@awboost/cfn-resource-types 0.1.58 → 0.1.60
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/lib/AWS-AppIntegrations-Application.d.ts +7 -0
- package/lib/AWS-EC2-LaunchTemplate.d.ts +21 -19
- package/lib/AWS-ECR-RepositoryCreationTemplate.d.ts +123 -0
- package/lib/AWS-ECR-RepositoryCreationTemplate.js +12 -0
- package/lib/AWS-KMS-Key.d.ts +68 -8
- package/lib/AWS-KMS-Key.js +8 -1
- package/lib/AWS-Oam-Link.d.ts +20 -0
- package/lib/AWS-RedshiftServerless-Namespace.d.ts +15 -0
- package/lib/AWS-S3-Bucket.d.ts +1 -16
- package/lib/AWS-S3-BucketPolicy.d.ts +4 -2
- package/lib/AWS-S3-BucketPolicy.js +2 -1
- package/lib/AWS-Timestream-InfluxDBInstance.d.ts +178 -0
- package/lib/AWS-Timestream-InfluxDBInstance.js +12 -0
- package/lib/AWS-VerifiedPermissions-PolicyStore.d.ts +4 -2
- package/lib/AWS-VerifiedPermissions-PolicyStore.js +2 -1
- package/package.json +1 -1
|
@@ -32,6 +32,12 @@ export type AppIntegrationsApplicationProperties = {
|
|
|
32
32
|
* @pattern `^[a-zA-Z0-9/\._\-]+$`
|
|
33
33
|
*/
|
|
34
34
|
Namespace?: string;
|
|
35
|
+
/**
|
|
36
|
+
* The configuration of events or requests that the application has access to.
|
|
37
|
+
* @minLength `0`
|
|
38
|
+
* @maxLength `150`
|
|
39
|
+
*/
|
|
40
|
+
Permissions?: string[];
|
|
35
41
|
/**
|
|
36
42
|
* The tags (keys and values) associated with the application.
|
|
37
43
|
* @minLength `0`
|
|
@@ -48,6 +54,7 @@ export type AppIntegrationsApplicationAttributes = {
|
|
|
48
54
|
* The Amazon Resource Name (ARN) of the application.
|
|
49
55
|
* @minLength `1`
|
|
50
56
|
* @maxLength `2048`
|
|
57
|
+
* @pattern `^arn:aws[-a-z0-9]*:app-integrations:[-a-z0-9]*:[0-9]{12}:application/[-a-zA-Z0-9]*`
|
|
51
58
|
*/
|
|
52
59
|
ApplicationArn: string;
|
|
53
60
|
/**
|
|
@@ -331,7 +331,7 @@ export type IamInstanceProfile = {
|
|
|
331
331
|
/**
|
|
332
332
|
* Type definition for `AWS::EC2::LaunchTemplate.InstanceMarketOptions`.
|
|
333
333
|
* Specifies the market (purchasing) option for an instance.
|
|
334
|
-
|
|
334
|
+
``InstanceMarketOptions`` is a property of the [AWS::EC2::LaunchTemplate LaunchTemplateData](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html).
|
|
335
335
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-instancemarketoptions.html}
|
|
336
336
|
*/
|
|
337
337
|
export type InstanceMarketOptions = {
|
|
@@ -544,7 +544,7 @@ export type InstanceRequirements = {
|
|
|
544
544
|
/**
|
|
545
545
|
* Type definition for `AWS::EC2::LaunchTemplate.Ipv4PrefixSpecification`.
|
|
546
546
|
* Specifies an IPv4 prefix for a network interface.
|
|
547
|
-
|
|
547
|
+
``Ipv4PrefixSpecification`` is a property of [AWS::EC2::LaunchTemplate NetworkInterface](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-networkinterface.html).
|
|
548
548
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-ipv4prefixspecification.html}
|
|
549
549
|
*/
|
|
550
550
|
export type Ipv4PrefixSpecification = {
|
|
@@ -556,7 +556,7 @@ export type Ipv4PrefixSpecification = {
|
|
|
556
556
|
/**
|
|
557
557
|
* Type definition for `AWS::EC2::LaunchTemplate.Ipv6Add`.
|
|
558
558
|
* Specifies an IPv6 address in an Amazon EC2 launch template.
|
|
559
|
-
|
|
559
|
+
``Ipv6Add`` is a property of [AWS::EC2::LaunchTemplate NetworkInterface](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-networkinterface.html).
|
|
560
560
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-ipv6add.html}
|
|
561
561
|
*/
|
|
562
562
|
export type Ipv6Add = {
|
|
@@ -568,7 +568,7 @@ export type Ipv6Add = {
|
|
|
568
568
|
/**
|
|
569
569
|
* Type definition for `AWS::EC2::LaunchTemplate.Ipv6PrefixSpecification`.
|
|
570
570
|
* Specifies an IPv6 prefix for a network interface.
|
|
571
|
-
|
|
571
|
+
``Ipv6PrefixSpecification`` is a property of [AWS::EC2::LaunchTemplate NetworkInterface](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-networkinterface.html).
|
|
572
572
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-ipv6prefixspecification.html}
|
|
573
573
|
*/
|
|
574
574
|
export type Ipv6PrefixSpecification = {
|
|
@@ -701,7 +701,7 @@ export type LaunchTemplateData = {
|
|
|
701
701
|
*/
|
|
702
702
|
Monitoring?: Monitoring;
|
|
703
703
|
/**
|
|
704
|
-
*
|
|
704
|
+
* The network interfaces for the instance.
|
|
705
705
|
*/
|
|
706
706
|
NetworkInterfaces?: NetworkInterface[];
|
|
707
707
|
/**
|
|
@@ -718,12 +718,14 @@ export type LaunchTemplateData = {
|
|
|
718
718
|
*/
|
|
719
719
|
RamDiskId?: string;
|
|
720
720
|
/**
|
|
721
|
-
|
|
722
|
-
|
|
721
|
+
* The IDs of the security groups. You can specify the IDs of existing security groups and references to resources created by the stack template.
|
|
722
|
+
If you specify a network interface, you must specify any security groups as part of the network interface instead.
|
|
723
|
+
*/
|
|
723
724
|
SecurityGroupIds?: string[];
|
|
724
725
|
/**
|
|
725
|
-
|
|
726
|
-
|
|
726
|
+
* The names of the security groups. For a nondefault VPC, you must use security group IDs instead.
|
|
727
|
+
If you specify a network interface, you must specify any security groups as part of the network interface instead of using this parameter.
|
|
728
|
+
*/
|
|
727
729
|
SecurityGroups?: string[];
|
|
728
730
|
/**
|
|
729
731
|
* The tags to apply to the resources that are created during instance launch.
|
|
@@ -740,7 +742,7 @@ export type LaunchTemplateData = {
|
|
|
740
742
|
/**
|
|
741
743
|
* Type definition for `AWS::EC2::LaunchTemplate.LaunchTemplateElasticInferenceAccelerator`.
|
|
742
744
|
* Specifies an elastic inference accelerator.
|
|
743
|
-
|
|
745
|
+
``LaunchTemplateElasticInferenceAccelerator`` is a property of [AWS::EC2::LaunchTemplate LaunchTemplateData](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html).
|
|
744
746
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplateelasticinferenceaccelerator.html}
|
|
745
747
|
*/
|
|
746
748
|
export type LaunchTemplateElasticInferenceAccelerator = {
|
|
@@ -757,7 +759,7 @@ export type LaunchTemplateElasticInferenceAccelerator = {
|
|
|
757
759
|
/**
|
|
758
760
|
* Type definition for `AWS::EC2::LaunchTemplate.LaunchTemplateTagSpecification`.
|
|
759
761
|
* Specifies the tags to apply to the launch template during creation.
|
|
760
|
-
|
|
762
|
+
``LaunchTemplateTagSpecification`` is a property of [AWS::EC2::LaunchTemplate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-launchtemplate.html).
|
|
761
763
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatetagspecification.html}
|
|
762
764
|
*/
|
|
763
765
|
export type LaunchTemplateTagSpecification = {
|
|
@@ -773,7 +775,7 @@ export type LaunchTemplateTagSpecification = {
|
|
|
773
775
|
/**
|
|
774
776
|
* Type definition for `AWS::EC2::LaunchTemplate.LicenseSpecification`.
|
|
775
777
|
* Specifies a license configuration for an instance.
|
|
776
|
-
|
|
778
|
+
``LicenseSpecification`` is a property of [AWS::EC2::LaunchTemplate LaunchTemplateData](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html).
