# winterbaume-ec2
EC2/VPC service implementation for winterbaume.
This crate is part of the [winterbaume](https://github.com/moriyoshi/winterbaume) workspace — a suite of in-process AWS service mocks for Rust. Use the umbrella [`winterbaume`](https://crates.io/crates/winterbaume) crate to pull in all services at once, or depend on this crate directly for EC2 only.
Winterbäume is not affiliated with, endorsed by, or sponsored by Amazon Web Services, Inc. or Amazon.com, Inc. Amazon Web Services, AWS, and related marks are trademarks of Amazon.com, Inc. or its affiliates. All other trademarks are the property of their respective owners.
## Coverage
| Service | EC2 |
| AWS model | `ec2` |
| Protocol | ec2Query |
| winterbaume coverage | 713/763 operations (93.4%) |
| stubs (routed, returns empty/default) | 50/763 operations (6.6%) |
| moto coverage | 223/763 operations (29.2%) |
| floci coverage | 0/763 operations (0.0%) |
| kumo coverage | 39/763 operations (5.1%) |
| Coverage report date | 2026-05-17 |
Coverage is generated from [`.agents/docs/API_COVERAGE.md`](../../.agents/docs/API_COVERAGE.md) by [`update_readme.py`](../../.agents/skills/update-readme/scripts/update_readme.py). The `winterbaume` row counts only operations with real, state-backed logic; `stubs` counts handlers that route the request and return an empty/default response without real behaviour. Operation-count coverage is a prioritisation signal, not a behavioural guarantee.
See the workspace [`README.md`](../../README.md) for setup, usage, and the full cross-service coverage table.
## Server-mode usage
Install `winterbaume-server` from crates.io or run it from a workspace checkout, then point the AWS CLI at it:
```sh
# Installed binary ( from crates.io ):
cargo install winterbaume-server
winterbaume-server --host 127.0.0.1 --port 5555
# Or, from a workspace checkout:
cargo run -p winterbaume-server -- --host 127.0.0.1 --port 5555
```
```sh
export AWS_ENDPOINT_URL=http://localhost:5555
aws ec2 describe-vpcs
```
## Current Network Resource Stub Semantics
EC2 is the only crate that currently owns in-service VPC/network maps, but that state is not shared as a network oracle for other services.
- EC2 state contains local maps for VPCs, subnets, route tables, internet gateways, NAT gateways, network ACLs, security groups, network interfaces, elastic IPs, VPC endpoints, transit gateways, VPN resources, client VPN, verified access, route servers, and related associations.
- Many EC2 operations validate against those EC2-local maps and return EC2-shaped not-found or invalid-state errors, while other advanced families still synthesise IDs or use simplified association records.
- Other network-aware service crates currently store EC2 identifiers independently. Creating a subnet, security group, VPC endpoint, or ENI in EC2 does not make non-EC2 services validate against it, and non-EC2 services do not create back-references in EC2.
## Example
```rust
use aws_sdk_ec2::config::BehaviorVersion;
use winterbaume_core::MockAws;
use winterbaume_ec2::Ec2Service;
#[tokio::main]
async fn main() {
let mock = MockAws::builder().with_service(Ec2Service::new()).build();
let config = aws_config::defaults(BehaviorVersion::latest())
.http_client(mock.http_client())
.credentials_provider(mock.credentials_provider())
.region(aws_sdk_ec2::config::Region::new("us-east-1"))
.load()
.await;
let client = aws_sdk_ec2::Client::new(&config);
// Describe availability zones
let resp = client
.describe_availability_zones()
.send()
.await
