aws ec2
This is the Amazon EC2 API Reference. AWS CLI reference
811 commands Its page in the AWS CLI reference
Commands
accept-address-transferAccepts an Elastic IP address transfer.accept-capacity-reservation-billing-ownershipAccepts a request to assign billing of the available capacity of a shared Capacity Reservation to your account.accept-reserved-instances-exchange-quoteAccepts the Convertible Reserved Instance exchange quote described in the GetReservedInstancesExchangeQuote call.accept-transit-gateway-client-vpn-attachmentAccepts a Transit Gateway attachment request for a Client VPN endpoint.accept-transit-gateway-multicast-domain-associationsAccepts a request to associate subnets with a transit gateway multicast domain.accept-transit-gateway-peering-attachmentAccepts a transit gateway peering attachment request.accept-transit-gateway-vpc-attachmentAccepts a request to attach a VPC to a transit gateway.accept-vpc-endpoint-connectionsAccepts connection requests to your VPC endpoint service.accept-vpc-peering-connectionAccept a VPC peering connection request.advertise-byoip-cidrAdvertises an IPv4 or IPv6 address range that is provisioned for use with your Amazon Web Services resources through bring your own IP addresses (BYOIP).allocate-addressAllocates an Elastic IP address to your Amazon Web Services account.allocate-hostsAllocates a Dedicated Host to your account.allocate-ipam-pool-cidrAllocate a CIDR from an IPAM pool.apply-security-groups-to-client-vpn-target-networkApplies a security group to the association between the target network and the Client VPN endpoint.assign-ipv6-addressesAssigns the specified IPv6 addresses to the specified network interface.assign-private-ip-addressesAssigns the specified secondary private IP addresses to the specified network interface.assign-private-nat-gateway-addressAssigns private IPv4 addresses to a private NAT gateway.associate-addressAssociates an Elastic IP address, or carrier IP address (for instances that are in subnets in Wavelength Zones) with an instance or a network interface.associate-application-status-checkAssociates an application status check with instances or tags.associate-capacity-reservation-billing-ownerInitiates a request to assign billing of the unused capacity of a shared Capacity Reservation to a consumer account that is consolidated under the same Amazon Web Services organizations payer account.associate-client-vpn-target-networkAssociates a target network with a Client VPN endpoint.associate-dhcp-optionsAssociates a set of DHCP options (that you've previously created) with the specified VPC, or associates no DHCP options with the VPC.associate-enclave-certificate-iam-roleAssociates an Identity and Access Management (IAM) role with an Certificate Manager (ACM) certificate.associate-iam-instance-profileAssociates an IAM instance profile with a running or stopped instance.associate-instance-event-windowAssociates one or more targets with an event window.associate-ipam-byoasnAssociates your Autonomous System Number (ASN) with a BYOIP CIDR that you own in the same Amazon Web Services Region.associate-ipam-resource-discoveryAssociates an IPAM resource discovery with an Amazon VPC IPAM.associate-nat-gateway-addressAssociates Elastic IP addresses (EIPs) and private IPv4 addresses with a public NAT gateway.associate-route-serverAssociates a route server with a VPC to enable dynamic route updates.associate-route-tableAssociates a subnet in your VPC or an internet gateway or virtual private gateway attached to your VPC with a route table in your VPC.associate-security-group-vpcAssociates a security group with another VPC in the same Region.associate-subnet-cidr-blockAssociates a CIDR block with your subnet.associate-transit-gateway-multicast-domainAssociates the specified subnets and transit gateway attachments with the specified transit gateway multicast domain.associate-transit-gateway-policy-tableAssociates the specified transit gateway attachment with a transit gateway policy table.associate-transit-gateway-route-tableAssociates the specified attachment with the specified transit gateway route table.associate-trunk-interfaceAssociates a branch network interface with a trunk network interface.associate-vpc-cidr-blockAssociates a CIDR block with your VPC.attach-classic-link-vpcThis action is deprecated.attach-image-watermarkAttaches a watermark to a non-public AMI.attach-internet-gatewayAttaches an internet gateway or a virtual private gateway to a VPC, enabling connectivity between the internet and the VPC.attach-network-interfaceAttaches a network interface to an instance.attach-verified-access-trust-providerAttaches the specified Amazon Web Services Verified Access trust provider to the specified Amazon Web Services Verified Access instance.attach-volumeAttaches an Amazon EBS volume to a running or stopped instance, and exposes it to the instance with the specified device name.attach-vpn-gatewayAttaches an available virtual private gateway to a VPC.authorize-client-vpn-ingressAdds an ingress authorization rule to a Client VPN endpoint.authorize-security-group-egressAdds the specified outbound (egress) rules to a security group.authorize-security-group-ingressAdds the specified inbound (ingress) rules to a security group.batch-modify-ipam-routing-policy-registrationsModifies multiple routing policy registrations in a single operation.bundle-instanceBundles an Amazon instance store-backed Windows instance.cancel-bundle-taskCancels a bundling operation for an instance store-backed Windows instance.cancel-capacity-reservationCancels the specified Capacity Reservation, releases the reserved capacity, and changes the Capacity Reservation's state to cancelled.cancel-capacity-reservation-fleetsCancels one or more Capacity Reservation Fleets.cancel-conversion-taskCancels an active conversion task.cancel-declarative-policies-reportCancels the generation of an account status report.cancel-export-taskCancels an active export task.cancel-image-launch-permissionRemoves your Amazon Web Services account from the launch permissions for the specified AMI.cancel-import-taskCancels an in-process import virtual machine or import snapshot task.cancel-reserved-instances-listingCancels the specified Reserved Instance listing in the Reserved Instance Marketplace.cancel-spot-fleet-requestsCancels the specified Spot Fleet requests.cancel-spot-instance-requestsCancels one or more Spot Instance requests.confirm-product-instanceDetermines whether a product code is associated with an instance.copy-fpga-imageCopies the specified Amazon FPGA Image (AFI) to the current Region.copy-imageInitiates an AMI copy operation.copy-snapshotCreates an exact copy of an Amazon EBS snapshot.copy-volumesCreates a crash-consistent, point-in-time copy of an existing Amazon EBS volume within the same Availability Zone.create-application-status-checkCreates an application status check for monitoring the health of applications running on your instances.create-capacity-manager-data-exportCreates a new data export configuration for EC2 Capacity Manager.create-capacity-reservationCreates a new Capacity Reservation with the specified attributes.create-capacity-reservation-by-splittingCreate a new Capacity Reservation by splitting the capacity of the source Capacity Reservation.create-capacity-reservation-cancellation-quoteGenerates a cancellation quote for a future-dated Capacity Reservation that is within its commitment duration.create-capacity-reservation-date-change-quoteGenerates a quote for changing the start date of a future-dated Capacity Reservation that has not yet been delivered.create-capacity-reservation-fleetCreates a Capacity Reservation Fleet.create-carrier-gatewayCreates a carrier gateway.create-client-vpn-endpointCreates a Client VPN endpoint.create-client-vpn-routeAdds a route to a network to a Client VPN endpoint.create-coip-cidrCreates a range of customer-owned IP addresses.create-coip-poolCreates a pool of customer-owned IP (CoIP) addresses.create-customer-gatewayProvides information to Amazon Web Services about your customer gateway device.create-default-subnetCreates a default subnet with a size /20 IPv4 CIDR block in the specified Availability Zone in your default VPC.create-default-vpcCreates a default VPC with a size /16 IPv4 CIDR block and a default subnet in each Availability Zone.create-delegate-mac-volume-ownership-taskDelegates ownership of the Amazon EBS root volume for an Apple silicon Mac instance to an administrative user.create-dhcp-optionsCreates a custom set of DHCP options.create-egress-only-internet-gateway[IPv6 only] Creates an egress-only internet gateway for your VPC.create-fleetCreates an EC2 Fleet that contains the configuration information for On-Demand Instances and Spot Instances.create-flow-logsCreates one or more flow logs to capture information about IP traffic for a specific network interface, subnet, or VPC.create-fpga-imageCreates an Amazon FPGA Image (AFI) from the specified design checkpoint (DCP).create-imageCreates an Amazon EBS-backed AMI from an Amazon EBS-backed instance that is either running or stopped.create-image-usage-reportCreates a report that shows how your image is used across other Amazon Web Services accounts.create-instance-connect-endpointCreates an EC2 Instance Connect Endpoint.create-instance-event-windowCreates an event window in which scheduled events for the associated Amazon EC2 instances can run.create-instance-export-taskExports a running or stopped instance to an Amazon S3 bucket.create-internet-gatewayCreates an internet gateway for use with a VPC.create-interruptible-capacity-reservation-allocationCreates an interruptible Capacity Reservation by specifying the number of unused instances you want to allocate from your source reservation.create-ipamCreate an IPAM.create-ipam-external-resource-verification-tokenCreate a verification token.create-ipam-internet-registry-associationCreates an association between an IPAM and a Regional Internet Registry (RIR) for Resource Public Key Infrastructure (RPKI) management.create-ipam-policyCreates an IPAM policy.create-ipam-poolCreate an IP address pool for Amazon VPC IP Address Manager (IPAM).create-ipam-prefix-list-resolverCreates an IPAM prefix list resolver.create-ipam-prefix-list-resolver-targetCreates an IPAM prefix list resolver target.create-ipam-resource-discoveryCreates an IPAM resource discovery.create-ipam-routing-policy-registrationCreates a routing policy registration and publishes Route Origin Authorizations (ROAs) to the RPKI for the specified CIDR prefix and ASNs.create-ipam-scopeCreate an IPAM scope.create-key-pairCreates an ED25519 or 2048-bit RSA key pair with the specified name and in the specified format.create-launch-templateCreates a launch template.create-launch-template-versionCreates a new version of a launch template.create-local-gateway-routeCreates a static route for the specified local gateway route table.create-local-gateway-route-tableCreates a local gateway route table.create-local-gateway-route-table-virtual-interface-group-associationCreates a local gateway route table virtual interface group association.create-local-gateway-route-table-vpc-associationAssociates the specified VPC with the specified local gateway route table.create-local-gateway-virtual-interfaceCreate a virtual interface for a local gateway.create-local-gateway-virtual-interface-groupCreate a local gateway virtual interface group.create-mac-system-integrity-protection-modification-taskCreates a System Integrity Protection (SIP) modification task to configure the SIP settings for an x86 Mac instance or Apple silicon Mac instance.create-managed-prefix-listCreates a managed prefix list.create-nat-gatewayCreates a NAT gateway in the specified subnet.create-network-aclCreates a network ACL in a VPC.create-network-acl-entryCreates an entry (a rule) in a network ACL with the specified rule number.create-network-insights-access-scopeCreates a Network Access Scope.create-network-insights-pathCreates a path to analyze for reachability.create-network-interfaceCreates a network interface in the specified subnet.create-network-interface-permissionGrants an Amazon Web Services-authorized account permission to attach the specified network interface to an instance in their account.create-placement-groupCreates a placement group in which to launch instances.create-public-ipv4-poolCreates a public IPv4 address pool.create-replace-root-volume-taskReplaces the EBS-backed root volume for a running instance with a new volume that is restored to the original root volume's launch state, that is restored to a specific snapshot taken from the original root volume, that is restored from an AMI that has the same key characteristics as that of the instance, or that is replaced by a specified volume.create-reserved-instances-listingCreates a listing for Amazon EC2 Standard Reserved Instances to be sold in the Reserved Instance Marketplace.create-restore-image-taskStarts a task that restores an AMI from an Amazon S3 object that was previously created by using CreateStoreImageTask.create-routeCreates a route in a route table within a VPC.create-route-serverCreates a new route server to manage dynamic routing in a VPC.create-route-server-endpointCreates a new endpoint for a route server in a specified subnet.create-route-server-peerCreates a new BGP peer for a specified route server endpoint.create-route-tableCreates a route table for the specified VPC.create-secondary-networkCreates a secondary network.create-secondary-subnetCreates a secondary subnet in a secondary network.create-security-groupCreates a security group.create-snapshotCreates a snapshot of an EBS volume and stores it in Amazon S3.create-snapshotsCreates crash-consistent snapshots of multiple EBS volumes attached to an Amazon EC2 instance.create-spot-datafeed-subscriptionCreates a data feed for Spot Instances, enabling you to view Spot Instance usage logs.create-store-image-taskStores an AMI as a single object in an Amazon S3 bucket.create-subnetCreates a subnet in the specified VPC.create-subnet-cidr-reservationCreates a subnet CIDR reservation.create-tagsAdds or overwrites only the specified tags for the specified Amazon EC2 resource or resources.create-traffic-mirror-filterCreates a Traffic Mirror filter.create-traffic-mirror-filter-ruleCreates a Traffic Mirror filter rule.create-traffic-mirror-sessionCreates a Traffic Mirror session.create-traffic-mirror-targetCreates a target for your Traffic Mirror session.create-transit-gatewayCreates a transit gateway.create-transit-gateway-connectCreates a Connect attachment from a specified transit gateway attachment.create-transit-gateway-connect-peerCreates a Connect peer for a specified transit gateway Connect attachment between a transit gateway and an appliance.create-transit-gateway-metering-policyCreates a metering policy for a transit gateway to track and measure network traffic.create-transit-gateway-metering-policy-entryCreates an entry in a transit gateway metering policy to define traffic measurement rules.create-transit-gateway-multicast-domainCreates a multicast domain using the specified transit gateway.create-transit-gateway-peering-attachmentRequests a transit gateway peering attachment between the specified transit gateway (requester) and a peer transit gateway (accepter).create-transit-gateway-policy-tableCreates a transit gateway policy table.create-transit-gateway-policy-table-entryCreates an entry in a transit gateway policy table to route matching traffic to a specified route table.create-transit-gateway-prefix-list-referenceCreates a reference (route) to a prefix list in a specified transit gateway route table.create-transit-gateway-routeCreates a static route for the specified transit gateway route table.create-transit-gateway-route-tableCreates a route table for the specified transit gateway.create-transit-gateway-route-table-announcementAdvertises a new transit gateway route table.create-transit-gateway-vpc-attachmentAttaches the specified VPC to the specified transit gateway.create-verified-access-endpointAn Amazon Web Services Verified Access endpoint is where you define your application along with an optional endpoint-level access policy.create-verified-access-groupAn Amazon Web Services Verified Access group is a collection of Amazon Web Services Verified Access endpoints who's associated applications have similar security requirements.create-verified-access-instanceAn Amazon Web Services Verified Access instance is a regional entity that evaluates application requests and grants access only when your security requirements are met.create-verified-access-trust-providerA trust provider is a third-party entity that creates, maintains, and manages identity information for users and devices.create-volumeCreates an EBS volume that can be attached to an instance in the same Availability Zone.create-vpcCreates a VPC with the specified CIDR blocks.create-vpc-block-public-access-exclusionCreate a VPC Block Public Access (BPA) exclusion.create-vpc-encryption-controlCreates a VPC Encryption Control configuration for a specified VPC.create-vpc-endpointCreates a VPC endpoint.create-vpc-endpoint-connection-notificationCreates a connection notification for a specified VPC endpoint or VPC endpoint service.create-vpc-endpoint-service-configurationCreates a VPC endpoint service to which service consumers (Amazon Web Services accounts, users, and IAM roles) can connect.create-vpc-peering-connectionRequests a VPC peering connection between two VPCs: a requester VPC that you own and an accepter VPC with which to create the connection.create-vpn-concentratorCreates a VPN concentrator that aggregates multiple VPN connections to a transit gateway.create-vpn-connectionCreates a VPN connection between an existing virtual private gateway or transit gateway and a customer gateway.create-vpn-connection-routeCreates a static route associated with a VPN connection between an existing virtual private gateway and a VPN customer gateway.create-vpn-gatewayCreates a virtual private gateway.delete-application-status-checkDeletes an application status check.delete-capacity-manager-data-exportDeletes an existing Capacity Manager data export configuration.delete-carrier-gatewayDeletes a carrier gateway.delete-client-vpn-endpointDeletes the specified Client VPN endpoint.delete-client-vpn-endpoint-authorization-policyDeletes the authorization policy for a Client VPN endpoint.delete-client-vpn-routeDeletes a route from a Client VPN endpoint.delete-coip-cidrDeletes a range of customer-owned IP addresses.delete-coip-poolDeletes a pool of customer-owned IP (CoIP) addresses.delete-customer-gatewayDeletes the specified customer gateway.delete-dhcp-optionsDeletes the specified set of DHCP options.delete-egress-only-internet-gatewayDeletes an egress-only internet gateway.delete-fleetsDeletes the specified EC2 Fleet request.delete-flow-logsDeletes one or more flow logs.delete-fpga-imageDeletes the specified Amazon FPGA Image (AFI).delete-image-usage-reportDeletes the specified image usage report.delete-instance-connect-endpointDeletes the specified EC2 Instance Connect Endpoint.delete-instance-event-windowDeletes the specified event window.delete-internet-gatewayDeletes the specified internet gateway.delete-ipamDelete an IPAM.delete-ipam-external-resource-verification-tokenDelete a verification token.delete-ipam-internet-registry-associationDeletes an IPAM internet registry association.delete-ipam-policyDeletes an IPAM policy.delete-ipam-poolDelete an IPAM pool.delete-ipam-prefix-list-resolverDeletes an IPAM prefix list resolver.delete-ipam-prefix-list-resolver-targetDeletes an IPAM prefix list resolver target.delete-ipam-resource-discoveryDeletes an IPAM resource discovery.delete-ipam-routing-policy-registrationDeletes a routing policy registration for a specified CIDR prefix.delete-ipam-scopeDelete the scope for an IPAM.delete-key-pairDeletes the specified key pair, by removing the public key from Amazon EC2.delete-launch-templateDeletes a launch template.delete-launch-template-versionsDeletes