@aws-cdk/mixins-preview 2.267.0-alpha.0 → 2.268.0-alpha.0

package/lib/services/aws-networkfirewall/logs-delivery-mixins.generated.d.ts

@@ -4,109 +4,115 @@ import * as constructs from "constructs";
 import * as logsDelivery from "../aws-logs/logs-delivery";
 import * as service from "aws-cdk-lib/aws-networkfirewall";
 /**
- * Builder for CfnFirewallLogsMixin to generate ALERT_LOGS for CfnFirewall
+ * Builder for CfnFirewallLogsMixin to generate DENY_LOGS for CfnFirewall
  *
  * @cloudformationResource AWS::NetworkFirewall::Firewall
- * @logType ALERT_LOGS
+ * @logType DENY_LOGS
  * @stability external
  */
-export declare class CfnFirewallAlertLogs {
+export declare class CfnFirewallDenyLogs {
     /**
      * Send logs to an S3 Bucket
      *
      * @param props Additional properties that are optionally used in log delivery for S3 destinations
      */
-    toS3(bucket: interfaces.aws_s3.IBucketRef, props?: CfnFirewallAlertLogsS3Props): CfnFirewallLogsMixin;
+    toS3(bucket: interfaces.aws_s3.IBucketRef, props?: CfnFirewallDenyLogsS3Props): CfnFirewallLogsMixin;
     /**
      * Send logs to a CloudWatch Log Group
      *
      * @param props Additional properties that are optionally used in log delivery for Log Group destinations
      */
-    toLogGroup(logGroup: interfaces.aws_logs.ILogGroupRef, props?: CfnFirewallAlertLogsLogGroupProps): CfnFirewallLogsMixin;
+    toLogGroup(logGroup: interfaces.aws_logs.ILogGroupRef, props?: CfnFirewallDenyLogsLogGroupProps): CfnFirewallLogsMixin;
     /**
      * Send logs to a Firehose Delivery Stream
      *
      * @param props Additional properties that are optionally used in log delivery for Firehose destinations
      */
-    toFirehose(deliveryStream: interfaces.aws_kinesisfirehose.IDeliveryStreamRef, props?: CfnFirewallAlertLogsFirehoseProps): CfnFirewallLogsMixin;
+    toFirehose(deliveryStream: interfaces.aws_kinesisfirehose.IDeliveryStreamRef, props?: CfnFirewallDenyLogsFirehoseProps): CfnFirewallLogsMixin;
     /**
      * Delivers logs to a pre-created delivery destination
      *
      * Supported destinations are S3, CWL, FH
      * You are responsible for setting up the correct permissions for your delivery destination, toDestination() does not set up any permissions for you.
      * Delivery destinations that are imported from another stack using CfnDeliveryDestination.fromDeliveryDestinationArn() or CfnDeliveryDestination.fromDeliveryDestinationName() are supported by toDestination().
+     *
+     * @param props Additional properties that are optionally used in log delivery for destinations
      */
-    toDestination(destination: interfaces.aws_logs.IDeliveryDestinationRef): CfnFirewallLogsMixin;
+    toDestination(destination: interfaces.aws_logs.IDeliveryDestinationRef, props?: CfnFirewallDenyLogsDestProps): CfnFirewallLogsMixin;
 }
 /**
- * Builder for CfnFirewallLogsMixin to generate FLOW_LOGS for CfnFirewall
+ * Builder for CfnFirewallLogsMixin to generate ALERT_LOGS for CfnFirewall
  *
  * @cloudformationResource AWS::NetworkFirewall::Firewall
- * @logType FLOW_LOGS
+ * @logType ALERT_LOGS
  * @stability external
  */
-export declare class CfnFirewallFlowLogs {
+export declare class CfnFirewallAlertLogs {
     /**
      * Send logs to an S3 Bucket
      *
      * @param props Additional properties that are optionally used in log delivery for S3 destinations
      */
-    toS3(bucket: interfaces.aws_s3.IBucketRef, props?: CfnFirewallFlowLogsS3Props): CfnFirewallLogsMixin;
+    toS3(bucket: interfaces.aws_s3.IBucketRef, props?: CfnFirewallAlertLogsS3Props): CfnFirewallLogsMixin;
     /**
      * Send logs to a CloudWatch Log Group
      *
      * @param props Additional properties that are optionally used in log delivery for Log Group destinations
      */
-    toLogGroup(logGroup: interfaces.aws_logs.ILogGroupRef, props?: CfnFirewallFlowLogsLogGroupProps): CfnFirewallLogsMixin;
+    toLogGroup(logGroup: interfaces.aws_logs.ILogGroupRef, props?: CfnFirewallAlertLogsLogGroupProps): CfnFirewallLogsMixin;
     /**
      * Send logs to a Firehose Delivery Stream
      *
      * @param props Additional properties that are optionally used in log delivery for Firehose destinations
      */
-    toFirehose(deliveryStream: interfaces.aws_kinesisfirehose.IDeliveryStreamRef, props?: CfnFirewallFlowLogsFirehoseProps): CfnFirewallLogsMixin;
+    toFirehose(deliveryStream: interfaces.aws_kinesisfirehose.IDeliveryStreamRef, props?: CfnFirewallAlertLogsFirehoseProps): CfnFirewallLogsMixin;
     /**
      * Delivers logs to a pre-created delivery destination
      *
      * Supported destinations are S3, CWL, FH
      * You are responsible for setting up the correct permissions for your delivery destination, toDestination() does not set up any permissions for you.
