feat(client-ec2): This release adds three features - option to store AWS Site-to-Site VPN pre-shared keys in AWS Secrets Manager, GetActiveVpnTunnelStatus API to check the in-use VPN algorithms, and SampleType option in GetVpnConnectionDeviceSampleConfiguration API to get recommended sample configs for VPN devices.

awstools · awstools · commit 4bc58afe3177 · 2025-05-27T18:17:47.000Z
diff --git a/clients/client-ec2/README.md b/clients/client-ec2/README.md
@@ -4005,6 +4005,14 @@ ExportVerifiedAccessInstanceClientConfiguration
 
 [Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/ec2/command/ExportVerifiedAccessInstanceClientConfigurationCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-ec2/Interface/ExportVerifiedAccessInstanceClientConfigurationCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-ec2/Interface/ExportVerifiedAccessInstanceClientConfigurationCommandOutput/)
 
+</details>
+<details>
+<summary>
+GetActiveVpnTunnelStatus
+</summary>
+
+[Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/ec2/command/GetActiveVpnTunnelStatusCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-ec2/Interface/GetActiveVpnTunnelStatusCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-ec2/Interface/GetActiveVpnTunnelStatusCommandOutput/)
+
 </details>
 <details>
 <summary>
diff --git a/clients/client-ec2/src/EC2.ts b/clients/client-ec2/src/EC2.ts
@@ -2325,6 +2325,11 @@ import {
   ExportVerifiedAccessInstanceClientConfigurationCommandInput,
   ExportVerifiedAccessInstanceClientConfigurationCommandOutput,
 } from "./commands/ExportVerifiedAccessInstanceClientConfigurationCommand";
+import {
+  GetActiveVpnTunnelStatusCommand,
+  GetActiveVpnTunnelStatusCommandInput,
+  GetActiveVpnTunnelStatusCommandOutput,
+} from "./commands/GetActiveVpnTunnelStatusCommand";
 import {
   GetAllowedImagesSettingsCommand,
   GetAllowedImagesSettingsCommandInput,
@@ -3837,6 +3842,7 @@ const commands = {
   ExportImageCommand,
   ExportTransitGatewayRoutesCommand,
   ExportVerifiedAccessInstanceClientConfigurationCommand,
+  GetActiveVpnTunnelStatusCommand,
   GetAllowedImagesSettingsCommand,
   GetAssociatedEnclaveCertificateIamRolesCommand,
   GetAssociatedIpv6PoolCidrsCommand,
@@ -12054,6 +12060,23 @@ export interface EC2 {
     cb: (err: any, data?: ExportVerifiedAccessInstanceClientConfigurationCommandOutput) => void
   ): void;
 
