awsPartition = partition{
 					},
 					Deprecated: boxedTrue,
 				},
+				endpointKey{
+					Region: "me-central-1",
+				}: endpoint{
+					Hostname: "wafv2.me-central-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "me-central-1",
+					},
+				},
+				endpointKey{
+					Region:  "me-central-1",
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname: "wafv2-fips.me-central-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "me-central-1",
+					},
+				},
 				endpointKey{
 					Region: "me-south-1",
 				}: endpoint{
@@ -29088,6 +29324,31 @@ var awscnPartition = partition{
 				}: endpoint{},
 			},
 		},
+		"kendra-ranking": service{
+			Defaults: endpointDefaults{
+				defaultKey{}: endpoint{
+					DNSSuffix: "api.amazonwebservices.com.cn",
+				},
+				defaultKey{
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname:  "{service}-fips.{region}.{dnsSuffix}",
+					DNSSuffix: "api.amazonwebservices.com.cn",
+				},
+			},
+			Endpoints: serviceEndpoints{
+				endpointKey{
+					Region: "cn-north-1",
+				}: endpoint{
+					Hostname: "kendra-ranking.cn-north-1.api.amazonwebservices.com.cn",
+				},
+				endpointKey{
+					Region: "cn-northwest-1",
+				}: endpoint{
+					Hostname: "kendra-ranking.cn-northwest-1.api.amazonwebservices.com.cn",
+				},
+			},
+		},
 		"kinesis": service{
 			Endpoints: serviceEndpoints{
 				endpointKey{
@@ -29108,6 +29369,13 @@ var awscnPartition = partition{
 				}: endpoint{},
 			},
 		},
+		"kinesisvideo": service{
+			Endpoints: serviceEndpoints{
+				endpointKey{
+					Region: "cn-north-1",
+				}: endpoint{},
+			},
+		},
 		"kms": service{
 			Endpoints: serviceEndpoints{
 				endpointKey{
@@ -32654,6 +32922,31 @@ var awsusgovPartition = partition{
 				},
 			},
 		},
+		"kendra-ranking": service{
+			Defaults: endpointDefaults{
+				defaultKey{}: endpoint{
+					DNSSuffix: "api.aws",
+				},
+				defaultKey{
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname:  "{service}-fips.{region}.{dnsSuffix}",
+					DNSSuffix: "api.aws",
+				},
+			},
+			Endpoints: serviceEndpoints{
+				endpointKey{
+					Region: "us-gov-east-1",
+				}: endpoint{
+					Hostname: "kendra-ranking.us-gov-east-1.api.aws",
+				},
+				endpointKey{
+					Region: "us-gov-west-1",
+				}: endpoint{
+					Hostname: "kendra-ranking.us-gov-west-1.api.aws",
+				},
+			},
+		},
 		"kinesis": service{
 			Endpoints: serviceEndpoints{
 				endpointKey{

vendor/github.com/aws/aws-sdk-go/aws/version.go

@@ -5,4 +5,4 @@ package aws
 const SDKName = "aws-sdk-go"
 
 // SDKVersion is the version of this SDK
-const SDKVersion = "1.44.172"
+const SDKVersion = "1.44.180"

vendor/github.com/aws/aws-sdk-go/service/ec2/api.go

@@ -429,8 +429,7 @@ func (c *EC2) AcceptVpcEndpointConnectionsRequest(input *AcceptVpcEndpointConnec
 
 // AcceptVpcEndpointConnections API operation for Amazon Elastic Compute Cloud.
 //
-// Accepts one or more interface VPC endpoint connection requests to your VPC
+// Accepts connection requests to your VPC endpoint service.
-// endpoint service.
 //
 // Returns awserr.Error for service API and SDK errors. Use runtime type assertions
 // with awserr.Error's Code and Message methods to get detailed information about
@@ -8251,18 +8250,23 @@ func (c *EC2) CreateSubnetRequest(input *CreateSubnetInput) (req *request.Reques
 
 // CreateSubnet API operation for Amazon Elastic Compute Cloud.
 //
-// Creates a subnet in a specified VPC.
+// Creates a subnet in the specified VPC. For an IPv4 only subnet, specify an
+// IPv4 CIDR block. If the VPC has an IPv6 CIDR block, you can create an IPv6
+// only subnet or a dual stack subnet instead. For an IPv6 only subnet, specify
+// an IPv6 CIDR block. For a dual stack subnet, specify both an IPv4 CIDR block
+// and an IPv6 CIDR block.
 //
-// You must specify an IPv4 CIDR block for the subnet. After you create a subnet,
+// A subnet CIDR block must not overlap the CIDR block of an existing subnet
-// you can't change its CIDR block. The allowed block size is between a /16
+// in the VPC. After you create a subnet, you can't change its CIDR block.
-// netmask (65,536 IP addresses) and /28 netmask (16 IP addresses). The CIDR
-// block must not overlap with the CIDR block of an existing subnet in the VPC.
 //
-// If you've associated an IPv6 CIDR block with your VPC, you can create a subnet
+// The allowed size for an IPv4 subnet is between a /28 netmask (16 IP addresses)
-// with an IPv6 CIDR block that uses a /64 prefix length.
+// and a /16 netmask (65,536 IP addresses). Amazon Web Services reserves both
+// the first four and the last IPv4 address in each subnet's CIDR block. They're
+// not available for your use.
 //
-// Amazon Web Services reserves both the first four and the last IPv4 address
+// If you've associated an IPv6 CIDR block with your VPC, you can associate
-// in each subnet's CIDR block. They're not available for use.
+// an IPv6 CIDR block with a subnet when you create it. The allowed block size
+// for an IPv6 subnet is a /64 netmask.
 //
 // If you add more than one subnet to a VPC, they're set up in a star topology
 // with a logical router in the middle.
@@ -8271,7 +8275,7 @@ func (c *EC2) CreateSubnetRequest(input *CreateSubnetInput) (req *request.Reques
 // It's therefore possible to have a subnet with no running instances (they're
 // all stopped), but no remaining IP addresses available.
 //
-// For more information about subnets, see Your VPC and subnets (https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Subnets.html)
+// For more information, see Subnets (https://docs.aws.amazon.com/vpc/latest/userguide/configure-subnets.html)
 // in the Amazon Virtual Private Cloud User Guide.
 //
 // Returns awserr.Error for service API and SDK errors. Use runtime type assertions
@@ -10077,10 +10081,8 @@ func (c *EC2) CreateVpcRequest(input *CreateVpcInput) (req *request.Request, out
 