.expect("describe_availability_zones should succeed");
println!("Availability Zones:");
for az in resp.availability_zones() {
println!(
" {} (state: {})",
az.zone_name().unwrap_or_default(),
az.state().map(|s| s.as_str()).unwrap_or("unknown"),
);
}
// Describe account attributes
let resp = client
.describe_account_attributes()
.send()
.await
.expect("describe_account_attributes should succeed");
println!("\nAccount Attributes:");
for attr in resp.account_attributes() {
println!(
" {}: {:?}",
attr.attribute_name().unwrap_or_default(),
attr.attribute_values()
.iter()
.map(|v| v.attribute_value().unwrap_or_default())
.collect::<Vec<_>>(),
);
}
}
```
## Implemented APIs (713)
- `AcceptAddressTransfer`
- `AcceptCapacityReservationBillingOwnership`
- `AcceptReservedInstancesExchangeQuote`
- `AcceptTransitGatewayMulticastDomainAssociations`
- `AcceptTransitGatewayPeeringAttachment`
- `AcceptTransitGatewayVpcAttachment`
- `AcceptVpcEndpointConnections`
- `AcceptVpcPeeringConnection`
- `AdvertiseByoipCidr`
- `AllocateAddress`
- `AllocateHosts`
- `AllocateIpamPoolCidr`
- `ApplySecurityGroupsToClientVpnTargetNetwork`
- `AssignIpv6Addresses`
- `AssignPrivateIpAddresses`
- `AssignPrivateNatGatewayAddress`
- `AssociateAddress`
- `AssociateCapacityReservationBillingOwner`
- `AssociateClientVpnTargetNetwork`
- `AssociateDhcpOptions`
- `AssociateEnclaveCertificateIamRole`
- `AssociateIamInstanceProfile`
- `AssociateInstanceEventWindow`
- `AssociateIpamByoasn`
- `AssociateIpamResourceDiscovery`
- `AssociateNatGatewayAddress`
- `AssociateRouteServer`
- `AssociateRouteTable`
- `AssociateSecurityGroupVpc`
- `AssociateSubnetCidrBlock`
- `AssociateTransitGatewayMulticastDomain`
- `AssociateTransitGatewayPolicyTable`
- `AssociateTransitGatewayRouteTable`
- `AssociateTrunkInterface`
- `AssociateVpcCidrBlock`
- `AttachClassicLinkVpc`
- `AttachInternetGateway`
- `AttachNetworkInterface`
- `AttachVerifiedAccessTrustProvider`
- `AttachVolume`
- `AttachVpnGateway`
- `AuthorizeClientVpnIngress`
- `AuthorizeSecurityGroupEgress`
- `AuthorizeSecurityGroupIngress`
- `BundleInstance`
- `CancelBundleTask`
- `CancelCapacityReservation`
- `CancelCapacityReservationFleets`
- `CancelConversionTask`
- `CancelDeclarativePoliciesReport`
- `CancelExportTask`
- `CancelImageLaunchPermission`
- `CancelImportTask`
- `CancelReservedInstancesListing`
- `CancelSpotFleetRequests`
- `CancelSpotInstanceRequests`
- `ConfirmProductInstance`
- `CopyFpgaImage`
- `CopyImage`
- `CopySnapshot`
- `CopyVolumes`
- `CreateCapacityManagerDataExport`
- `CreateCapacityReservation`
- `CreateCapacityReservationBySplitting`
- `CreateCapacityReservationFleet`
- `CreateCarrierGateway`
- `CreateClientVpnEndpoint`
- `CreateClientVpnRoute`
- `CreateCoipCidr`
- `CreateCoipPool`
- `CreateCustomerGateway`
- `CreateDefaultSubnet`
- `CreateDefaultVpc`
- `CreateDelegateMacVolumeOwnershipTask`
- `CreateDhcpOptions`
- `CreateEgressOnlyInternetGateway`
- `CreateFleet`
- `CreateFlowLogs`
- `CreateFpgaImage`
- `CreateImage`
- `CreateImageUsageReport`
- `CreateInstanceConnectEndpoint`
- `CreateInstanceEventWindow`
- `CreateInstanceExportTask`
- `CreateInternetGateway`
- `CreateInterruptibleCapacityReservationAllocation`
- `CreateIpam`
- `CreateIpamExternalResourceVerificationToken`
- `CreateIpamPolicy`
- `CreateIpamPool`
- `CreateIpamPrefixListResolver`
- `CreateIpamPrefixListResolverTarget`
- `CreateIpamResourceDiscovery`
- `CreateIpamScope`
- `CreateKeyPair`
- `CreateLaunchTemplate`
- `CreateLaunchTemplateVersion`
- `CreateLocalGatewayRoute`
- `CreateLocalGatewayRouteTable`
