@awboost/cfn-resource-types 0.1.0 → 0.1.2

package/lib/AWS-DocDB-DBInstance.d.ts

@@ -7,6 +7,8 @@ import type { ResourceOptions as $ResourceOptions } from "@awboost/cfn-template-
 export type DocDBDBInstanceProperties = {
     AutoMinorVersionUpgrade?: boolean;
     AvailabilityZone?: string;
+    CACertificateIdentifier?: string;
+    CertificateRotationRestart?: boolean;
     DBClusterIdentifier: string;
     DBInstanceClass: string;
     DBInstanceIdentifier?: string;

package/lib/AWS-DocDB-EventSubscription.d.ts

@@ -0,0 +1,30 @@
+import { Resource as $Resource } from "@awboost/cfn-template-builder/template/Resource";
+import type { ResourceOptions as $ResourceOptions } from "@awboost/cfn-template-builder/template";
+/**
+ * Resource Type definition for AWS::DocDB::EventSubscription
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-docdb-eventsubscription.html}
+ */
+export type DocDBEventSubscriptionProperties = {
+    Enabled?: boolean;
+    EventCategories?: string[];
+    SnsTopicArn: string;
+    SourceIds?: string[];
+    SourceType?: string;
+    SubscriptionName?: string;
+};
+/**
+ * Attribute type definition for `AWS::DocDB::EventSubscription`.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-docdb-eventsubscription.html#aws-resource-docdb-eventsubscription-return-values}
+ */
+export type DocDBEventSubscriptionAttributes = {
+    Id: string;
+};
+/**
+ * Resource Type definition for AWS::DocDB::EventSubscription
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-docdb-eventsubscription.html}
+ */
+export declare class DocDBEventSubscription extends $Resource<"AWS::DocDB::EventSubscription", DocDBEventSubscriptionProperties, DocDBEventSubscriptionAttributes> {
+    static readonly Type = "AWS::DocDB::EventSubscription";
+    constructor(logicalId: string, properties: DocDBEventSubscriptionProperties, options?: $ResourceOptions);
+}
+//# sourceMappingURL=AWS-DocDB-EventSubscription.d.ts.map

package/lib/AWS-DocDB-EventSubscription.js

@@ -0,0 +1,12 @@
+import { Resource as $Resource } from "@awboost/cfn-template-builder/template/Resource";
+/**
+ * Resource Type definition for AWS::DocDB::EventSubscription
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-docdb-eventsubscription.html}
+ */
+export class DocDBEventSubscription extends $Resource {
+    static Type = "AWS::DocDB::EventSubscription";
+    constructor(logicalId, properties, options) {
+        super(logicalId, DocDBEventSubscription.Type, properties, options);
+    }
+}
+//# sourceMappingURL=AWS-DocDB-EventSubscription.js.map

package/lib/AWS-EC2-IPAMAllocation.d.ts

@@ -6,7 +6,7 @@ import type { ResourceOptions as $ResourceOptions } from "@awboost/cfn-template-
  */
 export type EC2IPAMAllocationProperties = {
     /**
-     * Represents a single IPv4 or IPv6 CIDR
+     * Represents an IPAM custom allocation of a single IPv4 or IPv6 CIDR
      */
     Cidr?: string;
     Description?: string;

package/lib/AWS-EC2-IPAMPool.d.ts

@@ -58,6 +58,10 @@ export type EC2IPAMPoolProperties = {
      * The Id of this pool's source. If set, all space provisioned in this pool must be free space provisioned in the parent pool.
      */
     SourceIpamPoolId?: string;
+    /**
+     * The resource associated with this pool's space. Depending on the ResourceType, setting a SourceResource changes which space can be provisioned in this pool and which types of resources can receive allocations
+     */
+    SourceResource?: SourceResource;
     /**
      * An array of key-value pairs to apply to this resource.
      */
@@ -112,6 +116,17 @@ export type ProvisionedCidr = {
      */
     Cidr: string;
 };
+/**
+ * Type definition for `AWS::EC2::IPAMPool.SourceResource`.
+ * The resource associated with this pool's space. Depending on the ResourceType, setting a SourceResource changes which space can be provisioned in this pool and which types of resources can receive allocations
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-ipampool-sourceresource.html}
+ */
+export type SourceResource = {
+    ResourceId: string;
+    ResourceOwner: string;
+    ResourceRegion: string;
+    ResourceType: string;
+};
 /**
  * Type definition for `AWS::EC2::IPAMPool.Tag`.
  * A key-value pair to associate with a resource.