one or more versions of a launch template.delete-local-gateway-routeDeletes the specified route from the specified local gateway route table.delete-local-gateway-route-tableDeletes a local gateway route table.delete-local-gateway-route-table-virtual-interface-group-associationDeletes a local gateway route table virtual interface group association.delete-local-gateway-route-table-vpc-associationDeletes the specified association between a VPC and local gateway route table.delete-local-gateway-virtual-interfaceDeletes the specified local gateway virtual interface.delete-local-gateway-virtual-interface-groupDelete the specified local gateway interface group.delete-managed-prefix-listDeletes the specified managed prefix list.delete-nat-gatewayDeletes the specified NAT gateway.delete-network-aclDeletes the specified network ACL.delete-network-acl-entryDeletes the specified ingress or egress entry (rule) from the specified network ACL.delete-network-insights-access-scopeDeletes the specified Network Access Scope.delete-network-insights-access-scope-analysisDeletes the specified Network Access Scope analysis.delete-network-insights-analysisDeletes the specified network insights analysis.delete-network-insights-pathDeletes the specified path.delete-network-interfaceDeletes the specified network interface.delete-network-interface-permissionDeletes a permission for a network interface.delete-placement-groupDeletes the specified placement group.delete-public-ipv4-poolDelete a public IPv4 pool.delete-queued-reserved-instancesDeletes the queued purchases for the specified Reserved Instances.delete-routeDeletes the specified route from the specified route table.delete-route-serverDeletes the specified route server.delete-route-server-endpointDeletes the specified route server endpoint.delete-route-server-peerDeletes the specified BGP peer from a route server.delete-route-tableDeletes the specified route table.delete-secondary-networkDeletes a secondary network.delete-secondary-subnetDeletes a secondary subnet.delete-security-groupDeletes a security group.delete-snapshotDeletes the specified snapshot.delete-spot-datafeed-subscriptionDeletes the data feed for Spot Instances.delete-subnetDeletes the specified subnet.delete-subnet-cidr-reservationDeletes a subnet CIDR reservation.delete-tagsDeletes the specified set of tags from the specified set of resources.delete-traffic-mirror-filterDeletes the specified Traffic Mirror filter.delete-traffic-mirror-filter-ruleDeletes the specified Traffic Mirror rule.delete-traffic-mirror-sessionDeletes the specified Traffic Mirror session.delete-traffic-mirror-targetDeletes the specified Traffic Mirror target.delete-transit-gatewayDeletes the specified transit gateway.delete-transit-gateway-client-vpn-attachmentDeletes a Transit Gateway attachment for a Client VPN endpoint.delete-transit-gateway-connectDeletes the specified Connect attachment.delete-transit-gateway-connect-peerDeletes the specified Connect peer.delete-transit-gateway-metering-policyDeletes a transit gateway metering policy.delete-transit-gateway-metering-policy-entryDeletes an entry from a transit gateway metering policy.delete-transit-gateway-multicast-domainDeletes the specified transit gateway multicast domain.delete-transit-gateway-peering-attachmentDeletes a transit gateway peering attachment.delete-transit-gateway-policy-tableDeletes the specified transit gateway policy table.delete-transit-gateway-policy-table-entryDeletes the specified transit gateway policy table entry.delete-transit-gateway-prefix-list-referenceDeletes a reference (route) to a prefix list in a specified transit gateway route table.delete-transit-gateway-routeDeletes the specified route from the specified transit gateway route table.delete-transit-gateway-route-tableDeletes the specified transit gateway route table.delete-transit-gateway-route-table-announcementAdvertises to the transit gateway that a transit gateway route table is deleted.delete-transit-gateway-vpc-attachmentDeletes the specified VPC attachment.delete-verified-access-endpointDelete an Amazon Web Services Verified Access endpoint.delete-verified-access-groupDelete an Amazon Web Services Verified Access group.delete-verified-access-instanceDelete an Amazon Web Services Verified Access instance.delete-verified-access-trust-providerDelete an Amazon Web Services Verified Access trust provider.delete-volumeDeletes the specified EBS volume.delete-vpcDeletes the specified VPC.delete-vpc-block-public-access-exclusionDelete a VPC Block Public Access (BPA) exclusion.delete-vpc-encryption-controlDeletes a VPC Encryption Control configuration.delete-vpc-endpoint-connection-notificationsDeletes the specified VPC endpoint connection notifications.delete-vpc-endpoint-service-configurationsDeletes the specified VPC endpoint service configurations.delete-vpc-endpointsDeletes the specified VPC endpoints.delete-vpc-peering-connectionDeletes a VPC peering connection.delete-vpn-concentratorDeletes the specified VPN concentrator.delete-vpn-connectionDeletes the specified VPN connection.delete-vpn-connection-routeDeletes the specified static route associated with a VPN connection between an existing virtual private gateway and a VPN customer gateway.delete-vpn-gatewayDeletes the specified virtual private gateway.deprovision-byoip-cidrReleases the specified address range that you provisioned for use with your Amazon Web Services resources through bring your own IP addresses (BYOIP) and deletes the corresponding address pool.deprovision-ipam-byoasnDeprovisions your Autonomous System Number (ASN) from your Amazon Web Services account.deprovision-ipam-pool-cidrDeprovision a CIDR provisioned from an IPAM pool.deprovision-public-ipv4-pool-cidrDeprovision a CIDR from a public IPv4 pool.deregister-imageDeregisters the specified AMI.deregister-instance-event-notification-attributesDeregisters tag keys to prevent tags that have the specified tag keys from being included in scheduled event notifications for resources in the Region.deregister-transit-gateway-multicast-group-membersDeregisters the specified members (network interfaces) from the transit gateway multicast group.deregister-transit-gateway-multicast-group-sourcesDeregisters the specified sources (network interfaces) from the transit gateway multicast group.describe-account-attributesDescribes attributes of your Amazon Web Services account.describe-account-vpc-encryption-controlDescribes the account-level VPC Encryption Control configuration for your account.describe-address-transfersDescribes an Elastic IP address transfer.describe-addressesDescribes the specified Elastic IP addresses or all of your Elastic IP addresses.describe-addresses-attributeDescribes the attributes of the specified Elastic IP addresses.describe-aggregate-id-formatDescribes the longer ID format settings for all resource types in a specific Region.describe-application-statusDescribes the aggregated application health status for the specified instances.describe-application-status-check-associationsDescribes the associations for one or more application status checks.describe-application-status-checksDescribes application status checks, including configuration details such as protocol, port, path, thresholds, and associations.describe-availability-zonesDescribes the Availability Zones, Local Zones, and Wavelength Zones that are available to you.describe-aws-network-performance-metric-subscriptionsDescribes the current Infrastructure Performance metric subscriptions.describe-bundle-tasksDescribes the specified bundle tasks or all of your bundle tasks.describe-byoip-cidrsDescribes the IP address ranges that were provisioned for use with Amazon Web Services resources through through bring your own IP addresses (BYOIP).describe-capacity-block-extension-historyDescribes the events for the specified Capacity Block extension during the specified time.describe-capacity-block-extension-offeringsDescribes Capacity Block extension offerings available for purchase in the Amazon Web Services Region that you're currently using.describe-capacity-block-offeringsDescribes Capacity Block offerings available for purchase in the Amazon Web Services Region that you're currently using.describe-capacity-block-statusDescribes the availability of capacity for the specified Capacity blocks, or all of your Capacity Blocks.describe-capacity-blocksDescribes details about Capacity Blocks in the Amazon Web Services Region that you're currently using.describe-capacity-manager-data-exportsDescribes one or more Capacity Manager data export configurations.describe-capacity-reservation-billing-requestsDescribes a request to assign the billing of the unused capacity of a Capacity Reservation.describe-capacity-reservation-cancellation-quotesDescribes one or more Capacity Reservation cancellation quotes.describe-capacity-reservation-date-change-quotesDescribes one or more Capacity Reservation date change quotes that you generated by using the CreateCapacityReservationDateChangeQuote operation.describe-capacity-reservation-fleetsDescribes one or more Capacity Reservation Fleets.describe-capacity-reservation-topologyDescribes a tree-based hierarchy that represents the physical host placement of your pending or active Capacity Reservations within an Availability Zone or Local Zone.describe-capacity-reservationsDescribes one or more of your Capacity Reservations.describe-carrier-gatewaysDescribes one or more of your carrier gateways.describe-classic-link-instancesThis action is deprecated.describe-client-vpn-authorization-rulesDescribes the authorization rules for a specified Client VPN endpoint.describe-client-vpn-connectionsDescribes active client connections and connections that have been terminated within the last 60 minutes for the specified Client VPN endpoint.describe-client-vpn-endpointsDescribes one or more Client VPN endpoints in the account.describe-client-vpn-routesDescribes the routes for the specified Client VPN endpoint.describe-client-vpn-target-networksDescribes the target