|
|
777
779
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-licensespecification.html}
|
|
778
780
|
*/
|
|
779
781
|
export type LicenseSpecification = {
|
|
@@ -826,7 +828,7 @@ export type MemoryMiB = {
|
|
|
826
828
|
/**
|
|
827
829
|
* Type definition for `AWS::EC2::LaunchTemplate.MetadataOptions`.
|
|
828
830
|
* The metadata options for the instance. For more information, see [Instance metadata and user data](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-metadata.html) in the *Amazon EC2 User Guide*.
|
|
829
|
-
|
|
831
|
+
``MetadataOptions`` is a property of [AWS::EC2::LaunchTemplate LaunchTemplateData](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html).
|
|
830
832
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-metadataoptions.html}
|
|
831
833
|
*/
|
|
832
834
|
export type MetadataOptions = {
|
|
@@ -863,7 +865,7 @@ export type MetadataOptions = {
|
|
|
863
865
|
/**
|
|
864
866
|
* Type definition for `AWS::EC2::LaunchTemplate.Monitoring`.
|
|
865
867
|
* Specifies whether detailed monitoring is enabled for an instance. For more information about detailed monitoring, see [Enable or turn off detailed monitoring for your instances](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-cloudwatch-new.html) in the *User Guide*.
|
|
866
|
-
|
|
868
|
+
``Monitoring`` is a property of [AWS::EC2::LaunchTemplate LaunchTemplateData](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html).
|
|
867
869
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-monitoring.html}
|
|
868
870
|
*/
|
|
869
871
|
export type Monitoring = {
|
|
@@ -891,7 +893,7 @@ export type NetworkBandwidthGbps = {
|
|
|
891
893
|
/**
|
|
892
894
|
* Type definition for `AWS::EC2::LaunchTemplate.NetworkInterface`.
|
|
893
895
|
* Specifies the parameters for a network interface.
|
|
894
|
-
|
|
896
|
+
``NetworkInterface`` is a property of [AWS::EC2::LaunchTemplate LaunchTemplateData](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html).
|
|
895
897
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-networkinterface.html}
|
|
896
898
|
*/
|
|
897
899
|
export type NetworkInterface = {
|
|
@@ -1006,7 +1008,7 @@ export type NetworkInterfaceCount = {
|
|
|
1006
1008
|
/**
|
|
1007
1009
|
* Type definition for `AWS::EC2::LaunchTemplate.Placement`.
|
|
1008
1010
|
* Specifies the placement of an instance.
|
|
1009
|
-
|
|
1011
|
+
``Placement`` is a property of [AWS::EC2::LaunchTemplate LaunchTemplateData](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html).
|
|
1010
1012
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-placement.html}
|
|
1011
1013
|
*/
|
|
1012
1014
|
export type Placement = {
|
|
@@ -1069,7 +1071,7 @@ export type PrivateDnsNameOptions = {
|
|
|
1069
1071
|
/**
|
|
1070
1072
|
* Type definition for `AWS::EC2::LaunchTemplate.PrivateIpAdd`.
|
|
1071
1073
|
* Specifies a secondary private IPv4 address for a network interface.
|
|
1072
|
-
|
|
1074
|
+
``PrivateIpAdd`` is a property of [AWS::EC2::LaunchTemplate NetworkInterface](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-networkinterface.html).
|
|
1073
1075
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-privateipadd.html}
|
|
1074
1076
|
*/
|
|
1075
1077
|
export type PrivateIpAdd = {
|
|
@@ -1085,7 +1087,7 @@ export type PrivateIpAdd = {
|
|
|
1085
1087
|
/**
|
|
1086
1088
|
* Type definition for `AWS::EC2::LaunchTemplate.SpotOptions`.
|
|
1087
1089
|
* Specifies options for Spot Instances.
|
|
1088
|
-
|
|
1090
|
+
``SpotOptions`` is a property of [AWS::EC2::LaunchTemplate InstanceMarketOptions](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata-instancemarketoptions.html).
|
|
1089
1091
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-spotoptions.html}
|
|
1090
1092
|
*/
|
|
1091
1093
|
export type SpotOptions = {
|
|
@@ -1134,7 +1136,7 @@ export type Tag = {
|
|
|
1134
1136
|
/**
|
|
1135
1137
|
* Type definition for `AWS::EC2::LaunchTemplate.TagSpecification`.
|
|
1136
1138
|
* Specifies the tags to apply to a resource when the resource is created for the launch template.
|
|
1137
|
-
|
|
1139
|
+
``TagSpecification`` is a property type of [TagSpecifications](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html#cfn-ec2-launchtemplate-launchtemplatedata-tagspecifications). [TagSpecifications](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html#cfn-ec2-launchtemplate-launchtemplatedata-tagspecifications) is a property of [AWS::EC2::LaunchTemplate LaunchTemplateData](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html).
|
|
1138
1140
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-tagspecification.html}
|
|
1139
1141
|
*/
|
|
1140
1142
|
export type TagSpecification = {
|
|
@@ -0,0 +1,123 @@
|
|
|
1
|
+
import { Resource as $Resource } from "@awboost/cfn-template-builder/template/resource";
|
|
2
|
+
import type { ResourceOptions as $ResourceOptions } from "@awboost/cfn-template-builder/template";
|
|
3
|
+
/**
|
|
4
|
+
* AWS::ECR::RepositoryCreationTemplate is used to create repository with configuration from a pre-defined template.
|
|
5
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-repositorycreationtemplate.html}
|
|
6
|
+
*/
|
|
7
|
+
export type ECRRepositoryCreationTemplateProperties = {
|
|
8
|
+
/**
|
|
9
|
+
* A list of enumerable Strings representing the repository creation scenarios that the template will apply towards.
|
|
10
|
+
*/
|
|
11
|
+
AppliedFor: AppliedForItem[];
|
|
12
|
+
/**
|
|
13
|
+
* The description of the template.
|
|
14
|
+
* @minLength `0`
|
|
15
|
+
* @maxLength `256`
|
|
16
|
+
*/
|
|
17
|
+
Description?: string;
|
|
18
|
+
/**
|
|
19
|
+
* The encryption configuration for the repository. This determines how the contents of your repository are encrypted at rest. By default, when no encryption configuration is set or the AES256 encryption type is used, Amazon ECR uses server-side encryption with Amazon S3-managed encryption keys which encrypts your data at rest using an AES-256 encryption algorithm. This does not require any action on your part.
|
|
20
|
+
|
|
21
|
+
For more information, see https://docs.aws.amazon.com/AmazonECR/latest/userguide/encryption-at-rest.html
|
|
22
|
+
*/
|
|
23
|
+
EncryptionConfiguration?: EncryptionConfiguration;
|
|
24
|
+
/**
|
|
25
|
+
* The image tag mutability setting for the repository.
|
|
26
|
+
*/
|
|
27
|
+
ImageTagMutability?: "MUTABLE" | "IMMUTABLE";
|
|
28
|
+
/**
|
|
29
|
+
* The JSON lifecycle policy text to apply to the repository. For information about lifecycle policy syntax, see https://docs.aws.amazon.com/AmazonECR/latest/userguide/LifecyclePolicies.html
|
|
30
|
+
* @minLength `100`
|
|
31
|
+
* @maxLength `30720`
|
|
32
|
+
*/
|
|
33
|
+
LifecyclePolicy?: string;
|
|
34
|
+
/**
|
|
35
|
+
* The prefix use to match the repository name and apply the template.
|
|
36
|
+
* @minLength `1`
|
|
37
|
+
* @maxLength `256`
|
|
38
|
+
* @pattern `^((?:[a-z0-9]+(?:[._-][a-z0-9]+)/*)*[a-z0-9]+(?:[._-][a-z0-9]+)/*?|ROOT)$`
|
|
39
|
+
*/
|
|
40
|
+
Prefix: string;
|
|
41
|
+
/**
|
|
42
|
+
* The JSON repository policy text to apply to the repository. For more information, see https://docs.aws.amazon.com/AmazonECR/latest/userguide/RepositoryPolicyExamples.html
|
|
43
|
+
*/
|
|
44
|
+
RepositoryPolicy?: string;
|
|
45
|
+
/**
|
|
46
|
+
* An array of key-value pairs to apply to this resource.
|
|
47
|
+
* @maxLength `50`
|
|
48
|
+
*/
|
|
49
|
+
ResourceTags?: Tag[];
|
|
50
|
+
};
|
|
51
|
+
/**
|
|
52
|
+
* Attribute type definition for `AWS::ECR::RepositoryCreationTemplate`.
|
|
53
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-repositorycreationtemplate.html#aws-resource-ecr-repositorycreationtemplate-return-values}
|
|
54
|
+
*/
|
|
55
|
+
export type ECRRepositoryCreationTemplateAttributes = {
|
|
56
|
+
/**
|
|
57
|
+
* Create timestamp of the template.
