@anvil-cloud/sdk 0.0.14 → 0.0.15

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (56) hide show
  1. package/aws/cognitoAuth.ts +70 -0
  2. package/aws/cognitoUserPool.ts +132 -0
  3. package/aws/dynamoDB.ts +176 -0
  4. package/aws/eventBus.ts +91 -0
  5. package/aws/httpApi.ts +108 -0
  6. package/aws/index.ts +49 -0
  7. package/aws/lambda.ts +1 -1
  8. package/aws/oauthAuthorizer.ts +70 -0
  9. package/aws/queue.ts +156 -0
  10. package/aws/svelteKitSite.ts +14 -0
  11. package/aws/vpcEndpoint.ts +9 -4
  12. package/bin/aws/cognitoAuth.d.ts +36 -0
  13. package/bin/aws/cognitoAuth.js +53 -0
  14. package/bin/aws/cognitoAuth.js.map +1 -0
  15. package/bin/aws/cognitoUserPool.d.ts +82 -0
  16. package/bin/aws/cognitoUserPool.js +65 -0
  17. package/bin/aws/cognitoUserPool.js.map +1 -0
  18. package/bin/aws/dynamoDB.d.ts +115 -0
  19. package/bin/aws/dynamoDB.js +121 -0
  20. package/bin/aws/dynamoDB.js.map +1 -0
  21. package/bin/aws/eventBus.d.ts +47 -0
  22. package/bin/aws/eventBus.js +63 -0
  23. package/bin/aws/eventBus.js.map +1 -0
  24. package/bin/aws/httpApi.d.ts +66 -0
  25. package/bin/aws/httpApi.js +60 -0
  26. package/bin/aws/httpApi.js.map +1 -0
  27. package/bin/aws/index.d.ts +21 -0
  28. package/bin/aws/index.js +29 -1
  29. package/bin/aws/index.js.map +1 -1
  30. package/bin/aws/lambda.d.ts +1 -1
  31. package/bin/aws/oauthAuthorizer.d.ts +36 -0
  32. package/bin/aws/oauthAuthorizer.js +53 -0
  33. package/bin/aws/oauthAuthorizer.js.map +1 -0
  34. package/bin/aws/queue.d.ts +83 -0
  35. package/bin/aws/queue.js +103 -0
  36. package/bin/aws/queue.js.map +1 -0
  37. package/bin/aws/svelteKitSite.d.ts +9 -0
  38. package/bin/aws/svelteKitSite.js +3 -0
  39. package/bin/aws/svelteKitSite.js.map +1 -1
  40. package/bin/aws/vpcEndpoint.d.ts +9 -5
  41. package/bin/aws/vpcEndpoint.js +2 -1
  42. package/bin/aws/vpcEndpoint.js.map +1 -1
  43. package/bin/grants.js +4 -0
  44. package/bin/grants.js.map +1 -1
  45. package/bin/package.json +1 -1
  46. package/bin/types/enums/aws/index.d.ts +164 -36
  47. package/bin/types/enums/aws/index.js +149 -35
  48. package/bin/types/enums/aws/index.js.map +1 -1
  49. package/bin/types/input.d.ts +962 -10
  50. package/bin/types/output.d.ts +13 -0
  51. package/grants.ts +6 -1
  52. package/package.json +1 -1
  53. package/tsconfig.json +7 -0
  54. package/types/enums/aws/index.ts +186 -36
  55. package/types/input.ts +994 -10
  56. package/types/output.ts +14 -0
@@ -1,68 +1,186 @@
1
- export declare const AwsVpcEndpointService: {
1
+ export declare const CognitoUserPoolCustomAttributeType: {
2
+ readonly String: "String";
3
+ readonly Number: "Number";
4
+ readonly DateTime: "DateTime";
5
+ readonly Boolean: "Boolean";
6
+ };
7
+ export type CognitoUserPoolCustomAttributeType = (typeof CognitoUserPoolCustomAttributeType)[keyof typeof CognitoUserPoolCustomAttributeType];
8
+ export declare const CognitoUserPoolIdentityProviderType: {
9
+ /**
10
+ * Google OAuth 2.0. Requires clientId and clientSecret.
11
+ */
12
+ readonly Google: "Google";
2
13
  /**
3
- * AWS Systems Manager. Required alongside ssmmessages and ec2messages for full SSM functionality including Session Manager and Run Command.
14
+ * Facebook OAuth 2.0. Requires clientId and clientSecret.
4
15
  */
5
- readonly Ssm: "ssm";
16
+ readonly Facebook: "Facebook";
6
17
  /**
7
- * SSM Session Manager messaging. Required alongside ssm and ec2messages.
