@intentius/chant-lexicon-aws 0.24.0 → 0.25.0

package/dist/integrity.json

@@ -1,9 +1,9 @@
 {
   "algorithm": "sha256",
   "artifacts": {
-    "manifest.json": "a20c29c522914a62a7823b23fd2b9d129807ce54057e6e7f8a22c2edac06bec7",
-    "meta.json": "ef04b67841e39eed4550d4ec0527ebb2a0a367dc7628728522168f11b67a7a9f",
-    "types/index.d.ts": "2a5fb678eae51c9ce44c59696e3e708b5d7dcbc91b24da7be199f010a9a63361",
+    "manifest.json": "a5162b7f8895bcc9d50771f01a6b1e8f67260f63fa06f3dbaba9adad1e7895f4",
+    "meta.json": "9a1964a45889497f8ce361803a71816f3be5246566af294db93e45cbf1310d10",
+    "types/index.d.ts": "55a5012a192919ba9c60dae240d042d08bab8aa9039d91abb0c76c950a71187b",
     "rules/hardcoded-region.ts": "5a0eaf7ab391231fe6cd51426ece29539cb4b36f31c8dd060956638fed55722a",
     "rules/iam-wildcard.ts": "135d7217d278fef50939e605c5da32603ba35674b8c4b5c4d66a06c77903e945",
     "rules/s3-encryption.ts": "c4f9f8aa8dc382ed98c7b04e820a600590cc75335a8db2e087cbfbfe4003d09e",
@@ -59,5 +59,5 @@
     "skills/chant-aws-eks.md": "8789255709ff004ad0a875fd5999edcdc66fc6e33d710db058d9f42703bcfdfe",
     "skills/chant-aws-carve-terraform.md": "f4c6fe1c702250665f90d82b3bdaba5ea50ae75e380a8ae321dad6eb1c39683e"
   },
-  "composite": "1bf3277ce31ee1a020f29800d3477f7f96d041904b8377a7e5954492d45dc4d1"
+  "composite": "5d2dbd2699243f1c238ed43376b2c77cf1e38e539388f6a111b361bebc372a4e"
 }

package/dist/manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "aws",
-  "version": "0.24.0",
+  "version": "0.25.0",
   "chantVersion": ">=0.1.0",
   "namespace": "AWS",
   "intrinsics": [

package/dist/meta.json

@@ -1768,7 +1768,21 @@
     "kind": "resource",
     "lexicon": "aws",
     "attrs": {
-      "Id": "Id"
+      "CertificateArn": "CertificateArn"
+    },
+    "propertyConstraints": {
+      "CertificateTransparencyLoggingPreference": {
+        "enum": [
+          "ENABLED",
+          "DISABLED"
+        ]
+      },
+      "CertificateExport": {
+        "enum": [
+          "ENABLED",
+          "DISABLED"
+        ]
+      }
     },
     "createOnly": [
       "SubjectAlternativeNames",
@@ -1776,11 +1790,21 @@
       "ValidationMethod",
       "KeyAlgorithm",
       "DomainName",
-      "CertificateAuthorityArn"
+      "CertificateAuthorityArn",
+      "CertificateExport"
+    ],
+    "writeOnly": [
+      "DomainValidationOptions/*/HostedZoneId",
+      "ValidationMethod"
     ],
     "primaryIdentifier": [
-      "Id"
-    ]
+      "CertificateArn"
+    ],
+    "tagging": {
+      "taggable": true,
+      "tagOnCreate": true,
+      "tagUpdatable": true
+    }
   },
   "AcmCertificate_DomainValidationOption": {
     "resourceType": "AWS::CertificateManager::Certificate.DomainValidationOption",
@@ -73461,7 +73485,8 @@
       "Tags",
       "Strategy",
       "SpreadLevel",
-      "PartitionCount"
+      "PartitionCount",
+      "ParentGroupId"
     ],
     "primaryIdentifier": [
       "GroupName"

