@aws-sdk/client-securityhub 3.338.0 → 3.342.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (29) hide show
  1. package/dist-cjs/models/models_1.js +1 -37
  2. package/dist-cjs/models/models_2.js +37 -1
  3. package/dist-cjs/protocols/Aws_restJson1.js +12 -2
  4. package/dist-es/models/models_1.js +0 -35
  5. package/dist-es/models/models_2.js +35 -0
  6. package/dist-es/protocols/Aws_restJson1.js +11 -1
  7. package/dist-types/commands/BatchEnableStandardsCommand.d.ts +3 -3
  8. package/dist-types/commands/BatchGetSecurityControlsCommand.d.ts +39 -1
  9. package/dist-types/commands/BatchGetStandardsControlAssociationsCommand.d.ts +51 -1
  10. package/dist-types/commands/BatchImportFindingsCommand.d.ts +172 -1
  11. package/dist-types/commands/BatchUpdateFindingsCommand.d.ts +1 -1
  12. package/dist-types/commands/BatchUpdateStandardsControlAssociationsCommand.d.ts +41 -1
  13. package/dist-types/commands/CreateActionTargetCommand.d.ts +1 -1
  14. package/dist-types/commands/CreateFindingAggregatorCommand.d.ts +1 -1
  15. package/dist-types/commands/GetFindingsCommand.d.ts +171 -0
  16. package/dist-types/models/models_0.d.ts +551 -367
  17. package/dist-types/models/models_1.d.ts +6083 -6124
  18. package/dist-types/models/models_2.d.ts +841 -3
  19. package/dist-types/ts3.4/commands/BatchGetSecurityControlsCommand.d.ts +1 -1
  20. package/dist-types/ts3.4/commands/BatchGetStandardsControlAssociationsCommand.d.ts +1 -1
  21. package/dist-types/ts3.4/commands/BatchImportFindingsCommand.d.ts +1 -1
  22. package/dist-types/ts3.4/commands/BatchUpdateFindingsCommand.d.ts +1 -1
  23. package/dist-types/ts3.4/commands/BatchUpdateStandardsControlAssociationsCommand.d.ts +1 -1
  24. package/dist-types/ts3.4/commands/CreateActionTargetCommand.d.ts +1 -1
  25. package/dist-types/ts3.4/commands/CreateFindingAggregatorCommand.d.ts +1 -1
  26. package/dist-types/ts3.4/models/models_0.d.ts +98 -84
  27. package/dist-types/ts3.4/models/models_1.d.ts +175 -177
  28. package/dist-types/ts3.4/models/models_2.d.ts +178 -4
  29. package/package.json +28 -28
@@ -652,6 +652,318 @@ export interface AvailabilityZone {
652
652
  */
653
653
  SubnetId?: string;
654
654
  }
655
+ /**
656
+ * @public
657
+ * <p>
658
+ * Provides details about broker encryption options.
659
+ * </p>
660
+ */
661
+ export interface AwsAmazonMqBrokerEncryptionOptionsDetails {
662
+ /**
663
+ * <p>
664
+ * The KMS key that’s used to encrypt your data at rest. If not provided, Amazon MQ will use a
665
+ * default KMS key to encrypt your data.
666
+ * </p>
667
+ */
668
+ KmsKeyId?: string;
669
+ /**
670
+ * <p>
671
+ * Specifies that an KMS key should be used for at-rest encryption. Set to <code>true</code> by default
672
+ * if no value is provided (for example, for RabbitMQ brokers).
673
+ * </p>
674
+ */
675
+ UseAwsOwnedKey?: boolean;
676
+ }
677
+ /**
678
+ * @public
679
+ * <p>
680
+ * The metadata of the Lightweight Directory Access Protocol (LDAP) server used to authenticate and authorize
681
+ * connections to the broker. This is an optional failover server.
682
+ * </p>
683
+ */
684
+ export interface AwsAmazonMqBrokerLdapServerMetadataDetails {
685
+ /**
686
+ * <p>
687
+ * Specifies the location of the LDAP server, such as Amazon Web Services Directory Service for Microsoft Active Directory.
688
+ * </p>
689
+ */
690
+ Hosts?: string[];
691
+ /**
692
+ * <p>
693
+ * The distinguished name of the node in the directory information tree (DIT) to search for roles or groups.
694
+ * </p>
695
+ */
696
+ RoleBase?: string;
697
+ /**
698
+ * <p>
699
+ * The group name attribute in a role entry whose value is the name of that role.
700
+ * </p>
701
+ */
702
+ RoleName?: string;
703
+ /**
704
+ * <p>
705
+ * The LDAP search filter used to find roles within the <code>roleBase</code>.
706
+ * </p>
707
+ */
708
+ RoleSearchMatching?: string;
709
+ /**
710
+ * <p>
711
+ * The directory search scope for the role. If set to <code>true</code>, the scope is to search the entire subtree.