|
|
58
|
+
*/
|
|
59
|
+
CreatedAt: string;
|
|
60
|
+
/**
|
|
61
|
+
* Update timestamp of the template.
|
|
62
|
+
*/
|
|
63
|
+
UpdatedAt: string;
|
|
64
|
+
};
|
|
65
|
+
/**
|
|
66
|
+
* Type definition for `AWS::ECR::RepositoryCreationTemplate.AppliedForItem`.
|
|
67
|
+
* Enumerable Strings representing the repository creation scenarios that the template will apply towards.
|
|
68
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-repositorycreationtemplate-appliedforitem.html}
|
|
69
|
+
*/
|
|
70
|
+
export type AppliedForItem = "REPLICATION" | "PULL_THROUGH_CACHE";
|
|
71
|
+
/**
|
|
72
|
+
* Type definition for `AWS::ECR::RepositoryCreationTemplate.EncryptionConfiguration`.
|
|
73
|
+
* The encryption configuration for the repository. This determines how the contents of your repository are encrypted at rest. By default, when no encryption configuration is set or the AES256 encryption type is used, Amazon ECR uses server-side encryption with Amazon S3-managed encryption keys which encrypts your data at rest using an AES-256 encryption algorithm. This does not require any action on your part.
|
|
74
|
+
|
|
75
|
+
For more information, see https://docs.aws.amazon.com/AmazonECR/latest/userguide/encryption-at-rest.html
|
|
76
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-repositorycreationtemplate-encryptionconfiguration.html}
|
|
77
|
+
*/
|
|
78
|
+
export type EncryptionConfiguration = {
|
|
79
|
+
/**
|
|
80
|
+
* The encryption type to use.
|
|
81
|
+
*/
|
|
82
|
+
EncryptionType: EncryptionType;
|
|
83
|
+
/**
|
|
84
|
+
* If you use the KMS encryption type, specify the CMK to use for encryption. The alias, key ID, or full ARN of the CMK can be specified. The key must exist in the same Region as the repository. If no key is specified, the default AWS managed CMK for Amazon ECR will be used.
|
|
85
|
+
* @minLength `1`
|
|
86
|
+
* @maxLength `2048`
|
|
87
|
+
*/
|
|
88
|
+
KmsKey?: string;
|
|
89
|
+
};
|
|
90
|
+
/**
|
|
91
|
+
* Type definition for `AWS::ECR::RepositoryCreationTemplate.EncryptionType`.
|
|
92
|
+
* The encryption type to use.
|
|
93
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-repositorycreationtemplate-encryptiontype.html}
|
|
94
|
+
*/
|
|
95
|
+
export type EncryptionType = "AES256" | "KMS";
|
|
96
|
+
/**
|
|
97
|
+
* Type definition for `AWS::ECR::RepositoryCreationTemplate.Tag`.
|
|
98
|
+
* An array of key-value pairs to apply to this resource.
|
|
99
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-repositorycreationtemplate-tag.html}
|
|
100
|
+
*/
|
|
101
|
+
export type Tag = {
|
|
102
|
+
/**
|
|
103
|
+
* The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
|
|
104
|
+
* @minLength `1`
|
|
105
|
+
* @maxLength `128`
|
|
106
|
+
*/
|
|
107
|
+
Key: string;
|
|
108
|
+
/**
|
|
109
|
+
* The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
|
|
110
|
+
* @minLength `0`
|
|
111
|
+
* @maxLength `256`
|
|
112
|
+
*/
|
|
113
|
+
Value: string;
|
|
114
|
+
};
|
|
115
|
+
/**
|
|
116
|
+
* AWS::ECR::RepositoryCreationTemplate is used to create repository with configuration from a pre-defined template.
|
|
117
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-repositorycreationtemplate.html}
|
|
118
|
+
*/
|
|
119
|
+
export declare class ECRRepositoryCreationTemplate extends $Resource<"AWS::ECR::RepositoryCreationTemplate", ECRRepositoryCreationTemplateProperties, ECRRepositoryCreationTemplateAttributes> {
|
|
120
|
+
static readonly Type = "AWS::ECR::RepositoryCreationTemplate";
|
|
121
|
+
constructor(logicalId: string, properties: ECRRepositoryCreationTemplateProperties, options?: $ResourceOptions);
|
|
122
|
+
}
|
|
123
|
+
//# sourceMappingURL=AWS-ECR-RepositoryCreationTemplate.d.ts.map
|
|
@@ -0,0 +1,12 @@
|
|
|
1
|
+
import { Resource as $Resource } from "@awboost/cfn-template-builder/template/resource";
|
|
2
|
+
/**
|
|
3
|
+
* AWS::ECR::RepositoryCreationTemplate is used to create repository with configuration from a pre-defined template.
|
|
4
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-repositorycreationtemplate.html}
|
|
5
|
+
*/
|
|
6
|
+
export class ECRRepositoryCreationTemplate extends $Resource {
|
|
7
|
+
static Type = "AWS::ECR::RepositoryCreationTemplate";
|
|
8
|
+
constructor(logicalId, properties, options) {
|
|
9
|
+
super(logicalId, ECRRepositoryCreationTemplate.Type, properties, options);
|
|
10
|
+
}
|
|
11
|
+
}
|
|
12
|
+
//# sourceMappingURL=AWS-ECR-RepositoryCreationTemplate.js.map
|
package/lib/AWS-KMS-Key.d.ts
CHANGED
|
@@ -3,7 +3,14 @@ import type { ResourceOptions as $ResourceOptions } from "@awboost/cfn-template-
|
|
|
3
3
|
/**
|
|
4
4
|
* The ``AWS::KMS::Key`` resource specifies an [KMS key](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#kms_keys) in KMSlong. You can use this resource to create symmetric encryption KMS keys, asymmetric KMS keys for encryption or signing, and symmetric HMAC KMS keys. You can use ``AWS::KMS::Key`` to create [multi-Region primary keys](https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html#mrk-primary-key) of all supported types. To replicate a multi-Region key, use the ``AWS::KMS::ReplicaKey`` resource.
|
|
5
5
|
If you change the value of the ``KeySpec``, ``KeyUsage``, ``Origin``, or ``MultiRegion`` properties of an existing KMS key, the update request fails, regardless of the value of the [UpdateReplacePolicy attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-updatereplacepolicy.html). This prevents you from accidentally deleting a KMS key by changing any of its immutable property values.
|
|
6
|
-
KMS replaced
|
|
6
|
+
KMS replaced the term *customer master key (CMK)* with ** and *KMS key*. The concept has not changed. To prevent breaking changes, KMS is keeping some variations of this term.
|
|
7
|
+
You can use symmetric encryption KMS keys to encrypt and decrypt small amounts of data, but they are more commonly used to generate data keys and data key pairs. You can also use a symmetric encryption KMS key to encrypt data stored in AWS services that are [integrated with](https://docs.aws.amazon.com//kms/features/#AWS_Service_Integration). For more information, see [Symmetric encryption KMS keys](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#symmetric-cmks) in the *Developer Guide*.
|
|
8
|
+
You can use asymmetric KMS keys to encrypt and decrypt data or sign messages and verify signatures. To create an asymmetric key, you must specify an asymmetric ``KeySpec`` value and a ``KeyUsage`` value. For details, see [Asymmetric keys in](https://docs.aws.amazon.com/kms/latest/developerguide/symmetric-asymmetric.html) in the *Developer Guide*.
|
|
9
|
+
You can use HMAC KMS keys (which are also symmetric keys) to generate and verify hash-based message authentication codes. To create an HMAC key, you must specify an HMAC ``KeySpec`` value and a ``KeyUsage`` value of ``GENERATE_VERIFY_MAC``. For details, see [HMAC keys in](https://docs.aws.amazon.com/kms/latest/developerguide/hmac.html) in the *Developer Guide*.
|
|
10
|
+
You can also create symmetric encryption, asymmetric, and HMAC multi-Region primary keys. To create a multi-Region primary key, set the ``MultiRegion`` property to ``true``. For information about multi-Region keys, see [Multi-Region keys in](https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html) in the *Developer Guide*.
|
|
11
|
+
You cannot use the ``AWS::KMS::Key`` resource to specify a KMS key with [imported key material](https://docs.aws.amazon.com/kms/latest/developerguide/importing-keys.html) or a KMS key in a [custom key store](https://docs.aws.amazon.com/kms/latest/developerguide/custom-key-store-overview.html).
|
|
12
|
+
*Regions*
|
|
13
|
+
KMS CloudFormation resources are available in all Regions in which KMS and CFN are supported. You can use the ``AWS::KMS::Key`` resource to create and manage all KMS key types that are supported in a Region.
