@cdk8s/awscdk-resolver 0.0.66 → 0.0.67
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.jsii +2 -2
- package/lib/resolve.js +1 -1
- package/node_modules/@aws-sdk/client-cloudformation/README.md +11 -9
- package/node_modules/@aws-sdk/client-cloudformation/dist-cjs/index.js +15 -0
- package/node_modules/@aws-sdk/client-cloudformation/dist-es/models/models_0.js +5 -13
- package/node_modules/@aws-sdk/client-cloudformation/dist-es/models/models_1.js +14 -1
- package/node_modules/@aws-sdk/client-cloudformation/dist-es/protocols/Aws_query.js +8 -1
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/CloudFormation.d.ts +11 -9
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/CloudFormationClient.d.ts +11 -9
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/commands/ActivateOrganizationsAccessCommand.d.ts +3 -3
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/commands/ActivateTypeCommand.d.ts +4 -4
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/commands/BatchDescribeTypeConfigurationsCommand.d.ts +3 -2
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/commands/ContinueUpdateRollbackCommand.d.ts +6 -7
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/commands/CreateChangeSetCommand.d.ts +9 -12
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/commands/CreateGeneratedTemplateCommand.d.ts +1 -1
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/commands/CreateStackCommand.d.ts +1 -1
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/commands/CreateStackInstancesCommand.d.ts +3 -3
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/commands/CreateStackSetCommand.d.ts +1 -1
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/commands/DeactivateOrganizationsAccessCommand.d.ts +2 -3
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/commands/DeactivateTypeCommand.d.ts +3 -4
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/commands/DeleteChangeSetCommand.d.ts +1 -1
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/commands/DeregisterTypeCommand.d.ts +5 -4
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/commands/DescribeAccountLimitsCommand.d.ts +3 -3
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/commands/DescribeChangeSetCommand.d.ts +3 -3
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/commands/DescribeChangeSetHooksCommand.d.ts +3 -3
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/commands/DescribeOrganizationsAccessCommand.d.ts +3 -4
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/commands/DescribePublisherCommand.d.ts +6 -4
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/commands/DescribeStackDriftDetectionStatusCommand.d.ts +4 -5
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/commands/DescribeStackEventsCommand.d.ts +1 -0
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/commands/DescribeStackInstanceCommand.d.ts +2 -2
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/commands/DescribeStackResourcesCommand.d.ts +2 -2
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/commands/DescribeStacksCommand.d.ts +1 -0
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/commands/DetectStackDriftCommand.d.ts +2 -2
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/commands/DetectStackResourceDriftCommand.d.ts +2 -2
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/commands/DetectStackSetDriftCommand.d.ts +4 -4
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/commands/ExecuteChangeSetCommand.d.ts +9 -8
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/commands/GetTemplateCommand.d.ts +1 -1
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/commands/ImportStacksToStackSetCommand.d.ts +1 -1
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/commands/ListChangeSetsCommand.d.ts +2 -2
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/commands/ListExportsCommand.d.ts +3 -3
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/commands/ListStackInstanceResourceDriftsCommand.d.ts +2 -3
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/commands/ListStackInstancesCommand.d.ts +1 -1
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/commands/PublishTypeCommand.d.ts +7 -6
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/commands/RecordHandlerProgressCommand.d.ts +6 -6
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/commands/RegisterPublisherCommand.d.ts +4 -4
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/commands/RegisterTypeCommand.d.ts +10 -6
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/commands/RollbackStackCommand.d.ts +1 -1
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/commands/SetTypeConfigurationCommand.d.ts +6 -6
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/commands/SignalResourceCommand.d.ts +3 -3
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/commands/StopStackSetOperationCommand.d.ts +2 -3
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/commands/TestTypeCommand.d.ts +12 -8
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/commands/UpdateGeneratedTemplateCommand.d.ts +1 -1
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/commands/UpdateStackInstancesCommand.d.ts +9 -3
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/commands/UpdateTerminationProtectionCommand.d.ts +2 -2
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/commands/ValidateTemplateCommand.d.ts +3 -3
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/index.d.ts +11 -9
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/models/models_0.d.ts +1083 -1066
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/models/models_1.d.ts +201 -149
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/ts3.4/models/models_0.d.ts +9 -11
- package/node_modules/@aws-sdk/client-cloudformation/dist-types/ts3.4/models/models_1.d.ts +13 -0
- package/node_modules/@aws-sdk/client-cloudformation/package.json +1 -1
- package/package.json +4 -4
@@ -1,4 +1,31 @@
|
|
1
|
+
import { ExceptionOptionType as __ExceptionOptionType } from "@smithy/smithy-client";
|
2
|
+
import { CloudFormationServiceException as __BaseException } from "./CloudFormationServiceException";
|
1
3
|
import { AutoDeployment, CallAs, Capability, DeploymentTargets, ManagedExecution, Parameter, PermissionModels, ResourceDefinition, RollbackConfiguration, StackSetOperationPreferences, Tag, TemplateConfiguration, ThirdPartyType } from "./models_0";
|
4
|
+
/**
|
5
|
+
* @public
|
6
|
+
* <p>The limit on resource scans has been exceeded. Reasons include:</p>
|
7
|
+
* <ul>
|
8
|
+
* <li>
|
9
|
+
* <p>Exceeded the daily quota for resource scans.</p>
|
10
|
+
* </li>
|
11
|
+
* <li>
|
12
|
+
* <p>A resource scan recently failed. You must wait 10 minutes before starting a new resource scan.</p>
|
13
|
+
* </li>
|
14
|
+
* <li>
|
15
|
+
