ec2

type AMIStub struct {
	ImageID        string `json:"imageID,omitempty"`
	Name           string `json:"name,omitempty"`
	Description    string `json:"description,omitempty"`
	Architecture   string `json:"architecture,omitempty"`
	Platform       string `json:"platform,omitempty"`
	RootDeviceName string `json:"rootDeviceName,omitempty"`
	State          string `json:"state,omitempty"`
	// SourceImageID is the parent AMI this image was copied from via
	// CopyImage, or empty for root images. Used by GetImageAncestry.
	SourceImageID string `json:"sourceImageID,omitempty"`
}

type AccountAttribute struct {
	Name   string   `json:"name,omitempty"`
	Values []string `json:"values,omitempty"`
}

type ActiveVpnTunnelStatus struct {
	IKEVersion                string
	Phase1EncryptionAlgorithm string
	Phase1IntegrityAlgorithm  string
	Phase2EncryptionAlgorithm string
	Phase2IntegrityAlgorithm  string
	ProvisioningStatus        string
	ProvisioningStatusReason  string
	Phase1DHGroup             int32
	Phase2DHGroup             int32
}

type Address struct {
	AllocationID  string `json:"allocationID,omitempty"`
	AssociationID string `json:"associationID,omitempty"`
	PublicIP      string `json:"publicIP,omitempty"`
	InstanceID    string `json:"instanceID,omitempty"`
}

type AddressAttribute struct {
	AllocationID string `json:"allocationID,omitempty"`
	PublicIP     string `json:"publicIP,omitempty"`
	DomainName   string `json:"domainName,omitempty"`
}

type AddressTransfer struct {
	TransferOfferExpiry time.Time `json:"transferOfferExpiry"`
	AllocationID        string    `json:"allocationID,omitempty"`
	PublicIP            string    `json:"publicIP,omitempty"`
	TransferAccountID   string    `json:"transferAccountID,omitempty"`
	TransferOfferStatus string    `json:"transferOfferStatus,omitempty"`
}

type AllowedImagesSettings struct {
	State         string           `json:"state,omitempty"`
	ManagedBy     string           `json:"managedBy,omitempty"`
	ImageCriteria []ImageCriterion `json:"imageCriteria,omitempty"`
}

type Backend interface {

	// RunInstances creates one or more EC2 instance stubs.
	RunInstances(imageID, instanceType, subnetID string, count int) ([]*Instance, error)

	// SetInstanceAttribute persists a modifiable attribute on an instance.
	// Attribute names match EC2 ModifyInstanceAttribute keys (e.g. "userData", "instanceType").
	// Returns ErrInvalidInstanceState if the instance must be stopped for the given attribute.
	SetInstanceAttribute(instanceID, attribute, value string) error

	// PrimaryNetworkInterfaceSourceDestCheck returns the sourceDestCheck flag
	// of instanceID's primary network interface (defaults to true, matching
	// AWS's default for VPC instances).
	PrimaryNetworkInterfaceSourceDestCheck(instanceID string) bool

	// DescribeInstances returns instances, optionally filtered by IDs or state name.
	DescribeInstances(ids []string, state string) []*Instance

	// TerminateInstances transitions instances to shutting-down / terminated.
	// Returns previous and current state for each instance.
	TerminateInstances(ids []string) ([]*InstanceStateChange, error)

	// StartInstances transitions stopped instances to pending / running.
	// Returns ErrInvalidInstanceState if an instance is not stopped.
	StartInstances(ids []string) ([]*InstanceStateChange, error)

	// StopInstances transitions running instances to stopping / stopped.
	// Returns ErrInvalidInstanceState if an instance is not running.
	StopInstances(ids []string) ([]*InstanceStateChange, error)

	// RebootInstances keeps instances running (mock no-op transition).
	RebootInstances(ids []string) error

	// DescribeInstanceStatus returns per-instance status entries.
	DescribeInstanceStatus(ids []string) []*Instance

	// DescribeImages returns the built-in stub AMI catalogue.
	DescribeImages() []AMIStub

	// CreateImage creates an AMI from an instance.
	CreateImage(instanceID, name, description string) (*AMIStub, error)

	// DescribeImageUsageReports returns synthetic image usage reports.
	DescribeImageUsageReports() []*ImageUsageReport

	// DescribeRegions returns the list of supported AWS region names.
	DescribeRegions() []string

	// DescribeAvailabilityZones returns AZ names for the given region.
	DescribeAvailabilityZones(region string) []string

	// DescribeSecurityGroups returns security groups, optionally filtered by IDs.
	DescribeSecurityGroups(ids []string) []*SecurityGroup

	// CreateSecurityGroup creates a security group and returns it.
	CreateSecurityGroup(name, description, vpcID string) (*SecurityGroup, error)

	// DeleteSecurityGroup removes a security group by ID.
	DeleteSecurityGroup(id string) error

	// AuthorizeSecurityGroupIngress appends ingress rules to a security group.
	AuthorizeSecurityGroupIngress(groupID string, rules []SecurityGroupRule) error

	// AuthorizeSecurityGroupEgress appends egress rules to a security group.
	AuthorizeSecurityGroupEgress(groupID string, rules []SecurityGroupRule) error

	// RevokeSecurityGroupIngress removes matching ingress rules from a security group.
	RevokeSecurityGroupIngress(groupID string, rules []SecurityGroupRule) error

	// RevokeSecurityGroupEgress removes matching egress rules from a security group.
	RevokeSecurityGroupEgress(groupID string, rules []SecurityGroupRule) error

	// DescribeVpcs returns VPCs, optionally filtered by IDs.
	DescribeVpcs(ids []string) []*VPC

	// CreateVpc creates a new VPC with the given CIDR block.
	CreateVpc(cidr string) (*VPC, error)

	// DeleteVpc removes a VPC by ID.
	DeleteVpc(id string) error

	// DescribeSubnets returns subnets, optionally filtered by IDs.
	DescribeSubnets(ids []string) []*Subnet

	// CreateSubnet creates a new subnet in the given VPC.
	CreateSubnet(vpcID, cidr, az string) (*Subnet, error)

	// DeleteSubnet removes a subnet by ID.
	DeleteSubnet(id string) error

	// CreateKeyPair generates an RSA key pair and stores it.
	CreateKeyPair(name string) (*KeyPair, error)

	// ImportKeyPair stores a pre-existing key pair by name without key material.
	ImportKeyPair(name, publicKeyMaterial string) (*KeyPair, error)

	// DescribeKeyPairs returns key pairs, optionally filtered by names.
	DescribeKeyPairs(names []string) []*KeyPair

	// DeleteKeyPair removes a key pair by name.
	DeleteKeyPair(name string) error

	// CreateVolume creates a new EBS volume stub.
	CreateVolume(az, volType string, size int) (*Volume, error)

	// SetVolumeEncryption marks a volume as encrypted and optionally sets its KMS key ID.
	SetVolumeEncryption(volumeID string, encrypted bool, kmsKeyID string) error

	// SetVolumePerformance sets the IOPS and throughput (MB/s) on a volume.
	SetVolumePerformance(volumeID string, iops, throughput int) error

	// DescribeVolumes returns volumes, optionally filtered by IDs.
	DescribeVolumes(ids []string) []*Volume

	// DeleteVolume removes a volume by ID.
	DeleteVolume(id string) error

	// AttachVolume attaches a volume to an instance.
	AttachVolume(volumeID, instanceID, device string) (*VolumeAttachment, error)

	// DetachVolume detaches a volume; force flag is accepted but ignored in mock.
	DetachVolume(volumeID string, force bool) (*VolumeAttachment, error)

	// AllocateAddress allocates a new Elastic IP address.
	AllocateAddress() (*Address, error)

	// AssociateAddress associates an allocation with an instance; returns association ID.
	AssociateAddress(allocationID, instanceID string) (string, error)

	// DisassociateAddress removes an address association.
	DisassociateAddress(associationID string) error

	// ReleaseAddress releases an allocated Elastic IP.
	ReleaseAddress(allocationID string) error

	// DescribeAddresses returns Elastic IP allocations, optionally filtered by IDs.
	DescribeAddresses(allocationIDs []string) []*Address

	// CreateInternetGateway creates a new internet gateway.
	CreateInternetGateway() (*InternetGateway, error)

	// DeleteInternetGateway removes an internet gateway.
	DeleteInternetGateway(id string) error

	// DescribeInternetGateways returns internet gateways, optionally filtered by IDs.
	DescribeInternetGateways(ids []string) []*InternetGateway

	// AttachInternetGateway attaches an internet gateway to a VPC.
	AttachInternetGateway(igwID, vpcID string) error

	// DetachInternetGateway detaches an internet gateway from a VPC.
	DetachInternetGateway(igwID, vpcID string) error

	// CreateRouteTable creates a new route table in the given VPC.
	CreateRouteTable(vpcID string) (*RouteTable, error)

	// DeleteRouteTable removes a route table.
	DeleteRouteTable(id string) error

	// DescribeRouteTables returns route tables, optionally filtered by IDs.
	DescribeRouteTables(ids []string) []*RouteTable

	// CreateRoute adds a route to a route table.
	CreateRoute(rtID, destCIDR, gatewayID, natGatewayID string) error

	// DeleteRoute removes a route from a route table by destination CIDR.
	DeleteRoute(rtID, destCIDR string) error

	// AssociateRouteTable associates a route table with a subnet; returns association ID.
	AssociateRouteTable(rtID, subnetID string) (string, error)

	// DisassociateRouteTable removes a subnet association from a route table.
	DisassociateRouteTable(assocID string) error

	// CreateNatGateway creates a NAT gateway in the given subnet.
	CreateNatGateway(subnetID, allocationID string) (*NatGateway, error)

	// DeleteNatGateway removes a NAT gateway.
	DeleteNatGateway(id string) error

	// DescribeNatGateways returns NAT gateways, optionally filtered by IDs.
	DescribeNatGateways(ids []string) []*NatGateway

	// CreateSnapshot creates an EBS snapshot from a volume.
	CreateSnapshot(volumeID, description string) (*Snapshot, error)

	// DescribeSnapshots returns snapshots, optionally filtered by IDs.
	DescribeSnapshots(ids []string) []*Snapshot

	// DeleteSnapshot removes a snapshot.
	DeleteSnapshot(id string) error

	// CopyImage copies an AMI to produce a new one.
	CopyImage(sourceImageID, name, description string) (*AMIStub, error)

	// DeregisterImage removes an AMI from the store.
	DeregisterImage(imageID string) error

	// ModifyVpcAttribute enables or disables a VPC DNS attribute.
	ModifyVpcAttribute(vpcID, attribute string, value bool) error

	// ModifySubnetAttribute enables or disables an attribute on a subnet.
	ModifySubnetAttribute(subnetID, attribute string, value bool) error

	// DescribeNetworkAcls returns default (auto-generated) network ACLs, optionally filtered by VPC IDs.
	DescribeNetworkAcls(vpcIDs []string) []*NetworkACL

	// DescribeNetworkAclsFiltered returns both default and stored network ACLs, with optional VPC-ID filter.
	DescribeNetworkAclsFiltered(vpcIDs []string) []*NetworkACL

	// CreateNetworkACL creates a new non-default network ACL in a VPC.
	CreateNetworkACL(vpcID string) (*StoredNetworkACL, error)

	// DeleteNetworkACL removes a non-default network ACL.
	DeleteNetworkACL(id string) error

	// CreateNetworkACLEntry adds a rule to an existing network ACL.
	CreateNetworkACLEntry(
		aclID string, ruleNumber int, protocol, action, cidr string,
		egress bool, fromPort, toPort int,
	) error

	// DeleteNetworkACLEntry removes a rule from a network ACL.
	DeleteNetworkACLEntry(aclID string, ruleNumber int, egress bool) error

	// DescribeStoredNetworkAcls returns explicitly created network ACLs.
	DescribeStoredNetworkAcls(ids []string) []*StoredNetworkACL

	// DescribeSecurityGroupRules returns all rules for a security group.
	DescribeSecurityGroupRules(groupID string) ([]*SecurityGroupRuleDetail, error)

	// ModifySecurityGroupRules replaces all rules in the specified direction.
	ModifySecurityGroupRules(groupID string, rules []SecurityGroupRule, egress bool) error

	// DeleteLaunchTemplate removes a launch template by ID.
	DeleteLaunchTemplate(id string) error

	// DescribeLaunchTemplateVersions returns versions of a launch template.
	DescribeLaunchTemplateVersions(id string) ([]*LaunchTemplate, error)

	// DeleteVpcEndpoints deletes one or more VPC endpoints, returning unsuccessful IDs.
	DeleteVpcEndpoints(ids []string) ([]string, error)

	// CreateVpcEndpoint creates a VPC endpoint.
	CreateVpcEndpoint(
		vpcID, serviceName, endpointType string,
		subnetIDs []string,
	) (*VpcEndpoint, error)

	// CreateVpcEndpointWithRouteTableIDs creates a VPC endpoint with subnet and route table associations.
	CreateVpcEndpointWithRouteTableIDs(
		vpcID, serviceName, endpointType string,
		subnetIDs, routeTableIDs []string,
	) (*VpcEndpoint, error)

	// DescribeVpcEndpoints returns VPC endpoints, optionally filtered by IDs.
	DescribeVpcEndpoints(ids []string) []*VpcEndpoint

	// CreateLaunchTemplate creates a launch template.
	CreateLaunchTemplate(name, imageID, instanceType string) (*LaunchTemplate, error)

	// DescribeLaunchTemplates returns launch templates, optionally filtered by names.
	DescribeLaunchTemplates(names []string) []*LaunchTemplate

	// DescribeNetworkInterfaces returns ENIs, optionally filtered by IDs.
	DescribeNetworkInterfaces(ids []string) []*NetworkInterface

	// CreateNetworkInterface creates a new ENI in the given subnet.
	CreateNetworkInterface(subnetID, description string) (*NetworkInterface, error)

	// DeleteNetworkInterface removes a network interface by ID.
	DeleteNetworkInterface(id string) error

	// AttachNetworkInterface attaches an ENI to an instance; returns the attachment ID.
	AttachNetworkInterface(eniID, instanceID string, deviceIndex int) (string, error)

	// DetachNetworkInterface detaches a network interface by attachment ID.
	DetachNetworkInterface(attachmentID string, force bool) error

	// AssignPrivateIPAddresses adds secondary private IPs to an ENI.
	// If ips is non-empty those addresses are assigned; otherwise count new IPs are allocated.
	AssignPrivateIPAddresses(eniID string, count int, ips []string) error

	// UnassignPrivateIPAddresses removes secondary private IPs from an ENI.
	UnassignPrivateIPAddresses(eniID string, ips []string) error

	// ModifyNetworkInterfaceAttribute updates a single attribute of an ENI.
	ModifyNetworkInterfaceAttribute(eniID, attr, value string) error

	// RequestSpotInstances creates a spot instance request (mock: immediately fulfilled).
	RequestSpotInstances(
		imageID, instanceType, subnetID, spotPrice string,
	) (*SpotInstanceRequest, error)

	// DescribeSpotInstanceRequests returns spot requests, optionally filtered by IDs.
	DescribeSpotInstanceRequests(ids []string) []*SpotInstanceRequest

