@awboost/cfn-resource-types 0.1.95 → 0.1.97

package/lib/AWS-Bedrock-Agent.d.ts

@@ -43,6 +43,10 @@ export type BedrockAgentProperties = {
      * @pattern `^arn:aws(-[^:]+)?:bedrock:[a-z0-9-]{1,20}:(([0-9]{12}:custom-model/[a-z0-9-]{1,63}[.]{1}[a-z0-9-]{1,63}(([:][a-z0-9-]{1,63}){0,2})?/[a-z0-9]{12})|(:foundation-model/([a-z0-9-]{1,63}[.]{1}[a-z0-9-]{1,63}([.]?[a-z0-9-]{1,63})([:][a-z0-9-]{1,63}){0,2})))|(([a-z0-9-]{1,63}[.]{1}[a-z0-9-]{1,63}([.]?[a-z0-9-]{1,63})([:][a-z0-9-]{1,63}){0,2}))|(([0-9a-zA-Z][_-]?)+)$`
      */
     FoundationModel?: string;
+    /**
+     * Configuration for a guardrail.
+     */
+    GuardrailConfiguration?: GuardrailConfiguration;
     /**
      * Max Session Time.
      * @min `60`
@@ -287,6 +291,24 @@ export type FunctionSchema = {
      */
     Functions: Function[];
 };
+/**
+ * Type definition for `AWS::Bedrock::Agent.GuardrailConfiguration`.
+ * Configuration for a guardrail.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrock-agent-guardrailconfiguration.html}
+ */
+export type GuardrailConfiguration = {
+    /**
+     * Identifier for the guardrail, could be the id or the arn
+     * @maxLength `2048`
+     * @pattern `^(([a-z0-9]+)|(arn:aws(-[^:]+)?:bedrock:[a-z0-9-]{1,20}:[0-9]{12}:guardrail/[a-z0-9]+))$`
+     */
+    GuardrailIdentifier?: string;
+    /**
+     * Version of the guardrail
+     * @pattern `^(([0-9]{1,8})|(DRAFT))$`
+     */
+    GuardrailVersion?: string;
+};
 /**
  * Type definition for `AWS::Bedrock::Agent.InferenceConfiguration`.
  * Configuration for inference in prompt configuration

package/lib/AWS-Cognito-UserPoolResourceServer.d.ts

@@ -10,13 +10,6 @@ export type CognitoUserPoolResourceServerProperties = {
     Scopes?: ResourceServerScopeType[];
     UserPoolId: string;
 };
-/**
- * Attribute type definition for `AWS::Cognito::UserPoolResourceServer`.
- * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-userpoolresourceserver.html#aws-resource-cognito-userpoolresourceserver-return-values}
- */
-export type CognitoUserPoolResourceServerAttributes = {
-    Id: string;
-};
 /**
  * Type definition for `AWS::Cognito::UserPoolResourceServer.ResourceServerScopeType`.
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpoolresourceserver-resourceserverscopetype.html}
@@ -29,7 +22,7 @@ export type ResourceServerScopeType = {
  * Resource Type definition for AWS::Cognito::UserPoolResourceServer
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-userpoolresourceserver.html}
  */
-export declare class CognitoUserPoolResourceServer extends $Resource<"AWS::Cognito::UserPoolResourceServer", CognitoUserPoolResourceServerProperties, CognitoUserPoolResourceServerAttributes> {
+export declare class CognitoUserPoolResourceServer extends $Resource<"AWS::Cognito::UserPoolResourceServer", CognitoUserPoolResourceServerProperties, Record<string, never>> {
     static readonly Type = "AWS::Cognito::UserPoolResourceServer";
     constructor(logicalId: string, properties: CognitoUserPoolResourceServerProperties, options?: $ResourceOptions);
 }