* <p>The last resource scan failed after exceeding 100,000 resources. When this happens, you must wait 24 hours
|
16
|
+
* before starting a new resource scan.</p>
|
17
|
+
* </li>
|
18
|
+
* </ul>
|
19
|
+
*/
|
20
|
+
export declare class ResourceScanLimitExceededException extends __BaseException {
|
21
|
+
readonly name: "ResourceScanLimitExceededException";
|
22
|
+
readonly $fault: "client";
|
23
|
+
Message?: string;
|
24
|
+
/**
|
25
|
+
* @internal
|
26
|
+
*/
|
27
|
+
constructor(opts: __ExceptionOptionType<ResourceScanLimitExceededException, __BaseException>);
|
28
|
+
}
|
2
29
|
/**
|
3
30
|
* @public
|
4
31
|
*/
|
@@ -39,23 +66,18 @@ export interface StopStackSetOperationInput {
|
|
39
66
|
OperationId: string | undefined;
|
40
67
|
/**
|
41
68
|
* @public
|
42
|
-
* <p>[Service-managed permissions] Specifies whether you are acting as an account administrator
|
43
|
-
*
|
44
|
-
*
|
45
|
-
*
|
46
|
-
* self-managed permissions.</p>
|
69
|
+
* <p>[Service-managed permissions] Specifies whether you are acting as an account administrator in the organization's
|
70
|
+
* management account or as a delegated administrator in a member account.</p>
|
71
|
+
* <p>By default, <code>SELF</code> is specified. Use <code>SELF</code> for stack sets with self-managed
|
72
|
+
* permissions.</p>
|
47
73
|
* <ul>
|
48
74
|
* <li>
|
49
|
-
* <p>If you are signed in to the management account, specify
|
50
|
-
* <code>SELF</code>.</p>
|
75
|
+
* <p>If you are signed in to the management account, specify <code>SELF</code>.</p>
|
51
76
|
* </li>
|
52
77
|
* <li>
|
53
|
-
* <p>If you are signed in to a delegated administrator account, specify
|
54
|
-
*
|
55
|
-
*
|
56
|
-
* management account. For more information, see <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-delegated-admin.html">Register a
|
57
|
-
* delegated administrator</a> in the <i>CloudFormation User
|
58
|
-
* Guide</i>.</p>
|
78
|
+
* <p>If you are signed in to a delegated administrator account, specify <code>DELEGATED_ADMIN</code>.</p>
|
79
|
+
* <p>Your Amazon Web Services account must be registered as a delegated administrator in the management account. For more information, see <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-delegated-admin.html">Register a delegated
|
80
|
+
* administrator</a> in the <i>CloudFormation User Guide</i>.</p>
|
59
81
|
* </li>
|
60
82
|
* </ul>
|
61
83
|
*/
|
@@ -93,15 +115,15 @@ export interface TestTypeInput {
|
|
93
115
|
* <p>The version of the extension to test.</p>
|
94
116
|
* <p>You can specify the version id with either <code>Arn</code>, or with <code>TypeName</code> and
|
95
117
|
* <code>Type</code>.</p>
|
96
|
-
* <p>If you don't specify a version, CloudFormation uses the default version of the extension in this
|
97
|
-
*
|
118
|
+
* <p>If you don't specify a version, CloudFormation uses the default version of the extension in this account and Region
|
119
|
+
* for testing.</p>
|
98
120
|
*/
|
99
121
|
VersionId?: string;
|
100
122
|
/**
|
101
123
|
* @public
|
102
124
|
* <p>The S3 bucket to which CloudFormation delivers the contract test execution logs.</p>
|
103
|
-
* <p>CloudFormation delivers the logs by the time contract testing has completed and the extension has been
|
104
|
-
*
|
125
|
+
* <p>CloudFormation delivers the logs by the time contract testing has completed and the extension has been assigned a
|
126
|
+
* test type status of <code>PASSED</code> or <code>FAILED</code>.</p>
|
105
127
|
* <p>The user calling <code>TestType</code> must be able to access items in the specified S3 bucket. Specifically,
|
106
128
|
* the user needs the following permissions:</p>
|
107
129
|
* <ul>
|
@@ -163,7 +185,8 @@ export interface UpdateGeneratedTemplateInput {
|
|
163
185
|
RefreshAllResources?: boolean;
|
164
186
|
/**
|
165
187
|
* @public
|
166
|
-
* <p>The configuration details of the generated template, including the <code>DeletionPolicy</code> and
|
188
|
+
* <p>The configuration details of the generated template, including the <code>DeletionPolicy</code> and
|
189
|
+
* <code>UpdateReplacePolicy</code>.</p>
|
167
190
|
*/
|
168
191
|
TemplateConfiguration?: TemplateConfiguration;
|
169
192
|
}
|
@@ -196,28 +219,28 @@ export interface UpdateStackInput {
|
|
196
219
|
* (For more information, go to <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/template-anatomy.html">Template Anatomy</a> in the
|
197
220
|
* <i>CloudFormation User Guide</i>.)</p>
|
198
221
|
* <p>Conditional: You must specify only one of the following parameters: <code>TemplateBody</code>,
|
199
|
-
*
|
222
|
+
* <code>TemplateURL</code>, or set the <code>UsePreviousTemplate</code> to <code>true</code>.</p>
|
200
223
|
*/
|
201
224
|
TemplateBody?: string;
|
202
225
|
/**
|
203
226
|
* @public
|
204
227
|
* <p>Location of file containing the template body. The URL must point to a template that's located in an Amazon S3 bucket or a Systems Manager document. For more information, go to <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/template-anatomy.html">Template Anatomy</a> in the
|
205
|
-
* <i>CloudFormation User Guide</i>.</p>
|
228
|
+
* <i>CloudFormation User Guide</i>. The location for an Amazon S3 bucket must start with <code>https://</code>.</p>
|
206
229
|
* <p>Conditional: You must specify only one of the following parameters: <code>TemplateBody</code>,
|
207
|
-
*
|
230
|
+
* <code>TemplateURL</code>, or set the <code>UsePreviousTemplate</code> to <code>true</code>.</p>
|
208
231
|
*/
|
209
232
|
TemplateURL?: string;
|
210
233
|
/**
|
211
234
|
* @public
|
212
235
|
* <p>Reuse the existing template that is associated with the stack that you are updating.</p>
|
213
236
|
* <p>Conditional: You must specify only one of the following parameters: <code>TemplateBody</code>,
|
214
|
-
*
|
237
|
+
* <code>TemplateURL</code>, or set the <code>UsePreviousTemplate</code> to <code>true</code>.</p>
|
215
238
|
*/
|
216
239
|
UsePreviousTemplate?: boolean;
|
217
240
|
/**
|
218
241
|
* @public
|
219
242
|
* <p>Structure containing the temporary overriding stack policy body. You can specify either the
|
220
|
-
*
|
243
|
+
* <code>StackPolicyDuringUpdateBody</code> or the <code>StackPolicyDuringUpdateURL</code> parameter, but not
|
221
244
|
* both.</p>
|
222
245
|
* <p>If you want to update protected resources, specify a temporary overriding stack policy during this update. If
|
223
246
|
* you don't specify a stack policy, the current policy that is associated with the stack will be used.</p>
|
@@ -226,9 +249,9 @@ export interface UpdateStackInput {
|
|
226
249
|
/**
|
227
250
|
* @public
|
228
251
|
* <p>Location of a file containing the temporary overriding stack policy. The URL must point to a policy (max size:
|
229
|
-
* 16KB) located in an S3 bucket in the same Region as the stack.