	// CancelSpotInstanceRequests cancels the given spot requests.
	CancelSpotInstanceRequests(ids []string) error

	// CreatePlacementGroup creates a new placement group.
	CreatePlacementGroup(name, strategy string) (*PlacementGroup, error)

	// DescribePlacementGroups returns placement groups, optionally filtered by names.
	DescribePlacementGroups(names []string) []*PlacementGroup

	// DeletePlacementGroup removes a placement group by name.
	DeletePlacementGroup(name string) error

	// CreateTags adds or updates tags on one or more resources.
	CreateTags(resourceIDs []string, tags map[string]string) error

	// DeleteTags removes the specified tag keys from one or more resources.
	DeleteTags(resourceIDs []string, keys []string) error

	// DescribeTags returns tag entries, optionally filtered by resource IDs.
	DescribeTags(resourceIDs []string) []TagEntry

	// TagsForResource returns a copy of all tags currently set on a single
	// resource. Returns an empty (non-nil) map when nothing is tagged.
	TagsForResource(resourceID string) map[string]string

	// AcceptAddressTransfer accepts a pending Elastic IP address transfer.
	AcceptAddressTransfer(address string) (*AddressTransfer, error)

	// AcceptCapacityReservationBillingOwnership accepts billing ownership of a capacity reservation.
	AcceptCapacityReservationBillingOwnership(
		capacityReservationID string,
	) (*CapacityReservation, error)

	// AcceptReservedInstancesExchangeQuote accepts a reserved instances exchange quote.
	AcceptReservedInstancesExchangeQuote(
		reservedInstanceIDs []string,
	) (*ReservedInstancesExchange, error)

	// AcceptTransitGatewayMulticastDomainAssociations accepts multicast domain subnet associations.
	AcceptTransitGatewayMulticastDomainAssociations(
		transitGatewayMulticastDomainID, transitGatewayAttachmentID string,
		subnetIDs []string,
	) ([]*TransitGatewayMulticastDomainAssociation, error)

	// AcceptTransitGatewayPeeringAttachment accepts a transit gateway peering attachment.
	AcceptTransitGatewayPeeringAttachment(
		transitGatewayAttachmentID string,
	) (*TransitGatewayPeeringAttachment, error)

	// AcceptTransitGatewayVpcAttachment accepts a transit gateway VPC attachment.
	AcceptTransitGatewayVpcAttachment(
		transitGatewayAttachmentID string,
	) (*TransitGatewayVpcAttachment, error)

	// AcceptVpcEndpointConnections accepts VPC endpoint connections to a service.
	AcceptVpcEndpointConnections(
		serviceID string,
		vpcEndpointIDs []string,
	) ([]*VpcEndpointConnection, error)

	// AcceptVpcPeeringConnection accepts a VPC peering connection.
	AcceptVpcPeeringConnection(vpcPeeringConnectionID string) (*VpcPeeringConnection, error)

	// AdvertiseByoipCidr marks a BYOIP CIDR range as advertised.
	AdvertiseByoipCidr(cidr string) (*ByoipCidr, error)

	// AllocateHosts allocates one or more Dedicated Hosts.
	AllocateHosts(availabilityZone, instanceType string, hostCount int) ([]*Host, error)

	// DescribeCapacityReservations returns capacity reservations, optionally filtered by IDs.
	DescribeCapacityReservations(ids []string) []*CapacityReservation

	// DescribeByoipCidrs returns BYOIP CIDRs, optionally filtered by state.
	DescribeByoipCidrs(state string) []*ByoipCidr

	// DescribeHosts returns dedicated hosts, optionally filtered by IDs.
	DescribeHosts(ids []string) []*Host

	// DescribeVpcPeeringConnections returns VPC peering connections, optionally filtered by IDs.
	DescribeVpcPeeringConnections(ids []string) []*VpcPeeringConnection

	// CreateVpcPeeringConnection creates a new pending VPC peering connection.
	CreateVpcPeeringConnection(requesterVPCID, accepterVPCID string) (*VpcPeeringConnection, error)

	// DeleteVpcPeeringConnection removes a VPC peering connection.
	DeleteVpcPeeringConnection(id string) error

	// ReplaceNetworkACLEntry replaces a NACL rule by (ruleNumber, egress).
	ReplaceNetworkACLEntry(
		aclID string, ruleNumber int, protocol, action, cidr string,
		egress bool, fromPort, toPort int,
	) error

	// ReplaceNetworkACLAssociation moves a subnet to a different NACL.
	ReplaceNetworkACLAssociation(aclID, subnetID string) (string, error)

	// DescribeVpcEndpointServices returns available AWS endpoint service names.
	DescribeVpcEndpointServices() []string

	// ExportKeyPair returns the public-key material for a key pair.
	ExportKeyPair(name string) (string, error)

	// DescribeInstanceTypeOfferings returns available instance type / AZ pairs.
	DescribeInstanceTypeOfferings() []InstanceTypeOffering

	// DescribeTransitGateways returns transit gateways, optionally filtered by IDs.
	DescribeTransitGateways(ids []string) []*TransitGateway

	// CreateTransitGateway creates a new transit gateway stub.
	CreateTransitGateway(description string) (*TransitGateway, error)

	// DeleteTransitGateway removes a transit gateway by ID.
	DeleteTransitGateway(id string) error

	// CreateTransitGatewayVpcAttachment creates a TGW VPC attachment.
	CreateTransitGatewayVpcAttachment(
		tgwID, vpcID string,
		subnetIDs []string,
	) (*TransitGatewayVpcAttachment, error)

	// DescribeTransitGatewayVpcAttachments returns TGW VPC attachments, optionally filtered by IDs.
	DescribeTransitGatewayVpcAttachments(ids []string) []*TransitGatewayVpcAttachment

	// DeleteTransitGatewayVpcAttachment removes a TGW VPC attachment by ID.
	DeleteTransitGatewayVpcAttachment(id string) error

	// ModifyTransitGatewayAttribute updates attributes of a transit gateway.
	ModifyTransitGatewayAttribute(id, description string) error

	// CreateFlowLogs creates flow log records for the given resources.
	CreateFlowLogs(
		resourceIDs []string,
		trafficType, logDestinationType, logDestination string,
	) ([]*FlowLog, error)

	// DescribeFlowLogs returns flow logs, optionally filtered by IDs.
	DescribeFlowLogs(ids []string) []*FlowLog

	// DeleteFlowLogs removes flow logs by ID.
	DeleteFlowLogs(ids []string) error

	// CreateDhcpOptions creates a new DHCP options set.
	CreateDhcpOptions(configs []DhcpConfiguration) (*DhcpOptions, error)

	// DescribeDhcpOptions returns DHCP option sets, optionally filtered by IDs.
	DescribeDhcpOptions(ids []string) []*DhcpOptions

	// AssociateDhcpOptions associates a DHCP options set with a VPC.
	AssociateDhcpOptions(dhcpOptionsID, vpcID string) error

	// DeleteDhcpOptions removes a DHCP options set by ID.
	DeleteDhcpOptions(id string) error

	// ModifyLaunchTemplate updates the default version of a launch template.
	ModifyLaunchTemplate(id string, defaultVersion int64) (*LaunchTemplate, error)

	// CreateLaunchTemplateVersion adds a new version to a launch template.
	CreateLaunchTemplateVersion(id, imageID, instanceType string) (*LaunchTemplateVersion, error)

	// DeleteLaunchTemplateVersions removes specific versions from a launch template.
	DeleteLaunchTemplateVersions(id string, versions []int64) ([]int64, error)

	// GetLaunchTemplateData returns synthesized launch template data from an instance.
	GetLaunchTemplateData(instanceID string) (*LaunchTemplate, error)

	// CreateEgressOnlyInternetGateway creates a new egress-only internet gateway.
	CreateEgressOnlyInternetGateway(vpcID string) (*EgressOnlyInternetGateway, error)

	// DescribeEgressOnlyInternetGateways returns egress-only internet gateways, optionally filtered by IDs.
	DescribeEgressOnlyInternetGateways(ids []string) []*EgressOnlyInternetGateway

	// DeleteEgressOnlyInternetGateway removes an egress-only internet gateway.
	DeleteEgressOnlyInternetGateway(id string) error

	// AssociateIamInstanceProfile associates an IAM instance profile with an instance.
	AssociateIamInstanceProfile(
		instanceID, profileARN string,
	) (*IamInstanceProfileAssociation, error)

	// DisassociateIamInstanceProfile removes an IAM instance profile association.
	DisassociateIamInstanceProfile(associationID string) (*IamInstanceProfileAssociation, error)

	// DescribeIamInstanceProfileAssociations returns IAM instance profile associations.
	DescribeIamInstanceProfileAssociations(
		associationIDs []string,
		instanceID string,
	) []*IamInstanceProfileAssociation

	// ReplaceIamInstanceProfileAssociation replaces the IAM instance profile on an existing association.
	ReplaceIamInstanceProfileAssociation(
		associationID, profileARN string,
	) (*IamInstanceProfileAssociation, error)

	// ReplaceRouteTableAssociation replaces an existing route table association with a new route table.
	ReplaceRouteTableAssociation(associationID, newRouteTableID string) (string, error)

	// AssociateVpcCidrBlock associates a secondary CIDR block with a VPC.
	AssociateVpcCidrBlock(vpcID, cidrBlock string) (*VpcCidrBlockAssociation, error)

	// CreateTransitGatewayRouteTable creates a new TGW route table.
	CreateTransitGatewayRouteTable(tgwID string) (*TransitGatewayRouteTable, error)

	// DescribeTransitGatewayRouteTables returns TGW route tables, optionally filtered by IDs.
	DescribeTransitGatewayRouteTables(ids []string) []*TransitGatewayRouteTable

	// DeleteTransitGatewayRouteTable removes a TGW route table.
	DeleteTransitGatewayRouteTable(id string) error

	// CreateTransitGatewayRoute adds a static route to a TGW route table.
	CreateTransitGatewayRoute(
		routeTableID, destinationCIDR, attachmentID string,
	) (*TransitGatewayRoute, error)

	// DeleteTransitGatewayRoute removes a static route from a TGW route table.
	DeleteTransitGatewayRoute(routeTableID, destinationCIDR string) error

	// ReplaceTransitGatewayRoute replaces or upserts a route in a TGW route table.
	ReplaceTransitGatewayRoute(
		routeTableID, destinationCIDR, attachmentID string,
	) (*TransitGatewayRoute, error)

	// AssociateTransitGatewayRouteTable associates a TGW attachment with a route table.
	AssociateTransitGatewayRouteTable(
		routeTableID, attachmentID string,
	) (*TransitGatewayRouteTableAssociation, error)

	// DisassociateTransitGatewayRouteTable removes an association between a TGW attachment and route table.
	DisassociateTransitGatewayRouteTable(routeTableID, attachmentID string) error

	// GetTransitGatewayRouteTableAssociations returns the attachment associations for a TGW route table.
	GetTransitGatewayRouteTableAssociations(
		routeTableID string,
	) ([]*TransitGatewayRouteTableAssociation, error)

	// GetTransitGatewayRouteTablePropagations returns the propagations for a TGW route table.
	GetTransitGatewayRouteTablePropagations(
		routeTableID string,
	) ([]*TransitGatewayRouteTablePropagation, error)

	// GetTransitGatewayAttachmentPropagations returns the route tables an attachment propagates into.
	GetTransitGatewayAttachmentPropagations(
		attachmentID string,
	) ([]*TransitGatewayAttachmentPropagation, error)

	// SearchTransitGatewayRoutes returns the routes in a TGW route table matching the given filters.
	SearchTransitGatewayRoutes(
		routeTableID string,
		filters map[string][]string,
	) ([]*TransitGatewayRoute, error)

	// ExportTransitGatewayRoutes exports the routes in a TGW route table to S3, returning the S3 URL.
	ExportTransitGatewayRoutes(routeTableID, s3Bucket string) (string, error)

	// ModifyTransitGatewayVpcAttachment adds and/or removes subnets from a TGW VPC attachment.
	ModifyTransitGatewayVpcAttachment(
		attachmentID string,
		addSubnetIDs, removeSubnetIDs []string,
	) (*TransitGatewayVpcAttachment, error)

	// RejectTransitGatewayVpcAttachment rejects a pending TGW VPC attachment.
	RejectTransitGatewayVpcAttachment(attachmentID string) (*TransitGatewayVpcAttachment, error)

	// RejectTransitGatewayPeeringAttachment rejects a pending TGW peering attachment.
	RejectTransitGatewayPeeringAttachment(
		attachmentID string,
	) (*TransitGatewayPeeringAttachment, error)

	// RejectTransitGatewayMulticastDomainAssociations rejects a request to associate
	// subnets with a transit gateway multicast domain.
	RejectTransitGatewayMulticastDomainAssociations(
		domainID, attachmentID string,
		subnetIDs []string,
	) ([]*TransitGatewayMulticastDomainAssociation, error)

	// ModifyTransitGatewayMeteringPolicy adds and/or removes middlebox attachment IDs
	// from a TGW metering policy.
	ModifyTransitGatewayMeteringPolicy(
		policyID string,
		addAttachmentIDs, removeAttachmentIDs []string,
	) (*TransitGatewayMeteringPolicy, error)

	// GetTransitGatewayMeteringPolicyEntries returns the entries for a TGW metering policy.
	GetTransitGatewayMeteringPolicyEntries(
		policyID string,
	) ([]*TransitGatewayMeteringPolicyEntry, error)

	// CreateTransitGatewayPolicyTable creates a new policy table on a transit gateway.
	CreateTransitGatewayPolicyTable(tgwID string) (*TransitGatewayPolicyTable, error)

	// DescribeTransitGatewayPolicyTables returns policy tables, optionally filtered by ID.
	DescribeTransitGatewayPolicyTables(ids []string) []*TransitGatewayPolicyTable

	// DeleteTransitGatewayPolicyTable removes a policy table.
	DeleteTransitGatewayPolicyTable(id string) error

	// AssociateTransitGatewayPolicyTable associates a TGW attachment with a policy table.
	AssociateTransitGatewayPolicyTable(
		policyTableID, attachmentID string,
	) (*TransitGatewayPolicyTableAssociation, error)

	// DisassociateTransitGatewayPolicyTable removes an association between a TGW
	// attachment and a policy table.
	DisassociateTransitGatewayPolicyTable(
		policyTableID, attachmentID string,
	) (*TransitGatewayPolicyTableAssociation, error)

	// GetTransitGatewayPolicyTableAssociations returns the attachment associations for a policy table.
	GetTransitGatewayPolicyTableAssociations(
		policyTableID string,
	) []*TransitGatewayPolicyTableAssociation

	// GetTransitGatewayPolicyTableEntries validates a policy table exists (entries are
	// always empty; see the type doc comment on TransitGatewayPolicyTableEntry usage
	// in the handler layer).
	GetTransitGatewayPolicyTableEntries(policyTableID string) error

	// CreateTransitGatewayRouteTableAnnouncement announces a TGW route table across a
	// peering attachment.
	CreateTransitGatewayRouteTableAnnouncement(
		routeTableID, peeringAttachmentID string,
	) (*TransitGatewayRouteTableAnnouncement, error)