package/lib/AWS-EC2-CustomerGateway.d.ts

@@ -7,16 +7,20 @@ import type { ResourceOptions as $ResourceOptions } from "@awboost/cfn-template-
  */
 export type EC2CustomerGatewayProperties = {
     /**
-       * For devices that support BGP, the customer gateway's BGP ASN.
+       * For customer gateway devices that support BGP, specify the device's ASN. You must specify either ``BgpAsn`` or ``BgpAsnExtended`` when creating the customer gateway. If the ASN is larger than ``2,147,483,647``, you must use ``BgpAsnExtended``.
        Default: 65000
+       Valid values: ``1`` to ``2,147,483,647``
        */
     BgpAsn?: number;
     /**
-     * @min `2147483648`
-     * @max `4294967294`
-     */
+       * For customer gateway devices that support BGP, specify the device's ASN. You must specify either ``BgpAsn`` or ``BgpAsnExtended`` when creating the customer gateway. If the ASN is larger than ``2,147,483,647``, you must use ``BgpAsnExtended``.
+       Valid values: ``2,147,483,648`` to ``4,294,967,295``
+       * @min `2147483648`
+       * @max `4294967294`
+       */
     BgpAsnExtended?: number;
     /**
+     * The Amazon Resource Name (ARN) for the customer gateway certificate.
      * @pattern `^arn:(aws[a-zA-Z-]*)?:acm:[a-z]{2}((-gov)|(-iso(b?)))?-[a-z]+-\d{1}:\d{12}:certificate\/[a-zA-Z0-9-_]+$`
      */
     CertificateArn?: string;
@@ -25,7 +29,7 @@ export type EC2CustomerGatewayProperties = {
      */
     DeviceName?: string;
     /**
-     * IPv4 address for the customer gateway device's outside interface. The address must be static.
+     * IPv4 address for the customer gateway device's outside interface. The address must be static. If ``OutsideIpAddressType`` in your VPN connection options is set to ``PrivateIpv4``, you can use an RFC6598 or RFC1918 private IPv4 address. If ``OutsideIpAddressType`` is set to ``PublicIpv4``, you can use a public IPv4 address.
      */
     IpAddress: string;
     /**

package/lib/AWS-GuardDuty-Filter.d.ts

@@ -11,13 +11,13 @@ export type GuardDutyFilterProperties = {
      * @minLength `1`
      * @maxLength `300`
      */
-    DetectorId?: string;
+    DetectorId: string;
     FindingCriteria: FindingCriteria;
     /**
      * @minLength `1`
      * @maxLength `64`
      */
-    Name?: string;
+    Name: string;
     /**
      * @min `1`
      * @max `100`

package/lib/AWS-KMS-Key.d.ts

@@ -99,7 +99,7 @@ export type KMSKeyProperties = {
         +  For asymmetric KMS keys with SM2 (China Regions only) key material, specify ``ENCRYPT_DECRYPT`` or ``SIGN_VERIFY``.
         +  For HMAC KMS keys, specify ``GENERATE_VERIFY_MAC``.
        */
-    KeyUsage?: "ENCRYPT_DECRYPT" | "SIGN_VERIFY" | "GENERATE_VERIFY_MAC";
+    KeyUsage?: "ENCRYPT_DECRYPT" | "SIGN_VERIFY" | "GENERATE_VERIFY_MAC" | "KEY_AGREEMENT";
     /**
        * Creates a multi-Region primary key that you can replicate in other AWS-Regions. You can't change the ``MultiRegion`` value after the KMS key is created.
        For a list of AWS-Regions in which multi-Region keys are supported, see [Multi-Region keys in](https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html) in the **.