 // CreateVpc API operation for Amazon Elastic Compute Cloud.
 //
-// Creates a VPC with the specified IPv4 CIDR block. The smallest VPC you can
+// Creates a VPC with the specified CIDR blocks. For more information, see VPC
-// create uses a /28 netmask (16 IPv4 addresses), and the largest uses a /16
+// CIDR blocks (https://docs.aws.amazon.com/vpc/latest/userguide/configure-your-vpc.html#vpc-cidr-blocks)
-// netmask (65,536 IPv4 addresses). For more information about how large to
-// make your VPC, see Your VPC and subnets (https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Subnets.html)
 // in the Amazon Virtual Private Cloud User Guide.
 //
 // You can optionally request an IPv6 CIDR block for the VPC. You can request
@@ -10088,9 +10090,9 @@ func (c *EC2) CreateVpcRequest(input *CreateVpcInput) (req *request.Request, out
 // or an IPv6 CIDR block from an IPv6 address pool that you provisioned through
 // bring your own IP addresses (BYOIP (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-byoip.html)).
 //
-// By default, each instance you launch in the VPC has the default DHCP options,
+// By default, each instance that you launch in the VPC has the default DHCP
-// which include only a default DNS server that we provide (AmazonProvidedDNS).
+// options, which include only a default DNS server that we provide (AmazonProvidedDNS).
-// For more information, see DHCP options sets (https://docs.aws.amazon.com/vpc/latest/userguide/VPC_DHCP_Options.html)
+// For more information, see DHCP option sets (https://docs.aws.amazon.com/vpc/latest/userguide/VPC_DHCP_Options.html)
 // in the Amazon Virtual Private Cloud User Guide.
 //
 // You can specify the instance tenancy value for the VPC when you create it.
@@ -10326,7 +10328,7 @@ func (c *EC2) CreateVpcEndpointServiceConfigurationRequest(input *CreateVpcEndpo
 // CreateVpcEndpointServiceConfiguration API operation for Amazon Elastic Compute Cloud.
 //
 // Creates a VPC endpoint service to which service consumers (Amazon Web Services
-// accounts, IAM users, and IAM roles) can connect.
+// accounts, users, and IAM roles) can connect.
 //
 // Before you create an endpoint service, you must create one of the following
 // for your service:
@@ -15637,7 +15639,7 @@ func (c *EC2) DeleteVpcEndpointConnectionNotificationsRequest(input *DeleteVpcEn
 
 // DeleteVpcEndpointConnectionNotifications API operation for Amazon Elastic Compute Cloud.
 //
-// Deletes one or more VPC endpoint connection notifications.
+// Deletes the specified VPC endpoint connection notifications.
 //
 // Returns awserr.Error for service API and SDK errors. Use runtime type assertions
 // with awserr.Error's Code and Message methods to get detailed information about
@@ -15710,10 +15712,10 @@ func (c *EC2) DeleteVpcEndpointServiceConfigurationsRequest(input *DeleteVpcEndp
 
 // DeleteVpcEndpointServiceConfigurations API operation for Amazon Elastic Compute Cloud.
 //
-// Deletes one or more VPC endpoint service configurations in your account.
+// Deletes the specified VPC endpoint service configurations. Before you can
-// Before you delete the endpoint service configuration, you must reject any
+// delete an endpoint service configuration, you must reject any Available or
-// Available or PendingAcceptance interface endpoint connections that are attached
+// PendingAcceptance interface endpoint connections that are attached to the
-// to the service.
+// service.
 //
 // Returns awserr.Error for service API and SDK errors. Use runtime type assertions
 // with awserr.Error's Code and Message methods to get detailed information about
@@ -15786,26 +15788,16 @@ func (c *EC2) DeleteVpcEndpointsRequest(input *DeleteVpcEndpointsInput) (req *re
 
 // DeleteVpcEndpoints API operation for Amazon Elastic Compute Cloud.
 //
-// Deletes one or more specified VPC endpoints. You can delete any of the following
+// Deletes the specified VPC endpoints.
-// types of VPC endpoints.
 //
-//   - Gateway endpoint,
+// When you delete a gateway endpoint, we delete the endpoint routes in the
+// route tables for the endpoint.
 //
-//   - Gateway Load Balancer endpoint,
+// When you delete a Gateway Load Balancer endpoint, we delete its endpoint
+// network interfaces. You can only delete Gateway Load Balancer endpoints when
+// the routes that are associated with the endpoint are deleted.
 //
-//   - Interface endpoint
+// When you delete an interface endpoint, we delete its endpoint network interfaces.
-//
-// The following rules apply when you delete a VPC endpoint:
-//
-//   - When you delete a gateway endpoint, we delete the endpoint routes in
-//     the route tables that are associated with the endpoint.
-//
-//   - When you delete a Gateway Load Balancer endpoint, we delete the endpoint
-//     network interfaces. You can only delete Gateway Load Balancer endpoints
-//     when the routes that are associated with the endpoint are deleted.
-//
-//   - When you delete an interface endpoint, we delete the endpoint network
-//     interfaces.
 //
 // Returns awserr.Error for service API and SDK errors. Use runtime type assertions
 // with awserr.Error's Code and Message methods to get detailed information about
@@ -33305,7 +33297,7 @@ func (c *EC2) DescribeVpcEndpointsRequest(input *DescribeVpcEndpointsInput) (req
 
 // DescribeVpcEndpoints API operation for Amazon Elastic Compute Cloud.
 //
-// Describes one or more of your VPC endpoints.
+// Describes your VPC endpoints.
 //
 // Returns awserr.Error for service API and SDK errors. Use runtime type assertions
 // with awserr.Error's Code and Message methods to get detailed information about
@@ -46840,8 +46832,8 @@ func (c *EC2) ModifyVpcEndpointServicePermissionsRequest(input *ModifyVpcEndpoin
 // ModifyVpcEndpointServicePermissions API operation for Amazon Elastic Compute Cloud.
 //
 // Modifies the permissions for your VPC endpoint service. You can add or remove
-// permissions for service consumers (IAM users, IAM roles, and Amazon Web Services
+// permissions for service consumers (Amazon Web Services accounts, users, and
-// accounts) to connect to your endpoint service.
+// IAM roles) to connect to your endpoint service.
 //
 // If you grant permissions to all principals, the service is public. Any users
 // who know the name of a public service can send a request to attach an endpoint.
@@ -48848,8 +48840,7 @@ func (c *EC2) RejectVpcEndpointConnectionsRequest(input *RejectVpcEndpointConnec
 
 // RejectVpcEndpointConnections API operation for Amazon Elastic Compute Cloud.
 //
-// Rejects one or more VPC endpoint connection requests to your VPC endpoint
+// Rejects VPC endpoint connection requests to your VPC endpoint service.
-// service.
 //
 // Returns awserr.Error for service API and SDK errors. Use runtime type assertions
 // with awserr.Error's Code and Message methods to get detailed information about
@@ -53537,7 +53528,7 @@ type AcceptVpcEndpointConnectionsInput struct {
 	// ServiceId is a required field
 	ServiceId *string `type:"string" required:"true"`
 
-	// The IDs of one or more interface VPC endpoints.
+	// The IDs of the interface VPC endpoints.
 	//
 	// VpcEndpointIds is a required field
 	VpcEndpointIds []*string `locationName:"VpcEndpointId" locationNameList:"item" type:"list" required:"true"`
@@ -59162,9 +59153,9 @@ type AuthorizeSecurityGroupIngressInput struct {
 	// it is UnauthorizedOperation.
 	DryRun *bool `locationName:"dryRun" type:"boolean"`
 
-	// The start of port range for the TCP and UDP protocols, or an ICMP type number.
+	// If the protocol is TCP or UDP, this is the start of the port range. If the
-	// For the ICMP type number, use -1 to specify all types. If you specify all
+	// protocol is ICMP, this is the type number. A value of -1 indicates all ICMP
-	// ICMP types, you must specify all codes.
+	// types. If you specify all ICMP types, you must specify all ICMP codes.
 	//
 	// Alternatively, use a set of IP permissions to specify multiple rules and
 	// a description for the rule.
@@ -59216,9 +59207,9 @@ type AuthorizeSecurityGroupIngressInput struct {
 	// [VPC Only] The tags applied to the security group rule.
 	TagSpecifications []*TagSpecification `locationName:"TagSpecification" locationNameList:"item" type:"list"`
 
