@awboost/cfn-resource-types 0.1.35 → 0.1.37
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/lib/AWS-AppConfig-Extension.d.ts +1 -0
- package/lib/AWS-ApplicationInsights-Application.d.ts +72 -0
- package/lib/AWS-Batch-JobDefinition.d.ts +58 -0
- package/lib/AWS-EC2-SecurityGroup.d.ts +25 -0
- package/lib/AWS-EC2-VPCCidrBlock.d.ts +30 -0
- package/lib/AWS-IAM-UserPolicy.d.ts +19 -8
- package/lib/AWS-IAM-UserPolicy.js +3 -1
- package/lib/AWS-LakeFormation-PrincipalPermissions.d.ts +92 -4
- package/lib/AWS-LakeFormation-PrincipalPermissions.js +1 -2
- package/lib/AWS-Oam-Link.d.ts +1 -1
- package/lib/AWS-SQS-Queue.d.ts +7 -3
- package/lib/AWS-SQS-Queue.js +3 -1
- package/lib/AWS-SSM-Parameter.d.ts +4 -4
- package/lib/AWS-SSM-Parameter.js +1 -1
- package/lib/AWS-WAFv2-RuleGroup.d.ts +6 -0
- package/lib/AWS-WAFv2-WebACL.d.ts +6 -0
- package/package.json +1 -1
|
@@ -5,6 +5,10 @@ import type { ResourceOptions as $ResourceOptions } from "@awboost/cfn-template-
|
|
|
5
5
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-applicationinsights-application.html}
|
|
6
6
|
*/
|
|
7
7
|
export type ApplicationInsightsApplicationProperties = {
|
|
8
|
+
/**
|
|
9
|
+
* If set to true, the managed policies for SSM and CW will be attached to the instance roles if they are missing
|
|
10
|
+
*/
|
|
11
|
+
AttachMissingPermission?: boolean;
|
|
8
12
|
/**
|
|
9
13
|
* If set to true, application will be configured with recommended monitoring configuration.
|
|
10
14
|
*/
|
|
@@ -178,6 +182,18 @@ export type ConfigurationDetails = {
|
|
|
178
182
|
* A list of logs to monitor for the component.
|
|
179
183
|
*/
|
|
180
184
|
Logs?: Log[];
|
|
185
|
+
/**
|
|
186
|
+
* The NetWeaver Prometheus Exporter settings.
|
|
187
|
+
*/
|
|
188
|
+
NetWeaverPrometheusExporter?: NetWeaverPrometheusExporter;
|
|
189
|
+
/**
|
|
190
|
+
* A list of processes to monitor for the component. Only Windows EC2 instances can have a processes section.
|
|
191
|
+
*/
|
|
192
|
+
Processes?: Process[];
|
|
193
|
+
/**
|
|
194
|
+
* The SQL Prometheus Exporter settings.
|
|
195
|
+
*/
|
|
196
|
+
SQLServerPrometheusExporter?: SQLServerPrometheusExporter;
|
|
181
197
|
/**
|
|
182
198
|
* A list of Windows Events to log.
|
|
183
199
|
*/
|
|
@@ -348,6 +364,58 @@ export type LogPatternSet = {
|
|
|
348
364
|
*/
|
|
349
365
|
PatternSetName: string;
|
|
350
366
|
};
|
|
367
|
+
/**
|
|
368
|
+
* Type definition for `AWS::ApplicationInsights::Application.NetWeaverPrometheusExporter`.
|
|
369
|
+
* The NetWeaver Prometheus Exporter Settings.
|
|
370
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-applicationinsights-application-netweaverprometheusexporter.html}
|
|
371
|
+
*/
|
|
372
|
+
export type NetWeaverPrometheusExporter = {
|
|
373
|
+
/**
|
|
374
|
+
* SAP instance numbers for ASCS, ERS, and App Servers.
|
|
375
|
+
*/
|
|
376
|
+
InstanceNumbers: string[];
|
|
377
|
+
/**
|
|
378
|
+
* Prometheus exporter port.
|
|
379
|
+
*/
|
|
380
|
+
PrometheusPort?: string;
|
|
381
|
+
/**
|
|
382
|
+
* SAP NetWeaver SID.
|
|
383
|
+
*/
|
|
384
|
+
SAPSID: string;
|
|
385
|
+
};
|
|
386
|
+
/**
|
|
387
|
+
* Type definition for `AWS::ApplicationInsights::Application.Process`.
|
|
388
|
+
* A process to be monitored for the component.
|
|
389
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-applicationinsights-application-process.html}
|
|
390
|
+
*/
|
|
391
|
+
export type Process = {
|
|
392
|
+
/**
|
|
393
|
+
* A list of metrics to monitor for the component.
|
|
394
|
+
*/
|
|
395
|
+
AlarmMetrics: AlarmMetric[];
|
|
396
|
+
/**
|
|
397
|
+
* The name of the process to be monitored for the component.
|
|
398
|
+
* @minLength `1`
|
|
399
|
+
* @maxLength `256`
|
|
400
|
+
* @pattern `^[a-zA-Z0-9_,-]+$`
|
|
401
|
+
*/
|
|
402
|
+
ProcessName: string;
|
|
403
|
+
};
|
|
404
|
+
/**
|
|
405
|
+
* Type definition for `AWS::ApplicationInsights::Application.SQLServerPrometheusExporter`.
|
|
406
|
+
* The SQL prometheus exporter settings.
|
|
407
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-applicationinsights-application-sqlserverprometheusexporter.html}
|
|
408
|
+
*/
|
|
409
|
+
export type SQLServerPrometheusExporter = {
|
|
410
|
+
/**
|
|
411
|
+
* Prometheus exporter port.
|
|
412
|
+
*/
|
|
413
|
+
PrometheusPort: string;
|
|
414
|
+
/**
|
|
415
|
+
* Secret name which managers SQL exporter connection. e.g. {"data_source_name": "sqlserver://<USERNAME>:<PASSWORD>@localhost:1433"}
|
|
416
|
+
*/
|
|
417
|
+
SQLSecretName: string;
|
|
418
|
+
};
|
|
351
419
|
/**
|
|
352
420
|
* Type definition for `AWS::ApplicationInsights::Application.SubComponentConfigurationDetails`.
|
|
353
421
|
* The configuration settings of sub components.
|
|
@@ -362,6 +430,10 @@ export type SubComponentConfigurationDetails = {
|
|
|
362
430
|
* A list of logs to monitor for the component.
|
|
363
431
|
*/
|
|
364
432
|
Logs?: Log[];
|
|
433
|
+
/**
|
|
434
|
+
* A list of processes to monitor for the component. Only Windows EC2 instances can have a processes section.
|
|
435
|
+
*/
|
|
436
|
+
Processes?: Process[];
|
|
365
437
|
/**
|
|
366
438
|
* A list of Windows Events to log.