|
|
7
14
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kms-key.html}
|
|
8
15
|
*/
|
|
9
16
|
export type KMSKeyProperties = {
|
|
@@ -24,7 +31,7 @@ export type KMSKeyProperties = {
|
|
|
24
31
|
* Enables automatic rotation of the key material for the specified KMS key. By default, automatic key rotation is not enabled.
|
|
25
32
|
KMS supports automatic rotation only for symmetric encryption KMS keys (``KeySpec`` = ``SYMMETRIC_DEFAULT``). For asymmetric KMS keys, HMAC KMS keys, and KMS keys with Origin ``EXTERNAL``, omit the ``EnableKeyRotation`` property or set it to ``false``.
|
|
26
33
|
To enable automatic key rotation of the key material for a multi-Region KMS key, set ``EnableKeyRotation`` to ``true`` on the primary key (created by using ``AWS::KMS::Key``). KMS copies the rotation status to all replica keys. For details, see [Rotating multi-Region keys](https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-manage.html#multi-region-rotate) in the *Developer Guide*.
|
|
27
|
-
When you enable automatic rotation, KMS automatically creates new key material for the KMS key one year after the enable date and every year thereafter. KMS retains all key material until you delete the KMS key.
|
|
34
|
+
When you enable automatic rotation, KMS automatically creates new key material for the KMS key one year after the enable date and every year thereafter. KMS retains all key material until you delete the KMS key. For detailed information about automatic key rotation, see [Rotating KMS keys](https://docs.aws.amazon.com/kms/latest/developerguide/rotate-keys.html) in the *Developer Guide*.
|
|
28
35
|
*/
|
|
29
36
|
EnableKeyRotation?: boolean;
|
|
30
37
|
/**
|
|
@@ -38,13 +45,48 @@ export type KMSKeyProperties = {
|
|
|
38
45
|
* The key policy to attach to the KMS key.
|
|
39
46
|
If you provide a key policy, it must meet the following criteria:
|
|
40
47
|
+ The key policy must allow the caller to make a subsequent [PutKeyPolicy](https://docs.aws.amazon.com/kms/latest/APIReference/API_PutKeyPolicy.html) request on the KMS key. This reduces the risk that the KMS key becomes unmanageable. For more information, see [Default key policy](https://docs.aws.amazon.com/kms/latest/developerguide/key-policies.html#key-policy-default-allow-root-enable-iam) in the *Developer Guide*. (To omit this condition, set ``BypassPolicyLockoutSafetyCheck`` to true.)
|
|
41
|
-
+ Each statement in the key policy must contain one or more principals. The principals in the key policy must exist and be visible to KMS. When you create a new AWS principal (for example, an IAM user or role), you might need to enforce a delay before including the new principal in a key policy because the new principal might not be immediately visible to KMS. For more information, see [
|
|
48
|
+
+ Each statement in the key policy must contain one or more principals. The principals in the key policy must exist and be visible to KMS. When you create a new AWS principal (for example, an IAM user or role), you might need to enforce a delay before including the new principal in a key policy because the new principal might not be immediately visible to KMS. For more information, see [Changes that I make are not always immediately visible](https://docs.aws.amazon.com/IAM/latest/UserGuide/troubleshoot_general.html#troubleshoot_general_eventual-consistency) in the *User Guide*.
|
|
49
|
+
|
|
50
|
+
If you do not provide a key policy, KMS attaches a default key policy to the KMS key. For more information, see [Default key policy](https://docs.aws.amazon.com/kms/latest/developerguide/key-policies.html#key-policy-default) in the *Developer Guide*.
|
|
51
|
+
A key policy document can include only the following characters:
|
|
52
|
+
+ Printable ASCII characters
|
|
53
|
+
+ Printable characters in the Basic Latin and Latin-1 Supplement character set
|
|
54
|
+
+ The tab (``\u0009``), line feed (``\u000A``), and carriage return (``\u000D``) special characters
|
|
55
|
+
|
|
56
|
+
*Minimum*: ``1``
|
|
57
|
+
*Maximum*: ``32768``
|
|
42
58
|
*/
|
|
43
59
|
KeyPolicy?: Record<string, any> | string;
|
|
44
60
|
/**
|
|
45
61
|
* Specifies the type of KMS key to create. The default value, ``SYMMETRIC_DEFAULT``, creates a KMS key with a 256-bit symmetric key for encryption and decryption. In China Regions, ``SYMMETRIC_DEFAULT`` creates a 128-bit symmetric key that uses SM4 encryption. You can't change the ``KeySpec`` value after the KMS key is created. For help choosing a key spec for your KMS key, see [Choosing a KMS key type](https://docs.aws.amazon.com/kms/latest/developerguide/symm-asymm-choose.html) in the *Developer Guide*.
|
|
46
62
|
The ``KeySpec`` property determines the type of key material in the KMS key and the algorithms that the KMS key supports. To further restrict the algorithms that can be used with the KMS key, use a condition key in its key policy or IAM policy. For more information, see [condition keys](https://docs.aws.amazon.com/kms/latest/developerguide/policy-conditions.html#conditions-kms) in the *Developer Guide*.
|
|
47
|
-
If you change the value of the ``KeySpec`` property on an existing KMS key, the
|
|
63
|
+
If you change the value of the ``KeySpec`` property on an existing KMS key, the update request fails, regardless of the value of the [UpdateReplacePolicy attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-updatereplacepolicy.html). This prevents you from accidentally deleting a KMS key by changing an immutable property value.
|
|
64
|
+
[services that are integrated with](https://docs.aws.amazon.com/kms/features/#AWS_Service_Integration) use symmetric encryption KMS keys to protect your data. These services do not support encryption with asymmetric KMS keys. For help determining whether a KMS key is asymmetric, see [Identifying asymmetric KMS keys](https://docs.aws.amazon.com/kms/latest/developerguide/find-symm-asymm.html) in the *Developer Guide*.
|
|
65
|
+
KMS supports the following key specs for KMS keys:
|
|
66
|
+
+ Symmetric encryption key (default)
|
|
67
|
+
+ ``SYMMETRIC_DEFAULT`` (AES-256-GCM)
|
|
68
|
+
|
|
69
|
+
+ HMAC keys (symmetric)
|
|
70
|
+
+ ``HMAC_224``
|
|
71
|
+
+ ``HMAC_256``
|
|
72
|
+
+ ``HMAC_384``
|
|
73
|
+
+ ``HMAC_512``
|
|
74
|
+
|
|
75
|
+
+ Asymmetric RSA key pairs
|
|
76
|
+
+ ``RSA_2048``
|
|
77
|
+
+ ``RSA_3072``
|
|
78
|
+
+ ``RSA_4096``
|
|
79
|
+
|
|
80
|
+
+ Asymmetric NIST-recommended elliptic curve key pairs
|
|
81
|
+
+ ``ECC_NIST_P256`` (secp256r1)
|
|
82
|
+
+ ``ECC_NIST_P384`` (secp384r1)
|
|
83
|
+
+ ``ECC_NIST_P521`` (secp521r1)
|
|
84
|
+
|
|
85
|
+
+ Other asymmetric elliptic curve key pairs
|
|
86
|
+
+ ``ECC_SECG_P256K1`` (secp256k1), commonly used for cryptocurrencies.
|
|
87
|
+
|
|
88
|
+
+ SM2 key pairs (China Regions only)
|
|
89
|
+
+ ``SM2``
|
|
48
90
|
*/
|
|
49
91
|
KeySpec?: "SYMMETRIC_DEFAULT" | "RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2";
|
|
50
92
|
/**
|
|
@@ -53,7 +95,9 @@ export type KMSKeyProperties = {
|
|
|
53
95
|
Select only one valid value.
|
|
54
96
|
+ For symmetric encryption KMS keys, omit the property or specify ``ENCRYPT_DECRYPT``.
|
|
55
97
|
+ For asymmetric KMS keys with RSA key material, specify ``ENCRYPT_DECRYPT`` or ``SIGN_VERIFY``.
|
|
56
|
-
+ For asymmetric KMS keys with ECC key material, specify
|
|
98
|
+
+ For asymmetric KMS keys with ECC key material, specify ``SIGN_VERIFY``.
|
|
99
|
+
+ For asymmetric KMS keys with SM2 (China Regions only) key material, specify ``ENCRYPT_DECRYPT`` or ``SIGN_VERIFY``.
|
|
100
|
+
+ For HMAC KMS keys, specify ``GENERATE_VERIFY_MAC``.