-	// The end of port range for the TCP and UDP protocols, or an ICMP code number.
+	// If the protocol is TCP or UDP, this is the end of the port range. If the
-	// For the ICMP code number, use -1 to specify all codes. If you specify all
+	// protocol is ICMP, this is the code. A value of -1 indicates all ICMP codes.
-	// ICMP types, you must specify all codes.
+	// If you specify all ICMP types, you must specify all ICMP codes.
 	//
 	// Alternatively, use a set of IP permissions to specify multiple rules and
 	// a description for the rule.
@@ -65659,7 +65650,8 @@ type CreateClientVpnEndpointInput struct {
 	// addresses. The address range cannot overlap with the local CIDR of the VPC
 	// in which the associated subnet is located, or the routes that you add manually.
 	// The address range cannot be changed after the Client VPN endpoint has been
-	// created. The CIDR block should be /22 or greater.
+	// created. Client CIDR range must have a size of at least /22 and must not
+	// be greater than /12.
 	//
 	// ClientCidrBlock is a required field
 	ClientCidrBlock *string `type:"string" required:"true"`
@@ -76156,8 +76148,8 @@ type CreateVpcEndpointConnectionNotificationInput struct {
 	// of the request. For more information, see How to ensure idempotency (https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html).
 	ClientToken *string `type:"string"`
 
-	// One or more endpoint events for which to receive notifications. Valid values
+	// The endpoint events for which to receive notifications. Valid values are
-	// are Accept, Connect, Delete, and Reject.
+	// Accept, Connect, Delete, and Reject.
 	//
 	// ConnectionEvents is a required field
 	ConnectionEvents []*string `locationNameList:"item" type:"list" required:"true"`
@@ -76291,7 +76283,6 @@ func (s *CreateVpcEndpointConnectionNotificationOutput) SetConnectionNotificatio
 	return s
 }
 
-// Contains the parameters for CreateVpcEndpoint.
 type CreateVpcEndpointInput struct {
 	_ struct{} `type:"structure"`
 
@@ -76332,22 +76323,22 @@ type CreateVpcEndpointInput struct {
 	// Default: true
 	PrivateDnsEnabled *bool `type:"boolean"`
 
-	// (Gateway endpoint) One or more route table IDs.
+	// (Gateway endpoint) The route table IDs.
 	RouteTableIds []*string `locationName:"RouteTableId" locationNameList:"item" type:"list"`
 
-	// (Interface endpoint) The ID of one or more security groups to associate with
+	// (Interface endpoint) The IDs of the security groups to associate with the
-	// the endpoint network interface.
+	// endpoint network interface. If this parameter is not specified, we use the
+	// default security group for the VPC.
 	SecurityGroupIds []*string `locationName:"SecurityGroupId" locationNameList:"item" type:"list"`
 
-	// The service name. To get a list of available services, use the DescribeVpcEndpointServices
+	// The service name.
-	// request, or get the name from the service provider.
 	//
 	// ServiceName is a required field
 	ServiceName *string `type:"string" required:"true"`
 
-	// (Interface and Gateway Load Balancer endpoints) The ID of one or more subnets
+	// (Interface and Gateway Load Balancer endpoints) The IDs of the subnets in
-	// in which to create an endpoint network interface. For a Gateway Load Balancer
+	// which to create an endpoint network interface. For a Gateway Load Balancer
-	// endpoint, you can specify one subnet only.
+	// endpoint, you can specify only one subnet.
 	SubnetIds []*string `locationName:"SubnetId" locationNameList:"item" type:"list"`
 
 	// The tags to associate with the endpoint.
@@ -76358,7 +76349,7 @@ type CreateVpcEndpointInput struct {
 	// Default: Gateway
 	VpcEndpointType *string `type:"string" enum:"VpcEndpointType"`
 
-	// The ID of the VPC in which the endpoint will be used.
+	// The ID of the VPC for the endpoint.
 	//
 	// VpcId is a required field
 	VpcId *string `type:"string" required:"true"`
@@ -76476,7 +76467,6 @@ func (s *CreateVpcEndpointInput) SetVpcId(v string) *CreateVpcEndpointInput {
 	return s
 }
 
-// Contains the output of CreateVpcEndpoint.
 type CreateVpcEndpointOutput struct {
 	_ struct{} `type:"structure"`
 
@@ -76535,11 +76525,10 @@ type CreateVpcEndpointServiceConfigurationInput struct {
 	// it is UnauthorizedOperation.
 	DryRun *bool `type:"boolean"`
 
-	// The Amazon Resource Names (ARNs) of one or more Gateway Load Balancers.
+	// The Amazon Resource Names (ARNs) of the Gateway Load Balancers.
 	GatewayLoadBalancerArns []*string `locationName:"GatewayLoadBalancerArn" locationNameList:"item" type:"list"`
 
-	// The Amazon Resource Names (ARNs) of one or more Network Load Balancers for
+	// The Amazon Resource Names (ARNs) of the Network Load Balancers.
-	// your service.
 	NetworkLoadBalancerArns []*string `locationName:"NetworkLoadBalancerArn" locationNameList:"item" type:"list"`
 
 	// (Interface endpoint configuration) The private DNS name to assign to the
@@ -77514,8 +77503,8 @@ type DataQuery struct {
 	// query, the dataResponse identifies the query as MyQuery01.
 	Id *string `type:"string"`
 
-	// The aggregation metric used for the data query. Currently only aggregation-latency
+	// The metric, aggregation-latency, indicating that network latency is aggregated
-	// is supported, indicating network latency.
+	// for the query. This is the only supported metric.
 	Metric *string `type:"string" enum:"MetricType"`
 
 	// The aggregation period used for the data query.
@@ -77525,12 +77514,10 @@ type DataQuery struct {
 	// example, us-east-1.
 	Source *string `type:"string"`
 
-	// Metric data aggregations over specified periods of time. The following are
+	// The metric data aggregation period, p50, between the specified startDate
-	// the supported Infrastructure Performance statistics:
+	// and endDate. For example, a metric of five_minutes is the median of all the
-	//
+	// data points gathered within those five minutes. p50 is the only supported
-	//    * p50 - The median value of the metric aggregated over a specified start
+	// metric.
-	//    and end time. For example, a metric of five_minutes is the median of all
-	//    the data points gathered within those five minutes.
 	Statistic *string `type:"string" enum:"StatisticType"`
 }
 
@@ -77599,8 +77586,8 @@ type DataResponse struct {
 	// The ID passed in the DataQuery.
 	Id *string `locationName:"id" type:"string"`
 
-	// The metric used for the network performance request. Currently only aggregate-latency
+	// The metric used for the network performance request. Only aggregate-latency
-	// is supported, showing network latency during a specified period.
+	// is supported, which shows network latency during a specified period.
 	Metric *string `locationName:"metric" type:"string" enum:"MetricType"`
 
 	// A list of MetricPoint objects.
@@ -83826,7 +83813,7 @@ func (s DeleteVolumeOutput) GoString() string {
 type DeleteVpcEndpointConnectionNotificationsInput struct {
 	_ struct{} `type:"structure"`
 
-	// One or more notification IDs.
+	// The IDs of the notifications.
 	//
 	// ConnectionNotificationIds is a required field
 	ConnectionNotificationIds []*string `locationName:"ConnectionNotificationId" locationNameList:"item" type:"list" required:"true"`
@@ -83921,7 +83908,7 @@ type DeleteVpcEndpointServiceConfigurationsInput struct {
 	// it is UnauthorizedOperation.
 	DryRun *bool `type:"boolean"`
 
