@intentius/chant-lexicon-aws 0.8.0 → 0.8.2

package/dist/integrity.json

@@ -1,9 +1,9 @@
 {
   "algorithm": "sha256",
   "artifacts": {
-    "manifest.json": "952df85c49379cb7b10d9866055bb2372399f1be02eccb3b9178af1c0b197fd7",
-    "meta.json": "a3d3b5d5b061a94bc16391bcc6a159971f8db272f534dbb5dffac298b7fd28c2",
-    "types/index.d.ts": "1140e4598eb52866f19e5b6afeee6ab0f4e3f6a268e5bcd774ce977d53bb543a",
+    "manifest.json": "3ab7f47e82b4ee0fd46578826f6accef50198b31c0813e0be04669925125901e",
+    "meta.json": "b002042c09885131915d7e0b0f7d490773f9d001f9531b9f924a5fa647028100",
+    "types/index.d.ts": "8224bf437127fbd090ff71f362d102004586ab20c40a54e497fea43db818fbbe",
     "rules/hardcoded-region.ts": "5a0eaf7ab391231fe6cd51426ece29539cb4b36f31c8dd060956638fed55722a",
     "rules/iam-wildcard.ts": "135d7217d278fef50939e605c5da32603ba35674b8c4b5c4d66a06c77903e945",
     "rules/s3-encryption.ts": "c4f9f8aa8dc382ed98c7b04e820a600590cc75335a8db2e087cbfbfe4003d09e",
@@ -40,5 +40,5 @@
     "skills/chant-aws.md": "4d65eb160e001f2af42eb7c622a5b498c2fd1f5afbd6c8155615c010fb265c63",
     "skills/chant-aws-eks.md": "8789255709ff004ad0a875fd5999edcdc66fc6e33d710db058d9f42703bcfdfe"
   },
-  "composite": "066d92b351ca7ed1f0ff0631670601f4377d1759458aa8c10077ad1ca46e8aae"
+  "composite": "e44053016c05b6361d30bcfd257c2a07d5ec9d6e0387d6a2954e7c420c085efd"
 }

package/dist/manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "aws",
-  "version": "0.8.0",
+  "version": "0.8.2",
   "chantVersion": ">=0.1.0",
   "namespace": "AWS",
   "intrinsics": [

