@intentius/chant-lexicon-aws 0.41.20 → 0.44.1

package/dist/okf/types/SchemaMapping.md

@@ -0,0 +1,27 @@
+---
+type: resource-type
+title: SchemaMapping
+description: aws resource type AWS::EntityResolution::SchemaMapping
+name: SchemaMapping
+lexicon: aws
+resource_type: AWS::EntityResolution::SchemaMapping
+---
+`AWS::EntityResolution::SchemaMapping`, a resource type of the aws lexicon.
+
+## Properties
+
+- `MappedInputFields` (`any`, required): The SchemaMapping attributes input
+- `SchemaName` (`string`, required): The name of the SchemaMapping
+- `CreatedAt` (`string`, optional)
+- `Description` (`string`, optional): The description of the SchemaMapping
+- `HasWorkflows` (`boolean`, optional)
+- `SchemaArn` (`string`, optional)
+- `Tags` (`SchemaMapping_Tag[]`, optional)
+- `UpdatedAt` (`string`, optional)
+
+## Attributes
+
+- `CreatedAt`
+- `HasWorkflows`
+- `SchemaArn`
+- `UpdatedAt`

package/dist/okf/types/SchemaVersion.md

@@ -0,0 +1,19 @@
+---
+type: resource-type
+title: SchemaVersion
+description: aws resource type AWS::Glue::SchemaVersion
+name: SchemaVersion
+lexicon: aws
+resource_type: AWS::Glue::SchemaVersion
+---
+`AWS::Glue::SchemaVersion`, a resource type of the aws lexicon.
+
+## Properties
+
+- `Schema` (`SchemaVersion_Schema`, required)
+- `SchemaDefinition` (`string`, required): Complete definition of the schema in plain-text.
+- `VersionId` (`string`, optional): Represents the version ID associated with the schema version.
+
+## Attributes
+
+- `VersionId`

package/dist/okf/types/SchemaVersionMetadata.md

@@ -0,0 +1,15 @@
+---
+type: resource-type
+title: SchemaVersionMetadata
+description: aws resource type AWS::Glue::SchemaVersionMetadata
+name: SchemaVersionMetadata
+lexicon: aws
+resource_type: AWS::Glue::SchemaVersionMetadata
+---
+`AWS::Glue::SchemaVersionMetadata`, a resource type of the aws lexicon.
+
+## Properties
+
+- `Key` (`string`, required): Metadata key
+- `SchemaVersionId` (`string`, required): Represents the version ID associated with the schema version.
+- `Value` (`string`, required): Metadata value

package/dist/okf/types/Scraper.md

@@ -0,0 +1,28 @@
+---
+type: resource-type
+title: Scraper
+description: aws resource type AWS::APS::Scraper
+name: Scraper
+lexicon: aws
+resource_type: AWS::APS::Scraper
+---
+`AWS::APS::Scraper`, a resource type of the aws lexicon.
+
+## Properties
+
+- `Destination` (`Scraper_Destination`, required)
+- `ScrapeConfiguration` (`Scraper_ScrapeConfiguration`, required)
+- `Source` (`Scraper_Source`, required)
+- `Alias` (`string`, optional): Scraper alias.
+- `Arn` (`string`, optional): Scraper ARN.
+- `RoleArn` (`string`, optional): IAM role ARN for the scraper.
+- `RoleConfiguration` (`Scraper_RoleConfiguration`, optional)
+- `ScraperId` (`string`, optional): Required to identify a specific scraper.
+- `ScraperLoggingConfiguration` (`Scraper_ScraperLoggingConfiguration`, optional)
+- `Tags` (`Scraper_Tag[]`, optional): An array of key-value pairs to apply to this resource.
+
+## Attributes
+
+- `Arn`
+- `RoleArn`
+- `ScraperId`