networks associated with the specified Client VPN endpoint.describe-coip-poolsDescribes the specified customer-owned address pools or all of your customer-owned address pools.describe-conversion-tasksDescribes the specified conversion tasks or all your conversion tasks.describe-customer-gatewaysDescribes one or more of your VPN customer gateways.describe-declarative-policies-reportsDescribes the metadata of an account status report, including the status of the report.describe-dhcp-optionsDescribes your DHCP option sets.describe-egress-only-internet-gatewaysDescribes your egress-only internet gateways.describe-elastic-gpusAmazon Elastic Graphics reached end of life on January 8, 2024.describe-export-image-tasksDescribes the specified export image tasks or all of your export image tasks.describe-export-tasksDescribes the specified export instance tasks or all of your export instance tasks.describe-fast-launch-imagesDescribe details for Windows AMIs that are configured for Windows fast launch.describe-fast-snapshot-restoresDescribes the state of fast snapshot restores for your snapshots.describe-fleet-historyDescribes the events for the specified EC2 Fleet during the specified time.describe-fleet-instancesDescribes the running instances for the specified EC2 Fleet.describe-fleetsDescribes the specified EC2 Fleet or all of your EC2 Fleets.describe-flow-logsDescribes one or more flow logs.describe-fpga-image-attributeDescribes the specified attribute of the specified Amazon FPGA Image (AFI).describe-fpga-imagesDescribes the Amazon FPGA Images (AFIs) available to you.describe-host-reservation-offeringsDescribes the Dedicated Host reservations that are available to purchase.describe-host-reservationsDescribes reservations that are associated with Dedicated Hosts in your account.describe-hostsDescribes the specified Dedicated Hosts or all your Dedicated Hosts.describe-iam-instance-profile-associationsDescribes your IAM instance profile associations.describe-id-formatDescribes the ID format settings for your resources on a per-Region basis, for example, to view which resource types are enabled for longer IDs.describe-identity-id-formatDescribes the ID format settings for resources for the specified IAM user, IAM role, or root user.describe-image-attributeDescribes the specified attribute of the specified AMI.describe-image-referencesDescribes your Amazon Web Services resources that are referencing the specified images.describe-image-usage-report-entriesDescribes the entries in image usage reports, showing how your images are used across other Amazon Web Services accounts.describe-image-usage-reportsDescribes the configuration and status of image usage reports, filtered by report IDs or image IDs.describe-imagesDescribes the specified images (AMIs, AKIs, and ARIs) available to you or all of the images available to you.describe-import-image-tasksDisplays details about an import virtual machine or import snapshot tasks that are already created.describe-import-snapshot-tasksDescribes your import snapshot tasks.describe-instance-attributeDescribes the specified attribute of the specified instance.describe-instance-connect-endpointsDescribes the specified EC2 Instance Connect Endpoints or all EC2 Instance Connect Endpoints.describe-instance-credit-specificationsDescribes the credit option for CPU usage of the specified burstable performance instances.describe-instance-event-notification-attributesDescribes the tag keys that are registered to appear in scheduled event notifications for resources in the current Region.describe-instance-event-windowsDescribes the specified event windows or all event windows.describe-instance-image-metadataDescribes the AMI that was used to launch an instance, even if the AMI is deprecated, deregistered, made private (no longer public or shared with your account), or not allowed.describe-instance-sql-ha-history-statesDescribes the historical SQL Server High Availability states for Amazon EC2 instances that are enabled for Amazon EC2 High Availability for SQL Server monitoring.describe-instance-sql-ha-statesDescribes the SQL Server High Availability states for Amazon EC2 instances that are enabled for Amazon EC2 High Availability for SQL Server monitoring.describe-instance-statusDescribes the status of the specified instances or all of your instances.describe-instance-topologyDescribes a tree-based hierarchy that represents the physical host placement of your EC2 instances within an Availability Zone or Local Zone.describe-instance-type-offeringsLists the instance types that are offered for the specified location.describe-instance-typesDescribes the specified instance types.describe-instancesDescribes the specified instances or all instances.describe-internet-gatewaysDescribes your internet gateways.describe-ipam-byoasnDescribes your Autonomous System Numbers (ASNs), their provisioning statuses, and the BYOIP CIDRs with which they are associated.describe-ipam-external-resource-verification-tokensDescribe verification tokens.describe-ipam-internet-registry-associationsDescribes one or more IPAM internet registry associations.describe-ipam-policiesDescribes one or more IPAM policies.describe-ipam-pool-allocationsDescribes IPAM pool allocations.describe-ipam-poolsGet information about your IPAM pools.describe-ipam-prefix-list-resolver-targetsDescribes one or more IPAM prefix list resolver Targets.describe-ipam-prefix-list-resolversDescribes one or more IPAM prefix list resolvers.describe-ipam-resource-discoveriesDescribes IPAM resource discoveries.describe-ipam-resource-discovery-associationsDescribes resource discovery association with an Amazon VPC IPAM.describe-ipam-scopesGet information about your IPAM scopes.describe-ipamsGet information about your IPAM pools.describe-ipv6-poolsDescribes your IPv6 address pools.describe-key-pairsDescribes the specified key pairs or all of your key pairs.describe-launch-template-versionsDescribes one or more versions of a specified launch template.describe-launch-templatesDescribes one or more launch templates.describe-local-gateway-route-table-virtual-interface-group-associationsDescribes the associations between virtual interface groups and local gateway route tables.describe-local-gateway-route-table-vpc-associationsDescribes the specified associations between VPCs and local gateway route tables.describe-local-gateway-route-tablesDescribes one or more local gateway route tables.describe-local-gateway-virtual-interface-groupsDescribes the specified local gateway virtual interface groups.describe-local-gateway-virtual-interfacesDescribes the specified local gateway virtual interfaces.describe-local-gatewaysDescribes one or more local gateways.describe-locked-snapshotsDescribes the lock status for a snapshot.describe-mac-hostsDescribes the specified EC2 Mac Dedicated Host or all of your EC2 Mac Dedicated Hosts.describe-mac-modification-tasksDescribes a System Integrity Protection (SIP) modification task or volume ownership delegation task for an Amazon EC2 Mac instance.describe-managed-prefix-listsDescribes your managed prefix lists and any Amazon Web Services-managed prefix lists.describe-moving-addressesThis action is deprecated.describe-nat-gatewaysDescribes your NAT gateways.describe-network-aclsDescribes your network ACLs.describe-network-insights-access-scope-analysesDescribes the specified Network Access Scope analyses.describe-network-insights-access-scopesDescribes the specified Network Access Scopes.describe-network-insights-analysesDescribes one or more of your network insights analyses.describe-network-insights-pathsDescribes one or more of your paths.describe-network-interface-attributeDescribes a network interface attribute.describe-network-interface-permissionsDescribes the permissions for your network interfaces.describe-network-interfacesDescribes the specified network interfaces or all your network interfaces.describe-outpost-lagsDescribes the Outposts link aggregation groups (LAGs).describe-placement-groupsDescribes the specified placement groups or all of your placement groups.describe-prefix-listsDescribes available Amazon Web Services services in a prefix list format, which includes the prefix list name and prefix list ID of the service and the IP address range for the service.describe-principal-id-formatDescribes the ID format settings for the root user and all IAM roles and IAM users that have explicitly specified a longer ID (17-character ID) preference.describe-public-ipv4-poolsDescribes the specified IPv4 address pools.describe-regionsDescribes the Regions that are enabled for your account, or all Regions.describe-replace-root-volume-tasksDescribes a root volume replacement task.describe-reserved-instancesDescribes one or more of the Reserved Instances that you purchased.describe-reserved-instances-listingsDescribes your account's Reserved Instance listings in the Reserved Instance Marketplace.describe-reserved-instances-modificationsDescribes the modifications made to your Reserved Instances.describe-reserved-instances-offeringsDescribes Reserved Instance offerings that are available for purchase.describe-route-server-endpointsDescribes one or more route server endpoints.describe-route-server-peersDescribes one or more route server peers.describe-route-serversDescribes one or more route servers.describe-route-tablesDescribes your route tables.describe-scheduled-instance-availabilityFinds available schedules that meet the specified criteria.describe-scheduled-instancesDescribes the specified Scheduled Instances or all your Scheduled Instances.describe-secondary-interfacesDescribes one or more of your secondary interfaces.describe-secondary-networksDescribes one or more secondary networks.describe-secondary-subnetsDescribes one or more of your secondary subnets.describe-security-group-referencesDescribes the VPCs on the other side of a VPC peering or Transit Gateway connection that are referencing the security groups you've specified in this request.describe-security-group-rulesDescribes one or more of your security