|
|
57
101
|
*/
|
|
58
102
|
KeyUsage?: "ENCRYPT_DECRYPT" | "SIGN_VERIFY" | "GENERATE_VERIFY_MAC";
|
|
59
103
|
/**
|
|
@@ -61,7 +105,9 @@ export type KMSKeyProperties = {
|
|
|
61
105
|
For a list of AWS-Regions in which multi-Region keys are supported, see [Multi-Region keys in](https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html) in the **.
|
|
62
106
|
If you change the value of the ``MultiRegion`` property on an existing KMS key, the update request fails, regardless of the value of the [UpdateReplacePolicy attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-updatereplacepolicy.html). This prevents you from accidentally deleting a KMS key by changing an immutable property value.
|
|
63
107
|
For a multi-Region key, set to this property to ``true``. For a single-Region key, omit this property or set it to ``false``. The default value is ``false``.
|
|
64
|
-
*Multi-Region keys* are an KMS feature that lets you create multiple interoperable KMS keys in different AWS-Regions.
|
|
108
|
+
*Multi-Region keys* are an KMS feature that lets you create multiple interoperable KMS keys in different AWS-Regions. Because these KMS keys have the same key ID, key material, and other metadata, you can use them to encrypt data in one AWS-Region and decrypt it in a different AWS-Region without making a cross-Region call or exposing the plaintext data. For more information, see [Multi-Region keys](https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html) in the *Developer Guide*.
|
|
109
|
+
You can create a symmetric encryption, HMAC, or asymmetric multi-Region KMS key, and you can create a multi-Region key with imported key material. However, you cannot create a multi-Region key in a custom key store.
|
|
110
|
+
To create a replica of this primary key in a different AWS-Region , create an [AWS::KMS::ReplicaKey](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kms-replicakey.html) resource in a CloudFormation stack in the replica Region. Specify the key ARN of this primary key.
|
|
65
111
|
*/
|
|
66
112
|
MultiRegion?: boolean;
|
|
67
113
|
/**
|
|
@@ -74,11 +120,18 @@ export type KMSKeyProperties = {
|
|
|
74
120
|
/**
|
|
75
121
|
* Specifies the number of days in the waiting period before KMS deletes a KMS key that has been removed from a CloudFormation stack. Enter a value between 7 and 30 days. The default value is 30 days.
|
|
76
122
|
When you remove a KMS key from a CloudFormation stack, KMS schedules the KMS key for deletion and starts the mandatory waiting period. The ``PendingWindowInDays`` property determines the length of waiting period. During the waiting period, the key state of KMS key is ``Pending Deletion`` or ``Pending Replica Deletion``, which prevents the KMS key from being used in cryptographic operations. When the waiting period expires, KMS permanently deletes the KMS key.
|
|
77
|
-
KMS will not delete a [multi-Region primary key](https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html) that has replica keys. If you remove a multi-Region primary key from a CloudFormation stack, its key state changes to ``PendingReplicaDeletion`` so it cannot be replicated or used in cryptographic
|
|
123
|
+
KMS will not delete a [multi-Region primary key](https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html) that has replica keys. If you remove a multi-Region primary key from a CloudFormation stack, its key state changes to ``PendingReplicaDeletion`` so it cannot be replicated or used in cryptographic operations. This state can persist indefinitely. When the last of its replica keys is deleted, the key state of the primary key changes to ``PendingDeletion`` and the waiting period specified by ``PendingWindowInDays`` begins. When this waiting period expires, KMS deletes the primary key. For details, see [Deleting multi-Region keys](https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-delete.html) in the *Developer Guide*.
|
|
124
|
+
You cannot use a CloudFormation template to cancel deletion of the KMS key after you remove it from the stack, regardless of the waiting period. If you specify a KMS key in your template, even one with the same name, CloudFormation creates a new KMS key. To cancel deletion of a KMS key, use the KMS console or the [CancelKeyDeletion](https://docs.aws.amazon.com/kms/latest/APIReference/API_CancelKeyDeletion.html) operation.
|
|
125
|
+
For information about the ``Pending Deletion`` and ``Pending Replica Deletion`` key states, see [Key state: Effect on your KMS key](https://docs.aws.amazon.com/kms/latest/developerguide/key-state.html) in the *Developer Guide*. For more information about deleting KMS keys, see the [ScheduleKeyDeletion](https://docs.aws.amazon.com/kms/latest/APIReference/API_ScheduleKeyDeletion.html) operation in the *API Reference* and [Deleting KMS keys](https://docs.aws.amazon.com/kms/latest/developerguide/deleting-keys.html) in the *Developer Guide*.
|
|
78
126
|
* @min `7`
|
|
79
127
|
* @max `30`
|
|
80
128
|
*/
|
|
81
129
|
PendingWindowInDays?: number;
|
|
130
|
+
/**
|
|
131
|
+
* @min `90`
|
|
132
|
+
* @max `2560`
|
|
133
|
+
*/
|
|
134
|
+
RotationPeriodInDays?: number;
|
|
82
135
|
/**
|
|
83
136
|
* Assigns one or more tags to the replica key.
|
|
84
137
|
Tagging or untagging a KMS key can allow or deny permission to the KMS key. For details, see [ABAC for](https://docs.aws.amazon.com/kms/latest/developerguide/abac.html) in the *Developer Guide*.
|
|
@@ -116,7 +169,14 @@ export type Tag = {
|
|
|
116
169
|
/**
|
|
117
170
|
* The ``AWS::KMS::Key`` resource specifies an [KMS key](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#kms_keys) in KMSlong. You can use this resource to create symmetric encryption KMS keys, asymmetric KMS keys for encryption or signing, and symmetric HMAC KMS keys. You can use ``AWS::KMS::Key`` to create [multi-Region primary keys](https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html#mrk-primary-key) of all supported types. To replicate a multi-Region key, use the ``AWS::KMS::ReplicaKey`` resource.
|
|
118
171
|
If you change the value of the ``KeySpec``, ``KeyUsage``, ``Origin``, or ``MultiRegion`` properties of an existing KMS key, the update request fails, regardless of the value of the [UpdateReplacePolicy attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-updatereplacepolicy.html). This prevents you from accidentally deleting a KMS key by changing any of its immutable property values.
|
|
119
|
-
KMS replaced
|
|
172
|
+
KMS replaced the term *customer master key (CMK)* with ** and *KMS key*. The concept has not changed. To prevent breaking changes, KMS is keeping some variations of this term.
|
|
173
|
+
You can use symmetric encryption KMS keys to encrypt and decrypt small amounts of data, but they are more commonly used to generate data keys and data key pairs. You can also use a symmetric encryption KMS key to encrypt data stored in AWS services that are [integrated with](https://docs.aws.amazon.com//kms/features/#AWS_Service_Integration). For more information, see [Symmetric encryption KMS keys](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#symmetric-cmks) in the *Developer Guide*.
|
|
174
|
+
You can use asymmetric KMS keys to encrypt and decrypt data or sign messages and verify signatures. To create an asymmetric key, you must specify an asymmetric ``KeySpec`` value and a ``KeyUsage`` value. For details, see [Asymmetric keys in](https://docs.aws.amazon.com/kms/latest/developerguide/symmetric-asymmetric.html) in the *Developer Guide*.
|
|
175
|
+
You can use HMAC KMS keys (which are also symmetric keys) to generate and verify hash-based message authentication codes. To create an HMAC key, you must specify an HMAC ``KeySpec`` value and a ``KeyUsage`` value of ``GENERATE_VERIFY_MAC``. For details, see [HMAC keys in](https://docs.aws.amazon.com/kms/latest/developerguide/hmac.html) in the *Developer Guide*.
|
|
176
|
+
You can also create symmetric encryption, asymmetric, and HMAC multi-Region primary keys. To create a multi-Region primary key, set the ``MultiRegion`` property to ``true``. For information about multi-Region keys, see [Multi-Region keys in](https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html) in the *Developer Guide*.
|
|
177
|
+
You cannot use the ``AWS::KMS::Key`` resource to specify a KMS key with [imported key material](https://docs.aws.amazon.com/kms/latest/developerguide/importing-keys.html) or a KMS key in a [custom key store](https://docs.aws.amazon.com/kms/latest/developerguide/custom-key-store-overview.html).
|
|
178
|
+
*Regions*
|
|
179
|
+
KMS CloudFormation resources are available in all Regions in which KMS and CFN are supported. You can use the ``AWS::KMS::Key`` resource to create and manage all KMS key types that are supported in a Region.