package/dist/okf/types/Script.md

@@ -0,0 +1,28 @@
+---
+type: resource-type
+title: Script
+description: aws resource type AWS::GameLift::Script
+name: Script
+lexicon: aws
+resource_type: AWS::GameLift::Script
+---
+`AWS::GameLift::Script`, a resource type of the aws lexicon.
+
+## Properties
+
+- `StorageLocation` (`Script_S3Location`, required): The location of the Amazon S3 bucket where a zipped file containing your Realtime scripts is stored. The storage location must specify the Amazon S3 bucket name, the zip file name (the "key"), and a role ARN that allows Amazon GameLift to access the Amazon S3 storage location. The S3 bucket must be in the same Region where you want to create a new script. By default, Amazon GameLift uploads the latest version of the zip file; if you have S3 object versioning turned on, you can use the ObjectVersion parameter to specify an earlier version.
+- `Arn` (`string`, optional): The Amazon Resource Name (ARN) that is assigned to a Amazon GameLift script resource and uniquely identifies it. ARNs are unique across all Regions. In a GameLift script ARN, the resource ID matches the Id value.
+- `CreationTime` (`string`, optional): A time stamp indicating when this data object was created. Format is a number expressed in Unix time as milliseconds (for example "1469498468.057").
+- `Id` (`string`, optional): A unique identifier for the Realtime script
+- `Name` (`string`, optional): A descriptive label that is associated with a script. Script names do not need to be unique.
+- `NodeJsVersion` (`string`, optional): The Node.js version used for execution of the Realtime script.
+- `SizeOnDisk` (`number`, optional): The file size of the uploaded Realtime script, expressed in bytes. When files are uploaded from an S3 location, this value remains at "0".
+- `Tags` (`Script_Tag[]`, optional): An array of key-value pairs to apply to this resource.
+- `Version` (`string`, optional): The version that is associated with a script. Version strings do not need to be unique.
+
+## Attributes
+
+- `Arn`
+- `CreationTime`
+- `Id`
+- `SizeOnDisk`

package/dist/okf/types/SdiSource.md

@@ -0,0 +1,27 @@
+---
+type: resource-type
+title: SdiSource
+description: aws resource type AWS::MediaLive::SdiSource
+name: SdiSource
+lexicon: aws
+resource_type: AWS::MediaLive::SdiSource
+---
+`AWS::MediaLive::SdiSource`, a resource type of the aws lexicon.
+
+## Properties
+
+- `Name` (`string`, required): The name of the SdiSource.
+- `Type` (`SdiSource_SdiSourceType`, required)
+- `Arn` (`string`, optional): The unique arn of the SdiSource.
+- `Id` (`string`, optional): The unique identifier of the SdiSource.
+- `Inputs` (`string[]`, optional): The list of inputs currently using this SDI source.
+- `Mode` (`SdiSource_SdiSourceMode`, optional)
+- `State` (`SdiSource_SdiSourceState`, optional)
+- `Tags` (`SdiSource_Tags[]`, optional): A collection of key-value pairs.
+
+## Attributes
+
+- `Arn`
+- `Id`
+- `Inputs`
+- `State`

