feat(client-ec2): Amazon EC2 Fleet customers can now filter instance types based on encryption-in-transit support using Attribute-Based Instance Type Selection (ABIS), eliminating the manual effort of identifying and selecting compatible instance types for security-sensitive workloads.

awstools · awstools · commit 2b4fb8055ba0 · 2025-11-10T19:18:39.000Z
diff --git a/clients/client-ec2/src/commands/CreateFleetCommand.ts b/clients/client-ec2/src/commands/CreateFleetCommand.ts
@@ -191,6 +191,7 @@ export interface CreateFleetCommandOutput extends CreateFleetResult, __MetadataB
  *                 ],
  *               },
  *             },
+ *             RequireEncryptionInTransit: true || false,
  *           },
  *           ImageId: "STRING_VALUE",
  *         },
@@ -321,6 +322,7 @@ export interface CreateFleetCommandOutput extends CreateFleetResult, __MetadataB
  * //                 ],
  * //               },
  * //             },
+ * //             RequireEncryptionInTransit: true || false,
  * //           },
  * //           ImageId: "STRING_VALUE",
  * //           BlockDeviceMappings: [ // BlockDeviceMappingResponseList
@@ -442,6 +444,7 @@ export interface CreateFleetCommandOutput extends CreateFleetResult, __MetadataB
  * //                 ],
  * //               },
  * //             },
+ * //             RequireEncryptionInTransit: true || false,
  * //           },
  * //           ImageId: "STRING_VALUE",
  * //           BlockDeviceMappings: [
diff --git a/clients/client-ec2/src/commands/CreateLaunchTemplateCommand.ts b/clients/client-ec2/src/commands/CreateLaunchTemplateCommand.ts
@@ -305,6 +305,7 @@ export interface CreateLaunchTemplateCommandOutput extends CreateLaunchTemplateR
  *           ],
  *         },
  *       },
+ *       RequireEncryptionInTransit: true || false,
  *     },
  *     PrivateDnsNameOptions: { // LaunchTemplatePrivateDnsNameOptionsRequest
  *       HostnameType: "ip-name" || "resource-name",
diff --git a/clients/client-ec2/src/commands/CreateLaunchTemplateVersionCommand.ts b/clients/client-ec2/src/commands/CreateLaunchTemplateVersionCommand.ts
@@ -309,6 +309,7 @@ export interface CreateLaunchTemplateVersionCommandOutput extends CreateLaunchTe
  *           ],
  *         },
  *       },
+ *       RequireEncryptionInTransit: true || false,
  *     },
  *     PrivateDnsNameOptions: { // LaunchTemplatePrivateDnsNameOptionsRequest
  *       HostnameType: "ip-name" || "resource-name",
@@ -591,6 +592,7 @@ export interface CreateLaunchTemplateVersionCommandOutput extends CreateLaunchTe
  * //             ],
  * //           },
  * //         },
+ * //         RequireEncryptionInTransit: true || false,
  * //       },
  * //       PrivateDnsNameOptions: { // LaunchTemplatePrivateDnsNameOptions
  * //         HostnameType: "ip-name" || "resource-name",
diff --git a/clients/client-ec2/src/commands/DescribeFleetsCommand.ts b/clients/client-ec2/src/commands/DescribeFleetsCommand.ts
@@ -168,6 +168,7 @@ export interface DescribeFleetsCommandOutput extends DescribeFleetsResult, __Met
  * //                     ],
  * //                   },
  * //                 },
+ * //                 RequireEncryptionInTransit: true || false,
  * //               },
  * //               ImageId: "STRING_VALUE",
  * //               BlockDeviceMappings: [ // BlockDeviceMappingResponseList
@@ -329,6 +330,7 @@ export interface DescribeFleetsCommandOutput extends DescribeFleetsResult, __Met
  * //                     ],
  * //                   },
  * //                 },
+ * //                 RequireEncryptionInTransit: true || false,
  * //               },
  * //               ImageId: "STRING_VALUE",
  * //               BlockDeviceMappings: [
@@ -450,6 +452,7 @@ export interface DescribeFleetsCommandOutput extends DescribeFleetsResult, __Met
  * //                     ],
  * //                   },
  * //                 },
+ * //                 RequireEncryptionInTransit: true || false,
  * //               },
  * //               ImageId: "STRING_VALUE",
  * //               BlockDeviceMappings: [
diff --git a/clients/client-ec2/src/commands/DescribeLaunchTemplateVersionsCommand.ts b/clients/client-ec2/src/commands/DescribeLaunchTemplateVersionsCommand.ts
@@ -334,6 +334,7 @@ export interface DescribeLaunchTemplateVersionsCommandOutput
  * //               ],
  * //             },
  * //           },
+ * //           RequireEncryptionInTransit: true || false,
  * //         },
  * //         PrivateDnsNameOptions: { // LaunchTemplatePrivateDnsNameOptions
