@intentius/chant-lexicon-aws 0.18.23 → 0.18.24

package/dist/types/index.d.ts

@@ -11190,12 +11190,16 @@ export declare class DLMLifecyclePolicy {
 
 export declare class DMSCertificate {
   constructor(props: {
+    /** The certificate Arn */
+    CertificateArn?: string;
+    /** The certificate Identifier */
     CertificateIdentifier?: string;
+    /** The certificate Pem */
     CertificatePem?: string;
+    /** The certificate Wallet */
     CertificateWallet?: string;
-    Id?: string;
   }, attributes?: CFResourceAttributes);
-  readonly Id: string;
+  readonly CertificateArn: string;
 }
 
 export declare class DMSEndpoint {
@@ -17690,14 +17694,14 @@ export declare class InstanceGroupConfig {
     JobFlowId: string;
     AutoScalingPolicy?: InstanceGroupConfig_AutoScalingPolicy;
     BidPrice?: string;
-    Configurations?: InstanceGroupConfig_AppConfiguration[];
+    Configurations?: InstanceGroupConfig_Configuration[];
     CustomAmiId?: string;
     EbsConfiguration?: InstanceGroupConfig_EbsConfiguration;
-    InstanceGroupId?: string;
+    Id?: string;
     Market?: string;
     Name?: string;
   }, attributes?: CFResourceAttributes);
-  readonly InstanceGroupId: string;
+  readonly Id: string;
 }
 
 export declare class InstanceProfile {
@@ -19306,6 +19310,18 @@ export declare class KmsKey {
   readonly KeyId: string;
 }
 
+export declare class KnowledgeBasePolicy {
+  constructor(props: {
+    /** The unique identifier of the knowledge base */
+    KnowledgeBaseId: string;
+    /** The IAM policy document defining access permissions for the knowledge base */
+    PolicyDocument: PolicyDocument;
+    /** The revision identifier for the policy, used for optimistic concurrency control */
+    RevisionId?: string;
+  }, attributes?: CFResourceAttributes);
+  readonly RevisionId: string;
+}
+
 export declare class Label {
   constructor(props: {
     /** The name of the label. */
@@ -34835,6 +34851,23 @@ export declare class TLSInspectionConfiguration {
   readonly TLSInspectionConfigurationId: string;
 }
 
+export declare class TokenVault {
+  constructor(props: {
+    /** The ARN of the token vault. */
+    Arn?: string;
+    /** The KMS configuration for the token vault. */
+    KmsConfiguration?: TokenVault_KmsConfiguration;
+    /** The timestamp when the token vault was last modified. */
+    LastModifiedDate?: string;
+    /** The unique identifier of the token vault. */
+    TokenVaultId?: string;
+  }, attributes?: CFResourceAttributes);
+  readonly Arn: string;
+  readonly KmsConfiguration: TokenVault_KmsConfiguration;
+  readonly LastModifiedDate: string;
+  readonly TokenVaultId: string;
+}
+
 export declare class Topic {
   constructor(props: {
     /** The archive policy determines the number of days SNS retains messages. You can set a retention period from 1 to 365 days. */
@@ -35605,6 +35638,18 @@ export declare class TransitGatewayPolicyTable {
   readonly TransitGatewayPolicyTableId: string;
 }
 
