@intentius/chant-lexicon-aws 0.15.3 → 0.17.0

package/dist/types/index.d.ts

@@ -6472,12 +6472,16 @@ export declare class ConformancePack {
   constructor(props: {
     /** Name of the conformance pack which will be assigned as the unique identifier. */
     ConformancePackName: string;
+    /** Amazon Resource Name (ARN) of the conformance pack. */
+    ConformancePackArn?: string;
     /** A list of ConformancePackInputParameter objects. */
     ConformancePackInputParameters?: ConformancePack_ConformancePackInputParameter[];
     /** AWS Config stores intermediate files while processing conformance pack template. */
     DeliveryS3Bucket?: string;
     /** The prefix for delivery S3 bucket. */
     DeliveryS3KeyPrefix?: string;
+    /** The tags for the conformance pack. */
+    Tags?: ConformancePack_Tag[];
     /** A string containing full conformance pack template body. You can only specify one of the template body or template S3Uri fields. */
     TemplateBody?: string;
     /** Location of file containing the template body which points to the conformance pack template that is located in an Amazon S3 bucket. You can only specify one of the template body or template S3Uri fields. */
@@ -6485,6 +6489,7 @@ export declare class ConformancePack {
     /** The TemplateSSMDocumentDetails object contains the name of the SSM document and the version of the SSM document. */
     TemplateSSMDocumentDetails?: Record<string, unknown>;
   }, attributes?: CFResourceAttributes);
+  readonly ConformancePackArn: string;
 }
 