712
+ * </p>
713
+ */
714
+ RoleSearchSubtree?: boolean;
715
+ /**
716
+ * <p>
717
+ * A username for the service account, which is an account in your LDAP server that has access to initiate a connection.
718
+ * </p>
719
+ */
720
+ ServiceAccountUsername?: string;
721
+ /**
722
+ * <p>
723
+ * Selects a particular subtree of the directory information tree (DIT) to search for user entries.
724
+ * </p>
725
+ */
726
+ UserBase?: string;
727
+ /**
728
+ * <p>
729
+ * The name of the LDAP attribute in the user's directory entry for the user's group membership. </p>
730
+ */
731
+ UserRoleName?: string;
732
+ /**
733
+ * <p>
734
+ * The LDAP search filter used to find users within the <code>userBase</code>.
735
+ * </p>
736
+ */
737
+ UserSearchMatching?: string;
738
+ /**
739
+ * <p>
740
+ * The directory search scope for the user. If set to true, the scope is to search the entire subtree.
741
+ * </p>
742
+ */
743
+ UserSearchSubtree?: boolean;
744
+ }
745
+ /**
746
+ * @public
747
+ * <p>
748
+ * Provides information about logs to be activated for the specified broker.
749
+ * </p>
750
+ */
751
+ export interface AwsAmazonMqBrokerLogsPendingDetails {
752
+ /**
753
+ * <p>
754
+ * Activates audit logging. Every user management action made using JMX or the ActiveMQ Web Console is logged. Doesn't apply
755
+ * to RabbitMQ brokers.
756
+ * </p>
757
+ */
758
+ Audit?: boolean;
759
+ /**
760
+ * <p>
761
+ * Activates general logging.
762
+ * </p>
763
+ */
764
+ General?: boolean;
765
+ }
766
+ /**
767
+ * @public
768
+ * <p>
769
+ * Provides information about logs to be activated for the specified broker.
770
+ * </p>
771
+ */
772
+ export interface AwsAmazonMqBrokerLogsDetails {
773
+ /**
774
+ * <p>
775
+ * Activates audit logging. Every user management action made using JMX or the ActiveMQ Web Console is logged. Doesn't apply to RabbitMQ brokers.
776
+ * </p>
777
+ */
778
+ Audit?: boolean;
779
+ /**
780
+ * <p>
781
+ * Activates general logging.
782
+ * </p>
783
+ */
784
+ General?: boolean;
785
+ /**
786
+ * <p>
787
+ * The location of the CloudWatch Logs log group where audit logs are sent.
788
+ * </p>
789
+ */
790
+ AuditLogGroup?: string;
791
+ /**
792
+ * <p>
793
+ * The location of the CloudWatch Logs log group where general logs are sent.
794
+ * </p>
795
+ */
796
+ GeneralLogGroup?: string;
797
+ /**
798
+ * <p>
799
+ * The list of information about logs that are to be turned on for the specified broker.
800
+ * </p>
801
+ */
802
+ Pending?: AwsAmazonMqBrokerLogsPendingDetails;
803
+ }
804
+ /**
805
+ * @public
806
+ * <p>
807
+ * The scheduled time period (UTC) during which Amazon MQ begins to apply pending updates or patches to the broker.
808
+ * </p>
809
+ */
810
+ export interface AwsAmazonMqBrokerMaintenanceWindowStartTimeDetails {
811
+ /**
812
+ * <p>
813
+ * The day of the week on which the maintenance window falls.
814
+ * </p>
815
+ */
816
+ DayOfWeek?: string;
817
+ /**
818
+ * <p>
819
+ * The time, in 24-hour format, on which the maintenance window falls.
820
+ * </p>
821
+ */
822
+ TimeOfDay?: string;
823
+ /**
824
+ * <p>
825
+ * The time zone in either the Country/City format or the UTC offset format. UTC is the default format.
826
+ * </p>
827
+ */
828
+ TimeZone?: string;
829
+ }
830
+ /**
831
+ * @public
832
+ * <p>
833
+ * Provides details about the broker usernames for the specified broker. Doesn't apply to RabbitMQ brokers.
834
+ * </p>
835
+ */
836
+ export interface AwsAmazonMqBrokerUsersDetails {
837
+ /**
838
+ * <p>
839
+ * The type of change pending for the broker user.
840
+ * </p>
841
+ */
842
+ PendingChange?: string;
843
+ /**
844
+ * <p>
845
+ * The username of the broker user.
846
+ * </p>
847
+ */
848
+ Username?: string;
849
+ }
850
+ /**
851
+ * @public
852
+ * <p>
853
+ * Provides details about an Amazon MQ message broker. A message broker allows software applications and
854
+ * components to communicate using various programming languages, operating systems, and formal messaging protocols.
855
+ * </p>
856
+ */
857
+ export interface AwsAmazonMqBrokerDetails {
858
+ /**
859
+ * <p>
860
+ * The authentication strategy used to secure the broker. The default is <code>SIMPLE</code>.