|
230
|
-
*
|
231
|
-
* both.</p>
|
252
|
+
* 16KB) located in an S3 bucket in the same Region as the stack. The location for an Amazon S3 bucket must start with
|
253
|
+
* <code>https://</code>. You can specify either the <code>StackPolicyDuringUpdateBody</code> or the
|
254
|
+
* <code>StackPolicyDuringUpdateURL</code> parameter, but not both.</p>
|
232
255
|
* <p>If you want to update protected resources, specify a temporary overriding stack policy during this update. If
|
233
256
|
* you don't specify a stack policy, the current policy that is associated with the stack will be used.</p>
|
234
257
|
*/
|
@@ -236,7 +259,9 @@ export interface UpdateStackInput {
|
|
236
259
|
/**
|
237
260
|
* @public
|
238
261
|
* <p>A list of <code>Parameter</code> structures that specify input parameters for the stack. For more information,
|
239
|
-
* see the <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_Parameter.html">
|
262
|
+
* see the <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_Parameter.html">
|
263
|
+
* <code>Parameter</code>
|
264
|
+
* </a>
|
240
265
|
* data type.</p>
|
241
266
|
*/
|
242
267
|
Parameters?: Parameter[];
|
@@ -250,21 +275,21 @@ export interface UpdateStackInput {
|
|
250
275
|
* <code>CAPABILITY_IAM</code> and <code>CAPABILITY_NAMED_IAM</code>
|
251
276
|
* </p>
|
252
277
|
* <p>Some stack templates might include resources that can affect permissions in your Amazon Web Services account;
|
253
|
-
* for example, by creating new Identity and Access Management (IAM) users. For those stacks, you must
|
254
|
-
*
|
278
|
+
* for example, by creating new Identity and Access Management (IAM) users. For those stacks, you must explicitly
|
279
|
+
* acknowledge this by specifying one of these capabilities.</p>
|
255
280
|
* <p>The following IAM resources require you to specify either the <code>CAPABILITY_IAM</code> or
|
256
|
-
*
|
281
|
+
* <code>CAPABILITY_NAMED_IAM</code> capability.</p>
|
257
282
|
* <ul>
|
258
283
|
* <li>
|
259
284
|
* <p>If you have IAM resources, you can specify either capability.</p>
|
260
285
|
* </li>
|
261
286
|
* <li>
|
262
287
|
* <p>If you have IAM resources with custom names, you <i>must</i> specify
|
263
|
-
*
|
288
|
+
* <code>CAPABILITY_NAMED_IAM</code>.</p>
|
264
289
|
* </li>
|
265
290
|
* <li>
|
266
291
|
* <p>If you don't specify either of these capabilities, CloudFormation returns an
|
267
|
-
*
|
292
|
+
* <code>InsufficientCapabilities</code> error.</p>
|
268
293
|
* </li>
|
269
294
|
* </ul>
|
270
295
|
* <p>If your stack template contains these resources, we suggest that you review all permissions associated with
|
@@ -273,46 +298,56 @@ export interface UpdateStackInput {
|
|
273
298
|
* <li>
|
274
299
|
* <p>
|
275
300
|
* <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-accesskey.html">
|
276
|
-
*
|
301
|
+
* <code>AWS::IAM::AccessKey</code>
|
302
|
+
* </a>
|
277
303
|
* </p>
|
278
304
|
* </li>
|
279
305
|
* <li>
|
280
306
|
* <p>
|
281
307
|
* <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-group.html">
|
282
|
-
*
|
308
|
+
* <code>AWS::IAM::Group</code>
|
309
|
+
* </a>
|
283
310
|
* </p>
|
284
311
|
* </li>
|
285
312
|
* <li>
|
286
313
|
* <p>
|
287
|
-
* <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-instanceprofile.html">
|
314
|
+
* <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-instanceprofile.html">
|
315
|
+
* <code>AWS::IAM::InstanceProfile</code>
|
316
|
+
* </a>
|
288
317
|
* </p>
|
289
318
|
* </li>
|
290
319
|
* <li>
|
291
320
|
* <p>
|
292
321
|
* <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-policy.html">
|
293
|
-
*
|
322
|
+
* <code>
|
323
|
+
* AWS::IAM::Policy</code>
|
324
|
+
* </a>
|
294
325
|
* </p>
|
295
326
|
* </li>
|
296
327
|
* <li>
|
297
328
|
* <p>
|
298
329
|
* <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-role.html">
|
299
|
-
*
|
330
|
+
* <code>AWS::IAM::Role</code>
|
331
|
+
* </a>
|
300
332
|
* </p>
|
301
333
|
* </li>
|
302
334
|
* <li>
|
303
335
|
* <p>
|
304
336
|
* <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-user.html">
|
305
|
-
*
|
337
|
+
* <code>AWS::IAM::User</code>
|
338
|
+
* </a>
|
306
339
|
* </p>
|
307
340
|
* </li>
|
308
341
|
* <li>
|
309
342
|
* <p>
|
310
|
-
* <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-addusertogroup.html">
|
343
|
+
* <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-addusertogroup.html">
|
344
|
+
* <code>AWS::IAM::UserToGroupAddition</code>
|
345
|
+
* </a>
|
311
346
|
* </p>
|
312
347
|
* </li>
|
313
348
|
* </ul>
|
314
|
-
* <p>For more information, see <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-iam-template.html#capabilities">Acknowledging IAM
|
315
|
-
*
|
349
|
+
* <p>For more information, see <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-iam-template.html#capabilities">Acknowledging IAM Resources in
|
350
|
+
* CloudFormation Templates</a>.</p>
|
316
351
|
* </li>
|
317
352
|
* <li>
|
318
353
|
* <p>
|
@@ -323,7 +358,11 @@ export interface UpdateStackInput {
|
|
323
358
|
* users typically create a change set from the processed template, so that they can review the changes resulting from
|
324
359
|
* the macros before actually updating the stack. If your stack template contains one or more macros, and you choose
|
325
360
|
* to update a stack directly from the processed template, without first reviewing the resulting changes in a change
|
326
|
-
* set, you must acknowledge this capability. This includes the <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/create-reusable-transform-function-snippets-and-add-to-your-template-with-aws-include-transform.html">
|
361
|
+
* set, you must acknowledge this capability. This includes the <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/create-reusable-transform-function-snippets-and-add-to-your-template-with-aws-include-transform.html">
|
362
|
+
* <code>AWS::Include</code>
|
363
|
+