  * //           HostnameType: "ip-name" || "resource-name",
diff --git a/clients/client-ec2/src/commands/DescribeSpotFleetRequestsCommand.ts b/clients/client-ec2/src/commands/DescribeSpotFleetRequestsCommand.ts
@@ -263,6 +263,7 @@ export interface DescribeSpotFleetRequestsCommandOutput extends DescribeSpotFlee
  * //                   ],
  * //                 },
  * //               },
+ * //               RequireEncryptionInTransit: true || false,
  * //             },
  * //             SecurityGroups: [ // GroupIdentifierList
  * //               { // GroupIdentifier
@@ -364,6 +365,7 @@ export interface DescribeSpotFleetRequestsCommandOutput extends DescribeSpotFlee
  * //                       ],
  * //                     },
  * //                   },
+ * //                   RequireEncryptionInTransit: true || false,
  * //                 },
  * //               },
  * //             ],
diff --git a/clients/client-ec2/src/commands/GetInstanceTypesFromInstanceRequirementsCommand.ts b/clients/client-ec2/src/commands/GetInstanceTypesFromInstanceRequirementsCommand.ts
@@ -140,6 +140,7 @@ export interface GetInstanceTypesFromInstanceRequirementsCommandOutput
  *         ],
  *       },
  *     },
+ *     RequireEncryptionInTransit: true || false,
  *   },
  *   MaxResults: Number("int"),
  *   NextToken: "STRING_VALUE",
diff --git a/clients/client-ec2/src/commands/GetLaunchTemplateDataCommand.ts b/clients/client-ec2/src/commands/GetLaunchTemplateDataCommand.ts
@@ -307,6 +307,7 @@ export interface GetLaunchTemplateDataCommandOutput extends GetLaunchTemplateDat
  * //           ],
  * //         },
  * //       },
+ * //       RequireEncryptionInTransit: true || false,
  * //     },
  * //     PrivateDnsNameOptions: { // LaunchTemplatePrivateDnsNameOptions
  * //       HostnameType: "ip-name" || "resource-name",
diff --git a/clients/client-ec2/src/commands/GetSpotPlacementScoresCommand.ts b/clients/client-ec2/src/commands/GetSpotPlacementScoresCommand.ts
@@ -138,6 +138,7 @@ export interface GetSpotPlacementScoresCommandOutput extends GetSpotPlacementSco
  *           ],
  *         },
  *       },
+ *       RequireEncryptionInTransit: true || false,
  *     },
  *   },
  *   DryRun: true || false,
diff --git a/clients/client-ec2/src/commands/ModifyFleetCommand.ts b/clients/client-ec2/src/commands/ModifyFleetCommand.ts
@@ -182,6 +182,7 @@ export interface ModifyFleetCommandOutput extends ModifyFleetResult, __MetadataB
  *                 ],
  *               },
  *             },
+ *             RequireEncryptionInTransit: true || false,
  *           },
  *           ImageId: "STRING_VALUE",
  *         },
diff --git a/clients/client-ec2/src/commands/ModifySpotFleetRequestCommand.ts b/clients/client-ec2/src/commands/ModifySpotFleetRequestCommand.ts
@@ -154,6 +154,7 @@ export interface ModifySpotFleetRequestCommandOutput extends ModifySpotFleetRequ
  *                 ],
  *               },
  *             },
+ *             RequireEncryptionInTransit: true || false,
  *           },
  *         },
  *       ],
diff --git a/clients/client-ec2/src/commands/RequestSpotFleetCommand.ts b/clients/client-ec2/src/commands/RequestSpotFleetCommand.ts
@@ -273,6 +273,7 @@ export interface RequestSpotFleetCommandOutput extends RequestSpotFleetResponse,
  *               ],
  *             },
  *           },
+ *           RequireEncryptionInTransit: true || false,
  *         },
  *         SecurityGroups: [ // GroupIdentifierList
  *           { // GroupIdentifier
@@ -374,6 +375,7 @@ export interface RequestSpotFleetCommandOutput extends RequestSpotFleetResponse,
  *                   ],
  *                 },
  *               },
+ *               RequireEncryptionInTransit: true || false,
  *             },
  *           },
  *         ],
diff --git a/clients/client-ec2/src/models/models_1.ts b/clients/client-ec2/src/models/models_1.ts
@@ -6138,6 +6138,16 @@ export interface InstanceRequirementsRequest {
    * @public
    */
   BaselinePerformanceFactors?: BaselinePerformanceFactorsRequest | undefined;
+
+  /**
+   * <p>Specifies whether instance types must support encrypting in-transit traffic between
+   *          instances. For more information, including the supported instance types, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/data-protection.html#encryption-transit">Encryption in
+   *             transit</a> in the <i>Amazon EC2 User Guide</i>.</p>
+   *          <p>Default: <code>false</code>
+   *          </p>
+   * @public
+   */
+  RequireEncryptionInTransit?: boolean | undefined;
 }
 
