@intentius/chant-lexicon-aws 0.18.22 → 0.18.24

package/dist/index.d.ts

@@ -1,6 +1,8 @@
 export { Parameter } from "./parameter.js";
 export { defaultTags, isDefaultTags, DEFAULT_TAGS_MARKER } from "./default-tags.js";
 export type { DefaultTags, TagEntry } from "./default-tags.js";
+export { templateTransform, isTemplateTransform, TEMPLATE_TRANSFORM_MARKER } from "./template-transform.js";
+export type { TemplateTransform } from "./template-transform.js";
 export { awsSerializer } from "./serializer.js";
 export { nestedStack, isNestedStackInstance, NestedStackOutputRef, isNestedStackOutputRef, NESTED_STACK_MARKER } from "./nested-stack.js";
 export type { NestedStackOptions, NestedStackInstance } from "./nested-stack.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAGxC,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACjF,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAG5D,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAG7C,OAAO,EAAE,WAAW,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACvI,YAAY,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAG9E,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtF,YAAY,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAC3E,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AAChG,YAAY,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAC1E,YAAY,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAGrE,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAGrC,OAAO,EACL,GAAG,EACH,GAAG,EACH,MAAM,EACN,EAAE,EACF,IAAI,EACJ,MAAM,EACN,KAAK,EACL,MAAM,EACN,MAAM,EACN,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,WAAW,EACX,aAAa,EACb,eAAe,EACf,cAAc,EACd,eAAe,EACf,eAAe,GAChB,MAAM,cAAc,CAAC;AAGtB,OAAO,EACL,GAAG,EACH,SAAS,EACT,MAAM,EACN,SAAS,EACT,OAAO,EACP,SAAS,EACT,OAAO,EACP,gBAAgB,EAChB,SAAS,GACV,MAAM,UAAU,CAAC;AAIlB,cAAc,mBAAmB,CAAC;AAGlC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChF,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC5E,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,cAAc,EAAE,eAAe,EAAE,kBAAkB,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAG5J,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,eAAe,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAGrJ,OAAO,EACL,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAClE,SAAS,EACT,eAAe,EAAE,eAAe,EAChC,SAAS,EAAE,iBAAiB,EAAE,cAAc,EAAE,QAAQ,EAAE,SAAS,EACjE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,WAAW,EAAE,WAAW,EAC3E,kBAAkB,EAClB,eAAe,EAAE,UAAU,EAC3B,cAAc,GACf,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,mBAAmB,EAAE,cAAc,EAAE,oBAAoB,EACzD,cAAc,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,aAAa,EAAE,cAAc,EAC1F,eAAe,EAAE,eAAe,EAAE,cAAc,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,gBAAgB,EACzG,uBAAuB,EACvB,oBAAoB,EAAE,eAAe,EACrC,mBAAmB,EAAE,oBAAoB,GAC1C,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAKvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAGxC,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACjF,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AACzG,YAAY,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAG9D,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAG7C,OAAO,EAAE,WAAW,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACvI,YAAY,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAG9E,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtF,YAAY,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAC3E,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AAChG,YAAY,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAC1E,YAAY,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAGrE,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAGrC,OAAO,EACL,GAAG,EACH,GAAG,EACH,MAAM,EACN,EAAE,EACF,IAAI,EACJ,MAAM,EACN,KAAK,EACL,MAAM,EACN,MAAM,EACN,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,WAAW,EACX,aAAa,EACb,eAAe,EACf,cAAc,EACd,eAAe,EACf,eAAe,GAChB,MAAM,cAAc,CAAC;AAGtB,OAAO,EACL,GAAG,EACH,SAAS,EACT,MAAM,EACN,SAAS,EACT,OAAO,EACP,SAAS,EACT,OAAO,EACP,gBAAgB,EAChB,SAAS,GACV,MAAM,UAAU,CAAC;AAIlB,cAAc,mBAAmB,CAAC;AAGlC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChF,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC5E,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,cAAc,EAAE,eAAe,EAAE,kBAAkB,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAG5J,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,eAAe,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAGrJ,OAAO,EACL,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAClE,SAAS,EACT,eAAe,EAAE,eAAe,EAChC,SAAS,EAAE,iBAAiB,EAAE,cAAc,EAAE,QAAQ,EAAE,SAAS,EACjE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,WAAW,EAAE,WAAW,EAC3E,kBAAkB,EAClB,eAAe,EAAE,UAAU,EAC3B,cAAc,GACf,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,mBAAmB,EAAE,cAAc,EAAE,oBAAoB,EACzD,cAAc,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,aAAa,EAAE,cAAc,EAC1F,eAAe,EAAE,eAAe,EAAE,cAAc,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,gBAAgB,EACzG,uBAAuB,EACvB,oBAAoB,EAAE,eAAe,EACrC,mBAAmB,EAAE,oBAAoB,GAC1C,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAKvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC"}

package/dist/integrity.json

@@ -1,9 +1,9 @@
 {
   "algorithm": "sha256",
   "artifacts": {
-    "manifest.json": "6e36453d75c6d5512632c61863277df42a04bed6b64728e14678c46307c95eb5",
-    "meta.json": "f6512d8a5b7e2b4910a0b86b917753deff90d860a83e246e80670b783ad8b258",
-    "types/index.d.ts": "7ebef62aaa1081640af07620ddfdc0e95d2d01198d4a76cdbb5668123c995f8b",
+    "manifest.json": "52ae6e9623bc2eb09530f0d3a0cb05da75fb609e718222c532d2fa3883801475",
+    "meta.json": "cfe8a6d95016522d834ea5c50a48f2adbdb95996267985a69a95faeba68f32fa",
+    "types/index.d.ts": "f0255702fde8c1d1a369d4d1d2e164829fcd7155f3d111164414f715df9d6f3e",
     "rules/hardcoded-region.ts": "5a0eaf7ab391231fe6cd51426ece29539cb4b36f31c8dd060956638fed55722a",
     "rules/iam-wildcard.ts": "135d7217d278fef50939e605c5da32603ba35674b8c4b5c4d66a06c77903e945",
     "rules/s3-encryption.ts": "c4f9f8aa8dc382ed98c7b04e820a600590cc75335a8db2e087cbfbfe4003d09e",
@@ -58,5 +58,5 @@
     "skills/chant-aws.md": "4d65eb160e001f2af42eb7c622a5b498c2fd1f5afbd6c8155615c010fb265c63",
     "skills/chant-aws-eks.md": "8789255709ff004ad0a875fd5999edcdc66fc6e33d710db058d9f42703bcfdfe"
   },
-  "composite": "86b2c119a05f52fd1f9e695836aeb43d3897894ffe8c520541783f10cbf9c279"
+  "composite": "5b37014e10761043f71edeeb8bac9371b76b1eadb746a21f2d2375e861a26bfa"
 }

package/dist/manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "aws",
-  "version": "0.18.22",
+  "version": "0.18.24",