* </a> and <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/transform-aws-serverless.html">
|
364
|
+
* <code>AWS::Serverless</code>
|
365
|
+
* </a> transforms, which
|
327
366
|
* are macros hosted by CloudFormation.</p>
|
328
367
|
* <p>If you want to update a stack from a stack template that contains macros <i>and</i> nested
|
329
368
|
* stacks, you must update the stack directly from the template using this capability.</p>
|
@@ -334,8 +373,8 @@ export interface UpdateStackInput {
|
|
334
373
|
* aware that the Lambda function owner can update the function operation without CloudFormation being
|
335
374
|
* notified.</p>
|
336
375
|
* </important>
|
337
|
-
* <p>For more information, see <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/template-macros.html">Using CloudFormation Macros to Perform Custom
|
338
|
-
*
|
376
|
+
* <p>For more information, see <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/template-macros.html">Using CloudFormation Macros to Perform Custom Processing
|
377
|
+
* on Templates</a>.</p>
|
339
378
|
* </li>
|
340
379
|
* </ul>
|
341
380
|
* <note>
|
@@ -346,11 +385,10 @@ export interface UpdateStackInput {
|
|
346
385
|
/**
|
347
386
|
* @public
|
348
387
|
* <p>The template resource types that you have permissions to work with for this update stack action, such as
|
349
|
-
*
|
388
|
+
* <code>AWS::EC2::Instance</code>, <code>AWS::EC2::*</code>, or <code>Custom::MyCustomInstance</code>.</p>
|
350
389
|
* <p>If the list of resource types doesn't include a resource that you're updating, the stack update fails. By
|
351
|
-
* default, CloudFormation grants permissions to all resource types. Identity and Access Management (IAM)
|
352
|
-
*
|
353
|
-
* information, see <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-iam-template.html">Controlling Access with Identity and Access Management</a>.</p>
|
390
|
+
* default, CloudFormation grants permissions to all resource types. Identity and Access Management (IAM) uses this parameter for
|
391
|
+
* CloudFormation-specific condition keys in IAM policies. For more information, see <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-iam-template.html">Controlling Access with Identity and Access Management</a>.</p>
|
354
392
|
* <note>
|
355
393
|
* <p>Only one of the <code>Capabilities</code> and <code>ResourceType</code> parameters can be specified.</p>
|
356
394
|
* </note>
|
@@ -358,25 +396,24 @@ export interface UpdateStackInput {
|
|
358
396
|
ResourceTypes?: string[];
|
359
397
|
/**
|
360
398
|
* @public
|
361
|
-
* <p>The Amazon Resource Name (ARN) of an Identity and Access Management (IAM) role that CloudFormation assumes to
|
362
|
-
*
|
363
|
-
*
|
364
|
-
* pass it. Ensure that the role grants least privilege.</p>
|
365
|
-
* <p>If you don't specify a value, CloudFormation uses the role that was previously associated with the
|
366
|
-
*
|
367
|
-
* credentials.</p>
|
399
|
+
* <p>The Amazon Resource Name (ARN) of an Identity and Access Management (IAM) role that CloudFormation assumes to
|
400
|
+
* update the stack. CloudFormation uses the role's credentials to make calls on your behalf. CloudFormation always uses this role
|
401
|
+
* for all future operations on the stack. Provided that users have permission to operate on the stack, CloudFormation uses
|
402
|
+
* this role even if the users don't have permission to pass it. Ensure that the role grants least privilege.</p>
|
403
|
+
* <p>If you don't specify a value, CloudFormation uses the role that was previously associated with the stack. If no role
|
404
|
+
* is available, CloudFormation uses a temporary session that is generated from your user credentials.</p>
|
368
405
|
*/
|
369
406
|
RoleARN?: string;
|
370
407
|
/**
|
371
408
|
* @public
|
372
|
-
* <p>The rollback triggers for CloudFormation to monitor during stack creation and updating operations, and
|
373
|
-
*
|
409
|
+
* <p>The rollback triggers for CloudFormation to monitor during stack creation and updating operations, and for the
|
410
|
+
* specified monitoring period afterwards.</p>
|
374
411
|
*/
|
375
412
|
RollbackConfiguration?: RollbackConfiguration;
|
376
413
|
/**
|
377
414
|
* @public
|
378
415
|
* <p>Structure containing a new stack policy body. You can specify either the <code>StackPolicyBody</code> or the
|
379
|
-
*
|
416
|
+
* <code>StackPolicyURL</code> parameter, but not both.</p>
|
380
417
|
* <p>You might update the stack policy, for example, in order to protect a new resource that you created during a
|
381
418
|
* stack update. If you don't specify a stack policy, the current policy that is associated with the stack is
|
382
419
|
* unchanged.</p>
|
@@ -385,8 +422,9 @@ export interface UpdateStackInput {
|
|
385
422
|
/**
|
386
423
|
* @public
|
387
424
|
* <p>Location of a file containing the updated stack policy. The URL must point to a policy (max size: 16KB) located
|
388
|
-
* in an S3 bucket in the same Region as the stack.
|
389
|
-
*
|
425
|
+
* in an S3 bucket in the same Region as the stack. The location for an Amazon S3 bucket must start with
|
426
|
+
* <code>https://</code>. You can specify either the <code>StackPolicyBody</code> or the <code>StackPolicyURL</code>
|
427
|
+
* parameter, but not both.</p>
|
390
428
|
* <p>You might update the stack policy, for example, in order to protect a new resource that you created during a
|
391
429
|
* stack update. If you don't specify a stack policy, the current policy that is associated with the stack is
|
392
430
|
* unchanged.</p>
|
@@ -394,16 +432,16 @@ export interface UpdateStackInput {
|
|
394
432
|
StackPolicyURL?: string;
|
395
433
|
/**
|
396
434
|
* @public
|
397
|
-
* <p>Amazon Simple Notification Service topic Amazon Resource Names (ARNs) that CloudFormation associates
|
398
|
-
*
|
435
|
+
* <p>Amazon Simple Notification Service topic Amazon Resource Names (ARNs) that CloudFormation associates with the stack.