      * Delivery destinations that are imported from another stack using CfnDeliveryDestination.fromDeliveryDestinationArn() or CfnDeliveryDestination.fromDeliveryDestinationName() are supported by toDestination().
+     *
+     * @param props Additional properties that are optionally used in log delivery for destinations
      */
-    toDestination(destination: interfaces.aws_logs.IDeliveryDestinationRef): CfnFirewallLogsMixin;
+    toDestination(destination: interfaces.aws_logs.IDeliveryDestinationRef, props?: CfnFirewallAlertLogsDestProps): CfnFirewallLogsMixin;
 }
 /**
- * Builder for CfnFirewallLogsMixin to generate TLS_LOGS for CfnFirewall
+ * Builder for CfnFirewallLogsMixin to generate ALLOW_LOGS for CfnFirewall
  *
  * @cloudformationResource AWS::NetworkFirewall::Firewall
- * @logType TLS_LOGS
+ * @logType ALLOW_LOGS
  * @stability external
  */
-export declare class CfnFirewallTlsLogs {
+export declare class CfnFirewallAllowLogs {
     /**
      * Send logs to an S3 Bucket
      *
      * @param props Additional properties that are optionally used in log delivery for S3 destinations
      */
-    toS3(bucket: interfaces.aws_s3.IBucketRef, props?: CfnFirewallTlsLogsS3Props): CfnFirewallLogsMixin;
+    toS3(bucket: interfaces.aws_s3.IBucketRef, props?: CfnFirewallAllowLogsS3Props): CfnFirewallLogsMixin;
     /**
      * Send logs to a CloudWatch Log Group
      *
      * @param props Additional properties that are optionally used in log delivery for Log Group destinations
      */
-    toLogGroup(logGroup: interfaces.aws_logs.ILogGroupRef, props?: CfnFirewallTlsLogsLogGroupProps): CfnFirewallLogsMixin;
+    toLogGroup(logGroup: interfaces.aws_logs.ILogGroupRef, props?: CfnFirewallAllowLogsLogGroupProps): CfnFirewallLogsMixin;
     /**
      * Send logs to a Firehose Delivery Stream
      *
      * @param props Additional properties that are optionally used in log delivery for Firehose destinations
      */
-    toFirehose(deliveryStream: interfaces.aws_kinesisfirehose.IDeliveryStreamRef, props?: CfnFirewallTlsLogsFirehoseProps): CfnFirewallLogsMixin;
+    toFirehose(deliveryStream: interfaces.aws_kinesisfirehose.IDeliveryStreamRef, props?: CfnFirewallAllowLogsFirehoseProps): CfnFirewallLogsMixin;
     /**
      * Delivers logs to a pre-created delivery destination
      *
      * Supported destinations are S3, CWL, FH
      * You are responsible for setting up the correct permissions for your delivery destination, toDestination() does not set up any permissions for you.
      * Delivery destinations that are imported from another stack using CfnDeliveryDestination.fromDeliveryDestinationArn() or CfnDeliveryDestination.fromDeliveryDestinationName() are supported by toDestination().
+     *
+     * @param props Additional properties that are optionally used in log delivery for destinations
      */
-    toDestination(destination: interfaces.aws_logs.IDeliveryDestinationRef): CfnFirewallLogsMixin;
+    toDestination(destination: interfaces.aws_logs.IDeliveryDestinationRef, props?: CfnFirewallAllowLogsDestProps): CfnFirewallLogsMixin;
 }
 /**
  * Use the firewall to provide stateful, managed, network firewall and intrusion detection and prevention filtering for your VPCs in Amazon VPC .