package/dist/okf/types/Secret.md

@@ -0,0 +1,29 @@
+---
+type: resource-type
+title: Secret
+description: aws resource type AWS::SecretsManager::Secret
+name: Secret
+lexicon: aws
+resource_type: AWS::SecretsManager::Secret
+---
+`AWS::SecretsManager::Secret`, a resource type of the aws lexicon.
+
+## Properties
+
+- `Description` (`string`, optional): The description of the secret.
+- `GenerateSecretString` (`Secret_GenerateSecretString`, optional): A structure that specifies how to generate a password to encrypt and store in the secret. To include a specific string in the secret, use ``SecretString`` instead. If you omit both ``GenerateSecretString`` and ``SecretString``, you create an empty secret. When you make a change to this property, a new secret version is created. We recommend that you specify the maximum length and include every character type that the system you are generating a password for can support.
+- `Id` (`string`, optional)
+- `KmsKeyId` (`string`, optional): The ARN, key ID, or alias of the KMS key that Secrets Manager uses to encrypt the secret value in the secret. An alias is always prefixed by ``alias/``, for example ``alias/aws/secretsmanager``. For more information, see [About aliases](https://docs.aws.amazon.com/kms/latest/developerguide/alias-about.html). To use a KMS key in a different account, use the key ARN or the alias ARN. If you don't specify this value, then Secrets Manager uses the key ``aws/secretsmanager``. If that key doesn't yet exist, then Secrets Manager creates it for you automatically the first time it encrypts the secret value. If the secret is in a different AWS account from the credentials calling the API, then you can't use ``aws/secretsmanager`` to encrypt the secret, and you must create and use a customer managed KMS key.
+- `Name` (`string`, optional): The name of the new secret. The secret name can contain ASCII letters, numbers, and the following characters: /_+=.@- Do not end your secret name with a hyphen followed by six characters. If you do so, you risk confusion and unexpected results when searching for a secret by partial ARN. Secrets Manager automatically adds a hyphen and six random characters after the secret name at the end of the ARN.
+- `ReplicaRegions` (`Secret_ReplicaRegion[]`, optional): A custom type that specifies a ``Region`` and the ``KmsKeyId`` for a replica secret.
+- `SecretString` (`string`, optional): The text to encrypt and store in the secret. We recommend you use a JSON structure of key/value pairs for your secret value. To generate a random password, use ``GenerateSecretString`` instead. If you omit both ``GenerateSecretString`` and ``SecretString``, you create an empty secret. When you make a change to this property, a new secret version is created.
+- `Tags` (`Secret_Tag[]`, optional): A list of tags to attach to the secret. Each tag is a key and value pair of strings in a JSON text string, for example: ``[{"Key":"CostCenter","Value":"12345"},{"Key":"environment","Value":"production"}]`` Secrets Manager tag key names are case sensitive. A tag with the key "ABC" is a different tag from one with key "abc". Stack-level tags, tags you apply to the CloudFormation stack, are also attached to the secret. If you check tags in permissions policies as part of your security strategy, then adding or removing a tag can change permissions. If the completion of this operation would result in you losing your permissions for this secret, then Secrets Manager blocks the operation and returns an ``Access Denied`` error. For more information, see [Control access to secrets using tags](https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access_examples.html#tag-secrets-abac) and [Limit access to identities with tags that match secrets' tags](https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access_examples.html#auth-and-access_tags2). For information about how to format a JSON parameter for the various command line tool environments, see [Using JSON for Parameters](https://docs.aws.amazon.com/cli/latest/userguide/cli-using-param.html#cli-using-param-json). If your command-line tool or SDK requires quotation marks around the parameter, you should use single quotes to avoid confusion with the double quotes required in the JSON text. The following restrictions apply to tags: + Maximum number of tags per secret: 50 + Maximum key length: 127 Unicode characters in UTF-8 + Maximum value length: 255 Unicode characters in UTF-8 + Tag keys and values are case sensitive. + Do not use the ``aws:`` prefix in your tag names or values because AWS reserves it for AWS use. You can't edit or delete tag names or values with this prefix. Tags with this prefix do not count against your tags per secret limit. + If you use your tagging schema across multiple services and resources, other services might have restrictions on allowed characters. Generally allowed characters: letters, spaces, and numbers representable in UTF-8, plus the following special characters: + - = . _ : /
+- `Type` (`string`, optional): The exact string that identifies the third-party partner that holds the external secret. For more information, see [Managed external secret partners](https://docs.aws.amazon.com/secretsmanager/latest/userguide/mes-partners.html).
+
+## Attributes
+
+- `Id`
+
+## Governed by
+
+- [WAW046](/rules/WAW046.md): ECS container passes a secret-looking value via plaintext Environment instead of Secrets

package/dist/okf/types/SecretTargetAttachment.md

@@ -0,0 +1,20 @@
+---
+type: resource-type
+title: SecretTargetAttachment
+description: aws resource type AWS::SecretsManager::SecretTargetAttachment
+name: SecretTargetAttachment
+lexicon: aws
+resource_type: AWS::SecretsManager::SecretTargetAttachment
+---
+`AWS::SecretsManager::SecretTargetAttachment`, a resource type of the aws lexicon.
+
+## Properties
+
+- `SecretId` (`string`, required)
+- `TargetId` (`string`, required)
+- `TargetType` (`string`, required)
+- `Id` (`string`, optional)
+
+## Attributes
+
+- `Id`

package/dist/okf/types/SecurityAgentAgentSpace.md

@@ -0,0 +1,31 @@
+---
+type: resource-type
+title: SecurityAgentAgentSpace
+description: aws resource type AWS::SecurityAgent::AgentSpace
+name: SecurityAgentAgentSpace
+lexicon: aws
+resource_type: AWS::SecurityAgent::AgentSpace
+---
+`AWS::SecurityAgent::AgentSpace`, a resource type of the aws lexicon.
+
+## Properties
+
+- `Name` (`string`, required): Name of the agent space
+- `AgentSpaceId` (`string`, optional): Unique identifier of the agent space
+- `AwsResources` (`SecurityAgentAgentSpace_AWSResources`, optional)
+- `CodeReviewSettings` (`SecurityAgentAgentSpace_CodeReviewSettings`, optional)
+- `CreatedAt` (`string`, optional): Timestamp when the agent space was created
+- `Description` (`string`, optional): Description of the agent space
+- `IntegratedResources` (`any`, optional)
+- `KmsKeyId` (`string`, optional): Identifier of the KMS key used to encrypt data. Can be a key ID, key ARN, alias name, or alias ARN. If not specified, an AWS managed key is used.
+- `Tags` (`SecurityAgentAgentSpace_Tag[]`, optional): Tags for the agent space
+- `TargetDomainIds` (`string[]`, optional): List of target domain identifiers registered with the agent space
+- `UpdatedAt` (`string`, optional): Timestamp when the agent space was last updated
+
+## Attributes
+
+- `AgentSpaceId`
+- `CreatedAt`
+- `IntegratedResources.*.ProviderResources.*.ConfluenceDocument.SpaceTitle`
+- `IntegratedResources.*.ProviderResources.*.ConfluenceDocument.Title`
+- `UpdatedAt`