861
+ * </p>
862
+ */
863
+ AuthenticationStrategy?: string;
864
+ /**
865
+ * <p>
866
+ * Whether automatically upgrade new minor versions for brokers, as new versions are released and supported by Amazon MQ.
867
+ * Automatic upgrades occur during the scheduled maintenance window of the broker or after a manual broker reboot.
868
+ * </p>
869
+ */
870
+ AutoMinorVersionUpgrade?: boolean;
871
+ /**
872
+ * <p>
873
+ * The Amazon Resource Name (ARN) of the broker.
874
+ * </p>
875
+ */
876
+ BrokerArn?: string;
877
+ /**
878
+ * <p>The broker's name.
879
+ * </p>
880
+ */
881
+ BrokerName?: string;
882
+ /**
883
+ * <p>
884
+ * The broker's deployment mode.
885
+ * </p>
886
+ */
887
+ DeploymentMode?: string;
888
+ /**
889
+ * <p>
890
+ * Encryption options for the broker. Doesn’t apply to RabbitMQ brokers.
891
+ * </p>
892
+ */
893
+ EncryptionOptions?: AwsAmazonMqBrokerEncryptionOptionsDetails;
894
+ /**
895
+ * <p>
896
+ * The type of broker engine.
897
+ * </p>
898
+ */
899
+ EngineType?: string;
900
+ /**
901
+ * <p>
902
+ * The version of the broker engine.
903
+ * </p>
904
+ */
905
+ EngineVersion?: string;
906
+ /**
907
+ * <p>
908
+ * The broker's instance type.
909
+ * </p>
910
+ */
911
+ HostInstanceType?: string;
912
+ /**
913
+ * <p>
914
+ * The unique ID that Amazon MQ generates for the broker.
915
+ * </p>
916
+ */
917
+ BrokerId?: string;
918
+ /**
919
+ * <p>
920
+ * The metadata of the Lightweight Directory Access Protocol (LDAP) server used to authenticate and authorize connections to the broker. This is an optional failover server.
921
+ * </p>
922
+ */
923
+ LdapServerMetadata?: AwsAmazonMqBrokerLdapServerMetadataDetails;
924
+ /**
925
+ * <p>
926
+ * Turns on Amazon CloudWatch logging for brokers.
927
+ * </p>
928
+ */
929
+ Logs?: AwsAmazonMqBrokerLogsDetails;
930
+ /**
931
+ * <p>
932
+ * The scheduled time period (UTC) during which Amazon MQ begins to apply pending updates or patches to the broker.
933
+ * </p>
934
+ */
935
+ MaintenanceWindowStartTime?: AwsAmazonMqBrokerMaintenanceWindowStartTimeDetails;
936
+ /**
937
+ * <p>
938
+ * Permits connections from applications outside of the VPC that hosts the broker's subnets.
939
+ * </p>
940
+ */
941
+ PubliclyAccessible?: boolean;
942
+ /**
943
+ * <p>
944
+ * The list of rules (one minimum, 125 maximum) that authorize connections to brokers.
945
+ * </p>
946
+ */
947
+ SecurityGroups?: string[];
948
+ /**
949
+ * <p>
950
+ * The broker's storage type.
951
+ * </p>
952
+ */
953
+ StorageType?: string;
954
+ /**
955
+ * <p>
956
+ * The list of groups that define which subnets and IP ranges the broker can use from different Availability Zones.
957
+ * </p>
958
+ */
959
+ SubnetIds?: string[];
960
+ /**
961
+ * <p>
962
+ * The list of all broker usernames for the specified broker. Doesn't apply to RabbitMQ brokers.
963
+ * </p>
964
+ */
965
+ Users?: AwsAmazonMqBrokerUsersDetails[];
966
+ }
655
967
  /**
656
968
  * @public
657
969
  * <p>Contains information about settings for logging access for the stage.</p>
@@ -1125,6 +1437,245 @@ export interface AwsApiGatewayV2StageDetails {
1125
1437
  */
1126
1438
  ApiGatewayManaged?: boolean;
1127
1439
  }
1440
+ /**
1441
+ * @public
1442
+ * <p>
1443
+ * Specifies the authorization configuration for using an Lambda function with your AppSync
1444
+ * GraphQL API endpoint.
1445
+ * </p>
1446
+ */
1447
+ export interface AwsAppSyncGraphQlApiLambdaAuthorizerConfigDetails {
1448
+ /**
1449
+ * <p>
1450
+ * The number of seconds a response should be cached for. The default is 5 minutes (300 seconds).
1451
+ * </p>
1452
+ */
1453
+ AuthorizerResultTtlInSeconds?: number;
1454
+ /**
1455
+ * <p>
1456
+ * The Amazon Resource Name (ARN) of the Lambda function to be called for authorization. This can be a
1457
+ * standard Lambda ARN, a version ARN (.../v3), or an alias ARN.