18
+ * Login with Amazon. Requires clientId and clientSecret.
8
19
  */
9
- readonly Ssmmessages: "ssmmessages";
20
+ readonly LoginWithAmazon: "LoginWithAmazon";
10
21
  /**
11
- * SSM Run Command messaging. Required alongside ssm and ssmmessages.
22
+ * Sign in with Apple. Requires clientId and clientSecret.
12
23
  */
13
- readonly Ec2messages: "ec2messages";
24
+ readonly SignInWithApple: "SignInWithApple";
14
25
  /**
15
- * AWS Secrets Manager. Allows compute resources to call GetSecretValue and other Secrets Manager APIs without traversing the public internet.
26
+ * Generic OIDC provider (Okta, Auth0, Microsoft Entra, etc.). Requires clientId, clientSecret, and oidcIssuer.
16
27
  */
17
- readonly Secretsmanager: "secretsmanager";
28
+ readonly OIDC: "OIDC";
18
29
  /**
19
- * ECR control plane authentication, image manifests, and repository metadata. Required alongside ecr.dkr for private image pulls.
30
+ * SAML 2.0 provider (corporate SSO, Active Directory Federation Services etc.). Requires metadataUrl or metadataContent.
20
31
  */
21
- readonly Ecr_api: "ecr.api";
32
+ readonly SAML: "SAML";
33
+ };
34
+ export type CognitoUserPoolIdentityProviderType = (typeof CognitoUserPoolIdentityProviderType)[keyof typeof CognitoUserPoolIdentityProviderType];
35
+ export declare const CognitoUserPoolMfaMethod: {
22
36
  /**
23
- * ECR data plane image layer pulls. Required alongside ecr.api for private image pulls.
37
+ * Time-based one-time password (authenticator app). No additional AWS resources required.
24
38
  */
25
- readonly Ecr_dkr: "ecr.dkr";
39
+ readonly TOTP: "TOTP";
26
40
  /**
27
- * Amazon Simple Queue Service. Covers all SQS operations including SendMessage, ReceiveMessage, and DeleteMessage — all are client-initiated HTTPS, one endpoint covers all operations.
41
+ * SMS one-time password via SNS. Requires snsCallerArn.
28
42
  */
29
- readonly Sqs: "sqs";
43
+ readonly SMS: "SMS";
44
+ };
45
+ export type CognitoUserPoolMfaMethod = (typeof CognitoUserPoolMfaMethod)[keyof typeof CognitoUserPoolMfaMethod];
46
+ export declare const CognitoUserPoolMfaMode: {
30
47
  /**
31
- * Amazon Simple Notification Service. Allows compute resources to publish to SNS topics without traversing the public internet.
48
+ * MFA disabled. Default.
32
49
  */
33
- readonly Sns: "sns";
50
+ readonly OFF: "OFF";
34
51
  /**
35
- * AWS Lambda invoke. Allows private invocation of Lambda functions from within the VPC.
52
+ * MFA available but not required. Users opt in.
36
53
  */
37
- readonly Lambda: "lambda";
54
+ readonly OPTIONAL: "OPTIONAL";
38
55
  /**
39
- * Amazon CloudWatch Logs. Required for compute resources in private subnets to ship logs to CloudWatch without a NAT Gateway.
56
+ * MFA required for all users.
40
57
  */
41
- readonly Logs: "logs";
58
+ readonly REQUIRED: "REQUIRED";
59
+ };
60
+ export type CognitoUserPoolMfaMode = (typeof CognitoUserPoolMfaMode)[keyof typeof CognitoUserPoolMfaMode];
61
+ export declare const CognitoUserPoolOAuthFlow: {
42
62
  /**
43
- * Amazon CloudWatch Metrics. Required for compute resources in private subnets to publish custom metrics without a NAT Gateway.
63
+ * Authorization code grant (PKCE). Most secure use for all browser and server apps.
44
64
  */
45
- readonly Monitoring: "monitoring";
65
+ readonly Code: "code";
46
66
  /**
47
- * AWS Key Management Service. Required for compute resources that perform envelope encryption, use KMS-managed secrets, or interact with services that call KMS on their behalf.
67
+ * Implicit grant. Deprecated tokens visible in browser URL. Avoid for new applications.
48
68
  */
49
- readonly Kms: "kms";
69
+ readonly Implicit: "implicit";
50
70
  /**
51
- * AWS Security Token Service. Required for IAM role assumption and temporary credential generation within private subnets.
71
+ * Client credentials grant. M2M only no user interaction.