	// DescribeTransitGatewayRouteTableAnnouncements returns route table announcements,
	// optionally filtered by ID.
	DescribeTransitGatewayRouteTableAnnouncements(ids []string) []*TransitGatewayRouteTableAnnouncement

	// DeleteTransitGatewayRouteTableAnnouncement removes a route table announcement.
	DeleteTransitGatewayRouteTableAnnouncement(id string) error

	// CreateTransitGatewayMulticastDomain creates a new multicast domain on a transit gateway.
	CreateTransitGatewayMulticastDomain(
		tgwID, autoAcceptSharedAssociations, igmpv2Support, staticSourcesSupport string,
	) (*TransitGatewayMulticastDomain, error)

	// DescribeTransitGatewayMulticastDomains returns multicast domains, optionally filtered by ID.
	DescribeTransitGatewayMulticastDomains(ids []string) []*TransitGatewayMulticastDomain

	// DeleteTransitGatewayMulticastDomain removes a multicast domain.
	DeleteTransitGatewayMulticastDomain(id string) error

	// AssociateTransitGatewayMulticastDomain associates subnets with a multicast domain.
	AssociateTransitGatewayMulticastDomain(
		domainID, attachmentID string,
		subnetIDs []string,
	) ([]*TransitGatewayMulticastDomainAssociation, error)

	// DisassociateTransitGatewayMulticastDomain removes subnet associations from a multicast domain.
	DisassociateTransitGatewayMulticastDomain(
		domainID, attachmentID string,
		subnetIDs []string,
	) ([]*TransitGatewayMulticastDomainAssociation, error)

	// GetTransitGatewayMulticastDomainAssociations returns the subnet associations for a multicast domain.
	GetTransitGatewayMulticastDomainAssociations(
		domainID string,
	) []*TransitGatewayMulticastDomainAssociation

	// RegisterTransitGatewayMulticastGroupMembers registers network interfaces as multicast group members.
	RegisterTransitGatewayMulticastGroupMembers(
		domainID, groupIP string,
		eniIDs []string,
	) (*TransitGatewayMulticastGroupMembership, error)

	// DeregisterTransitGatewayMulticastGroupMembers removes network interfaces as multicast group members.
	DeregisterTransitGatewayMulticastGroupMembers(
		domainID, groupIP string,
		eniIDs []string,
	) (*TransitGatewayMulticastGroupMembership, error)

	// RegisterTransitGatewayMulticastGroupSources registers network interfaces as multicast group sources.
	RegisterTransitGatewayMulticastGroupSources(
		domainID, groupIP string,
		eniIDs []string,
	) (*TransitGatewayMulticastGroupMembership, error)

	// DeregisterTransitGatewayMulticastGroupSources removes network interfaces as multicast group sources.
	DeregisterTransitGatewayMulticastGroupSources(
		domainID, groupIP string,
		eniIDs []string,
	) (*TransitGatewayMulticastGroupMembership, error)

	// SearchTransitGatewayMulticastGroups returns the multicast group entries for a domain.
	SearchTransitGatewayMulticastGroups(domainID string) []*TransitGatewayMulticastGroupEntry

	// CreateTransitGatewayMeteringPolicy creates a new metering policy on a transit gateway.
	CreateTransitGatewayMeteringPolicy(
		tgwID string,
		middleboxAttachmentIDs []string,
	) (*TransitGatewayMeteringPolicy, error)

	// DescribeTransitGatewayMeteringPolicies returns metering policies, optionally filtered by ID.
	DescribeTransitGatewayMeteringPolicies(ids []string) []*TransitGatewayMeteringPolicy

	// DeleteTransitGatewayMeteringPolicy removes a metering policy.
	DeleteTransitGatewayMeteringPolicy(id string) error

	// CreateTransitGatewayMeteringPolicyEntry adds a rule to a metering policy.
	CreateTransitGatewayMeteringPolicyEntry(
		policyID string,
		entry *TransitGatewayMeteringPolicyEntry,
	) (*TransitGatewayMeteringPolicyEntry, error)

	// DeleteTransitGatewayMeteringPolicyEntry removes a rule from a metering policy.
	DeleteTransitGatewayMeteringPolicyEntry(
		policyID string,
		ruleNumber int,
	) (*TransitGatewayMeteringPolicyEntry, error)

	// CreateVpnGateway creates a new virtual private gateway.
	CreateVpnGateway(gatewayType string) (*VpnGateway, error)

	// DescribeVpnGateways returns virtual private gateways, optionally filtered by IDs.
	DescribeVpnGateways(ids []string) []*VpnGateway

	// DeleteVpnGateway removes a VPN gateway.
	DeleteVpnGateway(id string) error

	// AttachVpnGateway attaches a VPN gateway to a VPC.
	AttachVpnGateway(vgwID, vpcID string) error

	// DetachVpnGateway detaches a VPN gateway from a VPC.
	DetachVpnGateway(vgwID, vpcID string) error

	// CreateCustomerGateway creates a new customer gateway.
	CreateCustomerGateway(gatewayType, ipAddress, bgpAsn string) (*CustomerGateway, error)

	// DescribeCustomerGateways returns customer gateways, optionally filtered by IDs.
	DescribeCustomerGateways(ids []string) []*CustomerGateway

	// DeleteCustomerGateway removes a customer gateway.
	DeleteCustomerGateway(id string) error

	// CreateVpnConnection creates a VPN connection between a customer gateway and VPN gateway.
	CreateVpnConnection(connType, customerGatewayID, vpnGatewayID string) (*VpnConnection, error)

	// DescribeVpnConnections returns VPN connections, optionally filtered by IDs.
	DescribeVpnConnections(ids []string) []*VpnConnection

	// DeleteVpnConnection removes a VPN connection.
	DeleteVpnConnection(id string) error

	// GetVpnConnectionRoutes returns the static routes registered against a VPN connection.
	GetVpnConnectionRoutes(vpnConnectionID string) []*VpnConnectionRoute

	// ModifyVpnConnectionOptions updates the negotiated local/remote IPv4 CIDRs and the
	// static-routes-only flag of a VPN connection.
	ModifyVpnConnectionOptions(
		vpnConnectionID, localIPv4CIDR, remoteIPv4CIDR string, staticRoutesOnly *bool,
	) (*VpnConnection, error)

	// ModifyVpnTunnelOptions updates the configuration of a single tunnel of a VPN connection.
	ModifyVpnTunnelOptions(
		vpnConnectionID, outsideIPAddress string, opts VpnTunnelOptionsModify,
	) (*VpnConnection, error)

	// ModifyVpnTunnelCertificate provisions a certificate-based authentication certificate for
	// a single tunnel of a VPN connection.
	ModifyVpnTunnelCertificate(vpnConnectionID, outsideIPAddress string) (*VpnConnection, error)

	// GetVpnConnectionDeviceTypes returns the static catalog of supported customer gateway
	// device types.
	GetVpnConnectionDeviceTypes() []VpnConnectionDeviceType

	// GetVpnConnectionDeviceSampleConfiguration generates a sample vendor configuration for a
	// VPN connection's tunnels.
	GetVpnConnectionDeviceSampleConfiguration(vpnConnectionID, deviceTypeID, ikeVersion string) (string, error)

	// GetVpnTunnelReplacementStatus reports pending AWS-initiated tunnel endpoint maintenance
	// for a single tunnel of a VPN connection.
	GetVpnTunnelReplacementStatus(vpnConnectionID, outsideIPAddress string) (*VpnTunnelReplacementStatus, error)

	// RejectVpcPeeringConnection rejects a pending VPC peering connection.
	RejectVpcPeeringConnection(id string) error

	// CreateVpcEndpointServiceConfiguration creates a new endpoint service config.
	CreateVpcEndpointServiceConfiguration(
		acceptanceRequired bool,
		nlbARNs []string,
	) (*VpcEndpointServiceConfig, error)

	// DescribeVpcEndpointServiceConfigurations returns endpoint service configs, optionally filtered by IDs.
	DescribeVpcEndpointServiceConfigurations(ids []string) []*VpcEndpointServiceConfig

	// DeleteVpcEndpointServiceConfigurations removes endpoint service configs by IDs.
	DeleteVpcEndpointServiceConfigurations(ids []string) error

	// ModifyVpcEndpointServiceConfiguration updates acceptance required for a service config.
	ModifyVpcEndpointServiceConfiguration(id string, acceptanceRequired bool) error

	// CreateIpam creates a new IPAM instance, along with its default scopes and resource discovery.
	CreateIpam(opts ...IpamOptions) (*Ipam, error)

	// DescribeIpams returns IPAM instances, optionally filtered by IDs.
	DescribeIpams(ids []string) []*Ipam

	// ModifyIpam updates an IPAM's description, operating regions, or tier.
	ModifyIpam(id string, opts IpamOptions) (*Ipam, error)

	// DeleteIpam removes an IPAM instance.
	DeleteIpam(id string) error

	// CreateIpamScope creates an additional (non-default) private IPAM scope.
	CreateIpamScope(ipamID, description string) (*IpamScope, error)

	// DescribeIpamScopes returns IPAM scopes, optionally filtered by IDs.
	DescribeIpamScopes(ids []string) []*IpamScope

	// ModifyIpamScope updates an IPAM scope's description.
	ModifyIpamScope(id, description string) (*IpamScope, error)

	// DeleteIpamScope removes a non-default IPAM scope.
	DeleteIpamScope(id string) error

	// CreateIpamPool creates a new IPAM pool.
	CreateIpamPool(ipamID, addressFamily, locale, cidr string, opts ...IpamPoolOptions) (*IpamPool, error)

	// DescribeIpamPools returns IPAM pools, optionally filtered by IDs.
	DescribeIpamPools(ids []string) []*IpamPool

	// ModifyIpamPool updates mutable attributes of an IPAM pool.
	ModifyIpamPool(id string, opts IpamPoolOptions) (*IpamPool, error)

	// DeleteIpamPool removes an IPAM pool.
	DeleteIpamPool(id string) error

	// ProvisionIpamPoolCidr adds a CIDR range to an IPAM pool's provisioned space.
	ProvisionIpamPoolCidr(poolID, cidr string) (*IpamPoolCidr, error)

	// DeprovisionIpamPoolCidr removes a provisioned CIDR range from an IPAM pool.
	DeprovisionIpamPoolCidr(poolID, cidr string) (*IpamPoolCidr, error)

	// GetIpamPoolCidrs returns the CIDR ranges provisioned to an IPAM pool.
	GetIpamPoolCidrs(poolID string) []*IpamPoolCidr

	// AllocateIpamPoolCidr allocates a CIDR from an IPAM pool.
	AllocateIpamPoolCidr(
		poolID, cidr string, netmaskLength int, opts ...IpamAllocationOptions,
	) (*IpamPoolAllocation, error)

	// GetIpamPoolAllocations returns allocations for an IPAM pool, optionally filtered to one ID.
	GetIpamPoolAllocations(poolID, allocationID string) ([]*IpamPoolAllocation, error)

	// ReleaseIpamPoolAllocation releases an IPAM pool allocation.
	ReleaseIpamPoolAllocation(poolID, allocationID string) error

	// DescribeIpamResourceDiscoveries returns IPAM resource discoveries, optionally filtered by IDs.
	DescribeIpamResourceDiscoveries(ids []string) []*IpamResourceDiscovery

	// DescribeIpamResourceDiscoveryAssociations returns IPAM resource discovery associations.
	DescribeIpamResourceDiscoveryAssociations(ids []string) []*IpamResourceDiscoveryAssociation

	// CreateIpamResourceDiscovery creates a standalone (non-default) IPAM resource discovery.
	CreateIpamResourceDiscovery(description string, operatingRegions []string) (*IpamResourceDiscovery, error)

	// DeleteIpamResourceDiscovery removes a non-default IPAM resource discovery.
	DeleteIpamResourceDiscovery(id string) (*IpamResourceDiscovery, error)

	// AssociateIpamResourceDiscovery associates a resource discovery with an IPAM.
	AssociateIpamResourceDiscovery(ipamID, discoveryID string) (*IpamResourceDiscoveryAssociation, error)

	// DisassociateIpamResourceDiscovery removes a resource discovery association from an IPAM.
	DisassociateIpamResourceDiscovery(assocID string) (*IpamResourceDiscoveryAssociation, error)

	// ModifyIpamResourceDiscovery updates a resource discovery's description/operating regions.
	ModifyIpamResourceDiscovery(
		id, description string, addOperatingRegions, removeOperatingRegions []string,
	) (*IpamResourceDiscovery, error)

	// GetIpamResourceCidrs returns resource CIDRs monitored by IPAM in a given scope.
	GetIpamResourceCidrs(scopeID, poolID, resourceID, resourceOwner, resourceType string) ([]*IpamResourceCidr, error)

	// ModifyIpamResourceCidr moves/updates a monitored resource CIDR.
	ModifyIpamResourceCidr(
		currentScopeID, resourceCidr, resourceID, resourceRegion string, monitored bool, destScopeID string,
	) (*IpamResourceCidr, error)

	// ProvisionIpamByoasn provisions a public ASN for use with an IPAM's BYOIP CIDRs.
	ProvisionIpamByoasn(ipamID, asn string) (*IpamByoasn, error)

	// DeprovisionIpamByoasn releases a previously-provisioned BYOASN.
	DeprovisionIpamByoasn(ipamID, asn string) (*IpamByoasn, error)

	// DescribeIpamByoasn returns all provisioned BYOASNs.
	DescribeIpamByoasn() []*IpamByoasn

	// AssociateIpamByoasn associates a provisioned BYOASN with a BYOIP CIDR.
	AssociateIpamByoasn(asn, cidr string) (*IpamAsnAssociation, error)

	// DisassociateIpamByoasn removes the association between a BYOASN and a BYOIP CIDR.
	DisassociateIpamByoasn(asn, cidr string) (*IpamAsnAssociation, error)

	// CreateIpamExternalResourceVerificationToken creates an external resource verification token.
	CreateIpamExternalResourceVerificationToken(ipamID string) (*IpamExternalResourceVerificationToken, error)

	// DeleteIpamExternalResourceVerificationToken removes a verification token.
	DeleteIpamExternalResourceVerificationToken(id string) (*IpamExternalResourceVerificationToken, error)

	// DescribeIpamExternalResourceVerificationTokens returns verification tokens.
	DescribeIpamExternalResourceVerificationTokens(ids []string) []*IpamExternalResourceVerificationToken

	// CreateIpamPrefixListResolver creates a new IPAM prefix list resolver.
	CreateIpamPrefixListResolver(
		ipamID, addressFamily, description string, rules []IpamPrefixListResolverRule,
	) (*IpamPrefixListResolver, error)

	// DeleteIpamPrefixListResolver removes a prefix list resolver.
	DeleteIpamPrefixListResolver(id string) (*IpamPrefixListResolver, error)

	// DescribeIpamPrefixListResolvers returns prefix list resolvers.
	DescribeIpamPrefixListResolvers(ids []string) []*IpamPrefixListResolver

	// ModifyIpamPrefixListResolver updates a resolver's description and/or rules.
	ModifyIpamPrefixListResolver(
		id, description string, rules []IpamPrefixListResolverRule, rulesProvided bool,
	) (*IpamPrefixListResolver, error)