1458
+ * </p>
1459
+ */
1460
+ AuthorizerUri?: string;
1461
+ /**
1462
+ * <p>
1463
+ * A regular expression for validation of tokens before the Lambda function is called.
1464
+ * </p>
1465
+ */
1466
+ IdentityValidationExpression?: string;
1467
+ }
1468
+ /**
1469
+ * @public
1470
+ * <p>
1471
+ * Specifies the authorization configuration for using an OpenID Connect compliant service with your AppSync GraphQL
1472
+ * API endpoint.
1473
+ * </p>
1474
+ */
1475
+ export interface AwsAppSyncGraphQlApiOpenIdConnectConfigDetails {
1476
+ /**
1477
+ * <p>
1478
+ * The number of milliseconds that a token is valid after being authenticated.
1479
+ * </p>
1480
+ */
1481
+ AuthTtL?: number;
1482
+ /**
1483
+ * <p>
1484
+ * The client identifier of the relying party at the OpenID identity provider. This identifier is typically obtained
1485
+ * when the relying party is registered with the OpenID identity provider. You can specify a regular expression so that
1486
+ * AppSync can validate against multiple client identifiers at a time.
1487
+ * </p>
1488
+ */
1489
+ ClientId?: string;
1490
+ /**
1491
+ * <p>
1492
+ * The number of milliseconds that a token is valid after it's issued to a user.
1493
+ * </p>
1494
+ */
1495
+ IatTtL?: number;
1496
+ /**
1497
+ * <p>
1498
+ * The issuer for the OIDC configuration. The issuer returned by discovery must exactly match the value of <code>iss</code>
1499
+ * in the ID token.
1500
+ * </p>
1501
+ */
1502
+ Issuer?: string;
1503
+ }
1504
+ /**
1505
+ * @public
1506
+ * <p>
1507
+ * Specifies the authorization configuration for using Amazon Cognito user pools with your AppSync GraphQL API
1508
+ * endpoint.
1509
+ * </p>
1510
+ */
1511
+ export interface AwsAppSyncGraphQlApiUserPoolConfigDetails {
1512
+ /**
1513
+ * <p>
1514
+ * A regular expression for validating the incoming Amazon Cognito user pools app client ID. If this value isn't set, no
1515
+ * filtering is applied.
1516
+ * </p>
1517
+ */
1518
+ AppIdClientRegex?: string;
1519
+ /**
1520
+ * <p>
1521
+ * The Amazon Web Services Region in which the user pool was created.
1522
+ * </p>
1523
+ */
1524
+ AwsRegion?: string;
1525
+ /**
1526
+ * <p>
1527
+ * The action that you want your GraphQL API to take when a request that uses Amazon Cognito user pools
1528
+ * authentication doesn't match the Amazon Cognito user pools configuration.
1529
+ * </p>
1530
+ */
1531
+ DefaultAction?: string;
1532
+ /**
1533
+ * <p>
1534
+ * The user pool ID.
1535
+ * </p>
1536
+ */
1537
+ UserPoolId?: string;
1538
+ }
1539
+ /**
1540
+ * @public
1541
+ * <p>
1542
+ * A list of additional authentication providers for the GraphqlApi API.
1543
+ * </p>
1544
+ */
1545
+ export interface AwsAppSyncGraphQlApiAdditionalAuthenticationProvidersDetails {
1546
+ /**
1547
+ * <p>
1548
+ * The type of security configuration for your GraphQL API: API key, Identity and Access Management (IAM), OpenID Connect (OIDC), Amazon Cognito user pools, or Lambda.
1549
+ * </p>
1550
+ */
1551
+ AuthenticationType?: string;
1552
+ /**
1553
+ * <p>
1554
+ * The configuration for Lambda function authorization.
1555
+ * </p>
1556
+ */
1557
+ LambdaAuthorizerConfig?: AwsAppSyncGraphQlApiLambdaAuthorizerConfigDetails;
1558
+ /**
1559
+ * <p>
1560
+ * The OpenID Connect configuration.
1561
+ * </p>
1562
+ */
1563
+ OpenIdConnectConfig?: AwsAppSyncGraphQlApiOpenIdConnectConfigDetails;
1564
+ /**
1565
+ * <p>
1566
+ * The Amazon Cognito user pools configuration.
1567
+ * </p>
1568
+ */
1569
+ UserPoolConfig?: AwsAppSyncGraphQlApiUserPoolConfigDetails;
1570
+ }
1571
+ /**
1572
+ * @public
1573
+ * <p>
1574
+ * Specifies the logging configuration when writing GraphQL operations and tracing to Amazon CloudWatch for an
1575
+ * AppSync GraphQL API.
1576
+ * </p>
1577
+ */
1578
+ export interface AwsAppSyncGraphQlApiLogConfigDetails {
1579
+ /**
1580
+ * <p>
1581
+ * The Amazon Resource Name (ARN) of the service role that AppSync assumes to publish to CloudWatch Logs
1582
+ * in your account.