|
436
|
+
* Specify an empty list to remove all notification topics.</p>
|
399
437
|
*/
|
400
438
|
NotificationARNs?: string[];
|
401
439
|
/**
|
402
440
|
* @public
|
403
|
-
* <p>Key-value pairs to associate with this stack. CloudFormation also propagates these tags to supported
|
404
|
-
*
|
405
|
-
* <p>If you don't specify this parameter, CloudFormation doesn't modify the stack's tags. If you specify an
|
406
|
-
*
|
441
|
+
* <p>Key-value pairs to associate with this stack. CloudFormation also propagates these tags to supported resources in the
|
442
|
+
* stack. You can specify a maximum number of 50 tags.</p>
|
443
|
+
* <p>If you don't specify this parameter, CloudFormation doesn't modify the stack's tags. If you specify an empty value,
|
444
|
+
* CloudFormation removes all associated tags.</p>
|
407
445
|
*/
|
408
446
|
Tags?: Tag[];
|
409
447
|
/**
|
@@ -417,22 +455,22 @@ export interface UpdateStackInput {
|
|
417
455
|
* @public
|
418
456
|
* <p>A unique identifier for this <code>UpdateStack</code> request. Specify this token if you plan to retry requests
|
419
457
|
* so that CloudFormation knows that you're not attempting to update a stack with the same name. You might retry
|
420
|
-
*
|
458
|
+
* <code>UpdateStack</code> requests to ensure that CloudFormation successfully received them.</p>
|
421
459
|
* <p>All events triggered by a given stack operation are assigned the same client request token, which you can use to
|
422
460
|
* track operations. For example, if you execute a <code>CreateStack</code> operation with the token
|
423
461
|
* <code>token1</code>, then all the <code>StackEvents</code> generated by that operation will have
|
424
|
-
*
|
462
|
+
* <code>ClientRequestToken</code> set as <code>token1</code>.</p>
|
425
463
|
* <p>In the console, stack operations display the client request token on the Events tab. Stack operations that are
|
426
464
|
* initiated from the console use the token format <i>Console-StackOperation-ID</i>, which helps you
|
427
465
|
* easily identify the stack operation . For example, if you create a stack using the console, each stack event would be
|
428
466
|
* assigned the same token in the following format:
|
429
|
-
*
|
467
|
+
* <code>Console-CreateStack-7f59c3cf-00d2-40c7-b2ff-e75db0987002</code>.</p>
|
430
468
|
*/
|
431
469
|
ClientRequestToken?: string;
|
432
470
|
/**
|
433
471
|
* @public
|
434
|
-
* <p>When set to <code>true</code>, newly created resources are deleted when the operation rolls back. This includes
|
435
|
-
*
|
472
|
+
* <p>When set to <code>true</code>, newly created resources are deleted when the operation rolls back. This includes
|
473
|
+
* newly created resources marked with a deletion policy of <code>Retain</code>.</p>
|
436
474
|
* <p>Default: <code>false</code>
|
437
475
|
* </p>
|
438
476
|
*/
|
@@ -479,22 +517,22 @@ export interface UpdateStackInstancesInput {
|
|
479
517
|
* @public
|
480
518
|
* <p>The names of one or more Amazon Web Services Regions in which you want to update parameter values for stack
|
481
519
|
* instances. The overridden parameter values will be applied to all stack instances in the specified accounts and
|
482
|
-
*
|
520
|
+
* Amazon Web Services Regions.</p>
|
483
521
|
*/
|
484
522
|
Regions: string[] | undefined;
|
485
523
|
/**
|
486
524
|
* @public
|
487
525
|
* <p>A list of input parameters whose values you want to update for the specified stack instances.</p>
|
488
|
-
* <p>Any overridden parameter values will be applied to all stack instances in the specified accounts and Amazon Web Services Regions. When specifying parameters and their values, be aware of how CloudFormation sets
|
489
|
-
*
|
526
|
+
* <p>Any overridden parameter values will be applied to all stack instances in the specified accounts and Amazon Web Services Regions. When specifying parameters and their values, be aware of how CloudFormation sets parameter values
|
527
|
+
* during stack instance update operations:</p>
|
490
528
|
* <ul>
|
491
529
|
* <li>
|
492
530
|
* <p>To override the current value for a parameter, include the parameter and specify its value.</p>
|
493
531
|
* </li>
|
494
532
|
* <li>
|
495
533
|
* <p>To leave an overridden parameter set to its present value, include the parameter and specify
|
496
|
-
*
|
497
|
-
*
|
534
|
+
* <code>UsePreviousValue</code> as <code>true</code>. (You can't specify both a value and set
|
535
|
+
* <code>UsePreviousValue</code> to <code>true</code>.)</p>
|
498
536
|
* </li>
|
499
537
|
* <li>
|
500
538
|
* <p>To set an overridden parameter back to the value specified in the stack set, specify a parameter list but
|
@@ -508,10 +546,12 @@ export interface UpdateStackInstancesInput {
|
|
508
546
|
* overridden value.</p>
|
509
547
|
* <p>You can only override the parameter <i>values</i> that are specified in the stack set; to add or
|
510
548
|
* delete a parameter itself, use <code>UpdateStackSet</code> to update the stack set template. If you add a parameter
|
511
|
-
* to a template, before you can override the parameter value specified in the stack set you must first use <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_UpdateStackSet.html">
|
549
|
+
* to a template, before you can override the parameter value specified in the stack set you must first use <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_UpdateStackSet.html">
|
550
|
+
* <code>UpdateStackSet</code>
|
551
|
+
* </a> to
|
512
552
|
* update all stack instances with the updated template and parameter value specified in the stack set. Once a stack
|
513
553
|
* instance has been updated with the new parameter, you can then override the parameter value using
|
514
|
-
*
|
554
|
+
* <code>UpdateStackInstances</code>.</p>
|
515
555
|
*/
|
516
556
|
ParameterOverrides?: Parameter[];
|
517
557
|
/**
|
@@ -522,16 +562,16 @@ export interface UpdateStackInstancesInput {
|
|
522
562
|
/**
|
523
563
|
* @public
|
524
564
|
* <p>The unique identifier for this stack set operation.</p>
|
525
|
-
* <p>The operation ID also functions as an idempotency token, to ensure that CloudFormation performs the
|
526
|
-
*
|
527
|
-
*
|
565
|
+
* <p>The operation ID also functions as an idempotency token, to ensure that CloudFormation performs the stack set
|
566
|
+
* operation only once, even if you retry the request multiple times. You might retry stack set operation requests to
|
567
|
+
* ensure that CloudFormation successfully received them.</p>
|
528
568
|
* <p>If you don't specify an operation ID, the SDK generates one automatically.</p>
|
529
569
|
*/
|
530
570
|
OperationId?: string;
|
531
571
|
/**
|
532
572
|
* @public
|
533
573
|
* <p>[Service-managed permissions] Specifies whether you are acting as an account administrator in the organization's
|
534
|
-
*
|
574
|
+
* management account or as a delegated administrator in a member account.</p>
|
535
575
|
* <p>By default, <code>SELF</code> is specified. Use <code>SELF</code> for stack sets with self-managed
|
536
576
|
* permissions.</p>