- `CreateLocalGatewayRouteTableVirtualInterfaceGroupAssociation`
- `CreateLocalGatewayRouteTableVpcAssociation`
- `CreateLocalGatewayVirtualInterface`
- `CreateLocalGatewayVirtualInterfaceGroup`
- `CreateMacSystemIntegrityProtectionModificationTask`
- `CreateManagedPrefixList`
- `CreateNatGateway`
- `CreateNetworkAcl`
- `CreateNetworkAclEntry`
- `CreateNetworkInsightsAccessScope`
- `CreateNetworkInsightsPath`
- `CreateNetworkInterface`
- `CreateNetworkInterfacePermission`
- `CreatePlacementGroup`
- `CreatePublicIpv4Pool`
- `CreateReplaceRootVolumeTask`
- `CreateReservedInstancesListing`
- `CreateRestoreImageTask`
- `CreateRoute`
- `CreateRouteServer`
- `CreateRouteServerEndpoint`
- `CreateRouteServerPeer`
- `CreateRouteTable`
- `CreateSecondaryNetwork`
- `CreateSecondarySubnet`
- `CreateSecurityGroup`
- `CreateSnapshot`
- `CreateSnapshots`
- `CreateSpotDatafeedSubscription`
- `CreateStoreImageTask`
- `CreateSubnet`
- `CreateSubnetCidrReservation`
- `CreateTags`
- `CreateTrafficMirrorFilter`
- `CreateTrafficMirrorFilterRule`
- `CreateTrafficMirrorSession`
- `CreateTrafficMirrorTarget`
- `CreateTransitGateway`
- `CreateTransitGatewayConnect`
- `CreateTransitGatewayConnectPeer`
- `CreateTransitGatewayMeteringPolicy`
- `CreateTransitGatewayMeteringPolicyEntry`
- `CreateTransitGatewayMulticastDomain`
- `CreateTransitGatewayPeeringAttachment`
- `CreateTransitGatewayPolicyTable`
- `CreateTransitGatewayPrefixListReference`
- `CreateTransitGatewayRoute`
- `CreateTransitGatewayRouteTable`
- `CreateTransitGatewayRouteTableAnnouncement`
- `CreateTransitGatewayVpcAttachment`
- `CreateVerifiedAccessEndpoint`
- `CreateVerifiedAccessGroup`
- `CreateVerifiedAccessInstance`
- `CreateVerifiedAccessTrustProvider`
- `CreateVolume`
- `CreateVpc`
- `CreateVpcBlockPublicAccessExclusion`
- `CreateVpcEncryptionControl`
- `CreateVpcEndpoint`
- `CreateVpcEndpointConnectionNotification`
- `CreateVpcEndpointServiceConfiguration`
- `CreateVpcPeeringConnection`
- `CreateVpnConcentrator`
- `CreateVpnConnection`
- `CreateVpnConnectionRoute`
- `CreateVpnGateway`
- `DeleteCapacityManagerDataExport`
- `DeleteCarrierGateway`
- `DeleteClientVpnEndpoint`
- `DeleteClientVpnRoute`
- `DeleteCoipCidr`
- `DeleteCoipPool`
- `DeleteCustomerGateway`
- `DeleteDhcpOptions`
- `DeleteEgressOnlyInternetGateway`
- `DeleteFleets`
- `DeleteFlowLogs`
- `DeleteFpgaImage`
- `DeleteImageUsageReport`
- `DeleteInstanceConnectEndpoint`
- `DeleteInstanceEventWindow`
- `DeleteInternetGateway`
- `DeleteIpam`
- `DeleteIpamExternalResourceVerificationToken`
- `DeleteIpamPolicy`
- `DeleteIpamPool`
- `DeleteIpamPrefixListResolver`
- `DeleteIpamPrefixListResolverTarget`
- `DeleteIpamResourceDiscovery`
- `DeleteIpamScope`
- `DeleteKeyPair`
- `DeleteLaunchTemplate`
- `DeleteLaunchTemplateVersions`
- `DeleteLocalGatewayRoute`
- `DeleteLocalGatewayRouteTable`
- `DeleteLocalGatewayRouteTableVirtualInterfaceGroupAssociation`
- `DeleteLocalGatewayRouteTableVpcAssociation`
- `DeleteLocalGatewayVirtualInterface`
- `DeleteLocalGatewayVirtualInterfaceGroup`
- `DeleteManagedPrefixList`
- `DeleteNatGateway`
- `DeleteNetworkAcl`
- `DeleteNetworkAclEntry`
- `DeleteNetworkInsightsAccessScope`
- `DeleteNetworkInsightsAccessScopeAnalysis`
- `DeleteNetworkInsightsAnalysis`
- `DeleteNetworkInsightsPath`
- `DeleteNetworkInterface`
- `DeleteNetworkInterfacePermission`
- `DeletePlacementGroup`
- `DeletePublicIpv4Pool`
- `DeleteQueuedReservedInstances`
- `DeleteRoute`
- `DeleteRouteServer`
- `DeleteRouteServerEndpoint`
- `DeleteRouteServerPeer`
- `DeleteRouteTable`
- `DeleteSecondaryNetwork`