+export declare class TransitGatewayPolicyTableAssociation {
+  constructor(props: {
+    /** The ID of transit gateway attachment. */
+    TransitGatewayAttachmentId: string;
+    /** The ID of transit gateway policy table. */
+    TransitGatewayPolicyTableId: string;
+    /** The state of the transit gateway policy table association. */
+    State?: string;
+  }, attributes?: CFResourceAttributes);
+  readonly State: string;
+}
+
 export declare class TransitGatewayRegistration {
   constructor(props: {
     /** The ID of the global network. */
@@ -36806,12 +36851,42 @@ export declare class Vpc {
     Ipv6CidrBlocks?: string[];
     /** The tags for the VPC. */
     Tags?: Vpc_Tag[];
+    VpcEncryptionControl?: Vpc_VpcEncryptionControl;
     VpcId?: string;
   }, attributes?: CFResourceAttributes);
   readonly CidrBlockAssociations: string[];
   readonly DefaultNetworkAcl: string;
   readonly DefaultSecurityGroup: string;
   readonly Ipv6CidrBlocks: string[];
+  readonly VpcEncryptionControl_ResourceExclusions: string;
+  readonly VpcEncryptionControl_ResourceExclusions_EgressOnlyInternetGateway: string;
+  readonly VpcEncryptionControl_ResourceExclusions_EgressOnlyInternetGateway_State: string;
+  readonly VpcEncryptionControl_ResourceExclusions_EgressOnlyInternetGateway_StateMessage: string;
+  readonly VpcEncryptionControl_ResourceExclusions_ElasticFileSystem: string;
+  readonly VpcEncryptionControl_ResourceExclusions_ElasticFileSystem_State: string;
+  readonly VpcEncryptionControl_ResourceExclusions_ElasticFileSystem_StateMessage: string;
+  readonly VpcEncryptionControl_ResourceExclusions_InternetGateway: string;
+  readonly VpcEncryptionControl_ResourceExclusions_InternetGateway_State: string;
+  readonly VpcEncryptionControl_ResourceExclusions_InternetGateway_StateMessage: string;
+  readonly VpcEncryptionControl_ResourceExclusions_Lambda: string;
+  readonly VpcEncryptionControl_ResourceExclusions_Lambda_State: string;
+  readonly VpcEncryptionControl_ResourceExclusions_Lambda_StateMessage: string;
+  readonly VpcEncryptionControl_ResourceExclusions_NatGateway: string;
+  readonly VpcEncryptionControl_ResourceExclusions_NatGateway_State: string;
+  readonly VpcEncryptionControl_ResourceExclusions_NatGateway_StateMessage: string;
+  readonly VpcEncryptionControl_ResourceExclusions_VirtualPrivateGateway: string;
+  readonly VpcEncryptionControl_ResourceExclusions_VirtualPrivateGateway_State: string;
+  readonly VpcEncryptionControl_ResourceExclusions_VirtualPrivateGateway_StateMessage: string;
+  readonly VpcEncryptionControl_ResourceExclusions_VpcLattice: string;
+  readonly VpcEncryptionControl_ResourceExclusions_VpcLattice_State: string;
+  readonly VpcEncryptionControl_ResourceExclusions_VpcLattice_StateMessage: string;
+  readonly VpcEncryptionControl_ResourceExclusions_VpcPeering: string;
+  readonly VpcEncryptionControl_ResourceExclusions_VpcPeering_State: string;
+  readonly VpcEncryptionControl_ResourceExclusions_VpcPeering_StateMessage: string;
+  readonly VpcEncryptionControl_State: string;
+  readonly VpcEncryptionControl_StateMessage: string;
+  readonly VpcEncryptionControl_VpcEncryptionControlId: string;
+  readonly VpcEncryptionControl_VpcId: string;
   readonly VpcId: string;
 }
 
@@ -41616,14 +41691,6 @@ export declare class AppConfigResourceObject {
   });
 }
 
-export declare class AppConfiguration {
-  constructor(props: {
-    Classification?: string;
-    ConfigurationProperties?: Record<string, unknown>;
-    Configurations?: InstanceGroupConfig_AppConfiguration[];
-  });
-}
-
 export declare class AppCookieStickinessPolicy {
   constructor(props: {
     /** The name of the application cookie used for stickiness. */
@@ -79199,26 +79266,24 @@ export declare class InstanceFleetConfig_SpotResizingSpecification {
   });
 }
 
-export declare class InstanceGroupConfig_AppConfiguration {
+export declare class InstanceGroupConfig_AutoScalingPolicy {
   constructor(props: {
-    Classification?: string;
-    ConfigurationProperties?: Record<string, unknown>;
-    Configurations?: InstanceGroupConfig_AppConfiguration[];
+    Constraints: InstanceGroupConfig_ScalingConstraints;
+    Rules: InstanceGroupConfig_ScalingRule[];
   });
 }
 
-export declare class InstanceGroupConfig_AutoScalingPolicy {
+export declare class InstanceGroupConfig_Configuration {
   constructor(props: {
-    Constraints: InstanceGroupConfig_ScalingConstraints;
-    Rules: InstanceGroupConfig_ScalingRule[];
+    Classification?: string;
+    ConfigurationProperties?: Record<string, unknown>;
+    Configurations?: InstanceGroupConfig_Configuration[];
   });
 }
 
 export declare class InstanceGroupConfig_EbsBlockDeviceConfig {
   constructor(props: {
     VolumeSpecification: InstanceGroupConfig_VolumeSpecification;
-    /** Use of this property can confuse CloudFormation drift detection. The EbsBlockDeviceConfigs read from the system may return a list with one entry per volume, replacing any entry specified in the template with a VolumesPerInstance greater than one by that many entries containing only the VolumeSpecification. Thus to avoid false drift detection, it is recommended to supply repeated entries in EbsBlockDeviceConfigs for any VolumeSpecification which is intended to be repeated and not to use this property.
- */
     VolumesPerInstance?: number;
   });
 }
@@ -83004,6 +83069,15 @@ export declare class KinesisVideoStreamConfig {
   });
 }
 