52
72
  */
53
- readonly Sts: "sts";
73
+ readonly Client_credentials: "client_credentials";
74
+ };
75
+ export type CognitoUserPoolOAuthFlow = (typeof CognitoUserPoolOAuthFlow)[keyof typeof CognitoUserPoolOAuthFlow];
76
+ export declare const CognitoUserPoolUsernameAttribute: {
77
+ /**
78
+ * Users sign in with their email address.
79
+ */
80
+ readonly Email: "email";
81
+ /**
82
+ * Users sign in with their phone number.
83
+ */
84
+ readonly Phone_number: "phone_number";
85
+ };
86
+ export type CognitoUserPoolUsernameAttribute = (typeof CognitoUserPoolUsernameAttribute)[keyof typeof CognitoUserPoolUsernameAttribute];
87
+ export declare const DynamoDBAttributeType: {
88
+ /**
89
+ * String
90
+ */
91
+ readonly S: "S";
92
+ /**
93
+ * Number
94
+ */
95
+ readonly N: "N";
96
+ /**
97
+ * Binary
98
+ */
99
+ readonly B: "B";
100
+ };
101
+ export type DynamoDBAttributeType = (typeof DynamoDBAttributeType)[keyof typeof DynamoDBAttributeType];
102
+ export declare const DynamoDBProjectionType: {
103
+ /**
104
+ * All attributes are projected. Default.
105
+ */
106
+ readonly ALL: "ALL";
107
+ /**
108
+ * Only the table and GSI key attributes are projected.
109
+ */
110
+ readonly KEYS_ONLY: "KEYS_ONLY";
111
+ /**
112
+ * Only the specified nonKeyAttributes are projected in addition to keys.
113
+ */
114
+ readonly INCLUDE: "INCLUDE";
115
+ };
116
+ export type DynamoDBProjectionType = (typeof DynamoDBProjectionType)[keyof typeof DynamoDBProjectionType];
117
+ export declare const DynamoDBStreamStartingPosition: {
118
+ /**
119
+ * Start reading from the oldest available record in the stream. Replays all existing records up to 24hr retention window. AWS default.
120
+ */
121
+ readonly TRIM_HORIZON: "TRIM_HORIZON";
122
+ /**
123
+ * Start reading from the most recent record. Only processes new events from the point of consumer creation.
124
+ */
125
+ readonly LATEST: "LATEST";
126
+ };
127
+ export type DynamoDBStreamStartingPosition = (typeof DynamoDBStreamStartingPosition)[keyof typeof DynamoDBStreamStartingPosition];
128
+ export declare const DynamoDBStreamViewType: {
129
+ /**
130
+ * Only the new item image is written to the stream.
131
+ */
132
+ readonly NEW_IMAGE: "NEW_IMAGE";
133
+ /**
134
+ * Only the old item image is written to the stream.
135
+ */
136
+ readonly OLD_IMAGE: "OLD_IMAGE";
137
+ /**
138
+ * Both old and new item images are written to the stream.
139
+ */
140
+ readonly NEW_AND_OLD_IMAGES: "NEW_AND_OLD_IMAGES";
141
+ /**
142
+ * Only the key attributes are written to the stream.
143
+ */
144
+ readonly KEYS_ONLY: "KEYS_ONLY";
145
+ };
146
+ export type DynamoDBStreamViewType = (typeof DynamoDBStreamViewType)[keyof typeof DynamoDBStreamViewType];
147
+ export declare const HttpApiMethod: {
148
+ /**
149
+ * HTTP GET — read operations.
150
+ */
151
+ readonly GET: "GET";
152
+ /**
153
+ * HTTP POST — create operations and async consumers (SQS, EventBridge, Step Functions).
154
+ */
155
+ readonly POST: "POST";
156
+ /**
157
+ * HTTP PUT — replace operations.
158
+ */
159
+ readonly PUT: "PUT";
160
+ /**
161
+ * HTTP PATCH — partial update operations.
162
+ */
163
+ readonly PATCH: "PATCH";
164
+ /**
165
+ * HTTP DELETE — delete operations.
166
+ */
167
+ readonly DELETE: "DELETE";
168
+ /**
169
+ * Matches all HTTP methods. Maps to the $default route key.
170
+ */
171
+ readonly ANY: "ANY";
54
172
  };
55
173
  /**
56
- * The AWS service to route privately via an Interface VPC Endpoint. Each value maps to the com.amazonaws.{region}.{suffix} endpoint service name.
174
+ * HTTP method for an API route.