- `DeleteSecondarySubnet`
- `DeleteSecurityGroup`
- `DeleteSnapshot`
- `DeleteSpotDatafeedSubscription`
- `DeleteSubnet`
- `DeleteSubnetCidrReservation`
- `DeleteTags`
- `DeleteTrafficMirrorFilter`
- `DeleteTrafficMirrorFilterRule`
- `DeleteTrafficMirrorSession`
- `DeleteTrafficMirrorTarget`
- `DeleteTransitGateway`
- `DeleteTransitGatewayConnect`
- `DeleteTransitGatewayConnectPeer`
- `DeleteTransitGatewayMeteringPolicy`
- `DeleteTransitGatewayMeteringPolicyEntry`
- `DeleteTransitGatewayMulticastDomain`
- `DeleteTransitGatewayPeeringAttachment`
- `DeleteTransitGatewayPolicyTable`
- `DeleteTransitGatewayPrefixListReference`
- `DeleteTransitGatewayRoute`
- `DeleteTransitGatewayRouteTable`
- `DeleteTransitGatewayRouteTableAnnouncement`
- `DeleteTransitGatewayVpcAttachment`
- `DeleteVerifiedAccessEndpoint`
- `DeleteVerifiedAccessGroup`
- `DeleteVerifiedAccessInstance`
- `DeleteVerifiedAccessTrustProvider`
- `DeleteVolume`
- `DeleteVpc`
- `DeleteVpcBlockPublicAccessExclusion`
- `DeleteVpcEncryptionControl`
- `DeleteVpcEndpointConnectionNotifications`
- `DeleteVpcEndpointServiceConfigurations`
- `DeleteVpcEndpoints`
- `DeleteVpcPeeringConnection`
- `DeleteVpnConcentrator`
- `DeleteVpnConnection`
- `DeleteVpnConnectionRoute`
- `DeleteVpnGateway`
- `DeprovisionByoipCidr`
- `DeprovisionIpamByoasn`
- `DeprovisionIpamPoolCidr`
- `DeprovisionPublicIpv4PoolCidr`
- `DeregisterImage`
- `DeregisterInstanceEventNotificationAttributes`
- `DeregisterTransitGatewayMulticastGroupMembers`
- `DeregisterTransitGatewayMulticastGroupSources`
- `DescribeAccountAttributes`
- `DescribeAddressTransfers`
- `DescribeAddresses`
- `DescribeAddressesAttribute`
- `DescribeAvailabilityZones`
- `DescribeAwsNetworkPerformanceMetricSubscriptions`
- `DescribeBundleTasks`
- `DescribeByoipCidrs`
- `DescribeCapacityBlockExtensionHistory`
- `DescribeCapacityBlockExtensionOfferings`
- `DescribeCapacityBlockOfferings`
- `DescribeCapacityBlockStatus`
- `DescribeCapacityBlocks`
- `DescribeCapacityManagerDataExports`
- `DescribeCapacityReservationBillingRequests`
- `DescribeCapacityReservationFleets`
- `DescribeCapacityReservations`
- `DescribeCarrierGateways`
- `DescribeClassicLinkInstances`
- `DescribeClientVpnAuthorizationRules`
- `DescribeClientVpnConnections`
- `DescribeClientVpnEndpoints`
- `DescribeClientVpnRoutes`
- `DescribeClientVpnTargetNetworks`
- `DescribeCoipPools`
- `DescribeConversionTasks`
- `DescribeCustomerGateways`
- `DescribeDeclarativePoliciesReports`
- `DescribeDhcpOptions`
- `DescribeEgressOnlyInternetGateways`
- `DescribeExportImageTasks`
- `DescribeFleetInstances`
- `DescribeFleets`
- `DescribeFlowLogs`
- `DescribeFpgaImageAttribute`
- `DescribeFpgaImages`
- `DescribeHostReservationOfferings`
- `DescribeHostReservations`
- `DescribeHosts`
- `DescribeIamInstanceProfileAssociations`
- `DescribeIdFormat`
- `DescribeIdentityIdFormat`
- `DescribeImageAttribute`
- `DescribeImageReferences`
- `DescribeImageUsageReportEntries`
- `DescribeImageUsageReports`
- `DescribeImages`
- `DescribeImportImageTasks`
- `DescribeImportSnapshotTasks`
- `DescribeInstanceAttribute`
- `DescribeInstanceConnectEndpoints`
- `DescribeInstanceCreditSpecifications`
- `DescribeInstanceEventWindows`
- `DescribeInstanceStatus`
- `DescribeInstanceTypeOfferings`
- `DescribeInstanceTypes`
- `DescribeInstances`
- `DescribeInternetGateways`
- `DescribeIpamByoasn`
- `DescribeIpamExternalResourceVerificationTokens`
- `DescribeIpamPolicies`
- `DescribeIpamPools`
- `DescribeIpamPrefixListResolverTargets`
- `DescribeIpamPrefixListResolvers`