|
|
120
180
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kms-key.html}
|
|
121
181
|
*/
|
|
122
182
|
export declare class KMSKey extends $Resource<"AWS::KMS::Key", KMSKeyProperties, KMSKeyAttributes> {
|
package/lib/AWS-KMS-Key.js
CHANGED
|
@@ -2,7 +2,14 @@ import { Resource as $Resource } from "@awboost/cfn-template-builder/template/re
|
|
|
2
2
|
/**
|
|
3
3
|
* The ``AWS::KMS::Key`` resource specifies an [KMS key](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#kms_keys) in KMSlong. You can use this resource to create symmetric encryption KMS keys, asymmetric KMS keys for encryption or signing, and symmetric HMAC KMS keys. You can use ``AWS::KMS::Key`` to create [multi-Region primary keys](https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html#mrk-primary-key) of all supported types. To replicate a multi-Region key, use the ``AWS::KMS::ReplicaKey`` resource.
|
|
4
4
|
If you change the value of the ``KeySpec``, ``KeyUsage``, ``Origin``, or ``MultiRegion`` properties of an existing KMS key, the update request fails, regardless of the value of the [UpdateReplacePolicy attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-updatereplacepolicy.html). This prevents you from accidentally deleting a KMS key by changing any of its immutable property values.
|
|
5
|
-
KMS replaced
|
|
5
|
+
KMS replaced the term *customer master key (CMK)* with ** and *KMS key*. The concept has not changed. To prevent breaking changes, KMS is keeping some variations of this term.
|
|
6
|
+
You can use symmetric encryption KMS keys to encrypt and decrypt small amounts of data, but they are more commonly used to generate data keys and data key pairs. You can also use a symmetric encryption KMS key to encrypt data stored in AWS services that are [integrated with](https://docs.aws.amazon.com//kms/features/#AWS_Service_Integration). For more information, see [Symmetric encryption KMS keys](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#symmetric-cmks) in the *Developer Guide*.
|
|
7
|
+
You can use asymmetric KMS keys to encrypt and decrypt data or sign messages and verify signatures. To create an asymmetric key, you must specify an asymmetric ``KeySpec`` value and a ``KeyUsage`` value. For details, see [Asymmetric keys in](https://docs.aws.amazon.com/kms/latest/developerguide/symmetric-asymmetric.html) in the *Developer Guide*.
|
|
8
|
+
You can use HMAC KMS keys (which are also symmetric keys) to generate and verify hash-based message authentication codes. To create an HMAC key, you must specify an HMAC ``KeySpec`` value and a ``KeyUsage`` value of ``GENERATE_VERIFY_MAC``. For details, see [HMAC keys in](https://docs.aws.amazon.com/kms/latest/developerguide/hmac.html) in the *Developer Guide*.
|
|
9
|
+
You can also create symmetric encryption, asymmetric, and HMAC multi-Region primary keys. To create a multi-Region primary key, set the ``MultiRegion`` property to ``true``. For information about multi-Region keys, see [Multi-Region keys in](https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html) in the *Developer Guide*.
|
|
10
|
+
You cannot use the ``AWS::KMS::Key`` resource to specify a KMS key with [imported key material](https://docs.aws.amazon.com/kms/latest/developerguide/importing-keys.html) or a KMS key in a [custom key store](https://docs.aws.amazon.com/kms/latest/developerguide/custom-key-store-overview.html).
|
|
11
|
+
*Regions*
|
|
12
|
+
KMS CloudFormation resources are available in all Regions in which KMS and CFN are supported. You can use the ``AWS::KMS::Key`` resource to create and manage all KMS key types that are supported in a Region.
|
|
6
13
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kms-key.html}
|
|
7
14
|
*/
|
|
8
15
|
export class KMSKey extends $Resource {
|
package/lib/AWS-Oam-Link.d.ts
CHANGED
|
@@ -10,6 +10,7 @@ export type OamLinkProperties = {
|
|
|
10
10
|
* @maxLength `64`
|
|
11
11
|
*/
|
|
12
12
|
LabelTemplate?: string;
|
|
13
|
+
LinkConfiguration?: LinkConfiguration;
|
|
13
14
|
/**
|
|
14
15
|
* @minLength `1`
|
|
15
16
|
* @maxLength `50`
|
|
@@ -36,6 +37,25 @@ export type OamLinkAttributes = {
|
|
|
36
37
|
Arn: string;
|
|
37
38
|
Label: string;
|
|
38
39
|
};
|
|
40
|
+
/**
|
|
41
|
+
* Type definition for `AWS::Oam::Link.LinkConfiguration`.
|
|
42
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-oam-link-linkconfiguration.html}
|
|
43
|
+
*/
|
|
44
|
+
export type LinkConfiguration = {
|
|
45
|
+
LogGroupConfiguration?: LinkFilter;
|
|
46
|
+
MetricConfiguration?: LinkFilter;
|
|
47
|
+
};
|
|
48
|
+
/**
|
|
49
|
+
* Type definition for `AWS::Oam::Link.LinkFilter`.
|
|
50
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-oam-link-linkfilter.html}
|
|
51
|
+
*/
|
|
52
|
+
export type LinkFilter = {
|
|
53
|
+
/**
|
|
54
|
+
* @minLength `1`
|
|
55
|
+
* @maxLength `2000`
|
|
56
|
+
*/
|
|
57
|
+
Filter: string;
|
|
58
|
+
};
|
|
39
59
|
/**
|
|
40
60
|
* Type definition for `AWS::Oam::Link.ResourceType`.
|
|
41
61
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-oam-link-resourcetype.html}
|
|
@@ -74,6 +74,12 @@ export type RedshiftServerlessNamespaceProperties = {
|
|
|
74
74
|
* The ARN for the Redshift application that integrates with IAM Identity Center.
|
|
75
75
|
*/
|
|
76
76
|
RedshiftIdcApplicationArn?: string;
|
|
77
|
+
/**
|
|
78
|
+
* The snapshot copy configurations for the namespace.
|
|
79
|
+
* @minLength `0`
|
|
80
|
+
* @maxLength `1`
|
|
81
|
+
*/
|
|
82
|
+
SnapshotCopyConfigurations?: SnapshotCopyConfiguration[];
|
|
77
83
|
/**
|
|
78
84
|
* The list of tags for the namespace.
|
|
79
85
|
* @minLength `0`
|
|
@@ -135,6 +141,15 @@ export type Namespace = {
|
|
|
135
141
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-redshiftserverless-namespace-namespacestatus.html}
|
|
136
142
|
*/
|
|
137
143
|
export type NamespaceStatus = "AVAILABLE" | "MODIFYING" | "DELETING";
|
|
144
|
+
/**
|
|
145
|
+
* Type definition for `AWS::RedshiftServerless::Namespace.SnapshotCopyConfiguration`.
|
|
146
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-redshiftserverless-namespace-snapshotcopyconfiguration.html}
|
|
147
|
+
*/
|
|
148
|
+
export type SnapshotCopyConfiguration = {
|
|
149
|
+
DestinationKmsKeyId?: string;
|
|
150
|
+
DestinationRegion: string;
|
|
151
|
+
SnapshotRetentionPeriod?: number;
|
|
152
|
+
};
|
|
138
153
|
/**
|
|
139
154
|
* Type definition for `AWS::RedshiftServerless::Namespace.Tag`.
|
|
140
155
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-redshiftserverless-namespace-tag.html}
|
package/lib/AWS-S3-Bucket.d.ts
CHANGED
|
@@ -29,9 +29,6 @@ export type S3BucketProperties = {
|
|
|
29
29
|
/**
|
|
30
30
|
* A name for the bucket. If you don't specify a name, AWS CloudFormation generates a unique ID and uses that ID for the bucket name. The bucket name must contain only lowercase letters, numbers, periods (.), and dashes (-) and must follow [Amazon S3 bucket restrictions and limitations](https://docs.aws.amazon.com/AmazonS3/latest/dev/BucketRestrictions.html). For more information, see [Rules for naming Amazon S3 buckets](https://docs.aws.amazon.com/AmazonS3/latest/dev/BucketRestrictions.html#bucketnamingrules) in the *Amazon S3 User Guide*.
|
|
31
31
|
If you specify a name, you can't perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you need to replace the resource, specify a new name.
|
|
32
|
-
* @minLength `3`
|
|
33
|
-
* @maxLength `63`
|
|
34
|
-
* @pattern `^[a-z0-9][a-z0-9//.//-]*[a-z0-9]$`
|
|
35
32
|
*/
|
|
36
33
|
BucketName?: string;
|
|
37
34
|
/**
|
|
@@ -106,24 +103,12 @@ export type S3BucketProperties = {
|
|
|
106
103
|
*/
|
|
107
104
|
export type S3BucketAttributes = {
|
|
108
105
|
/**
|
|
109
|
-
*
|
|
106
|
+
* the Amazon Resource Name (ARN) of the specified bucket.
|
|
110
107
|
*/
|
|
111
108
|
Arn: string;
|
|
112
|
-
/**
|
|
113
|
-
* The IPv4 DNS name of the specified bucket.