group rules.describe-security-group-vpc-associationsDescribes security group VPC associations made with AssociateSecurityGroupVpc.describe-security-groupsDescribes the specified security groups or all of your security groups.describe-service-link-virtual-interfacesDescribes the Outpost service link virtual interfaces.describe-snapshot-attributeDescribes the specified attribute of the specified snapshot.describe-snapshot-tier-statusDescribes the storage tier status of one or more Amazon EBS snapshots.describe-snapshotsDescribes the specified EBS snapshots available to you or all of the EBS snapshots available to you.describe-spot-datafeed-subscriptionDescribes the data feed for Spot Instances.describe-spot-fleet-instancesDescribes the running instances for the specified Spot Fleet.describe-spot-fleet-request-historyDescribes the events for the specified Spot Fleet request during the specified time.describe-spot-fleet-requestsDescribes your Spot Fleet requests.describe-spot-instance-requestsDescribes the specified Spot Instance requests.describe-spot-price-historyDescribes the Spot price history.describe-stale-security-groupsDescribes the stale security group rules for security groups referenced across a VPC peering connection, transit gateway connection, or with a security group VPC association.describe-store-image-tasksDescribes the progress of the AMI store tasks.describe-subnetsDescribes your subnets.describe-tagsDescribes the specified tags for your EC2 resources.describe-traffic-mirror-filter-rulesDescribe traffic mirror filters that determine the traffic that is mirrored.describe-traffic-mirror-filtersDescribes one or more Traffic Mirror filters.describe-traffic-mirror-sessionsDescribes one or more Traffic Mirror sessions.describe-traffic-mirror-targetsInformation about one or more Traffic Mirror targets.describe-transit-gateway-attachmentsDescribes one or more attachments between resources and transit gateways.describe-transit-gateway-connect-peersDescribes one or more Connect peers.describe-transit-gateway-connectsDescribes one or more Connect attachments.describe-transit-gateway-metering-policiesDescribes one or more transit gateway metering policies.describe-transit-gateway-multicast-domainsDescribes one or more transit gateway multicast domains.describe-transit-gateway-peering-attachmentsDescribes your transit gateway peering attachments.describe-transit-gateway-policy-tablesDescribes one or more transit gateway route policy tables.describe-transit-gateway-route-table-announcementsDescribes one or more transit gateway route table advertisements.describe-transit-gateway-route-tablesDescribes one or more transit gateway route tables.describe-transit-gateway-vpc-attachmentsDescribes one or more VPC attachments.describe-transit-gatewaysDescribes one or more transit gateways.describe-trunk-interface-associationsDescribes one or more network interface trunk associations.describe-verified-access-endpointsDescribes the specified Amazon Web Services Verified Access endpoints.describe-verified-access-groupsDescribes the specified Verified Access groups.describe-verified-access-instance-logging-configurationsDescribes the specified Amazon Web Services Verified Access instances.describe-verified-access-instancesDescribes the specified Amazon Web Services Verified Access instances.describe-verified-access-trust-providersDescribes the specified Amazon Web Services Verified Access trust providers.describe-volume-attributeDescribes the specified attribute of the specified volume.describe-volume-statusDescribes the status of the specified volumes.describe-volumesDescribes the specified EBS volumes or all of your EBS volumes.describe-volumes-modificationsDescribes the most recent volume modification request for the specified EBS volumes.describe-vpc-attributeDescribes the specified attribute of the specified VPC.describe-vpc-block-public-access-exclusionsDescribe VPC Block Public Access (BPA) exclusions.describe-vpc-block-public-access-optionsDescribe VPC Block Public Access (BPA) options.describe-vpc-classic-linkThis action is deprecated.describe-vpc-classic-link-dns-supportThis action is deprecated.describe-vpc-encryption-controlsDescribes one or more VPC Encryption Control configurations.describe-vpc-endpoint-associationsDescribes the VPC resources, VPC endpoint services, Amazon Lattice services, or service networks associated with the VPC endpoint.describe-vpc-endpoint-connection-notificationsDescribes the connection notifications for VPC endpoints and VPC endpoint services.describe-vpc-endpoint-connectionsDescribes the VPC endpoint connections to your VPC endpoint services, including any endpoints that are pending your acceptance.describe-vpc-endpoint-service-configurationsDescribes the VPC endpoint service configurations in your account (your services).describe-vpc-endpoint-service-permissionsDescribes the principals (service consumers) that are permitted to discover your VPC endpoint service.describe-vpc-endpoint-servicesDescribes available services to which you can create a VPC endpoint.describe-vpc-endpointsDescribes your VPC endpoints.describe-vpc-peering-connectionsDescribes your VPC peering connections.describe-vpcsDescribes your VPCs.describe-vpn-concentratorsDescribes one or more of your VPN concentrators.describe-vpn-connectionsDescribes one or more of your VPN connections.describe-vpn-gatewaysDescribes one or more of your virtual private gateways.detach-classic-link-vpcThis action is deprecated.detach-image-watermarkRemoves a watermark from the specified AMI.detach-internet-gatewayDetaches an internet gateway from a VPC, disabling connectivity between the internet and the VPC.detach-network-interfaceDetaches a network interface from an instance.detach-verified-access-trust-providerDetaches the specified Amazon Web Services Verified Access trust provider from the specified Amazon Web Services Verified Access instance.detach-volumeDetaches an EBS volume from an instance.detach-vpn-gatewayDetaches a virtual private gateway from a VPC.disable-address-transferDisables Elastic IP address transfer.disable-allowed-images-settingsDisables Allowed AMIs for your account in the specified Amazon Web Services Region.disable-application-status-check-suppressionDisables suppression of application status checks for the specified instances.disable-aws-network-performance-metric-subscriptionDisables Infrastructure Performance metric subscriptions.disable-capacity-managerDisables EC2 Capacity Manager for your account.disable-ebs-encryption-by-defaultDisables EBS encryption by default for your account in the current Region.disable-fast-launchDiscontinue Windows fast launch for a Windows AMI, and clean up existing pre-provisioned snapshots.disable-fast-snapshot-restoresDisables fast snapshot restores for the specified snapshots in the specified Availability Zones.disable-imageSets the AMI state to disabled and removes all launch permissions from the AMI.disable-image-block-public-accessDisables block public access for AMIs at the account level in the specified Amazon Web Services Region.disable-image-deprecationCancels the deprecation of the specified AMI.disable-image-deregistration-protectionDisables deregistration protection for an AMI.disable-instance-sql-ha-standby-detectionsDisable Amazon EC2 instances running in an SQL Server High Availability cluster from SQL Server High Availability instance standby detection monitoring.disable-ipam-organization-admin-accountDisable the IPAM account.disable-ipam-policyDisables an IPAM policy.disable-route-server-propagationDisables route propagation from a route server to a specified route table.disable-serial-console-accessDisables access to the EC2 serial console of all instances for your account.disable-snapshot-block-public-accessDisables the block public access for snapshots setting at the account level for the specified Amazon Web Services Region.disable-transit-gateway-route-table-propagationDisables the specified resource attachment from propagating routes to the specified propagation route table.disable-vgw-route-propagationDisables a virtual private gateway (VGW) from propagating routes to a specified route table of a VPC.disable-vpc-classic-linkThis action is deprecated.disable-vpc-classic-link-dns-supportThis action is deprecated.disassociate-addressDisassociates an Elastic IP address from the instance or network interface it's associated with.disassociate-application-status-checkDisassociates an application status check from instances or tags.disassociate-capacity-reservation-billing-ownerCancels a pending request to assign billing of the unused capacity of a Capacity Reservation to a consumer account, or revokes a request that has already been accepted.disassociate-client-vpn-target-networkDisassociates a target network from the specified Client VPN endpoint.disassociate-enclave-certificate-iam-roleDisassociates an IAM role from an Certificate Manager (ACM) certificate.disassociate-iam-instance-profileDisassociates an IAM instance profile from a running or stopped instance.disassociate-instance-event-windowDisassociates one or more targets from an event window.disassociate-ipam-byoasnRemove the association between your Autonomous System Number (ASN) and your BYOIP CIDR.disassociate-ipam-resource-discoveryDisassociates a resource discovery from an Amazon VPC IPAM.disassociate-nat-gateway-addressDisassociates secondary Elastic IP addresses (EIPs) from a public NAT gateway.disassociate-route-serverDisassociates a route server from a VPC.disassociate-route-tableDisassociates a subnet or gateway from a route table.disassociate-security-group-vpcDisassociates a security group from a VPC.disassociate-subnet-cidr-blockDisassociates a CIDR block from a subnet.disassociate-transit-gateway-multicast-domainDisassociates the specified subnets from the transit gateway multicast domain.disassociate-transit-gateway-policy-tableRemoves the association between an an attachment and a policy table.disassociate-transit-gateway-route-tableDisassociates a resource