- `DescribeIpamResourceDiscoveries`
- `DescribeIpamResourceDiscoveryAssociations`
- `DescribeIpamScopes`
- `DescribeIpams`
- `DescribeKeyPairs`
- `DescribeLaunchTemplateVersions`
- `DescribeLaunchTemplates`
- `DescribeLocalGatewayRouteTableVirtualInterfaceGroupAssociations`
- `DescribeLocalGatewayRouteTableVpcAssociations`
- `DescribeLocalGatewayRouteTables`
- `DescribeLocalGatewayVirtualInterfaceGroups`
- `DescribeLocalGatewayVirtualInterfaces`
- `DescribeLocalGateways`
- `DescribeMacHosts`
- `DescribeMacModificationTasks`
- `DescribeManagedPrefixLists`
- `DescribeNatGateways`
- `DescribeNetworkAcls`
- `DescribeNetworkInsightsAccessScopeAnalyses`
- `DescribeNetworkInsightsAccessScopes`
- `DescribeNetworkInsightsAnalyses`
- `DescribeNetworkInsightsPaths`
- `DescribeNetworkInterfaceAttribute`
- `DescribeNetworkInterfacePermissions`
- `DescribeNetworkInterfaces`
- `DescribeOutpostLags`
- `DescribePlacementGroups`
- `DescribePrefixLists`
- `DescribePrincipalIdFormat`
- `DescribePublicIpv4Pools`
- `DescribeRegions`
- `DescribeReplaceRootVolumeTasks`
- `DescribeReservedInstances`
- `DescribeReservedInstancesListings`
- `DescribeReservedInstancesModifications`
- `DescribeReservedInstancesOfferings`
- `DescribeRouteServerEndpoints`
- `DescribeRouteServerPeers`
- `DescribeRouteServers`
- `DescribeRouteTables`
- `DescribeScheduledInstanceAvailability`
- `DescribeScheduledInstances`
- `DescribeSecondaryInterfaces`
- `DescribeSecondaryNetworks`
- `DescribeSecondarySubnets`
- `DescribeSecurityGroupReferences`
- `DescribeSecurityGroupRules`
- `DescribeSecurityGroupVpcAssociations`
- `DescribeSecurityGroups`
- `DescribeSnapshotAttribute`
- `DescribeSnapshotTierStatus`
- `DescribeSnapshots`
- `DescribeSpotDatafeedSubscription`
- `DescribeSpotFleetInstances`
- `DescribeSpotFleetRequests`
- `DescribeSpotInstanceRequests`
- `DescribeStoreImageTasks`
- `DescribeSubnets`
- `DescribeTags`
- `DescribeTrafficMirrorFilterRules`
- `DescribeTrafficMirrorFilters`
- `DescribeTrafficMirrorSessions`
- `DescribeTrafficMirrorTargets`
- `DescribeTransitGatewayAttachments`
- `DescribeTransitGatewayConnectPeers`
- `DescribeTransitGatewayConnects`
- `DescribeTransitGatewayMeteringPolicies`
- `DescribeTransitGatewayMulticastDomains`
- `DescribeTransitGatewayPeeringAttachments`
- `DescribeTransitGatewayPolicyTables`
- `DescribeTransitGatewayRouteTableAnnouncements`
- `DescribeTransitGatewayRouteTables`
- `DescribeTransitGatewayVpcAttachments`
- `DescribeTransitGateways`
- `DescribeTrunkInterfaceAssociations`
- `DescribeVerifiedAccessEndpoints`
- `DescribeVerifiedAccessGroups`
- `DescribeVerifiedAccessInstanceLoggingConfigurations`
- `DescribeVerifiedAccessInstances`
- `DescribeVerifiedAccessTrustProviders`
- `DescribeVolumeAttribute`
- `DescribeVolumeStatus`
- `DescribeVolumes`
- `DescribeVolumesModifications`
- `DescribeVpcAttribute`
- `DescribeVpcBlockPublicAccessExclusions`
- `DescribeVpcBlockPublicAccessOptions`
- `DescribeVpcClassicLink`
- `DescribeVpcClassicLinkDnsSupport`
- `DescribeVpcEncryptionControls`
- `DescribeVpcEndpointAssociations`
- `DescribeVpcEndpointConnectionNotifications`
- `DescribeVpcEndpointConnections`
- `DescribeVpcEndpointServiceConfigurations`
- `DescribeVpcEndpointServicePermissions`
- `DescribeVpcEndpointServices`
- `DescribeVpcEndpoints`
- `DescribeVpcPeeringConnections`
- `DescribeVpcs`
- `DescribeVpnConcentrators`
- `DescribeVpnConnections`
- `DescribeVpnGateways`
- `DetachClassicLinkVpc`
- `DetachInternetGateway`
- `DetachNetworkInterface`
- `DetachVerifiedAccessTrustProvider`
- `DetachVolume`