package/dist/okf/types/SecurityAgentApplication.md

@@ -0,0 +1,26 @@
+---
+type: resource-type
+title: SecurityAgentApplication
+description: aws resource type AWS::SecurityAgent::Application
+name: SecurityAgentApplication
+lexicon: aws
+resource_type: AWS::SecurityAgent::Application
+---
+`AWS::SecurityAgent::Application`, a resource type of the aws lexicon.
+
+## Properties
+
+- `ApplicationId` (`string`, optional)
+- `ApplicationName` (`string`, optional)
+- `DefaultKmsKeyId` (`string`, optional): Identifier of a KMS key. Can be a key ID, key ARN, alias name, or alias ARN.
+- `Domain` (`string`, optional)
+- `IdCConfiguration` (`SecurityAgentApplication_IdCConfiguration`, optional)
+- `RoleArn` (`string`, optional)
+- `Tags` (`SecurityAgentApplication_Tag[]`, optional): Tags for the application
+
+## Attributes
+
+- `ApplicationId`
+- `ApplicationName`
+- `Domain`
+- `IdCConfiguration.IdCApplicationArn`

package/dist/okf/types/SecurityConfig.md

@@ -0,0 +1,26 @@
+---
+type: resource-type
+title: SecurityConfig
+description: aws resource type AWS::OpenSearchServerless::SecurityConfig
+name: SecurityConfig
+lexicon: aws
+resource_type: AWS::OpenSearchServerless::SecurityConfig
+---
+`AWS::OpenSearchServerless::SecurityConfig`, a resource type of the aws lexicon.
+
+## Properties
+
+- `Description` (`string`, optional): Security config description
+- `IamFederationOptions` (`SecurityConfig_IamFederationConfigOptions`, optional)
+- `IamIdentityCenterOptions` (`SecurityConfig_IamIdentityCenterConfigOptions`, optional)
+- `Id` (`string`, optional): The identifier of the security config
+- `Name` (`string`, optional): The friendly name of the security config
+- `SamlOptions` (`SecurityConfig_SamlConfigOptions`, optional)
+- `Type` (`SecurityConfig_SecurityConfigType`, optional)
+
+## Attributes
+
+- `IamIdentityCenterOptions.ApplicationArn`
+- `IamIdentityCenterOptions.ApplicationDescription`
+- `IamIdentityCenterOptions.ApplicationName`
+- `Id`

package/dist/okf/types/SecurityControl.md

@@ -0,0 +1,16 @@
+---
+type: resource-type
+title: SecurityControl
+description: aws resource type AWS::SecurityHub::SecurityControl
+name: SecurityControl
+lexicon: aws
+resource_type: AWS::SecurityHub::SecurityControl
+---
+`AWS::SecurityHub::SecurityControl`, a resource type of the aws lexicon.
+
+## Properties
+
+- `Parameters` (`Record<string, unknown>`, required): An object that identifies the name of a control parameter, its current value, and whether it has been customized.
+- `LastUpdateReason` (`string`, optional): The most recent reason for updating the customizable properties of a security control. This differs from the UpdateReason field of the BatchUpdateStandardsControlAssociations API, which tracks the reason for updating the enablement status of a control. This field accepts alphanumeric characters in addition to white spaces, dashes, and underscores.
+- `SecurityControlArn` (`string`, optional): The Amazon Resource Name (ARN) for a security control across standards, such as `arn:aws:securityhub:eu-central-1:123456789012:security-control/S3.1`. This parameter doesn't mention a specific standard.
+- `SecurityControlId` (`string`, optional): The unique identifier of a security control across standards. Values for this field typically consist of an AWS service name and a number, such as APIGateway.3.