   "chantVersion": ">=0.1.0",
   "namespace": "AWS",
   "intrinsics": [

package/dist/meta.json

@@ -5057,11 +5057,6 @@
     "kind": "property",
     "lexicon": "aws"
   },
-  "AppConfiguration": {
-    "resourceType": "AWS::EMR::InstanceGroupConfig.AppConfiguration",
-    "kind": "property",
-    "lexicon": "aws"
-  },
   "AppCookieStickinessPolicy": {
     "resourceType": "AWS::ElasticLoadBalancing::LoadBalancer.AppCookieStickinessPolicy",
     "kind": "property",
@@ -23164,15 +23159,24 @@
     "kind": "resource",
     "lexicon": "aws",
     "attrs": {
-      "Id": "Id"
+      "CertificateArn": "CertificateArn"
+    },
+    "propertyConstraints": {
+      "CertificateArn": {
+        "pattern": "arn:(aws|aws-cn|aws-us-gov):dms:[\\w-]+:[0-9]+:cert:[A-Z0-9]+"
+      }
     },
     "createOnly": [
       "CertificateIdentifier",
       "CertificatePem",
       "CertificateWallet"
     ],
+    "writeOnly": [
+      "CertificatePem",
+      "CertificateWallet"
+    ],
     "primaryIdentifier": [
-      "Id"
+      "CertificateArn"
     ]
   },
   "DMSEndpoint": {
@@ -37832,6 +37836,61 @@
     "kind": "property",
     "lexicon": "aws"
   },
+  "ExperimentTrialComponent": {
+    "resourceType": "AWS::SageMaker::ExperimentTrialComponent",
+    "kind": "resource",
+    "lexicon": "aws",
+    "attrs": {
+      "Arn": "Arn",
+      "CreationTime": "CreationTime",
+      "LastModifiedTime": "LastModifiedTime",
+      "LineageGroupArn": "LineageGroupArn"
+    },
+    "propertyConstraints": {
+      "TrialComponentName": {
+        "pattern": "^[a-zA-Z0-9](-*[a-zA-Z0-9]){0,119}$",
+        "minLength": 1,
+        "maxLength": 120
+      },
+      "Arn": {
+        "pattern": "^arn:aws[a-z\\-]*:sagemaker:[a-z0-9\\-]*:[0-9]{12}:experiment-trial-component/",
+        "maxLength": 256
+      },
+      "DisplayName": {
+        "pattern": "^[a-zA-Z0-9](-*[a-zA-Z0-9]){0,119}$",
+        "minLength": 1,
+        "maxLength": 120
+      },
+      "StartTime": {
+        "format": "date-time"
+      },
+      "EndTime": {
+        "format": "date-time"
+      },
+      "CreationTime": {
+        "format": "date-time"
+      },
+      "LastModifiedTime": {
+        "format": "date-time"
+      },
+      "LineageGroupArn": {
+        "pattern": "^arn:aws[a-z\\-]*:sagemaker:[a-z0-9\\-]*:[0-9]{12}:lineage-group/",
+        "maxLength": 256
+      }
+    },
+    "createOnly": [
+      "TrialComponentName",
+      "MetadataProperties"
+    ],
+    "primaryIdentifier": [
+      "Arn"
+    ],
+    "tagging": {
+      "taggable": true,
+      "tagOnCreate": true,
+      "tagUpdatable": true
+    }
+  },
   "ExpirationDataRule": {
     "resourceType": "AWS::S3Files::FileSystem.ExpirationDataRule",
     "kind": "property",
@@ -48996,7 +49055,7 @@
     "kind": "resource",
     "lexicon": "aws",
     "attrs": {
-      "InstanceGroupId": "InstanceGroupId"
+      "Id": "Id"
     },
     "createOnly": [
       "InstanceRole",
@@ -49009,21 +49068,17 @@
       "Market",
       "BidPrice"
     ],
-    "writeOnly": [
-      "EbsConfiguration/EbsBlockDeviceConfigs/*/VolumesPerInstance"
-    ],
     "primaryIdentifier": [
-      "InstanceGroupId",
-      "JobFlowId"
+      "Id"
     ]
   },
-  "InstanceGroupConfig_AppConfiguration": {
