@awboost/cfn-resource-types 0.1.165 → 0.1.167

package/lib/AWS-CodePipeline-Pipeline.d.ts

@@ -75,6 +75,10 @@ export type ActionDeclaration = {
      * Represents information about an action type.
      */
     ActionTypeId: ActionTypeId;
+    /**
+     * The shell commands to run with your compute action in CodePipeline.
+     */
+    Commands?: string[];
     /**
      * The action's configuration. These are key-value pairs that specify input values for an action.
      */
@@ -89,6 +93,10 @@ export type ActionDeclaration = {
      */
     Namespace?: string;
     OutputArtifacts?: OutputArtifact[];
+    /**
+     * The list of variables that are to be exported from the compute action.
+     */
+    OutputVariables?: string[];
     /**
      * The action declaration's AWS Region, such as us-east-1.
      */
@@ -116,7 +124,7 @@ export type ActionTypeId = {
     /**
      * A category defines what kind of action can be taken in the stage, and constrains the provider type for the action. Valid categories are limited to one of the values below.
      */
-    Category: "Source" | "Build" | "Test" | "Deploy" | "Invoke" | "Approval";
+    Category: "Source" | "Build" | "Test" | "Deploy" | "Invoke" | "Approval" | "Compute";
     /**
      * The creator of the action being called. There are three valid values for the Owner field in the action category section within your pipeline structure: AWS, ThirdParty, and Custom.
      */
@@ -345,6 +353,10 @@ export type InputArtifact = {
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-codepipeline-pipeline-outputartifact.html}
  */
 export type OutputArtifact = {
+    /**
+     * The files that you want to associate with the output artifact that will be exported from the compute action.
+     */
+    Files?: string[];
     /**
      * The name of the output of an artifact, such as "My App".
      */