attachment from a transit gateway route table.disassociate-trunk-interfaceRemoves an association between a branch network interface with a trunk network interface.disassociate-vpc-cidr-blockDisassociates a CIDR block from a VPC.enable-address-transferEnables Elastic IP address transfer.enable-allowed-images-settingsEnables Allowed AMIs for your account in the specified Amazon Web Services Region.enable-application-status-check-suppressionSuppresses application status checks for the specified instances.enable-aws-network-performance-metric-subscriptionEnables Infrastructure Performance subscriptions.enable-capacity-managerEnables EC2 Capacity Manager for your account.enable-ebs-encryption-by-defaultEnables EBS encryption by default for your account in the current Region.enable-fast-launchWhen you enable Windows fast launch for a Windows AMI, images are pre-provisioned, using snapshots to launch instances up to 65% faster.enable-fast-snapshot-restoresEnables fast snapshot restores for the specified snapshots in the specified Availability Zones.enable-imageRe-enables a disabled AMI.enable-image-block-public-accessEnables block public access for AMIs at the account level in the specified Amazon Web Services Region.enable-image-deprecationEnables deprecation of the specified AMI at the specified date and time.enable-image-deregistration-protectionEnables deregistration protection for an AMI.enable-instance-sql-ha-standby-detectionsEnable Amazon EC2 instances running in an SQL Server High Availability cluster for SQL Server High Availability instance standby detection monitoring.enable-ipam-internet-registry-associationEnables Resource Public Key Infrastructure (RPKI) on an existing IPAM internet registry association by providing BGP Public Key Infrastructure (BPKI) certificate details.enable-ipam-organization-admin-accountEnable an Organizations member account as the IPAM admin account.enable-ipam-policyEnables an IPAM policy.enable-reachability-analyzer-organization-sharingEstablishes a trust relationship between Reachability Analyzer and Organizations.enable-route-server-propagationDefines which route tables the route server can update with routes.enable-serial-console-accessEnables access to the EC2 serial console of all instances for your account.enable-snapshot-block-public-accessEnables or modifies the block public access for snapshots setting at the account level for the specified Amazon Web Services Region.enable-transit-gateway-route-table-propagationEnables the specified attachment to propagate routes to the specified propagation route table.enable-vgw-route-propagationEnables a virtual private gateway (VGW) to propagate routes to the specified route table of a VPC.enable-volume-ioEnables I/O operations for a volume that had I/O operations disabled because the data on the volume was potentially inconsistent.enable-vpc-classic-linkThis action is deprecated.enable-vpc-classic-link-dns-supportThis action is deprecated.export-client-vpn-client-certificate-revocation-listDownloads the client certificate revocation list for the specified Client VPN endpoint.export-client-vpn-client-configurationDownloads the contents of the Client VPN endpoint configuration file for the specified Client VPN endpoint.export-imageExports an Amazon Machine Image (AMI) to a VM file.export-transit-gateway-routesExports routes from the specified transit gateway route table to the specified S3 bucket.export-verified-access-instance-client-configurationExports the client configuration for a Verified Access instance.get-active-vpn-tunnel-statusReturns the currently negotiated security parameters for an active VPN tunnel, including IKE version, DH groups, encryption algorithms, and integrity algorithms.get-allowed-images-settingsGets the current state of the Allowed AMIs setting and the list of Allowed AMIs criteria at the account level in the specified Region.get-associated-enclave-certificate-iam-rolesReturns the IAM roles that are associated with the specified ACM (ACM) certificate.get-associated-ipv6-pool-cidrsGets information about the IPv6 CIDR block associations for a specified IPv6 address pool.get-aws-network-performance-dataGets network performance data.get-capacity-manager-attributesRetrieves the current configuration and status of EC2 Capacity Manager for your account, including enablement status, Organizations access settings, and data ingestion status.get-capacity-manager-metric-dataRetrieves capacity usage metrics for your EC2 resources.get-capacity-manager-metric-dimensionsRetrieves the available dimension values for capacity metrics within a specified time range.get-capacity-manager-monitored-tag-keysRetrieves the tag keys that are currently being monitored by EC2 Capacity Manager.get-capacity-manager-supportability-scoresScores how well each instance type and Availability Zone combination can support a capacity request, based on current Amazon EC2 capacity.get-capacity-reservation-usageGets usage information about a Capacity Reservation.get-client-vpn-endpoint-authorization-policyDescribes the authorization policy for a Client VPN endpoint.get-coip-pool-usageDescribes the allocations from the specified customer-owned address pool.get-console-outputGets the console output for the specified instance.get-console-screenshotRetrieve a JPG-format screenshot of a running instance to help with troubleshooting.get-declarative-policies-report-summaryRetrieves a summary of the account status report.get-default-credit-specificationDescribes the default credit option for CPU usage of a burstable performance instance family.get-ebs-default-kms-key-idDescribes the default KMS key for EBS encryption by default for your account in this Region.get-ebs-encryption-by-defaultDescribes whether EBS encryption by default is enabled for your account in the current Region.get-enabled-ipam-policyGets the enabled IPAM policy.get-flow-logs-integration-templateGenerates a CloudFormation template that streamlines and automates the integration of VPC flow logs with Amazon Athena.get-groups-for-capacity-reservationLists the resource groups to which a Capacity Reservation has been added.get-host-reservation-purchase-previewPreview a reservation purchase with configurations that match those of your Dedicated Host.get-image-ancestryRetrieves the ancestry chain of the specified AMI, tracing its lineage back to the root AMI.get-image-block-public-access-stateGets the current state of block public access for AMIs at the account level in the specified Amazon Web Services Region.get-image-findingsDescribes the Amazon Inspector vulnerability findings for the specified AMI.get-instance-metadata-defaultsGets the default instance metadata service (IMDS) settings that are set at the account level in the specified Amazon Web Services Region.get-instance-tpm-ek-pubGets the public endorsement key associated with the Nitro Trusted Platform Module (NitroTPM) for the specified instance.get-instance-types-from-instance-requirementsReturns a list of instance types with the specified instance attributes.get-instance-uefi-dataA binary representation of the UEFI variable store.get-ipam-address-historyRetrieve historical information about a CIDR within an IPAM scope.get-ipam-discovered-accountsGets IPAM discovered accounts.get-ipam-discovered-public-addressesGets the public IP addresses that have been discovered by IPAM.get-ipam-discovered-resource-cidrsReturns the resource CIDRs that are monitored as part of a resource discovery.get-ipam-discovered-routesRetrieves Border Gateway Protocol (BGP) routes discovered by IPAM resource discovery for a specified Region.get-ipam-internet-registry-association-asnsRetrieves Autonomous System Numbers (ASNs) registered with an internet registry for an IPAM internet registry association.get-ipam-internet-registry-association-cidrsRetrieves IP address CIDRs registered with an internet registry for an IPAM internet registry association.get-ipam-policy-allocation-rulesGets the allocation rules for an IPAM policy.get-ipam-policy-organization-targetsGets the Amazon Web Services Organizations targets for an IPAM policy.get-ipam-pool-allocationsGet a list of all the CIDR allocations in an IPAM pool.get-ipam-pool-cidrsGet the CIDRs provisioned to an IPAM pool.get-ipam-prefix-list-resolver-rulesRetrieves the CIDR selection rules for an IPAM prefix list resolver.get-ipam-prefix-list-resolver-version-entriesRetrieves the CIDR entries for a specific version of an IPAM prefix list resolver.get-ipam-prefix-list-resolver-versionsRetrieves version information for an IPAM prefix list resolver.get-ipam-resource-cidrsReturns resource CIDRs managed by IPAM in a given scope.get-ipam-route-origin-authorizationsRetrieves the current Route Origin Authorizations (ROAs) published to the RPKI for an IPAM internet registry association.get-ipam-route-protection-findingsRetrieves route protection findings for an IPAM.get-ipam-routing-policy-registration-deltasRetrieves the history of routing policy registration changes for an IPAM internet registry association.get-ipam-routing-policy-registrationsRetrieves routing policy registrations for an IPAM internet registry association.get-launch-template-dataRetrieves the configuration data of the specified instance.get-managed-prefix-list-associationsGets information about the resources that are associated with the specified managed prefix list.get-managed-prefix-list-entriesGets information about the entries for a specified managed prefix list.get-managed-resource-visibilityRetrieves the managed resource visibility configuration for the account.get-network-insights-access-scope-analysis-findingsGets the findings for the specified Network Access Scope analysis.get-network-insights-access-scope-contentGets the content for the specified Network Access Scope.get-password-dataRetrieves the encrypted administrator password for a running Windows instance.get-reserved-instances-exchange-quoteReturns a quote and exchange information for exchanging one or more specified Convertible Reserved Instances for a new