package/lib/AWS-EC2-LaunchTemplate.d.ts

@@ -138,6 +138,25 @@ export type CapacityReservationTarget = {
      */
     CapacityReservationResourceGroupArn?: string;
 };
+/**
+ * Type definition for `AWS::EC2::LaunchTemplate.ConnectionTrackingSpecification`.
+ * Allows customer to specify Connection Tracking options
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-connectiontrackingspecification.html}
+ */
+export type ConnectionTrackingSpecification = {
+    /**
+     * Integer value for TCP Established Timeout
+     */
+    TcpEstablishedTimeout?: number;
+    /**
+     * Integer value for UDP Stream Timeout
+     */
+    UdpStreamTimeout?: number;
+    /**
+     * Integer value for UDP Timeout
+     */
+    UdpTimeout?: number;
+};
 /**
  * Type definition for `AWS::EC2::LaunchTemplate.CpuOptions`.
  * specifies the CPU options for an instance.
@@ -595,6 +614,10 @@ export type MaintenanceOptions = {
      * Disables the automatic recovery behavior of your instance or sets it to default.
      */
     AutoRecovery?: string;
+    /**
+     * Disables the automatic reboot-migration behavior of your instance or sets it to default.
+     */
+    RebootMigration?: string;
 };
 /**
  * Type definition for `AWS::EC2::LaunchTemplate.MemoryGiBPerVCpu`.
@@ -693,6 +716,10 @@ export type NetworkInterface = {
      * Associates a public IPv4 address with eth0 for a new network interface.
      */
     AssociatePublicIpAddress?: boolean;
+    /**
+     * Allows customer to specify Connection Tracking options
+     */
+    ConnectionTrackingSpecification?: ConnectionTrackingSpecification;
     /**
      * Indicates whether the network interface is deleted when the instance is terminated.
      */

package/lib/AWS-EC2-NetworkInterface.d.ts

@@ -5,10 +5,15 @@ import type { ResourceOptions as $ResourceOptions } from "@awboost/cfn-template-
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-networkinterface.html}
  */
 export type EC2NetworkInterfaceProperties = {
+    ConnectionTrackingSpecification?: ConnectionTrackingSpecification;
     /**
      * A description for the network interface.
      */
     Description?: string;
+    /**
+     * If you have instances or ENIs that rely on the IPv6 address not changing, to avoid disrupting traffic to instances or ENIs, you can enable a primary IPv6 address. Enable this option to automatically assign an IPv6 associated with the ENI attached to your instance to be the primary IPv6 address. When you enable an IPv6 address to be a primary IPv6, you cannot disable it. Traffic will be routed to the primary IPv6 address until the instance is terminated or the ENI is detached. If you have multiple IPv6 addresses associated with an ENI and you enable a primary IPv6 address, the first IPv6 address associated with the ENI becomes the primary IPv6 address.
+     */
+    EnablePrimaryIpv6?: boolean;
     /**
      * A list of security group IDs associated with this network interface.
      */
@@ -75,6 +80,10 @@ export type EC2NetworkInterfaceAttributes = {
      * Network interface id.
      */
     Id: string;
+    /**
+     * The primary IPv6 address
+     */
+    PrimaryIpv6Address: string;
     /**
      * Returns the primary private IP address of the network interface.
      */
@@ -84,6 +93,15 @@ export type EC2NetworkInterfaceAttributes = {
      */
     SecondaryPrivateIpAddresses: string[];
 };
+/**
+ * Type definition for `AWS::EC2::NetworkInterface.ConnectionTrackingSpecification`.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-networkinterface-connectiontrackingspecification.html}
+ */
+export type ConnectionTrackingSpecification = {
+    TcpEstablishedTimeout?: number;
+    UdpStreamTimeout?: number;
+    UdpTimeout?: number;
+};
 /**
  * Type definition for `AWS::EC2::NetworkInterface.InstanceIpv6Address`.
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-networkinterface-instanceipv6address.html}