|
|
367
439
|
*/
|
|
@@ -6,6 +6,7 @@ import type { ResourceOptions as $ResourceOptions } from "@awboost/cfn-template-
|
|
|
6
6
|
*/
|
|
7
7
|
export type BatchJobDefinitionProperties = {
|
|
8
8
|
ContainerProperties?: ContainerProperties;
|
|
9
|
+
EcsProperties?: EcsProperties;
|
|
9
10
|
EksProperties?: EksProperties;
|
|
10
11
|
JobDefinitionName?: string;
|
|
11
12
|
NodeProperties?: NodeProperties;
|
|
@@ -71,6 +72,29 @@ export type Device = {
|
|
|
71
72
|
HostPath?: string;
|
|
72
73
|
Permissions?: string[];
|
|
73
74
|
};
|
|
75
|
+
/**
|
|
76
|
+
* Type definition for `AWS::Batch::JobDefinition.EcsProperties`.
|
|
77
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-jobdefinition-ecsproperties.html}
|
|
78
|
+
*/
|
|
79
|
+
export type EcsProperties = {
|
|
80
|
+
TaskProperties: EcsTaskProperties[];
|
|
81
|
+
};
|
|
82
|
+
/**
|
|
83
|
+
* Type definition for `AWS::Batch::JobDefinition.EcsTaskProperties`.
|
|
84
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-jobdefinition-ecstaskproperties.html}
|
|
85
|
+
*/
|
|
86
|
+
export type EcsTaskProperties = {
|
|
87
|
+
Containers?: TaskContainerProperties[];
|
|
88
|
+
EphemeralStorage?: EphemeralStorage;
|
|
89
|
+
ExecutionRoleArn?: string;
|
|
90
|
+
IpcMode?: string;
|
|
91
|
+
NetworkConfiguration?: NetworkConfiguration;
|
|
92
|
+
PidMode?: string;
|
|
93
|
+
PlatformVersion?: string;
|
|
94
|
+
RuntimePlatform?: RuntimePlatform;
|
|
95
|
+
TaskRoleArn?: string;
|
|
96
|
+
Volumes?: Volumes[];
|
|
97
|
+
};
|
|
74
98
|
/**
|
|
75
99
|
* Type definition for `AWS::Batch::JobDefinition.EfsVolumeConfiguration`.
|
|
76
100
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-jobdefinition-efsvolumeconfiguration.html}
|
|
@@ -264,6 +288,8 @@ export type NodeProperties = {
|
|
|
264
288
|
*/
|
|
265
289
|
export type NodeRangeProperty = {
|
|
266
290
|
Container?: ContainerProperties;
|
|
291
|
+
EcsProperties?: EcsProperties;
|
|
292
|
+
InstanceTypes?: string[];
|
|
267
293
|
TargetNodes: string;
|
|
268
294
|
};
|
|
269
295
|
/**
|
|
@@ -274,8 +300,10 @@ export type PodProperties = {
|
|
|
274
300
|
Containers?: EksContainer[];
|
|
275
301
|
DnsPolicy?: string;
|
|
276
302
|
HostNetwork?: boolean;
|
|
303
|
+
InitContainers?: EksContainer[];
|
|
277
304
|
Metadata?: Metadata;
|
|
278
305
|
ServiceAccountName?: string;
|
|
306
|
+
ShareProcessNamespace?: boolean;
|
|
279
307
|
Volumes?: EksVolume[];
|
|
280
308
|
};
|
|
281
309
|
/**
|
|
@@ -317,6 +345,36 @@ export type Secret = {
|
|
|
317
345
|
Name: string;
|
|
318
346
|
ValueFrom: string;
|
|
319
347
|
};
|
|
348
|
+
/**
|
|
349
|
+
* Type definition for `AWS::Batch::JobDefinition.TaskContainerDependency`.
|
|
350
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-jobdefinition-taskcontainerdependency.html}
|
|
351
|
+
*/
|
|
352
|
+
export type TaskContainerDependency = {
|
|
353
|
+
Condition: string;
|
|
354
|
+
ContainerName: string;
|
|
355
|
+
};
|
|
356
|
+
/**
|
|
357
|
+
* Type definition for `AWS::Batch::JobDefinition.TaskContainerProperties`.
|
|
358
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-jobdefinition-taskcontainerproperties.html}
|
|
359
|
+
*/
|
|
360
|
+
export type TaskContainerProperties = {
|
|
361
|
+
Command?: string[];
|
|
362
|
+
DependsOn?: TaskContainerDependency[];
|
|
363
|
+
Environment?: Environment[];
|
|
364
|
+
Essential?: boolean;
|
|
365
|
+
Image: string;
|
|
366
|
+
LinuxParameters?: LinuxParameters;
|
|
367
|
+
LogConfiguration?: LogConfiguration;
|
|
368
|
+
MountPoints?: MountPoints[];
|
|
369
|
+
Name?: string;
|
|
370
|
+
Privileged?: boolean;
|
|
371
|
+
ReadonlyRootFilesystem?: boolean;
|
|
372
|
+
RepositoryCredentials?: RepositoryCredentials;
|
|
373
|
+
ResourceRequirements?: ResourceRequirement[];
|
|
374
|
+
Secrets?: Secret[];
|
|
375
|
+
Ulimits?: Ulimit[];
|
|
376
|
+
User?: string;
|
|
377
|
+
};
|
|
320
378
|
/**
|
|
321
379
|
* Type definition for `AWS::Batch::JobDefinition.Timeout`.
|
|
322
380
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-jobdefinition-timeout.html}
|
|
@@ -5,11 +5,29 @@ import type { ResourceOptions as $ResourceOptions } from "@awboost/cfn-template-
|
|
|
5
5
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-securitygroup.html}
|
|
6
6
|
*/
|
|
7
7
|
export type EC2SecurityGroupProperties = {
|
|
8
|
+
/**
|
|
9
|
+
* A description for the security group.
|
|
10
|
+
*/
|
|
8
11
|
GroupDescription: string;
|
|
12
|
+
/**
|
|
13
|
+
* The name of the security group.
|
|
14
|
+
*/
|
|
9
15
|
GroupName?: string;
|
|
16
|
+
/**
|
|
17
|
+
* [VPC only] The outbound rules associated with the security group. There is a short interruption during which you cannot connect to the security group.
|
|
18
|
+
*/
|
|
10
19
|
SecurityGroupEgress?: Egress[];
|
|
20
|
+
/**
|
|
21
|
+
* The inbound rules associated with the security group. There is a short interruption during which you cannot connect to the security group.
|
|
22
|
+
*/
|
|
11
23
|
SecurityGroupIngress?: Ingress[];
|
|
24
|
+
/**
|
|
25
|
+
* Any tags assigned to the security group.
|
|
26
|
+
*/
|
|
12
27
|
Tags?: Tag[];
|
|
28
|
+
/**
|
|
29
|
+
* The ID of the VPC for the security group.
|
|
30
|
+
*/
|
|
13
31
|
VpcId?: string;
|
|
14
32
|
};
|
|
15
33
|
/**
|
|
@@ -17,7 +35,13 @@ export type EC2SecurityGroupProperties = {
|
|
|
17
35
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-securitygroup.html#aws-resource-ec2-securitygroup-return-values}
|
|
18
36
|
*/
|
|
19
37
|
export type EC2SecurityGroupAttributes = {
|
|
38
|
+
/**
|
|
39
|
+
* The group ID of the specified security group.