@@ -119,9 +125,9 @@ export declare class CfnFirewallTlsLogs {
  * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-firewall.html
  */
 export declare class CfnFirewallLogsMixin extends cdk.Mixin implements constructs.IMixin {
+    static readonly DENY_LOGS: CfnFirewallDenyLogs;
     static readonly ALERT_LOGS: CfnFirewallAlertLogs;
-    static readonly FLOW_LOGS: CfnFirewallFlowLogs;
-    static readonly TLS_LOGS: CfnFirewallTlsLogs;
+    static readonly ALLOW_LOGS: CfnFirewallAllowLogs;
     protected readonly logType: string;
     protected readonly logDelivery: logsDelivery.ILogsDelivery;
     /**
@@ -141,14 +147,14 @@ export declare class CfnFirewallLogsMixin extends cdk.Mixin implements construct
     applyTo(resource: constructs.IConstruct): void;
 }
 /**
- * Output Format options for each destination of CfnFirewallAlertLogs.
+ * Output Format options for each destination of CfnFirewallDenyLogs.
  */
-export declare class CfnFirewallAlertLogsOutputFormat {
+export declare class CfnFirewallDenyLogsOutputFormat {
 }
-export declare namespace CfnFirewallAlertLogsOutputFormat {
+export declare namespace CfnFirewallDenyLogsOutputFormat {
     enum S3 {
-        JSON = "json",
         PLAIN = "plain",
+        JSON = "json",
         W3C = "w3c",
         PARQUET = "parquet"
     }
@@ -157,42 +163,85 @@ export declare namespace CfnFirewallAlertLogsOutputFormat {
         JSON = "json"
     }
     enum Firehose {
-        JSON = "json",
         PLAIN = "plain",
+        JSON = "json",
         RAW = "raw"
     }
 }
-export interface CfnFirewallAlertLogsS3Props {
+export declare enum CfnFirewallDenyLogsRecordFields {
+    TIMESTAMP = "timestamp",
+    RESOURCE_ARN = "resource_arn",
+    RESOURCEID = "resourceId",
+    CLIENT_SRC_IP = "client_src_ip",
+    CLIENT_SRC_PORT = "client_src_port",
+    SRC_VPC = "src_vpc",
+    SRC_VPCE = "src_vpce",
+    VPCE_ACCOUNT_ID = "vpce_account_id",
+    DEST_DOMAIN = "dest_domain",
+    URL = "url",
+    HTTP_METHOD = "http_method",
+    DEST_IP = "dest_ip",
+    DEST_PORT = "dest_port",
+    HTTP_STATUS_CODE = "http_status_code",
+    FIRST_ALERT_MATCH = "first_alert_match",
+    ALL_MATCHES = "all_matches",
+    FINAL_RULE_NAME = "final_rule_name",
+    FINAL_RULE_GROUP_NAME = "final_rule_group_name",
+    REQUEST_SIZE = "request_size",
+    RESPONSE_SIZE = "response_size",
+    EVENT_TIMESTAMP = "event_timestamp",
+    PROXY_NAME = "proxy_name",
+    FINAL_ACTION = "final_action"
+}
+export interface CfnFirewallDenyLogsS3Props {
     /**
      * Encrpytion key for your delivery bucket
      */
     readonly encryptionKey?: interfaces.aws_kms.IKeyRef;
     /**
-     * Format for log output, options are json,plain,w3c,parquet
+     * Format for log output, options are plain,json,w3c,parquet
      */
-    readonly outputFormat?: CfnFirewallAlertLogsOutputFormat.S3;
+    readonly outputFormat?: CfnFirewallDenyLogsOutputFormat.S3;
+    /**
+     * Record fields that can be provided to a log delivery
+     */
+    readonly recordFields?: Array<CfnFirewallDenyLogsRecordFields>;
 }
-export interface CfnFirewallAlertLogsLogGroupProps {
+export interface CfnFirewallDenyLogsLogGroupProps {
     /**
      * Format for log output, options are plain,json
      */
-    readonly outputFormat?: CfnFirewallAlertLogsOutputFormat.LogGroup;
+    readonly outputFormat?: CfnFirewallDenyLogsOutputFormat.LogGroup;
+    /**
+     * Record fields that can be provided to a log delivery
+     */
+    readonly recordFields?: Array<CfnFirewallDenyLogsRecordFields>;
 }
-export interface CfnFirewallAlertLogsFirehoseProps {
+export interface CfnFirewallDenyLogsFirehoseProps {
     /**
-     * Format for log output, options are json,plain,raw
+     * Format for log output, options are plain,json,raw
      */
-    readonly outputFormat?: CfnFirewallAlertLogsOutputFormat.Firehose;
+    readonly outputFormat?: CfnFirewallDenyLogsOutputFormat.Firehose;
+    /**
+     * Record fields that can be provided to a log delivery
+     */
+    readonly recordFields?: Array<CfnFirewallDenyLogsRecordFields>;
+}
+export interface CfnFirewallDenyLogsDestProps {
+    /**
+     * Record fields that can be provided to a log delivery
+     */
+    readonly recordFields?: Array<CfnFirewallDenyLogsRecordFields>;
 }
 /**
- * Output Format options for each destination of CfnFirewallFlowLogs.