package/lib/AWS-EC2-Route.d.ts

@@ -9,6 +9,10 @@ export type EC2RouteProperties = {
      * The ID of the carrier gateway.
      */
     CarrierGatewayId?: string;
+    /**
+     * The Amazon Resource Name (ARN) of the core network.
+     */
+    CoreNetworkArn?: string;
     /**
      * The IPv4 CIDR block used for the destination match.
      */

package/lib/AWS-EC2-SecurityGroupEgress.d.ts

@@ -5,14 +5,41 @@ import type { ResourceOptions as $ResourceOptions } from "@awboost/cfn-template-
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-securitygroupegress.html}
  */
 export type EC2SecurityGroupEgressProperties = {
+    /**
+     * The IPv4 ranges
+     */
     CidrIp?: string;
+    /**
+     * [VPC only] The IPv6 ranges
+     */
     CidrIpv6?: string;
+    /**
+     * Resource Type definition for an egress (outbound) security group rule.
+     */
     Description?: string;
+    /**
+     * [EC2-VPC only] The ID of a prefix list.
+     */
     DestinationPrefixListId?: string;
+    /**
+     * You must specify a destination security group (DestinationPrefixListId or DestinationSecurityGroupId) or a CIDR range (CidrIp or CidrIpv6).
+     */
     DestinationSecurityGroupId?: string;
+    /**
+     * The start of port range for the TCP and UDP protocols, or an ICMP/ICMPv6 type number. A value of -1 indicates all ICMP/ICMPv6 types. If you specify all ICMP/ICMPv6 types, you must specify all codes.
+     */
     FromPort?: number;
+    /**
+     * The ID of the security group. You must specify either the security group ID or the security group name in the request. For security groups in a nondefault VPC, you must specify the security group ID.
+     */
     GroupId: string;
+    /**
+     * [VPC only] Use -1 to specify all protocols. When authorizing security group rules, specifying -1 or a protocol number other than tcp, udp, icmp, or icmpv6 allows traffic on all ports, regardless of any port range you specify. For tcp, udp, and icmp, you must specify a port range. For icmpv6, the port range is optional; if you omit the port range, traffic for all types and codes is allowed.
+     */
     IpProtocol: string;
+    /**
+     * The end of port range for the TCP and UDP protocols, or an ICMP/ICMPv6 code. A value of -1 indicates all ICMP/ICMPv6 codes. If you specify all ICMP/ICMPv6 types, you must specify all codes.
+     */
     ToPort?: number;
 };
 /**
@@ -20,6 +47,9 @@ export type EC2SecurityGroupEgressProperties = {
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-securitygroupegress.html#aws-resource-ec2-securitygroupegress-return-values}
  */
 export type EC2SecurityGroupEgressAttributes = {
+    /**
+     * The Security Group Rule Id
+     */
     Id: string;
 };
 /**