 export declare class ConnectAttachment {
@@ -6738,10 +6743,16 @@ export declare class ConnectorV2 {
     /** The ID of the connector */
     ConnectorId?: string;
     /** The status of the connector */
-    ConnectorStatus?: "CONNECTED" | "FAILED_TO_CONNECT" | "PENDING_AUTHORIZATION" | "PENDING_CONFIGURATION";
+    ConnectorStatus?: string;
     CreatedAt?: string;
     /** A description of the connector */
     Description?: string;
+    /** The enablement status of the connector */
+    EnablementStatus?: string;
+    /** The reason for the enablement status of the connector */
+    EnablementStatusReason?: string;
+    /** The list of health issues associated with the connector */
+    Issues?: ConnectorV2_HealthIssue[];
     /** The ARN of KMS key used for the connector */
     KmsKeyArn?: string;
     LastCheckedAt?: string;
@@ -6752,8 +6763,11 @@ export declare class ConnectorV2 {
   }, attributes?: CFResourceAttributes);
   readonly ConnectorArn: string;
   readonly ConnectorId: string;
-  readonly ConnectorStatus: "CONNECTED" | "FAILED_TO_CONNECT" | "PENDING_AUTHORIZATION" | "PENDING_CONFIGURATION";
+  readonly ConnectorStatus: string;
   readonly CreatedAt: string;
+  readonly EnablementStatus: string;
+  readonly EnablementStatusReason: string;
+  readonly Issues: ConnectorV2_HealthIssue[];
   readonly LastCheckedAt: string;
   readonly LastUpdatedAt: string;
   readonly Message: string;
@@ -27109,29 +27123,29 @@ export declare class Queue {
     /** For first-in-first-out (FIFO) queues, specifies whether to enable content-based deduplication. During the deduplication interval, SQS treats messages that are sent with identical content as duplicates and delivers only one copy of the message. For more information, see the ``ContentBasedDeduplication`` attribute for the ``CreateQueue`` action in the *API Reference*. */
     ContentBasedDeduplication?: boolean;
     /** For high throughput for FIFO queues, specifies whether message deduplication occurs at the message group or queue level. Valid values are ``messageGroup`` and ``queue``.
- To enable high throughput for a FIFO queue, set this attribute to ``messageGroup`` *and* set the ``FifoThroughputLimit`` attribute to ``perMessageGroupId``. If you set these attributes to anything other than these values, normal throughput is in effect and deduplication occurs as specified. For more information, see [High throughput for FIFO queues](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/high-throughput-fifo.html) and [Quotas related to messages](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/quotas-messages.html) in the *Developer Guide*. */
+ To enable high throughput for a FIFO queue, set this attribute to ``messageGroup``*and* set the ``FifoThroughputLimit`` attribute to ``perMessageGroupId``. If you set these attributes to anything other than these values, normal throughput is in effect and deduplication occurs as specified. For more information, see [High throughput for FIFO queues](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/high-throughput-fifo.html) and [Quotas related to messages](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/quotas-messages.html) in the *Developer Guide*. */
     DeduplicationScope?: string;
     /** The time in seconds for which the delivery of all messages in the queue is delayed. You can specify an integer value of ``0`` to ``900`` (15 minutes). The default value is ``0``. */
     DelaySeconds?: number;
-    /** If set to true, creates a FIFO queue. If you don't specify this property, SQS creates a standard queue. For more information, see [FIFO queues](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/FIFO-queues.html) in the *Developer Guide*. */
+    /** If set to true, creates a FIFO queue. If you don't specify this property, SQS creates a standard queue. For more information, see [Amazon SQS FIFO queues](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-fifo-queues.html) in the *Developer Guide*. */
     FifoQueue?: boolean;
     /** For high throughput for FIFO queues, specifies whether the FIFO queue throughput quota applies to the entire queue or per message group. Valid values are ``perQueue`` and ``perMessageGroupId``.
- To enable high throughput for a FIFO queue, set this attribute to ``perMessageGroupId`` *and* set the ``DeduplicationScope`` attribute to ``messageGroup``. If you set these attributes to anything other than these values, normal throughput is in effect and deduplication occurs as specified. For more information, see [High throughput for FIFO queues](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/high-throughput-fifo.html) and [Quotas related to messages](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/quotas-messages.html) in the *Developer Guide*. */
+ To enable high throughput for a FIFO queue, set this attribute to ``perMessageGroupId``*and* set the ``DeduplicationScope`` attribute to ``messageGroup``. If you set these attributes to anything other than these values, normal throughput is in effect and deduplication occurs as specified. For more information, see [High throughput for FIFO queues](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/high-throughput-fifo.html) and [Quotas related to messages](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/quotas-messages.html) in the *Developer Guide*. */
     FifoThroughputLimit?: string;
     /** The length of time in seconds for which SQS can reuse a data key to encrypt or decrypt messages before calling KMS again. The value must be an integer between 60 (1 minute) and 86,400 (24 hours). The default is 300 (5 minutes).
   A shorter time period provides better security, but results in more calls to KMS, which might incur charges after Free Tier. For more information, see [Encryption at rest](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-server-side-encryption.html#sqs-how-does-the-data-key-reuse-period-work) in the *Developer Guide*. */
     KmsDataKeyReusePeriodSeconds?: number;
-    /** The ID of an AWS Key Management Service (KMS) for SQS, or a custom KMS. To use the AWS managed KMS for SQS, specify a (default) alias ARN, alias name (e.g. ``alias/aws/sqs``), key ARN, or key ID. For more information, see the following:
-  +   [Encryption at rest](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-server-side-encryption.html) in the *Developer Guide* 
-  +   [CreateQueue](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_CreateQueue.html) in the *API Reference* 
-  +   [Request Parameters](https://docs.aws.amazon.com/kms/latest/APIReference/API_DescribeKey.html#API_DescribeKey_RequestParameters) in the *Key Management Service API Reference* 
-  +   The Key Management Service (KMS) section of the [Best Practices](https://docs.aws.amazon.com/https://d0.awsstatic.com/whitepapers/aws-kms-best-practices.pdf) whitepaper */
+    /** The ID of an AWS Key Management Service (KMS) for SQS, or a custom KMS. To use the AWS managed KMS for SQS, specify a (default) alias ARN, alias name (for example ``alias/aws/sqs``), key ARN, or key ID. For more information, see the following:
+  +  [Encryption at rest](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-server-side-encryption.html) in the *Developer Guide*
+  +  [CreateQueue](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_CreateQueue.html) in the *API Reference*
+  +  [Request Parameters](https://docs.aws.amazon.com/kms/latest/APIReference/API_DescribeKey.html#API_DescribeKey_RequestParameters) in the *Key Management Service API Reference*
+  +   The Key Management Service (KMS) section of the [Security best practices for Key Management Service](https://docs.aws.amazon.com/kms/latest/developerguide/best-practices.html) in the *Key Management Service Developer Guide* */
     KmsMasterKeyId?: string;
-    /** The limit of how many bytes that a message can contain before SQS rejects it. You can specify an integer value from ``1,024`` bytes (1 KiB) to ``262,144`` bytes (256 KiB). The default value is ``262,144`` (256 KiB). */
+    /** The limit of how many bytes that a message can contain before SQS rejects it. You can specify an integer from 1,024 bytes (1 KiB) to 1,048,576 bytes (1 MiB). Default: 1,048,576 bytes (1 MiB). */
     MaximumMessageSize?: number;
     /** The number of seconds that SQS retains a message. You can specify an integer value from ``60`` seconds (1 minute) to ``1,209,600`` seconds (14 days). The default value is ``345,600`` seconds (4 days). */
     MessageRetentionPeriod?: number;
-    /** A name for the queue. To create a FIFO queue, the name of your FIFO queue must end with the ``.fifo`` suffix. For more information, see [FIFO queues](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/FIFO-queues.html) in the *Developer Guide*.
+    /** A name for the queue. To create a FIFO queue, the name of your FIFO queue must end with the ``.fifo`` suffix. For more information, see [Amazon SQS FIFO queues](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-fifo-queues.html) in the *Developer Guide*.
  If you don't specify a name, CFN generates a unique physical ID and uses that ID for the queue name. For more information, see [Name type](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-name.html) in the *User Guide*. 
   If you specify a name, you can't perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name. */
     QueueName?: string;
@@ -27148,7 +27162,7 @@ export declare class Queue {
     RedriveAllowPolicy?: Record<string, unknown>;
     /** The string that includes the parameters for the dead-letter queue functionality of the source queue as a JSON object. The parameters are as follows:
   +  ``deadLetterTargetArn``: The Amazon Resource Name (ARN) of the dead-letter queue to which SQS moves messages after the value of ``maxReceiveCount`` is exceeded.
-  +  ``maxReceiveCount``: The number of times a message is delivered to the source queue before being moved to the dead-letter queue. When the ``ReceiveCount`` for a message exceeds the ``maxReceiveCount`` for a queue, SQS moves the message to the dead-letter-queue.
+  +  ``maxReceiveCount``: The number of times a message is received by a consumer of the source queue before being moved to the dead-letter queue. When the ``ReceiveCount`` for a message exceeds the ``maxReceiveCount`` for a queue, SQS moves the message to the dead-letter-queue.
   