package/lib/AWS-MediaPackageV2-Channel.d.ts

@@ -39,6 +39,7 @@ export type MediaPackageV2ChannelAttributes = {
      * <p>The date and time the channel was created.</p>
      */
     CreatedAt: string;
+    IngestEndpointUrls: string[];
     /**
      * <p>The list of ingest endpoints.</p>
      */

package/lib/AWS-MediaPackageV2-OriginEndpoint.d.ts

@@ -68,6 +68,8 @@ export type MediaPackageV2OriginEndpointAttributes = {
      * <p>The date and time the origin endpoint was created.</p>
      */
     CreatedAt: string;
+    DashManifestUrls: string[];
+    HlsManifestUrls: string[];
     /**
      * <p>An HTTP live streaming (HLS) manifest configuration.</p>
      */
@@ -77,6 +79,7 @@ export type MediaPackageV2OriginEndpointAttributes = {
          */
         Url: string;
     }[];
+    LowLatencyHlsManifestUrls: string[];
     /**
      * <p>A low-latency HLS manifest configuration.</p>
      */

package/lib/AWS-RDS-DBCluster.d.ts

@@ -98,6 +98,10 @@ export type RDSDBClusterProperties = {
      * The name of the database engine to be used for this DB cluster. Valid Values: aurora (for MySQL 5.6-compatible Aurora), aurora-mysql (for MySQL 5.7-compatible Aurora), and aurora-postgresql
      */
     Engine?: string;
+    /**
+     * The life cycle type of the DB cluster. You can use this setting to enroll your DB cluster into Amazon RDS Extended Support.
+     */
+    EngineLifecycleSupport?: string;
     /**
      * The DB engine mode of the DB cluster, either provisioned, serverless, parallelquery, global, or multimaster.
      */