 /**
@@ -7843,6 +7853,16 @@ export interface InstanceRequirements {
    * @public
    */
   BaselinePerformanceFactors?: BaselinePerformanceFactors | undefined;
+
+  /**
+   * <p>Specifies whether instance types must support encrypting in-transit traffic between
+   *          instances. For more information, including the supported instance types, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/data-protection.html#encryption-transit">Encryption in
+   *             transit</a> in the <i>Amazon EC2 User Guide</i>.</p>
+   *          <p>Default: <code>false</code>
+   *          </p>
+   * @public
+   */
+  RequireEncryptionInTransit?: boolean | undefined;
 }
 
 /**
diff --git a/clients/client-ec2/src/protocols/Aws_ec2.ts b/clients/client-ec2/src/protocols/Aws_ec2.ts
@@ -50615,6 +50615,9 @@ const se_InstanceRequirements = (input: InstanceRequirements, context: __SerdeCo
       entries[loc] = value;
     });
   }
+  if (input[_REIT] != null) {
+    entries[_REIT] = input[_REIT];
+  }
   return entries;
 };
 
@@ -50770,6 +50773,9 @@ const se_InstanceRequirementsRequest = (input: InstanceRequirementsRequest, cont
       entries[loc] = value;
     });
   }
+  if (input[_REIT] != null) {
+    entries[_REIT] = input[_REIT];
+  }
   return entries;
 };
 
@@ -79398,6 +79404,9 @@ const de_InstanceRequirements = (output: any, context: __SerdeContext): Instance
   if (output[_bPF] != null) {
     contents[_BPF] = de_BaselinePerformanceFactors(output[_bPF], context);
   }
+  if (output[_rEIT] != null) {
+    contents[_REIT] = __parseBoolean(output[_rEIT]);
+  }
   return contents;
 };
 
@@ -97775,6 +97784,7 @@ const _REAC = "RemoveExternalAuthorityConfiguration";
 const _RED = "RemoveEndDate";
 const _REDKKI = "ResetEbsDefaultKmsKeyId";
 const _REDT = "ReservationEndDateType";
+const _REIT = "RequireEncryptionInTransit";
 const _RET = "ReservationEndTimestamp";
 const _RETe = "RestoreExpiryTime";
 const _REe = "RemoveEntries";
@@ -99873,6 +99883,7 @@ const _rDS = "resourceDiscoveryStatus";
 const _rDT = "rootDeviceType";
 const _rE = "responseError";
 const _rEDT = "reservationEndDateType";
+const _rEIT = "requireEncryptionInTransit";
 const _rET = "reservationEndTimestamp";
 const _rETe = "restoreExpiryTime";
 const _rEd = "rdsEndpoint";
diff --git a/codegen/sdk-codegen/aws-models/ec2.json b/codegen/sdk-codegen/aws-models/ec2.json
@@ -71177,6 +71177,14 @@
             "smithy.api#documentation": "<p>The baseline performance to consider, using an instance family as a baseline reference.\n         The instance family establishes the lowest acceptable level of performance. Amazon EC2 uses this\n         baseline to guide instance type selection, but there is no guarantee that the selected\n         instance types will always exceed the baseline for every application. Currently, this\n         parameter only supports CPU performance as a baseline performance factor. For more\n         information, see <a href=\"https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-fleet-attribute-based-instance-type-selection.html#ec2fleet-abis-performance-protection\">Performance protection</a> in the <i>Amazon EC2 User Guide</i>.</p>",
             "smithy.api#xmlName": "baselinePerformanceFactors"
           }
+        },
+        "RequireEncryptionInTransit": {
+          "target": "com.amazonaws.ec2#Boolean",
+          "traits": {
+            "aws.protocols#ec2QueryName": "RequireEncryptionInTransit",
+            "smithy.api#documentation": "<p>Specifies whether instance types must support encrypting in-transit traffic between\n         instances. For more information, including the supported instance types, see <a href=\"https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/data-protection.html#encryption-transit\">Encryption in\n            transit</a> in the <i>Amazon EC2 User Guide</i>.</p>\n         <p>Default: <code>false</code>\n         </p>",
+            "smithy.api#xmlName": "requireEncryptionInTransit"
+          }
         }
       },
       "traits": {
@@ -71347,6 +71355,12 @@
           "traits": {
             "smithy.api#documentation": "<p>The baseline performance to consider, using an instance family as a baseline reference.\n         The instance family establishes the lowest acceptable level of performance. Amazon EC2 uses this\n         baseline to guide instance type selection, but there is no guarantee that the selected\n         instance types will always exceed the baseline for every application. Currently, this\n         parameter only supports CPU performance as a baseline performance factor. For more\n         information, see <a href=\"https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-fleet-attribute-based-instance-type-selection.html#ec2fleet-abis-performance-protection\">Performance protection</a> in the <i>Amazon EC2 User Guide</i>.</p>"
           }
+        },
+        "RequireEncryptionInTransit": {
+          "target": "com.amazonaws.ec2#Boolean",
+          "traits": {
+            "smithy.api#documentation": "<p>Specifies whether instance types must support encrypting in-transit traffic between\n         instances. For more information, including the supported instance types, see <a href=\"https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/data-protection.html#encryption-transit\">Encryption in\n            transit</a> in the <i>Amazon EC2 User Guide</i>.</p>\n         <p>Default: <code>false</code>\n         </p>"
+          }
         }
       },
       "traits": {