-	// The IDs of one or more services.
+	// The IDs of the services.
 	//
 	// ServiceIds is a required field
 	ServiceIds []*string `locationName:"ServiceId" locationNameList:"item" type:"list" required:"true"`
@@ -84001,7 +83988,6 @@ func (s *DeleteVpcEndpointServiceConfigurationsOutput) SetUnsuccessful(v []*Unsu
 	return s
 }
 
-// Contains the parameters for DeleteVpcEndpoints.
 type DeleteVpcEndpointsInput struct {
 	_ struct{} `type:"structure"`
 
@@ -84011,7 +83997,7 @@ type DeleteVpcEndpointsInput struct {
 	// it is UnauthorizedOperation.
 	DryRun *bool `type:"boolean"`
 
-	// One or more VPC endpoint IDs.
+	// The IDs of the VPC endpoints.
 	//
 	// VpcEndpointIds is a required field
 	VpcEndpointIds []*string `locationName:"VpcEndpointId" locationNameList:"item" type:"list" required:"true"`
@@ -84060,7 +84046,6 @@ func (s *DeleteVpcEndpointsInput) SetVpcEndpointIds(v []*string) *DeleteVpcEndpo
 	return s
 }
 
-// Contains the output of DeleteVpcEndpoints.
 type DeleteVpcEndpointsOutput struct {
 	_ struct{} `type:"structure"`
 
@@ -92523,11 +92508,14 @@ type DescribeInstancesInput struct {
 	//    * metadata-options.http-tokens - The metadata request authorization state
 	//    (optional | required)
 	//
-	//    * metadata-options.http-put-response-hop-limit - The http metadata request
+	//    * metadata-options.http-put-response-hop-limit - The HTTP metadata request
 	//    put response hop limit (integer, possible values 1 to 64)
 	//
-	//    * metadata-options.http-endpoint - Enable or disable metadata access on
+	//    * metadata-options.http-endpoint - The status of access to the HTTP metadata
-	//    http endpoint (enabled | disabled)
+	//    endpoint on your instance (enabled | disabled)
+	//
+	//    * metadata-options.instance-metadata-tags - The status of access to instance
+	//    tags from the instance metadata (enabled | disabled)
 	//
 	//    * monitoring-state - Indicates whether detailed monitoring is enabled
 	//    (disabled | enabled).
@@ -104114,7 +104102,7 @@ type DescribeVpcEndpointConnectionNotificationsInput struct {
 	// it is UnauthorizedOperation.
 	DryRun *bool `type:"boolean"`
 
-	// One or more filters.
+	// The filters.
 	//
 	//    * connection-notification-arn - The ARN of the SNS topic for the notification.
 	//
@@ -104189,7 +104177,7 @@ func (s *DescribeVpcEndpointConnectionNotificationsInput) SetNextToken(v string)
 type DescribeVpcEndpointConnectionNotificationsOutput struct {
 	_ struct{} `type:"structure"`
 
-	// One or more notifications.
+	// The notifications.
 	ConnectionNotificationSet []*ConnectionNotification `locationName:"connectionNotificationSet" locationNameList:"item" type:"list"`
 
 	// The token to use to retrieve the next page of results. This value is null
@@ -104236,7 +104224,7 @@ type DescribeVpcEndpointConnectionsInput struct {
 	// it is UnauthorizedOperation.
 	DryRun *bool `type:"boolean"`
 
-	// One or more filters.
+	// The filters.
 	//
 	//    * ip-address-type - The IP address type (ipv4 | ipv6).
 	//
@@ -104311,7 +104299,7 @@ type DescribeVpcEndpointConnectionsOutput struct {
 	// when there are no more results to return.
 	NextToken *string `locationName:"nextToken" type:"string"`
 
-	// Information about one or more VPC endpoint connections.
+	// Information about the VPC endpoint connections.
 	VpcEndpointConnections []*VpcEndpointConnection `locationName:"vpcEndpointConnectionSet" locationNameList:"item" type:"list"`
 }
 
@@ -104354,7 +104342,7 @@ type DescribeVpcEndpointServiceConfigurationsInput struct {
 	// it is UnauthorizedOperation.
 	DryRun *bool `type:"boolean"`
 
-	// One or more filters.
+	// The filters.
 	//
 	//    * service-name - The name of the service.
 	//
@@ -104386,7 +104374,7 @@ type DescribeVpcEndpointServiceConfigurationsInput struct {
 	// The token to retrieve the next page of results.
 	NextToken *string `type:"string"`
 
-	// The IDs of one or more services.
+	// The IDs of the endpoint services.
 	ServiceIds []*string `locationName:"ServiceId" locationNameList:"item" type:"list"`
 }
 
@@ -104445,7 +104433,7 @@ type DescribeVpcEndpointServiceConfigurationsOutput struct {
 	// when there are no more results to return.
 	NextToken *string `locationName:"nextToken" type:"string"`
 
-	// Information about one or more services.
+	// Information about the services.
 	ServiceConfigurations []*ServiceConfiguration `locationName:"serviceConfigurationSet" locationNameList:"item" type:"list"`
 }
 
@@ -104488,7 +104476,7 @@ type DescribeVpcEndpointServicePermissionsInput struct {
 	// it is UnauthorizedOperation.
 	DryRun *bool `type:"boolean"`
 
-	// One or more filters.
+	// The filters.
 	//
 	//    * principal - The ARN of the principal.
 	//
@@ -104576,7 +104564,7 @@ func (s *DescribeVpcEndpointServicePermissionsInput) SetServiceId(v string) *Des
 type DescribeVpcEndpointServicePermissionsOutput struct {
 	_ struct{} `type:"structure"`
 
-	// Information about one or more allowed principals.
+	// Information about the allowed principals.
 	AllowedPrincipals []*AllowedPrincipal `locationName:"allowedPrincipals" locationNameList:"item" type:"list"`
 
 	// The token to use to retrieve the next page of results. This value is null
@@ -104614,7 +104602,6 @@ func (s *DescribeVpcEndpointServicePermissionsOutput) SetNextToken(v string) *De
 	return s
 }
 
-// Contains the parameters for DescribeVpcEndpointServices.
 type DescribeVpcEndpointServicesInput struct {
 	_ struct{} `type:"structure"`
 
@@ -104624,7 +104611,7 @@ type DescribeVpcEndpointServicesInput struct {
 	// it is UnauthorizedOperation.
 	DryRun *bool `type:"boolean"`
 
-	// One or more filters.
+	// The filters.
 	//
 	//    * owner - The ID or alias of the Amazon Web Services account that owns
 	//    the service.
@@ -104657,7 +104644,7 @@ type DescribeVpcEndpointServicesInput struct {
 	// a prior call.)
 	NextToken *string `type:"string"`
 
-	// One or more service names.
+	// The service names.
 	ServiceNames []*string `locationName:"ServiceName" locationNameList:"item" type:"list"`
 }
 
@@ -104709,7 +104696,6 @@ func (s *DescribeVpcEndpointServicesInput) SetServiceNames(v []*string) *Describ
 	return s
 }
 
-// Contains the output of DescribeVpcEndpointServices.
 type DescribeVpcEndpointServicesOutput struct {
 	_ struct{} `type:"structure"`
 
@@ -104720,7 +104706,7 @@ type DescribeVpcEndpointServicesOutput struct {
 	// Information about the service.
 	ServiceDetails []*ServiceDetail `locationName:"serviceDetailSet" locationNameList:"item" type:"list"`
 
-	// A list of supported services.
+	// The supported services.
 	ServiceNames []*string `locationName:"serviceNameSet" locationNameList:"item" type:"list"`
 }
 