1583
+ * </p>
1584
+ */
1585
+ CloudWatchLogsRoleArn?: string;
1586
+ /**
1587
+ * <p>
1588
+ * Set to <code>TRUE</code> to exclude sections that contain information such as headers, context, and evaluated mapping templates,
1589
+ * regardless of logging level.
1590
+ * </p>
1591
+ */
1592
+ ExcludeVerboseContent?: boolean;
1593
+ /**
1594
+ * <p>
1595
+ * The field logging level.
1596
+ * </p>
1597
+ */
1598
+ FieldLogLevel?: string;
1599
+ }
1600
+ /**
1601
+ * @public
1602
+ * <p>
1603
+ * Provides details about an AppSync Graph QL API, which lets you query multiple databases, microservices, and APIs from a single GraphQL endpoint.
1604
+ * </p>
1605
+ */
1606
+ export interface AwsAppSyncGraphQlApiDetails {
1607
+ /**
1608
+ * <p>
1609
+ * The unique identifier for the API.
1610
+ * </p>
1611
+ */
1612
+ ApiId?: string;
1613
+ /**
1614
+ * <p>The unique identifier for the API.</p>
1615
+ */
1616
+ Id?: string;
1617
+ /**
1618
+ * <p>
1619
+ * Specifies the authorization configuration for using an OpenID Connect compliant service with an AppSync GraphQL API endpoint.
1620
+ * </p>
1621
+ */
1622
+ OpenIdConnectConfig?: AwsAppSyncGraphQlApiOpenIdConnectConfigDetails;
1623
+ /**
1624
+ * <p>
1625
+ * The API name.
1626
+ * </p>
1627
+ */
1628
+ Name?: string;
1629
+ /**
1630
+ * <p>
1631
+ * Specifies the configuration for Lambda function authorization.
1632
+ * </p>
1633
+ */
1634
+ LambdaAuthorizerConfig?: AwsAppSyncGraphQlApiLambdaAuthorizerConfigDetails;
1635
+ /**
1636
+ * <p>
1637
+ * Indicates whether to use X-Ray tracing for the GraphQL API.
1638
+ * </p>
1639
+ */
1640
+ XrayEnabled?: boolean;
1641
+ /**
1642
+ * <p>
1643
+ * The Amazon Resource Name (ARN) of the API.
1644
+ * </p>
1645
+ */
1646
+ Arn?: string;
1647
+ /**
1648
+ * <p>
1649
+ * The Amazon Cognito user pools configuration.
1650
+ * </p>
1651
+ */
1652
+ UserPoolConfig?: AwsAppSyncGraphQlApiUserPoolConfigDetails;
1653
+ /**
1654
+ * <p>
1655
+ * The type of security configuration for your GraphQL API: API key, Identity and Access Management (IAM), OpenID Connect (OIDC), Amazon Cognito user pools, or Lambda.
1656
+ * </p>
1657
+ */
1658
+ AuthenticationType?: string;
1659
+ /**
1660
+ * <p>
1661
+ * The Amazon CloudWatch Logs configuration.
1662
+ * </p>
1663
+ */
1664
+ LogConfig?: AwsAppSyncGraphQlApiLogConfigDetails;
1665
+ /**
1666
+ * <p>
1667
+ * A list of additional authentication providers for the GraphQL API.
1668
+ * </p>
1669
+ */
1670
+ AdditionalAuthenticationProviders?: AwsAppSyncGraphQlApiAdditionalAuthenticationProvidersDetails[];
1671
+ /**
1672
+ * <p>
1673
+ * The Amazon Resource Name (ARN) of the WAF web access control list (web ACL) associated with this
1674
+ * GraphQL API, if one exists.