	// GetIpamPrefixListResolverRules returns a resolver's current CIDR selection rules.
	GetIpamPrefixListResolverRules(resolverID string) ([]IpamPrefixListResolverRule, error)

	// GetIpamPrefixListResolverVersions returns a resolver's recorded version numbers.
	GetIpamPrefixListResolverVersions(resolverID string) ([]int64, error)

	// GetIpamPrefixListResolverVersionEntries returns the CIDR entries of a resolver version.
	GetIpamPrefixListResolverVersionEntries(resolverID string, version int64) ([]string, error)

	// CreateIpamPrefixListResolverTarget associates a managed prefix list with a resolver.
	CreateIpamPrefixListResolverTarget(
		resolverID, prefixListID, prefixListRegion string, trackLatestVersion bool, desiredVersion *int64,
	) (*IpamPrefixListResolverTarget, error)

	// DeleteIpamPrefixListResolverTarget removes a resolver target.
	DeleteIpamPrefixListResolverTarget(id string) (*IpamPrefixListResolverTarget, error)

	// DescribeIpamPrefixListResolverTargets returns resolver targets.
	DescribeIpamPrefixListResolverTargets(resolverID string, ids []string) []*IpamPrefixListResolverTarget

	// ModifyIpamPrefixListResolverTarget updates a target's desired version/tracking flag.
	ModifyIpamPrefixListResolverTarget(
		id string, desiredVersion *int64, trackLatestVersion *bool,
	) (*IpamPrefixListResolverTarget, error)

	// CreateIpamPolicy creates a new IPAM policy under the given IPAM.
	CreateIpamPolicy(ipamID string) (*IpamPolicy, error)

	// DeleteIpamPolicy removes an IPAM policy.
	DeleteIpamPolicy(id string) (*IpamPolicy, error)

	// DescribeIpamPolicies returns IPAM policies, optionally filtered by IDs.
	DescribeIpamPolicies(ids []string) []*IpamPolicy

	// EnableIpamPolicy enables an IPAM policy for the current account or an Organizations target.
	EnableIpamPolicy(id, orgTargetID string) error

	// DisableIpamPolicy disables an IPAM policy for the current account or an Organizations target.
	DisableIpamPolicy(id, orgTargetID string) error

	// GetEnabledIpamPolicy returns the IPAM policy enabled for the current account, if any.
	GetEnabledIpamPolicy() (policyID string, enabled bool, managedBy string)

	// GetIpamPolicyOrganizationTargets returns the Organizations targets an IPAM policy is
	// enabled for.
	GetIpamPolicyOrganizationTargets(id string) ([]string, error)

	// GetIpamPolicyAllocationRules returns an IPAM policy's allocation rule documents.
	GetIpamPolicyAllocationRules(id, locale, resourceType string) ([]*IpamPolicyDocument, error)

	// ModifyIpamPolicyAllocationRules replaces an IPAM policy's allocation rules for a
	// (locale, resourceType) pair.
	ModifyIpamPolicyAllocationRules(
		id, locale, resourceType string, rules []IpamPolicyAllocationRule,
	) (*IpamPolicyDocument, error)

	// EnableIpamOrganizationAdminAccount enables an Organizations member account as the IPAM
	// delegated administrator account.
	EnableIpamOrganizationAdminAccount(accountID string) error

	// DisableIpamOrganizationAdminAccount disables the IPAM Organizations delegated
	// administrator account.
	DisableIpamOrganizationAdminAccount(accountID string) error

	// MoveByoipCidrToIpam associates an existing BYOIP CIDR with an IPAM pool.
	MoveByoipCidrToIpam(cidr, poolID, poolOwner string) (*ByoipCidr, error)

	// RequestSpotFleet creates a new Spot Fleet request and fulfills it.
	RequestSpotFleet(config SpotFleetRequestConfig) (*SpotFleetRequest, error)

	// DescribeSpotFleetRequests returns spot fleet requests, optionally filtered by IDs.
	DescribeSpotFleetRequests(fleetIDs []string) ([]*SpotFleetRequest, error)

	// CancelSpotFleetRequests cancels spot fleet requests.
	CancelSpotFleetRequests(
		fleetIDs []string,
		terminateInstances bool,
	) ([]SpotFleetCancelResult, error)

	// ModifySpotFleetRequest updates the target capacity of a spot fleet request.
	ModifySpotFleetRequest(
		fleetID string,
		targetCapacity int,
		excessTermination string,
	) (*SpotFleetRequest, error)

	// DescribeSpotFleetInstances returns the instances in a spot fleet.
	DescribeSpotFleetInstances(fleetID string) ([]SpotFleetInstance, error)

	// DescribeSpotFleetRequestHistory returns history records for a spot fleet.
	DescribeSpotFleetRequestHistory(
		fleetID string,
		startTime time.Time,
	) ([]SpotFleetHistoryRecord, error)

	// Reset clears all resource state, returning the backend to its initial state.
	Reset()

	ModifyVolume(volumeID, volumeType string, size, iops int) (*VolumeModification, error)
	DescribeVolumeStatus(ids []string) []VolumeStatusItem
	DescribeVolumesModifications(ids []string) []*VolumeModification
	CopySnapshot(sourceSnapshotID, description string) (*Snapshot, error)
	CreateSnapshots(volumeIDs []string, description string) ([]*Snapshot, error)

	GetSnapshotBlockPublicAccessState() string
	EnableSnapshotBlockPublicAccess(state string) error
	DisableSnapshotBlockPublicAccess()
	DescribeSnapshotTierStatus(ids []string) []SnapshotTierItem
	ModifySnapshotTier(snapshotID, storageTier string) error
	ResetSnapshotAttribute(snapshotID string) error

	CreateDefaultVpc() (*VPC, error)
	CreateDefaultSubnet(az string) (*Subnet, error)
	AssociateSubnetCidrBlock(subnetID, ipv6CIDRBlock string) (*SubnetCIDRAssociation, error)
	DisassociateSubnetCidrBlock(associationID string) (string, error)
	AssociateSecurityGroupVpc(sgID, vpcID string) (*SGVpcAssociationState, error)
	DisassociateSecurityGroupVpc(sgID, vpcID string) error
	DescribeSecurityGroupReferences(sgIDs []string) []SGReference
	DescribeStaleSecurityGroups(vpcID string) []StaleSGItem
	DescribeSecurityGroupVpcAssociations(sgIDs []string) []SGVpcAssocItem
	ModifyVpcTenancy(vpcID, tenancy string) error
	ModifyVpcPeeringConnectionOptions(peeringID string, opts PeeringConnectionOptions) error
	GetVpcPeeringConnectionOptions(peeringID string) *PeeringConnectionOptions

	DescribeAddressesAttribute(allocationIDs []string) []AddressAttribute
	ModifyAddressAttribute(allocationID, domainName string) error
	ResetAddressAttribute(allocationID string) error

	GetConsoleOutput(instanceID string) (string, time.Time, error)
	ModifyInstanceMetadataOptions(
		instanceID, httpTokens, httpEndpoint, instanceMetadataTags string,
		hopLimit int,
	) (*IMDSOptions, error)
	GetInstanceMetadataDefaults() *InstanceMetadataDefaults
	ModifyInstanceMetadataDefaults(
		httpTokens, httpEndpoint, instanceMetadataTags string,
		hopLimit int,
	) error
	DescribeInstanceCreditSpecifications(ids []string) []InstanceCreditSpec
	ModifyInstanceCreditSpecification(instanceID, cpuCredits string) error
	DescribeInstanceTopology(ids []string) []InstanceTopologyItem
	MonitorInstances(instanceIDs []string) ([]MonitoringState, error)
	UnmonitorInstances(instanceIDs []string) ([]MonitoringState, error)

	DescribeNetworkInterfaceAttribute(niID, attribute string) (*NIAttributeResult, error)
	ResetNetworkInterfaceAttribute(niID string) error
	DescribeNetworkInterfacePermissions(niIDs []string) []*NetworkInterfacePermission
	CreateNetworkInterfacePermission(
		niID, awsAccountID, awsService, permission string,
	) (*NetworkInterfacePermission, error)
	DeleteNetworkInterfacePermission(permissionID string) error
	AssignIpv6Addresses(niID string, count int) ([]string, error)
	UnassignIpv6Addresses(niID string, addresses []string) error

	DescribeAccountAttributes(names []string) []AccountAttribute
	DescribePrefixLists(ids []string) []PrefixList
	DescribeIDFormat(resources []string) []IDFormatItem
	ModifyIDFormat(resource string, useLongIDs bool) error
	DescribeIdentityIDFormat(_ string, resources []string) []IDFormatItem
	ModifyIdentityIDFormat(_ string, resource string, useLongIDs bool) error
	DescribeAggregateIDFormat() []IDFormatItem
	DescribePrincipalIDFormat(_ string) []IDFormatItem
	DescribeInstanceEventNotificationAttributes() *InstanceEventNotificationAttributes
	DeregisterInstanceEventNotificationAttributes()

	CreateVpcEndpointConnectionNotification(
		serviceID, endpointID, notifARN string,
		events []string,
	) (*VpcEndpointConnectionNotification, error)
	DescribeVpcEndpointConnectionNotifications(ids []string) []*VpcEndpointConnectionNotification
	DeleteVpcEndpointConnectionNotifications(ids []string) error
	ModifyVpcEndpointConnectionNotification(
		id, notifARN string,
		events []string,
	) (*VpcEndpointConnectionNotification, error)
	DescribeVpcEndpointConnections(serviceIDs []string) []*VpcEndpointConnection
	DescribeVpcEndpointAssociations(endpointIDs []string) []*VpcEndpoint
	ModifyVpcEndpointServicePayerResponsibility(serviceID, payerResponsibility string) error
	DescribeVpcEndpointServicePermissions(serviceID string) []string
	ModifyVpcEndpointServicePermissions(serviceID string, add, remove []string) error
	ModifyVpcEndpoint(endpointID string, addSubnetIDs, removeSubnetIDs []string) error
	EnableEbsEncryptionByDefault()
	DisableEbsEncryptionByDefault()
	GetEbsEncryptionByDefault() bool
	GetEbsDefaultKmsKeyID() string
	ModifyEbsDefaultKmsKeyID(kmsKeyID string) error
	EnableVolumeIO(volumeID string) error
	LockSnapshot(snapshotID, lockMode string, durationDays int) (*SnapshotLock, error)
	UnlockSnapshot(snapshotID string) error
	DescribeLockedSnapshots(ids []string) []*SnapshotLock
	CopyVolumes(volumeIDs []string, destinationRegion string) ([]CopyVolumesResult, error)
	DisassociateVpcCidrBlock(associationID string) error
	DisassociateNatGatewayAddress(natGatewayID string) error
	AssociateNatGatewayAddress(natGatewayID, allocationID string) error
	AssignPrivateNatGatewayAddress(natGatewayID string) error
	DisableImage(imageID string) error
	EnableImage(imageID string) error
	EnableImageBlockPublicAccess(state string) error
	DisableImageBlockPublicAccess()
	GetImageBlockPublicAccessState() string
	EnableImageDeprecation(imageID, deprecateAt string) error
	DisableImageDeprecation(imageID string) error
	EnableImageDeregistrationProtection(imageID string) error
	DisableImageDeregistrationProtection(imageID string) error
	ModifyImageAttribute(imageID, attribute, value string) error
	ResetImageAttribute(imageID, attribute string) error
	DescribeInstanceImageMetadata(instanceIDs []string) []InstanceImageMetadataItem
	EnableSerialConsoleAccess()
	DisableSerialConsoleAccess()
	GetSerialConsoleAccessStatus() bool
	EnableVgwRoutePropagation(routeTableID, gatewayID string) error
	DisableVgwRoutePropagation(routeTableID, gatewayID string) error
	GetDefaultCreditSpecification() string
	ModifyDefaultCreditSpecification(cpuCredits string) error
	CreateReplaceRootVolumeTask(instanceID, snapshotID string) (*ReplaceRootVolumeTask, error)
	DescribeReplaceRootVolumeTasks(ids []string) []*ReplaceRootVolumeTask
	EnableAddressTransfer(allocationID, transferAccountID string) (*AddressTransfer, error)
	DisableAddressTransfer(allocationID string) error
	DescribeAddressTransfers(allocationIDs []string) []*AddressTransfer
	CreateSubnetCidrReservation(
		subnetID, cidr, reservationType, description string,
	) (*SubnetCIDRReservation, error)
	DeleteSubnetCidrReservation(reservationID string) error

	CreateCapacityReservation(
		instanceType, availabilityZone string,
		instanceCount int,
	) (*CapacityReservation, error)
	CancelCapacityReservation(reservationID string) error
	ModifyCapacityReservation(reservationID string, instanceCount int) error
	GetGroupsForCapacityReservation(reservationID string) ([]string, error)
	CreateInstanceConnectEndpoint(
		subnetID string,
		securityGroupIDs []string,
		preserveClientIP bool,
	) (*InstanceConnectEndpoint, error)
	DeleteInstanceConnectEndpoint(id string) error
	DescribeInstanceConnectEndpoints(ids []string) []*InstanceConnectEndpoint
	ModifyInstanceConnectEndpoint(id string, preserveClientIP bool) error
	CreateInstanceEventWindow(name, cronExpression string) (*InstanceEventWindow, error)
	DeleteInstanceEventWindow(id string) error
	DescribeInstanceEventWindows(ids []string) []*InstanceEventWindow
	ModifyInstanceEventWindow(id, name, cronExpression string) error
	CreateSpotDatafeedSubscription(bucket, prefix string) (*SpotDatafeed, error)
	DeleteSpotDatafeedSubscription()
	DescribeSpotDatafeedSubscription() *SpotDatafeed
	RegisterImage(name, description, architecture string) (*AMIStub, error)
	ImportImage(description, architecture, platform string) (*ImageImportTask, error)
	DescribeImportImageTasks(taskIDs []string) []*ImageImportTask
	ExportImage(imageID, description, diskImageFormat, s3Bucket, s3Prefix, roleName string) (*ExportImageTaskRec, error)
	DescribeExportImageTasks(ids []string) []*ExportImageTaskRec
	ListImagesInRecycleBin(imageIDs []string) []*RecycleBinImage
	RestoreImageFromRecycleBin(imageID string) error
	ListSnapshotsInRecycleBin(snapshotIDs []string) []*Snapshot
	RestoreSnapshotFromRecycleBin(snapshotID string) error
	RestoreSnapshotTier(snapshotID string) error
	ImportSnapshot(description string) (*SnapshotImportTask, error)
	DescribeImportSnapshotTasks(taskIDs []string) []*SnapshotImportTask
	EnableFastLaunch(imageID string) error
	DisableFastLaunch(imageID string) error
	DescribeFastLaunchImages(imageIDs []string) []FastLaunchImageItem
	EnableFastSnapshotRestores(snapshotIDs, availabilityZones []string) error
	DisableFastSnapshotRestores(snapshotIDs, availabilityZones []string) error
	DescribeFastSnapshotRestores() []FastSnapshotRestoreItem
	GetPasswordData(instanceID string) (string, time.Time, error)
	GetConsoleScreenshot(instanceID string) (string, error)
	GetInstanceTypesFromInstanceRequirements() []string
	GetSubnetCidrReservations(subnetID string) ([]*SubnetCIDRReservation, error)
	GetSecurityGroupsForVpc(vpcID string) ([]SecurityGroupForVpcItem, error)
	ReplaceRoute(rtID, destCIDR, gatewayID, natGatewayID string) error
	RegisterInstanceEventNotificationAttributes(includeAllTags bool)
	ResetEbsDefaultKmsKeyID()
	UpdateSecurityGroupRuleDescriptionsIngress(groupID string, rules []SecurityGroupRule) error
	UpdateSecurityGroupRuleDescriptionsEgress(groupID string, rules []SecurityGroupRule) error
	ListVolumesInRecycleBin(volumeIDs []string) []*RecycleBinVolume
	RestoreVolumeFromRecycleBin(volumeID string) error
	RestoreAddressToClassic(publicIP string) error
	ReportInstanceStatus(instanceID, status, description string) error
	ModifyVpnConnection(vpnConnectionID, vpnGatewayID string) error
	CreateVpnConnectionRoute(vpnConnectionID, destinationCIDR string) (*VpnConnectionRoute, error)
	DeleteVpnConnectionRoute(vpnConnectionID, destinationCIDR string) error
	ModifyTransitGateway(tgwID, description string) error