package/lib/AWS-EC2-SnapshotBlockPublicAccess.d.ts

@@ -0,0 +1,31 @@
+import { Resource as $Resource } from "@awboost/cfn-template-builder/template/Resource";
+import type { ResourceOptions as $ResourceOptions } from "@awboost/cfn-template-builder/template";
+/**
+ * Resource Type definition for AWS::EC2::SnapshotBlockPublicAccess
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-snapshotblockpublicaccess.html}
+ */
+export type EC2SnapshotBlockPublicAccessProperties = {
+    /**
+     * The state of EBS Snapshot Block Public Access.
+     */
+    State: "block-all-sharing" | "block-new-sharing";
+};
+/**
+ * Attribute type definition for `AWS::EC2::SnapshotBlockPublicAccess`.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-snapshotblockpublicaccess.html#aws-resource-ec2-snapshotblockpublicaccess-return-values}
+ */
+export type EC2SnapshotBlockPublicAccessAttributes = {
+    /**
+     * The identifier for the specified AWS account.
+     */
+    AccountId: string;
+};
+/**
+ * Resource Type definition for AWS::EC2::SnapshotBlockPublicAccess
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-snapshotblockpublicaccess.html}
+ */
+export declare class EC2SnapshotBlockPublicAccess extends $Resource<"AWS::EC2::SnapshotBlockPublicAccess", EC2SnapshotBlockPublicAccessProperties, EC2SnapshotBlockPublicAccessAttributes> {
+    static readonly Type = "AWS::EC2::SnapshotBlockPublicAccess";
+    constructor(logicalId: string, properties: EC2SnapshotBlockPublicAccessProperties, options?: $ResourceOptions);
+}
+//# sourceMappingURL=AWS-EC2-SnapshotBlockPublicAccess.d.ts.map

package/lib/AWS-EC2-SnapshotBlockPublicAccess.js

@@ -0,0 +1,12 @@
+import { Resource as $Resource } from "@awboost/cfn-template-builder/template/Resource";
+/**
+ * Resource Type definition for AWS::EC2::SnapshotBlockPublicAccess
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-snapshotblockpublicaccess.html}
+ */
+export class EC2SnapshotBlockPublicAccess extends $Resource {
+    static Type = "AWS::EC2::SnapshotBlockPublicAccess";
+    constructor(logicalId, properties, options) {
+        super(logicalId, EC2SnapshotBlockPublicAccess.Type, properties, options);
+    }
+}
+//# sourceMappingURL=AWS-EC2-SnapshotBlockPublicAccess.js.map

package/lib/AWS-EC2-Subnet.d.ts

@@ -10,11 +10,20 @@ export type EC2SubnetProperties = {
     AvailabilityZoneId?: string;
     CidrBlock?: string;
     EnableDns64?: boolean;
+    /**
+     * The ID of an IPv4 IPAM pool you want to use for allocating this subnet's CIDR
+     */
+    Ipv4IpamPoolId?: string;
     /**
      * The netmask length of the IPv4 CIDR you want to allocate to this subnet from an Amazon VPC IP Address Manager (IPAM) pool
      */
     Ipv4NetmaskLength?: number;
     Ipv6CidrBlock?: string;
+    Ipv6CidrBlocks?: string[];
+    /**
+     * The ID of an IPv6 IPAM pool you want to use for allocating this subnet's CIDR
+     */
+    Ipv6IpamPoolId?: string;
     Ipv6Native?: boolean;
     /**
      * The netmask length of the IPv6 CIDR you want to allocate to this subnet from an Amazon VPC IP Address Manager (IPAM) pool
@@ -35,7 +44,6 @@ export type EC2SubnetProperties = {
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-subnet.html#aws-resource-ec2-subnet-return-values}
  */
 export type EC2SubnetAttributes = {
-    Ipv6CidrBlocks: string[];
     NetworkAclAssociationId: string;
     SubnetId: string;
 };

package/lib/AWS-EC2-SubnetCidrBlock.d.ts

@@ -9,7 +9,17 @@ export type EC2SubnetCidrBlockProperties = {
      * The IPv6 network range for the subnet, in CIDR notation. The subnet size must use a /64 prefix length
      * @maxLength `42`
      */
-    Ipv6CidrBlock: string;
+    Ipv6CidrBlock?: string;
+    /**
+     * The ID of an IPv6 Amazon VPC IP Address Manager (IPAM) pool from which to allocate, to get the subnet's CIDR
+     */
+    Ipv6IpamPoolId?: string;
+    /**
+     * The netmask length of the IPv6 CIDR to allocate to the subnet from an IPAM pool
+     * @min `0`
+     * @max `128`
+     */
+    Ipv6NetmaskLength?: number;
     /**
      * The ID of the subnet
      */