Convertible Reserved Instance.get-route-server-associationsGets information about the associations for the specified route server.get-route-server-propagationsGets information about the route propagations for the specified route server.get-route-server-routing-databaseGets the routing database for the specified route server.get-security-groups-for-vpcGets security groups that can be associated by the Amazon Web Services account making the request with network interfaces in the specified VPC.get-serial-console-access-statusRetrieves the access status of your account to the EC2 serial console of all instances.get-snapshot-block-public-access-stateGets the current state of block public access for snapshots setting for the account and Region.get-spot-placement-scoresCalculates the Spot placement score for a Region or Availability Zone based on the specified target capacity and compute requirements.get-subnet-cidr-reservationsGets information about the subnet CIDR reservations.get-transit-gateway-attachment-nat-configurationDescribes the NAT configuration for the specified transit gateway attachment.get-transit-gateway-attachment-propagationsLists the route tables to which the specified resource attachment propagates routes.get-transit-gateway-metering-policy-entriesRetrieves the entries for a transit gateway metering policy.get-transit-gateway-multicast-domain-associationsGets information about the associations for the transit gateway multicast domain.get-transit-gateway-policy-table-associationsGets a list of the transit gateway policy table associations.get-transit-gateway-policy-table-entriesReturns a list of transit gateway policy table entries.get-transit-gateway-prefix-list-referencesGets information about the prefix list references in a specified transit gateway route table.get-transit-gateway-route-table-associationsGets information about the associations for the specified transit gateway route table.get-transit-gateway-route-table-propagationsGets information about the route table propagations for the specified transit gateway route table.get-verified-access-endpoint-policyGet the Verified Access policy associated with the endpoint.get-verified-access-endpoint-targetsGets the targets for the specified network CIDR endpoint for Verified Access.get-verified-access-group-policyShows the contents of the Verified Access policy associated with the group.get-vpc-resources-blocking-encryption-enforcementGets information about resources in a VPC that are blocking encryption enforcement.get-vpn-connection-device-sample-configurationDownload an Amazon Web Services-provided sample configuration file to be used with the customer gateway device specified for your Site-to-Site VPN connection.get-vpn-connection-device-typesObtain a list of customer gateway devices for which sample configuration files can be provided.get-vpn-tunnel-replacement-statusGet details of available tunnel endpoint maintenance.import-client-vpn-client-certificate-revocation-listUploads a client certificate revocation list to the specified Client VPN endpoint.import-imageTo import your virtual machines (VMs) with a console-based experience, you can use the Import virtual machine images to Amazon Web Services template in the Migration Hub Orchestrator console.import-instanceWe recommend that you use the ImportImage API instead.import-key-pairImports the public key from an RSA or ED25519 key pair that you created using a third-party tool.import-snapshotImports a disk into an EBS snapshot.import-volumeThis API action supports only single-volume VMs.list-images-in-recycle-binLists one or more AMIs that are currently in the Recycle Bin.list-snapshots-in-recycle-binLists one or more snapshots that are currently in the Recycle Bin.list-volumes-in-recycle-binLists one or more volumes that are currently in the Recycle Bin.lock-snapshotLocks an Amazon EBS snapshot in either governance or compliance mode to protect it against accidental or malicious deletions for a specific duration.modify-account-vpc-encryption-controlModifies the account-level VPC Encryption Control configuration.modify-address-attributeModifies an attribute of the specified Elastic IP address.modify-application-status-checkModifies an existing application status check.modify-availability-zone-groupChanges the opt-in status of the specified zone group for your account.modify-capacity-reservationModifies a Capacity Reservation's capacity, instance eligibility, and the conditions under which it is to be released.modify-capacity-reservation-fleetModifies a Capacity Reservation Fleet.modify-client-vpn-endpointModifies the specified Client VPN endpoint.modify-client-vpn-endpoint-authorization-policyCreates or updates the authorization policy for a Client VPN endpoint.modify-default-credit-specificationModifies the default credit option for CPU usage of burstable performance instances.modify-ebs-default-kms-key-idChanges the default KMS key for EBS encryption by default for your account in this Region.modify-fleetModifies the specified EC2 Fleet.modify-fpga-image-attributeModifies the specified attribute of the specified Amazon FPGA Image (AFI).modify-hostsModify the auto-placement setting of a Dedicated Host.modify-id-formatModifies the ID format for the specified resource on a per-Region basis.modify-identity-id-formatModifies the ID format of a resource for a specified IAM user, IAM role, or the root user for an account; or all IAM users, IAM roles, and the root user for an account.modify-image-attributeModifies the specified attribute of the specified AMI.modify-instance-attributeModifies the specified attribute of the specified instance.modify-instance-capacity-reservation-attributesModifies the Capacity Reservation settings for a stopped instance.modify-instance-connect-endpointModifies the specified EC2 Instance Connect Endpoint.modify-instance-cpu-optionsBy default, all vCPUs for the instance type are active when you launch an instance.modify-instance-credit-specificationModifies the credit option for CPU usage on a running or stopped burstable performance instance.modify-instance-event-start-timeModifies the start time for a scheduled Amazon EC2 instance event.modify-instance-event-windowModifies the specified event window.modify-instance-maintenance-optionsModifies the recovery behavior of your instance to disable simplified automatic recovery or set the recovery behavior to default.modify-instance-metadata-defaultsModifies the default instance metadata service (IMDS) settings at the account level in the specified Amazon Web Services Region.modify-instance-metadata-optionsModify the instance metadata parameters on a running or stopped instance.modify-instance-network-performance-optionsChange the configuration of the network performance options for an existing instance.modify-instance-placementModifies the placement attributes for a specified instance.modify-ipamModify the configurations of an IPAM.modify-ipam-policy-allocation-rulesModifies the allocation rules in an IPAM policy.modify-ipam-poolModify the configurations of an IPAM pool.modify-ipam-pool-allocationModifies the description of an IPAM pool allocation.modify-ipam-prefix-list-resolverModifies an IPAM prefix list resolver.modify-ipam-prefix-list-resolver-targetModifies an IPAM prefix list resolver target.modify-ipam-resource-cidrModify a resource CIDR.modify-ipam-resource-discoveryModifies a resource discovery.modify-ipam-routing-policy-registrationModifies an existing routing policy registration.modify-ipam-scopeModify an IPAM scope.modify-launch-templateModifies a launch template.modify-local-gateway-routeModifies the specified local gateway route.modify-managed-prefix-listModifies the specified managed prefix list.modify-managed-resource-visibilityModifies the managed resource visibility configuration for the account.modify-network-interface-attributeModifies the specified network interface attribute.modify-private-dns-name-optionsModifies the options for instance hostnames for the specified instance.modify-public-ip-dns-name-optionsModify public hostname options for a network interface.modify-reserved-instancesModifies the configuration of your Reserved Instances, such as the Availability Zone, instance count, or instance type.modify-route-serverModifies the configuration of an existing route server.modify-security-group-rulesModifies the rules of a security group.modify-snapshot-attributeAdds or removes permission settings for the specified snapshot.modify-snapshot-tierArchives an Amazon EBS snapshot.modify-spot-fleet-requestModifies the specified Spot Fleet request.modify-subnet-attributeModifies a subnet attribute.modify-traffic-mirror-filter-network-servicesAllows or restricts mirroring network services.modify-traffic-mirror-filter-ruleModifies the specified Traffic Mirror rule.modify-traffic-mirror-sessionModifies a Traffic Mirror session.modify-transit-gatewayModifies the specified transit gateway.modify-transit-gateway-attachment-nat-configurationModifies the NAT configuration for the specified transit gateway attachment.modify-transit-gateway-metering-policyModifies a transit gateway metering policy.modify-transit-gateway-policy-table-entryModifies the specified transit gateway policy table entry.modify-transit-gateway-prefix-list-referenceModifies a reference (route) to a prefix list in a specified transit gateway route table.modify-transit-gateway-vpc-attachmentModifies the specified VPC attachment.modify-verified-access-endpointModifies the configuration of the specified Amazon Web Services Verified Access endpoint.modify-verified-access-endpoint-policyModifies the specified Amazon Web Services Verified Access endpoint policy.modify-verified-access-groupModifies the specified Amazon Web Services Verified Access group configuration.modify-verified-access-group-policyModifies the specified Amazon Web Services Verified Access group policy.modify-verified-access-instanceModifies the configuration of the specified Amazon Web Services Verified Access instance.modify-verified-access-instance-logging-configurationModifies