-    "resourceType": "AWS::EMR::InstanceGroupConfig.AppConfiguration",
+  "InstanceGroupConfig_AutoScalingPolicy": {
+    "resourceType": "AWS::EMR::InstanceGroupConfig.AutoScalingPolicy",
     "kind": "property",
     "lexicon": "aws"
   },
-  "InstanceGroupConfig_AutoScalingPolicy": {
-    "resourceType": "AWS::EMR::InstanceGroupConfig.AutoScalingPolicy",
+  "InstanceGroupConfig_Configuration": {
+    "resourceType": "AWS::EMR::InstanceGroupConfig.Configuration",
     "kind": "property",
     "lexicon": "aws"
   },
@@ -52956,6 +53011,11 @@
     "kind": "property",
     "lexicon": "aws"
   },
+  "KmsConfiguration": {
+    "resourceType": "AWS::BedrockAgentCore::TokenVault.KmsConfiguration",
+    "kind": "property",
+    "lexicon": "aws"
+  },
   "KmsEncryptionConfig": {
     "resourceType": "AWS::HealthLake::FHIRDatastore.KmsEncryptionConfig",
     "kind": "property",
@@ -53055,6 +53115,31 @@
     "kind": "property",
     "lexicon": "aws"
   },
+  "KnowledgeBasePolicy": {
+    "resourceType": "AWS::Bedrock::KnowledgeBasePolicy",
+    "kind": "resource",
+    "lexicon": "aws",
+    "attrs": {
+      "RevisionId": "RevisionId"
+    },
+    "propertyConstraints": {
+      "KnowledgeBaseId": {
+        "pattern": "^[0-9a-zA-Z]+$",
+        "minLength": 1,
+        "maxLength": 10
+      },
+      "RevisionId": {
+        "minLength": 1,
+        "maxLength": 255
+      }
+    },
+    "createOnly": [
+      "KnowledgeBaseId"
+    ],
+    "primaryIdentifier": [
+      "KnowledgeBaseId"
+    ]
+  },
   "KubernetesNetworkConfig": {
     "resourceType": "AWS::EKS::Cluster.KubernetesNetworkConfig",
     "kind": "property",
@@ -62374,6 +62459,11 @@
     "kind": "property",
     "lexicon": "aws"
   },
+  "ModelDashboardIndicatorAction": {
+    "resourceType": "AWS::SageMaker::MonitoringScheduleAlert.ModelDashboardIndicatorAction",
+    "kind": "property",
+    "lexicon": "aws"
+  },
   "ModelDataQuality": {
     "resourceType": "AWS::SageMaker::ModelPackage.ModelDataQuality",
     "kind": "property",
@@ -63225,6 +63315,11 @@
     "kind": "property",
     "lexicon": "aws"
   },
+  "MonitoringAlertActions": {
+    "resourceType": "AWS::SageMaker::MonitoringScheduleAlert.MonitoringAlertActions",
+    "kind": "property",
+    "lexicon": "aws"
+  },
   "MonitoringAppSpecification": {
     "resourceType": "AWS::SageMaker::MonitoringSchedule.MonitoringAppSpecification",
     "kind": "property",
@@ -63274,6 +63369,72 @@
       "MonitoringScheduleArn"
     ]
   },
+  "MonitoringScheduleAlert": {
+    "resourceType": "AWS::SageMaker::MonitoringScheduleAlert",
+    "kind": "resource",
+    "lexicon": "aws",
+    "attrs": {
+      "Arn": "Arn",
+      "AlertStatus": "AlertStatus",
+      "CreationTime": "CreationTime",
+      "LastModifiedTime": "LastModifiedTime",
+      "Actions": "Actions"
+    },
+    "propertyConstraints": {
+      "Arn": {
+        "maxLength": 256
+      },
+      "MonitoringScheduleName": {
+        "pattern": "^[a-zA-Z0-9](-*[a-zA-Z0-9]){0,62}$",
+        "minLength": 1,
+        "maxLength": 63
+      },
+      "MonitoringAlertName": {
+        "pattern": "^[a-zA-Z0-9](-*[a-zA-Z0-9]){0,62}$",
+        "minLength": 1,
+        "maxLength": 63
+      },
+      "DatapointsToAlert": {
+        "minimum": 1,
+        "maximum": 100