package/dist/okf/types/SecurityGroup.md

@@ -0,0 +1,31 @@
+---
+type: resource-type
+title: SecurityGroup
+description: aws resource type AWS::EC2::SecurityGroup
+name: SecurityGroup
+lexicon: aws
+resource_type: AWS::EC2::SecurityGroup
+---
+`AWS::EC2::SecurityGroup`, a resource type of the aws lexicon.
+
+## Properties
+
+- `GroupDescription` (`string`, required): A description for the security group.
+- `GroupId` (`string`, optional): The group ID of the specified security group.
+- `GroupName` (`string`, optional): The name of the security group.
+- `Id` (`any`, optional): The group name or group ID depending on whether the SG is created in default or specific VPC
+- `SecurityGroupEgress` (`SecurityGroup_Egress[]`, optional): [VPC only] The outbound rules associated with the security group. There is a short interruption during which you cannot connect to the security group.
+- `SecurityGroupIngress` (`SecurityGroup_Ingress[]`, optional): The inbound rules associated with the security group. There is a short interruption during which you cannot connect to the security group.
+- `Tags` (`SecurityGroup_Tag[]`, optional): Any tags assigned to the security group.
+- `VpcId` (`string`, optional): The ID of the VPC for the security group.
+
+## Attributes
+
+- `GroupId`
+- `Id`
+
+## Governed by
+
+- [WAW019](/rules/WAW019.md): Security group allows unrestricted ingress on sensitive ports (SSH, RDP, database)
+- [WAW036](/rules/WAW036.md): Non-ASCII characters in EC2/IAM/CW string properties — rejected at changeset time
+- [WAW049](/rules/WAW049.md): Security group allows unrestricted ingress on a port other than ALB:80/443

package/dist/okf/types/SecurityGroupEgress.md

@@ -0,0 +1,26 @@
+---
+type: resource-type
+title: SecurityGroupEgress
+description: aws resource type AWS::EC2::SecurityGroupEgress
+name: SecurityGroupEgress
+lexicon: aws
+resource_type: AWS::EC2::SecurityGroupEgress
+---
+`AWS::EC2::SecurityGroupEgress`, a resource type of the aws lexicon.
+
+## Properties
+
+- `GroupId` (`string`, required): The ID of the security group. You must specify either the security group ID or the security group name in the request. For security groups in a nondefault VPC, you must specify the security group ID.
+- `IpProtocol` (`string`, required): The IP protocol name (``tcp``, ``udp``, ``icmp``, ``icmpv6``) or number (see [Protocol Numbers](https://docs.aws.amazon.com/http://www.iana.org/assignments/protocol-numbers/protocol-numbers.xhtml)). Use ``-1`` to specify all protocols. When authorizing security group rules, specifying ``-1`` or a protocol number other than ``tcp``, ``udp``, ``icmp``, or ``icmpv6`` allows traffic on all ports, regardless of any port range you specify. For ``tcp``, ``udp``, and ``icmp``, you must specify a port range. For ``icmpv6``, the port range is optional; if you omit the port range, traffic for all types and codes is allowed.
+- `CidrIp` (`string`, optional): The IPv4 address range, in CIDR format. You must specify exactly one of the following: ``CidrIp``, ``CidrIpv6``, ``DestinationPrefixListId``, or ``DestinationSecurityGroupId``. For examples of rules that you can add to security groups for specific access scenarios, see [Security group rules for different use cases](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-rules-reference.html) in the *User Guide*.
+- `CidrIpv6` (`string`, optional): The IPv6 address range, in CIDR format. You must specify exactly one of the following: ``CidrIp``, ``CidrIpv6``, ``DestinationPrefixListId``, or ``DestinationSecurityGroupId``. For examples of rules that you can add to security groups for specific access scenarios, see [Security group rules for different use cases](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-rules-reference.html) in the *User Guide*.
+- `Description` (`string`, optional): The description of an egress (outbound) security group rule. Constraints: Up to 255 characters in length. Allowed characters are a-z, A-Z, 0-9, spaces, and ._-:/()#,@[]+=;{}!$*
+- `DestinationPrefixListId` (`string`, optional): The prefix list IDs for an AWS service. This is the AWS service to access through a VPC endpoint from instances associated with the security group. You must specify exactly one of the following: ``CidrIp``, ``CidrIpv6``, ``DestinationPrefixListId``, or ``DestinationSecurityGroupId``.
+- `DestinationSecurityGroupId` (`string`, optional): The ID of the security group. You must specify exactly one of the following: ``CidrIp``, ``CidrIpv6``, ``DestinationPrefixListId``, or ``DestinationSecurityGroupId``.
+- `FromPort` (`number`, optional): If the protocol is TCP or UDP, this is the start of the port range. If the protocol is ICMP or ICMPv6, this is the ICMP type or -1 (all ICMP types).
+- `Id` (`string`, optional)
+- `ToPort` (`number`, optional): If the protocol is TCP or UDP, this is the end of the port range. If the protocol is ICMP or ICMPv6, this is the ICMP code or -1 (all ICMP codes). If the start port is -1 (all ICMP types), then the end port must be -1 (all ICMP codes).
+
+## Attributes
+
+- `Id`