package/lib/AWS-EC2-VPNConnection.d.ts

@@ -18,10 +18,31 @@ export type EC2VPNConnectionProperties = {
        Default: ``false``
        */
     EnableAcceleration?: boolean;
+    /**
+       * The IPv4 CIDR on the customer gateway (on-premises) side of the VPN connection.
+       Default: ``0.0.0.0/0``
+       */
     LocalIpv4NetworkCidr?: string;
+    /**
+       * The IPv6 CIDR on the customer gateway (on-premises) side of the VPN connection.
+       Default: ``::/0``
+       */
     LocalIpv6NetworkCidr?: string;
+    /**
+       * The type of IPv4 address assigned to the outside interface of the customer gateway device.
+       Valid values: ``PrivateIpv4`` | ``PublicIpv4``
+       Default: ``PublicIpv4``
+       */
     OutsideIpAddressType?: string;
+    /**
+       * The IPv4 CIDR on the AWS side of the VPN connection.
+       Default: ``0.0.0.0/0``
+       */
     RemoteIpv4NetworkCidr?: string;
+    /**
+       * The IPv6 CIDR on the AWS side of the VPN connection.
+       Default: ``::/0``
+       */
     RemoteIpv6NetworkCidr?: string;
     /**
        * Indicates whether the VPN connection uses static routes only. Static routes must be used for devices that don't support BGP.
@@ -37,7 +58,15 @@ export type EC2VPNConnectionProperties = {
        You must specify either ``TransitGatewayId`` or ``VpnGatewayId``, but not both.
        */
     TransitGatewayId?: string;
+    /**
+       * The transit gateway attachment ID to use for the VPN tunnel.
+       Required if ``OutsideIpAddressType`` is set to ``PrivateIpv4``.
+       */
     TransportTransitGatewayAttachmentId?: string;
+    /**
+       * Indicate whether the VPN tunnels process IPv4 or IPv6 traffic.
+       Default: ``ipv4``
+       */
     TunnelInsideIpVersion?: string;
     /**
      * The type of VPN connection.
@@ -60,6 +89,64 @@ export type EC2VPNConnectionProperties = {
 export type EC2VPNConnectionAttributes = {
     VpnConnectionId: string;
 };
+/**
+ * Type definition for `AWS::EC2::VPNConnection.CloudwatchLogOptionsSpecification`.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpnconnection-cloudwatchlogoptionsspecification.html}
+ */
+export type CloudwatchLogOptionsSpecification = {
+    LogEnabled?: boolean;
+    LogGroupArn?: string;
+    LogOutputFormat?: "json" | "text";
+};
+/**
+ * Type definition for `AWS::EC2::VPNConnection.IKEVersionsRequestListValue`.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpnconnection-ikeversionsrequestlistvalue.html}
+ */
+export type IKEVersionsRequestListValue = {
+    Value?: "ikev1" | "ikev2";
+};
+/**
+ * Type definition for `AWS::EC2::VPNConnection.Phase1DHGroupNumbersRequestListValue`.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpnconnection-phase1dhgroupnumbersrequestlistvalue.html}
+ */
+export type Phase1DHGroupNumbersRequestListValue = {
+    Value?: 2 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24;
+};
+/**
+ * Type definition for `AWS::EC2::VPNConnection.Phase1EncryptionAlgorithmsRequestListValue`.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpnconnection-phase1encryptionalgorithmsrequestlistvalue.html}
+ */
+export type Phase1EncryptionAlgorithmsRequestListValue = {
+    Value?: "AES128" | "AES256" | "AES128-GCM-16" | "AES256-GCM-16";
+};
+/**
+ * Type definition for `AWS::EC2::VPNConnection.Phase1IntegrityAlgorithmsRequestListValue`.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpnconnection-phase1integrityalgorithmsrequestlistvalue.html}
+ */
+export type Phase1IntegrityAlgorithmsRequestListValue = {
+    Value?: "SHA1" | "SHA2-256" | "SHA2-384" | "SHA2-512";
+};
+/**
+ * Type definition for `AWS::EC2::VPNConnection.Phase2DHGroupNumbersRequestListValue`.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpnconnection-phase2dhgroupnumbersrequestlistvalue.html}
+ */
+export type Phase2DHGroupNumbersRequestListValue = {
+    Value?: 2 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24;
+};
+/**
+ * Type definition for `AWS::EC2::VPNConnection.Phase2EncryptionAlgorithmsRequestListValue`.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpnconnection-phase2encryptionalgorithmsrequestlistvalue.html}
+ */
+export type Phase2EncryptionAlgorithmsRequestListValue = {
+    Value?: "AES128" | "AES256" | "AES128-GCM-16" | "AES256-GCM-16";
+};
+/**
+ * Type definition for `AWS::EC2::VPNConnection.Phase2IntegrityAlgorithmsRequestListValue`.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpnconnection-phase2integrityalgorithmsrequestlistvalue.html}
+ */
+export type Phase2IntegrityAlgorithmsRequestListValue = {
+    Value?: "SHA1" | "SHA2-256" | "SHA2-384" | "SHA2-512";
+};
 /**
  * Type definition for `AWS::EC2::VPNConnection.Tag`.
  * Specifies a tag. For more information, see [Resource tags](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html).
@@ -75,17 +162,63 @@ export type Tag = {
      */
     Value: string;
 };
+/**
+ * Type definition for `AWS::EC2::VPNConnection.VpnTunnelLogOptionsSpecification`.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpnconnection-vpntunnellogoptionsspecification.html}
+ */
+export type VpnTunnelLogOptionsSpecification = {
+    CloudwatchLogOptions?: CloudwatchLogOptionsSpecification;
+};
 /**
  * Type definition for `AWS::EC2::VPNConnection.VpnTunnelOptionsSpecification`.
  * The tunnel options for a single VPN tunnel.
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpnconnection-vpntunneloptionsspecification.html}
  */
 export type VpnTunnelOptionsSpecification = {
+    DPDTimeoutAction?: "clear" | "none" | "restart";
+    /**
+     * @min `30`
+     */
+    DPDTimeoutSeconds?: number;
+    EnableTunnelLifecycleControl?: boolean;
+    IKEVersions?: IKEVersionsRequestListValue[];
+    LogOptions?: VpnTunnelLogOptionsSpecification;
+    Phase1DHGroupNumbers?: Phase1DHGroupNumbersRequestListValue[];
+    Phase1EncryptionAlgorithms?: Phase1EncryptionAlgorithmsRequestListValue[];
+    Phase1IntegrityAlgorithms?: Phase1IntegrityAlgorithmsRequestListValue[];
+    /**
+     * @min `900`
+     * @max `28800`
+     */
+    Phase1LifetimeSeconds?: number;
+    Phase2DHGroupNumbers?: Phase2DHGroupNumbersRequestListValue[];
+    Phase2EncryptionAlgorithms?: Phase2EncryptionAlgorithmsRequestListValue[];
+    Phase2IntegrityAlgorithms?: Phase2IntegrityAlgorithmsRequestListValue[];
+    /**
+     * @min `900`
+     * @max `3600`
+     */
+    Phase2LifetimeSeconds?: number;
     /**
        * The pre-shared key (PSK) to establish initial authentication between the virtual private gateway and customer gateway.
        Constraints: Allowed characters are alphanumeric characters, periods (.), and underscores (_). Must be between 8 and 64 characters in length and cannot start with zero (0).
        */
     PreSharedKey?: string;
+    /**
+     * @min `0`
+     * @max `100`
+     */
+    RekeyFuzzPercentage?: number;
+    /**
+     * @min `60`
+     */
+    RekeyMarginTimeSeconds?: number;
+    /**
+     * @min `64`
+     * @max `2048`
+     */
+    ReplayWindowSize?: number;
+    StartupAction?: "add" | "start";
     /**
        * The range of inside IP addresses for the tunnel. Any specified CIDR blocks must be unique across all VPN connections that use the same virtual private gateway.
        Constraints: A size /30 CIDR block from the ``169.254.0.0/16`` range. The following CIDR blocks are reserved and cannot be used:
@@ -98,6 +231,7 @@ export type VpnTunnelOptionsSpecification = {
         +   ``169.254.169.252/30``
        */
     TunnelInsideCidr?: string;
+    TunnelInsideIpv6Cidr?: string;
 };
 /**
  * Resource type definition for `AWS::EC2::VPNConnection`.