|
|
40
|
+
*/
|
|
20
41
|
GroupId: string;
|
|
42
|
+
/**
|
|
43
|
+
* The group name or group ID depending on whether the SG is created in default or specific VPC
|
|
44
|
+
*/
|
|
21
45
|
Id: string;
|
|
22
46
|
};
|
|
23
47
|
/**
|
|
@@ -32,6 +56,7 @@ export type Egress = {
|
|
|
32
56
|
DestinationSecurityGroupId?: string;
|
|
33
57
|
FromPort?: number;
|
|
34
58
|
IpProtocol: string;
|
|
59
|
+
SourceSecurityGroupId?: string;
|
|
35
60
|
ToPort?: number;
|
|
36
61
|
};
|
|
37
62
|
/**
|
|
@@ -5,14 +5,41 @@ import type { ResourceOptions as $ResourceOptions } from "@awboost/cfn-template-
|
|
|
5
5
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpccidrblock.html}
|
|
6
6
|
*/
|
|
7
7
|
export type EC2VPCCidrBlockProperties = {
|
|
8
|
+
/**
|
|
9
|
+
* Requests an Amazon-provided IPv6 CIDR block with a /56 prefix length for the VPC. You cannot specify the range of IPv6 addresses, or the size of the CIDR block.
|
|
10
|
+
*/
|
|
8
11
|
AmazonProvidedIpv6CidrBlock?: boolean;
|
|
12
|
+
/**
|
|
13
|
+
* An IPv4 CIDR block to associate with the VPC.
|
|
14
|
+
*/
|
|
9
15
|
CidrBlock?: string;
|
|
16
|
+
/**
|
|
17
|
+
* The ID of the IPv4 IPAM pool to Associate a CIDR from to a VPC.
|
|
18
|
+
*/
|
|
10
19
|
Ipv4IpamPoolId?: string;
|
|
20
|
+
/**
|
|
21
|
+
* The netmask length of the IPv4 CIDR you would like to associate from an Amazon VPC IP Address Manager (IPAM) pool.
|
|
22
|
+
*/
|
|
11
23
|
Ipv4NetmaskLength?: number;
|
|
24
|
+
/**
|
|
25
|
+
* An IPv6 CIDR block from the IPv6 address pool.
|
|
26
|
+
*/
|
|
12
27
|
Ipv6CidrBlock?: string;
|
|
28
|
+
/**
|
|
29
|
+
* The ID of the IPv6 IPAM pool to Associate a CIDR from to a VPC.
|
|
30
|
+
*/
|
|
13
31
|
Ipv6IpamPoolId?: string;
|
|
32
|
+
/**
|
|
33
|
+
* The netmask length of the IPv6 CIDR you would like to associate from an Amazon VPC IP Address Manager (IPAM) pool.
|
|
34
|
+
*/
|
|
14
35
|
Ipv6NetmaskLength?: number;
|
|
36
|
+
/**
|
|
37
|
+
* The ID of an IPv6 address pool from which to allocate the IPv6 CIDR block.
|
|
38
|
+
*/
|
|
15
39
|
Ipv6Pool?: string;
|
|
40
|
+
/**
|
|
41
|
+
* The ID of the VPC.
|
|
42
|
+
*/
|
|
16
43
|
VpcId: string;
|
|
17
44
|
};
|
|
18
45
|
/**
|
|
@@ -20,6 +47,9 @@ export type EC2VPCCidrBlockProperties = {
|
|
|
20
47
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpccidrblock.html#aws-resource-ec2-vpccidrblock-return-values}
|
|
21
48
|
*/
|
|
22
49
|
export type EC2VPCCidrBlockAttributes = {
|
|
50
|
+
/**
|
|
51
|
+
* The Id of the VPC associated CIDR Block.
|
|
52
|
+
*/
|
|
23
53
|
Id: string;
|
|
24
54
|
};
|
|
25
55
|
/**
|
|
@@ -2,26 +2,37 @@ import { Resource as $Resource } from "@awboost/cfn-template-builder/template/re
|
|
|
2
2
|
import type { ResourceOptions as $ResourceOptions } from "@awboost/cfn-template-builder/template";
|
|
3
3
|
/**
|
|
4
4
|
* Resource type definition for `AWS::IAM::UserPolicy`.
|
|
5
|
-
*
|
|
5
|
+
* Adds or updates an inline policy document that is embedded in the specified IAM user.
|
|
6
|
+
An IAM user can also have a managed policy attached to it. To attach a managed policy to a user, use [AWS::IAM::User](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-user.html). To create a new managed policy, use [AWS::IAM::ManagedPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-managedpolicy.html). For information about policies, see [Managed policies and inline policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-vs-inline.html) in the *IAM User Guide*.
|
|
7
|
+
For information about the maximum number of inline policies that you can embed in a user, see [IAM and quotas](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html) in the *IAM User Guide*.
|
|
6
8
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-userpolicy.html}
|
|
7
9
|
*/
|
|
8
10
|
export type IAMUserPolicyProperties = {
|
|
9
11
|
/**
|
|
10
|
-
|
|
11
|
-
|
|
12
|
+
* The policy document.
|
|
13
|
+
You must provide policies in JSON format in IAM. However, for CFN templates formatted in YAML, you can provide the policy in JSON or YAML format. CFN always converts a YAML policy to JSON format before submitting it to IAM.
|
|
14
|
+
The [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex) used to validate this parameter is a string of characters consisting of the following:
|
|
15
|
+
+ Any printable ASCII character ranging from the space character (``\u0020``) through the end of the ASCII character range
|
|
16
|
+
+ The printable characters in the Basic Latin and Latin-1 Supplement character set (through ``\u00FF``)
|
|
17
|
+
+ The special characters tab (``\u0009``), line feed (``\u000A``), and carriage return (``\u000D``)
|
|
18
|
+
*/
|
|
12
19
|
PolicyDocument?: Record<string, any>;
|
|
13
20
|
/**
|
|
14
|
-
|
|
15
|
-
|
|
21
|
+
* The name of the policy document.
|
|
22
|
+
This parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex)) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-
|
|
23
|
+
*/
|
|
16
24
|
PolicyName: string;
|
|
17
25
|
/**
|
|
18
|
-
|
|
19
|
-
|
|
26
|
+
* The name of the user to associate the policy with.
|
|
27
|
+
This parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex)) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-
|
|
28
|
+
*/
|
|
20
29
|
UserName: string;
|
|
21
30
|
};
|
|
22
31
|
/**
|
|
23
32
|
* Resource type definition for `AWS::IAM::UserPolicy`.
|
|
24
|
-
*
|
|
33
|
+
* Adds or updates an inline policy document that is embedded in the specified IAM user.
|
|
34
|
+
An IAM user can also have a managed policy attached to it. To attach a managed policy to a user, use [AWS::IAM::User](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-user.html). To create a new managed policy, use [AWS::IAM::ManagedPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-managedpolicy.html). For information about policies, see [Managed policies and inline policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-vs-inline.html) in the *IAM User Guide*.
|
|
35
|
+
For information about the maximum number of inline policies that you can embed in a user, see [IAM and quotas](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html) in the *IAM User Guide*.
|
|
25
36
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-userpolicy.html}
|
|
26
37
|
*/
|
|
27
38
|
export declare class IAMUserPolicy extends $Resource<"AWS::IAM::UserPolicy", IAMUserPolicyProperties, Record<string, never>> {
|
|
@@ -1,7 +1,9 @@
|
|
|
1
1
|
import { Resource as $Resource } from "@awboost/cfn-template-builder/template/resource";
|
|
2
2
|
/**
|
|
3
3
|
* Resource type definition for `AWS::IAM::UserPolicy`.