package/dist/okf/types/SecurityGroupVpcAssociation.md

@@ -0,0 +1,23 @@
+---
+type: resource-type
+title: SecurityGroupVpcAssociation
+description: aws resource type AWS::EC2::SecurityGroupVpcAssociation
+name: SecurityGroupVpcAssociation
+lexicon: aws
+resource_type: AWS::EC2::SecurityGroupVpcAssociation
+---
+`AWS::EC2::SecurityGroupVpcAssociation`, a resource type of the aws lexicon.
+
+## Properties
+
+- `GroupId` (`string`, required): The group ID of the specified security group.
+- `VpcId` (`string`, required): The ID of the VPC in the security group vpc association.
+- `State` (`SecurityGroupVpcAssociation_SecurityGroupVpcAssociationState`, optional): The state of the security group vpc association.
+- `StateReason` (`string`, optional): The reason for the state of the security group vpc association.
+- `VpcOwnerId` (`string`, optional): The owner of the VPC in the security group vpc association.
+
+## Attributes
+
+- `State`
+- `StateReason`
+- `VpcOwnerId`

package/dist/okf/types/SecurityHubAutomationRule.md

@@ -0,0 +1,31 @@
+---
+type: resource-type
+title: SecurityHubAutomationRule
+description: aws resource type AWS::SecurityHub::AutomationRule
+name: SecurityHubAutomationRule
+lexicon: aws
+resource_type: AWS::SecurityHub::AutomationRule
+---
+`AWS::SecurityHub::AutomationRule`, a resource type of the aws lexicon.
+
+## Properties
+
+- `Actions` (`SecurityHubAutomationRule_AutomationRulesAction[]`, required): One or more actions to update finding fields if a finding matches the conditions specified in ``Criteria``.
+- `Criteria` (`SecurityHubAutomationRule_AutomationRulesFindingFilters`, required): A set of [Security Finding Format (ASFF)](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-findings-format.html) finding field attributes and corresponding expected values that ASH uses to filter findings. If a rule is enabled and a finding matches the criteria specified in this parameter, ASH applies the rule action to the finding.
+- `Description` (`string`, required): A description of the rule.
+- `RuleName` (`string`, required): The name of the rule.
+- `RuleOrder` (`number`, required): An integer ranging from 1 to 1000 that represents the order in which the rule action is applied to findings. Security Hub CSPM applies rules with lower values for this parameter first.
+- `CreatedAt` (`string`, optional)
+- `CreatedBy` (`string`, optional)
+- `IsTerminal` (`boolean`, optional): Specifies whether a rule is the last to be applied with respect to a finding that matches the rule criteria. This is useful when a finding matches the criteria for multiple rules, and each rule has different actions. If a rule is terminal, Security Hub CSPM applies the rule action to a finding that matches the rule criteria and doesn't evaluate other rules for the finding. By default, a rule isn't terminal.
+- `RuleArn` (`string`, optional)
+- `RuleStatus` (`"DISABLED" | "ENABLED"`, optional): Whether the rule is active after it is created. If this parameter is equal to ``ENABLED``, ASH applies the rule to findings and finding updates after the rule is created.
+- `Tags` (`Record<string, unknown>`, optional): User-defined tags associated with an automation rule.
+- `UpdatedAt` (`string`, optional)
+
+## Attributes
+
+- `CreatedAt`
+- `CreatedBy`
+- `RuleArn`
+- `UpdatedAt`

package/dist/okf/types/SecurityHubConnector.md

@@ -0,0 +1,39 @@
+---
+type: resource-type
+title: SecurityHubConnector
+description: aws resource type AWS::SecurityHub::Connector
+name: SecurityHubConnector
+lexicon: aws
+resource_type: AWS::SecurityHub::Connector
+---
+`AWS::SecurityHub::Connector`, a resource type of the aws lexicon.
+
+## Properties
+
+- `Name` (`string`, required): The name of the connector.
+- `Provider` (`SecurityHubConnector_Provider`, required)
+- `ConnectorArn` (`string`, optional)
+- `ConnectorId` (`string`, optional)
+- `ConnectorStatus` (`string`, optional)
+- `CreatedAt` (`string`, optional)
+- `CreatedBy` (`string`, optional)
+- `Description` (`string`, optional): The description of the connector.
+- `EnablementStatus` (`string`, optional)
+- `Issues` (`SecurityHubConnector_HealthIssue[]`, optional)
+- `LastCheckedAt` (`string`, optional)
+- `LastUpdatedAt` (`string`, optional)
+- `Message` (`string`, optional)
+- `Tags` (`Record<string, unknown>`, optional)
+
+## Attributes
+
+- `ConnectorArn`
+- `ConnectorId`
+- `ConnectorStatus`
+- `CreatedAt`
+- `CreatedBy`
+- `EnablementStatus`
+- `Issues`
+- `LastCheckedAt`
+- `LastUpdatedAt`
+- `Message`