package/lib/AWS-GameLift-ContainerGroupDefinition.d.ts

@@ -26,6 +26,17 @@ export type GameLiftContainerGroupDefinitionProperties = {
      * Specifies whether the container group includes replica or daemon containers.
      */
     SchedulingStrategy?: "REPLICA" | "DAEMON";
+    /**
+     * A specific ContainerGroupDefinition version to be updated
+     * @min `0`
+     */
+    SourceVersionNumber?: number;
+    /**
+     * A collection of support container definitions that define the containers in this group.
+     * @minLength `1`
+     * @maxLength `10`
+     */
+    SupportContainerDefinitions?: any[];
     /**
      * An array of key-value pairs to apply to this resource.
      * @minLength `0`
@@ -73,6 +84,14 @@ export type GameLiftContainerGroupDefinitionAttributes = {
      * A time stamp indicating when this data object was created. Format is a number expressed in Unix time as milliseconds (for example "1469498468.057").
      */
     CreationTime: string;
+    /**
+     * A string indicating ContainerGroupDefinition status.
+     */
+    Status: "READY" | "COPYING" | "FAILED";
+    /**
+     * A string indicating the reason for ContainerGroupDefinition status.
+     */
+    StatusReason: string;
 };
 /**
  * Type definition for `AWS::GameLift::ContainerGroupDefinition.ContainerDefinition`.

package/lib/AWS-Lambda-EventSourceMapping.d.ts

@@ -156,6 +156,10 @@ export type LambdaEventSourceMappingProperties = {
      * With ``StartingPosition`` set to ``AT_TIMESTAMP``, the time from which to start reading, in Unix time seconds. ``StartingPositionTimestamp`` cannot be in the future.
      */
     StartingPositionTimestamp?: number;
+    /**
+       * A list of tags to add to the event source mapping.
+        You must have the ``lambda:TagResource``, ``lambda:UntagResource``, and ``lambda:ListTags`` permissions for your [principal](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_terms-and-concepts.html) to manage the CFN stack. If you don't have these permissions, there might be unexpected behavior with stack-level tags propagating to the resource during resource creation and update.
+       */
     Tags?: Tag[];
     /**
      * The name of the Kafka topic.
@@ -360,17 +364,18 @@ export type SourceAccessConfiguration = {
 };
 /**
  * Type definition for `AWS::Lambda::EventSourceMapping.Tag`.
+ * A [tag](https://docs.aws.amazon.com/lambda/latest/dg/tagging.html) to apply to the event source mapping.
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-eventsourcemapping-tag.html}
  */
 export type Tag = {
     /**
-     * The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+     * The key for this tag.
      * @minLength `1`
      * @maxLength `128`
      */
     Key: string;
     /**
-     * The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+     * The value for this tag.
      * @minLength `0`
      * @maxLength `256`
      */

package/lib/AWS-RDS-DBInstance.d.ts

@@ -273,16 +273,13 @@ export type RDSDBInstanceProperties = {
         +   ``CharacterSetName``
         +   ``DBClusterIdentifier``
         +   ``DBName``
-        +   ``DeleteAutomatedBackups``
         +   ``KmsKeyId``
         +   ``MasterUsername``
         +   ``MasterUserPassword``
-        +   ``PerformanceInsightsKMSKeyId``
-        +   ``PerformanceInsightsRetentionPeriod``
         +   ``PromotionTier``
         +   ``SourceDBInstanceIdentifier``
         +   ``SourceRegion``
-        +   ``StorageEncrypted`` (for an encrypted snapshot)
+        +   ``StorageEncrypted`` (for an unencrypted snapshot)
         +   ``Timezone``
         