	// ---- batch4: ManagedPrefixList ----
	CreateManagedPrefixList(name, addressFamily string, maxEntries int) (*ManagedPrefixList, error)
	DeleteManagedPrefixList(id string) error
	DescribeManagedPrefixLists(ids []string) []*ManagedPrefixList
	GetManagedPrefixListEntries(id string) ([]PrefixListEntry, error)
	ModifyManagedPrefixList(id string, addEntries, removeEntries []PrefixListEntry) error
	RestoreManagedPrefixListVersion(id string, version int64) error

	// ---- batch4: ClientVpnEndpoint ----
	CreateClientVpnEndpoint(clientCidrBlock, description string, dnsServers []string) (*ClientVpnEndpoint, error)
	CreateClientVpnEndpointWithOptions(
		clientCidrBlock, description string,
		dnsServers []string,
		opts ClientVpnEndpointOptions,
	) (*ClientVpnEndpoint, error)
	DeleteClientVpnEndpoint(id string) error
	DescribeClientVpnEndpoints(ids []string) []*ClientVpnEndpoint
	AssociateClientVpnTargetNetwork(endpointID, subnetID string) (string, error)
	DisassociateClientVpnTargetNetwork(endpointID, assocID string) error
	DescribeClientVpnTargetNetworks(endpointID string) ([]*ClientVpnTargetNetwork, error)
	CreateClientVpnRoute(endpointID, destinationCidr, description string) error
	DeleteClientVpnRoute(endpointID, destinationCidr string) error
	DescribeClientVpnRoutes(endpointID string) ([]ClientVpnRoute, error)
	AuthorizeClientVpnIngress(endpointID, cidr, description string) error
	RevokeClientVpnIngress(endpointID, cidr string) error
	DescribeClientVpnAuthorizationRules(endpointID string) ([]ClientVpnAuthRule, error)
	ModifyClientVpnEndpoint(endpointID, description string, dnsServers []string) error
	ModifyClientVpnEndpointWithOptions(
		endpointID, description string,
		dnsServers []string,
		opts ClientVpnEndpointOptions,
	) error
	ApplySecurityGroupsToClientVpnTargetNetwork(endpointID string, sgIDs []string) error
	DescribeClientVpnConnections(endpointID string) ([]string, error)
	TerminateClientVpnConnections(endpointID string) error
	ExportClientVpnClientConfiguration(endpointID string) (string, error)
	ExportClientVpnClientCertificateRevocationList(endpointID string) (string, error)
	ImportClientVpnClientCertificateRevocationList(endpointID, crl string) error

	// ---- batch4: TGW Peering ----
	CreateTransitGatewayPeeringAttachment(
		transitGatewayID, peerTransitGatewayID string, _ string,
	) (*TransitGatewayPeeringAttachment, error)
	DeleteTransitGatewayPeeringAttachment(id string) error
	DescribeTransitGatewayPeeringAttachments(ids []string) []*TransitGatewayPeeringAttachment

	// ---- batch4: TGW Connect ----
	CreateTransitGatewayConnect(transportAttachmentID, transitGatewayID string) (*TransitGatewayConnect, error)
	DeleteTransitGatewayConnect(id string) error
	DescribeTransitGatewayConnects(ids []string) []*TransitGatewayConnect
	CreateTransitGatewayConnectPeer(
		connectAttachmentID, peerAddress string,
		insideCidrBlocks []string,
	) (*TransitGatewayConnectPeer, error)
	DeleteTransitGatewayConnectPeer(id string) error
	DescribeTransitGatewayConnectPeers(ids []string) []*TransitGatewayConnectPeer

	// ---- batch4: TGW PrefixListRef ----
	CreateTransitGatewayPrefixListReference(
		routeTableID, prefixListID string,
		blackhole bool,
	) (*TransitGatewayPrefixListReference, error)
	DeleteTransitGatewayPrefixListReference(routeTableID, prefixListID string) error
	GetTransitGatewayPrefixListReferences(routeTableID string) ([]*TransitGatewayPrefixListReference, error)
	ModifyTransitGatewayPrefixListReference(
		routeTableID, prefixListID, attachmentID string,
		blackhole bool,
	) (*TransitGatewayPrefixListReference, error)

	// ---- batch4: VerifiedAccess ----
	CreateVerifiedAccessEndpoint(groupID, endpointType, description string) (*VerifiedAccessEndpoint, error)
	DeleteVerifiedAccessEndpoint(id string) error
	DescribeVerifiedAccessEndpoints(ids []string) []*VerifiedAccessEndpoint
	ModifyVerifiedAccessEndpoint(id, description string) error
	CreateVerifiedAccessGroup(instanceID, description string) (*VerifiedAccessGroup, error)
	DeleteVerifiedAccessGroup(id string) error
	DescribeVerifiedAccessGroups(ids []string) []*VerifiedAccessGroup
	CreateVerifiedAccessInstance(description string) (*VerifiedAccessInstance, error)
	DeleteVerifiedAccessInstance(id string) error
	DescribeVerifiedAccessInstances(ids []string) []*VerifiedAccessInstance
	CreateVerifiedAccessTrustProvider(trustProviderType, description string) (*VerifiedAccessTrustProvider, error)
	DeleteVerifiedAccessTrustProvider(id string) error
	DescribeVerifiedAccessTrustProviders(ids []string) []*VerifiedAccessTrustProvider
	AttachVerifiedAccessTrustProvider(instanceID, trustProviderID string) error
	DetachVerifiedAccessTrustProvider(instanceID, trustProviderID string) error
	GetVerifiedAccessEndpointPolicy(id string) (*VerifiedAccessPolicy, error)
	ModifyVerifiedAccessEndpointPolicy(
		id string,
		policyEnabled bool,
		policyDocument string,
	) (*VerifiedAccessPolicy, error)
	GetVerifiedAccessGroupPolicy(id string) (*VerifiedAccessPolicy, error)
	ModifyVerifiedAccessGroupPolicy(id string, policyEnabled bool, policyDocument string) (*VerifiedAccessPolicy, error)
	DescribeVerifiedAccessInstanceLoggingConfigurations(ids []string) []*VerifiedAccessInstanceLoggingConfig
	ModifyVerifiedAccessInstanceLoggingConfiguration(
		instanceID string,
		accessLogs VerifiedAccessLogOptions,
	) (*VerifiedAccessInstanceLoggingConfig, error)
	GetVerifiedAccessEndpointTargets(id string) ([]*VerifiedAccessEndpointTarget, error)
	ExportVerifiedAccessInstanceClientConfiguration(
		instanceID string,
	) (*VerifiedAccessInstanceClientConfiguration, error)

	// ---- FPGA image (AFI) ----
	CreateFpgaImage(name, description string) (*FpgaImage, error)
	CopyFpgaImage(sourceFpgaImageID, sourceRegion, name, description string) (*FpgaImage, error)
	DeleteFpgaImage(id string) error
	DescribeFpgaImages(ids []string) []*FpgaImage
	DescribeFpgaImageAttribute(id, attribute string) (*FpgaImageAttribute, error)
	ModifyFpgaImageAttribute(id string, mod FpgaImageAttributeModification) (*FpgaImage, error)
	ResetFpgaImageAttribute(id, attribute string) error

	// ---- batch5: TrafficMirror ----
	CreateTrafficMirrorFilter(description string) (*TrafficMirrorFilter, error)
	DeleteTrafficMirrorFilter(id string) error
	DescribeTrafficMirrorFilters(ids []string) []*TrafficMirrorFilter
	ModifyTrafficMirrorFilterNetworkServices(id string, add, remove []string) error
	CreateTrafficMirrorFilterRule(
		filterID, direction, action, srcCIDR, dstCIDR, description string,
		ruleNumber, protocol int,
		ports ...TrafficMirrorPortRangePair,
	) (*TrafficMirrorFilterRule, error)
	DeleteTrafficMirrorFilterRule(id string) error
	DescribeTrafficMirrorFilterRules(filterID string) ([]*TrafficMirrorFilterRule, error)
	ModifyTrafficMirrorFilterRule(id, action, description string) error
	CreateTrafficMirrorSession(
		networkInterfaceID, targetID, filterID, description string,
		sessionNumber int,
		packetLength ...int,
	) (*TrafficMirrorSession, error)
	DeleteTrafficMirrorSession(id string) error
	DescribeTrafficMirrorSessions(ids []string) []*TrafficMirrorSession
	ModifyTrafficMirrorSession(id, targetID, filterID, description string) error
	CreateTrafficMirrorTarget(
		networkInterfaceID, networkLoadBalancerArn, description string,
		gatewayLoadBalancerEndpointID ...string,
	) (*TrafficMirrorTarget, error)
	DeleteTrafficMirrorTarget(id string) error
	DescribeTrafficMirrorTargets(ids []string) []*TrafficMirrorTarget

	// ---- batch5: EC2 Fleet ----
	CreateFleet(fleetType string, totalTargetCapacity int) (*Fleet, error)
	DeleteFleets(ids []string) []string
	DescribeFleets(ids []string) []*Fleet
	ModifyFleet(id string, totalTargetCapacity int, excessPolicy string) error

	// ---- batch5: NetworkInsights ----
	CreateNetworkInsightsPath(
		sourceID, destinationID, protocol string,
		destinationPort int,
	) (*NetworkInsightsPath, error)
	DeleteNetworkInsightsPath(id string) error
	DescribeNetworkInsightsPaths(ids []string) []*NetworkInsightsPath
	StartNetworkInsightsAnalysis(pathID string) (*NetworkInsightsAnalysis, error)
	DeleteNetworkInsightsAnalysis(id string) error
	DescribeNetworkInsightsAnalyses(ids []string) []*NetworkInsightsAnalysis
	CreateNetworkInsightsAccessScope() (*NetworkInsightsAccessScope, error)
	DeleteNetworkInsightsAccessScope(id string) error
	DescribeNetworkInsightsAccessScopes(ids []string) []*NetworkInsightsAccessScope
	StartNetworkInsightsAccessScopeAnalysis(scopeID string) (*NetworkInsightsAccessScopeAnalysis, error)
	DeleteNetworkInsightsAccessScopeAnalysis(id string) error
	DescribeNetworkInsightsAccessScopeAnalyses(ids []string) []*NetworkInsightsAccessScopeAnalysis

	// ---- batch5: BYOIP ----
	ProvisionByoipCidr(cidr, description string) (*ByoipCidr, error)
	DeprovisionByoipCidr(cidr string) (*ByoipCidr, error)
	WithdrawByoipCidr(cidr string) (*ByoipCidr, error)

	// ---- batch5: CarrierGateway ----
	CreateCarrierGateway(vpcID string) (*CarrierGateway, error)
	DeleteCarrierGateway(id string) error
	DescribeCarrierGateways(ids []string) []*CarrierGateway

	// ---- batch5: ReservedInstances ----
	DescribeReservedInstances(ids []string) []*ReservedInstance
	DescribeReservedInstancesOfferings(instanceType, az, productDesc string) []*ReservedInstancesOffering
	PurchaseReservedInstancesOffering(offeringID string, instanceCount int) (*ReservedInstance, error)
	CreateReservedInstancesListing(reservedInstancesID string, instanceCount int) (*ReservedInstancesListing, error)
	CancelReservedInstancesListing(id string) error
	DescribeReservedInstancesListings(ids []string) []*ReservedInstancesListing
	DescribeReservedInstancesModifications(ids []string) []*ReservedInstancesModification
	ModifyReservedInstances(
		reservedInstancesIDs []string,
		targetInstanceType string,
		targetCount int,
	) (*ReservedInstancesModification, error)
	DeleteQueuedReservedInstances(ids []string)

	// ---- Route Server ----
	CreateRouteServer(
		amazonSideAsn int64,
		persistRoutesState string,
		persistRoutesDuration int64,
		snsNotificationsEnabled bool,
	) (*RouteServer, error)
	DescribeRouteServers(ids []string) []*RouteServer
	DeleteRouteServer(id string) (*RouteServer, error)
	ModifyRouteServer(
		id string,
		persistRoutesState string,
		persistRoutesDuration int64,
		snsNotificationsEnabled bool,
	) (*RouteServer, error)
	CreateRouteServerEndpoint(routeServerID, subnetID string) (*RouteServerEndpoint, error)
	DescribeRouteServerEndpoints(ids []string) []*RouteServerEndpoint
	DeleteRouteServerEndpoint(id string) (*RouteServerEndpoint, error)
	CreateRouteServerPeer(
		endpointID, peerAddress string,
		bgpPeerAsn int64,
		livenessDetection string,
	) (*RouteServerPeer, error)
	DescribeRouteServerPeers(ids []string) []*RouteServerPeer
	DeleteRouteServerPeer(id string) (*RouteServerPeer, error)
	AssociateRouteServer(routeServerID, vpcID string) (*RouteServerAssociation, error)
	DisassociateRouteServer(routeServerID, vpcID string) (*RouteServerAssociation, error)
	GetRouteServerAssociations(routeServerID string) []*RouteServerAssociation
	EnableRouteServerPropagation(routeServerID, routeTableID string) (*RouteServerPropagation, error)
	DisableRouteServerPropagation(routeServerID, routeTableID string) (*RouteServerPropagation, error)
	GetRouteServerPropagations(routeServerID string) []*RouteServerPropagation
	GetRouteServerRoutingDatabase(routeServerID string) ([]*RouteServerRoute, error)

	SeedLocalGateway(lg LocalGateway) (*LocalGateway, error)
	SeedLocalGatewayVirtualInterface(
		vif LocalGatewayVirtualInterface,
	) (*LocalGatewayVirtualInterface, error)
	SeedLocalGatewayVirtualInterfaceGroup(
		group LocalGatewayVirtualInterfaceGroup,
	) (*LocalGatewayVirtualInterfaceGroup, error)
	DescribeLocalGateways(ids []string) []*LocalGateway
	DescribeLocalGatewayVirtualInterfaces(ids []string) []*LocalGatewayVirtualInterface
	DescribeLocalGatewayVirtualInterfaceGroups(ids []string) []*LocalGatewayVirtualInterfaceGroup