package/lib/AWS-EC2-TransitGateway.d.ts

@@ -14,7 +14,6 @@ export type EC2TransitGatewayProperties = {
     DnsSupport?: string;
     MulticastSupport?: string;
     PropagationDefaultRouteTableId?: string;
-    SecurityGroupReferencingSupport?: string;
     Tags?: Tag[];
     TransitGatewayCidrBlocks?: string[];
     VpnEcmpSupport?: string;

package/lib/AWS-EC2-TransitGatewayVpcAttachment.d.ts

@@ -22,10 +22,6 @@ export type EC2TransitGatewayVpcAttachmentProperties = {
          * Indicates whether to enable Ipv6 Support for Vpc Attachment. Valid Values: enable | disable
          */
         Ipv6Support?: string;
-        /**
-         * Indicates whether to enable Security Group referencing support for Vpc Attachment. Valid values: enable | disable
-         */
-        SecurityGroupReferencingSupport?: string;
     };
     RemoveSubnetIds?: string[];
     SubnetIds: string[];

package/lib/AWS-EC2-VerifiedAccessTrustProvider.d.ts

@@ -75,6 +75,10 @@ export type EC2VerifiedAccessTrustProviderAttributes = {
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-verifiedaccesstrustprovider-deviceoptions.html}
  */
 export type DeviceOptions = {
+    /**
+     * URL Verified Access will use to verify authenticity of the device tokens.
+     */
+    PublicSigningKeyUrl?: string;
     /**
      * The ID of the tenant application with the device-identity provider.
      */

package/lib/AWS-ECS-CapacityProvider.d.ts

@@ -15,6 +15,7 @@ export type ECSCapacityProviderProperties = {
  */
 export type AutoScalingGroupProvider = {
     AutoScalingGroupArn: string;
+    ManagedDraining?: "DISABLED" | "ENABLED";
     /**
      * The managed scaling settings for the Auto Scaling group capacity provider.
      */

package/lib/AWS-ECS-Service.d.ts

@@ -27,6 +27,7 @@ export type ECSServiceProperties = {
     ServiceRegistries?: ServiceRegistry[];
     Tags?: Tag[];
     TaskDefinition?: string;
+    VolumeConfigurations?: ServiceVolumeConfiguration[];
 };
 /**
  * Attribute type definition for `AWS::ECS::Service`.
@@ -88,6 +89,15 @@ export type DeploymentConfiguration = {
 export type DeploymentController = {
     Type?: "CODE_DEPLOY" | "ECS" | "EXTERNAL";
 };
+/**
+ * Type definition for `AWS::ECS::Service.EBSTagSpecification`.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-service-ebstagspecification.html}
+ */
+export type EBSTagSpecification = {
+    PropagateTags?: "SERVICE" | "TASK_DEFINITION";
+    ResourceType: string;
+    Tags?: Tag[];
+};
 /**
  * Type definition for `AWS::ECS::Service.LoadBalancer`.
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-service-loadbalancer.html}
@@ -166,6 +176,22 @@ export type ServiceConnectService = {
     IngressPortOverride?: number;
     PortName: string;
 };
+/**
+ * Type definition for `AWS::ECS::Service.ServiceManagedEBSVolumeConfiguration`.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-service-servicemanagedebsvolumeconfiguration.html}
+ */
+export type ServiceManagedEBSVolumeConfiguration = {
+    Encrypted?: boolean;
+    FilesystemType?: string;
+    Iops?: number;
+    KmsKeyId?: string;
+    RoleArn: string;
+    SizeInGiB?: number;
+    SnapshotId?: string;
+    TagSpecifications?: EBSTagSpecification[];
+    Throughput?: number;
+    VolumeType?: string;
+};
 /**
  * Type definition for `AWS::ECS::Service.ServiceRegistry`.
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-service-serviceregistry.html}
@@ -176,6 +202,14 @@ export type ServiceRegistry = {
     Port?: number;
     RegistryArn?: string;
 };
+/**
+ * Type definition for `AWS::ECS::Service.ServiceVolumeConfiguration`.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-service-servicevolumeconfiguration.html}
+ */
+export type ServiceVolumeConfiguration = {
+    ManagedEBSVolume?: ServiceManagedEBSVolumeConfiguration;
+    Name: string;
+};
 /**
  * Type definition for `AWS::ECS::Service.Tag`.
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-service-tag.html}