+  /**
+   * @see {@link GetActiveVpnTunnelStatusCommand}
+   */
+  getActiveVpnTunnelStatus(
+    args: GetActiveVpnTunnelStatusCommandInput,
+    options?: __HttpHandlerOptions
+  ): Promise<GetActiveVpnTunnelStatusCommandOutput>;
+  getActiveVpnTunnelStatus(
+    args: GetActiveVpnTunnelStatusCommandInput,
+    cb: (err: any, data?: GetActiveVpnTunnelStatusCommandOutput) => void
+  ): void;
+  getActiveVpnTunnelStatus(
+    args: GetActiveVpnTunnelStatusCommandInput,
+    options: __HttpHandlerOptions,
+    cb: (err: any, data?: GetActiveVpnTunnelStatusCommandOutput) => void
+  ): void;
+
   /**
    * @see {@link GetAllowedImagesSettingsCommand}
    */
diff --git a/clients/client-ec2/src/EC2Client.ts b/clients/client-ec2/src/EC2Client.ts
@@ -1677,6 +1677,10 @@ import {
   ExportVerifiedAccessInstanceClientConfigurationCommandInput,
   ExportVerifiedAccessInstanceClientConfigurationCommandOutput,
 } from "./commands/ExportVerifiedAccessInstanceClientConfigurationCommand";
+import {
+  GetActiveVpnTunnelStatusCommandInput,
+  GetActiveVpnTunnelStatusCommandOutput,
+} from "./commands/GetActiveVpnTunnelStatusCommand";
 import {
   GetAllowedImagesSettingsCommandInput,
   GetAllowedImagesSettingsCommandOutput,
@@ -2890,6 +2894,7 @@ export type ServiceInputTypes =
   | ExportImageCommandInput
   | ExportTransitGatewayRoutesCommandInput
   | ExportVerifiedAccessInstanceClientConfigurationCommandInput
+  | GetActiveVpnTunnelStatusCommandInput
   | GetAllowedImagesSettingsCommandInput
   | GetAssociatedEnclaveCertificateIamRolesCommandInput
   | GetAssociatedIpv6PoolCidrsCommandInput
@@ -3580,6 +3585,7 @@ export type ServiceOutputTypes =
   | ExportImageCommandOutput
   | ExportTransitGatewayRoutesCommandOutput
   | ExportVerifiedAccessInstanceClientConfigurationCommandOutput
+  | GetActiveVpnTunnelStatusCommandOutput
   | GetAllowedImagesSettingsCommandOutput
   | GetAssociatedEnclaveCertificateIamRolesCommandOutput
   | GetAssociatedIpv6PoolCidrsCommandOutput
diff --git a/clients/client-ec2/src/commands/CopyFpgaImageCommand.ts b/clients/client-ec2/src/commands/CopyFpgaImageCommand.ts
@@ -6,7 +6,7 @@ import { MetadataBearer as __MetadataBearer } from "@smithy/types";
 
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
 import { commonParams } from "../endpoint/EndpointParameters";
-import { CopyFpgaImageRequest, CopyFpgaImageResult } from "../models/models_0";
+import { CopyFpgaImageRequest, CopyFpgaImageResult } from "../models/models_1";
 import { de_CopyFpgaImageCommand, se_CopyFpgaImageCommand } from "../protocols/Aws_ec2";
 
 /**
diff --git a/clients/client-ec2/src/commands/CreateVpcEndpointCommand.ts b/clients/client-ec2/src/commands/CreateVpcEndpointCommand.ts
@@ -6,7 +6,8 @@ import { MetadataBearer as __MetadataBearer } from "@smithy/types";
 
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
 import { commonParams } from "../endpoint/EndpointParameters";
-import { CreateVpcEndpointRequest, CreateVpcEndpointResult } from "../models/models_2";
+import { CreateVpcEndpointRequest } from "../models/models_2";
+import { CreateVpcEndpointResult } from "../models/models_3";
 import { de_CreateVpcEndpointCommand, se_CreateVpcEndpointCommand } from "../protocols/Aws_ec2";
 
 /**
diff --git a/clients/client-ec2/src/commands/CreateVpcEndpointConnectionNotificationCommand.ts b/clients/client-ec2/src/commands/CreateVpcEndpointConnectionNotificationCommand.ts
@@ -6,8 +6,10 @@ import { MetadataBearer as __MetadataBearer } from "@smithy/types";
 