|
|
4
|
-
*
|
|
4
|
+
* Adds or updates an inline policy document that is embedded in the specified IAM user.
|
|
5
|
+
An IAM user can also have a managed policy attached to it. To attach a managed policy to a user, use [AWS::IAM::User](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-user.html). To create a new managed policy, use [AWS::IAM::ManagedPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-managedpolicy.html). For information about policies, see [Managed policies and inline policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-vs-inline.html) in the *IAM User Guide*.
|
|
6
|
+
For information about the maximum number of inline policies that you can embed in a user, see [IAM and quotas](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html) in the *IAM User Guide*.
|
|
5
7
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-userpolicy.html}
|
|
6
8
|
*/
|
|
7
9
|
export class IAMUserPolicy extends $Resource {
|
|
@@ -1,19 +1,31 @@
|
|
|
1
1
|
import { Resource as $Resource } from "@awboost/cfn-template-builder/template/resource";
|
|
2
2
|
import type { ResourceOptions as $ResourceOptions } from "@awboost/cfn-template-builder/template";
|
|
3
3
|
/**
|
|
4
|
-
*
|
|
5
|
-
* A resource schema representing a Lake Formation Permission.
|
|
4
|
+
* The ``AWS::LakeFormation::PrincipalPermissions`` resource represents the permissions that a principal has on a GLUDC resource (such as GLUlong databases or GLUlong tables). When you create a ``PrincipalPermissions`` resource, the permissions are granted via the LFlong ``GrantPermissions`` API operation. When you delete a ``PrincipalPermissions`` resource, the permissions on principal-resource pair are revoked via the LFlong ``RevokePermissions`` API operation.
|
|
6
5
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lakeformation-principalpermissions.html}
|
|
7
6
|
*/
|
|
8
7
|
export type LakeFormationPrincipalPermissionsProperties = {
|
|
9
8
|
/**
|
|
9
|
+
* The identifier for the GLUDC. By default, the account ID. The GLUDC is the persistent metadata store. It contains database definitions, table definitions, and other control information to manage your Lake Formation environment.
|
|
10
10
|
* @minLength `12`
|
|
11
11
|
* @maxLength `12`
|
|
12
12
|
*/
|
|
13
13
|
Catalog?: string;
|
|
14
|
+
/**
|
|
15
|
+
* The permissions granted or revoked.
|
|
16
|
+
*/
|
|
14
17
|
Permissions: Permission[];
|
|
18
|
+
/**
|
|
19
|
+
* Indicates the ability to grant permissions (as a subset of permissions granted).
|
|
20
|
+
*/
|
|
15
21
|
PermissionsWithGrantOption: Permission[];
|
|
22
|
+
/**
|
|
23
|
+
* The principal to be granted a permission.
|
|
24
|
+
*/
|
|
16
25
|
Principal: DataLakePrincipal;
|
|
26
|
+
/**
|
|
27
|
+
* The resource to be granted or revoked permissions.
|
|
28
|
+
*/
|
|
17
29
|
Resource: Resource;
|
|
18
30
|
};
|
|
19
31
|
/**
|
|
@@ -31,22 +43,29 @@ export type LakeFormationPrincipalPermissionsAttributes = {
|
|
|
31
43
|
export type CatalogResource = Record<string, any>;
|
|
32
44
|
/**
|
|
33
45
|
* Type definition for `AWS::LakeFormation::PrincipalPermissions.ColumnWildcard`.
|
|
46
|
+
* A wildcard object, consisting of an optional list of excluded column names or indexes.
|
|
34
47
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lakeformation-principalpermissions-columnwildcard.html}
|
|
35
48
|
*/
|
|
36
49
|
export type ColumnWildcard = {
|
|
50
|
+
/**
|
|
51
|
+
* Excludes column names. Any column with this name will be excluded.
|
|
52
|
+
*/
|
|
37
53
|
ExcludedColumnNames?: string[];
|
|
38
54
|
};
|
|
39
55
|
/**
|
|
40
56
|
* Type definition for `AWS::LakeFormation::PrincipalPermissions.DatabaseResource`.
|
|
57
|
+
* A structure for the database object.
|
|
41
58
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lakeformation-principalpermissions-databaseresource.html}
|
|
42
59
|
*/
|
|
43
60
|
export type DatabaseResource = {
|
|
44
61
|
/**
|
|
62
|
+
* The identifier for the Data Catalog. By default, it is the account ID of the caller.
|
|
45
63
|
* @minLength `12`
|
|
46
64
|
* @maxLength `12`
|
|
47
65
|
*/
|
|
48
66
|
CatalogId: string;
|
|
49
67
|
/**
|
|
68
|
+
* The name of the database resource. Unique to the Data Catalog.
|
|
50
69
|
* @minLength `1`
|
|
51
70
|
* @maxLength `255`
|
|
52
71
|
*/
|
|
@@ -54,25 +73,30 @@ export type DatabaseResource = {
|
|
|
54
73
|
};
|
|
55
74
|
/**
|
|
56
75
|
* Type definition for `AWS::LakeFormation::PrincipalPermissions.DataCellsFilterResource`.
|
|
76
|
+
* A structure that describes certain columns on certain rows.
|
|
57
77
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lakeformation-principalpermissions-datacellsfilterresource.html}
|
|
58
78
|
*/
|
|
59
79
|
export type DataCellsFilterResource = {
|
|
60
80
|
/**
|
|
81
|
+
* A database in the GLUDC.
|
|
61
82
|
* @minLength `1`
|
|
62
83
|
* @maxLength `255`
|
|
63
84
|
*/
|
|
64
85
|
DatabaseName: string;
|
|
65
86
|
/**
|
|
87
|
+
* The name given by the user to the data filter cell.
|
|
66
88
|
* @minLength `1`
|
|
67
89
|
* @maxLength `255`
|
|
68
90
|
*/
|
|
69
91
|
Name: string;
|
|
70
92
|
/**
|
|
93
|
+
* The ID of the catalog to which the table belongs.
|
|
71
94
|
* @minLength `12`
|
|
72
95
|
* @maxLength `12`
|
|
73
96
|
*/
|
|
74
97
|
TableCatalogId: string;
|
|
75
98
|
/**
|
|
99
|
+
* The name of the table.
|
|
76
100
|
* @minLength `1`
|
|
77
101
|
* @maxLength `255`
|
|
78
102
|
*/
|
|
@@ -80,10 +104,12 @@ export type DataCellsFilterResource = {
|
|
|
80
104
|
};
|
|
81
105
|
/**
|
|
82
106
|
* Type definition for `AWS::LakeFormation::PrincipalPermissions.DataLakePrincipal`.
|
|
107
|
+
* The LFlong principal.
|
|
83
108
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lakeformation-principalpermissions-datalakeprincipal.html}
|
|
84
109
|
*/
|
|
85
110
|
export type DataLakePrincipal = {
|
|
86
111
|
/**
|
|
112
|
+
* An identifier for the LFlong principal.