+      },
+      "EvaluationPeriod": {
+        "minimum": 1,
+        "maximum": 100
+      },
+      "AlertStatus": {
+        "enum": [
+          "InAlert",
+          "OK"
+        ]
+      },
+      "CreationTime": {
+        "format": "date-time"
+      },
+      "LastModifiedTime": {
+        "format": "date-time"
+      }
+    },
+    "createOnly": [
+      "DatapointsToAlert",
+      "EvaluationPeriod",
+      "MonitoringAlertName",
+      "MonitoringScheduleName"
+    ],
+    "primaryIdentifier": [
+      "Arn"
+    ]
+  },
+  "MonitoringScheduleAlert_ModelDashboardIndicatorAction": {
+    "resourceType": "AWS::SageMaker::MonitoringScheduleAlert.ModelDashboardIndicatorAction",
+    "kind": "property",
+    "lexicon": "aws"
+  },
+  "MonitoringScheduleAlert_MonitoringAlertActions": {
+    "resourceType": "AWS::SageMaker::MonitoringScheduleAlert.MonitoringAlertActions",
+    "kind": "property",
+    "lexicon": "aws"
+  },
   "MonitoringScheduleConfig": {
     "resourceType": "AWS::SageMaker::MonitoringSchedule.MonitoringScheduleConfig",
     "kind": "property",
@@ -96701,6 +96862,38 @@
     "kind": "property",
     "lexicon": "aws"
   },
+  "TokenVault": {
+    "resourceType": "AWS::BedrockAgentCore::TokenVault",
+    "kind": "resource",
+    "lexicon": "aws",
+    "attrs": {
+      "Arn": "Arn",
+      "TokenVaultId": "TokenVaultId",
+      "KmsConfiguration": "KmsConfiguration",
+      "LastModifiedDate": "LastModifiedDate"
+    },
+    "propertyConstraints": {
+      "TokenVaultId": {
+        "pattern": "^[a-zA-Z0-9\\-_]+$",
+        "minLength": 1,
+        "maxLength": 64
+      },
+      "Arn": {
+        "pattern": "^arn:[a-z0-9-\\.]{1,63}:[a-z0-9-\\.]{0,63}:[a-z0-9-\\.]{0,63}:[a-z0-9-\\.]{0,63}:[^/].{0,1023}$"
+      },
+      "LastModifiedDate": {
+        "format": "date-time"
+      }
+    },
+    "primaryIdentifier": [
+      "Arn"
+    ]
+  },
+  "TokenVault_KmsConfiguration": {
+    "resourceType": "AWS::BedrockAgentCore::TokenVault.KmsConfiguration",
+    "kind": "property",
+    "lexicon": "aws"
+  },
   "ToolbarConfiguration": {
     "resourceType": "AWS::WorkSpacesWeb::UserSettings.ToolbarConfiguration",
     "kind": "property",
@@ -98267,6 +98460,22 @@
       "tagUpdatable": true
     }
   },
+  "TransitGatewayPolicyTableAssociation": {
+    "resourceType": "AWS::EC2::TransitGatewayPolicyTableAssociation",
+    "kind": "resource",
+    "lexicon": "aws",
+    "attrs": {
+      "State": "State"
+    },
+    "createOnly": [
+      "TransitGatewayAttachmentId",
+      "TransitGatewayPolicyTableId"
+    ],
+    "primaryIdentifier": [
+      "TransitGatewayPolicyTableId",
+      "TransitGatewayAttachmentId"
+    ]
+  },
   "TransitGatewayPolicyTable_Tag": {
     "resourceType": "AWS::EC2::TransitGatewayPolicyTable.Tag",
     "kind": "property",
@@ -102202,15 +102411,44 @@
       "DefaultNetworkAcl": "DefaultNetworkAcl",
       "DefaultSecurityGroup": "DefaultSecurityGroup",
       "Ipv6CidrBlocks": "Ipv6CidrBlocks",
-      "VpcId": "VpcId"
+      "VpcId": "VpcId",
+      "VpcEncryptionControl_VpcId": "VpcEncryptionControl.VpcId",
+      "VpcEncryptionControl_VpcEncryptionControlId": "VpcEncryptionControl.VpcEncryptionControlId",
+      "VpcEncryptionControl_State": "VpcEncryptionControl.State",