	CreateLocalGatewayRouteTable(localGatewayID, mode string) (*LocalGatewayRouteTable, error)
	DescribeLocalGatewayRouteTables(ids []string) []*LocalGatewayRouteTable
	DeleteLocalGatewayRouteTable(id string) error

	CreateLocalGatewayRoute(
		routeTableID, destinationCIDR, destinationPrefixListID, vifGroupID, eniID string,
	) (*LocalGatewayRoute, error)
	DeleteLocalGatewayRoute(
		routeTableID, destinationCIDR, destinationPrefixListID string,
	) (*LocalGatewayRoute, error)
	ModifyLocalGatewayRoute(
		routeTableID, destinationCIDR, destinationPrefixListID, vifGroupID, eniID string,
	) (*LocalGatewayRoute, error)
	SearchLocalGatewayRoutes(routeTableID string, states []string) ([]*LocalGatewayRoute, error)

	CreateLocalGatewayRouteTableVpcAssociation(
		routeTableID, vpcID string,
	) (*LocalGatewayRouteTableVpcAssociation, error)
	DeleteLocalGatewayRouteTableVpcAssociation(id string) (*LocalGatewayRouteTableVpcAssociation, error)
	DescribeLocalGatewayRouteTableVpcAssociations(ids []string) []*LocalGatewayRouteTableVpcAssociation

	CreateLocalGatewayRouteTableVirtualInterfaceGroupAssociation(
		routeTableID, vifGroupID string,
	) (*LocalGatewayRouteTableVirtualInterfaceGroupAssociation, error)
	DeleteLocalGatewayRouteTableVirtualInterfaceGroupAssociation(
		id string,
	) (*LocalGatewayRouteTableVirtualInterfaceGroupAssociation, error)
	DescribeLocalGatewayRouteTableVirtualInterfaceGroupAssociations(
		ids []string,
	) []*LocalGatewayRouteTableVirtualInterfaceGroupAssociation

	AttachClassicLinkVpc(instanceID, vpcID string, groups []string) error
	DetachClassicLinkVpc(instanceID, vpcID string) error
	DescribeClassicLinkInstances(instanceIDs []string) []*ClassicLinkInstance
	EnableVpcClassicLink(vpcID string) error
	DisableVpcClassicLink(vpcID string) error
	DescribeVpcClassicLink(vpcIDs []string) ([]*VPC, error)
	EnableVpcClassicLinkDNSSupport(vpcID string) error
	DisableVpcClassicLinkDNSSupport(vpcID string) error
	DescribeVpcClassicLinkDNSSupport(vpcIDs []string) ([]*VPC, error)

	DescribeVpcBlockPublicAccessOptions() *VpcBlockPublicAccessOptions
	ModifyVpcBlockPublicAccessOptions(blockMode string) (*VpcBlockPublicAccessOptions, error)
	CreateVpcBlockPublicAccessExclusion(
		vpcID, subnetID, mode string,
		tags map[string]string,
	) (*VpcBlockPublicAccessExclusion, error)
	ModifyVpcBlockPublicAccessExclusion(exclusionID, mode string) (*VpcBlockPublicAccessExclusion, error)
	DeleteVpcBlockPublicAccessExclusion(exclusionID string) (*VpcBlockPublicAccessExclusion, error)
	DescribeVpcBlockPublicAccessExclusions(ids []string) []*VpcBlockPublicAccessExclusion

	StartVpcEndpointServicePrivateDNSVerification(serviceID string) error

	CreateCapacityReservationFleet(
		specs []CapacityReservationFleetInstanceSpec,
		totalTargetCapacity int32,
		allocationStrategy, instanceMatchCriteria, tenancy string,
		endDate *time.Time,
		tags map[string]string,
	) (*CapacityReservationFleet, error)
	DescribeCapacityReservationFleets(ids []string, filters map[string][]string) []*CapacityReservationFleet
	ModifyCapacityReservationFleet(
		fleetID string,
		totalTargetCapacity *int32,
		endDate *time.Time,
		removeEndDate bool,
	) error
	CancelCapacityReservationFleets(
		fleetIDs []string,
	) ([]CapacityReservationFleetCancellation, []FailedCapacityReservationFleetCancellation)

	DescribeCapacityBlockOfferings(
		instanceType string,
		durationHours, instanceCount int32,
	) ([]*CapacityBlockOffering, error)
	PurchaseCapacityBlock(
		offeringID, instancePlatform string,
		tags map[string]string,
	) (*CapacityBlock, *CapacityReservation, error)
	DescribeCapacityBlockExtensionOfferings(
		reservationID string,
		durationHours int32,
	) ([]*CapacityBlockExtensionOffering, error)
	PurchaseCapacityBlockExtension(extensionOfferingID, reservationID string) (*CapacityBlockExtension, error)
	DescribeCapacityBlocks(ids []string, filters map[string][]string) []*CapacityBlock
	DescribeCapacityBlockStatus(ids []string, filters map[string][]string) []*CapacityBlockStatus
	DescribeCapacityBlockExtensionHistory(
		reservationIDs []string,
		filters map[string][]string,
	) []*CapacityBlockExtension

	CreateCapacityReservationBySplitting(
		sourceID string,
		instanceCount int,
		tags map[string]string,
	) (*CapacityReservation, *CapacityReservation, error)
	MoveCapacityReservationInstances(
		sourceID, destinationID string,
		instanceCount int,
	) (*CapacityReservation, *CapacityReservation, error)

	AssociateCapacityReservationBillingOwner(reservationID, billingOwnerID string) error
	DisassociateCapacityReservationBillingOwner(reservationID, billingOwnerID string) error
	RejectCapacityReservationBillingOwnership(reservationID string) error
	DescribeCapacityReservationBillingRequests(
		ids []string,
		filters map[string][]string,
	) []*CapacityReservationBillingRequest

	EnableCapacityManager(organizationsAccess bool) (string, bool)
	DisableCapacityManager() (string, bool)
	UpdateCapacityManagerOrganizationsAccess(organizationsAccess bool) (string, bool)
	GetCapacityManagerAttributes() *CapacityManagerAttributes
	GetCapacityManagerMetricData() []MetricDataResult
	GetCapacityManagerMetricDimensions() []CapacityManagerDimension
	CreateCapacityManagerDataExport(
		outputFormat, s3BucketName, s3BucketPrefix, schedule string,
		tags map[string]string,
	) (*CapacityManagerDataExport, error)
	DescribeCapacityManagerDataExports(ids []string) []*CapacityManagerDataExport
	DeleteCapacityManagerDataExport(id string) (string, error)

	DescribeScheduledInstanceAvailability(
		filters map[string][]string,
		minSlotDurationHours, maxSlotDurationHours int32,
	) []ScheduledInstanceAvailability
	PurchaseScheduledInstances(requests []ScheduledInstancePurchaseRequest) ([]*ScheduledInstance, error)
	DescribeScheduledInstances(ids []string) []*ScheduledInstance
	RunScheduledInstances(scheduledInstanceID, imageID, keyName string, instanceCount int32) ([]string, error)

	CreateCoipPool(localGatewayRouteTableID string, tags map[string]string) (*CoipPool, error)
	DeleteCoipPool(poolID string) (*CoipPool, error)
	DescribeCoipPools(ids []string) []*CoipPool
	CreateCoipCidr(poolID, cidr string) (*CoipCidr, error)
	DeleteCoipCidr(poolID, cidr string) (*CoipCidr, error)
	GetCoipPoolUsage(poolID string) (*CoipPool, error)

	CreatePublicIpv4Pool(networkBorderGroup string, tags map[string]string) *Ipv4Pool
	DeletePublicIpv4Pool(poolID string) error
	DescribePublicIpv4Pools(ids []string) []*Ipv4Pool
	ProvisionPublicIpv4PoolCidr(poolID string, netmaskLength int32) (*Ipv4PoolRange, error)
	DeprovisionPublicIpv4PoolCidr(poolID, cidr string) error
	DescribeIpv6Pools(ids []string) []*Ipv6Pool
	GetAssociatedIpv6PoolCidrs(poolID string) ([]Ipv6CidrAssociation, error)

	EnableAllowedImagesSettings(state string) (string, error)
	DisableAllowedImagesSettings() string
	GetAllowedImagesSettings() *AllowedImagesSettings
	ReplaceImageCriteriaInAllowedImagesSettings(criteria []ImageCriterion) bool

	CreateStoreImageTask(imageID, bucket string) (*StoreImageTask, error)
	DescribeStoreImageTasks(imageIDs []string) []*StoreImageTask
	CreateRestoreImageTask(bucket, objectKey, name string) (*AMIStub, error)

	CreateImageUsageReport(imageID string, resourceTypes, accountIDs []string) (*UsageReport, error)
	DeleteImageUsageReport(reportID string) error
	DescribeImageUsageReportEntries(reportIDs, imageIDs []string) []*UsageReportEntry

	ConfirmProductInstance(instanceID, productCode string) (bool, error)

	BundleInstance(instanceID, s3Bucket, s3Prefix string) (*BundleTask, error)
	CancelBundleTask(bundleID string) (*BundleTask, error)
	DescribeBundleTasks(ids []string) []*BundleTask

	ImportInstance(
		description, platform, availabilityZone, diskFormat string, diskBytes, volumeSize int64,
	) (*ConversionTask, error)
	ImportVolume(description, availabilityZone, diskFormat string, diskBytes, volumeSize int64) (*ConversionTask, error)
	DescribeConversionTasks(ids []string) []*ConversionTask
	CancelConversionTask(conversionTaskID string) (*ConversionTask, error)

	CreateInstanceExportTask(
		instanceID, description, targetEnvironment, diskImageFormat, containerFormat, s3Bucket, s3Prefix string,
	) (*ExportTask, error)
	CancelExportTask(exportTaskID string) error
	DescribeExportTasks(ids []string) []*ExportTask

	CancelImportTask(importTaskID string) (previousState, newState string, err error)

	AssociateTrunkInterface(
		branchInterfaceID, trunkInterfaceID string, vlanID, greKey int32, tags map[string]string,
	) (*TrunkInterfaceAssociation, error)
	DisassociateTrunkInterface(associationID string) error
	DescribeTrunkInterfaceAssociations(ids []string) []*TrunkInterfaceAssociation

	AssociateEnclaveCertificateIamRole(certificateArn, roleArn string) (*EnclaveCertIamRoleAssociation, error)
	DisassociateEnclaveCertificateIamRole(certificateArn, roleArn string) error
	GetAssociatedEnclaveCertificateIamRoles(certificateArn string) ([]*EnclaveCertIamRoleAssociation, error)

	DescribeMacHosts(ids []string) []*MacHost
	CreateMacSystemIntegrityProtectionModificationTask(
		instanceID, status string, config *MacSIPConfig, tags map[string]string,
	) (*MacModificationTask, error)
	CreateDelegateMacVolumeOwnershipTask(
		instanceID, macCredentials string, tags map[string]string,
	) (*MacModificationTask, error)
	DescribeMacModificationTasks(ids []string) []*MacModificationTask

	CreateSecondaryNetwork(ipv4CidrBlock, networkType string, tags map[string]string) (*SecondaryNetwork, error)
	DeleteSecondaryNetwork(id string) (*SecondaryNetwork, error)
	DescribeSecondaryNetworks(ids []string) []*SecondaryNetwork
	CreateSecondarySubnet(
		ipv4CidrBlock, secondaryNetworkID, availabilityZone, availabilityZoneID string, tags map[string]string,
	) (*SecondarySubnet, error)
	DeleteSecondarySubnet(id string) (*SecondarySubnet, error)
	DescribeSecondarySubnets(ids []string) []*SecondarySubnet
	SeedSecondaryInterface(si SecondaryInterface) (*SecondaryInterface, error)
	DescribeSecondaryInterfaces(ids []string) []*SecondaryInterface
	SeedServiceLinkVirtualInterface(vif ServiceLinkVirtualInterface) (*ServiceLinkVirtualInterface, error)
	DescribeServiceLinkVirtualInterfaces(ids []string) []*ServiceLinkVirtualInterface
	SeedOutpostLag(lag OutpostLag) (*OutpostLag, error)
	DescribeOutpostLags(ids []string) []*OutpostLag

	ModifyAvailabilityZoneGroup(groupName, optInStatus string) (bool, error)
	ModifyHosts(
		hostIDs []string, autoPlacement, hostMaintenance, hostRecovery, instanceFamily, instanceType string,
	) ([]string, []HostModifyFailure, error)
	ModifyInstanceCapacityReservationAttributes(
		instanceID, preference, targetID, targetArn string,
	) (*Instance, error)
	ModifyInstanceCPUOptions(
		instanceID string, coreCount, threadsPerCore *int32, nestedVirtualization string,
	) (*Instance, error)
	ModifyInstanceEventStartTime(
		instanceID, instanceEventID string, notBefore time.Time,
	) (*InstanceStatusEventRec, error)
	ModifyInstanceMaintenanceOptions(instanceID, autoRecovery, rebootMigration string) (*Instance, error)
	ModifyInstanceNetworkPerformanceOptions(instanceID, bandwidthWeighting string) (*Instance, error)
	ModifyInstancePlacement(in ModifyInstancePlacementInput) (bool, error)
	ModifyPrivateDNSNameOptions(
		instanceID, hostnameType string, enableARecord, enableAAAARecord *bool,
	) (bool, error)
	ModifyPublicIPDNSNameOptions(networkInterfaceID, hostnameType string) (bool, error)
	AssociateInstanceEventWindow(windowID string, instanceIDs, dedicatedHostIDs []string) (*InstanceEventWindow, error)
	DisassociateInstanceEventWindow(
		windowID string, instanceIDs, dedicatedHostIDs []string,
	) (*InstanceEventWindow, error)
	GetInstanceTpmEkPub(instanceID, keyFormat, keyType string) (string, error)
	GetInstanceUefiData(instanceID string) (string, error)

	EnableInstanceSQLHaStandbyDetections(
		instanceIDs []string, sqlServerCredentials string,
	) ([]*RegisteredSQLHaInstance, error)
	DisableInstanceSQLHaStandbyDetections(instanceIDs []string) ([]*RegisteredSQLHaInstance, error)
	DescribeInstanceSQLHaStates(ids []string) []*RegisteredSQLHaInstance
	DescribeInstanceSQLHaHistoryStates(ids []string, startTime, endTime time.Time) []*RegisteredSQLHaInstance

	CreateVpcEncryptionControl(vpcID string, tags map[string]string) (*VpcEncryptionControl, error)
	DeleteVpcEncryptionControl(id string) (*VpcEncryptionControl, error)
	DescribeVpcEncryptionControls(ids, vpcIDs []string) []*VpcEncryptionControl
	ModifyVpcEncryptionControl(
		id, mode string, exclusions VpcEncryptionControlExclusionModify,
	) (*VpcEncryptionControl, error)
	GetVpcResourcesBlockingEncryptionEnforcement(vpcID string) ([]*VpcEncryptionNonCompliantResource, error)

	CreateVpnConcentrator(vpnType, transitGatewayID string, tags map[string]string) (*VpnConcentrator, error)
	DeleteVpnConcentrator(id string) (*VpnConcentrator, error)
	DescribeVpnConcentrators(ids []string) []*VpnConcentrator
	GetActiveVpnTunnelStatus(vpnConnectionID, outsideIPAddress string) (*ActiveVpnTunnelStatus, error)
	ReplaceVpnTunnel(vpnConnectionID, outsideIPAddress string) (bool, error)