57
175
  */
58
- export type AwsVpcEndpointService = (typeof AwsVpcEndpointService)[keyof typeof AwsVpcEndpointService];
176
+ export type HttpApiMethod = (typeof HttpApiMethod)[keyof typeof HttpApiMethod];
59
177
  export declare const LambdaArchitecture: {
60
178
  /**
61
- * Graviton 20% cheaper, better performance. Default.
179
+ * Graviton - 20% cheaper, better performance. Default.
62
180
  */
63
181
  readonly Arm64: "arm64";
64
182
  /**
65
- * Intel/AMD use for x86-specific native dependencies.
183
+ * Intel/AMD - use for x86-specific native dependencies.
66
184
  */
67
185
  readonly X86_64: "x86_64";
68
186
  };
@@ -81,26 +199,26 @@ export declare const LambdaLogRetention: {
81
199
  */
82
200
  readonly LambdaLogRetention_90d: "90d";
83
201
  /**
84
- * 1 year (365 days) SOC 2 / ISO 27001 / PCI-DSS baseline. Default.
202
+ * 1 year (365 days) - SOC 2 / ISO 27001 / PCI-DSS baseline. Default.
85
203
  */
86
204
  readonly LambdaLogRetention_1y: "1y";
87
205
  /**
88
- * 3 years (1095 days) FedRAMP minimum
206
+ * 3 years (1095 days) - FedRAMP minimum
89
207
  */
90
208
  readonly LambdaLogRetention_3y: "3y";
91
209
  /**
92
- * 6 years (2190 days) HIPAA minimum
210
+ * 6 years (2190 days) - HIPAA minimum
93
211
  */
94
212
  readonly LambdaLogRetention_6y: "6y";
95
213
  /**
96
- * 7 years (2555 days) IRAP minimum
214
+ * 7 years (2555 days) - IRAP minimum
97
215
  */
98
216
  readonly LambdaLogRetention_7y: "7y";
99
217
  };
100
218
  export type LambdaLogRetention = (typeof LambdaLogRetention)[keyof typeof LambdaLogRetention];
101
219
  export declare const LambdaRuntime: {
102
220
  /**
103
- * Node.js 24 (LTS) recommended
221
+ * Node.js 24 (LTS) - recommended
104
222
  */
105
223
  readonly Nodejs24_x: "nodejs24.x";
106
224
  /**
@@ -116,6 +234,16 @@ export declare const S3FlowLogLifecycle: {
116
234
  readonly Standard: "standard";
117
235
  };
118
236
  export type S3FlowLogLifecycle = (typeof S3FlowLogLifecycle)[keyof typeof S3FlowLogLifecycle];
237
+ export declare const SiteOriginProtectionProvider: {
238
+ /**
239
+ * Cloudflare — inject x-origin-secret via a Cloudflare Transform Rule.
240
+ */
241
+ readonly Cloudflare: "cloudflare";
242
+ };
243
+ /**
244
+ * The CDN/proxy provider sitting in front of CloudFront.
245
+ */
246
+ export type SiteOriginProtectionProvider = (typeof SiteOriginProtectionProvider)[keyof typeof SiteOriginProtectionProvider];
119
247
  export declare const VpcNatType: {
120
248
  /**
121
249
  * AWS managed NAT Gateway. One per AZ for true HA. ~$32/month per AZ plus $0.045/GB data processed.
@@ -2,68 +2,176 @@
2
2
  // *** WARNING: this file was generated by pulumi-language-nodejs. ***
3
3
  // *** Do not edit by hand unless you're certain you know what you are doing! ***
4
4
  Object.defineProperty(exports, "__esModule", { value: true });
5
- exports.VpcNatType = exports.S3FlowLogLifecycle = exports.LambdaRuntime = exports.LambdaLogRetention = exports.LambdaArchitecture = exports.AwsVpcEndpointService = void 0;
6
- exports.AwsVpcEndpointService = {
5
+ exports.VpcNatType = exports.SiteOriginProtectionProvider = exports.S3FlowLogLifecycle = exports.LambdaRuntime = exports.LambdaLogRetention = exports.LambdaArchitecture = exports.HttpApiMethod = exports.DynamoDBStreamViewType = exports.DynamoDBStreamStartingPosition = exports.DynamoDBProjectionType = exports.DynamoDBAttributeType = exports.CognitoUserPoolUsernameAttribute = exports.CognitoUserPoolOAuthFlow = exports.CognitoUserPoolMfaMode = exports.CognitoUserPoolMfaMethod = exports.CognitoUserPoolIdentityProviderType = exports.CognitoUserPoolCustomAttributeType = void 0;
6
+ exports.CognitoUserPoolCustomAttributeType = {
7
+ String: "String",
8
+ Number: "Number",
9
+ DateTime: "DateTime",
10
+ Boolean: "Boolean",
11
+ };
12
+ exports.CognitoUserPoolIdentityProviderType = {
13
+ /**
14
+ * Google OAuth 2.0. Requires clientId and clientSecret.