+      "VpcEncryptionControl_StateMessage": "VpcEncryptionControl.StateMessage",
+      "VpcEncryptionControl_ResourceExclusions": "VpcEncryptionControl.ResourceExclusions",
+      "VpcEncryptionControl_ResourceExclusions_InternetGateway": "VpcEncryptionControl.ResourceExclusions.InternetGateway",
+      "VpcEncryptionControl_ResourceExclusions_InternetGateway_State": "VpcEncryptionControl.ResourceExclusions.InternetGateway.State",
+      "VpcEncryptionControl_ResourceExclusions_InternetGateway_StateMessage": "VpcEncryptionControl.ResourceExclusions.InternetGateway.StateMessage",
+      "VpcEncryptionControl_ResourceExclusions_EgressOnlyInternetGateway": "VpcEncryptionControl.ResourceExclusions.EgressOnlyInternetGateway",
+      "VpcEncryptionControl_ResourceExclusions_EgressOnlyInternetGateway_State": "VpcEncryptionControl.ResourceExclusions.EgressOnlyInternetGateway.State",
+      "VpcEncryptionControl_ResourceExclusions_EgressOnlyInternetGateway_StateMessage": "VpcEncryptionControl.ResourceExclusions.EgressOnlyInternetGateway.StateMessage",
+      "VpcEncryptionControl_ResourceExclusions_NatGateway": "VpcEncryptionControl.ResourceExclusions.NatGateway",
+      "VpcEncryptionControl_ResourceExclusions_NatGateway_State": "VpcEncryptionControl.ResourceExclusions.NatGateway.State",
+      "VpcEncryptionControl_ResourceExclusions_NatGateway_StateMessage": "VpcEncryptionControl.ResourceExclusions.NatGateway.StateMessage",
+      "VpcEncryptionControl_ResourceExclusions_VirtualPrivateGateway": "VpcEncryptionControl.ResourceExclusions.VirtualPrivateGateway",
+      "VpcEncryptionControl_ResourceExclusions_VirtualPrivateGateway_State": "VpcEncryptionControl.ResourceExclusions.VirtualPrivateGateway.State",
+      "VpcEncryptionControl_ResourceExclusions_VirtualPrivateGateway_StateMessage": "VpcEncryptionControl.ResourceExclusions.VirtualPrivateGateway.StateMessage",
+      "VpcEncryptionControl_ResourceExclusions_VpcPeering": "VpcEncryptionControl.ResourceExclusions.VpcPeering",
+      "VpcEncryptionControl_ResourceExclusions_VpcPeering_State": "VpcEncryptionControl.ResourceExclusions.VpcPeering.State",
+      "VpcEncryptionControl_ResourceExclusions_VpcPeering_StateMessage": "VpcEncryptionControl.ResourceExclusions.VpcPeering.StateMessage",
+      "VpcEncryptionControl_ResourceExclusions_Lambda": "VpcEncryptionControl.ResourceExclusions.Lambda",
+      "VpcEncryptionControl_ResourceExclusions_Lambda_State": "VpcEncryptionControl.ResourceExclusions.Lambda.State",
+      "VpcEncryptionControl_ResourceExclusions_Lambda_StateMessage": "VpcEncryptionControl.ResourceExclusions.Lambda.StateMessage",
+      "VpcEncryptionControl_ResourceExclusions_VpcLattice": "VpcEncryptionControl.ResourceExclusions.VpcLattice",
+      "VpcEncryptionControl_ResourceExclusions_VpcLattice_State": "VpcEncryptionControl.ResourceExclusions.VpcLattice.State",
+      "VpcEncryptionControl_ResourceExclusions_VpcLattice_StateMessage": "VpcEncryptionControl.ResourceExclusions.VpcLattice.StateMessage",
+      "VpcEncryptionControl_ResourceExclusions_ElasticFileSystem": "VpcEncryptionControl.ResourceExclusions.ElasticFileSystem",
+      "VpcEncryptionControl_ResourceExclusions_ElasticFileSystem_State": "VpcEncryptionControl.ResourceExclusions.ElasticFileSystem.State",