package/dist/types/index.d.ts

@@ -314,18 +314,28 @@ export declare class AcmAccount {
 
 export declare class AcmCertificate {
   constructor(props: {
+    /** The fully qualified domain name (FQDN), such as www.example.com, with which you want to secure an ACM certificate */
     DomainName: string;
+    /** The Amazon Resource Name (ARN) of the private certificate authority (CA) that will be used to issue the certificate. */
+    CertificateArn?: string;
+    /** The Amazon Resource Name (ARN) of the private certificate authority (CA) that will be used to issue the certificate. */
     CertificateAuthorityArn?: string;
-    CertificateExport?: string;
-    CertificateTransparencyLoggingPreference?: string;
+    /** Specifies whether the certificate can be exported. ENABLED allows the certificate to be exported, DISABLED prevents export. */
+    CertificateExport?: "DISABLED" | "ENABLED";
+    /** You can opt out of certificate transparency logging by specifying the DISABLED option. Opt in by specifying ENABLED. */
+    CertificateTransparencyLoggingPreference?: "DISABLED" | "ENABLED";
+    /** Domain information that domain name registrars use to verify your identity. */
     DomainValidationOptions?: AcmCertificate_DomainValidationOption[];
-    Id?: string;
+    /** Specifies the algorithm of the public and private key pair that your certificate uses to encrypt data. */
     KeyAlgorithm?: string;
+    /** Additional FQDNs to be included in the Subject Alternative Name extension of the ACM certificate. */
     SubjectAlternativeNames?: string[];
+    /** Key-value pairs that can identify the certificate. */
     Tags?: AcmCertificate_Tag[];
+    /** The method you want to use to validate that you own or control the domain associated with a public certificate. Valid values are DNS, EMAIL or HTTP */
     ValidationMethod?: string;
   }, attributes?: CFResourceAttributes);
-  readonly Id: string;
+  readonly CertificateArn: string;
 }
 
 export declare class AcmeDomainValidation {
@@ -26890,6 +26900,8 @@ export declare class PlacementGroup {
     GroupId?: string;
     /** The Group Name of Placement Group. */
     GroupName?: string;
+    /** The ID of a parent placement group. Valid for strategies that support parent group linking. */
+    ParentGroupId?: string;
     /** The number of partitions. Valid only when **Strategy** is set to `partition` */
     PartitionCount?: number;
     /** The Spread Level of Placement Group is an enum where it accepts either host or rack when strategy is spread */
@@ -40698,7 +40710,7 @@ export declare class AcmAccount_ExpiryEventsConfiguration {
 
 export declare class AcmCertificate_DomainValidationOption {
   constructor(props: {
-    DomainName: string;
+    DomainName?: string;
     HostedZoneId?: string;
     ValidationDomain?: string;
   });
@@ -40706,7 +40718,9 @@ export declare class AcmCertificate_DomainValidationOption {
 
 export declare class AcmCertificate_Tag {
   constructor(props: {
+    /** The tag's key. */
     Key: string;
+    /** The tag's value. */
     Value: string;
   });
 }
@@ -67544,7 +67558,7 @@ export declare class DomainStats {
 
 export declare class DomainValidationOption {
   constructor(props: {
-    DomainName: string;
+    DomainName?: string;
     HostedZoneId?: string;
     ValidationDomain?: string;
   });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intentius/chant-lexicon-aws",
-  "version": "0.24.0",
+  "version": "0.25.0",
   "description": "AWS CloudFormation lexicon for chant — declarative IaC in TypeScript",
   "license": "Apache-2.0",
   "homepage": "https://intentius.io/chant",
@@ -80,7 +80,7 @@
     "typescript": "^5.9.3"
   },
   "peerDependencies": {
-    "@intentius/chant": "^0.24.0",
+    "@intentius/chant": "^0.25.0",
     "typescript": "^5.9.3"
   }
 }

package/src/generated/index.d.ts

@@ -314,18 +314,28 @@ export declare class AcmAccount {
 
 export declare class AcmCertificate {
   constructor(props: {
+    /** The fully qualified domain name (FQDN), such as www.example.com, with which you want to secure an ACM certificate */
     DomainName: string;
+    /** The Amazon Resource Name (ARN) of the private certificate authority (CA) that will be used to issue the certificate. */
+    CertificateArn?: string;
+    /** The Amazon Resource Name (ARN) of the private certificate authority (CA) that will be used to issue the certificate. */
     CertificateAuthorityArn?: string;
-    CertificateExport?: string;
-    CertificateTransparencyLoggingPreference?: string;
+    /** Specifies whether the certificate can be exported. ENABLED allows the certificate to be exported, DISABLED prevents export. */
+    CertificateExport?: "DISABLED" | "ENABLED";
+    /** You can opt out of certificate transparency logging by specifying the DISABLED option. Opt in by specifying ENABLED. */
+    CertificateTransparencyLoggingPreference?: "DISABLED" | "ENABLED";
+    /** Domain information that domain name registrars use to verify your identity. */
     DomainValidationOptions?: AcmCertificate_DomainValidationOption[];
-    Id?: string;
+    /** Specifies the algorithm of the public and private key pair that your certificate uses to encrypt data. */
     KeyAlgorithm?: string;
+    /** Additional FQDNs to be included in the Subject Alternative Name extension of the ACM certificate. */
     SubjectAlternativeNames?: string[];
+    /** Key-value pairs that can identify the certificate. */
     Tags?: AcmCertificate_Tag[];
+    /** The method you want to use to validate that you own or control the domain associated with a public certificate. Valid values are DNS, EMAIL or HTTP */
     ValidationMethod?: string;
   }, attributes?: CFResourceAttributes);
-  readonly Id: string;
+  readonly CertificateArn: string;
 }
 