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
 import { commonParams } from "../endpoint/EndpointParameters";
-import { CreateVpcEndpointConnectionNotificationRequest } from "../models/models_2";
-import { CreateVpcEndpointConnectionNotificationResult } from "../models/models_3";
+import {
+  CreateVpcEndpointConnectionNotificationRequest,
+  CreateVpcEndpointConnectionNotificationResult,
+} from "../models/models_3";
 import {
   de_CreateVpcEndpointConnectionNotificationCommand,
   se_CreateVpcEndpointConnectionNotificationCommand,
diff --git a/clients/client-ec2/src/commands/CreateVpnConnectionCommand.ts b/clients/client-ec2/src/commands/CreateVpnConnectionCommand.ts
@@ -72,6 +72,7 @@ export interface CreateVpnConnectionCommandOutput extends CreateVpnConnectionRes
  *       ],
  *     },
  *   ],
+ *   PreSharedKeyStorage: "STRING_VALUE",
  *   DryRun: true || false,
  *   Options: { // VpnConnectionOptionsSpecification
  *     EnableAcceleration: true || false,
@@ -245,6 +246,7 @@ export interface CreateVpnConnectionCommandOutput extends CreateVpnConnectionRes
  * //         CertificateArn: "STRING_VALUE",
  * //       },
  * //     ],
+ * //     PreSharedKeyArn: "STRING_VALUE",
  * //     VpnConnectionId: "STRING_VALUE",
  * //     State: "pending" || "available" || "deleting" || "deleted",
  * //     CustomerGatewayConfiguration: "STRING_VALUE",
diff --git a/clients/client-ec2/src/commands/DescribeClientVpnConnectionsCommand.ts b/clients/client-ec2/src/commands/DescribeClientVpnConnectionsCommand.ts
@@ -6,7 +6,8 @@ import { MetadataBearer as __MetadataBearer } from "@smithy/types";
 
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
 import { commonParams } from "../endpoint/EndpointParameters";
-import { DescribeClientVpnConnectionsRequest, DescribeClientVpnConnectionsResult } from "../models/models_3";
+import { DescribeClientVpnConnectionsRequest } from "../models/models_3";
+import { DescribeClientVpnConnectionsResult } from "../models/models_4";
 import { de_DescribeClientVpnConnectionsCommand, se_DescribeClientVpnConnectionsCommand } from "../protocols/Aws_ec2";
 
 /**
diff --git a/clients/client-ec2/src/commands/DescribeClientVpnEndpointsCommand.ts b/clients/client-ec2/src/commands/DescribeClientVpnEndpointsCommand.ts
@@ -6,8 +6,7 @@ import { MetadataBearer as __MetadataBearer } from "@smithy/types";
 
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
 import { commonParams } from "../endpoint/EndpointParameters";
-import { DescribeClientVpnEndpointsRequest } from "../models/models_3";
-import { DescribeClientVpnEndpointsResult } from "../models/models_4";
+import { DescribeClientVpnEndpointsRequest, DescribeClientVpnEndpointsResult } from "../models/models_4";
 import { de_DescribeClientVpnEndpointsCommand, se_DescribeClientVpnEndpointsCommand } from "../protocols/Aws_ec2";
 
 /**
diff --git a/clients/client-ec2/src/commands/DescribeKeyPairsCommand.ts b/clients/client-ec2/src/commands/DescribeKeyPairsCommand.ts
@@ -6,7 +6,8 @@ import { MetadataBearer as __MetadataBearer } from "@smithy/types";
 
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
 import { commonParams } from "../endpoint/EndpointParameters";
-import { DescribeKeyPairsRequest, DescribeKeyPairsResult } from "../models/models_4";
+import { DescribeKeyPairsRequest } from "../models/models_4";
+import { DescribeKeyPairsResult } from "../models/models_5";
 import { de_DescribeKeyPairsCommand, se_DescribeKeyPairsCommand } from "../protocols/Aws_ec2";
 
 /**
diff --git a/clients/client-ec2/src/commands/DescribeLaunchTemplatesCommand.ts b/clients/client-ec2/src/commands/DescribeLaunchTemplatesCommand.ts
@@ -6,8 +6,7 @@ import { MetadataBearer as __MetadataBearer } from "@smithy/types";
 
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
 import { commonParams } from "../endpoint/EndpointParameters";
-import { DescribeLaunchTemplatesRequest } from "../models/models_4";
-import { DescribeLaunchTemplatesResult } from "../models/models_5";
+import { DescribeLaunchTemplatesRequest, DescribeLaunchTemplatesResult } from "../models/models_5";
 import { de_DescribeLaunchTemplatesCommand, se_DescribeLaunchTemplatesCommand } from "../protocols/Aws_ec2";
 