         *Amazon Aurora*

package/lib/AWS-Route53Resolver-ResolverRule.d.ts

@@ -5,12 +5,6 @@ import type { ResourceOptions as $ResourceOptions } from "@awboost/cfn-template-
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverrule.html}
  */
 export type Route53ResolverResolverRuleProperties = {
-    /**
-     * The name server domain for queries to be delegated to if a query matches the delegation record.
-     * @minLength `1`
-     * @maxLength `256`
-     */
-    DelegationRecord?: string;
     /**
      * DNS queries for this domain name are forwarded to the IP addresses that are specified in TargetIps
      * @minLength `1`
@@ -97,6 +91,12 @@ export type TargetAddress = {
      * The protocol that you want to use to forward DNS queries.
      */
     Protocol?: "Do53" | "DoH";
+    /**
+     * The SNI of the target name servers for DoH/DoH-FIPS outbound endpoints
+     * @minLength `0`
+     * @maxLength `255`
+     */
+    ServerNameIndication?: string;
 };
 /**
  * Resource Type definition for AWS::Route53Resolver::ResolverRule

package/lib/AWS-SQS-Queue.d.ts

@@ -68,18 +68,18 @@ export type SQSQueueProperties = {
     ReceiveMessageWaitTimeSeconds?: number;
     /**
        * The string that includes the parameters for the permissions for the dead-letter queue redrive permission and which source queues can specify dead-letter queues as a JSON object. The parameters are as follows:
-        +  ``redrivePermission``: The permission type that defines which source queues can specify the current queue as the dead-letter queue. Valid values are:
-        +  ``allowAll``: (Default) Any source queues in this AWS account in the same Region can specify this queue as the dead-letter queue.
-        +  ``denyAll``: No source queues can specify this queue as the dead-letter queue.
-        +  ``byQueue``: Only queues specified by the ``sourceQueueArns`` parameter can specify this queue as the dead-letter queue.
+        +   ``redrivePermission``: The permission type that defines which source queues can specify the current queue as the dead-letter queue. Valid values are:
+        +   ``allowAll``: (Default) Any source queues in this AWS account in the same Region can specify this queue as the dead-letter queue.
+        +   ``denyAll``: No source queues can specify this queue as the dead-letter queue.
+        +   ``byQueue``: Only queues specified by the ``sourceQueueArns`` parameter can specify this queue as the dead-letter queue.
         
-        +  ``sourceQueueArns``: The Amazon Resource Names (ARN)s of the source queues that can specify this queue as the dead-letter queue and redrive messages. You can specify this parameter only when the ``redrivePermission`` parameter is set to ``byQueue``. You can specify up to 10 source queue ARNs. To allow more than 10 source queues to specify dead-letter queues, set the ``redrivePermission`` parameter to ``allowAll``.
+        +   ``sourceQueueArns``: The Amazon Resource Names (ARN)s of the source queues that can specify this queue as the dead-letter queue and redrive messages. You can specify this parameter only when the ``redrivePermission`` parameter is set to ``byQueue``. You can specify up to 10 source queue ARNs. To allow more than 10 source queues to specify dead-letter queues, set the ``redrivePermission`` parameter to ``allowAll``.
        */
     RedriveAllowPolicy?: Record<string, any> | string;
     /**
        * The string that includes the parameters for the dead-letter queue functionality of the source queue as a JSON object. The parameters are as follows:
-        +  ``deadLetterTargetArn``: The Amazon Resource Name (ARN) of the dead-letter queue to which SQS moves messages after the value of ``maxReceiveCount`` is exceeded.
-        +  ``maxReceiveCount``: The number of times a message is delivered to the source queue before being moved to the dead-letter queue. When the ``ReceiveCount`` for a message exceeds the ``maxReceiveCount`` for a queue, SQS moves the message to the dead-letter-queue.
+        +   ``deadLetterTargetArn``: The Amazon Resource Name (ARN) of the dead-letter queue to which SQS moves messages after the value of ``maxReceiveCount`` is exceeded.
+        +   ``maxReceiveCount``: The number of times a message is received by a consumer of the source queue before being moved to the dead-letter queue. When the ``ReceiveCount`` for a message exceeds the ``maxReceiveCount`` for a queue, SQS moves the message to the dead-letter-queue.
         
         The dead-letter queue of a FIFO queue must also be a FIFO queue. Similarly, the dead-letter queue of a standard queue must also be a standard queue.
          *JSON*

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@awboost/cfn-resource-types",
-  "version": "0.1.165",
+  "version": "0.1.167",
   "publishConfig": {
     "access": "public"
   },