- `DetachVpnGateway`
- `DisableAddressTransfer`
- `DisableAllowedImagesSettings`
- `DisableAwsNetworkPerformanceMetricSubscription`
- `DisableCapacityManager`
- `DisableEbsEncryptionByDefault`
- `DisableFastLaunch`
- `DisableFastSnapshotRestores`
- `DisableImage`
- `DisableImageBlockPublicAccess`
- `DisableImageDeprecation`
- `DisableImageDeregistrationProtection`
- `DisableIpamPolicy`
- `DisableRouteServerPropagation`
- `DisableSerialConsoleAccess`
- `DisableTransitGatewayRouteTablePropagation`
- `DisableVgwRoutePropagation`
- `DisableVpcClassicLink`
- `DisableVpcClassicLinkDnsSupport`
- `DisassociateAddress`
- `DisassociateCapacityReservationBillingOwner`
- `DisassociateClientVpnTargetNetwork`
- `DisassociateEnclaveCertificateIamRole`
- `DisassociateIamInstanceProfile`
- `DisassociateInstanceEventWindow`
- `DisassociateIpamByoasn`
- `DisassociateIpamResourceDiscovery`
- `DisassociateNatGatewayAddress`
- `DisassociateRouteServer`
- `DisassociateRouteTable`
- `DisassociateSecurityGroupVpc`
- `DisassociateSubnetCidrBlock`
- `DisassociateTransitGatewayMulticastDomain`
- `DisassociateTransitGatewayPolicyTable`
- `DisassociateTransitGatewayRouteTable`
- `DisassociateTrunkInterface`
- `DisassociateVpcCidrBlock`
- `EnableAddressTransfer`
- `EnableAllowedImagesSettings`
- `EnableAwsNetworkPerformanceMetricSubscription`
- `EnableCapacityManager`
- `EnableEbsEncryptionByDefault`
- `EnableFastLaunch`
- `EnableFastSnapshotRestores`
- `EnableImage`
- `EnableImageBlockPublicAccess`
- `EnableImageDeprecation`
- `EnableImageDeregistrationProtection`
- `EnableIpamPolicy`
- `EnableRouteServerPropagation`
- `EnableSerialConsoleAccess`
- `EnableTransitGatewayRouteTablePropagation`
- `EnableVgwRoutePropagation`
- `EnableVolumeIO`
- `EnableVpcClassicLink`
- `EnableVpcClassicLinkDnsSupport`
- `ExportClientVpnClientCertificateRevocationList`
- `ExportClientVpnClientConfiguration`
- `ExportImage`
- `ExportTransitGatewayRoutes`
- `ExportVerifiedAccessInstanceClientConfiguration`
- `GetActiveVpnTunnelStatus`
- `GetAllowedImagesSettings`
- `GetAssociatedEnclaveCertificateIamRoles`
- `GetAssociatedIpv6PoolCidrs`
- `GetCapacityReservationUsage`
- `GetCoipPoolUsage`
- `GetConsoleOutput`
- `GetDeclarativePoliciesReportSummary`
- `GetDefaultCreditSpecification`
- `GetEbsDefaultKmsKeyId`
- `GetEbsEncryptionByDefault`
- `GetEnabledIpamPolicy`
- `GetFlowLogsIntegrationTemplate`
- `GetGroupsForCapacityReservation`
- `GetHostReservationPurchasePreview`
- `GetInstanceMetadataDefaults`
- `GetInstanceTypesFromInstanceRequirements`
- `GetIpamAddressHistory`
- `GetIpamDiscoveredAccounts`
- `GetIpamDiscoveredPublicAddresses`
- `GetIpamDiscoveredResourceCidrs`
- `GetIpamPolicyAllocationRules`
- `GetIpamPoolAllocations`
- `GetIpamPoolCidrs`
- `GetIpamPrefixListResolverRules`
- `GetIpamPrefixListResolverVersionEntries`
- `GetIpamPrefixListResolverVersions`
- `GetIpamResourceCidrs`
- `GetLaunchTemplateData`
- `GetManagedPrefixListAssociations`
- `GetManagedPrefixListEntries`
- `GetNetworkInsightsAccessScopeAnalysisFindings`
- `GetNetworkInsightsAccessScopeContent`
- `GetReservedInstancesExchangeQuote`
- `GetRouteServerAssociations`
- `GetRouteServerPropagations`
- `GetSecurityGroupsForVpc`
- `GetSubnetCidrReservations`
- `GetTransitGatewayAttachmentPropagations`
- `GetTransitGatewayMeteringPolicyEntries`
- `GetTransitGatewayMulticastDomainAssociations`
- `GetTransitGatewayPolicyTableAssociations`
- `GetTransitGatewayPolicyTableEntries`
- `GetTransitGatewayPrefixListReferences`
- `GetTransitGatewayRouteTableAssociations`