 /**
diff --git a/clients/client-ec2/src/commands/DescribeVpnConnectionsCommand.ts b/clients/client-ec2/src/commands/DescribeVpnConnectionsCommand.ts
@@ -10,7 +10,7 @@ import {
   DescribeVpnConnectionsRequest,
   DescribeVpnConnectionsResult,
   DescribeVpnConnectionsResultFilterSensitiveLog,
-} from "../models/models_5";
+} from "../models/models_6";
 import { de_DescribeVpnConnectionsCommand, se_DescribeVpnConnectionsCommand } from "../protocols/Aws_ec2";
 
 /**
@@ -158,6 +158,7 @@ export interface DescribeVpnConnectionsCommandOutput extends DescribeVpnConnecti
  * //           CertificateArn: "STRING_VALUE",
  * //         },
  * //       ],
+ * //       PreSharedKeyArn: "STRING_VALUE",
  * //       VpnConnectionId: "STRING_VALUE",
  * //       State: "pending" || "available" || "deleting" || "deleted",
  * //       CustomerGatewayConfiguration: "STRING_VALUE",
diff --git a/clients/client-ec2/src/commands/GetActiveVpnTunnelStatusCommand.ts b/clients/client-ec2/src/commands/GetActiveVpnTunnelStatusCommand.ts
@@ -0,0 +1,105 @@
+// smithy-typescript generated code
+import { getEndpointPlugin } from "@smithy/middleware-endpoint";
+import { getSerdePlugin } from "@smithy/middleware-serde";
+import { Command as $Command } from "@smithy/smithy-client";
+import { MetadataBearer as __MetadataBearer } from "@smithy/types";
+
+import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
+import { commonParams } from "../endpoint/EndpointParameters";
+import { GetActiveVpnTunnelStatusRequest, GetActiveVpnTunnelStatusResult } from "../models/models_6";
+import { de_GetActiveVpnTunnelStatusCommand, se_GetActiveVpnTunnelStatusCommand } from "../protocols/Aws_ec2";
+
+/**
+ * @public
+ */
+export type { __MetadataBearer };
+export { $Command };
+/**
+ * @public
+ *
+ * The input for {@link GetActiveVpnTunnelStatusCommand}.
+ */
+export interface GetActiveVpnTunnelStatusCommandInput extends GetActiveVpnTunnelStatusRequest {}
+/**
+ * @public
+ *
+ * The output of {@link GetActiveVpnTunnelStatusCommand}.
+ */
+export interface GetActiveVpnTunnelStatusCommandOutput extends GetActiveVpnTunnelStatusResult, __MetadataBearer {}
+
+/**
+ * <p>Returns the currently negotiated security parameters for an active VPN tunnel, including IKE version, DH groups, encryption algorithms, and integrity algorithms.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { EC2Client, GetActiveVpnTunnelStatusCommand } from "@aws-sdk/client-ec2"; // ES Modules import
+ * // const { EC2Client, GetActiveVpnTunnelStatusCommand } = require("@aws-sdk/client-ec2"); // CommonJS import
+ * const client = new EC2Client(config);
+ * const input = { // GetActiveVpnTunnelStatusRequest
+ *   VpnConnectionId: "STRING_VALUE", // required