|
537
577
|
* <ul>
|
@@ -541,7 +581,7 @@ export interface UpdateStackInstancesInput {
|
|
541
581
|
* <li>
|
542
582
|
* <p>If you are signed in to a delegated administrator account, specify <code>DELEGATED_ADMIN</code>.</p>
|
543
583
|
* <p>Your Amazon Web Services account must be registered as a delegated administrator in the management account. For more information, see <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-delegated-admin.html">Register a delegated
|
544
|
-
*
|
584
|
+
* administrator</a> in the <i>CloudFormation User Guide</i>.</p>
|
545
585
|
* </li>
|
546
586
|
* </ul>
|
547
587
|
*/
|
@@ -577,7 +617,7 @@ export interface UpdateStackSetInput {
|
|
577
617
|
* bytes. For more information, see <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/template-anatomy.html">Template Anatomy</a> in the
|
578
618
|
* CloudFormation User Guide.</p>
|
579
619
|
* <p>Conditional: You must specify only one of the following parameters: <code>TemplateBody</code> or
|
580
|
-
*
|
620
|
+
* <code>TemplateURL</code>—or set <code>UsePreviousTemplate</code> to true.</p>
|
581
621
|
*/
|
582
622
|
TemplateBody?: string;
|
583
623
|
/**
|
@@ -585,16 +625,16 @@ export interface UpdateStackSetInput {
|
|
585
625
|
* <p>The location of the file that contains the template body. The URL must point to a template (maximum size:
|
586
626
|
* 460,800 bytes) that is located in an Amazon S3 bucket or a Systems Manager document. For more information,
|
587
627
|
* see <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/template-anatomy.html">Template
|
588
|
-
*
|
628
|
+
* Anatomy</a> in the CloudFormation User Guide.</p>
|
589
629
|
* <p>Conditional: You must specify only one of the following parameters: <code>TemplateBody</code> or
|
590
|
-
*
|
630
|
+
* <code>TemplateURL</code>—or set <code>UsePreviousTemplate</code> to true.</p>
|
591
631
|
*/
|
592
632
|
TemplateURL?: string;
|
593
633
|
/**
|
594
634
|
* @public
|
595
635
|
* <p>Use the existing template that's associated with the stack set that you're updating.</p>
|
596
636
|
* <p>Conditional: You must specify only one of the following parameters: <code>TemplateBody</code> or
|
597
|
-
*
|
637
|
+
* <code>TemplateURL</code>—or set <code>UsePreviousTemplate</code> to true.</p>
|
598
638
|
*/
|
599
639
|
UsePreviousTemplate?: boolean;
|
600
640
|
/**
|
@@ -612,21 +652,21 @@ export interface UpdateStackSetInput {
|
|
612
652
|
* <code>CAPABILITY_IAM</code> and <code>CAPABILITY_NAMED_IAM</code>
|
613
653
|
* </p>
|
614
654
|
* <p>Some stack templates might include resources that can affect permissions in your Amazon Web Services account;
|
615
|
-
* for example, by creating new Identity and Access Management (IAM) users. For those stacks sets, you must
|
616
|
-
*
|
655
|
+
* for example, by creating new Identity and Access Management (IAM) users. For those stacks sets, you must explicitly
|
656
|
+
* acknowledge this by specifying one of these capabilities.</p>
|
617
657
|
* <p>The following IAM resources require you to specify either the <code>CAPABILITY_IAM</code> or
|
618
|
-
*
|
658
|
+
* <code>CAPABILITY_NAMED_IAM</code> capability.</p>
|
619
659
|
* <ul>
|
620
660
|
* <li>
|
621
661
|
* <p>If you have IAM resources, you can specify either capability.</p>
|
622
662
|
* </li>
|
623
663
|
* <li>
|
624
664
|
* <p>If you have IAM resources with custom names, you <i>must</i> specify
|
625
|
-
*
|
665
|
+
* <code>CAPABILITY_NAMED_IAM</code>.</p>
|
626
666
|
* </li>
|
627
667
|
* <li>
|
628
668
|
* <p>If you don't specify either of these capabilities, CloudFormation returns an
|
629
|
-
*
|
669
|
+
* <code>InsufficientCapabilities</code> error.</p>
|
630
670
|
* </li>
|
631
671
|
* </ul>
|
632
672
|
* <p>If your stack template contains these resources, we recommend that you review all permissions associated with
|
@@ -635,47 +675,55 @@ export interface UpdateStackSetInput {
|
|
635
675
|
* <li>
|
636
676
|
* <p>
|
637
677
|
* <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-accesskey.html">
|
638
|
-
*
|
678
|
+
* <code>AWS::IAM::AccessKey</code>
|
679
|
+
* </a>
|
639
680
|
* </p>
|
640
681
|
* </li>
|
641
682
|
* <li>
|
642
683
|
* <p>
|
643
684
|
* <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-group.html">
|
644
|
-
*
|
685
|
+
* <code>AWS::IAM::Group</code>
|
686
|
+
* </a>
|
645
687
|
* </p>
|
646
688
|
* </li>
|
647
689
|
* <li>
|
648
690
|
* <p>
|
649
691
|
* <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-instanceprofile.html">
|
650
|
-
*
|
692
|
+
* <code>AWS::IAM::InstanceProfile</code>
|
693
|
+
* </a>
|
651
694
|
* </p>
|
652
695
|
* </li>
|
653
696
|
* <li>
|
654
697
|
* <p>
|
655
698
|
* <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-policy.html">
|
656
|
-
*
|
699
|
+
* <code>AWS::IAM::Policy</code>
|
700
|
+
* </a>
|
657
701
|
* </p>
|
658
702
|
* </li>
|
659
703
|
* <li>
|
660
704
|
* <p>
|
661
705
|
* <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-role.html">
|
662
|
-
*
|
706
|
+
* <code>AWS::IAM::Role</code>
|
707
|
+
* </a>
|
663
708
|
* </p>
|
664
709
|
* </li>
|
665
710
|
* <li>
|
666
711
|
* <p>
|
667
712
|
* <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-user.html">
|
668
|
-
*
|
713
|
+
* <code>AWS::IAM::User</code>
|
714
|
+
* </a>
|
669
715
|
* </p>
|
670
716
|
* </li>
|
671
717
|
* <li>
|
672
718
|
* <p>
|
673
719
|
* <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-addusertogroup.html">
|
674
|
-
*
|
720
|
+
* <code>AWS::IAM::UserToGroupAddition</code>
|
721
|
+
* </a>
|
675
722
|
* </p>
|
676
723
|
* </li>
|
677
724
|
* </ul>
|
678
|
-
* <p>For more information, see <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-iam-template.html#capabilities">Acknowledging IAM Resources in
|
725
|
+
* <p>For more information, see <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-iam-template.html#capabilities">Acknowledging IAM Resources in
|
726
|
+
* CloudFormation Templates</a>.</p>
|
679
727
|
* </li>
|
680
728
|
* <li>
|
681
729
|
* <p>
|
@@ -683,13 +731,17 @@ export interface UpdateStackSetInput {
|
|
683
731
|
* </p>
|
684
732
|
* <p>Some templates reference macros. If your stack set template references one or more macros, you must update the
|
685
733
|
* stack set directly from the processed template, without first reviewing the resulting changes in a change set. To
|
686
|
-
* update the stack set directly, you must acknowledge this capability. For more information, see <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/template-macros.html">Using CloudFormation Macros to
|
687
|
-
* Custom Processing on Templates</a>.</p>
|
734
|
+
* update the stack set directly, you must acknowledge this capability. For more information, see <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/template-macros.html">Using CloudFormation Macros to
|
735
|
+
* Perform Custom Processing on Templates</a>.</p>
|
688
736
|
* <important>
|
689
737
|
* <p>Stack sets with service-managed permissions do not currently support the use of macros in templates. (This
|