15
+ */
16
+ Google: "Google",
17
+ /**
18
+ * Facebook OAuth 2.0. Requires clientId and clientSecret.
19
+ */
20
+ Facebook: "Facebook",
21
+ /**
22
+ * Login with Amazon. Requires clientId and clientSecret.
23
+ */
24
+ LoginWithAmazon: "LoginWithAmazon",
25
+ /**
26
+ * Sign in with Apple. Requires clientId and clientSecret.
27
+ */
28
+ SignInWithApple: "SignInWithApple",
29
+ /**
30
+ * Generic OIDC provider (Okta, Auth0, Microsoft Entra, etc.). Requires clientId, clientSecret, and oidcIssuer.
31
+ */
32
+ OIDC: "OIDC",
33
+ /**
34
+ * SAML 2.0 provider (corporate SSO, Active Directory Federation Services etc.). Requires metadataUrl or metadataContent.
35
+ */
36
+ SAML: "SAML",
37
+ };
38
+ exports.CognitoUserPoolMfaMethod = {
7
39
  /**
8
- * AWS Systems Manager. Required alongside ssmmessages and ec2messages for full SSM functionality including Session Manager and Run Command.
40
+ * Time-based one-time password (authenticator app). No additional AWS resources required.
9
41
  */
10
- Ssm: "ssm",
42
+ TOTP: "TOTP",
11
43
  /**
12
- * SSM Session Manager messaging. Required alongside ssm and ec2messages.
44
+ * SMS one-time password via SNS. Requires snsCallerArn.
13
45
  */
14
- Ssmmessages: "ssmmessages",
46
+ SMS: "SMS",
47
+ };
48
+ exports.CognitoUserPoolMfaMode = {
49
+ /**
50
+ * MFA disabled. Default.
51
+ */
52
+ OFF: "OFF",
53
+ /**
54
+ * MFA available but not required. Users opt in.
55
+ */
56
+ OPTIONAL: "OPTIONAL",
57
+ /**
58
+ * MFA required for all users.
59
+ */
60
+ REQUIRED: "REQUIRED",
61
+ };
62
+ exports.CognitoUserPoolOAuthFlow = {
15
63
  /**
16
- * SSM Run Command messaging. Required alongside ssm and ssmmessages.
64
+ * Authorization code grant (PKCE). Most secure use for all browser and server apps.
17
65
  */
18
- Ec2messages: "ec2messages",
66
+ Code: "code",
19
67
  /**
20
- * AWS Secrets Manager. Allows compute resources to call GetSecretValue and other Secrets Manager APIs without traversing the public internet.
68
+ * Implicit grant. Deprecated tokens visible in browser URL. Avoid for new applications.
21
69
  */
22
- Secretsmanager: "secretsmanager",
70
+ Implicit: "implicit",
23
71
  /**
24
- * ECR control plane — authentication, image manifests, and repository metadata. Required alongside ecr.dkr for private image pulls.
72
+ * Client credentials grant. M2M only no user interaction.
25
73
  */
26
- Ecr_api: "ecr.api",
74
+ Client_credentials: "client_credentials",
75
+ };
76
+ exports.CognitoUserPoolUsernameAttribute = {
27
77
  /**
28
- * ECR data plane image layer pulls. Required alongside ecr.api for private image pulls.
78
+ * Users sign in with their email address.
29
79
  */
30
- Ecr_dkr: "ecr.dkr",
80
+ Email: "email",
31
81
  /**
32
- * Amazon Simple Queue Service. Covers all SQS operations including SendMessage, ReceiveMessage, and DeleteMessage — all are client-initiated HTTPS, one endpoint covers all operations.
82
+ * Users sign in with their phone number.
33
83
  */
34
- Sqs: "sqs",
84
+ Phone_number: "phone_number",
85
+ };
86
+ exports.DynamoDBAttributeType = {
35
87
  /**
36
- * Amazon Simple Notification Service. Allows compute resources to publish to SNS topics without traversing the public internet.
88
+ * String
37
89
  */
38
- Sns: "sns",
90
+ S: "S",
39
91
  /**
40
- * AWS Lambda invoke. Allows private invocation of Lambda functions from within the VPC.