+ *   VpnTunnelOutsideIpAddress: "STRING_VALUE", // required
+ *   DryRun: true || false,
+ * };
+ * const command = new GetActiveVpnTunnelStatusCommand(input);
+ * const response = await client.send(command);
+ * // { // GetActiveVpnTunnelStatusResult
+ * //   ActiveVpnTunnelStatus: { // ActiveVpnTunnelStatus
+ * //     Phase1EncryptionAlgorithm: "STRING_VALUE",
+ * //     Phase2EncryptionAlgorithm: "STRING_VALUE",
+ * //     Phase1IntegrityAlgorithm: "STRING_VALUE",
+ * //     Phase2IntegrityAlgorithm: "STRING_VALUE",
+ * //     Phase1DHGroup: Number("int"),
+ * //     Phase2DHGroup: Number("int"),
+ * //     IkeVersion: "STRING_VALUE",
+ * //     ProvisioningStatus: "available" || "pending" || "failed",
+ * //     ProvisioningStatusReason: "STRING_VALUE",
+ * //   },
+ * // };
+ *
+ * ```
+ *
+ * @param GetActiveVpnTunnelStatusCommandInput - {@link GetActiveVpnTunnelStatusCommandInput}
+ * @returns {@link GetActiveVpnTunnelStatusCommandOutput}
+ * @see {@link GetActiveVpnTunnelStatusCommandInput} for command's `input` shape.
+ * @see {@link GetActiveVpnTunnelStatusCommandOutput} for command's `response` shape.
+ * @see {@link EC2ClientResolvedConfig | config} for EC2Client's `config` shape.
+ *
+ * @throws {@link EC2ServiceException}
+ * <p>Base exception class for all service exceptions from EC2 service.</p>
+ *
+ *
+ * @public
+ */
+export class GetActiveVpnTunnelStatusCommand extends $Command
+  .classBuilder<
+    GetActiveVpnTunnelStatusCommandInput,
+    GetActiveVpnTunnelStatusCommandOutput,
+    EC2ClientResolvedConfig,
+    ServiceInputTypes,
+    ServiceOutputTypes
+  >()
+  .ep(commonParams)
+  .m(function (this: any, Command: any, cs: any, config: EC2ClientResolvedConfig, o: any) {
+    return [
+      getSerdePlugin(config, this.serialize, this.deserialize),
+      getEndpointPlugin(config, Command.getEndpointParameterInstructions()),
+    ];
+  })
+  .s("AmazonEC2", "GetActiveVpnTunnelStatus", {})
+  .n("EC2Client", "GetActiveVpnTunnelStatusCommand")
+  .f(void 0, void 0)
+  .ser(se_GetActiveVpnTunnelStatusCommand)
+  .de(de_GetActiveVpnTunnelStatusCommand)
+  .build() {
+  /** @internal type navigation helper, not in runtime. */
+  protected declare static __types: {
+    api: {
+      input: GetActiveVpnTunnelStatusRequest;
+      output: GetActiveVpnTunnelStatusResult;
+    };
+    sdk: {
+      input: GetActiveVpnTunnelStatusCommandInput;
+      output: GetActiveVpnTunnelStatusCommandOutput;
+    };
+  };
+}
diff --git a/clients/client-ec2/src/commands/GetTransitGatewayPolicyTableAssociationsCommand.ts b/clients/client-ec2/src/commands/GetTransitGatewayPolicyTableAssociationsCommand.ts
@@ -6,10 +6,8 @@ import { MetadataBearer as __MetadataBearer } from "@smithy/types";
 