- `GetTransitGatewayRouteTablePropagations`
- `GetVerifiedAccessEndpointPolicy`
- `GetVerifiedAccessEndpointTargets`
- `GetVerifiedAccessGroupPolicy`
- `GetVpcResourcesBlockingEncryptionEnforcement`
- `GetVpnConnectionDeviceSampleConfiguration`
- `GetVpnConnectionDeviceTypes`
- `GetVpnTunnelReplacementStatus`
- `ImportClientVpnClientCertificateRevocationList`
- `ImportImage`
- `ImportInstance`
- `ImportKeyPair`
- `ImportSnapshot`
- `ImportVolume`
- `ListImagesInRecycleBin`
- `ListSnapshotsInRecycleBin`
- `ListVolumesInRecycleBin`
- `LockSnapshot`
- `ModifyAddressAttribute`
- `ModifyAvailabilityZoneGroup`
- `ModifyCapacityReservation`
- `ModifyCapacityReservationFleet`
- `ModifyClientVpnEndpoint`
- `ModifyDefaultCreditSpecification`
- `ModifyEbsDefaultKmsKeyId`
- `ModifyFleet`
- `ModifyFpgaImageAttribute`
- `ModifyHosts`
- `ModifyIdFormat`
- `ModifyIdentityIdFormat`
- `ModifyImageAttribute`
- `ModifyInstanceAttribute`
- `ModifyInstanceCapacityReservationAttributes`
- `ModifyInstanceConnectEndpoint`
- `ModifyInstanceCpuOptions`
- `ModifyInstanceCreditSpecification`
- `ModifyInstanceEventStartTime`
- `ModifyInstanceEventWindow`
- `ModifyInstanceMaintenanceOptions`
- `ModifyInstanceMetadataDefaults`
- `ModifyInstanceMetadataOptions`
- `ModifyInstanceNetworkPerformanceOptions`
- `ModifyInstancePlacement`
- `ModifyIpam`
- `ModifyIpamPolicyAllocationRules`
- `ModifyIpamPool`
- `ModifyIpamPrefixListResolver`
- `ModifyIpamPrefixListResolverTarget`
- `ModifyIpamResourceCidr`
- `ModifyIpamResourceDiscovery`
- `ModifyIpamScope`
- `ModifyLaunchTemplate`
- `ModifyLocalGatewayRoute`
- `ModifyManagedPrefixList`
- `ModifyNetworkInterfaceAttribute`
- `ModifyPrivateDnsNameOptions`
- `ModifyPublicIpDnsNameOptions`
- `ModifyReservedInstances`
- `ModifyRouteServer`
- `ModifySecurityGroupRules`
- `ModifySnapshotAttribute`
- `ModifySnapshotTier`
- `ModifySpotFleetRequest`
- `ModifySubnetAttribute`
- `ModifyTrafficMirrorFilterNetworkServices`
- `ModifyTrafficMirrorFilterRule`
- `ModifyTrafficMirrorSession`
- `ModifyTransitGateway`
- `ModifyTransitGatewayMeteringPolicy`
- `ModifyTransitGatewayPrefixListReference`
- `ModifyTransitGatewayVpcAttachment`
- `ModifyVerifiedAccessEndpoint`
- `ModifyVerifiedAccessEndpointPolicy`
- `ModifyVerifiedAccessGroup`
- `ModifyVerifiedAccessGroupPolicy`
- `ModifyVerifiedAccessInstance`
- `ModifyVerifiedAccessInstanceLoggingConfiguration`
- `ModifyVerifiedAccessTrustProvider`
- `ModifyVolume`
- `ModifyVolumeAttribute`
- `ModifyVpcAttribute`
- `ModifyVpcBlockPublicAccessExclusion`
- `ModifyVpcBlockPublicAccessOptions`
- `ModifyVpcEncryptionControl`
- `ModifyVpcEndpoint`
- `ModifyVpcEndpointConnectionNotification`
- `ModifyVpcEndpointServiceConfiguration`
- `ModifyVpcEndpointServicePayerResponsibility`
- `ModifyVpcEndpointServicePermissions`
- `ModifyVpcPeeringConnectionOptions`
- `ModifyVpcTenancy`
- `ModifyVpnConnection`
- `ModifyVpnConnectionOptions`
- `ModifyVpnTunnelCertificate`
- `ModifyVpnTunnelOptions`
- `MoveAddressToVpc`
- `MoveByoipCidrToIpam`
- `MoveCapacityReservationInstances`
- `ProvisionByoipCidr`
- `ProvisionIpamByoasn`
- `ProvisionIpamPoolCidr`
- `ProvisionPublicIpv4PoolCidr`
- `PurchaseCapacityBlock`
- `PurchaseCapacityBlockExtension`
- `PurchaseHostReservation`
- `PurchaseReservedInstancesOffering`
- `PurchaseScheduledInstances`
- `RebootInstances`
- `RegisterImage`
- `RegisterInstanceEventNotificationAttributes`
- `RegisterTransitGatewayMulticastGroupMembers`
- `RegisterTransitGatewayMulticastGroupSources`
- `RejectCapacityReservationBillingOwnership`
- `RejectTransitGatewayMulticastDomainAssociations`