@@ -104760,7 +104746,6 @@ func (s *DescribeVpcEndpointServicesOutput) SetServiceNames(v []*string) *Descri
 	return s
 }
 
-// Contains the parameters for DescribeVpcEndpoints.
 type DescribeVpcEndpointsInput struct {
 	_ struct{} `type:"structure"`
 
@@ -104770,7 +104755,7 @@ type DescribeVpcEndpointsInput struct {
 	// it is UnauthorizedOperation.
 	DryRun *bool `type:"boolean"`
 
-	// One or more filters.
+	// The filters.
 	//
 	//    * ip-address-type - The IP address type (ipv4 | ipv6).
 	//
@@ -104808,7 +104793,7 @@ type DescribeVpcEndpointsInput struct {
 	// a prior call.)
 	NextToken *string `type:"string"`
 
-	// One or more endpoint IDs.
+	// The IDs of the VPC endpoints.
 	VpcEndpointIds []*string `locationName:"VpcEndpointId" locationNameList:"item" type:"list"`
 }
 
@@ -104860,7 +104845,6 @@ func (s *DescribeVpcEndpointsInput) SetVpcEndpointIds(v []*string) *DescribeVpcE
 	return s
 }
 
-// Contains the output of DescribeVpcEndpoints.
 type DescribeVpcEndpointsOutput struct {
 	_ struct{} `type:"structure"`
 
@@ -115446,6 +115430,7 @@ type FpgaImage struct {
 	// The FPGA image identifier (AFI ID).
 	FpgaImageId *string `locationName:"fpgaImageId" type:"string"`
 
+	// The instance types supported by the AFI.
 	InstanceTypes []*string `locationName:"instanceTypes" locationNameList:"item" type:"list"`
 
 	// The name of the AFI.
@@ -125843,18 +125828,20 @@ type InstanceMetadataOptionsRequest struct {
 	// Possible values: Integers from 1 to 64
 	HttpPutResponseHopLimit *int64 `type:"integer"`
 
-	// The state of token usage for your instance metadata requests.
+	// IMDSv2 uses token-backed sessions. Set the use of HTTP tokens to optional
+	// (in other words, set the use of IMDSv2 to optional) or required (in other
+	// words, set the use of IMDSv2 to required).
 	//
-	// If the state is optional, you can choose to retrieve instance metadata with
+	//    * optional - When IMDSv2 is optional, you can choose to retrieve instance
-	// or without a session token on your request. If you retrieve the IAM role
+	//    metadata with or without a session token in your request. If you retrieve
-	// credentials without a token, the version 1.0 role credentials are returned.
+	//    the IAM role credentials without a token, the IMDSv1 role credentials
-	// If you retrieve the IAM role credentials using a valid session token, the
+	//    are returned. If you retrieve the IAM role credentials using a valid session
-	// version 2.0 role credentials are returned.
+	//    token, the IMDSv2 role credentials are returned.
 	//
-	// If the state is required, you must send a session token with any instance
+	//    * required - When IMDSv2 is required, you must send a session token with
-	// metadata retrieval requests. In this state, retrieving the IAM role credentials
+	//    any instance metadata retrieval requests. In this state, retrieving the
-	// always returns the version 2.0 credentials; the version 1.0 credentials are
+	//    IAM role credentials always returns IMDSv2 credentials; IMDSv1 credentials
-	// not available.
+	//    are not available.
 	//
 	// Default: optional
 	HttpTokens *string `type:"string" enum:"HttpTokensState"`
@@ -125938,18 +125925,20 @@ type InstanceMetadataOptionsResponse struct {
 	// Possible values: Integers from 1 to 64
 	HttpPutResponseHopLimit *int64 `locationName:"httpPutResponseHopLimit" type:"integer"`
 
-	// The state of token usage for your instance metadata requests.
+	// IMDSv2 uses token-backed sessions. Indicates whether the use of HTTP tokens
+	// is optional (in other words, indicates whether the use of IMDSv2 is optional)
+	// or required (in other words, indicates whether the use of IMDSv2 is required).
 	//
-	// If the state is optional, you can choose to retrieve instance metadata with
+	//    * optional - When IMDSv2 is optional, you can choose to retrieve instance
-	// or without a session token on your request. If you retrieve the IAM role
+	//    metadata with or without a session token in your request. If you retrieve
-	// credentials without a token, the version 1.0 role credentials are returned.
+	//    the IAM role credentials without a token, the IMDSv1 role credentials
-	// If you retrieve the IAM role credentials using a valid session token, the
+	//    are returned. If you retrieve the IAM role credentials using a valid session
-	// version 2.0 role credentials are returned.
+	//    token, the IMDSv2 role credentials are returned.
 	//
-	// If the state is required, you must send a session token with any instance
+	//    * required - When IMDSv2 is required, you must send a session token with
-	// metadata retrieval requests. In this state, retrieving the IAM role credentials
+	//    any instance metadata retrieval requests. In this state, retrieving the
-	// always returns the version 2.0 credentials; the version 1.0 credentials are
+	//    IAM role credentials always returns IMDSv2 credentials; IMDSv1 credentials
-	// not available.
+	//    are not available.
 	//
 	// Default: optional
 	HttpTokens *string `locationName:"httpTokens" type:"string" enum:"HttpTokensState"`
@@ -128738,9 +128727,10 @@ func (s *InternetGatewayAttachment) SetVpcId(v string) *InternetGatewayAttachmen
 type IpPermission struct {
 	_ struct{} `type:"structure"`
 
-	// The start of port range for the TCP and UDP protocols, or an ICMP/ICMPv6
+	// If the protocol is TCP or UDP, this is the start of the port range. If the
-	// type number. A value of -1 indicates all ICMP/ICMPv6 types. If you specify
+	// protocol is ICMP or ICMPv6, this is the type number. A value of -1 indicates
-	// all ICMP/ICMPv6 types, you must specify all codes.
+	// all ICMP/ICMPv6 types. If you specify all ICMP/ICMPv6 types, you must specify
+	// all ICMP/ICMPv6 codes.
 	FromPort *int64 `locationName:"fromPort" type:"integer"`
 
 	// The IP protocol name (tcp, udp, icmp, icmpv6) or number (see Protocol Numbers
@@ -128763,9 +128753,10 @@ type IpPermission struct {
 	// [VPC only] The prefix list IDs.
 	PrefixListIds []*PrefixListId `locationName:"prefixListIds" locationNameList:"item" type:"list"`
 
-	// The end of port range for the TCP and UDP protocols, or an ICMP/ICMPv6 code.
+	// If the protocol is TCP or UDP, this is the end of the port range. If the
-	// A value of -1 indicates all ICMP/ICMPv6 codes. If you specify all ICMP/ICMPv6
+	// protocol is ICMP or ICMPv6, this is the code. A value of -1 indicates all
-	// types, you must specify all codes.
+	// ICMP/ICMPv6 codes. If you specify all ICMP/ICMPv6 types, you must specify
+	// all ICMP/ICMPv6 codes.
 	ToPort *int64 `locationName:"toPort" type:"integer"`
 
 	// The security group and Amazon Web Services account ID pairs.
@@ -132045,19 +132036,20 @@ type LaunchTemplateInstanceMetadataOptions struct {
 	// Possible values: Integers from 1 to 64
 	HttpPutResponseHopLimit *int64 `locationName:"httpPutResponseHopLimit" type:"integer"`
 