1675
+ * </p>
1676
+ */
1677
+ WafWebAclArn?: string;
1678
+ }
1128
1679
  /**
1129
1680
  * @public
1130
1681
  * <p>An Availability Zone for the automatic scaling group.</p>
@@ -9031,370 +9582,3 @@ export interface AwsElbLoadBalancerConnectionSettings {
9031
9582
  */
9032
9583
  IdleTimeout?: number;
9033
9584
  }
9034
- /**
9035
- * @public
9036
- * <p>Contains cross-zone load balancing settings for the load balancer.</p>
9037
- */
9038
- export interface AwsElbLoadBalancerCrossZoneLoadBalancing {
9039
- /**
9040
- * <p>Indicates whether cross-zone load balancing is enabled for the load balancer.</p>
9041
- */
9042
- Enabled?: boolean;
9043
- }
9044
- /**
9045
- * @public
9046
- * <p>Contains attributes for the load balancer.</p>
9047
- */
9048
- export interface AwsElbLoadBalancerAttributes {
9049
- /**
9050
- * <p>Information about the access log configuration for the load balancer.</p>
9051
- * <p>If the access log is enabled, the load balancer captures detailed information about all
9052
- * requests. It delivers the information to a specified S3 bucket.</p>
9053
- */
9054
- AccessLog?: AwsElbLoadBalancerAccessLog;
9055
- /**
9056
- * <p>Information about the connection draining configuration for the load balancer.</p>
9057
- * <p>If connection draining is enabled, the load balancer allows existing requests to
9058
- * complete before it shifts traffic away from a deregistered or unhealthy instance.</p>
9059
- */
9060
- ConnectionDraining?: AwsElbLoadBalancerConnectionDraining;
9061
- /**
9062
- * <p>Connection settings for the load balancer.</p>
9063
- * <p>If an idle timeout is configured, the load balancer allows connections to remain idle
9064
- * for the specified duration. When a connection is idle, no data is sent over the
9065
- * connection.</p>
9066
- */
9067
- ConnectionSettings?: AwsElbLoadBalancerConnectionSettings;
9068
- /**
9069
- * <p>Cross-zone load balancing settings for the load balancer.</p>
9070
- * <p>If cross-zone load balancing is enabled, the load balancer routes the request traffic
9071
- * evenly across all instances regardless of the Availability Zones.</p>
9072
- */
9073
- CrossZoneLoadBalancing?: AwsElbLoadBalancerCrossZoneLoadBalancing;
9074
- /**
9075
- * <p>Any additional attributes for a load balancer.</p>
9076
- */
9077
- AdditionalAttributes?: AwsElbLoadBalancerAdditionalAttribute[];
9078
- }
9079
- /**
9080
- * @public
9081
- * <p>Provides information about the configuration of an EC2 instance for the load
9082
- * balancer.</p>
9083
- */
9084
- export interface AwsElbLoadBalancerBackendServerDescription {
9085
- /**
9086
- * <p>The port on which the EC2 instance is listening.</p>
9087
- */
9088
- InstancePort?: number;
9089
- /**
9090
- * <p>The names of the policies that are enabled for the EC2 instance.</p>
9091
- */
9092
- PolicyNames?: string[];
9093
- }
9094
- /**
9095
- * @public
9096
- * <p>Contains information about the health checks that are conducted on the load
9097
- * balancer.</p>
9098
- */
9099
- export interface AwsElbLoadBalancerHealthCheck {
9100
- /**
9101
- * <p>The number of consecutive health check successes required before the instance is moved
9102
- * to the Healthy state.</p>
9103
- */
9104
- HealthyThreshold?: number;
9105
- /**
9106
- * <p>The approximate interval, in seconds, between health checks of an individual
9107
- * instance.</p>
9108
- */
9109
- Interval?: number;
9110
- /**
9111
- * <p>The instance that is being checked. The target specifies the protocol and port. The
9112
- * available protocols are TCP, SSL, HTTP, and HTTPS. The range of valid ports is 1 through
9113
- * 65535.</p>
9114
- * <p>For the HTTP and HTTPS protocols, the target also specifies the ping path.</p>
9115
- * <p>For the TCP protocol, the target is specified as <code>TCP:
9116
- * <i><port></i>
9117
- * </code>.</p>
9118
- * <p>For the SSL protocol, the target is specified as
9119
- * <code>SSL.<i><port></i>
9120
- * </code>.</p>
9121
- * <p>For the HTTP and HTTPS protocols, the target is specified as
9122
- * <code>
9123
- * <i><protocol></i>:<i><port></i>/<i><path
9124
- * to ping></i>
9125
- * </code>.</p>
9126
- */
9127
- Target?: string;
9128
- /**
9129
- * <p>The amount of time, in seconds, during which no response means a failed health
9130
- * check.</p>
9131
- */
9132
- Timeout?: number;
9133
- /**
9134
- * <p>The number of consecutive health check failures that must occur before the instance is
9135
- * moved to the Unhealthy state.</p>
9136
- */
9137
- UnhealthyThreshold?: number;