- `RejectTransitGatewayPeeringAttachment`
- `RejectTransitGatewayVpcAttachment`
- `RejectVpcEndpointConnections`
- `RejectVpcPeeringConnection`
- `ReleaseAddress`
- `ReleaseHosts`
- `ReleaseIpamPoolAllocation`
- `ReplaceIamInstanceProfileAssociation`
- `ReplaceImageCriteriaInAllowedImagesSettings`
- `ReplaceNetworkAclAssociation`
- `ReplaceNetworkAclEntry`
- `ReplaceRoute`
- `ReplaceRouteTableAssociation`
- `ReplaceTransitGatewayRoute`
- `ReplaceVpnTunnel`
- `ReportInstanceStatus`
- `RequestSpotFleet`
- `RequestSpotInstances`
- `ResetAddressAttribute`
- `ResetEbsDefaultKmsKeyId`
- `ResetFpgaImageAttribute`
- `ResetImageAttribute`
- `ResetInstanceAttribute`
- `ResetNetworkInterfaceAttribute`
- `ResetSnapshotAttribute`
- `RestoreAddressToClassic`
- `RestoreImageFromRecycleBin`
- `RestoreManagedPrefixListVersion`
- `RestoreSnapshotFromRecycleBin`
- `RestoreSnapshotTier`
- `RestoreVolumeFromRecycleBin`
- `RevokeClientVpnIngress`
- `RevokeSecurityGroupEgress`
- `RevokeSecurityGroupIngress`
- `RunInstances`
- `RunScheduledInstances`
- `SearchLocalGatewayRoutes`
- `SearchTransitGatewayMulticastGroups`
- `SearchTransitGatewayRoutes`
- `SendDiagnosticInterrupt`
- `StartDeclarativePoliciesReport`
- `StartInstances`
- `StartNetworkInsightsAccessScopeAnalysis`
- `StartNetworkInsightsAnalysis`
- `StartVpcEndpointServicePrivateDnsVerification`
- `StopInstances`
- `TerminateClientVpnConnections`
- `TerminateInstances`
- `UnassignIpv6Addresses`
- `UnassignPrivateIpAddresses`
- `UnassignPrivateNatGatewayAddress`
- `UnlockSnapshot`
- `UpdateCapacityManagerOrganizationsAccess`
- `UpdateInterruptibleCapacityReservationAllocation`
- `UpdateSecurityGroupRuleDescriptionsEgress`
- `UpdateSecurityGroupRuleDescriptionsIngress`
- `WithdrawByoipCidr`
<details><summary>Stubbed APIs (50) — routed but return an empty/default response</summary>
- `AcceptTransitGatewayClientVpnAttachment`
- `DeleteTransitGatewayClientVpnAttachment`
- `DescribeAggregateIdFormat`
- `DescribeCapacityReservationTopology`
- `DescribeElasticGpus`
- `DescribeExportTasks`
- `DescribeFastLaunchImages`
- `DescribeFastSnapshotRestores`
- `DescribeFleetHistory`
- `DescribeInstanceEventNotificationAttributes`
- `DescribeInstanceImageMetadata`
- `DescribeInstanceSqlHaHistoryStates`
- `DescribeInstanceSqlHaStates`
- `DescribeInstanceTopology`
- `DescribeIpv6Pools`
- `DescribeLockedSnapshots`
- `DescribeMovingAddresses`
- `DescribeServiceLinkVirtualInterfaces`
- `DescribeSpotFleetRequestHistory`
- `DescribeSpotPriceHistory`
- `DescribeStaleSecurityGroups`
- `DisableInstanceSqlHaStandbyDetections`
- `DisableIpamOrganizationAdminAccount`
- `DisableSnapshotBlockPublicAccess`
- `EnableInstanceSqlHaStandbyDetections`
- `EnableIpamOrganizationAdminAccount`
- `EnableReachabilityAnalyzerOrganizationSharing`
- `EnableSnapshotBlockPublicAccess`
- `GetAwsNetworkPerformanceData`
- `GetCapacityManagerAttributes`
- `GetCapacityManagerMetricData`
- `GetCapacityManagerMetricDimensions`
- `GetCapacityManagerMonitoredTagKeys`
- `GetConsoleScreenshot`
- `GetImageAncestry`
- `GetImageBlockPublicAccessState`
- `GetInstanceTpmEkPub`
- `GetInstanceUefiData`
- `GetIpamPolicyOrganizationTargets`
- `GetManagedResourceVisibility`
- `GetPasswordData`
- `GetRouteServerRoutingDatabase`
- `GetSerialConsoleAccessStatus`
- `GetSnapshotBlockPublicAccessState`
- `GetSpotPlacementScores`
- `ModifyManagedResourceVisibility`
- `MonitorInstances`
- `RejectTransitGatewayClientVpnAttachment`
- `UnmonitorInstances`
- `UpdateCapacityManagerMonitoredTagKeys`
</details>