|
|
87
113
|
* @minLength `1`
|
|
88
114
|
* @maxLength `255`
|
|
89
115
|
*/
|
|
@@ -91,27 +117,35 @@ export type DataLakePrincipal = {
|
|
|
91
117
|
};
|
|
92
118
|
/**
|
|
93
119
|
* Type definition for `AWS::LakeFormation::PrincipalPermissions.DataLocationResource`.
|
|
120
|
+
* A structure for a data location object where permissions are granted or revoked.
|
|
94
121
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lakeformation-principalpermissions-datalocationresource.html}
|
|
95
122
|
*/
|
|
96
123
|
export type DataLocationResource = {
|
|
97
124
|
/**
|
|
125
|
+
* The identifier for the GLUDC where the location is registered with LFlong.
|
|
98
126
|
* @minLength `12`
|
|
99
127
|
* @maxLength `12`
|
|
100
128
|
*/
|
|
101
129
|
CatalogId: string;
|
|
130
|
+
/**
|
|
131
|
+
* The Amazon Resource Name (ARN) that uniquely identifies the data location resource.
|
|
132
|
+
*/
|
|
102
133
|
ResourceArn: string;
|
|
103
134
|
};
|
|
104
135
|
/**
|
|
105
136
|
* Type definition for `AWS::LakeFormation::PrincipalPermissions.LFTag`.
|
|
137
|
+
* The LF-tag key and values attached to a resource.
|
|
106
138
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lakeformation-principalpermissions-lftag.html}
|
|
107
139
|
*/
|
|
108
140
|
export type LFTag = {
|
|
109
141
|
/**
|
|
142
|
+
* The key-name for the LF-tag.
|
|
110
143
|
* @minLength `1`
|
|
111
144
|
* @maxLength `128`
|
|
112
145
|
*/
|
|
113
146
|
TagKey?: string;
|
|
114
147
|
/**
|
|
148
|
+
* A list of possible values of the corresponding ``TagKey`` of an LF-tag key-value pair.
|
|
115
149
|
* @minLength `1`
|
|
116
150
|
* @maxLength `50`
|
|
117
151
|
*/
|
|
@@ -119,20 +153,24 @@ export type LFTag = {
|
|
|
119
153
|
};
|
|
120
154
|
/**
|
|
121
155
|
* Type definition for `AWS::LakeFormation::PrincipalPermissions.LFTagKeyResource`.
|
|
156
|
+
* A structure containing an LF-tag key and values for a resource.
|
|
122
157
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lakeformation-principalpermissions-lftagkeyresource.html}
|
|
123
158
|
*/
|
|
124
159
|
export type LFTagKeyResource = {
|
|
125
160
|
/**
|
|
161
|
+
* The identifier for the GLUDC where the location is registered with GLUDC.
|
|
126
162
|
* @minLength `12`
|
|
127
163
|
* @maxLength `12`
|
|
128
164
|
*/
|
|
129
165
|
CatalogId: string;
|
|
130
166
|
/**
|
|
167
|
+
* The key-name for the LF-tag.
|
|
131
168
|
* @minLength `1`
|
|
132
169
|
* @maxLength `255`
|
|
133
170
|
*/
|
|
134
171
|
TagKey: string;
|
|
135
172
|
/**
|
|
173
|
+
* A list of possible values for the corresponding ``TagKey`` of an LF-tag key-value pair.
|
|
136
174
|
* @minLength `1`
|
|
137
175
|
* @maxLength `50`
|
|
138
176
|
*/
|
|
@@ -140,19 +178,26 @@ export type LFTagKeyResource = {
|
|
|
140
178
|
};
|
|
141
179
|
/**
|
|
142
180
|
* Type definition for `AWS::LakeFormation::PrincipalPermissions.LFTagPolicyResource`.
|
|
181
|
+
* A list of LF-tag conditions that define a resource's LF-tag policy.
|
|
182
|
+
A structure that allows an admin to grant user permissions on certain conditions. For example, granting a role access to all columns that do not have the LF-tag 'PII' in tables that have the LF-tag 'Prod'.
|
|
143
183
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lakeformation-principalpermissions-lftagpolicyresource.html}
|
|
144
184
|
*/
|
|
145
185
|
export type LFTagPolicyResource = {
|
|
146
186
|
/**
|
|
187
|
+
* The identifier for the GLUDC. The GLUDC is the persistent metadata store. It contains database definitions, table definitions, and other control information to manage your LFlong environment.
|
|
147
188
|
* @minLength `12`
|
|
148
189
|
* @maxLength `12`
|
|
149
190
|
*/
|
|
150
191
|
CatalogId: string;
|
|
151
192
|
/**
|
|
193
|
+
* A list of LF-tag conditions that apply to the resource's LF-tag policy.
|
|
152
194
|
* @minLength `1`
|
|
153
195
|
* @maxLength `5`
|
|
154
196
|
*/
|
|
155
197
|
Expression: LFTag[];
|
|
198
|
+
/**
|
|
199
|
+
* The resource type for which the LF-tag policy applies.
|
|
200
|
+
*/
|
|
156
201
|
ResourceType: ResourceType;
|
|
157
202
|
};
|
|
158
203
|
/**
|
|
@@ -162,16 +207,41 @@ export type LFTagPolicyResource = {
|
|
|
162
207
|
export type Permission = "ALL" | "SELECT" | "ALTER" | "DROP" | "DELETE" | "INSERT" | "DESCRIBE" | "CREATE_DATABASE" | "CREATE_TABLE" | "DATA_LOCATION_ACCESS" | "CREATE_TAG" | "ASSOCIATE";
|
|
163
208
|
/**
|
|
164
209
|
* Type definition for `AWS::LakeFormation::PrincipalPermissions.Resource`.
|
|
210
|
+
* A structure for the resource.
|
|
165
211
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lakeformation-principalpermissions-resource.html}
|
|
166
212
|
*/
|
|
167
213
|
export type Resource = {
|
|
214
|
+
/**
|
|
215
|
+
* The identifier for the Data Catalog. By default, the account ID. The Data Catalog is the persistent metadata store. It contains database definitions, table definitions, and other control information to manage your LFlong environment.
|
|
216
|
+
*/
|
|
168
217
|
Catalog?: CatalogResource;
|
|
218
|
+
/**
|
|
219
|
+
* A data cell filter.
|
|
220
|
+
*/
|
|
169
221
|
DataCellsFilter?: DataCellsFilterResource;
|
|
222
|
+
/**
|
|
223
|
+
* The location of an Amazon S3 path where permissions are granted or revoked.
|
|
224
|
+
*/
|
|
170
225
|
DataLocation?: DataLocationResource;
|
|
226
|
+
/**
|
|
227
|
+
* The database for the resource. Unique to the Data Catalog. A database is a set of associated table definitions organized into a logical group. You can Grant and Revoke database permissions to a principal.
|
|
228
|
+
*/
|
|
171
229
|
Database?: DatabaseResource;
|
|
230
|
+
/**
|
|
231
|
+
* The LF-tag key and values attached to a resource.
|
|
232
|
+
*/
|
|
172
233
|
LFTag?: LFTagKeyResource;
|
|
234
|
+
/**
|
|
235
|
+
* A list of LF-tag conditions that define a resource's LF-tag policy.