   The dead-letter queue of a FIFO queue must also be a FIFO queue. Similarly, the dead-letter queue of a standard queue must also be a standard queue.
    *JSON* 
@@ -31559,6 +31573,46 @@ export declare class SecurityHubAutomationRule {
   readonly UpdatedAt: string;
 }
 
+export declare class SecurityHubConnector {
+  constructor(props: {
+    /** The name of the connector */
+    Name: string;
+    Provider: SecurityHubConnector_Provider;
+    /** The ARN of the connector */
+    ConnectorArn?: string;
+    /** The ID of the connector */
+    ConnectorId?: string;
+    ConnectorStatus?: string;
+    /** The date and time for createdAt in UTC and ISO 8601 format. */
+    CreatedAt?: string;
+    /** The principal that created the connector */
+    CreatedBy?: string;
+    /** A description of the connector */
+    Description?: string;
+    /** The enablement status of the connector */
+    EnablementStatus?: string;
+    /** The list of health issues associated with the connector */
+    Issues?: SecurityHubConnector_HealthIssue[];
+    /** The date and time for lastCheckedAt in UTC and ISO 8601 format. */
+    LastCheckedAt?: string;
+    /** The date and time for lastUpdatedAt in UTC and ISO 8601 format. */
+    LastUpdatedAt?: string;
+    /** The message associated with the connector status change */
+    Message?: string;
+    Tags?: Record<string, unknown>;
+  }, attributes?: CFResourceAttributes);
+  readonly ConnectorArn: string;
+  readonly ConnectorId: string;
+  readonly ConnectorStatus: string;
+  readonly CreatedAt: string;
+  readonly CreatedBy: string;
+  readonly EnablementStatus: string;
+  readonly Issues: SecurityHubConnector_HealthIssue[];
+  readonly LastCheckedAt: string;
+  readonly LastUpdatedAt: string;
+  readonly Message: string;
+}
+
 export declare class SecurityHubHub {
   constructor(props: {
     /** An ARN is automatically created for the customer. */
@@ -35453,6 +35507,23 @@ export declare class TransitGatewayPeeringAttachment {
   readonly TransitGatewayAttachmentId: string;
 }
 