package/lib/AWS-RDS-DBInstance.d.ts

@@ -412,6 +412,7 @@ export type RDSDBInstanceProperties = {
         +   ``sqlserver-web``
        */
     Engine?: string;
+    EngineLifecycleSupport?: string;
     /**
        * The version number of the database engine to use.
        For a list of valid engine versions, use the ``DescribeDBEngineVersions`` action.
@@ -443,7 +444,8 @@ export type RDSDBInstanceProperties = {
     Iops?: number;
     /**
        * The ARN of the AWS KMS key that's used to encrypt the DB instance, such as ``arn:aws:kms:us-east-1:012345678910:key/abcd1234-a123-456a-a12b-a123b4cd56ef``. If you enable the StorageEncrypted property but don't specify this property, AWS CloudFormation uses the default KMS key. If you specify this property, you must set the StorageEncrypted property to true.
-       If you specify the ``SourceDBInstanceIdentifier`` property, the value is inherited from the source DB instance if the read replica is created in the same region.
+       If you specify the ``SourceDBInstanceIdentifier`` or ``SourceDbiResourceId`` property, don't specify this property. The value is inherited from the source DB instance, and if the DB instance is encrypted, the specified ``KmsKeyId`` property is used. However, if the source DB instance is in a different AWS Region, you must specify a KMS key ID.
+       If you specify the ``SourceDBInstanceAutomatedBackupsArn`` property, don't specify this property. The value is inherited from the source DB instance automated backup, and if the automated backup is encrypted, the specified ``KmsKeyId`` property is used.
        If you create an encrypted read replica in a different AWS Region, then you must specify a KMS key for the destination AWS Region. KMS encryption keys are specific to the region that they're created in, and you can't use encryption keys from one region in another region.
        If you specify the ``DBSnapshotIdentifier`` property, don't specify this property. The ``StorageEncrypted`` property value is inherited from the snapshot. If the DB instance is encrypted, the specified ``KmsKeyId`` property is also inherited from the snapshot.
        If you specify ``DBSecurityGroups``, AWS CloudFormation ignores this property. To specify both a security group and this property, you must use a VPC security group. For more information about Amazon RDS and VPC, see [Using Amazon RDS with Amazon VPC](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_VPC.html) in the *Amazon RDS User Guide*.
@@ -689,7 +691,8 @@ export type RDSDBInstanceProperties = {
     /**
        * If you want to create a read replica DB instance, specify the ID of the source DB instance. Each DB instance can have a limited number of read replicas. For more information, see [Working with Read Replicas](https://docs.aws.amazon.com/AmazonRDS/latest/DeveloperGuide/USER_ReadRepl.html) in the *Amazon RDS User Guide*.
        For information about constraints that apply to DB instance identifiers, see [Naming constraints in Amazon RDS](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_Limits.html#RDS_Limits.Constraints) in the *Amazon RDS User Guide*.
-       The ``SourceDBInstanceIdentifier`` property determines whether a DB instance is a read replica. If you remove the ``SourceDBInstanceIdentifier`` property from your template and then update your stack, AWS CloudFormation promotes the Read Replica to a standalone DB instance.
+       The ``SourceDBInstanceIdentifier`` property determines whether a DB instance is a read replica. If you remove the ``SourceDBInstanceIdentifier`` property from your template and then update your stack, AWS CloudFormation promotes the read replica to a standalone DB instance.
+       If you specify the ``UseLatestRestorableTime`` or ``RestoreTime`` properties in conjunction with the ``SourceDBInstanceIdentifier`` property, RDS restores the DB instance to the requested point in time, thereby creating a new DB instance.
          +  If you specify a source DB instance that uses VPC security groups, we recommend that you specify the ``VPCSecurityGroups`` property. If you don't specify the property, the read replica inherits the value of the ``VPCSecurityGroups`` property from the source DB when you create the replica. However, if you update the stack, AWS CloudFormation reverts the replica's ``VPCSecurityGroups`` property to the default value because it's not defined in the stack's template. This change might cause unexpected issues.
         +  Read replicas don't support deletion policies. AWS CloudFormation ignores any deletion policy that's associated with a read replica.
         +  If you specify ``SourceDBInstanceIdentifier``, don't specify the ``DBSnapshotIdentifier`` property. You can't create a read replica from a snapshot.
@@ -709,7 +712,8 @@ export type RDSDBInstanceProperties = {
     /**
        * A value that indicates whether the DB instance is encrypted. By default, it isn't encrypted.
        If you specify the ``KmsKeyId`` property, then you must enable encryption.
-       If you specify the ``SourceDBInstanceIdentifier`` property, don't specify this property. The value is inherited from the source DB instance, and if the DB instance is encrypted, the specified ``KmsKeyId`` property is used.
+       If you specify the ``SourceDBInstanceIdentifier`` or ``SourceDbiResourceId`` property, don't specify this property. The value is inherited from the source DB instance, and if the DB instance is encrypted, the specified ``KmsKeyId`` property is used.
+       If you specify the ``SourceDBInstanceAutomatedBackupsArn`` property, don't specify this property. The value is inherited from the source DB instance automated backup.
        If you specify ``DBSnapshotIdentifier`` property, don't specify this property. The value is inherited from the snapshot.
         *Amazon Aurora*
        Not applicable. The encryption for DB instances is managed by the DB cluster.
@@ -862,7 +866,7 @@ export type ProcessorFeature = {
 /**
  * Type definition for `AWS::RDS::DBInstance.Tag`.
  * Metadata assigned to an Amazon RDS resource consisting of a key-value pair.
- For more information, see [Tagging Amazon RDS Resources](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Tagging.html) in the *Amazon RDS User Guide.*
+ For more information, see [Tagging Amazon RDS Resources](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Tagging.html) in the *Amazon RDS User Guide* or [Tagging Amazon Aurora and Amazon RDS Resources](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_Tagging.html) in the *Amazon Aurora User Guide*.
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-dbinstance-tag.html}
  */
 export type Tag = {

package/lib/AWS-RDS-DBParameterGroup.d.ts

@@ -52,7 +52,7 @@ export type RDSDBParameterGroupProperties = {
 /**
  * Type definition for `AWS::RDS::DBParameterGroup.Tag`.
  * Metadata assigned to an Amazon RDS resource consisting of a key-value pair.
- For more information, see [Tagging Amazon RDS Resources](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Tagging.html) in the *Amazon RDS User Guide.*
+ For more information, see [Tagging Amazon RDS Resources](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Tagging.html) in the *Amazon RDS User Guide* or [Tagging Amazon Aurora and Amazon RDS Resources](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_Tagging.html) in the *Amazon Aurora User Guide*.
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-dbparametergroup-tag.html}
  */
 export type Tag = {