 export declare class AcmeDomainValidation {
@@ -26890,6 +26900,8 @@ export declare class PlacementGroup {
     GroupId?: string;
     /** The Group Name of Placement Group. */
     GroupName?: string;
+    /** The ID of a parent placement group. Valid for strategies that support parent group linking. */
+    ParentGroupId?: string;
     /** The number of partitions. Valid only when **Strategy** is set to `partition` */
     PartitionCount?: number;
     /** The Spread Level of Placement Group is an enum where it accepts either host or rack when strategy is spread */
@@ -40698,7 +40710,7 @@ export declare class AcmAccount_ExpiryEventsConfiguration {
 
 export declare class AcmCertificate_DomainValidationOption {
   constructor(props: {
-    DomainName: string;
+    DomainName?: string;
     HostedZoneId?: string;
     ValidationDomain?: string;
   });
@@ -40706,7 +40718,9 @@ export declare class AcmCertificate_DomainValidationOption {
 
 export declare class AcmCertificate_Tag {
   constructor(props: {
+    /** The tag's key. */
     Key: string;
+    /** The tag's value. */
     Value: string;
   });
 }
@@ -67544,7 +67558,7 @@ export declare class DomainStats {
 
 export declare class DomainValidationOption {
   constructor(props: {
-    DomainName: string;
+    DomainName?: string;
     HostedZoneId?: string;
     ValidationDomain?: string;
   });

package/src/generated/index.ts

@@ -19,7 +19,7 @@ export const AccountCustomization = createResource("AWS::UXC::AccountCustomizati
 export const AccountPolicy = createResource("AWS::Logs::AccountPolicy", "aws", {"AccountId":"AccountId"});
 export const ACL = createResource("AWS::MemoryDB::ACL", "aws", {"Status":"Status","Arn":"Arn"});
 export const AcmAccount = createResource("AWS::CertificateManager::Account", "aws", {"AccountId":"AccountId"});
-export const AcmCertificate = createResource("AWS::CertificateManager::Certificate", "aws", {"Id":"Id"});
+export const AcmCertificate = createResource("AWS::CertificateManager::Certificate", "aws", {"CertificateArn":"CertificateArn"});
 export const AcmeDomainValidation = createResource("AWS::CertificateManager::AcmeDomainValidation", "aws", {"Arn":"Arn"});
 export const AcmeEndpoint = createResource("AWS::CertificateManager::AcmeEndpoint", "aws", {"AcmeEndpointArn":"AcmeEndpointArn","EndpointUrl":"EndpointUrl"});
 export const AcmeExternalAccountBinding = createResource("AWS::CertificateManager::AcmeExternalAccountBinding", "aws", {"AcmeExternalAccountBindingArn":"AcmeExternalAccountBindingArn"});

package/src/generated/lexicon-aws.json

@@ -1768,7 +1768,21 @@
     "kind": "resource",
     "lexicon": "aws",
     "attrs": {
-      "Id": "Id"
+      "CertificateArn": "CertificateArn"
+    },
+    "propertyConstraints": {
+      "CertificateTransparencyLoggingPreference": {
+        "enum": [
+          "ENABLED",
+          "DISABLED"
+        ]
+      },
+      "CertificateExport": {
+        "enum": [
+          "ENABLED",
+          "DISABLED"
+        ]
+      }
     },
     "createOnly": [
       "SubjectAlternativeNames",
@@ -1776,11 +1790,21 @@
       "ValidationMethod",
       "KeyAlgorithm",
       "DomainName",
-      "CertificateAuthorityArn"
+      "CertificateAuthorityArn",
+      "CertificateExport"
+    ],
+    "writeOnly": [
+      "DomainValidationOptions/*/HostedZoneId",
+      "ValidationMethod"
     ],
     "primaryIdentifier": [
-      "Id"
-    ]
+      "CertificateArn"
+    ],
+    "tagging": {
+      "taggable": true,
+      "tagOnCreate": true,
+      "tagUpdatable": true
+    }
   },
   "AcmCertificate_DomainValidationOption": {
     "resourceType": "AWS::CertificateManager::Certificate.DomainValidationOption",
@@ -73461,7 +73485,8 @@
       "Tags",
       "Strategy",
       "SpreadLevel",
-      "PartitionCount"
+      "PartitionCount",
+      "ParentGroupId"
     ],
     "primaryIdentifier": [
       "GroupName"