|
|
236
|
+
*/
|
|
173
237
|
LFTagPolicy?: LFTagPolicyResource;
|
|
238
|
+
/**
|
|
239
|
+
* The table for the resource. A table is a metadata definition that represents your data. You can Grant and Revoke table privileges to a principal.
|
|
240
|
+
*/
|
|
174
241
|
Table?: TableResource;
|
|
242
|
+
/**
|
|
243
|
+
* The table with columns for the resource. A principal with permissions to this resource can select metadata from the columns of a table in the Data Catalog and the underlying data in Amazon S3.
|
|
244
|
+
*/
|
|
175
245
|
TableWithColumns?: TableWithColumnsResource;
|
|
176
246
|
};
|
|
177
247
|
/**
|
|
@@ -181,24 +251,32 @@ export type Resource = {
|
|
|
181
251
|
export type ResourceType = "DATABASE" | "TABLE";
|
|
182
252
|
/**
|
|
183
253
|
* Type definition for `AWS::LakeFormation::PrincipalPermissions.TableResource`.
|
|
254
|
+
* A structure for the table object. A table is a metadata definition that represents your data. You can Grant and Revoke table privileges to a principal.
|
|
184
255
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lakeformation-principalpermissions-tableresource.html}
|
|
185
256
|
*/
|
|
186
257
|
export type TableResource = {
|
|
187
258
|
/**
|
|
259
|
+
* The identifier for the Data Catalog. By default, it is the account ID of the caller.
|
|
188
260
|
* @minLength `12`
|
|
189
261
|
* @maxLength `12`
|
|
190
262
|
*/
|
|
191
263
|
CatalogId: string;
|
|
192
264
|
/**
|
|
265
|
+
* The name of the database for the table. Unique to a Data Catalog. A database is a set of associated table definitions organized into a logical group. You can Grant and Revoke database privileges to a principal.
|
|
193
266
|
* @minLength `1`
|
|
194
267
|
* @maxLength `255`
|
|
195
268
|
*/
|
|
196
269
|
DatabaseName: string;
|
|
197
270
|
/**
|
|
271
|
+
* The name of the table.
|
|
198
272
|
* @minLength `1`
|
|
199
273
|
* @maxLength `255`
|
|
200
274
|
*/
|
|
201
275
|
Name?: string;
|
|
276
|
+
/**
|
|
277
|
+
* A wildcard object representing every table under a database.
|
|
278
|
+
At least one of ``TableResource$Name`` or ``TableResource$TableWildcard`` is required.
|
|
279
|
+
*/
|
|
202
280
|
TableWildcard?: TableWildcard;
|
|
203
281
|
};
|
|
204
282
|
/**
|
|
@@ -208,30 +286,40 @@ export type TableResource = {
|
|
|
208
286
|
export type TableWildcard = Record<string, any>;
|
|
209
287
|
/**
|
|
210
288
|
* Type definition for `AWS::LakeFormation::PrincipalPermissions.TableWithColumnsResource`.
|
|
289
|
+
* A structure for a table with columns object. This object is only used when granting a SELECT permission.
|
|
290
|
+
This object must take a value for at least one of ``ColumnsNames``, ``ColumnsIndexes``, or ``ColumnsWildcard``.
|
|
211
291
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lakeformation-principalpermissions-tablewithcolumnsresource.html}
|
|
212
292
|
*/
|
|
213
293
|
export type TableWithColumnsResource = {
|
|
214
294
|
/**
|
|
295
|
+
* The identifier for the GLUDC where the location is registered with LFlong.
|
|
215
296
|
* @minLength `12`
|
|
216
297
|
* @maxLength `12`
|
|
217
298
|
*/
|
|
218
299
|
CatalogId: string;
|
|
300
|
+
/**
|
|
301
|
+
* The list of column names for the table. At least one of ``ColumnNames`` or ``ColumnWildcard`` is required.
|
|
302
|
+
*/
|
|
219
303
|
ColumnNames?: string[];
|
|
304
|
+
/**
|
|
305
|
+
* A wildcard specified by a ``ColumnWildcard`` object. At least one of ``ColumnNames`` or ``ColumnWildcard`` is required.
|
|
306
|
+
*/
|
|
220
307
|
ColumnWildcard?: ColumnWildcard;
|
|
221
308
|
/**
|
|
309
|
+
* The name of the database for the table with columns resource. Unique to the Data Catalog. A database is a set of associated table definitions organized into a logical group. You can Grant and Revoke database privileges to a principal.
|
|
222
310
|
* @minLength `1`
|
|
223
311
|
* @maxLength `255`
|
|
224
312
|
*/
|
|
225
313
|
DatabaseName: string;
|
|
226
314
|
/**
|
|
315
|
+
* The name of the table resource. A table is a metadata definition that represents your data. You can Grant and Revoke table privileges to a principal.
|
|
227
316
|
* @minLength `1`
|
|
228
317
|
* @maxLength `255`
|
|
229
318
|
*/
|
|
230
319
|
Name: string;
|
|
231
320
|
};
|
|
232
321
|
/**
|
|
233
|
-
*
|
|
234
|
-
* A resource schema representing a Lake Formation Permission.
|
|
322
|
+
* The ``AWS::LakeFormation::PrincipalPermissions`` resource represents the permissions that a principal has on a GLUDC resource (such as GLUlong databases or GLUlong tables). When you create a ``PrincipalPermissions`` resource, the permissions are granted via the LFlong ``GrantPermissions`` API operation. When you delete a ``PrincipalPermissions`` resource, the permissions on principal-resource pair are revoked via the LFlong ``RevokePermissions`` API operation.
|
|
235
323
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lakeformation-principalpermissions.html}
|
|
236
324
|
*/
|
|
237
325
|
export declare class LakeFormationPrincipalPermissions extends $Resource<"AWS::LakeFormation::PrincipalPermissions", LakeFormationPrincipalPermissionsProperties, LakeFormationPrincipalPermissionsAttributes> {
|
|
@@ -1,7 +1,6 @@
|
|
|
1
1
|
import { Resource as $Resource } from "@awboost/cfn-template-builder/template/resource";
|
|
2
2
|
/**
|
|
3
|
-
*
|
|
4
|
-
* A resource schema representing a Lake Formation Permission.
|
|
3
|
+
* The ``AWS::LakeFormation::PrincipalPermissions`` resource represents the permissions that a principal has on a GLUDC resource (such as GLUlong databases or GLUlong tables). When you create a ``PrincipalPermissions`` resource, the permissions are granted via the LFlong ``GrantPermissions`` API operation. When you delete a ``PrincipalPermissions`` resource, the permissions on principal-resource pair are revoked via the LFlong ``RevokePermissions`` API operation.
|
|
5
4
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lakeformation-principalpermissions.html}
|
|
6
5
|
*/
|
|
7
6
|
export class LakeFormationPrincipalPermissions extends $Resource {
|
package/lib/AWS-Oam-Link.d.ts
CHANGED
|
@@ -40,7 +40,7 @@ export type OamLinkAttributes = {
|
|
|
40
40
|
* Type definition for `AWS::Oam::Link.ResourceType`.