package/dist/okf/types/SecurityHubHub.md

@@ -0,0 +1,23 @@
+---
+type: resource-type
+title: SecurityHubHub
+description: aws resource type AWS::SecurityHub::Hub
+name: SecurityHubHub
+lexicon: aws
+resource_type: AWS::SecurityHub::Hub
+---
+`AWS::SecurityHub::Hub`, a resource type of the aws lexicon.
+
+## Properties
+
+- `ARN` (`string`, optional): An ARN is automatically created for the customer.
+- `AutoEnableControls` (`boolean`, optional): Whether to automatically enable new controls when they are added to standards that are enabled
+- `ControlFindingGenerator` (`string`, optional): This field, used when enabling Security Hub, specifies whether the calling account has consolidated control findings turned on. If the value for this field is set to SECURITY_CONTROL, Security Hub generates a single finding for a control check even when the check applies to multiple enabled standards. If the value for this field is set to STANDARD_CONTROL, Security Hub generates separate findings for a control check when the check applies to multiple enabled standards.
+- `EnableDefaultStandards` (`boolean`, optional): Whether to enable the security standards that Security Hub has designated as automatically enabled.
+- `SubscribedAt` (`string`, optional): The date and time when Security Hub was enabled in the account.
+- `Tags` (`Record<string, unknown>`, optional)
+
+## Attributes
+
+- `ARN`
+- `SubscribedAt`

package/dist/okf/types/SecurityKey.md

@@ -0,0 +1,19 @@
+---
+type: resource-type
+title: SecurityKey
+description: aws resource type AWS::Connect::SecurityKey
+name: SecurityKey
+lexicon: aws
+resource_type: AWS::Connect::SecurityKey
+---
+`AWS::Connect::SecurityKey`, a resource type of the aws lexicon.
+
+## Properties
+
+- `InstanceId` (`string`, required)
+- `Key` (`string`, required)
+- `AssociationId` (`string`, optional)
+
+## Attributes
+
+- `AssociationId`

package/dist/okf/types/SecurityPolicy.md

@@ -0,0 +1,16 @@
+---
+type: resource-type
+title: SecurityPolicy
+description: aws resource type AWS::OpenSearchServerless::SecurityPolicy
+name: SecurityPolicy
+lexicon: aws
+resource_type: AWS::OpenSearchServerless::SecurityPolicy
+---
+`AWS::OpenSearchServerless::SecurityPolicy`, a resource type of the aws lexicon.
+
+## Properties
+
+- `Name` (`string`, required): The name of the policy
+- `Policy` (`string`, required): The JSON policy document that is the content for the policy
+- `Type` (`SecurityPolicy_SecurityPolicyType`, required)
+- `Description` (`string`, optional): The description of the policy

package/dist/okf/types/SecurityRequirementPack.md

@@ -0,0 +1,23 @@
+---
+type: resource-type
+title: SecurityRequirementPack
+description: aws resource type AWS::SecurityAgent::SecurityRequirementPack
+name: SecurityRequirementPack
+lexicon: aws
+resource_type: AWS::SecurityAgent::SecurityRequirementPack
+---
+`AWS::SecurityAgent::SecurityRequirementPack`, a resource type of the aws lexicon.
+
+## Properties
+
+- `Name` (`string`, required): Name of the security requirement pack
+- `Description` (`string`, optional): Description of the pack
+- `KmsKeyId` (`string`, optional): KMS key for client-side encryption of pack contents
+- `PackId` (`string`, optional): Unique identifier of the security requirement pack
+- `SecurityRequirements` (`SecurityRequirementPack_SecurityRequirement[]`, optional): Security requirements within this pack
+- `Status` (`"DISABLED" | "ENABLED"`, optional): Whether the pack is enabled or disabled
+- `Tags` (`SecurityRequirementPack_Tag[]`, optional): Tags for the security requirement pack
+
+## Attributes
+
+- `PackId`