+export declare class KmsConfiguration {
+  constructor(props: {
+    /** The type of KMS key (CustomerManagedKey or ServiceManagedKey). */
+    KeyType: "CustomerManagedKey" | "ServiceManagedKey";
+    /** The Amazon Resource Name (ARN) of the KMS key. */
+    KmsKeyArn?: string;
+  });
+}
+
 export declare class KmsEncryptionConfig {
   constructor(props: {
     /** The type of customer-managed-key (CMK) used for encryption. The two types of supported CMKs are customer owned CMKs and AWS owned CMKs. */
@@ -85494,6 +85568,7 @@ export declare class ListenerRule_RuleCondition {
 
 export declare class ListenerRule_SourceIpConfig {
   constructor(props: {
+    IpAddressType?: string;
     /** The source IP addresses, in CIDR format. You can use both IPv4 and IPv6 addresses. Wildcards are not supported.
  If you specify multiple addresses, the condition is satisfied if the source IP address of the request matches one of the CIDR blocks. This condition is not satisfied by the addresses in the X-Forwarded-For header. */
     Values?: string[];
@@ -113484,6 +113559,7 @@ export declare class SourceDataSettings {
 
 export declare class SourceIpConfig {
   constructor(props: {
+    IpAddressType?: string;
     /** The source IP addresses, in CIDR format. You can use both IPv4 and IPv6 addresses. Wildcards are not supported.
  If you specify multiple addresses, the condition is satisfied if the source IP address of the request matches one of the CIDR blocks. This condition is not satisfied by the addresses in the X-Forwarded-For header. */
     Values?: string[];
@@ -118196,6 +118272,15 @@ export declare class TokenValidityUnits {
   });
 }
 
+export declare class TokenVault_KmsConfiguration {
+  constructor(props: {
+    /** The type of KMS key (CustomerManagedKey or ServiceManagedKey). */
+    KeyType: "CustomerManagedKey" | "ServiceManagedKey";
+    /** The Amazon Resource Name (ARN) of the KMS key. */
+    KmsKeyArn?: string;
+  });
+}
+
 export declare class ToolbarConfiguration {
   constructor(props: {
     HiddenToolbarItems?: UserSettings_ToolbarItem[];
@@ -121731,6 +121816,60 @@ export declare class Vpc_Tag {
   });
 }
 
+export declare class Vpc_VpcEncryptionControl {
+  constructor(props: {
+    /** The desired exclusion mode for Egress-Only Internet Gateways. */
+    EgressOnlyInternetGatewayExclusion?: "disable" | "enable";
+    /** The desired exclusion mode for Elastic File System. */
+    ElasticFileSystemExclusion?: "disable" | "enable";
+    /** The desired exclusion mode for Internet Gateways. */
+    InternetGatewayExclusion?: "disable" | "enable";
+    /** The desired exclusion mode for Lambda. */
+    LambdaExclusion?: "disable" | "enable";
+    /** The mode of the VPC encryption control. */
+    Mode?: "enforce" | "monitor";
+    /** The desired exclusion mode for NAT Gateways. */
+    NatGatewayExclusion?: "disable" | "enable";
+    ResourceExclusions?: Vpc_VpcEncryptionControlExclusions;
+    /** The state of the VPC encryption control. */
+    State?: string;
+    /** A message describing the state of the VPC encryption control. */
+    StateMessage?: string;
+    /** The desired exclusion mode for Virtual Private Gateways. */
+    VirtualPrivateGatewayExclusion?: "disable" | "enable";
+    /** The ID of the VPC encryption control. */
+    VpcEncryptionControlId?: string;
+    /** The ID of the VPC. */
+    VpcId?: string;
+    /** The desired exclusion mode for VPC Lattice. */
+    VpcLatticeExclusion?: "disable" | "enable";
+    /** The desired exclusion mode for VPC Peering. */
+    VpcPeeringExclusion?: "disable" | "enable";
+  });
+}
+
+export declare class Vpc_VpcEncryptionControlExclusion {
+  constructor(props: {
+    /** The exclusion state of the resource type. */
+    State?: string;
+    /** A message describing the exclusion state of the resource type. */
+    StateMessage?: string;
+  });
+}
+
+export declare class Vpc_VpcEncryptionControlExclusions {
+  constructor(props: {
+    EgressOnlyInternetGateway?: Vpc_VpcEncryptionControlExclusion;
+    ElasticFileSystem?: Vpc_VpcEncryptionControlExclusion;
+    InternetGateway?: Vpc_VpcEncryptionControlExclusion;
+    Lambda?: Vpc_VpcEncryptionControlExclusion;
+    NatGateway?: Vpc_VpcEncryptionControlExclusion;
+    VirtualPrivateGateway?: Vpc_VpcEncryptionControlExclusion;
+    VpcLattice?: Vpc_VpcEncryptionControlExclusion;
+    VpcPeering?: Vpc_VpcEncryptionControlExclusion;
+  });
+}
+
 export declare class VpcAttachment_ProposedNetworkFunctionGroupChange {
   constructor(props: {
     /** The rule number in the policy document that applies to this change. */
@@ -121859,6 +121998,38 @@ export declare class VpcEgressConfiguration {
   });
 }
 