	DescribeHostReservationOfferings(offeringID string, minDuration, maxDuration int32) []HostOffering
	GetHostReservationPurchasePreview(
		hostIDs []string, offeringID string,
	) (*HostReservationPurchasePreview, error)
	PurchaseHostReservation(
		hostIDs []string, offeringID string, tags map[string]string,
	) (*HostReservationPurchasePreview, error)
	DescribeHostReservations(ids []string) []*HostReservation
	ReleaseHosts(hostIDs []string) (successful []string, unsuccessful []HostReleaseResult)

	StartDeclarativePoliciesReport(
		s3Bucket, targetID, s3Prefix string, tags map[string]string,
	) (*DeclarativePoliciesReport, error)
	CancelDeclarativePoliciesReport(reportID string) (bool, error)
	DescribeDeclarativePoliciesReports(ids []string) []*DeclarativePoliciesReport
	GetDeclarativePoliciesReportSummary(reportID string) (*DeclarativePoliciesReportSummary, error)

	EnableAwsNetworkPerformanceMetricSubscription(source, destination, metric, statistic string) (bool, error)
	DisableAwsNetworkPerformanceMetricSubscription(source, destination, metric, statistic string) (bool, error)
	DescribeAwsNetworkPerformanceMetricSubscriptions() []*NetworkPerformanceSubscription
	GetAwsNetworkPerformanceData(
		queries []NetworkPerformanceDataQuery, startTime, endTime time.Time,
	) ([]*NetworkPerformanceDataResponse, error)

	CreateLocalGatewayVirtualInterface(
		p LocalGatewayVirtualInterfaceParams,
	) (*LocalGatewayVirtualInterface, error)
	DeleteLocalGatewayVirtualInterface(id string) (*LocalGatewayVirtualInterface, error)
	CreateLocalGatewayVirtualInterfaceGroup(
		localGatewayID string, localBgpAsn int32, localBgpAsnExtended int64, tags map[string]string,
	) (*LocalGatewayVirtualInterfaceGroup, error)
	DeleteLocalGatewayVirtualInterfaceGroup(id string) (*LocalGatewayVirtualInterfaceGroup, error)

	ModifyVerifiedAccessGroup(id, instanceID, description string) (*VerifiedAccessGroup, error)
	ModifyVerifiedAccessInstance(id, description string) (*VerifiedAccessInstance, error)
	ModifyVerifiedAccessTrustProvider(id, description string) (*VerifiedAccessTrustProvider, error)

	EnableTransitGatewayRouteTablePropagation(
		routeTableID, attachmentID string,
	) (*TransitGatewayRouteTablePropagation, error)
	DisableTransitGatewayRouteTablePropagation(
		routeTableID, attachmentID string,
	) (*TransitGatewayRouteTablePropagation, error)
	DescribeTransitGatewayAttachments(ids []string) []*TransitGatewayAttachmentSummary

	CreateInterruptibleCapacityReservationAllocation(
		sourceCapacityReservationID string, instanceCount int32,
	) (*InterruptibleCapacityReservationAllocation, error)
	UpdateInterruptibleCapacityReservationAllocation(
		sourceCapacityReservationID string, targetInstanceCount int32,
	) (*InterruptibleCapacityReservationAllocation, error)
	GetCapacityReservationUsage(id string) (*CapacityReservationUsage, error)
	DescribeCapacityReservationTopology(ids []string) []*CapacityReservationTopologyEntry

	DescribeMovingAddresses(publicIPs []string) []*MovingAddressStatus
	MoveAddressToVpc(publicIP string) (*Address, error)
	RejectVpcEndpointConnections(serviceID string, vpcEndpointIDs []string) ([]string, error)
	UnassignPrivateNatGatewayAddress(natGatewayID string, privateIPs []string) (*NatGateway, error)

	CancelImageLaunchPermission(imageID string) error
	DescribeImageReferences(imageIDs []string) []*ImageReferenceEntry
	GetImageAncestry(imageID string) ([]*ImageAncestryEntry, error)
	GetFlowLogsIntegrationTemplate(flowLogID, s3DestinationArn string) (string, error)

	GetSpotPlacementScores(
		instanceTypes, regionNames []string, singleAZ bool,
	) ([]*SpotPlacementScoreEntry, error)
	SendDiagnosticInterrupt(instanceID string) error
	EnableReachabilityAnalyzerOrganizationSharing() bool
	DescribeElasticGpus(ids []string) []*ElasticGpuStub
}

type BundleTask struct {
	BundleID     string    `json:"bundleId,omitempty"`
	InstanceID   string    `json:"instanceId,omitempty"`
	State        string    `json:"state,omitempty"`
	Progress     string    `json:"progress,omitempty"`
	S3Bucket     string    `json:"s3Bucket,omitempty"`
	S3Prefix     string    `json:"s3Prefix,omitempty"`
	StartTime    time.Time `json:"startTime"`
	UpdateTime   time.Time `json:"updateTime"`
	ErrorCode    string    `json:"errorCode,omitempty"`
	ErrorMessage string    `json:"errorMessage,omitempty"`
}

type ByoipCidr struct {
	Cidr          string `json:"cidr,omitempty"`
	State         string `json:"state,omitempty"`
	StatusMessage string `json:"statusMessage,omitempty"`
}

type CPUOptions struct {
	NestedVirtualization string `json:"nestedVirtualization,omitempty"`
	CoreCount            int32  `json:"coreCount,omitempty"`
	ThreadsPerCore       int32  `json:"threadsPerCore,omitempty"`
}

type CapacityBlock struct {
	CreateDate             time.Time         `json:"createDate"`
	StartDate              time.Time         `json:"startDate"`
	EndDate                time.Time         `json:"endDate"`
	CapacityBlockID        string            `json:"capacityBlockId,omitempty"`
	AvailabilityZone       string            `json:"availabilityZone,omitempty"`
	State                  string            `json:"state,omitempty"`
	Tags                   map[string]string `json:"tags,omitempty"`
	CapacityReservationIDs []string          `json:"capacityReservationIds,omitempty"`
}

type CapacityBlockExtension struct {
	CapacityBlockExtensionStartDate     time.Time `json:"capacityBlockExtensionStartDate"`
	CapacityBlockExtensionEndDate       time.Time `json:"capacityBlockExtensionEndDate"`
	CapacityBlockExtensionPurchaseDate  time.Time `json:"capacityBlockExtensionPurchaseDate"`
	CapacityBlockExtensionOfferingID    string    `json:"capacityBlockExtensionOfferingId,omitempty"`
	CapacityReservationID               string    `json:"capacityReservationId,omitempty"`
	AvailabilityZone                    string    `json:"availabilityZone,omitempty"`
	CapacityBlockExtensionStatus        string    `json:"capacityBlockExtensionStatus,omitempty"`
	CapacityBlockExtensionDurationHours int32     `json:"capacityBlockExtensionDurationHours,omitempty"`
}

type CapacityBlockExtensionOffering struct {
	CapacityBlockExtensionStartDate     time.Time `json:"capacityBlockExtensionStartDate"`
	CapacityBlockExtensionEndDate       time.Time `json:"capacityBlockExtensionEndDate"`
	CapacityBlockExtensionOfferingID    string    `json:"capacityBlockExtensionOfferingId,omitempty"`
	CapacityReservationID               string    `json:"capacityReservationId,omitempty"`
	InstanceType                        string    `json:"instanceType,omitempty"`
	AvailabilityZone                    string    `json:"availabilityZone,omitempty"`
	CurrencyCode                        string    `json:"currencyCode,omitempty"`
	UpfrontPrice                        string    `json:"upfrontPrice,omitempty"`
	InstanceCount                       int32     `json:"instanceCount,omitempty"`
	CapacityBlockExtensionDurationHours int32     `json:"capacityBlockExtensionDurationHours,omitempty"`
}

type CapacityBlockOffering struct {
	StartDate                  time.Time `json:"startDate"`
	EndDate                    time.Time `json:"endDate"`
	CapacityBlockOfferingID    string    `json:"capacityBlockOfferingId,omitempty"`
	InstanceType               string    `json:"instanceType,omitempty"`
	AvailabilityZone           string    `json:"availabilityZone,omitempty"`
	Tenancy                    string    `json:"tenancy,omitempty"`
	CurrencyCode               string    `json:"currencyCode,omitempty"`
	UpfrontPrice               string    `json:"upfrontPrice,omitempty"`
	InstanceCount              int32     `json:"instanceCount,omitempty"`
	CapacityBlockDurationHours int32     `json:"capacityBlockDurationHours,omitempty"`
}

type CapacityBlockReservationStatus struct {
	CapacityReservationID    string `json:"capacityReservationId,omitempty"`
	TotalCapacity            int32  `json:"totalCapacity,omitempty"`
	TotalAvailableCapacity   int32  `json:"totalAvailableCapacity,omitempty"`
	TotalUnavailableCapacity int32  `json:"totalUnavailableCapacity,omitempty"`
}

type CapacityBlockStatus struct {
	CapacityBlockID             string                           `json:"capacityBlockId,omitempty"`
	InterconnectStatus          string                           `json:"interconnectStatus,omitempty"`
	CapacityReservationStatuses []CapacityBlockReservationStatus `json:"capacityReservationStatuses,omitempty"`
	TotalCapacity               int32                            `json:"totalCapacity,omitempty"`
	TotalAvailableCapacity      int32                            `json:"totalAvailableCapacity,omitempty"`
	TotalUnavailableCapacity    int32                            `json:"totalUnavailableCapacity,omitempty"`
}

type CapacityManagerAttributes struct {
	Status                 string
	IngestionStatus        string
	IngestionStatusMessage string
	OrganizationsAccess    bool
	DataExportCount        int32
}

type CapacityManagerDataExport struct {
	CreateTime                  time.Time         `json:"createTime"`
	Tags                        map[string]string `json:"tags,omitempty"`
	CapacityManagerDataExportID string            `json:"capacityManagerDataExportId,omitempty"`
	OutputFormat                string            `json:"outputFormat,omitempty"`
	S3BucketName                string            `json:"s3BucketName,omitempty"`
	S3BucketPrefix              string            `json:"s3BucketPrefix,omitempty"`
	Schedule                    string            `json:"schedule,omitempty"`
	LatestDeliveryStatus        string            `json:"latestDeliveryStatus,omitempty"`
}

type CapacityManagerDimension struct {
	Dimensions map[string]string
}

type CapacityManagerState struct {
	Status              string `json:"status,omitempty"`
	OrganizationsAccess bool   `json:"organizationsAccess,omitempty"`
}

type CapacityReservation struct {
	CreateTime            time.Time `json:"createTime"`
	CapacityReservationID string    `json:"capacityReservationID,omitempty"`
	InstanceType          string    `json:"instanceType,omitempty"`
	AvailabilityZone      string    `json:"availabilityZone,omitempty"`
	OwnedBy               string    `json:"ownedBy,omitempty"`
	State                 string    `json:"state,omitempty"`
	// InstancePlatform is the OS platform reserved (e.g. "Linux/UNIX"). Populated
	// for Capacity Block purchases; empty for plain CreateCapacityReservation
	// calls that predate this field.
	InstancePlatform       string `json:"instancePlatform,omitempty"`
	AvailableInstanceCount int    `json:"availableInstanceCount,omitempty"`
	TotalInstanceCount     int    `json:"totalInstanceCount,omitempty"`
}

type CapacityReservationBillingRequest struct {
	LastUpdateTime                  time.Time `json:"lastUpdateTime"`
	CapacityReservationID           string    `json:"capacityReservationId,omitempty"`
	RequestedBy                     string    `json:"requestedBy,omitempty"`
	UnusedReservationBillingOwnerID string    `json:"unusedReservationBillingOwnerId,omitempty"`
	Status                          string    `json:"status,omitempty"`
	StatusMessage                   string    `json:"statusMessage,omitempty"`
}

type CapacityReservationFleet struct {
	CreateTime                 time.Time                              `json:"createTime"`
	EndDate                    *time.Time                             `json:"endDate,omitempty"`
	CapacityReservationFleetID string                                 `json:"capacityReservationFleetId,omitempty"`
	AllocationStrategy         string                                 `json:"allocationStrategy,omitempty"`
	State                      string                                 `json:"state,omitempty"`
	InstanceMatchCriteria      string                                 `json:"instanceMatchCriteria,omitempty"`
	Tenancy                    string                                 `json:"tenancy,omitempty"`
	Tags                       map[string]string                      `json:"tags,omitempty"`
	InstanceTypeSpecifications []CapacityReservationFleetInstanceSpec `json:"instanceTypeSpecifications,omitempty"`
	TotalTargetCapacity        int32                                  `json:"totalTargetCapacity,omitempty"`
	TotalFulfilledCapacity     float64                                `json:"totalFulfilledCapacity,omitempty"`
}

type CapacityReservationFleetCancellation struct {
	CapacityReservationFleetID string `json:"capacityReservationFleetId,omitempty"`
	PreviousState              string `json:"previousState,omitempty"`
	CurrentState               string `json:"currentState,omitempty"`
}

type CapacityReservationFleetInstanceSpec struct {
	AvailabilityZone      string  `json:"availabilityZone,omitempty"`
	InstanceType          string  `json:"instanceType,omitempty"`
	InstancePlatform      string  `json:"instancePlatform,omitempty"`
	CapacityReservationID string  `json:"capacityReservationId,omitempty"`
	Priority              int32   `json:"priority,omitempty"`
	Weight                float64 `json:"weight,omitempty"`
	TotalInstanceCount    int32   `json:"totalInstanceCount,omitempty"`
	EbsOptimized          bool    `json:"ebsOptimized,omitempty"`
}

type CapacityReservationInstanceUsage struct {
	AccountID         string `json:"accountID,omitempty"`
	UsedInstanceCount int32  `json:"usedInstanceCount,omitempty"`
}

type CapacityReservationSpec struct {
	CapacityReservationPreference       string `json:"capacityReservationPreference,omitempty"`
	CapacityReservationID               string `json:"capacityReservationId,omitempty"`
	CapacityReservationResourceGroupArn string `json:"capacityReservationResourceGroupArn,omitempty"`
}

type CapacityReservationTopologyEntry struct {
	CapacityReservationID string
	InstanceType          string
	AvailabilityZone      string
}

type CapacityReservationUsage struct {
	InterruptibleAllocation *InterruptibleCapacityReservationAllocation
	CapacityReservationID   string
	InstanceType            string
	State                   string
	InstanceUsages          []CapacityReservationInstanceUsage
	AvailableInstanceCount  int
	TotalInstanceCount      int
	Interruptible           bool
}

type CarrierGateway struct {
	CarrierGatewayID string `json:"carrierGatewayId,omitempty"`
	VpcID            string `json:"vpcId,omitempty"`
	State            string `json:"state,omitempty"`
	OwnerID          string `json:"ownerId,omitempty"`
}

type ClassicLinkInstance struct {
	InstanceID string   `json:"instanceId,omitempty"`
	VpcID      string   `json:"vpcId,omitempty"`
	Groups     []string `json:"groups,omitempty"`
}