package/lib/AWS-ECS-TaskDefinition.d.ts

@@ -367,6 +367,7 @@ export type Ulimit = {
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-taskdefinition-volume.html}
  */
 export type Volume = {
+    ConfiguredAtLaunch?: boolean;
     DockerVolumeConfiguration?: DockerVolumeConfiguration;
     EFSVolumeConfiguration?: EFSVolumeConfiguration;
     Host?: HostVolumeProperties;

package/lib/AWS-EFS-FileSystem.d.ts

@@ -13,6 +13,7 @@ export type EFSFileSystemProperties = {
     BypassPolicyLockoutSafetyCheck?: boolean;
     Encrypted?: boolean;
     FileSystemPolicy?: Record<string, any>;
+    FileSystemProtection?: FileSystemProtection;
     FileSystemTags?: ElasticFileSystemTag[];
     KmsKeyId?: string;
     LifecyclePolicies?: LifecyclePolicy[];
@@ -44,11 +45,19 @@ export type ElasticFileSystemTag = {
     Key: string;
     Value: string;
 };
+/**
+ * Type definition for `AWS::EFS::FileSystem.FileSystemProtection`.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-efs-filesystem-filesystemprotection.html}
+ */
+export type FileSystemProtection = {
+    ReplicationOverwriteProtection?: "DISABLED" | "ENABLED";
+};
 /**
  * Type definition for `AWS::EFS::FileSystem.LifecyclePolicy`.
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-efs-filesystem-lifecyclepolicy.html}
  */
 export type LifecyclePolicy = {
+    TransitionToArchive?: string;
     TransitionToIA?: string;
     TransitionToPrimaryStorageClass?: string;
 };