9138
- }
9139
- /**
9140
- * @public
9141
- * <p>Provides information about an EC2 instance for a load balancer.</p>
9142
- */
9143
- export interface AwsElbLoadBalancerInstance {
9144
- /**
9145
- * <p>The instance identifier.</p>
9146
- */
9147
- InstanceId?: string;
9148
- }
9149
- /**
9150
- * @public
9151
- * <p>Information about a load balancer listener.</p>
9152
- */
9153
- export interface AwsElbLoadBalancerListener {
9154
- /**
9155
- * <p>The port on which the instance is listening.</p>
9156
- */
9157
- InstancePort?: number;
9158
- /**
9159
- * <p>The protocol to use to route traffic to instances.</p>
9160
- * <p>Valid values: <code>HTTP</code> | <code>HTTPS</code> | <code>TCP</code> |
9161
- * <code>SSL</code>
9162
- * </p>
9163
- */
9164
- InstanceProtocol?: string;
9165
- /**
9166
- * <p>The port on which the load balancer is listening.</p>
9167
- * <p>On EC2-VPC, you can specify any port from the range 1-65535.</p>
9168
- * <p>On EC2-Classic, you can specify any port from the following list: 25, 80, 443, 465, 587,
9169
- * 1024-65535.</p>
9170
- */
9171
- LoadBalancerPort?: number;
9172
- /**
9173
- * <p>The load balancer transport protocol to use for routing.</p>
9174
- * <p>Valid values: <code>HTTP</code> | <code>HTTPS</code> | <code>TCP</code> |
9175
- * <code>SSL</code>
9176
- * </p>
9177
- */
9178
- Protocol?: string;
9179
- /**
9180
- * <p>The ARN of the server certificate.</p>
9181
- */
9182
- SslCertificateId?: string;
9183
- }
9184
- /**
9185
- * @public
9186
- * <p>Lists the policies that are enabled for a load balancer listener.</p>
9187
- */
9188
- export interface AwsElbLoadBalancerListenerDescription {
9189
- /**
9190
- * <p>Information about the listener.</p>
9191
- */
9192
- Listener?: AwsElbLoadBalancerListener;
9193
- /**
9194
- * <p>The policies enabled for the listener.</p>
9195
- */
9196
- PolicyNames?: string[];
9197
- }
9198
- /**
9199
- * @public
9200
- * <p>Contains information about the policies for a load balancer.</p>
9201
- */
9202
- export interface AwsElbLoadBalancerPolicies {
9203
- /**
9204
- * <p>The stickiness policies that are created using
9205
- * <code>CreateAppCookieStickinessPolicy</code>.</p>
9206
- */
9207
- AppCookieStickinessPolicies?: AwsElbAppCookieStickinessPolicy[];
9208
- /**
9209
- * <p>The stickiness policies that are created using
9210
- * <code>CreateLBCookieStickinessPolicy</code>.</p>
9211
- */
9212
- LbCookieStickinessPolicies?: AwsElbLbCookieStickinessPolicy[];
9213
- /**
9214
- * <p>The policies other than the stickiness policies.</p>
9215
- */
9216
- OtherPolicies?: string[];
9217
- }
9218
- /**
9219
- * @public
9220
- * <p>Contains information about the security group for the load balancer.</p>
9221
- */
9222
- export interface AwsElbLoadBalancerSourceSecurityGroup {
9223
- /**
9224
- * <p>The name of the security group.</p>
9225
- */
9226
- GroupName?: string;
9227
- /**
9228
- * <p>The owner of the security group.</p>
9229
- */
9230
- OwnerAlias?: string;
9231
- }
9232
- /**
9233
- * @public
9234
- * <p>Contains details about a Classic Load Balancer.</p>
9235
- */
9236
- export interface AwsElbLoadBalancerDetails {
9237
- /**
9238
- * <p>The list of Availability Zones for the load balancer.</p>
9239
- */
9240
- AvailabilityZones?: string[];
9241
- /**
9242
- * <p>Information about the configuration of the EC2 instances.</p>
9243
- */
9244
- BackendServerDescriptions?: AwsElbLoadBalancerBackendServerDescription[];
9245
- /**
9246
- * <p>The name of the Amazon Route 53 hosted zone for the load balancer.</p>
9247
- */
9248
- CanonicalHostedZoneName?: string;
9249
- /**
9250
- * <p>The ID of the Amazon Route 53 hosted zone for the load balancer.</p>
9251
- */
9252
- CanonicalHostedZoneNameID?: string;
9253
- /**
9254
- * <p>Indicates when the load balancer was created.</p>
9255
- * <p>Uses the <code>date-time</code> format specified in <a href="https://tools.ietf.org/html/rfc3339#section-5.6">RFC 3339 section 5.6, Internet
9256
- * Date/Time Format</a>. The value cannot contain spaces, and date and time should be separated by <code>T</code>. For example,
9257
- * <code>2020-03-22T13:22:13.933Z</code>.</p>
9258
- */
9259
- CreatedTime?: string;
9260
- /**
9261
- * <p>The DNS name of the load balancer.</p>
9262
- */
9263
- DnsName?: string;
9264
- /**
9265
- * <p>Information about the health checks that are conducted on the load balancer.</p>
9266
- */
9267
- HealthCheck?: AwsElbLoadBalancerHealthCheck;
9268
- /**
9269
- * <p>List of EC2 instances for the load balancer.</p>
9270