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
 import { commonParams } from "../endpoint/EndpointParameters";
-import {
-  GetTransitGatewayPolicyTableAssociationsRequest,
-  GetTransitGatewayPolicyTableAssociationsResult,
-} from "../models/models_6";
+import { GetTransitGatewayPolicyTableAssociationsRequest } from "../models/models_6";
+import { GetTransitGatewayPolicyTableAssociationsResult } from "../models/models_7";
 import {
   de_GetTransitGatewayPolicyTableAssociationsCommand,
   se_GetTransitGatewayPolicyTableAssociationsCommand,
diff --git a/clients/client-ec2/src/commands/GetTransitGatewayPolicyTableEntriesCommand.ts b/clients/client-ec2/src/commands/GetTransitGatewayPolicyTableEntriesCommand.ts
@@ -6,8 +6,10 @@ import { MetadataBearer as __MetadataBearer } from "@smithy/types";
 
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
 import { commonParams } from "../endpoint/EndpointParameters";
-import { GetTransitGatewayPolicyTableEntriesRequest } from "../models/models_6";
-import { GetTransitGatewayPolicyTableEntriesResult } from "../models/models_7";
+import {
+  GetTransitGatewayPolicyTableEntriesRequest,
+  GetTransitGatewayPolicyTableEntriesResult,
+} from "../models/models_7";
 import {
   de_GetTransitGatewayPolicyTableEntriesCommand,
   se_GetTransitGatewayPolicyTableEntriesCommand,
diff --git a/clients/client-ec2/src/commands/GetVpnConnectionDeviceSampleConfigurationCommand.ts b/clients/client-ec2/src/commands/GetVpnConnectionDeviceSampleConfigurationCommand.ts
@@ -50,6 +50,7 @@ export interface GetVpnConnectionDeviceSampleConfigurationCommandOutput
  *   VpnConnectionId: "STRING_VALUE", // required
  *   VpnConnectionDeviceTypeId: "STRING_VALUE", // required
  *   InternetKeyExchangeVersion: "STRING_VALUE",
+ *   SampleType: "STRING_VALUE",
  *   DryRun: true || false,
  * };
  * const command = new GetVpnConnectionDeviceSampleConfigurationCommand(input);
diff --git a/clients/client-ec2/src/commands/ModifyVpnConnectionCommand.ts b/clients/client-ec2/src/commands/ModifyVpnConnectionCommand.ts
@@ -183,6 +183,7 @@ export interface ModifyVpnConnectionCommandOutput extends ModifyVpnConnectionRes
  * //         CertificateArn: "STRING_VALUE",
  * //       },
  * //     ],
+ * //     PreSharedKeyArn: "STRING_VALUE",
  * //     VpnConnectionId: "STRING_VALUE",
  * //     State: "pending" || "available" || "deleting" || "deleted",
  * //     CustomerGatewayConfiguration: "STRING_VALUE",
diff --git a/clients/client-ec2/src/commands/ModifyVpnConnectionOptionsCommand.ts b/clients/client-ec2/src/commands/ModifyVpnConnectionOptionsCommand.ts
@@ -153,6 +153,7 @@ export interface ModifyVpnConnectionOptionsCommandOutput extends ModifyVpnConnec
  * //         CertificateArn: "STRING_VALUE",
  * //       },
  * //     ],
+ * //     PreSharedKeyArn: "STRING_VALUE",
  * //     VpnConnectionId: "STRING_VALUE",
  * //     State: "pending" || "available" || "deleting" || "deleted",
  * //     CustomerGatewayConfiguration: "STRING_VALUE",
diff --git a/clients/client-ec2/src/commands/ModifyVpnTunnelCertificateCommand.ts b/clients/client-ec2/src/commands/ModifyVpnTunnelCertificateCommand.ts
@@ -146,6 +146,7 @@ export interface ModifyVpnTunnelCertificateCommandOutput extends ModifyVpnTunnel
  * //         CertificateArn: "STRING_VALUE",
  * //       },
  * //     ],
+ * //     PreSharedKeyArn: "STRING_VALUE",
  * //     VpnConnectionId: "STRING_VALUE",
  * //     State: "pending" || "available" || "deleting" || "deleted",
  * //     CustomerGatewayConfiguration: "STRING_VALUE",
diff --git a/clients/client-ec2/src/commands/ModifyVpnTunnelOptionsCommand.ts b/clients/client-ec2/src/commands/ModifyVpnTunnelOptionsCommand.ts
@@ -104,6 +104,7 @@ export interface ModifyVpnTunnelOptionsCommandOutput extends ModifyVpnTunnelOpti
  *   },
  *   DryRun: true || false,
  *   SkipTunnelReplacement: true || false,
+ *   PreSharedKeyStorage: "STRING_VALUE",
  * };
  * const command = new ModifyVpnTunnelOptionsCommand(input);
  * const response = await client.send(command);
@@ -207,6 +208,7 @@ export interface ModifyVpnTunnelOptionsCommandOutput extends ModifyVpnTunnelOpti
  * //         CertificateArn: "STRING_VALUE",
  * //       },
  * //     ],
+ * //     PreSharedKeyArn: "STRING_VALUE",
  * //     VpnConnectionId: "STRING_VALUE",
  * //     State: "pending" || "available" || "deleting" || "deleted",
  * //     CustomerGatewayConfiguration: "STRING_VALUE",
diff --git a/clients/client-ec2/src/commands/ReleaseHostsCommand.ts b/clients/client-ec2/src/commands/ReleaseHostsCommand.ts
@@ -6,7 +6,7 @@ import { MetadataBearer as __MetadataBearer } from "@smithy/types";
 