+      "VpcEncryptionControl_ResourceExclusions_ElasticFileSystem_StateMessage": "VpcEncryptionControl.ResourceExclusions.ElasticFileSystem.StateMessage"
     },
     "propertyConstraints": {
-      "VpcId": {
-        "format": "AWS::EC2::VPC.Id"
-      },
       "CidrBlock": {
         "format": "ipv4-network"
       },
+      "VpcId": {
+        "format": "AWS::EC2::VPC.Id"
+      },
       "DefaultSecurityGroup": {
         "format": "AWS::EC2::SecurityGroup.Id"
       }
@@ -102218,11 +102456,20 @@
     "createOnly": [
       "CidrBlock",
       "Ipv4IpamPoolId",
-      "Ipv4NetmaskLength"
+      "Ipv4NetmaskLength",
+      "VpcEncryptionControl"
     ],
     "writeOnly": [
       "Ipv4IpamPoolId",
-      "Ipv4NetmaskLength"
+      "Ipv4NetmaskLength",
+      "VpcEncryptionControl/InternetGatewayExclusion",
+      "VpcEncryptionControl/EgressOnlyInternetGatewayExclusion",
+      "VpcEncryptionControl/NatGatewayExclusion",
+      "VpcEncryptionControl/VirtualPrivateGatewayExclusion",
+      "VpcEncryptionControl/VpcPeeringExclusion",
+      "VpcEncryptionControl/LambdaExclusion",
+      "VpcEncryptionControl/VpcLatticeExclusion",
+      "VpcEncryptionControl/ElasticFileSystemExclusion"
     ],
     "primaryIdentifier": [
       "VpcId"
@@ -102389,8 +102636,13 @@
     "kind": "property",
     "lexicon": "aws"
   },
-  "VpcEncryptionControlExclusion": {
-    "resourceType": "AWS::EC2::VPCEncryptionControl.VpcEncryptionControlExclusion",
+  "VpcEncryptionControl": {
+    "resourceType": "AWS::EC2::VPC.VpcEncryptionControl",
+    "kind": "property",
+    "lexicon": "aws"
+  },
+  "VpcEncryptionControlExclusions": {
+    "resourceType": "AWS::EC2::VPC.VpcEncryptionControlExclusions",
     "kind": "property",
     "lexicon": "aws"
   },
@@ -102995,6 +103247,21 @@
     "kind": "property",
     "lexicon": "aws"
   },
+  "Vpc_VpcEncryptionControl": {
+    "resourceType": "AWS::EC2::VPC.VpcEncryptionControl",
+    "kind": "property",
+    "lexicon": "aws"
+  },
+  "Vpc_VpcEncryptionControlExclusion": {
+    "resourceType": "AWS::EC2::VPC.VpcEncryptionControlExclusion",
+    "kind": "property",
+    "lexicon": "aws"
+  },
+  "Vpc_VpcEncryptionControlExclusions": {
+    "resourceType": "AWS::EC2::VPC.VpcEncryptionControlExclusions",
+    "kind": "property",
+    "lexicon": "aws"
+  },
   "VpnTunnelLogOptionsSpecification": {
     "resourceType": "AWS::EC2::VPNConnection.VpnTunnelLogOptionsSpecification",
     "kind": "property",

package/dist/serializer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"serializer.d.ts","sourceRoot":"","sources":["../src/serializer.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAsC,MAAM,6BAA6B,CAAC;AA2WlG;;GAEG;AACH,eAAO,MAAM,aAAa,EAAE,UAoE3B,CAAC"}
+{"version":3,"file":"serializer.d.ts","sourceRoot":"","sources":["../src/serializer.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAsC,MAAM,6BAA6B,CAAC;AAiYlG;;GAEG;AACH,eAAO,MAAM,aAAa,EAAE,UAoE3B,CAAC"}

package/dist/template-transform.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Template Transform — declares a top-level CloudFormation `Transform` macro
+ * for the synthesized template (e.g. `AWS::SecretsManager-2020-07-23` for a
+ * Secrets Manager `HostedRotationLambda`, or `AWS::LanguageExtensions`).