package/lib/AWS-EKS-AccessEntry.d.ts

@@ -0,0 +1,107 @@
+import { Resource as $Resource } from "@awboost/cfn-template-builder/template/Resource";
+import type { ResourceOptions as $ResourceOptions } from "@awboost/cfn-template-builder/template";
+/**
+ * Resource type definition for `AWS::EKS::AccessEntry`.
+ * An object representing an Amazon EKS AccessEntry.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-accessentry.html}
+ */
+export type EKSAccessEntryProperties = {
+    /**
+     * An array of access policies that are associated with the access entry.
+     * @maxLength `20`
+     */
+    AccessPolicies?: AccessPolicy[];
+    /**
+     * The cluster that the access entry is created for.
+     */
+    ClusterName: string;
+    /**
+     * The Kubernetes groups that the access entry is associated with.
+     */
+    KubernetesGroups?: string[];
+    /**
+     * The principal ARN that the access entry is created for.
+     */
+    PrincipalArn: string;
+    /**
+     * An array of key-value pairs to apply to this resource.
+     */
+    Tags?: Tag[];
+    /**
+     * The node type to associate with the access entry.
+     */
+    Type?: string;
+    /**
+     * The Kubernetes user that the access entry is associated with.
+     */
+    Username?: string;
+};
+/**
+ * Attribute type definition for `AWS::EKS::AccessEntry`.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-accessentry.html#aws-resource-eks-accessentry-return-values}
+ */
+export type EKSAccessEntryAttributes = {
+    /**
+     * The ARN of the access entry.
+     */
+    AccessEntryArn: string;
+};
+/**
+ * Type definition for `AWS::EKS::AccessEntry.AccessPolicy`.
+ * An access policy to associate with the current access entry.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-accessentry-accesspolicy.html}
+ */
+export type AccessPolicy = {
+    /**
+     * The access scope of the access policy.
+     */
+    AccessScope: AccessScope;
+    /**
+     * The ARN of the access policy to add to the access entry.
+     */
+    PolicyArn: string;
+};
+/**
+ * Type definition for `AWS::EKS::AccessEntry.AccessScope`.
+ * The access scope of the access policy.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-accessentry-accessscope.html}
+ */
+export type AccessScope = {
+    /**
+     * The namespaces to associate with the access scope. Only specify if Type is set to 'namespace'.
+     */
+    Namespaces?: string[];
+    /**
+     * The type of the access scope.
+     */
+    Type: "namespace" | "cluster";
+};
+/**
+ * Type definition for `AWS::EKS::AccessEntry.Tag`.
+ * A key-value pair to associate with a resource.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-accessentry-tag.html}
+ */
+export type Tag = {
+    /**
+     * The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+     * @minLength `1`
+     * @maxLength `128`
+     */
+    Key: string;
+    /**
+     * The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+     * @minLength `0`
+     * @maxLength `256`
+     */
+    Value: string;
+};
+/**
+ * Resource type definition for `AWS::EKS::AccessEntry`.
+ * An object representing an Amazon EKS AccessEntry.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-accessentry.html}
+ */
+export declare class EKSAccessEntry extends $Resource<"AWS::EKS::AccessEntry", EKSAccessEntryProperties, EKSAccessEntryAttributes> {
+    static readonly Type = "AWS::EKS::AccessEntry";
+    constructor(logicalId: string, properties: EKSAccessEntryProperties, options?: $ResourceOptions);
+}
+//# sourceMappingURL=AWS-EKS-AccessEntry.d.ts.map

package/lib/AWS-EKS-AccessEntry.js

@@ -0,0 +1,13 @@
+import { Resource as $Resource } from "@awboost/cfn-template-builder/template/Resource";
+/**
+ * Resource type definition for `AWS::EKS::AccessEntry`.
+ * An object representing an Amazon EKS AccessEntry.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-accessentry.html}
+ */
+export class EKSAccessEntry extends $Resource {
+    static Type = "AWS::EKS::AccessEntry";
+    constructor(logicalId, properties, options) {
+        super(logicalId, EKSAccessEntry.Type, properties, options);
+    }
+}
+//# sourceMappingURL=AWS-EKS-AccessEntry.js.map

package/lib/AWS-EKS-Cluster.d.ts

@@ -6,6 +6,10 @@ import type { ResourceOptions as $ResourceOptions } from "@awboost/cfn-template-
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-cluster.html}
  */
 export type EKSClusterProperties = {
+    /**
+     * An object representing the Access Config to use for the cluster.
+     */
+    AccessConfig?: AccessConfig;
     EncryptionConfig?: EncryptionConfig[];
     /**
      * The Kubernetes network configuration for the cluster.
@@ -87,6 +91,21 @@ export type EKSClusterAttributes = {
      */
     OpenIdConnectIssuerUrl: string;
 };
+/**
+ * Type definition for `AWS::EKS::Cluster.AccessConfig`.
+ * An object representing the Access Config to use for the cluster.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-accessconfig.html}
+ */
+export type AccessConfig = {
+    /**
+     * Specify the authentication mode that should be used to create your cluster.
+     */
+    AuthenticationMode?: "CONFIG_MAP" | "API_AND_CONFIG_MAP" | "API";
+    /**
+     * Set this value to false to avoid creating a default cluster admin Access Entry using the IAM principal used to create the cluster.
+     */
+    BootstrapClusterCreatorAdminPermissions?: boolean;
+};
 /**
  * Type definition for `AWS::EKS::Cluster.ClusterLogging`.
  * The cluster control plane logging configuration for your cluster.