|
|
114
|
-
*/
|
|
115
109
|
DomainName: string;
|
|
116
|
-
/**
|
|
117
|
-
* The IPv6 DNS name of the specified bucket. For more information about dual-stack endpoints, see [Using Amazon S3 Dual-Stack Endpoints](https://docs.aws.amazon.com/AmazonS3/latest/dev/dual-stack-endpoints.html).
|
|
118
|
-
*/
|
|
119
110
|
DualStackDomainName: string;
|
|
120
|
-
/**
|
|
121
|
-
* Returns the regional domain name of the specified bucket.
|
|
122
|
-
*/
|
|
123
111
|
RegionalDomainName: string;
|
|
124
|
-
/**
|
|
125
|
-
* The Amazon S3 website endpoint for the specified bucket.
|
|
126
|
-
*/
|
|
127
112
|
WebsiteURL: string;
|
|
128
113
|
};
|
|
129
114
|
/**
|
|
@@ -7,7 +7,8 @@ import type { ResourceOptions as $ResourceOptions } from "@awboost/cfn-template-
|
|
|
7
7
|
As a security precaution, the root user of the AWS-account that owns a bucket can always use this operation, even if the policy explicitly denies the root user the ability to perform this action.
|
|
8
8
|
For more information, see [Bucket policy examples](https://docs.aws.amazon.com/AmazonS3/latest/userguide/example-bucket-policies.html).
|
|
9
9
|
The following operations are related to ``PutBucketPolicy``:
|
|
10
|
-
+ [
|
|
10
|
+
+ [CreateBucket](https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateBucket.html)
|
|
11
|
+
+ [DeleteBucket](https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteBucket.html)
|
|
11
12
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-s3-bucketpolicy.html}
|
|
12
13
|
*/
|
|
13
14
|
export type S3BucketPolicyProperties = {
|
|
@@ -27,7 +28,8 @@ export type S3BucketPolicyProperties = {
|
|
|
27
28
|
As a security precaution, the root user of the AWS-account that owns a bucket can always use this operation, even if the policy explicitly denies the root user the ability to perform this action.
|
|
28
29
|
For more information, see [Bucket policy examples](https://docs.aws.amazon.com/AmazonS3/latest/userguide/example-bucket-policies.html).
|
|
29
30
|
The following operations are related to ``PutBucketPolicy``:
|
|
30
|
-
+ [
|
|
31
|
+
+ [CreateBucket](https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateBucket.html)
|
|
32
|
+
+ [DeleteBucket](https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteBucket.html)
|
|
31
33
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-s3-bucketpolicy.html}
|
|
32
34
|
*/
|
|
33
35
|
export declare class S3BucketPolicy extends $Resource<"AWS::S3::BucketPolicy", S3BucketPolicyProperties, Record<string, never>> {
|
|
@@ -6,7 +6,8 @@ import { Resource as $Resource } from "@awboost/cfn-template-builder/template/re
|
|
|
6
6
|
As a security precaution, the root user of the AWS-account that owns a bucket can always use this operation, even if the policy explicitly denies the root user the ability to perform this action.
|
|
7
7
|
For more information, see [Bucket policy examples](https://docs.aws.amazon.com/AmazonS3/latest/userguide/example-bucket-policies.html).
|
|
8
8
|
The following operations are related to ``PutBucketPolicy``:
|
|
9
|
-
+ [
|
|
9
|
+
+ [CreateBucket](https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateBucket.html)
|
|
10
|
+
+ [DeleteBucket](https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteBucket.html)
|
|
10
11
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-s3-bucketpolicy.html}
|
|
11
12
|
*/
|
|
12
13
|
export class S3BucketPolicy extends $Resource {
|
|
@@ -0,0 +1,178 @@
|
|
|
1
|
+
import { Resource as $Resource } from "@awboost/cfn-template-builder/template/resource";
|
|
2
|
+
import type { ResourceOptions as $ResourceOptions } from "@awboost/cfn-template-builder/template";
|
|
3
|
+
/**
|
|
4
|
+
* The AWS::Timestream::InfluxDBInstance resource creates an InfluxDB instance.
|
|
5
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-timestream-influxdbinstance.html}
|
|
6
|
+
*/
|
|
7
|
+
export type TimestreamInfluxDBInstanceProperties = {
|
|
8
|
+
/**
|
|
9
|
+
* The allocated storage for the InfluxDB instance.
|
|
10
|
+
* @min `20`
|
|
11
|
+
* @max `16384`
|
|
12
|
+
*/
|
|
13
|
+
AllocatedStorage?: number;
|
|
14
|
+
/**
|
|
15
|
+
* The bucket for the InfluxDB instance.
|
|
16
|
+
* @minLength `2`
|
|
17
|
+
* @maxLength `64`
|
|
18
|
+
* @pattern `^[^_][^"]*$`
|
|
19
|
+
*/
|
|
20
|
+
Bucket?: string;
|
|
21
|
+
/**
|
|
22
|
+
* The compute instance of the InfluxDB instance.
|
|
23
|
+
*/
|
|
24
|
+
DbInstanceType?: "db.influx.medium" | "db.influx.large" | "db.influx.xlarge" | "db.influx.2xlarge" | "db.influx.4xlarge" | "db.influx.8xlarge" | "db.influx.12xlarge" | "db.influx.16xlarge";
|
|
25
|
+
/**
|
|
26
|
+
* The name of an existing InfluxDB parameter group.
|
|
27
|
+
* @minLength `3`
|
|
28
|
+
* @maxLength `64`
|
|
29
|
+
* @pattern `^[a-zA-Z0-9]+$`
|
|
30
|
+
*/
|
|
31
|
+
DbParameterGroupIdentifier?: string;
|
|
32
|
+
/**
|
|
33
|
+
* The storage type of the InfluxDB instance.
|
|
34
|
+
*/
|
|
35
|
+
DbStorageType?: "InfluxIOIncludedT1" | "InfluxIOIncludedT2" | "InfluxIOIncludedT3";
|
|
36
|
+
/**
|
|
37
|
+
* Deployment type of the InfluxDB Instance.
|
|
38
|
+
*/
|
|
39
|
+
DeploymentType?: "SINGLE_AZ" | "WITH_MULTIAZ_STANDBY";
|
|
40
|
+
/**
|
|
41
|
+
* Configuration for sending logs to customer account from the InfluxDB instance.
|
|
42
|
+
*/
|
|
43
|
+
LogDeliveryConfiguration?: {
|
|
44
|
+
/**
|
|
45
|
+
* S3 configuration for sending logs to customer account from the InfluxDB instance.
|
|
46
|
+
*/
|
|
47
|
+
S3Configuration: {
|
|
48
|
+
/**
|
|
49
|
+
* The bucket name for logs to be sent from the InfluxDB instance
|
|
50
|
+
* @minLength `3`
|
|
51
|
+
* @maxLength `63`
|
|
52
|
+
* @pattern `^[0-9a-z]+[0-9a-z\.\-]*[0-9a-z]+$`
|
|
53
|
+
*/
|
|
54
|
+
BucketName: string;
|
|
55
|
+
/**
|
|
56
|
+
* Specifies whether logging to customer specified bucket is enabled.
|
|
57
|
+
*/
|
|
58
|
+
Enabled: boolean;
|
|
59
|
+
};
|
|
60
|
+
};
|
|
61
|
+
/**
|
|
62
|
+
* The unique name that is associated with the InfluxDB instance.
|
|
63
|
+
* @minLength `3`
|
|
64
|
+
* @maxLength `40`
|
|
65
|
+
* @pattern `^[a-zA-z][a-zA-Z0-9]*(-[a-zA-Z0-9]+)*$`
|
|
66
|
+
*/
|
|
67
|
+
Name?: string;
|
|
68
|
+
/**
|
|
69
|
+
* The organization for the InfluxDB instance.
|
|
70
|
+
* @minLength `1`
|
|
71
|
+
* @maxLength `64`
|
|
72
|
+
*/
|
|
73
|
+
Organization?: string;
|
|
74
|
+
/**
|
|
75
|
+
* The password for the InfluxDB instance.
|
|
76
|
+
* @minLength `8`
|
|
77
|
+
* @maxLength `64`
|
|
78
|
+
* @pattern `^[a-zA-Z0-9]+$`
|
|
79
|
+
*/
|
|
80
|
+
Password?: string;
|
|
81
|
+
/**
|
|
82
|
+
* Attach a public IP to the customer ENI.
|
|
83
|
+
*/
|
|
84
|
+
PubliclyAccessible?: boolean;
|
|
85
|
+
/**
|
|
86
|
+
* An arbitrary set of tags (key-value pairs) for this DB instance.