-	// The state of token usage for your instance metadata requests. If the parameter
+	// Indicates whether IMDSv2 is optional or required.
-	// is not specified in the request, the default state is optional.
 	//
-	// If the state is optional, you can choose to retrieve instance metadata with
+	// optional - When IMDSv2 is optional, you can choose to retrieve instance metadata
-	// or without a signed token header on your request. If you retrieve the IAM
+	// with or without a session token in your request. If you retrieve the IAM
-	// role credentials without a token, the version 1.0 role credentials are returned.
+	// role credentials without a token, the IMDSv1 role credentials are returned.
-	// If you retrieve the IAM role credentials using a valid signed token, the
+	// If you retrieve the IAM role credentials using a valid session token, the
-	// version 2.0 role credentials are returned.
+	// IMDSv2 role credentials are returned.
 	//
-	// If the state is required, you must send a signed token header with any instance
+	// required - When IMDSv2 is required, you must send a session token with any
-	// metadata retrieval requests. In this state, retrieving the IAM role credentials
+	// instance metadata retrieval requests. In this state, retrieving the IAM role
-	// always returns the version 2.0 credentials; the version 1.0 credentials are
+	// credentials always returns IMDSv2 credentials; IMDSv1 credentials are not
-	// not available.
+	// available.
+	//
+	// Default: optional
 	HttpTokens *string `locationName:"httpTokens" type:"string" enum:"LaunchTemplateHttpTokensState"`
 
 	// Set to enabled to allow access to instance tags from the instance metadata.
@@ -132157,19 +132149,22 @@ type LaunchTemplateInstanceMetadataOptionsRequest struct {
 	// Possible values: Integers from 1 to 64
 	HttpPutResponseHopLimit *int64 `type:"integer"`
 
-	// The state of token usage for your instance metadata requests. If the parameter
+	// IMDSv2 uses token-backed sessions. Set the use of HTTP tokens to optional
-	// is not specified in the request, the default state is optional.
+	// (in other words, set the use of IMDSv2 to optional) or required (in other
+	// words, set the use of IMDSv2 to required).
 	//
-	// If the state is optional, you can choose to retrieve instance metadata with
+	//    * optional - When IMDSv2 is optional, you can choose to retrieve instance
-	// or without a signed token header on your request. If you retrieve the IAM
+	//    metadata with or without a session token in your request. If you retrieve
-	// role credentials without a token, the version 1.0 role credentials are returned.
+	//    the IAM role credentials without a token, the IMDSv1 role credentials
-	// If you retrieve the IAM role credentials using a valid signed token, the
+	//    are returned. If you retrieve the IAM role credentials using a valid session
-	// version 2.0 role credentials are returned.
+	//    token, the IMDSv2 role credentials are returned.
 	//
-	// If the state is required, you must send a signed token header with any instance
+	//    * required - When IMDSv2 is required, you must send a session token with
-	// metadata retrieval requests. In this state, retrieving the IAM role credentials
+	//    any instance metadata retrieval requests. In this state, retrieving the
-	// always returns the version 2.0 credentials; the version 1.0 credentials are
+	//    IAM role credentials always returns IMDSv2 credentials; IMDSv1 credentials
-	// not available.
+	//    are not available.
+	//
+	// Default: optional
 	HttpTokens *string `type:"string" enum:"LaunchTemplateHttpTokensState"`
 
 	// Set to enabled to allow access to instance tags from the instance metadata.
@@ -135094,7 +135089,7 @@ func (s *MemoryMiBRequest) SetMin(v int64) *MemoryMiBRequest {
 	return s
 }
 
-// Indicates whether the network was healthy or unhealthy at a particular point.
+// Indicates whether the network was healthy or degraded at a particular point.
 // The value is aggregated from the startDate to the endDate. Currently only
 // five_minutes is supported.
 type MetricPoint struct {
@@ -137770,19 +137765,22 @@ type ModifyInstanceMetadataOptionsInput struct {
 	// Possible values: Integers from 1 to 64
 	HttpPutResponseHopLimit *int64 `type:"integer"`
 
-	// The state of token usage for your instance metadata requests. If the parameter
+	// IMDSv2 uses token-backed sessions. Set the use of HTTP tokens to optional
-	// is not specified in the request, the default state is optional.
+	// (in other words, set the use of IMDSv2 to optional) or required (in other
+	// words, set the use of IMDSv2 to required).
 	//
-	// If the state is optional, you can choose to retrieve instance metadata with
+	//    * optional - When IMDSv2 is optional, you can choose to retrieve instance
-	// or without a session token on your request. If you retrieve the IAM role
+	//    metadata with or without a session token in your request. If you retrieve
-	// credentials without a token, the version 1.0 role credentials are returned.
+	//    the IAM role credentials without a token, the IMDSv1 role credentials
-	// If you retrieve the IAM role credentials using a valid session token, the
+	//    are returned. If you retrieve the IAM role credentials using a valid session
-	// version 2.0 role credentials are returned.
+	//    token, the IMDSv2 role credentials are returned.
 	//
-	// If the state is required, you must send a session token with any instance
+	//    * required - When IMDSv2 is required, you must send a session token with
-	// metadata retrieval requests. In this state, retrieving the IAM role credentials
+	//    any instance metadata retrieval requests. In this state, retrieving the
-	// always returns the version 2.0 credentials; the version 1.0 credentials are
+	//    IAM role credentials always returns IMDSv2 credentials; IMDSv1 credentials
-	// not available.
+	//    are not available.
+	//
+	// Default: optional
 	HttpTokens *string `type:"string" enum:"HttpTokensState"`
 
 	// The ID of the instance.
@@ -142403,8 +142401,8 @@ func (s ModifyVpcAttributeOutput) GoString() string {
 type ModifyVpcEndpointConnectionNotificationInput struct {
 	_ struct{} `type:"structure"`
 
-	// One or more events for the endpoint. Valid values are Accept, Connect, Delete,
+	// The events for the endpoint. Valid values are Accept, Connect, Delete, and
-	// and Reject.
+	// Reject.
 	ConnectionEvents []*string `locationNameList:"item" type:"list"`
 
 	// The ARN for the SNS topic for the notification.
@@ -142508,18 +142506,17 @@ func (s *ModifyVpcEndpointConnectionNotificationOutput) SetReturnValue(v bool) *
 	return s
 }
 
-// Contains the parameters for ModifyVpcEndpoint.
 type ModifyVpcEndpointInput struct {
 	_ struct{} `type:"structure"`
 
-	// (Gateway endpoint) One or more route tables IDs to associate with the endpoint.
+	// (Gateway endpoint) The IDs of the route tables to associate with the endpoint.
 	AddRouteTableIds []*string `locationName:"AddRouteTableId" locationNameList:"item" type:"list"`
 
-	// (Interface endpoint) One or more security group IDs to associate with the
+	// (Interface endpoint) The IDs of the security groups to associate with the
 	// network interface.
 	AddSecurityGroupIds []*string `locationName:"AddSecurityGroupId" locationNameList:"item" type:"list"`
 
-	// (Interface and Gateway Load Balancer endpoints) One or more subnet IDs in
+	// (Interface and Gateway Load Balancer endpoints) The IDs of the subnets in
 	// which to serve the endpoint. For a Gateway Load Balancer endpoint, you can
 	// specify only one subnet.
 	AddSubnetIds []*string `locationName:"AddSubnetId" locationNameList:"item" type:"list"`
@@ -142544,14 +142541,14 @@ type ModifyVpcEndpointInput struct {
 	// with the VPC.
 	PrivateDnsEnabled *bool `type:"boolean"`
 