package/lib/AWS-RDS-DBSubnetGroup.d.ts

@@ -14,7 +14,6 @@ export type RDSDBSubnetGroupProperties = {
        * The name for the DB subnet group. This value is stored as a lowercase string.
        Constraints: Must contain no more than 255 lowercase alphanumeric characters or hyphens. Must not be "Default".
        Example: ``mysubnetgroup``
-       * @pattern `^(?!default$)[a-zA-Z]{1}[a-zA-Z0-9-_\.\s]{0,254}$`
        */
     DBSubnetGroupName?: string;
     /**
@@ -30,7 +29,7 @@ export type RDSDBSubnetGroupProperties = {
 /**
  * Type definition for `AWS::RDS::DBSubnetGroup.Tag`.
  * Metadata assigned to an Amazon RDS resource consisting of a key-value pair.
- For more information, see [Tagging Amazon RDS Resources](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Tagging.html) in the *Amazon RDS User Guide.*
+ For more information, see [Tagging Amazon RDS Resources](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Tagging.html) in the *Amazon RDS User Guide* or [Tagging Amazon Aurora and Amazon RDS Resources](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_Tagging.html) in the *Amazon Aurora User Guide*.
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-dbsubnetgroup-tag.html}
  */
 export type Tag = {

package/lib/AWS-SES-ConfigurationSetEventDestination.d.ts

@@ -57,6 +57,19 @@ export type DimensionConfiguration = {
      */
     DimensionValueSource: string;
 };
+/**
+ * Type definition for `AWS::SES::ConfigurationSetEventDestination.EventBridgeDestination`.
+ * An object that contains Event bus ARN associated with the event bridge destination.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ses-configurationseteventdestination-eventbridgedestination.html}
+ */
+export type EventBridgeDestination = {
+    /**
+     * @minLength `36`
+     * @maxLength `1024`
+     * @pattern `^arn:aws[a-z0-9-]*:events:[a-z0-9-]+:\d{12}:event-bus/[^:]+$`
+     */
+    EventBusArn: string;
+};
 /**
  * Type definition for `AWS::SES::ConfigurationSetEventDestination.EventDestination`.
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ses-configurationseteventdestination-eventdestination.html}
@@ -70,6 +83,10 @@ export type EventDestination = {
      * Sets whether Amazon SES publishes events to this destination when you send an email with the associated configuration set. Set to true to enable publishing to this destination; set to false to prevent publishing to this destination. The default value is false.
      */
     Enabled?: boolean;
+    /**
+     * An object that contains Event bus ARN associated with the event bridge destination.
+     */
+    EventBridgeDestination?: EventBridgeDestination;
     /**
      * An object that contains the delivery stream ARN and the IAM role ARN associated with an Amazon Kinesis Firehose event destination.
      */

package/lib/AWS-Signer-ProfilePermission.d.ts

@@ -8,6 +8,9 @@ import type { ResourceOptions as $ResourceOptions } from "@awboost/cfn-template-
 export type SignerProfilePermissionProperties = {
     Action: string;
     Principal: string;
+    /**
+     * @pattern `^[0-9a-zA-Z_]{2,64}$`
+     */
     ProfileName: string;
     /**
      * @pattern `^[0-9a-zA-Z]{10}$`

package/lib/AWS-Signer-SigningProfile.d.ts

@@ -30,7 +30,10 @@ export type SignerSigningProfileAttributes = {
      */
     Arn: string;
     /**
-     * A name for the signing profile. AWS CloudFormation generates a unique physical ID and uses that ID for the signing profile name.
+     * A name for the signing profile. If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the signing profile name.
+     * @minLength `2`
+     * @maxLength `64`
+     * @pattern `^[0-9a-zA-Z_]$`
      */
     ProfileName: string;
     /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@awboost/cfn-resource-types",
-  "version": "0.1.95",
+  "version": "0.1.97",
   "publishConfig": {
     "access": "public"
   },