+ * Output Format options for each destination of CfnFirewallAlertLogs.
  */
-export declare class CfnFirewallFlowLogsOutputFormat {
+export declare class CfnFirewallAlertLogsOutputFormat {
 }
-export declare namespace CfnFirewallFlowLogsOutputFormat {
+export declare namespace CfnFirewallAlertLogsOutputFormat {
     enum S3 {
-        JSON = "json",
         PLAIN = "plain",
+        JSON = "json",
         W3C = "w3c",
         PARQUET = "parquet"
     }
@@ -201,42 +250,85 @@ export declare namespace CfnFirewallFlowLogsOutputFormat {
         JSON = "json"
     }
     enum Firehose {
-        JSON = "json",
         PLAIN = "plain",
+        JSON = "json",
         RAW = "raw"
     }
 }
-export interface CfnFirewallFlowLogsS3Props {
+export declare enum CfnFirewallAlertLogsRecordFields {
+    TIMESTAMP = "timestamp",
+    RESOURCE_ARN = "resource_arn",
+    RESOURCEID = "resourceId",
+    CLIENT_SRC_IP = "client_src_ip",
+    CLIENT_SRC_PORT = "client_src_port",
+    SRC_VPC = "src_vpc",
+    SRC_VPCE = "src_vpce",
+    VPCE_ACCOUNT_ID = "vpce_account_id",
+    DEST_DOMAIN = "dest_domain",
+    URL = "url",
+    HTTP_METHOD = "http_method",
+    DEST_IP = "dest_ip",
+    DEST_PORT = "dest_port",
+    HTTP_STATUS_CODE = "http_status_code",
+    FIRST_ALERT_MATCH = "first_alert_match",
+    ALL_MATCHES = "all_matches",
+    FINAL_RULE_NAME = "final_rule_name",
+    FINAL_RULE_GROUP_NAME = "final_rule_group_name",
+    REQUEST_SIZE = "request_size",
+    RESPONSE_SIZE = "response_size",
+    EVENT_TIMESTAMP = "event_timestamp",
+    PROXY_NAME = "proxy_name",
+    FINAL_ACTION = "final_action"
+}
+export interface CfnFirewallAlertLogsS3Props {
     /**
      * Encrpytion key for your delivery bucket
      */
     readonly encryptionKey?: interfaces.aws_kms.IKeyRef;
     /**
-     * Format for log output, options are json,plain,w3c,parquet
+     * Format for log output, options are plain,json,w3c,parquet
      */
-    readonly outputFormat?: CfnFirewallFlowLogsOutputFormat.S3;
+    readonly outputFormat?: CfnFirewallAlertLogsOutputFormat.S3;
+    /**
+     * Record fields that can be provided to a log delivery
+     */
+    readonly recordFields?: Array<CfnFirewallAlertLogsRecordFields>;
 }
-export interface CfnFirewallFlowLogsLogGroupProps {
+export interface CfnFirewallAlertLogsLogGroupProps {
     /**
      * Format for log output, options are plain,json
      */
-    readonly outputFormat?: CfnFirewallFlowLogsOutputFormat.LogGroup;
+    readonly outputFormat?: CfnFirewallAlertLogsOutputFormat.LogGroup;
+    /**
+     * Record fields that can be provided to a log delivery
+     */
+    readonly recordFields?: Array<CfnFirewallAlertLogsRecordFields>;
 }
-export interface CfnFirewallFlowLogsFirehoseProps {
+export interface CfnFirewallAlertLogsFirehoseProps {
     /**
-     * Format for log output, options are json,plain,raw
+     * Format for log output, options are plain,json,raw
      */
-    readonly outputFormat?: CfnFirewallFlowLogsOutputFormat.Firehose;
+    readonly outputFormat?: CfnFirewallAlertLogsOutputFormat.Firehose;
+    /**
+     * Record fields that can be provided to a log delivery
+     */
+    readonly recordFields?: Array<CfnFirewallAlertLogsRecordFields>;
+}
+export interface CfnFirewallAlertLogsDestProps {
+    /**
+     * Record fields that can be provided to a log delivery
+     */
+    readonly recordFields?: Array<CfnFirewallAlertLogsRecordFields>;
 }
 /**
- * Output Format options for each destination of CfnFirewallTlsLogs.