|
|
87
|
+
* @minLength `1`
|
|
88
|
+
* @maxLength `200`
|
|
89
|
+
*/
|
|
90
|
+
Tags?: Tag[];
|
|
91
|
+
/**
|
|
92
|
+
* The username for the InfluxDB instance.
|
|
93
|
+
* @minLength `1`
|
|
94
|
+
* @maxLength `64`
|
|
95
|
+
*/
|
|
96
|
+
Username?: string;
|
|
97
|
+
/**
|
|
98
|
+
* A list of Amazon EC2 VPC security groups to associate with this InfluxDB instance.
|
|
99
|
+
* @minLength `1`
|
|
100
|
+
* @maxLength `5`
|
|
101
|
+
*/
|
|
102
|
+
VpcSecurityGroupIds?: string[];
|
|
103
|
+
/**
|
|
104
|
+
* A list of EC2 subnet IDs for this InfluxDB instance.
|
|
105
|
+
* @minLength `1`
|
|
106
|
+
* @maxLength `3`
|
|
107
|
+
*/
|
|
108
|
+
VpcSubnetIds?: string[];
|
|
109
|
+
};
|
|
110
|
+
/**
|
|
111
|
+
* Attribute type definition for `AWS::Timestream::InfluxDBInstance`.
|
|
112
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-timestream-influxdbinstance.html#aws-resource-timestream-influxdbinstance-return-values}
|
|
113
|
+
*/
|
|
114
|
+
export type TimestreamInfluxDBInstanceAttributes = {
|
|
115
|
+
/**
|
|
116
|
+
* The Amazon Resource Name (ARN) that is associated with the InfluxDB instance.
|
|
117
|
+
* @minLength `1`
|
|
118
|
+
* @maxLength `1011`
|
|
119
|
+
* @pattern `^arn:aws[a-z\-]*:timestream\-influxdb:[a-z0-9\-]+:[0-9]{12}:(db\-instance)/[a-zA-Z0-9]{3,64}$`
|
|
120
|
+
*/
|
|
121
|
+
Arn: string;
|
|
122
|
+
/**
|
|
123
|
+
* The Availability Zone (AZ) where the InfluxDB instance is created.
|
|
124
|
+
*/
|
|
125
|
+
AvailabilityZone: string;
|
|
126
|
+
/**
|
|
127
|
+
* The connection endpoint for the InfluxDB instance.
|
|
128
|
+
*/
|
|
129
|
+
Endpoint: string;
|
|
130
|
+
/**
|
|
131
|
+
* The service generated unique identifier for InfluxDB instance.
|
|
132
|
+
* @minLength `3`
|
|
133
|
+
* @maxLength `64`
|
|
134
|
+
* @pattern `^[a-zA-Z0-9]+$`
|
|
135
|
+
*/
|
|
136
|
+
Id: string;
|
|
137
|
+
/**
|
|
138
|
+
* The Auth parameters secret Amazon Resource name (ARN) that is associated with the InfluxDB instance.
|
|
139
|
+
* @pattern `^arn:[a-z]*:secretsmanager:[a-z\-0-9]*:[0-9]*:secret:[a-zA-Z0-9\-]*`
|
|
140
|
+
*/
|
|
141
|
+
InfluxAuthParametersSecretArn: string;
|
|
142
|
+
/**
|
|
143
|
+
* The Secondary Availability Zone (AZ) where the InfluxDB instance is created, if DeploymentType is set as WITH_MULTIAZ_STANDBY.
|
|
144
|
+
*/
|
|
145
|
+
SecondaryAvailabilityZone: string;
|
|
146
|
+
/**
|
|
147
|
+
* Status of the InfluxDB Instance.
|
|
148
|
+
*/
|
|
149
|
+
Status: "CREATING" | "AVAILABLE" | "DELETING" | "MODIFYING" | "UPDATING" | "DELETED" | "FAILED";
|
|
150
|
+
};
|
|
151
|
+
/**
|
|
152
|
+
* Type definition for `AWS::Timestream::InfluxDBInstance.Tag`.
|
|
153
|
+
* A key-value pair to associate with a resource.
|
|
154
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-timestream-influxdbinstance-tag.html}
|
|
155
|
+
*/
|
|
156
|
+
export type Tag = {
|
|
157
|
+
/**
|
|
158
|
+
* The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
|
|
159
|
+
* @minLength `1`
|
|
160
|
+
* @maxLength `128`
|
|
161
|
+
*/
|
|
162
|
+
Key: string;
|
|
163
|
+
/**
|
|
164
|
+
* The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
|
|
165
|
+
* @minLength `0`
|
|
166
|
+
* @maxLength `256`
|
|
167
|
+
*/
|
|
168
|
+
Value?: string;
|
|
169
|
+
};
|
|
170
|
+
/**
|
|
171
|
+
* The AWS::Timestream::InfluxDBInstance resource creates an InfluxDB instance.
|
|
172
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-timestream-influxdbinstance.html}
|
|
173
|
+
*/
|
|
174
|
+
export declare class TimestreamInfluxDBInstance extends $Resource<"AWS::Timestream::InfluxDBInstance", TimestreamInfluxDBInstanceProperties, TimestreamInfluxDBInstanceAttributes> {
|
|
175
|
+
static readonly Type = "AWS::Timestream::InfluxDBInstance";
|
|
176
|
+
constructor(logicalId: string, properties: TimestreamInfluxDBInstanceProperties, options?: $ResourceOptions);
|
|
177
|
+
}
|
|
178
|
+
//# sourceMappingURL=AWS-Timestream-InfluxDBInstance.d.ts.map
|
|
@@ -0,0 +1,12 @@
|
|
|
1
|
+
import { Resource as $Resource } from "@awboost/cfn-template-builder/template/resource";
|
|
2
|
+
/**
|
|
3
|
+
* The AWS::Timestream::InfluxDBInstance resource creates an InfluxDB instance.
|
|
4
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-timestream-influxdbinstance.html}
|
|
5
|
+
*/
|
|
6
|
+
export class TimestreamInfluxDBInstance extends $Resource {
|
|
7
|
+
static Type = "AWS::Timestream::InfluxDBInstance";
|
|
8
|
+
constructor(logicalId, properties, options) {
|
|
9
|
+
super(logicalId, TimestreamInfluxDBInstance.Type, properties, options);
|
|
10
|
+
}
|
|
11
|
+
}
|
|
12
|
+
//# sourceMappingURL=AWS-Timestream-InfluxDBInstance.js.map
|
|
@@ -1,7 +1,8 @@
|
|
|
1
1
|
import { Resource as $Resource } from "@awboost/cfn-template-builder/template/resource";
|
|
2
2
|
import type { ResourceOptions as $ResourceOptions } from "@awboost/cfn-template-builder/template";
|
|
3
3
|
/**
|
|
4
|
-
*
|
|
4
|
+
* Resource type definition for `AWS::VerifiedPermissions::PolicyStore`.
|
|
5
|
+
* Represents a policy store that you can place schema, policies, and policy templates in to validate authorization requests
|
|
5
6
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-verifiedpermissions-policystore.html}
|
|
6
7
|
*/
|
|
7
8
|
export type VerifiedPermissionsPolicyStoreProperties = {
|
|
@@ -51,7 +52,8 @@ export type ValidationSettings = {
|
|
|
51
52
|
Mode: ValidationMode;
|
|
52
53
|
};
|
|
53
54
|
/**
|
|
54
|
-
*
|
|
55
|
+
* Resource type definition for `AWS::VerifiedPermissions::PolicyStore`.
|
|
56
|
+
* Represents a policy store that you can place schema, policies, and policy templates in to validate authorization requests
|
|
55
57
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-verifiedpermissions-policystore.html}
|
|
56
58
|
*/
|
|
57
59
|
export declare class VerifiedPermissionsPolicyStore extends $Resource<"AWS::VerifiedPermissions::PolicyStore", VerifiedPermissionsPolicyStoreProperties, VerifiedPermissionsPolicyStoreAttributes> {
|
|
@@ -1,6 +1,7 @@
|
|
|
1
1
|
import { Resource as $Resource } from "@awboost/cfn-template-builder/template/resource";
|
|
2
2
|
/**
|
|
3
|
-
*
|
|
3
|
+
* Resource type definition for `AWS::VerifiedPermissions::PolicyStore`.
|
|
4
|
+
* Represents a policy store that you can place schema, policies, and policy templates in to validate authorization requests
|
|
4
5
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-verifiedpermissions-policystore.html}
|
|
5
6
|
*/
|
|
6
7
|
export class VerifiedPermissionsPolicyStore extends $Resource {
|