the logging configuration for the specified Amazon Web Services Verified Access instance.modify-verified-access-trust-providerModifies the configuration of the specified Amazon Web Services Verified Access trust provider.modify-volumeYou can modify several parameters of an existing EBS volume, including volume size, volume type, and IOPS capacity.modify-volume-attributeModifies a volume attribute.modify-vpc-attributeModifies the specified attribute of the specified VPC.modify-vpc-block-public-access-exclusionModify VPC Block Public Access (BPA) exclusions.modify-vpc-block-public-access-optionsModify VPC Block Public Access (BPA) options.modify-vpc-encryption-controlModifies the encryption control configuration for a VPC.modify-vpc-endpointModifies attributes of a specified VPC endpoint.modify-vpc-endpoint-connection-notificationModifies a connection notification for VPC endpoint or VPC endpoint service.modify-vpc-endpoint-payer-responsibilityModifies the billing account for VPC endpoint usage/charges.modify-vpc-endpoint-service-configurationModifies the attributes of the specified VPC endpoint service configuration.modify-vpc-endpoint-service-payer-responsibilityModifies the payer responsibility for your VPC endpoint service.modify-vpc-endpoint-service-permissionsModifies the permissions for your VPC endpoint service.modify-vpc-peering-connection-optionsModifies the VPC peering connection options on one side of a VPC peering connection.modify-vpc-tenancyModifies the instance tenancy attribute of the specified VPC.modify-vpn-connectionModifies the customer gateway or the target gateway of an Amazon Web Services Site-to-Site VPN connection.modify-vpn-connection-optionsModifies the connection options for your Site-to-Site VPN connection.modify-vpn-tunnel-certificateModifies the VPN tunnel endpoint certificate.modify-vpn-tunnel-optionsModifies the options for a VPN tunnel in an Amazon Web Services Site-to-Site VPN connection.monitor-instancesEnables detailed monitoring for a running instance.move-address-to-vpcThis action is deprecated.move-byoip-cidr-to-ipamMove a BYOIPv4 CIDR to IPAM from a public IPv4 pool.move-capacity-reservation-instancesMove available capacity from a source Capacity Reservation to a destination Capacity Reservation.provision-byoip-cidrProvisions an IPv4 or IPv6 address range for use with your Amazon Web Services resources through bring your own IP addresses (BYOIP) and creates a corresponding address pool.provision-ipam-byoasnProvisions your Autonomous System Number (ASN) for use in your Amazon Web Services account.provision-ipam-pool-cidrProvision a CIDR to an IPAM pool.provision-public-ipv4-pool-cidrProvision a CIDR to a public IPv4 pool.purchase-capacity-blockPurchase the Capacity Block for use with your account.purchase-capacity-block-extensionPurchase the Capacity Block extension for use with your account.purchase-host-reservationPurchase a reservation with configurations that match those of your Dedicated Host.purchase-reserved-instances-offeringPurchases a Reserved Instance for use with your account.purchase-scheduled-instancesYou can no longer purchase Scheduled Instances.reboot-instancesRequests a reboot of the specified instances.register-imageRegisters an AMI.register-instance-event-notification-attributesRegisters a set of tag keys to include in scheduled event notifications for your resources.register-transit-gateway-multicast-group-membersRegisters members (network interfaces) with the transit gateway multicast group.register-transit-gateway-multicast-group-sourcesRegisters sources (network interfaces) with the specified transit gateway multicast group.reject-capacity-reservation-billing-ownershipRejects a request to assign billing of the available capacity of a shared Capacity Reservation to your account.reject-transit-gateway-client-vpn-attachmentRejects a Transit Gateway attachment request for a Client VPN endpoint.reject-transit-gateway-multicast-domain-associationsRejects a request to associate cross-account subnets with a transit gateway multicast domain.reject-transit-gateway-peering-attachmentRejects a transit gateway peering attachment request.reject-transit-gateway-vpc-attachmentRejects a request to attach a VPC to a transit gateway.reject-vpc-endpoint-connectionsRejects VPC endpoint connection requests to your VPC endpoint service.reject-vpc-peering-connectionRejects a VPC peering connection request.release-addressReleases the specified Elastic IP address.release-hostsWhen you no longer want to use an On-Demand Dedicated Host it can be released.release-ipam-pool-allocationRelease an allocation within an IPAM pool.replace-iam-instance-profile-associationReplaces an IAM instance profile for the specified running instance.replace-image-criteria-in-allowed-images-settingsSets or replaces the criteria for Allowed AMIs.replace-image-instance-type-specificationReplaces or removes the instance type specification for an AMI.replace-network-acl-associationChanges which network ACL a subnet is associated with.replace-network-acl-entryReplaces an entry (rule) in a network ACL.replace-routeReplaces an existing route within a route table in a VPC.replace-route-table-associationChanges the route table associated with a given subnet, internet gateway, or virtual private gateway in a VPC.replace-transit-gateway-routeReplaces the specified route in the specified transit gateway route table.replace-vpn-tunnelTrigger replacement of specified VPN tunnel.report-instance-statusSubmits feedback about the status of an instance.request-spot-fleetCreates a Spot Fleet request.request-spot-instancesCreates a Spot Instance request.reset-address-attributeResets the attribute of the specified IP address.reset-ebs-default-kms-key-idResets the default KMS key for EBS encryption for your account in this Region to the Amazon Web Services managed KMS key for EBS.reset-fpga-image-attributeResets the specified attribute of the specified Amazon FPGA Image (AFI) to its default value.reset-image-attributeResets an attribute of an AMI to its default value.reset-instance-attributeResets an attribute of an instance to its default value.reset-network-interface-attributeResets a network interface attribute.reset-snapshot-attributeResets permission settings for the specified snapshot.restore-address-to-classicThis action is deprecated.restore-image-from-recycle-binRestores an AMI from the Recycle Bin.restore-managed-prefix-list-versionRestores the entries from a previous version of a managed prefix list to a new version of the prefix list.restore-snapshot-from-recycle-binRestores a snapshot from the Recycle Bin.restore-snapshot-tierRestores an archived Amazon EBS snapshot for use temporarily or permanently, or modifies the restore period or restore type for a snapshot that was previously temporarily restored.restore-volume-from-recycle-binRestores a volume from the Recycle Bin.revoke-client-vpn-ingressRemoves an ingress authorization rule from a Client VPN endpoint.revoke-security-group-egressRemoves the specified outbound (egress) rules from the specified security group.revoke-security-group-ingressRemoves the specified inbound (ingress) rules from a security group.run-instancesLaunches the specified number of instances using an AMI for which you have permissions.run-scheduled-instancesLaunches the specified Scheduled Instances.search-local-gateway-routesSearches for routes in the specified local gateway route table.search-transit-gateway-multicast-groupsSearches one or more transit gateway multicast groups and returns the group membership information.search-transit-gateway-routesSearches for routes in the specified transit gateway route table.send-diagnostic-interruptSends a diagnostic interrupt to the specified Amazon EC2 instance to trigger a kernel panic (on Linux instances), or a blue screen/stop error (on Windows instances).start-declarative-policies-reportGenerates an account status report.start-instancesStarts an Amazon EBS-backed instance that you've previously stopped.start-network-insights-access-scope-analysisStarts analyzing the specified Network Access Scope.start-network-insights-analysisStarts analyzing the specified path.start-vpc-endpoint-service-private-dns-verificationInitiates the verification process to prove that the service provider owns the private DNS name domain for the endpoint service.stop-instancesStops an Amazon EBS-backed instance.terminate-client-vpn-connectionsTerminates active Client VPN endpoint connections.terminate-instancesTerminates (deletes) the specified instances.unassign-ipv6-addressesUnassigns the specified IPv6 addresses or Prefix Delegation prefixes from a network interface.unassign-private-ip-addressesUnassigns the specified secondary private IP addresses or IPv4 Prefix Delegation prefixes from a network interface.unassign-private-nat-gateway-addressUnassigns secondary private IPv4 addresses from a private NAT gateway.unlock-snapshotUnlocks a snapshot that is locked in governance mode or that is locked in compliance mode but still in the cooling-off period.unmonitor-instancesDisables detailed monitoring for a running instance.update-capacity-manager-monitored-tag-keysActivates or deactivates tag keys for monitoring by EC2 Capacity Manager.update-capacity-manager-organizations-accessUpdates the Organizations access setting for EC2 Capacity Manager.update-interruptible-capacity-reservation-allocationModifies the number of instances allocated to an interruptible reservation, allowing you to add more capacity or reclaim capacity to your source Capacity Reservation.update-security-group-rule-descriptions-egressUpdates the description of an egress (outbound) security group rule.update-security-group-rule-descriptions-ingressUpdates the description of an ingress (inbound) security group rule.validate-security-group-quotas-for-interfaceValidates whether the specified security groups can be associated with a single network interface.withdraw-byoip-cidrStops advertising an address range that is provisioned as an address pool.