|
|
41
41
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-oam-link-resourcetype.html}
|
|
42
42
|
*/
|
|
43
|
-
export type ResourceType = "AWS::CloudWatch::Metric" | "AWS::Logs::LogGroup" | "AWS::XRay::Trace" | "AWS::ApplicationInsights::Application";
|
|
43
|
+
export type ResourceType = "AWS::CloudWatch::Metric" | "AWS::Logs::LogGroup" | "AWS::XRay::Trace" | "AWS::ApplicationInsights::Application" | "AWS::InternetMonitor::Monitor";
|
|
44
44
|
/**
|
|
45
45
|
* Definition of AWS::Oam::Link Resource Type
|
|
46
46
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-oam-link.html}
|
package/lib/AWS-SQS-Queue.d.ts
CHANGED
|
@@ -7,7 +7,9 @@ import type { ResourceOptions as $ResourceOptions } from "@awboost/cfn-template-
|
|
|
7
7
|
You can't change the queue type after you create it and you can't convert an existing standard queue into a FIFO queue. You must either create a new FIFO queue for your application or delete your existing standard queue and recreate it as a FIFO queue. For more information, see [Moving from a standard queue to a FIFO queue](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/FIFO-queues-moving.html) in the *Developer Guide*.
|
|
8
8
|
+ If you don't provide a value for a property, the queue is created with the default value for the property.
|
|
9
9
|
+ If you delete a queue, you must wait at least 60 seconds before creating a queue with the same name.
|
|
10
|
-
+ To successfully create a new queue, you must provide a queue name that adheres to the [limits related to queues](https://docs.
|
|
10
|
+
+ To successfully create a new queue, you must provide a queue name that adheres to the [limits related to queues](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/limits-queues.html) and is unique within the scope of your queues.
|
|
11
|
+
|
|
12
|
+
For more information about creating FIFO (first-in-first-out) queues, see [Creating an queue ()](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/screate-queue-cloudformation.html) in the *Developer Guide*.
|
|
11
13
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sqs-queue.html}
|
|
12
14
|
*/
|
|
13
15
|
export type SQSQueueProperties = {
|
|
@@ -71,7 +73,7 @@ export type SQSQueueProperties = {
|
|
|
71
73
|
+ ``denyAll``: No source queues can specify this queue as the dead-letter queue.
|
|
72
74
|
+ ``byQueue``: Only queues specified by the ``sourceQueueArns`` parameter can specify this queue as the dead-letter queue.
|
|
73
75
|
|
|
74
|
-
+ ``sourceQueueArns``: The Amazon Resource Names (ARN)s of the source queues that can specify this queue as the dead-letter queue and redrive messages. You can specify this parameter only when the ``redrivePermission`` parameter is set to ``byQueue``. You can specify up to 10 source
|
|
76
|
+
+ ``sourceQueueArns``: The Amazon Resource Names (ARN)s of the source queues that can specify this queue as the dead-letter queue and redrive messages. You can specify this parameter only when the ``redrivePermission`` parameter is set to ``byQueue``. You can specify up to 10 source queue ARNs. To allow more than 10 source queues to specify dead-letter queues, set the ``redrivePermission`` parameter to ``allowAll``.
|
|
75
77
|
*/
|
|
76
78
|
RedriveAllowPolicy?: Record<string, any> | string;
|
|
77
79
|
/**
|
|
@@ -131,7 +133,9 @@ export type Tag = {
|
|
|
131
133
|
You can't change the queue type after you create it and you can't convert an existing standard queue into a FIFO queue. You must either create a new FIFO queue for your application or delete your existing standard queue and recreate it as a FIFO queue. For more information, see [Moving from a standard queue to a FIFO queue](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/FIFO-queues-moving.html) in the *Developer Guide*.
|
|
132
134
|
+ If you don't provide a value for a property, the queue is created with the default value for the property.
|
|
133
135
|
+ If you delete a queue, you must wait at least 60 seconds before creating a queue with the same name.
|
|
134
|
-
+ To successfully create a new queue, you must provide a queue name that adheres to the [limits related to queues](https://docs.
|
|
136
|
+
+ To successfully create a new queue, you must provide a queue name that adheres to the [limits related to queues](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/limits-queues.html) and is unique within the scope of your queues.
|
|
137
|
+
|
|
138
|
+
For more information about creating FIFO (first-in-first-out) queues, see [Creating an queue ()](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/screate-queue-cloudformation.html) in the *Developer Guide*.
|
|
135
139
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sqs-queue.html}
|
|
136
140
|
*/
|
|
137
141
|
export declare class SQSQueue extends $Resource<"AWS::SQS::Queue", SQSQueueProperties, SQSQueueAttributes> {
|
package/lib/AWS-SQS-Queue.js
CHANGED
|
@@ -6,7 +6,9 @@ import { Resource as $Resource } from "@awboost/cfn-template-builder/template/re
|
|
|
6
6
|
You can't change the queue type after you create it and you can't convert an existing standard queue into a FIFO queue. You must either create a new FIFO queue for your application or delete your existing standard queue and recreate it as a FIFO queue. For more information, see [Moving from a standard queue to a FIFO queue](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/FIFO-queues-moving.html) in the *Developer Guide*.
|
|
7
7
|
+ If you don't provide a value for a property, the queue is created with the default value for the property.
|
|
8
8
|
+ If you delete a queue, you must wait at least 60 seconds before creating a queue with the same name.
|
|
9
|
-
+ To successfully create a new queue, you must provide a queue name that adheres to the [limits related to queues](https://docs.
|
|
9
|
+
+ To successfully create a new queue, you must provide a queue name that adheres to the [limits related to queues](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/limits-queues.html) and is unique within the scope of your queues.
|
|
10
|
+
|
|
11
|
+
For more information about creating FIFO (first-in-first-out) queues, see [Creating an queue ()](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/screate-queue-cloudformation.html) in the *Developer Guide*.
|
|
10
12
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sqs-queue.html}
|
|
11
13
|
*/
|
|
12
14
|
export class SQSQueue extends $Resource {
|
|
@@ -4,7 +4,7 @@ import type { ResourceOptions as $ResourceOptions } from "@awboost/cfn-template-
|
|
|
4
4
|
* The ``AWS::SSM::Parameter`` resource creates an SSM parameter in SYSlong Parameter Store.
|
|
5
5
|
To create an SSM parameter, you must have the IAMlong (IAM) permissions ``ssm:PutParameter`` and ``ssm:AddTagsToResource``. On stack creation, CFNlong adds the following three tags to the parameter: ``aws:cloudformation:stack-name``, ``aws:cloudformation:logical-id``, and ``aws:cloudformation:stack-id``, in addition to any custom tags you specify.
|
|
6
6
|
To add, update, or remove tags during stack update, you must have IAM permissions for both ``ssm:AddTagsToResource`` and ``ssm:RemoveTagsFromResource``. For more information, see [Managing Access Using Policies](https://docs.aws.amazon.com/systems-manager/latest/userguide/security-iam.html#security_iam_access-manage) in the *User Guide*.
|
|
7
|
-
For information about valid values for parameters, see [
|
|
7
|
+
For information about valid values for parameters, see [About requirements and constraints for parameter names](https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-paramstore-su-create.html#sysman-parameter-name-constraints) in the *User Guide* and [PutParameter](https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_PutParameter.html) in the *API Reference*.