690
|
-
* includes the <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/create-reusable-transform-function-snippets-and-add-to-your-template-with-aws-include-transform.html">
|
691
|
-
*
|
692
|
-
*
|
738
|
+
* includes the <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/create-reusable-transform-function-snippets-and-add-to-your-template-with-aws-include-transform.html">
|
739
|
+
* <code>AWS::Include</code>
|
740
|
+
* </a> and <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/transform-aws-serverless.html">
|
741
|
+
* <code>AWS::Serverless</code>
|
742
|
+
* </a> transforms, which
|
743
|
+
* are macros hosted by CloudFormation.) Even if you specify this capability for a stack set with service-managed permissions,
|
744
|
+
* if you reference a macro in your template the stack set operation will fail.</p>
|
693
745
|
* </important>
|
694
746
|
* </li>
|
695
747
|
* </ul>
|
@@ -697,9 +749,8 @@ export interface UpdateStackSetInput {
|
|
697
749
|
Capabilities?: Capability[];
|
698
750
|
/**
|
699
751
|
* @public
|
700
|
-
* <p>The key-value pairs to associate with this stack set and the stacks created from it. CloudFormation also
|
701
|
-
*
|
702
|
-
* tags.</p>
|
752
|
+
* <p>The key-value pairs to associate with this stack set and the stacks created from it. CloudFormation also propagates these
|
753
|
+
* tags to supported resources that are created in the stacks. You can specify a maximum number of 50 tags.</p>
|
703
754
|
* <p>If you specify tags for this parameter, those tags replace any list of tags that are currently associated with
|
704
755
|
* this stack set. This means:</p>
|
705
756
|
* <ul>
|
@@ -716,12 +767,12 @@ export interface UpdateStackSetInput {
|
|
716
767
|
* <p>If you specify an empty value, CloudFormation removes all currently associated tags.</p>
|
717
768
|
* </li>
|
718
769
|
* </ul>
|
719
|
-
* <p>If you specify new tags as part of an <code>UpdateStackSet</code> action, CloudFormation checks to see if
|
720
|
-
*
|
721
|
-
*
|
722
|
-
*
|
723
|
-
*
|
724
|
-
*
|
770
|
+
* <p>If you specify new tags as part of an <code>UpdateStackSet</code> action, CloudFormation checks to see if you have the
|
771
|
+
* required IAM permission to tag resources. If you omit tags that are currently associated with the stack set from
|
772
|
+
* the list of tags you specify, CloudFormation assumes that you want to remove those tags from the stack set, and checks to see
|
773
|
+
* if you have permission to untag resources. If you don't have the necessary permission(s), the entire
|
774
|
+
* <code>UpdateStackSet</code> action fails with an <code>access denied</code> error, and the stack set is not
|
775
|
+
* updated.</p>
|
725
776
|
*/
|
726
777
|
Tags?: Tag[];
|
727
778
|
/**
|
@@ -732,20 +783,19 @@ export interface UpdateStackSetInput {
|
|
732
783
|
/**
|
733
784
|
* @public
|
734
785
|
* <p>The Amazon Resource Name (ARN) of the IAM role to use to update this stack set.</p>
|
735
|
-
* <p>Specify an IAM role only if you are using customized administrator roles to control which users
|
736
|
-
*
|
737
|
-
* Operations</a> in the <i>CloudFormation User Guide</i>.</p>
|
786
|
+
* <p>Specify an IAM role only if you are using customized administrator roles to control which users or groups can
|
787
|
+
* manage specific stack sets within the same administrator account. For more information, see <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-prereqs.html">Granting Permissions for Stack
|
788
|
+
* Set Operations</a> in the <i>CloudFormation User Guide</i>.</p>
|
738
789
|
* <p>If you specified a customized administrator role when you created the stack set, you must specify a customized
|
739
790
|
* administrator role, even if it is the same customized administrator role used with this stack set previously.</p>
|
740
791
|
*/
|
741
792
|
AdministrationRoleARN?: string;
|
742
793
|
/**
|
743
794
|
* @public
|
744
|
-
* <p>The name of the IAM execution role to use to update the stack set. If you do not specify an
|
745
|
-
*
|
746
|
-
*
|
747
|
-
*
|
748
|
-
* resources users and groups can include in their stack sets.</p>
|
795
|
+
* <p>The name of the IAM execution role to use to update the stack set. If you do not specify an execution role,
|
796
|
+
* CloudFormation uses the <code>AWSCloudFormationStackSetExecutionRole</code> role for the stack set operation.</p>
|
797
|
+
* <p>Specify an IAM role only if you are using customized execution roles to control which stack resources users
|
798
|
+
* and groups can include in their stack sets.</p>
|
749
799
|
* <p>If you specify a customized execution role, CloudFormation uses that role to update the stack. If you do not specify a
|
750
800
|
* customized execution role, CloudFormation performs the update using the role previously associated with the stack set, so long
|
751
801
|
* as you have permissions to perform operations on the stack set.</p>
|
@@ -758,25 +808,26 @@ export interface UpdateStackSetInput {
|
|
758
808
|
* <p>To update all the stack instances associated with this stack set, do not specify <code>DeploymentTargets</code>
|
759
809
|
* or <code>Regions</code>.</p>
|
760
810
|
* <p>If the stack set update includes changes to the template (that is, if <code>TemplateBody</code> or
|
761
|
-
*
|
762
|
-
*
|
763
|
-
* their existing stack instance
|
811
|
+
* <code>TemplateURL</code> is specified), or the <code>Parameters</code>, CloudFormation marks all stack instances with a status
|
812
|
+
* of <code>OUTDATED</code> prior to updating the stack instances in the specified accounts and Amazon Web Services Regions. If the stack set update doesn't include changes to the template or parameters, CloudFormation updates the stack instances
|
813
|
+
* in the specified accounts and Regions, while leaving all other stack instances with their existing stack instance
|
814
|
+
* status.</p>
|
764
815
|
*/
|
765
816
|
DeploymentTargets?: DeploymentTargets;
|
766
817
|
/**
|
767
818
|
* @public
|
768
819
|
* <p>Describes how the IAM roles required for stack set operations are created. You cannot modify
|
769
|
-
*
|
820
|
+
* <code>PermissionModel</code> if there are stack instances associated with your stack set.</p>
|
770
821
|
* <ul>
|
771
822
|
* <li>
|
772
823
|
* <p>With <code>self-managed</code> permissions, you must create the administrator and execution roles required to
|
773
824
|
* deploy to target accounts. For more information, see <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-prereqs-self-managed.html">Grant Self-Managed Stack Set
|
774
|
-
*
|
825
|
+
* Permissions</a>.</p>
|
775
826
|
* </li>
|
776
827
|
* <li>
|
777
|
-
* <p>With <code>service-managed</code> permissions, StackSets automatically creates the IAM roles
|
778
|
-
*
|
779
|
-
*
|
828
|
+
* <p>With <code>service-managed</code> permissions, StackSets automatically creates the IAM roles required to
|
829
|
+
* deploy to accounts managed by Organizations. For more information, see <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-prereqs-service-managed.html">Grant Service-Managed Stack Set