type ClientVpnAuthRule struct {
	Cidr        string `json:"cidr,omitempty"`
	Status      string `json:"status,omitempty"`
	Description string `json:"description,omitempty"`
	// GroupID is the Active Directory group ID the rule grants access to, if any.
	GroupID string `json:"groupId,omitempty"`
	// AccessAll indicates the rule grants access to all clients (true when
	// GroupID is empty).
	AccessAll bool `json:"accessAll,omitempty"`
}

type ClientVpnConnection struct {
	ConnectionID              string `json:"connectionId,omitempty"`
	ClientVpnEndpointID       string `json:"clientVpnEndpointId,omitempty"`
	Username                  string `json:"username,omitempty"`
	ClientIP                  string `json:"clientIp,omitempty"`
	CommonName                string `json:"commonName,omitempty"`
	ConnectionEstablishedTime string `json:"connectionEstablishedTime,omitempty"`
	Status                    string `json:"status,omitempty"`
}

type ClientVpnEndpoint struct {
	ServerCertificateArn      string                    `json:"serverCertificateArn,omitempty"`
	DNSName                   string                    `json:"dnsName,omitempty"`
	Status                    string                    `json:"status,omitempty"`
	Description               string                    `json:"description,omitempty"`
	ClientCidrBlock           string                    `json:"clientCidrBlock,omitempty"`
	ClientVpnEndpointID       string                    `json:"clientVpnEndpointId,omitempty"`
	VpnProtocol               string                    `json:"vpnProtocol,omitempty"`
	TransportProtocol         string                    `json:"transportProtocol,omitempty"`
	VPCID                     string                    `json:"vpcId,omitempty"`
	CertificateRevocationList string                    `json:"certificateRevocationList,omitempty"`
	CreationTime              string                    `json:"creationTime,omitempty"`
	SelfServicePortalURL      string                    `json:"selfServicePortalUrl,omitempty"`
	DNSServers                []string                  `json:"dnsServers,omitempty"`
	SecurityGroupIDs          []string                  `json:"securityGroupIds,omitempty"`
	TargetNetworks            []*ClientVpnTargetNetwork `json:"targetNetworks,omitempty"`
	Routes                    []ClientVpnRoute          `json:"routes,omitempty"`
	AuthRules                 []ClientVpnAuthRule       `json:"authRules,omitempty"`
	SessionTimeoutHours       int32                     `json:"sessionTimeoutHours,omitempty"`
	VpnPort                   int32                     `json:"vpnPort,omitempty"`
	SplitTunnel               bool                      `json:"splitTunnel,omitempty"`
}

type ClientVpnEndpointOptions struct {
	SplitTunnel          *bool
	ServerCertificateArn string
	TransportProtocol    string
	VpcID                string
	SelfServicePortalURL string
	SecurityGroupIDs     []string
	VpnPort              int32
	SessionTimeoutHours  int32
}

type ClientVpnRoute struct {
	DestinationCidr string `json:"destinationCidr,omitempty"`
	Status          string `json:"status,omitempty"`
	Description     string `json:"description,omitempty"`
	// Origin indicates how the route was added: "add-route" for routes created
	// via CreateClientVpnRoute, "associate" for routes auto-added when a target
	// network is associated.
	Origin string `json:"origin,omitempty"`
	// TargetSubnet is the ID of the subnet through which traffic is routed.
	TargetSubnet string `json:"targetSubnet,omitempty"`
}

type ClientVpnTargetNetwork struct {
	AssociationID       string   `json:"associationId,omitempty"`
	SubnetID            string   `json:"subnetId,omitempty"`
	VPCID               string   `json:"vpcId,omitempty"`
	ClientVpnEndpointID string   `json:"clientVpnEndpointId,omitempty"`
	Status              string   `json:"status,omitempty"`
	SecurityGroups      []string `json:"securityGroups,omitempty"`
}

type CoipCidr struct {
	Cidr                     string `json:"cidr,omitempty"`
	CoipPoolID               string `json:"coipPoolId,omitempty"`
	LocalGatewayRouteTableID string `json:"localGatewayRouteTableId,omitempty"`
}

type CoipPool struct {
	LocalGatewayRouteTableID string            `json:"localGatewayRouteTableId,omitempty"`
	PoolID                   string            `json:"poolId,omitempty"`
	PoolArn                  string            `json:"poolArn,omitempty"`
	Tags                     map[string]string `json:"tags,omitempty"`
	PoolCidrs                []string          `json:"poolCidrs,omitempty"`
}

type Compute interface {
	// Launch starts the underlying compute resource for a freshly created
	// instance. The returned LaunchResult is merged back onto the Instance
	// (PrivateIP, PublicIPAddress, PublicDNSName, ProviderID, SSHPort).
	Launch(ctx context.Context, req LaunchRequest) (LaunchResult, error)

	// Terminate removes the underlying compute resource. It is invoked from
	// TerminateInstances and must be idempotent (no error if the resource is
	// already gone).
	Terminate(ctx context.Context, instanceID, providerID string) error

	// Start resumes a previously stopped resource (analogous to EC2 StartInstances).
	Start(ctx context.Context, instanceID, providerID string) error

	// Stop pauses the underlying resource (analogous to EC2 StopInstances).
	Stop(ctx context.Context, instanceID, providerID string) error
}

type ComputeProviderConfig interface {
	// GetEC2ComputeProvider returns "inmemory" (default) or "docker".
	GetEC2ComputeProvider() string
	// GetEC2DockerComputeConfig returns docker provider settings (only consulted
	// when GetEC2ComputeProvider() == "docker").
	GetEC2DockerComputeConfig() DockerComputeConfig
}

type ConfigProvider interface {
	GetEC2Settings() Settings
}

type ConversionTask struct {
	ExpirationTime    time.Time `json:"expirationTime"`
	InstanceID        string    `json:"instanceId,omitempty"`
	State             string    `json:"state,omitempty"`
	StatusMessage     string    `json:"statusMessage,omitempty"`
	Kind              string    `json:"kind,omitempty"`
	Description       string    `json:"description,omitempty"`
	ConversionTaskID  string    `json:"conversionTaskId,omitempty"`
	Platform          string    `json:"platform,omitempty"`
	AvailabilityZone  string    `json:"availabilityZone,omitempty"`
	VolumeID          string    `json:"volumeId,omitempty"`
	ImageFormat       string    `json:"imageFormat,omitempty"`
	ImportManifestURL string    `json:"importManifestUrl,omitempty"`
	VolumeSize        int64     `json:"volumeSize,omitempty"`
	ImageBytes        int64     `json:"imageBytes,omitempty"`
}

type CopyVolumesResult struct {
	SourceVolumeID string `json:"sourceVolumeID,omitempty"`
	DestVolumeID   string `json:"destVolumeID,omitempty"`
}

type CreationDateCondition struct {
	MaximumDaysSinceCreated int32 `json:"maximumDaysSinceCreated,omitempty"`
}

type CustomerGateway struct {
	CustomerGatewayID string `json:"customerGatewayId,omitempty"`
	State             string `json:"state,omitempty"`
	Type              string `json:"type,omitempty"`
	BgpAsn            string `json:"bgpAsn,omitempty"`
	IPAddress         string `json:"ipAddress,omitempty"`
}

type DNSRegistrar interface {
	Register(hostname string)
	Deregister(hostname string)
}

type DeclarativePoliciesReport struct {
	StartTime time.Time         `json:"startTime"`
	EndTime   time.Time         `json:"endTime"`
	Tags      map[string]string `json:"tags,omitempty"`
	ReportID  string            `json:"reportId,omitempty"`
	TargetID  string            `json:"targetId,omitempty"`
	S3Bucket  string            `json:"s3Bucket,omitempty"`
	S3Prefix  string            `json:"s3Prefix,omitempty"`
	Status    string            `json:"status,omitempty"`
}

type DeclarativePoliciesReportSummary struct {
	StartTime              time.Time
	EndTime                time.Time
	ReportID               string
	TargetID               string
	S3Bucket               string
	S3Prefix               string
	NumberOfAccounts       int32
	NumberOfFailedAccounts int32
}

type DeprecationTimeCondition struct {
	MaximumDaysSinceDeprecated int32 `json:"maximumDaysSinceDeprecated,omitempty"`
}

type DhcpConfiguration struct {
	Key    string   `json:"key,omitempty"`
	Values []string `json:"values,omitempty"`
}

type DhcpOptions struct {
	DhcpOptionsID    string              `json:"dhcpOptionsId,omitempty"`
	Configurations   []DhcpConfiguration `json:"configurations,omitempty"`
	AssociatedVPCIDs []string            `json:"associatedVpcIds,omitempty"`
}

type DockerCompute struct {
	// contains filtered or unexported fields
}

type DockerComputeConfig struct {
	Labels    map[string]string `json:"labels,omitempty"`
	Image     string            `json:"image,omitempty"`
	Network   string            `json:"network,omitempty"`
	SSHHostIP string            `json:"sshHostIP,omitempty"`
	// Region is used to render the public DNS name suffix
	// (e.g. us-east-1 → "compute-1.amazonaws.com").
	Region     string `json:"region,omitempty"`
	SSHPortMin int    `json:"sshPortMin,omitempty"`
	SSHPortMax int    `json:"sshPortMax,omitempty"`
}

type EgressOnlyInternetGateway struct {
	CreateTime time.Time `json:"createTime"`
	ID         string    `json:"id,omitempty"`
	VPCID      string    `json:"vpcID,omitempty"`
	State      string    `json:"state,omitempty"`
}

type ElasticGpuStub struct {
	ElasticGpuID   string
	InstanceID     string
	ElasticGpuType string
}

type EnclaveCertIamRoleAssociation struct {
	CertificateArn          string `json:"certificateArn,omitempty"`
	RoleArn                 string `json:"roleArn,omitempty"`
	CertificateS3BucketName string `json:"certificateS3BucketName,omitempty"`
	CertificateS3ObjectKey  string `json:"certificateS3ObjectKey,omitempty"`
	EncryptionKmsKeyID      string `json:"encryptionKmsKeyId,omitempty"`
}

type ExportImageTaskRec struct {
	ExportImageTaskID string `json:"exportImageTaskId,omitempty"`
	Description       string `json:"description,omitempty"`
	ImageID           string `json:"imageId,omitempty"`
	DiskImageFormat   string `json:"diskImageFormat,omitempty"`
	Progress          string `json:"progress,omitempty"`
	Status            string `json:"status,omitempty"`
	StatusMessage     string `json:"statusMessage,omitempty"`
	S3Bucket          string `json:"s3Bucket,omitempty"`
	S3Prefix          string `json:"s3Prefix,omitempty"`
	RoleName          string `json:"roleName,omitempty"`
}

type ExportTask struct {
	ExportTaskID      string `json:"exportTaskId,omitempty"`
	Description       string `json:"description,omitempty"`
	State             string `json:"state,omitempty"`
	StatusMessage     string `json:"statusMessage,omitempty"`
	InstanceID        string `json:"instanceId,omitempty"`
	TargetEnvironment string `json:"targetEnvironment,omitempty"`
	DiskImageFormat   string `json:"diskImageFormat,omitempty"`
	ContainerFormat   string `json:"containerFormat,omitempty"`
	S3Bucket          string `json:"s3Bucket,omitempty"`
	S3Key             string `json:"s3Key,omitempty"`
}

type FailedCapacityReservationFleetCancellation struct {
	CapacityReservationFleetID string `json:"capacityReservationFleetId,omitempty"`
	ErrorCode                  string `json:"errorCode,omitempty"`
	ErrorMessage               string `json:"errorMessage,omitempty"`
}

type FastLaunchImageItem struct {
	ImageID string `json:"imageID,omitempty"`
	State   string `json:"state,omitempty"`
}

type FastSnapshotRestoreItem struct {
	SnapshotID       string `json:"snapshotID,omitempty"`
	AvailabilityZone string `json:"availabilityZone,omitempty"`
	State            string `json:"state,omitempty"`
}

type Fleet struct {
	FleetID                          string `json:"fleetId,omitempty"`
	FleetState                       string `json:"fleetState,omitempty"`
	FleetType                        string `json:"fleetType,omitempty"`
	TargetCapacityUnitType           string `json:"targetCapacityUnitType,omitempty"`
	ExcessCapacityTerminationPolicy  string `json:"excessCapacityTerminationPolicy,omitempty"`
	TotalTargetCapacity              int    `json:"totalTargetCapacity,omitempty"`
	OnDemandTargetCapacity           int    `json:"onDemandTargetCapacity,omitempty"`
	SpotTargetCapacity               int    `json:"spotTargetCapacity,omitempty"`
	TerminateInstancesWithExpiration bool   `json:"terminateInstancesWithExpiration,omitempty"`
}

type FlowLog struct {
	CreationTime       time.Time `json:"creationTime"`
	FlowLogID          string    `json:"flowLogId,omitempty"`
	ResourceID         string    `json:"resourceId,omitempty"`
	TrafficType        string    `json:"trafficType,omitempty"`
	LogDestinationType string    `json:"logDestinationType,omitempty"`
	LogDestination     string    `json:"logDestination,omitempty"`
	FlowLogStatus      string    `json:"flowLogStatus,omitempty"`
}

type FpgaImage struct {
	UpdateTime        time.Time                 `json:"updateTime,omitzero"`
	CreateTime        time.Time                 `json:"createTime,omitzero"`
	Tags              map[string]string         `json:"tags,omitempty"`
	OwnerAlias        string                    `json:"ownerAlias,omitempty"`
	ShellVersion      string                    `json:"shellVersion,omitempty"`
	State             string                    `json:"state,omitempty"`
	StateMessage      string                    `json:"stateMessage,omitempty"`
	OwnerID           string                    `json:"ownerId,omitempty"`
	FpgaImageID       string                    `json:"fpgaImageId,omitempty"`
	Description       string                    `json:"description,omitempty"`
	Name              string                    `json:"name,omitempty"`
	FpgaImageGlobalID string                    `json:"fpgaImageGlobalId,omitempty"`
	ProductCodes      []string                  `json:"productCodes,omitempty"`
	LoadPermissions   []FpgaImageLoadPermission `json:"loadPermissions,omitempty"`
	InstanceTypes     []string                  `json:"instanceTypes,omitempty"`
	Public            bool                      `json:"public,omitempty"`
}

type FpgaImageAttribute struct {
	FpgaImageID     string                    `json:"fpgaImageId,omitempty"`
	Description     string                    `json:"description,omitempty"`
	Name            string                    `json:"name,omitempty"`
	LoadPermissions []FpgaImageLoadPermission `json:"loadPermissions,omitempty"`
	ProductCodes    []string                  `json:"productCodes,omitempty"`
}

type FpgaImageAttributeModification struct {
	Attribute         string
	Description       *string
	Name              *string
	OperationType     string
	LoadPermissionAdd []FpgaImageLoadPermission
	LoadPermissionDel []FpgaImageLoadPermission
	ProductCodes      []string
}

type FpgaImageLoadPermission struct {
	Group  string `json:"group,omitempty"`
	UserID string `json:"userId,omitempty"`
}

type Handler struct {
	Backend Backend `json:"backend"`

	AccountID string `json:"accountID,omitempty"`
	Region    string `json:"region,omitempty"`
	// contains filtered or unexported fields
}