+export declare class VpcEncryptionControl {
+  constructor(props: {
+    /** The desired exclusion mode for Egress-Only Internet Gateways. */
+    EgressOnlyInternetGatewayExclusion?: "disable" | "enable";
+    /** The desired exclusion mode for Elastic File System. */
+    ElasticFileSystemExclusion?: "disable" | "enable";
+    /** The desired exclusion mode for Internet Gateways. */
+    InternetGatewayExclusion?: "disable" | "enable";
+    /** The desired exclusion mode for Lambda. */
+    LambdaExclusion?: "disable" | "enable";
+    /** The mode of the VPC encryption control. */
+    Mode?: "enforce" | "monitor";
+    /** The desired exclusion mode for NAT Gateways. */
+    NatGatewayExclusion?: "disable" | "enable";
+    ResourceExclusions?: Vpc_VpcEncryptionControlExclusions;
+    /** The state of the VPC encryption control. */
+    State?: string;
+    /** A message describing the state of the VPC encryption control. */
+    StateMessage?: string;
+    /** The desired exclusion mode for Virtual Private Gateways. */
+    VirtualPrivateGatewayExclusion?: "disable" | "enable";
+    /** The ID of the VPC encryption control. */
+    VpcEncryptionControlId?: string;
+    /** The ID of the VPC. */
+    VpcId?: string;
+    /** The desired exclusion mode for VPC Lattice. */
+    VpcLatticeExclusion?: "disable" | "enable";
+    /** The desired exclusion mode for VPC Peering. */
+    VpcPeeringExclusion?: "disable" | "enable";
+  });
+}
+
 export declare class VPCEncryptionControl_ResourceExclusions {
   constructor(props: {
     EgressOnlyInternetGateway?: VPCEncryptionControl_VpcEncryptionControlExclusion;
@@ -121888,10 +122059,16 @@ export declare class VPCEncryptionControl_VpcEncryptionControlExclusion {
   });
 }
 
-export declare class VpcEncryptionControlExclusion {
+export declare class VpcEncryptionControlExclusions {
   constructor(props: {
-    State?: string;
-    StateMessage?: string;
+    EgressOnlyInternetGateway?: Vpc_VpcEncryptionControlExclusion;
+    ElasticFileSystem?: Vpc_VpcEncryptionControlExclusion;
+    InternetGateway?: Vpc_VpcEncryptionControlExclusion;
+    Lambda?: Vpc_VpcEncryptionControlExclusion;
+    NatGateway?: Vpc_VpcEncryptionControlExclusion;
+    VirtualPrivateGateway?: Vpc_VpcEncryptionControlExclusion;
+    VpcLattice?: Vpc_VpcEncryptionControlExclusion;
+    VpcPeering?: Vpc_VpcEncryptionControlExclusion;
   });
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intentius/chant-lexicon-aws",
-  "version": "0.18.23",
+  "version": "0.18.24",
   "description": "AWS CloudFormation lexicon for chant — declarative IaC in TypeScript",
   "license": "Apache-2.0",
   "homepage": "https://intentius.io/chant",
@@ -80,7 +80,7 @@
     "typescript": "^5.9.3"
   },
   "peerDependencies": {
-    "@intentius/chant": "^0.18.23",
+    "@intentius/chant": "^0.18.24",
     "typescript": "^5.9.3"
   }
 }