92
+ * Number
41
93
  */
42
- Lambda: "lambda",
94
+ N: "N",
43
95
  /**
44
- * Amazon CloudWatch Logs. Required for compute resources in private subnets to ship logs to CloudWatch without a NAT Gateway.
96
+ * Binary
45
97
  */
46
- Logs: "logs",
98
+ B: "B",
99
+ };
100
+ exports.DynamoDBProjectionType = {
47
101
  /**
48
- * Amazon CloudWatch Metrics. Required for compute resources in private subnets to publish custom metrics without a NAT Gateway.
102
+ * All attributes are projected. Default.
49
103
  */
50
- Monitoring: "monitoring",
104
+ ALL: "ALL",
51
105
  /**
52
- * AWS Key Management Service. Required for compute resources that perform envelope encryption, use KMS-managed secrets, or interact with services that call KMS on their behalf.
106
+ * Only the table and GSI key attributes are projected.
53
107
  */
54
- Kms: "kms",
108
+ KEYS_ONLY: "KEYS_ONLY",
55
109
  /**
56
- * AWS Security Token Service. Required for IAM role assumption and temporary credential generation within private subnets.
110
+ * Only the specified nonKeyAttributes are projected in addition to keys.
57
111
  */
58
- Sts: "sts",
112
+ INCLUDE: "INCLUDE",
113
+ };
114
+ exports.DynamoDBStreamStartingPosition = {
115
+ /**
116
+ * Start reading from the oldest available record in the stream. Replays all existing records up to 24hr retention window. AWS default.
117
+ */
118
+ TRIM_HORIZON: "TRIM_HORIZON",
119
+ /**
120
+ * Start reading from the most recent record. Only processes new events from the point of consumer creation.
121
+ */
122
+ LATEST: "LATEST",
123
+ };
124
+ exports.DynamoDBStreamViewType = {
125
+ /**
126
+ * Only the new item image is written to the stream.
127
+ */
128
+ NEW_IMAGE: "NEW_IMAGE",
129
+ /**
130
+ * Only the old item image is written to the stream.
131
+ */
132
+ OLD_IMAGE: "OLD_IMAGE",
133
+ /**
134
+ * Both old and new item images are written to the stream.
135
+ */
136
+ NEW_AND_OLD_IMAGES: "NEW_AND_OLD_IMAGES",
137
+ /**
138
+ * Only the key attributes are written to the stream.
139
+ */
140
+ KEYS_ONLY: "KEYS_ONLY",
141
+ };
142
+ exports.HttpApiMethod = {
143
+ /**
144
+ * HTTP GET — read operations.
145
+ */
146
+ GET: "GET",
147
+ /**
148
+ * HTTP POST — create operations and async consumers (SQS, EventBridge, Step Functions).
149
+ */
150
+ POST: "POST",
151
+ /**
152
+ * HTTP PUT — replace operations.
153
+ */
154
+ PUT: "PUT",
155
+ /**
156
+ * HTTP PATCH — partial update operations.
157
+ */
158
+ PATCH: "PATCH",
159
+ /**
160
+ * HTTP DELETE — delete operations.
161
+ */
162
+ DELETE: "DELETE",
163
+ /**
164
+ * Matches all HTTP methods. Maps to the $default route key.
165
+ */
166
+ ANY: "ANY",
59
167
  };
60
168
  exports.LambdaArchitecture = {
61
169
  /**
62
- * Graviton 20% cheaper, better performance. Default.
170
+ * Graviton - 20% cheaper, better performance. Default.
63
171
  */
64
172
  Arm64: "arm64",
65
173
  /**
66
- * Intel/AMD use for x86-specific native dependencies.
174
+ * Intel/AMD - use for x86-specific native dependencies.
67
175
  */
68
176
  X86_64: "x86_64",
69
177
  };
@@ -81,25 +189,25 @@ exports.LambdaLogRetention = {
81
189
  */
82
190
  LambdaLogRetention_90d: "90d",
83
191
  /**
84
- * 1 year (365 days) SOC 2 / ISO 27001 / PCI-DSS baseline. Default.
192
+ * 1 year (365 days) - SOC 2 / ISO 27001 / PCI-DSS baseline. Default.