|
|
8
8
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-parameter.html}
|
|
9
9
|
*/
|
|
10
10
|
export type SSMParameterProperties = {
|
|
@@ -22,7 +22,7 @@ export type SSMParameterProperties = {
|
|
|
22
22
|
Description?: string;
|
|
23
23
|
/**
|
|
24
24
|
* The name of the parameter.
|
|
25
|
-
The maximum length constraint listed below includes capacity for additional system attributes that aren't part of the name. The maximum length for a parameter name, including the full length of the parameter ARN, is 1011 characters. For example, the length of the following parameter name is 65 characters, not 20 characters: ``arn:aws:ssm:us-east-2:111222333444:parameter/ExampleParameterName``
|
|
25
|
+
The maximum length constraint listed below includes capacity for additional system attributes that aren't part of the name. The maximum length for a parameter name, including the full length of the parameter Amazon Resource Name (ARN), is 1011 characters. For example, the length of the following parameter name is 65 characters, not 20 characters: ``arn:aws:ssm:us-east-2:111222333444:parameter/ExampleParameterName``
|
|
26
26
|
*/
|
|
27
27
|
Name?: string;
|
|
28
28
|
/**
|
|
@@ -40,7 +40,7 @@ export type SSMParameterProperties = {
|
|
|
40
40
|
Tier?: "Standard" | "Advanced" | "Intelligent-Tiering";
|
|
41
41
|
/**
|
|
42
42
|
* The type of parameter.
|
|
43
|
-
Although ``SecureString`` is included in the list of valid values, CFNlong does *not* currently support creating
|
|
43
|
+
Although ``SecureString`` is included in the list of valid values, CFNlong does *not* currently support creating ``SecureString`` parameters.
|
|
44
44
|
*/
|
|
45
45
|
Type: "String" | "StringList";
|
|
46
46
|
/**
|
|
@@ -53,7 +53,7 @@ export type SSMParameterProperties = {
|
|
|
53
53
|
* The ``AWS::SSM::Parameter`` resource creates an SSM parameter in SYSlong Parameter Store.
|
|
54
54
|
To create an SSM parameter, you must have the IAMlong (IAM) permissions ``ssm:PutParameter`` and ``ssm:AddTagsToResource``. On stack creation, CFNlong adds the following three tags to the parameter: ``aws:cloudformation:stack-name``, ``aws:cloudformation:logical-id``, and ``aws:cloudformation:stack-id``, in addition to any custom tags you specify.
|
|
55
55
|
To add, update, or remove tags during stack update, you must have IAM permissions for both ``ssm:AddTagsToResource`` and ``ssm:RemoveTagsFromResource``. For more information, see [Managing Access Using Policies](https://docs.aws.amazon.com/systems-manager/latest/userguide/security-iam.html#security_iam_access-manage) in the *User Guide*.
|
|
56
|
-
For information about valid values for parameters, see [
|
|
56
|
+
For information about valid values for parameters, see [About requirements and constraints for parameter names](https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-paramstore-su-create.html#sysman-parameter-name-constraints) in the *User Guide* and [PutParameter](https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_PutParameter.html) in the *API Reference*.
|
|
57
57
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-parameter.html}
|
|
58
58
|
*/
|
|
59
59
|
export declare class SSMParameter extends $Resource<"AWS::SSM::Parameter", SSMParameterProperties, Record<string, never>> {
|
package/lib/AWS-SSM-Parameter.js
CHANGED
|
@@ -3,7 +3,7 @@ import { Resource as $Resource } from "@awboost/cfn-template-builder/template/re
|
|
|
3
3
|
* The ``AWS::SSM::Parameter`` resource creates an SSM parameter in SYSlong Parameter Store.
|
|
4
4
|
To create an SSM parameter, you must have the IAMlong (IAM) permissions ``ssm:PutParameter`` and ``ssm:AddTagsToResource``. On stack creation, CFNlong adds the following three tags to the parameter: ``aws:cloudformation:stack-name``, ``aws:cloudformation:logical-id``, and ``aws:cloudformation:stack-id``, in addition to any custom tags you specify.
|
|
5
5
|
To add, update, or remove tags during stack update, you must have IAM permissions for both ``ssm:AddTagsToResource`` and ``ssm:RemoveTagsFromResource``. For more information, see [Managing Access Using Policies](https://docs.aws.amazon.com/systems-manager/latest/userguide/security-iam.html#security_iam_access-manage) in the *User Guide*.
|
|
6
|
-
For information about valid values for parameters, see [
|
|
6
|
+
For information about valid values for parameters, see [About requirements and constraints for parameter names](https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-paramstore-su-create.html#sysman-parameter-name-constraints) in the *User Guide* and [PutParameter](https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_PutParameter.html) in the *API Reference*.
|
|
7
7
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-parameter.html}
|
|
8
8
|
*/
|
|
9
9
|
export class SSMParameter extends $Resource {
|
|
@@ -317,6 +317,11 @@ export type CustomResponseBody = {
|
|
|
317
317
|
*/
|
|
318
318
|
ContentType: ResponseContentType;
|
|
319
319
|
};
|
|
320
|
+
/**
|
|
321
|
+
* Type definition for `AWS::WAFv2::RuleGroup.EvaluationWindowSec`.
|
|
322
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-evaluationwindowsec.html}
|
|
323
|
+
*/
|
|
324
|
+
export type EvaluationWindowSec = 60 | 120 | 300 | 600;
|
|
320
325
|
/**
|
|
321
326
|
* Type definition for `AWS::WAFv2::RuleGroup.FieldToMatch`.
|
|
322
327
|
* Field of the request to match.
|
|
@@ -586,6 +591,7 @@ export type RateBasedStatement = {
|
|
|
586
591
|
* @maxLength `5`
|
|
587
592
|
*/
|
|
588
593
|
CustomKeys?: RateBasedStatementCustomKey[];
|
|
594
|
+
EvaluationWindowSec?: EvaluationWindowSec;
|
|
589
595
|
ForwardedIPConfig?: ForwardedIPConfiguration;
|
|
590
596
|
/**
|
|
591
597
|
* @min `100`
|
|
@@ -386,6 +386,11 @@ export type DefaultAction = {
|
|
|
386
386
|
*/
|
|
387
387
|
Block?: BlockAction;
|
|
388
388
|
};
|
|
389
|
+
/**
|
|
390
|
+
* Type definition for `AWS::WAFv2::WebACL.EvaluationWindowSec`.
|
|
391
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-webacl-evaluationwindowsec.html}
|
|
392
|
+
*/
|
|
393
|
+
export type EvaluationWindowSec = 60 | 120 | 300 | 600;
|
|
389
394
|
/**
|
|
390
395
|
* Type definition for `AWS::WAFv2::WebACL.ExcludedRule`.
|
|
391
396
|
* Excluded Rule in the RuleGroup or ManagedRuleGroup will not be evaluated.
|
|
@@ -759,6 +764,7 @@ export type RateBasedStatement = {
|
|
|
759
764
|
* @maxLength `5`
|
|
760
765
|
*/
|
|
761
766
|
CustomKeys?: RateBasedStatementCustomKey[];
|
|
767
|
+
EvaluationWindowSec?: EvaluationWindowSec;
|
|
762
768
|
ForwardedIPConfig?: ForwardedIPConfiguration;
|
|
763
769
|
/**
|
|
764
770
|
* @min `100`
|