- */
9271
- Instances?: AwsElbLoadBalancerInstance[];
9272
- /**
9273
- * <p>The policies that are enabled for the load balancer listeners.</p>
9274
- */
9275
- ListenerDescriptions?: AwsElbLoadBalancerListenerDescription[];
9276
- /**
9277
- * <p>The attributes for a load balancer.</p>
9278
- */
9279
- LoadBalancerAttributes?: AwsElbLoadBalancerAttributes;
9280
- /**
9281
- * <p>The name of the load balancer.</p>
9282
- */
9283
- LoadBalancerName?: string;
9284
- /**
9285
- * <p>The policies for a load balancer.</p>
9286
- */
9287
- Policies?: AwsElbLoadBalancerPolicies;
9288
- /**
9289
- * <p>The type of load balancer. Only provided if the load balancer is in a VPC.</p>
9290
- * <p>If <code>Scheme</code> is <code>internet-facing</code>, the load balancer has a public
9291
- * DNS name that resolves to a public IP address.</p>
9292
- * <p>If <code>Scheme</code> is <code>internal</code>, the load balancer has a public DNS name
9293
- * that resolves to a private IP address.</p>
9294
- */
9295
- Scheme?: string;
9296
- /**
9297
- * <p>The security groups for the load balancer. Only provided if the load balancer is in a
9298
- * VPC.</p>
9299
- */
9300
- SecurityGroups?: string[];
9301
- /**
9302
- * <p>Information about the security group for the load balancer. This is the security group
9303
- * that is used for inbound rules.</p>
9304
- */
9305
- SourceSecurityGroup?: AwsElbLoadBalancerSourceSecurityGroup;
9306
- /**
9307
- * <p>The list of subnet identifiers for the load balancer.</p>
9308
- */
9309
- Subnets?: string[];
9310
- /**
9311
- * <p>The identifier of the VPC for the load balancer.</p>
9312
- */
9313
- VpcId?: string;
9314
- }
9315
- /**
9316
- * @public
9317
- * <p>A load balancer attribute.</p>
9318
- */
9319
- export interface AwsElbv2LoadBalancerAttribute {
9320
- /**
9321
- * <p>The name of the load balancer attribute.</p>
9322
- */
9323
- Key?: string;
9324
- /**
9325
- * <p>The value of the load balancer attribute.</p>
9326
- */
9327
- Value?: string;
9328
- }
9329
- /**
9330
- * @public
9331
- * <p>Information about the state of the load balancer.</p>
9332
- */
9333
- export interface LoadBalancerState {
9334
- /**
9335
- * <p>The state code. The initial state of the load balancer is provisioning.</p>
9336
- * <p>After the load balancer is fully set up and ready to route traffic, its state is
9337
- * active.</p>
9338
- * <p>If the load balancer could not be set up, its state is failed. </p>
9339
- */
9340
- Code?: string;
9341
- /**
9342
- * <p>A description of the state.</p>
9343
- */
9344
- Reason?: string;
9345
- }
9346
- /**
9347
- * @public
9348
- * <p>Information about a load balancer.</p>
9349
- */
9350
- export interface AwsElbv2LoadBalancerDetails {
9351
- /**
9352
- * <p>The Availability Zones for the load balancer.</p>
9353
- */
9354
- AvailabilityZones?: AvailabilityZone[];
9355
- /**
9356
- * <p>The ID of the Amazon Route 53 hosted zone associated with the load balancer.</p>
9357
- */
9358
- CanonicalHostedZoneId?: string;
9359
- /**
9360
- * <p>Indicates when the load balancer was created.</p>
9361
- * <p>Uses the <code>date-time</code> format specified in <a href="https://tools.ietf.org/html/rfc3339#section-5.6">RFC 3339 section 5.6, Internet
9362
- * Date/Time Format</a>. The value cannot contain spaces, and date and time should be separated by <code>T</code>. For example,
9363
- * <code>2020-03-22T13:22:13.933Z</code>.</p>
9364
- */
9365
- CreatedTime?: string;
9366
- /**
9367
- * <p>The public DNS name of the load balancer.</p>
9368
- */
9369
- DNSName?: string;
9370
- /**
9371
- * <p>The type of IP addresses used by the subnets for your load balancer. The possible values
9372
- * are <code>ipv4</code> (for IPv4 addresses) and <code>dualstack</code> (for IPv4 and IPv6
9373
- * addresses).</p>
9374
- */
9375
- IpAddressType?: string;
9376
- /**
9377
- * <p>The nodes of an Internet-facing load balancer have public IP addresses.</p>
9378
- */
9379
- Scheme?: string;
9380
- /**
9381
- * <p>The IDs of the security groups for the load balancer.</p>
9382
- */
9383
- SecurityGroups?: string[];
9384
- /**
9385
- * <p>The state of the load balancer.</p>
9386
- */
9387
- State?: LoadBalancerState;
9388
- /**
9389
- * <p>The type of load balancer.</p>
9390
- */
9391
- Type?: string;
9392
- /**
9393
- * <p>The ID of the VPC for the load balancer.</p>
9394
- */
9395
- VpcId?: string;
9396
- /**
9397
- * <p>Attributes of the load balancer.</p>
9398
- */
9399
- LoadBalancerAttributes?: AwsElbv2LoadBalancerAttribute[];
9400
- }