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
 import { commonParams } from "../endpoint/EndpointParameters";
-import { ReleaseHostsRequest, ReleaseHostsResult } from "../models/models_7";
+import { ReleaseHostsRequest, ReleaseHostsResult } from "../models/models_8";
 import { de_ReleaseHostsCommand, se_ReleaseHostsCommand } from "../protocols/Aws_ec2";
 
 /**
diff --git a/clients/client-ec2/src/commands/ReleaseIpamPoolAllocationCommand.ts b/clients/client-ec2/src/commands/ReleaseIpamPoolAllocationCommand.ts
@@ -6,7 +6,7 @@ import { MetadataBearer as __MetadataBearer } from "@smithy/types";
 
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
 import { commonParams } from "../endpoint/EndpointParameters";
-import { ReleaseIpamPoolAllocationRequest, ReleaseIpamPoolAllocationResult } from "../models/models_7";
+import { ReleaseIpamPoolAllocationRequest, ReleaseIpamPoolAllocationResult } from "../models/models_8";
 import { de_ReleaseIpamPoolAllocationCommand, se_ReleaseIpamPoolAllocationCommand } from "../protocols/Aws_ec2";
 
 /**
diff --git a/clients/client-ec2/src/commands/index.ts b/clients/client-ec2/src/commands/index.ts
@@ -474,6 +474,7 @@ export * from "./ExportClientVpnClientConfigurationCommand";
 export * from "./ExportImageCommand";
 export * from "./ExportTransitGatewayRoutesCommand";
 export * from "./ExportVerifiedAccessInstanceClientConfigurationCommand";
+export * from "./GetActiveVpnTunnelStatusCommand";
 export * from "./GetAllowedImagesSettingsCommand";
 export * from "./GetAssociatedEnclaveCertificateIamRolesCommand";
 export * from "./GetAssociatedIpv6PoolCidrsCommand";
diff --git a/clients/client-ec2/src/models/models_0.ts b/clients/client-ec2/src/models/models_0.ts
diff --git a/clients/client-ec2/src/models/models_1.ts b/clients/client-ec2/src/models/models_1.ts
diff --git a/clients/client-ec2/src/models/models_2.ts b/clients/client-ec2/src/models/models_2.ts
diff --git a/clients/client-ec2/src/models/models_3.ts b/clients/client-ec2/src/models/models_3.ts
diff --git a/clients/client-ec2/src/models/models_4.ts b/clients/client-ec2/src/models/models_4.ts
diff --git a/clients/client-ec2/src/models/models_5.ts b/clients/client-ec2/src/models/models_5.ts
diff --git a/clients/client-ec2/src/models/models_6.ts b/clients/client-ec2/src/models/models_6.ts
diff --git a/clients/client-ec2/src/models/models_7.ts b/clients/client-ec2/src/models/models_7.ts
diff --git a/clients/client-ec2/src/models/models_8.ts b/clients/client-ec2/src/models/models_8.ts
diff --git a/clients/client-ec2/src/protocols/Aws_ec2.ts b/clients/client-ec2/src/protocols/Aws_ec2.ts
diff --git a/codegen/sdk-codegen/aws-models/ec2.json b/codegen/sdk-codegen/aws-models/ec2.json