|
830
|
+
* Permissions</a>.</p>
|
780
831
|
* </li>
|
781
832
|
* </ul>
|
782
833
|
*/
|
@@ -792,12 +843,12 @@ export interface UpdateStackSetInput {
|
|
792
843
|
/**
|
793
844
|
* @public
|
794
845
|
* <p>The unique ID for this stack set operation.</p>
|
795
|
-
* <p>The operation ID also functions as an idempotency token, to ensure that CloudFormation performs the
|
796
|
-
*
|
797
|
-
*
|
846
|
+
* <p>The operation ID also functions as an idempotency token, to ensure that CloudFormation performs the stack set
|
847
|
+
* operation only once, even if you retry the request multiple times. You might retry stack set operation requests to
|
848
|
+
* ensure that CloudFormation successfully received them.</p>
|
798
849
|
* <p>If you don't specify an operation ID, CloudFormation generates one automatically.</p>
|
799
850
|
* <p>Repeating this stack set operation with a new operation ID retries all stack instances whose status is
|
800
|
-
*
|
851
|
+
* <code>OUTDATED</code>.</p>
|
801
852
|
*/
|
802
853
|
OperationId?: string;
|
803
854
|
/**
|
@@ -805,11 +856,11 @@ export interface UpdateStackSetInput {
|
|
805
856
|
* <p>[Self-managed permissions] The accounts in which to update associated stack instances. If you specify accounts,
|
806
857
|
* you must also specify the Amazon Web Services Regions in which to update stack set instances.</p>
|
807
858
|
* <p>To update <i>all</i> the stack instances associated with this stack set, don't specify the
|
808
|
-
*
|
859
|
+
* <code>Accounts</code> or <code>Regions</code> properties.</p>
|
809
860
|
* <p>If the stack set update includes changes to the template (that is, if the <code>TemplateBody</code> or
|
810
|
-
*
|
861
|
+
* <code>TemplateURL</code> properties are specified), or the <code>Parameters</code> property, CloudFormation marks all stack
|
811
862
|
* instances with a status of <code>OUTDATED</code> prior to updating the stack instances in the specified accounts and
|
812
|
-
*
|
863
|
+
* Amazon Web Services Regions. If the stack set update does not include changes to the template or parameters, CloudFormation
|
813
864
|
* updates the stack instances in the specified accounts and Amazon Web Services Regions, while leaving all other stack
|
814
865
|
* instances with their existing stack instance status.</p>
|
815
866
|
*/
|
@@ -819,9 +870,9 @@ export interface UpdateStackSetInput {
|
|
819
870
|
* <p>The Amazon Web Services Regions in which to update associated stack instances. If you specify Regions, you must
|
820
871
|
* also specify accounts in which to update stack set instances.</p>
|
821
872
|
* <p>To update <i>all</i> the stack instances associated with this stack set, do not specify the
|
822
|
-
*
|
873
|
+
* <code>Accounts</code> or <code>Regions</code> properties.</p>
|
823
874
|
* <p>If the stack set update includes changes to the template (that is, if the <code>TemplateBody</code> or
|
824
|
-
*
|
875
|
+
* <code>TemplateURL</code> properties are specified), or the <code>Parameters</code> property, CloudFormation marks all stack
|
825
876
|
* instances with a status of <code>OUTDATED</code> prior to updating the stack instances in the specified accounts and
|
826
877
|
* Regions. If the stack set update does not include changes to the template or parameters, CloudFormation updates the stack
|
827
878
|
* instances in the specified accounts and Regions, while leaving all other stack instances with their existing stack
|
@@ -831,7 +882,7 @@ export interface UpdateStackSetInput {
|
|
831
882
|
/**
|
832
883
|
* @public
|
833
884
|
* <p>[Service-managed permissions] Specifies whether you are acting as an account administrator in the organization's
|
834
|
-
*
|
885
|
+
* management account or as a delegated administrator in a member account.</p>
|
835
886
|
* <p>By default, <code>SELF</code> is specified. Use <code>SELF</code> for stack sets with self-managed
|
836
887
|
* permissions.</p>
|
837
888
|
* <ul>
|
@@ -841,7 +892,7 @@ export interface UpdateStackSetInput {
|
|
841
892
|
* <li>
|
842
893
|
* <p>If you are signed in to a delegated administrator account, specify <code>DELEGATED_ADMIN</code>.</p>
|
843
894
|
* <p>Your Amazon Web Services account must be registered as a delegated administrator in the management account. For more information, see <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-delegated-admin.html">Register a delegated
|
844
|
-
*
|
895
|
+
* administrator</a> in the <i>CloudFormation User Guide</i>.</p>
|
845
896
|
* </li>
|
846
897
|
* </ul>
|
847
898
|
*/
|
@@ -898,16 +949,16 @@ export interface ValidateTemplateInput {
|
|
898
949
|
* <p>Structure containing the template body with a minimum length of 1 byte and a maximum length of 51,200 bytes. For
|
899
950
|
* more information, go to <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/template-anatomy.html">Template Anatomy</a> in the <i>CloudFormation User Guide</i>.</p>
|
900
951
|
* <p>Conditional: You must pass <code>TemplateURL</code> or <code>TemplateBody</code>. If both are passed, only
|
901
|
-
*
|
952
|
+
* <code>TemplateBody</code> is used.</p>
|
902
953
|
*/
|
903
954
|
TemplateBody?: string;
|
904
955
|
/**
|
905
956
|
* @public
|
906
957
|
* <p>Location of file containing the template body. The URL must point to a template (max size: 460,800 bytes) that
|
907
958
|
* is located in an Amazon S3 bucket or a Systems Manager document. For more information, go to <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/template-anatomy.html">Template Anatomy</a> in the
|
908
|
-
* <i>CloudFormation User Guide</i>.</p>
|
959
|
+
* <i>CloudFormation User Guide</i>. The location for an Amazon S3 bucket must start with <code>https://</code>.</p>
|
909
960
|
* <p>Conditional: You must pass <code>TemplateURL</code> or <code>TemplateBody</code>. If both are passed, only
|
910
|
-
*
|
961
|
+
* <code>TemplateBody</code> is used.</p>
|
911
962
|
*/
|
912
963
|
TemplateURL?: string;
|
913
964
|
}
|
@@ -954,11 +1005,12 @@ export interface ValidateTemplateOutput {
|
|
954
1005
|
Description?: string;
|
955
1006
|
/**
|
956
1007
|
* @public
|
957
|
-
* <p>The capabilities found within the template. If your template contains IAM resources, you must
|
958
|
-
*
|
959
|
-
* an InsufficientCapabilities
|
960
|
-
*
|
961
|
-
*
|
1008
|
+
* <p>The capabilities found within the template. If your template contains IAM resources, you must specify the
|
1009
|
+
* CAPABILITY_IAM or CAPABILITY_NAMED_IAM value for this parameter when you use the <a>CreateStack</a> or
|
1010
|
+
* <a>UpdateStack</a> actions with your template; otherwise, those actions return an InsufficientCapabilities
|
1011
|
+
* error.</p>
|
1012
|
+
* <p>For more information, see <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-iam-template.html#capabilities">Acknowledging IAM Resources in
|
1013
|
+
* CloudFormation Templates</a>.</p>
|
962
1014
|
*/
|
963
1015
|
Capabilities?: Capability[];
|
964
1016
|
/**
|