+ * Output Format options for each destination of CfnFirewallAllowLogs.
  */
-export declare class CfnFirewallTlsLogsOutputFormat {
+export declare class CfnFirewallAllowLogsOutputFormat {
 }
-export declare namespace CfnFirewallTlsLogsOutputFormat {
+export declare namespace CfnFirewallAllowLogsOutputFormat {
     enum S3 {
-        JSON = "json",
         PLAIN = "plain",
+        JSON = "json",
         W3C = "w3c",
         PARQUET = "parquet"
     }
@@ -245,30 +337,73 @@ export declare namespace CfnFirewallTlsLogsOutputFormat {
         JSON = "json"
     }
     enum Firehose {
-        JSON = "json",
         PLAIN = "plain",
+        JSON = "json",
         RAW = "raw"
     }
 }
-export interface CfnFirewallTlsLogsS3Props {
+export declare enum CfnFirewallAllowLogsRecordFields {
+    TIMESTAMP = "timestamp",
+    RESOURCE_ARN = "resource_arn",
+    RESOURCEID = "resourceId",
+    CLIENT_SRC_IP = "client_src_ip",
+    CLIENT_SRC_PORT = "client_src_port",
+    SRC_VPC = "src_vpc",
+    SRC_VPCE = "src_vpce",
+    VPCE_ACCOUNT_ID = "vpce_account_id",
+    DEST_DOMAIN = "dest_domain",
+    URL = "url",
+    HTTP_METHOD = "http_method",
+    DEST_IP = "dest_ip",
+    DEST_PORT = "dest_port",
+    HTTP_STATUS_CODE = "http_status_code",
+    FIRST_ALERT_MATCH = "first_alert_match",
+    ALL_MATCHES = "all_matches",
+    FINAL_RULE_NAME = "final_rule_name",
+    FINAL_RULE_GROUP_NAME = "final_rule_group_name",
+    REQUEST_SIZE = "request_size",
+    RESPONSE_SIZE = "response_size",
+    EVENT_TIMESTAMP = "event_timestamp",
+    PROXY_NAME = "proxy_name",
+    FINAL_ACTION = "final_action"
+}
+export interface CfnFirewallAllowLogsS3Props {
     /**
      * Encrpytion key for your delivery bucket
      */
     readonly encryptionKey?: interfaces.aws_kms.IKeyRef;
     /**
-     * Format for log output, options are json,plain,w3c,parquet
+     * Format for log output, options are plain,json,w3c,parquet
      */
-    readonly outputFormat?: CfnFirewallTlsLogsOutputFormat.S3;
+    readonly outputFormat?: CfnFirewallAllowLogsOutputFormat.S3;
+    /**
+     * Record fields that can be provided to a log delivery
+     */
+    readonly recordFields?: Array<CfnFirewallAllowLogsRecordFields>;
 }
-export interface CfnFirewallTlsLogsLogGroupProps {
+export interface CfnFirewallAllowLogsLogGroupProps {
     /**
      * Format for log output, options are plain,json
      */
-    readonly outputFormat?: CfnFirewallTlsLogsOutputFormat.LogGroup;
+    readonly outputFormat?: CfnFirewallAllowLogsOutputFormat.LogGroup;
+    /**
+     * Record fields that can be provided to a log delivery
+     */
+    readonly recordFields?: Array<CfnFirewallAllowLogsRecordFields>;
+}
+export interface CfnFirewallAllowLogsFirehoseProps {
+    /**
+     * Format for log output, options are plain,json,raw
+     */
+    readonly outputFormat?: CfnFirewallAllowLogsOutputFormat.Firehose;
+    /**
+     * Record fields that can be provided to a log delivery
+     */
+    readonly recordFields?: Array<CfnFirewallAllowLogsRecordFields>;
 }
-export interface CfnFirewallTlsLogsFirehoseProps {
+export interface CfnFirewallAllowLogsDestProps {
     /**
-     * Format for log output, options are json,plain,raw
+     * Record fields that can be provided to a log delivery
      */
-    readonly outputFormat?: CfnFirewallTlsLogsOutputFormat.Firehose;
+    readonly recordFields?: Array<CfnFirewallAllowLogsRecordFields>;
 }