85
193
  */
86
194
  LambdaLogRetention_1y: "1y",
87
195
  /**
88
- * 3 years (1095 days) FedRAMP minimum
196
+ * 3 years (1095 days) - FedRAMP minimum
89
197
  */
90
198
  LambdaLogRetention_3y: "3y",
91
199
  /**
92
- * 6 years (2190 days) HIPAA minimum
200
+ * 6 years (2190 days) - HIPAA minimum
93
201
  */
94
202
  LambdaLogRetention_6y: "6y",
95
203
  /**
96
- * 7 years (2555 days) IRAP minimum
204
+ * 7 years (2555 days) - IRAP minimum
97
205
  */
98
206
  LambdaLogRetention_7y: "7y",
99
207
  };
100
208
  exports.LambdaRuntime = {
101
209
  /**
102
- * Node.js 24 (LTS) recommended
210
+ * Node.js 24 (LTS) - recommended
103
211
  */
104
212
  Nodejs24_x: "nodejs24.x",
105
213
  /**
@@ -113,6 +221,12 @@ exports.S3FlowLogLifecycle = {
113
221
  */
114
222
  Standard: "standard",
115
223
  };
224
+ exports.SiteOriginProtectionProvider = {
225
+ /**
226
+ * Cloudflare — inject x-origin-secret via a Cloudflare Transform Rule.
227
+ */
228
+ Cloudflare: "cloudflare",
229
+ };
116
230
  exports.VpcNatType = {
117
231
  /**
118
232
  * AWS managed NAT Gateway. One per AZ for true HA. ~$32/month per AZ plus $0.045/GB data processed.
@@ -1 +1 @@
1
- {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../types/enums/aws/index.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAGpE,QAAA,qBAAqB,GAAG;IACjC;;OAEG;IACH,GAAG,EAAE,KAAK;IACV;;OAEG;IACH,WAAW,EAAE,aAAa;IAC1B;;OAEG;IACH,WAAW,EAAE,aAAa;IAC1B;;OAEG;IACH,cAAc,EAAE,gBAAgB;IAChC;;OAEG;IACH,OAAO,EAAE,SAAS;IAClB;;OAEG;IACH,OAAO,EAAE,SAAS;IAClB;;OAEG;IACH,GAAG,EAAE,KAAK;IACV;;OAEG;IACH,GAAG,EAAE,KAAK;IACV;;OAEG;IACH,MAAM,EAAE,QAAQ;IAChB;;OAEG;IACH,IAAI,EAAE,MAAM;IACZ;;OAEG;IACH,UAAU,EAAE,YAAY;IACxB;;OAEG;IACH,GAAG,EAAE,KAAK;IACV;;OAEG;IACH,GAAG,EAAE,KAAK;CACJ,CAAC;AAOE,QAAA,kBAAkB,GAAG;IAC9B;;OAEG;IACH,KAAK,EAAE,OAAO;IACd;;OAEG;IACH,MAAM,EAAE,QAAQ;CACV,CAAC;AAIE,QAAA,kBAAkB,GAAG;IAC9B;;OAEG;IACH,qBAAqB,EAAE,IAAI;IAC3B;;OAEG;IACH,sBAAsB,EAAE,KAAK;IAC7B;;OAEG;IACH,sBAAsB,EAAE,KAAK;IAC7B;;OAEG;IACH,qBAAqB,EAAE,IAAI;IAC3B;;OAEG;IACH,qBAAqB,EAAE,IAAI;IAC3B;;OAEG;IACH,qBAAqB,EAAE,IAAI;IAC3B;;OAEG;IACH,qBAAqB,EAAE,IAAI;CACrB,CAAC;AAIE,QAAA,aAAa,GAAG;IACzB;;OAEG;IACH,UAAU,EAAE,YAAY;IACxB;;OAEG;IACH,UAAU,EAAE,YAAY;CAClB,CAAC;AAIE,QAAA,kBAAkB,GAAG;IAC9B;;OAEG;IACH,QAAQ,EAAE,UAAU;CACd,CAAC;AAIE,QAAA,UAAU,GAAG;IACtB;;OAEG;IACH,OAAO,EAAE,SAAS;IAClB;;OAEG;IACH,OAAO,EAAE,SAAS;CACZ,CAAC"}