package/dist/okf/types/SegmentDefinition.md

@@ -0,0 +1,29 @@
+---
+type: resource-type
+title: SegmentDefinition
+description: aws resource type AWS::CustomerProfiles::SegmentDefinition
+name: SegmentDefinition
+lexicon: aws
+resource_type: AWS::CustomerProfiles::SegmentDefinition
+---
+`AWS::CustomerProfiles::SegmentDefinition`, a resource type of the aws lexicon.
+
+## Properties
+
+- `DisplayName` (`string`, required): The display name of the segment definition.
+- `DomainName` (`string`, required): The unique name of the domain.
+- `SegmentDefinitionName` (`string`, required): The unique name of the segment definition.
+- `CreatedAt` (`string`, optional): The time of this segment definition got created.
+- `Description` (`string`, optional): The description of the segment definition.
+- `SegmentDefinitionArn` (`string`, optional): The Amazon Resource Name (ARN) of the segment definition.
+- `SegmentGroups` (`SegmentDefinition_SegmentGroup`, optional): An array that defines the set of segment criteria to evaluate when handling segment groups for the segment.
+- `SegmentSort` (`SegmentDefinition_SegmentSort`, optional): The segment sort configuration for ordering segment results.
+- `SegmentSqlQuery` (`string`, optional): The SQL query that defines the segment criteria.
+- `SegmentType` (`"CLASSIC" | "ENHANCED"`, optional): The SQL query that defines the segment criteria.
+- `Tags` (`SegmentDefinition_Tag[]`, optional): The tags used to organize, track, or control access for this resource.
+
+## Attributes
+
+- `CreatedAt`
+- `SegmentDefinitionArn`
+- `SegmentType`

package/dist/okf/types/SenderId.md

@@ -0,0 +1,21 @@
+---
+type: resource-type
+title: SenderId
+description: aws resource type AWS::SMSVOICE::SenderId
+name: SenderId
+lexicon: aws
+resource_type: AWS::SMSVOICE::SenderId
+---
+`AWS::SMSVOICE::SenderId`, a resource type of the aws lexicon.
+
+## Properties
+
+- `IsoCountryCode` (`string`, required): The two-character code, in ISO 3166-1 alpha-2 format, for the country or region.
+- `SenderId` (`string`, required): The sender ID string to request.
+- `Arn` (`string`, optional): The Amazon Resource Name (ARN) associated with the SenderId.
+- `DeletionProtectionEnabled` (`boolean`, optional): When set to true the sender ID can't be deleted. By default this is set to false.
+- `Tags` (`SenderId_Tag[]`, optional): An array of key-value pairs to apply to this resource.
+
+## Attributes
+
+- `Arn`

package/dist/okf/types/SequenceStore.md

@@ -0,0 +1,40 @@
+---
+type: resource-type
+title: SequenceStore
+description: aws resource type AWS::Omics::SequenceStore
+name: SequenceStore
+lexicon: aws
+resource_type: AWS::Omics::SequenceStore
+---
+`AWS::Omics::SequenceStore`, a resource type of the aws lexicon.
+
+## Properties
+
+- `Name` (`string`, required): A name for the store.
+- `AccessLogLocation` (`string`, optional): Location of the access logs.
+- `Arn` (`string`, optional): The store's ARN.
+- `CreationTime` (`string`, optional): When the store was created.
+- `Description` (`string`, optional): A description for the store.
+- `ETagAlgorithmFamily` (`SequenceStore_ETagAlgorithmFamily`, optional)
+- `FallbackLocation` (`string`, optional): An S3 location that is used to store files that have failed a direct upload.
+- `PropagatedSetLevelTags` (`string[]`, optional): The tags keys to propagate to the S3 objects associated with read sets in the sequence store.
+- `S3AccessPointArn` (`string`, optional): This is ARN of the access point associated with the S3 bucket storing read sets.
+- `S3AccessPolicy` (`Record<string, unknown>`, optional): The resource policy that controls S3 access on the store
+- `S3Uri` (`string`, optional): The S3 URI of the sequence store.
+- `SequenceStoreId` (`string`, optional)
+- `SseConfig` (`SequenceStore_SseConfig`, optional)
+- `Status` (`SequenceStore_SequenceStoreStatus`, optional)
+- `StatusMessage` (`string`, optional): The status message of the sequence store.
+- `Tags` (`Record<string, unknown>`, optional)
+- `UpdateTime` (`string`, optional): The last-updated time of the sequence store.
+
+## Attributes
+
+- `Arn`
+- `CreationTime`
+- `S3AccessPointArn`
+- `S3Uri`
+- `SequenceStoreId`
+- `Status`
+- `StatusMessage`
+- `UpdateTime`