-	// (Gateway endpoint) One or more route table IDs to disassociate from the endpoint.
+	// (Gateway endpoint) The IDs of the route tables to disassociate from the endpoint.
 	RemoveRouteTableIds []*string `locationName:"RemoveRouteTableId" locationNameList:"item" type:"list"`
 
-	// (Interface endpoint) One or more security group IDs to disassociate from
+	// (Interface endpoint) The IDs of the security groups to disassociate from
 	// the network interface.
 	RemoveSecurityGroupIds []*string `locationName:"RemoveSecurityGroupId" locationNameList:"item" type:"list"`
 
-	// (Interface endpoint) One or more subnets IDs in which to remove the endpoint.
+	// (Interface endpoint) The IDs of the subnets from which to remove the endpoint.
 	RemoveSubnetIds []*string `locationName:"RemoveSubnetId" locationNameList:"item" type:"list"`
 
 	// (Gateway endpoint) Specify true to reset the policy document to the default
@@ -142989,9 +142986,9 @@ func (s *ModifyVpcEndpointServicePayerResponsibilityOutput) SetReturnValue(v boo
 type ModifyVpcEndpointServicePermissionsInput struct {
 	_ struct{} `type:"structure"`
 
-	// The Amazon Resource Names (ARN) of one or more principals. Permissions are
+	// The Amazon Resource Names (ARN) of the principals. Permissions are granted
-	// granted to the principals in this list. To grant permissions to all principals,
+	// to the principals in this list. To grant permissions to all principals, specify
-	// specify an asterisk (*).
+	// an asterisk (*).
 	AddAllowedPrincipals []*string `locationNameList:"item" type:"list"`
 
 	// Checks whether you have the required permissions for the action, without
@@ -143000,8 +142997,8 @@ type ModifyVpcEndpointServicePermissionsInput struct {
 	// it is UnauthorizedOperation.
 	DryRun *bool `type:"boolean"`
 
-	// The Amazon Resource Names (ARN) of one or more principals. Permissions are
+	// The Amazon Resource Names (ARN) of the principals. Permissions are revoked
-	// revoked for principals in this list.
+	// for principals in this list.
 	RemoveAllowedPrincipals []*string `locationNameList:"item" type:"list"`
 
 	// The ID of the service.
@@ -151482,7 +151479,7 @@ type RejectVpcEndpointConnectionsInput struct {
 	// ServiceId is a required field
 	ServiceId *string `type:"string" required:"true"`
 
-	// The IDs of one or more VPC endpoints.
+	// The IDs of the VPC endpoints.
 	//
 	// VpcEndpointIds is a required field
 	VpcEndpointIds []*string `locationName:"VpcEndpointId" locationNameList:"item" type:"list" required:"true"`
@@ -153213,7 +153210,8 @@ type RequestLaunchTemplateData struct {
 	CreditSpecification *CreditSpecificationRequest `type:"structure"`
 
 	// Indicates whether to enable the instance for stop protection. For more information,
-	// see Stop Protection (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Stop_Start.html#Using_StopProtection).
+	// see Stop protection (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Stop_Start.html#Using_StopProtection)
+	// in the Amazon Elastic Compute Cloud User Guide.
 	DisableApiStop *bool `type:"boolean"`
 
 	// If you set this parameter to true, you can't terminate the instance using
@@ -155979,7 +155977,8 @@ type ResponseLaunchTemplateData struct {
 	CreditSpecification *CreditSpecification `locationName:"creditSpecification" type:"structure"`
 
 	// Indicates whether the instance is enabled for stop protection. For more information,
-	// see Stop Protection (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Stop_Start.html#Using_StopProtection).
+	// see Stop protection (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Stop_Start.html#Using_StopProtection)
+	// in the Amazon Elastic Compute Cloud User Guide.
 	DisableApiStop *bool `locationName:"disableApiStop" type:"boolean"`
 
 	// If set to true, indicates that the instance cannot be terminated using the
@@ -157204,8 +157203,9 @@ type RevokeSecurityGroupIngressInput struct {
 	// it is UnauthorizedOperation.
 	DryRun *bool `locationName:"dryRun" type:"boolean"`
 
-	// The start of port range for the TCP and UDP protocols, or an ICMP type number.
+	// If the protocol is TCP or UDP, this is the start of the port range. If the
-	// For the ICMP type number, use -1 to specify all ICMP types.
+	// protocol is ICMP, this is the type number. A value of -1 indicates all ICMP
+	// types.
 	FromPort *int64 `type:"integer"`
 
 	// The ID of the security group. You must specify either the security group
@@ -157246,8 +157246,8 @@ type RevokeSecurityGroupIngressInput struct {
 	// range, use a set of IP permissions instead.
 	SourceSecurityGroupOwnerId *string `type:"string"`
 
-	// The end of port range for the TCP and UDP protocols, or an ICMP code number.
+	// If the protocol is TCP or UDP, this is the end of the port range. If the
-	// For the ICMP code number, use -1 to specify all ICMP codes for the ICMP type.
+	// protocol is ICMP, this is the code. A value of -1 indicates all ICMP codes.
 	ToPort *int64 `type:"integer"`
 }
 
@@ -157998,8 +157998,7 @@ type RunInstancesInput struct {
 	// as part of the network interface.
 	SecurityGroupIds []*string `locationName:"SecurityGroupId" locationNameList:"SecurityGroupId" type:"list"`
 
-	// [EC2-Classic, default VPC] The names of the security groups. For a nondefault
+	// [EC2-Classic, default VPC] The names of the security groups.
-	// VPC, you must use security group IDs instead.
 	//
 	// If you specify a network interface, you must specify any security groups
 	// as part of the network interface.
@@ -160398,9 +160397,10 @@ type SecurityGroupRule struct {
 	// The security group rule description.
 	Description *string `locationName:"description" type:"string"`
 
-	// The start of port range for the TCP and UDP protocols, or an ICMP/ICMPv6
+	// If the protocol is TCP or UDP, this is the start of the port range. If the
-	// type. A value of -1 indicates all ICMP/ICMPv6 types. If you specify all ICMP/ICMPv6
+	// protocol is ICMP or ICMPv6, this is the type number. A value of -1 indicates
-	// types, you must specify all codes.
+	// all ICMP/ICMPv6 types. If you specify all ICMP/ICMPv6 types, you must specify
+	// all ICMP/ICMPv6 codes.
 	FromPort *int64 `locationName:"fromPort" type:"integer"`
 
 	// The ID of the security group.
@@ -160430,9 +160430,10 @@ type SecurityGroupRule struct {
 	// The tags applied to the security group rule.
 	Tags []*Tag `locationName:"tagSet" locationNameList:"item" type:"list"`
 
-	// The end of port range for the TCP and UDP protocols, or an ICMP/ICMPv6 code.
+	// If the protocol is TCP or UDP, this is the end of the port range. If the
-	// A value of -1 indicates all ICMP/ICMPv6 codes. If you specify all ICMP/ICMPv6
+	// protocol is ICMP or ICMPv6, this is the type number. A value of -1 indicates
-	// types, you must specify all codes.
+	// all ICMP/ICMPv6 codes. If you specify all ICMP/ICMPv6 types, you must specify
+	// all ICMP/ICMPv6 codes.
 	ToPort *int64 `locationName:"toPort" type:"integer"`
 }
 
@@ -160606,9 +160607,10 @@ type SecurityGroupRuleRequest struct {
 	// The description of the security group rule.
 	Description *string `type:"string"`
 