+ *
+ * CloudFormation's `Transform` is a template-level directive, not a resource
+ * property, so it can't be expressed as a normal Declarable's attributes. A
+ * project (or composite) exports a `templateTransform(...)` declaration and the
+ * serializer lifts it to the template's top-level `Transform` at synthesis time.
+ * Multiple declarations are merged and de-duplicated into a `Transform` list.
+ *
+ * Modeled exactly like `./default-tags.ts` — a marker-tagged Declarable the
+ * serializer detects and consumes rather than emitting as a resource.
+ */
+import { DECLARABLE_MARKER, type Declarable } from "@intentius/chant/declarable";
+/** Marker symbol for template-transform identification. */
+export declare const TEMPLATE_TRANSFORM_MARKER: unique symbol;
+/**
+ * A template-transform declaration — wraps a macro name into a Declarable the
+ * serializer lifts to the template's top-level `Transform`.
+ */
+export interface TemplateTransform extends Declarable {
+    readonly [TEMPLATE_TRANSFORM_MARKER]: true;
+    readonly [DECLARABLE_MARKER]: true;
+    readonly lexicon: "aws";
+    readonly entityType: "chant:aws:templateTransform";
+    readonly transform: string;
+}
+/** Type guard for TemplateTransform. */
+export declare function isTemplateTransform(value: unknown): value is TemplateTransform;
+/**
+ * Declare a top-level CloudFormation `Transform` macro for the synthesized
+ * template. The serializer collects every `templateTransform(...)` in the
+ * project and emits their de-duplicated union as the template's `Transform`
+ * (a single string when there is one, a list when there are several).
+ *
+ * @param transform - The macro name, e.g. `"AWS::SecretsManager-2020-07-23"`.
+ * @returns A TemplateTransform Declarable.
+ *
+ * @example
+ * ```ts
+ * import { templateTransform } from "@intentius/chant-lexicon-aws";
+ *
+ * // Required whenever a resource uses SecretsManager HostedRotationLambda.
+ * export const rotationTransform = templateTransform("AWS::SecretsManager-2020-07-23");
+ * ```
+ */
+export declare function templateTransform(transform: string): TemplateTransform;
+//# sourceMappingURL=template-transform.d.ts.map

package/dist/template-transform.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"template-transform.d.ts","sourceRoot":"","sources":["../src/template-transform.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,iBAAiB,EAAE,KAAK,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAEjF,2DAA2D;AAC3D,eAAO,MAAM,yBAAyB,eAA4C,CAAC;AAEnF;;;GAGG;AACH,MAAM,WAAW,iBAAkB,SAAQ,UAAU;IACnD,QAAQ,CAAC,CAAC,yBAAyB,CAAC,EAAE,IAAI,CAAC;IAC3C,QAAQ,CAAC,CAAC,iBAAiB,CAAC,EAAE,IAAI,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,6BAA6B,CAAC;IACnD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,wCAAwC;AACxC,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,iBAAiB,CAO9E;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,iBAAiB,CAQtE"}