+export declare class TransitGatewayPolicyTable {
+  constructor(props: {
+    /** The Id of transit gateway */
+    TransitGatewayId: string;
+    /** Creation time of the transit gateway policy table */
+    CreationTime?: string;
+    /** State of the transit gateway policy table */
+    State?: string;
+    Tags?: TransitGatewayPolicyTable_Tag[];
+    /** The Id of transit gateway policy table. */
+    TransitGatewayPolicyTableId?: string;
+  }, attributes?: CFResourceAttributes);
+  readonly CreationTime: string;
+  readonly State: string;
+  readonly TransitGatewayPolicyTableId: string;
+}
+
 export declare class TransitGatewayRegistration {
   constructor(props: {
     /** The ID of the global network. */
@@ -45778,6 +45849,25 @@ export declare class AzureConnectorConfiguration {
   });
 }
 
+export declare class AzureProviderConfiguration {
+  constructor(props: {
+    /** The ARN of the AWS Config connector used for the Azure integration */
+    AWSConfigConnectorArn: string;
+    /** The list of Azure regions to include in the connector scope */
+    AzureRegions: string[];
+    ScopeConfiguration: SecurityHubConnector_AzureScopeConfiguration;
+  });
+}
+
+export declare class AzureScopeConfiguration {
+  constructor(props: {
+    /** The scope type for the Azure connector */
+    ScopeType: "SUBSCRIPTION" | "TENANT";
+    /** The list of scope values for the Azure connector */
+    ScopeValues?: string[];
+  });
+}
+
 export declare class B2BICapability_S3Location {
   constructor(props: {
     BucketName?: string;
@@ -54186,6 +54276,15 @@ export declare class ConformancePack_ConformancePackInputParameter {
   });
 }
 
+export declare class ConformancePack_Tag {
+  constructor(props: {
+    /** The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.  */
+    Key: string;
+    /** The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.  */
+    Value: string;
+  });
+}
+
 export declare class ConnectAction {
   constructor(props: {
     IAMRoleARN: string;
@@ -55191,6 +55290,15 @@ export declare class ConnectorProvisioningConfig {
   });
 }
 