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../types/enums/aws/index.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAGpE,QAAA,kCAAkC,GAAG;IAC9C,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,QAAQ,EAAE,UAAU;IACpB,OAAO,EAAE,SAAS;CACZ,CAAC;AAIE,QAAA,mCAAmC,GAAG;IAC/C;;OAEG;IACH,MAAM,EAAE,QAAQ;IAChB;;OAEG;IACH,QAAQ,EAAE,UAAU;IACpB;;OAEG;IACH,eAAe,EAAE,iBAAiB;IAClC;;OAEG;IACH,eAAe,EAAE,iBAAiB;IAClC;;OAEG;IACH,IAAI,EAAE,MAAM;IACZ;;OAEG;IACH,IAAI,EAAE,MAAM;CACN,CAAC;AAIE,QAAA,wBAAwB,GAAG;IACpC;;OAEG;IACH,IAAI,EAAE,MAAM;IACZ;;OAEG;IACH,GAAG,EAAE,KAAK;CACJ,CAAC;AAIE,QAAA,sBAAsB,GAAG;IAClC;;OAEG;IACH,GAAG,EAAE,KAAK;IACV;;OAEG;IACH,QAAQ,EAAE,UAAU;IACpB;;OAEG;IACH,QAAQ,EAAE,UAAU;CACd,CAAC;AAIE,QAAA,wBAAwB,GAAG;IACpC;;OAEG;IACH,IAAI,EAAE,MAAM;IACZ;;OAEG;IACH,QAAQ,EAAE,UAAU;IACpB;;OAEG;IACH,kBAAkB,EAAE,oBAAoB;CAClC,CAAC;AAIE,QAAA,gCAAgC,GAAG;IAC5C;;OAEG;IACH,KAAK,EAAE,OAAO;IACd;;OAEG;IACH,YAAY,EAAE,cAAc;CACtB,CAAC;AAIE,QAAA,qBAAqB,GAAG;IACjC;;OAEG;IACH,CAAC,EAAE,GAAG;IACN;;OAEG;IACH,CAAC,EAAE,GAAG;IACN;;OAEG;IACH,CAAC,EAAE,GAAG;CACA,CAAC;AAIE,QAAA,sBAAsB,GAAG;IAClC;;OAEG;IACH,GAAG,EAAE,KAAK;IACV;;OAEG;IACH,SAAS,EAAE,WAAW;IACtB;;OAEG;IACH,OAAO,EAAE,SAAS;CACZ,CAAC;AAIE,QAAA,8BAA8B,GAAG;IAC1C;;OAEG;IACH,YAAY,EAAE,cAAc;IAC5B;;OAEG;IACH,MAAM,EAAE,QAAQ;CACV,CAAC;AAIE,QAAA,sBAAsB,GAAG;IAClC;;OAEG;IACH,SAAS,EAAE,WAAW;IACtB;;OAEG;IACH,SAAS,EAAE,WAAW;IACtB;;OAEG;IACH,kBAAkB,EAAE,oBAAoB;IACxC;;OAEG;IACH,SAAS,EAAE,WAAW;CAChB,CAAC;AAIE,QAAA,aAAa,GAAG;IACzB;;OAEG;IACH,GAAG,EAAE,KAAK;IACV;;OAEG;IACH,IAAI,EAAE,MAAM;IACZ;;OAEG;IACH,GAAG,EAAE,KAAK;IACV;;OAEG;IACH,KAAK,EAAE,OAAO;IACd;;OAEG;IACH,MAAM,EAAE,QAAQ;IAChB;;OAEG;IACH,GAAG,EAAE,KAAK;CACJ,CAAC;AAOE,QAAA,kBAAkB,GAAG;IAC9B;;OAEG;IACH,KAAK,EAAE,OAAO;IACd;;OAEG;IACH,MAAM,EAAE,QAAQ;CACV,CAAC;AAIE,QAAA,kBAAkB,GAAG;IAC9B;;OAEG;IACH,qBAAqB,EAAE,IAAI;IAC3B;;OAEG;IACH,sBAAsB,EAAE,KAAK;IAC7B;;OAEG;IACH,sBAAsB,EAAE,KAAK;IAC7B;;OAEG;IACH,qBAAqB,EAAE,IAAI;IAC3B;;OAEG;IACH,qBAAqB,EAAE,IAAI;IAC3B;;OAEG;IACH,qBAAqB,EAAE,IAAI;IAC3B;;OAEG;IACH,qBAAqB,EAAE,IAAI;CACrB,CAAC;AAIE,QAAA,aAAa,GAAG;IACzB;;OAEG;IACH,UAAU,EAAE,YAAY;IACxB;;OAEG;IACH,UAAU,EAAE,YAAY;CAClB,CAAC;AAIE,QAAA,kBAAkB,GAAG;IAC9B;;OAEG;IACH,QAAQ,EAAE,UAAU;CACd,CAAC;AAIE,QAAA,4BAA4B,GAAG;IACxC;;OAEG;IACH,UAAU,EAAE,YAAY;CAClB,CAAC;AAOE,QAAA,UAAU,GAAG;IACtB;;OAEG;IACH,OAAO,EAAE,SAAS;IAClB;;OAEG;IACH,OAAO,EAAE,SAAS;CACZ,CAAC"}