-	// The start of port range for the TCP and UDP protocols, or an ICMP/ICMPv6
+	// If the protocol is TCP or UDP, this is the start of the port range. If the
-	// type. A value of -1 indicates all ICMP/ICMPv6 types. If you specify all ICMP/ICMPv6
+	// protocol is ICMP or ICMPv6, this is the type number. A value of -1 indicates
-	// types, you must specify all codes.
+	// all ICMP/ICMPv6 types. If you specify all ICMP/ICMPv6 types, you must specify
+	// all ICMP/ICMPv6 codes.
 	FromPort *int64 `type:"integer"`
 
 	// The IP protocol name (tcp, udp, icmp, icmpv6) or number (see Protocol Numbers
@@ -160623,9 +160625,10 @@ type SecurityGroupRuleRequest struct {
 	// The ID of the security group that is referenced in the security group rule.
 	ReferencedGroupId *string `type:"string"`
 
-	// The end of port range for the TCP and UDP protocols, or an ICMP/ICMPv6 code.
+	// If the protocol is TCP or UDP, this is the end of the port range. If the
-	// A value of -1 indicates all ICMP/ICMPv6 codes. If you specify all ICMP/ICMPv6
+	// protocol is ICMP or ICMPv6, this is the code. A value of -1 indicates all
-	// types, you must specify all codes.
+	// ICMP/ICMPv6 codes. If you specify all ICMP/ICMPv6 types, you must specify
+	// all ICMP/ICMPv6 codes.
 	ToPort *int64 `type:"integer"`
 }
 
@@ -160864,7 +160867,7 @@ type ServiceConfiguration struct {
 	// The supported IP address types.
 	SupportedIpAddressTypes []*string `locationName:"supportedIpAddressTypeSet" locationNameList:"item" type:"list" enum:"ServiceConnectivityType"`
 
-	// Any tags assigned to the service.
+	// The tags assigned to the service.
 	Tags []*Tag `locationName:"tagSet" locationNameList:"item" type:"list"`
 }
 
@@ -161024,7 +161027,7 @@ type ServiceDetail struct {
 	// The supported IP address types.
 	SupportedIpAddressTypes []*string `locationName:"supportedIpAddressTypeSet" locationNameList:"item" type:"list" enum:"ServiceConnectivityType"`
 
-	// Any tags assigned to the service.
+	// The tags assigned to the service.
 	Tags []*Tag `locationName:"tagSet" locationNameList:"item" type:"list"`
 
 	// Indicates whether the service supports endpoint policies.
@@ -162771,7 +162774,8 @@ type SpotFleetRequestConfigData struct {
 	// TargetCapacity is a required field
 	TargetCapacity *int64 `locationName:"targetCapacity" type:"integer" required:"true"`
 
-	// The unit for the target capacity.
+	// The unit for the target capacity. TargetCapacityUnitType can only be specified
+	// when InstanceRequirements is specified.
 	//
 	// Default: units (translates to number of instances)
 	TargetCapacityUnitType *string `locationName:"targetCapacityUnitType" type:"string" enum:"TargetCapacityUnitType"`
@@ -165705,7 +165709,8 @@ type TargetCapacitySpecification struct {
 	// for On-Demand units, you cannot specify a target capacity for Spot units.
 	SpotTargetCapacity *int64 `locationName:"spotTargetCapacity" type:"integer"`
 
-	// The unit for the target capacity.
+	// The unit for the target capacity. TargetCapacityUnitType can only be specified
+	// when InstanceRequirements is specified.
 	//
 	// Default: units (translates to number of instances)
 	TargetCapacityUnitType *string `locationName:"targetCapacityUnitType" type:"string" enum:"TargetCapacityUnitType"`
@@ -165789,7 +165794,8 @@ type TargetCapacitySpecificationRequest struct {
 	// The number of Spot units to request.
 	SpotTargetCapacity *int64 `type:"integer"`
 
-	// The unit for the target capacity.
+	// The unit for the target capacity. TargetCapacityUnitType can only be specified
+	// when InstanceRequirements is specified.
 	//
 	// Default: units (translates to number of instances)
 	TargetCapacityUnitType *string `type:"string" enum:"TargetCapacityUnitType"`
@@ -173924,7 +173930,7 @@ type VpcEndpoint struct {
 	// The last error that occurred for endpoint.
 	LastError *LastError `locationName:"lastError" type:"structure"`
 
-	// (Interface endpoint) One or more network interfaces for the endpoint.
+	// (Interface endpoint) The network interfaces for the endpoint.
 	NetworkInterfaceIds []*string `locationName:"networkInterfaceIdSet" locationNameList:"item" type:"list"`
 
 	// The ID of the Amazon Web Services account that owns the endpoint.
@@ -173940,7 +173946,7 @@ type VpcEndpoint struct {
 	// Indicates whether the endpoint is being managed by its service.
 	RequesterManaged *bool `locationName:"requesterManaged" type:"boolean"`
 
-	// (Gateway endpoint) One or more route tables associated with the endpoint.
+	// (Gateway endpoint) The IDs of the route tables associated with the endpoint.
 	RouteTableIds []*string `locationName:"routeTableIdSet" locationNameList:"item" type:"list"`
 
 	// The name of the service to which the endpoint is associated.
@@ -173952,7 +173958,7 @@ type VpcEndpoint struct {
 	// (Interface endpoint) The subnets for the endpoint.
 	SubnetIds []*string `locationName:"subnetIdSet" locationNameList:"item" type:"list"`
 
-	// Any tags assigned to the endpoint.
+	// The tags assigned to the endpoint.
 	Tags []*Tag `locationName:"tagSet" locationNameList:"item" type:"list"`
 
 	// The ID of the endpoint.

vendor/github.com/aws/aws-sdk-go/service/ec2/doc.go

@@ -17,16 +17,16 @@
 // To learn more, see the following resources:
 //
 //   - Amazon EC2: Amazon EC2 product page (http://aws.amazon.com/ec2), Amazon
-//     EC2 documentation (http://aws.amazon.com/documentation/ec2)
+//     EC2 documentation (https://docs.aws.amazon.com/ec2/index.html)
 //
 //   - Amazon EBS: Amazon EBS product page (http://aws.amazon.com/ebs), Amazon
-//     EBS documentation (http://aws.amazon.com/documentation/ebs)
+//     EBS documentation (https://docs.aws.amazon.com/ebs/index.html)
 //
 //   - Amazon VPC: Amazon VPC product page (http://aws.amazon.com/vpc), Amazon
-//     VPC documentation (http://aws.amazon.com/documentation/vpc)
+//     VPC documentation (https://docs.aws.amazon.com/vpc/index.html)
 //
-//   - Amazon Web Services VPN: Amazon Web Services VPN product page (http://aws.amazon.com/vpn),
+//   - VPN: VPN product page (http://aws.amazon.com/vpn), VPN documentation
-//     Amazon Web Services VPN documentation (http://aws.amazon.com/documentation/vpn)
+//     (https://docs.aws.amazon.com/vpn/index.html)
 //
 // See https://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15 for more information on this service.
 //

vendor/modules.txt

@@ -14,7 +14,7 @@ github.com/armon/go-metrics
 # github.com/armon/go-radix v1.0.0
 ## explicit
 github.com/armon/go-radix
-# github.com/aws/aws-sdk-go v1.44.172
+# github.com/aws/aws-sdk-go v1.44.180
 ## explicit; go 1.11
 github.com/aws/aws-sdk-go/aws
 github.com/aws/aws-sdk-go/aws/awserr