+export declare class ConnectorV2_HealthIssue {
+  constructor(props: {
+    /** The code identifying the type of health issue */
+    Code: string;
+    /** The message describing the health issue */
+    Message: string;
+  });
+}
+
 export declare class ConnectorVpcLatticeEgressConfig {
   constructor(props: {
     /** ARN of the VPC Lattice resource configuration */
@@ -68803,9 +68911,9 @@ export declare class EvaluationForm_EvaluationFormScoreThreshold {
   constructor(props: {
     /** The performance category name. */
     PerformanceCategory: "EXCEEDS_EXPECTATIONS" | "NEEDS_IMPROVEMENT";
-    /** The maximum score percentage for this threshold. */
+    /** The maximum score percentage for the performance category. */
     MaxScorePercentage?: number;
-    /** The minimum score percentage for this threshold. */
+    /** The minimum score percentage for the performance category. */
     MinScorePercentage?: number;
   });
 }
@@ -68820,10 +68928,12 @@ export declare class EvaluationForm_EvaluationFormSection {
     Title: string;
     /** The instructions of the section. */
     Instructions?: string;
+    /** The flag to exclude the section from scoring. */
     IsExcludedFromScoring?: boolean;
     /** The items of the section.
  *Minimum*: 1 */
     Items?: EvaluationForm_EvaluationFormItem[];
+    /** The score thresholds for performance categories. */
     ScoreThresholds?: EvaluationForm_EvaluationFormScoreThreshold[];
     /** The scoring weight of the section.
  *Minimum*: 0 
@@ -68912,9 +69022,9 @@ export declare class EvaluationFormScoreThreshold {
   constructor(props: {
     /** The performance category name. */
     PerformanceCategory: "EXCEEDS_EXPECTATIONS" | "NEEDS_IMPROVEMENT";
-    /** The maximum score percentage for this threshold. */
+    /** The maximum score percentage for the performance category. */
     MaxScorePercentage?: number;
-    /** The minimum score percentage for this threshold. */
+    /** The minimum score percentage for the performance category. */
     MinScorePercentage?: number;
   });
 }
@@ -68929,10 +69039,12 @@ export declare class EvaluationFormSection {
     Title: string;
     /** The instructions of the section. */
     Instructions?: string;
+    /** The flag to exclude the section from scoring. */
     IsExcludedFromScoring?: boolean;
     /** The items of the section.
  *Minimum*: 1 */
     Items?: EvaluationForm_EvaluationFormItem[];
+    /** The score thresholds for performance categories. */
     ScoreThresholds?: EvaluationForm_EvaluationFormScoreThreshold[];
     /** The scoring weight of the section.
  *Minimum*: 0 
@@ -100910,9 +101022,7 @@ export declare class QueryStringObject {
 
 export declare class Queue_Tag {
   constructor(props: {
-    /** The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. */
     Key: string;
-    /** The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. */
     Value: string;
   });
 }
@@ -110705,6 +110815,40 @@ export declare class SecurityHubAutomationRule_WorkflowUpdate {
   });
 }
 
+export declare class SecurityHubConnector_AzureProviderConfiguration {
+  constructor(props: {
+    /** The ARN of the AWS Config connector used for the Azure integration */
+    AWSConfigConnectorArn: string;
+    /** The list of Azure regions to include in the connector scope */
+    AzureRegions: string[];
+    ScopeConfiguration: SecurityHubConnector_AzureScopeConfiguration;
+  });
+}
+
+export declare class SecurityHubConnector_AzureScopeConfiguration {
+  constructor(props: {
+    /** The scope type for the Azure connector */
+    ScopeType: "SUBSCRIPTION" | "TENANT";
+    /** The list of scope values for the Azure connector */
+    ScopeValues?: string[];
+  });
+}
+
+export declare class SecurityHubConnector_HealthIssue {
+  constructor(props: {
+    /** The code identifying the type of health issue */
+    Code: string;
+    /** The message describing the health issue */
+    Message: string;
+  });
+}
+
+export declare class SecurityHubConnector_Provider {
+  constructor(props: {
+    Azure: SecurityHubConnector_AzureProviderConfiguration;
+  });
+}
+
 export declare class SecurityHubPolicy {
   constructor(props: {
     /** A list that defines which security standards are enabled in the configuration policy. */
@@ -119064,6 +119208,13 @@ export declare class TransitGatewayPeeringAttachment_Tag {
   });
 }
 
+export declare class TransitGatewayPolicyTable_Tag {
+  constructor(props: {
+    Key: string;
+    Value: string;
+  });
+}
+
 export declare class TransitGatewayRouteTable_Tag {
   constructor(props: {
     /** The key of the associated tag key-value pair */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intentius/chant-lexicon-aws",
-  "version": "0.15.3",
+  "version": "0.17.0",
   "description": "AWS CloudFormation lexicon for chant — declarative IaC in TypeScript",
   "license": "Apache-2.0",
   "homepage": "https://intentius.io/chant",
@@ -80,6 +80,6 @@
     "typescript": "^5.9.3"
   },
   "peerDependencies": {
-    "@intentius/chant": "^0.15.3"
+    "@intentius/chant": "^0.17.0"
   }
 }