package/dist/meta.json

@@ -9600,6 +9600,7 @@
       "KnowledgeBaseConfiguration/Type",
       "KnowledgeBaseConfiguration/VectorKnowledgeBaseConfiguration",
       "KnowledgeBaseConfiguration/KendraKnowledgeBaseConfiguration",
+      "KnowledgeBaseConfiguration/ManagedKnowledgeBaseConfiguration",
       "KnowledgeBaseConfiguration/SqlKnowledgeBaseConfiguration/Type",
       "KnowledgeBaseConfiguration/SqlKnowledgeBaseConfiguration/RedshiftConfiguration/StorageConfigurations",
       "KnowledgeBaseConfiguration/SqlKnowledgeBaseConfiguration/RedshiftConfiguration/QueryEngineConfiguration"
@@ -9628,6 +9629,16 @@
     "kind": "property",
     "lexicon": "aws"
   },
+  "BedrockKnowledgeBase_ManagedKnowledgeBaseConfiguration": {
+    "resourceType": "AWS::Bedrock::KnowledgeBase.ManagedKnowledgeBaseConfiguration",
+    "kind": "property",
+    "lexicon": "aws"
+  },
+  "BedrockKnowledgeBase_ManagedKnowledgeBaseServerSideEncryptionConfiguration": {
+    "resourceType": "AWS::Bedrock::KnowledgeBase.ManagedKnowledgeBaseServerSideEncryptionConfiguration",
+    "kind": "property",
+    "lexicon": "aws"
+  },
   "BedrockKnowledgeBase_MongoDbAtlasConfiguration": {
     "resourceType": "AWS::Bedrock::KnowledgeBase.MongoDbAtlasConfiguration",
     "kind": "property",
@@ -33356,7 +33367,8 @@
     "writeOnly": [
       "ServiceConnectConfiguration",
       "VolumeConfigurations",
-      "ForceNewDeployment"
+      "ForceNewDeployment",
+      "Monitoring"
     ],
     "primaryIdentifier": [
       "ServiceArn",
@@ -33446,6 +33458,16 @@
     "kind": "property",
     "lexicon": "aws"
   },
+  "EcsService_MetricConfiguration": {
+    "resourceType": "AWS::ECS::Service.MetricConfiguration",
+    "kind": "property",
+    "lexicon": "aws"
+  },
+  "EcsService_MonitoringConfiguration": {
+    "resourceType": "AWS::ECS::Service.MonitoringConfiguration",
+    "kind": "property",
+    "lexicon": "aws"
+  },
   "EcsService_NetworkConfiguration": {
     "resourceType": "AWS::ECS::Service.NetworkConfiguration",
     "kind": "property",
@@ -57603,6 +57625,16 @@
     "kind": "property",
     "lexicon": "aws"
   },
+  "ManagedKnowledgeBaseConfiguration": {
+    "resourceType": "AWS::Bedrock::KnowledgeBase.ManagedKnowledgeBaseConfiguration",
+    "kind": "property",
+    "lexicon": "aws"
+  },
+  "ManagedKnowledgeBaseServerSideEncryptionConfiguration": {
+    "resourceType": "AWS::Bedrock::KnowledgeBase.ManagedKnowledgeBaseServerSideEncryptionConfiguration",
+    "kind": "property",
+    "lexicon": "aws"
+  },
   "ManagedLoggingConfiguration": {
     "resourceType": "AWS::Athena::WorkGroup.ManagedLoggingConfiguration",
     "kind": "property",
@@ -60282,6 +60314,11 @@
     "kind": "property",
     "lexicon": "aws"
   },
+  "MetricConfiguration": {
+    "resourceType": "AWS::ECS::Service.MetricConfiguration",
+    "kind": "property",
+    "lexicon": "aws"
+  },
   "MetricDefinitionObject": {
     "resourceType": "AWS::Evidently::Launch.MetricDefinitionObject",
     "kind": "property",
@@ -79562,6 +79599,9 @@
         ]
       }
     },
+    "createOnly": [
+      "ResourceShareConfiguration/RetainSharingOnAccountLeaveOrganization"
+    ],
     "writeOnly": [
       "PermissionArns",
       "Principals",
@@ -79577,6 +79617,16 @@
       "tagUpdatable": true
     }
   },
+  "ResourceShareConfiguration": {
+    "resourceType": "AWS::RAM::ResourceShare.ResourceShareConfiguration",
+    "kind": "property",
+    "lexicon": "aws"
+  },
+  "ResourceShare_ResourceShareConfiguration": {
+    "resourceType": "AWS::RAM::ResourceShare.ResourceShareConfiguration",
+    "kind": "property",
+    "lexicon": "aws"
+  },
   "ResourceShare_Tag": {
     "resourceType": "AWS::RAM::ResourceShare.Tag",
     "kind": "property",
@@ -94048,10 +94098,10 @@
         "maxLength": 255
       },
       "ContactFlowArn": {
-        "pattern": "^$|arn:aws[-a-z0-9]*:connect:[-a-z0-9]*:[0-9]{12}:instance/[-a-zA-Z0-9]*/contact-flow/[-a-zA-Z0-9]*$"
+        "pattern": "^$|arn:aws[-a-z0-9]*:connect:[-a-z0-9]*:[0-9]{12}:instance/[-a-zA-Z0-9]*/contact-flow/[-a-zA-Z0-9]*(:[a-zA-Z0-9-]+)?$"
       },
       "SelfAssignContactFlowArn": {
-        "pattern": "^$|arn:aws[-a-z0-9]*:connect:[-a-z0-9]*:[0-9]{12}:instance/[-a-zA-Z0-9]*/contact-flow/[-a-zA-Z0-9]*$"
+        "pattern": "^$|arn:aws[-a-z0-9]*:connect:[-a-z0-9]*:[0-9]{12}:instance/[-a-zA-Z0-9]*/contact-flow/[-a-zA-Z0-9]*(:[a-zA-Z0-9-]+)?$"
       }
     },
     "primaryIdentifier": [

package/dist/types/index.d.ts

@@ -11818,6 +11818,7 @@ export declare class EcsService {
     /** A list of load balancer objects to associate with the service. If you specify the ``Role`` property, ``LoadBalancers`` must be specified as well. For information about the number of load balancers that you can specify per service, see [Service Load Balancing](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/service-load-balancing.html) in the *Amazon Elastic Container Service Developer Guide*.
   To remove this property from your service resource, specify an empty ``LoadBalancer`` array. */
     LoadBalancers?: EcsService_LoadBalancer[];
+    Monitoring?: EcsService_MonitoringConfiguration;
     Name?: string;
     /** The network configuration for the service. This parameter is required for task definitions that use the ``awsvpc`` network mode to receive their own elastic network interface, and it is not supported for other network modes. For more information, see [Task Networking](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-networking.html) in the *Amazon Elastic Container Service Developer Guide*. */
     NetworkConfiguration?: EcsService_NetworkConfiguration;
@@ -28898,6 +28899,8 @@ export declare class ResourceShare {
     Principals?: string[];
     /** Specifies a list of one or more ARNs of the resources to associate with the resource share. */
     ResourceArns?: string[];
+    /** Specifies the configuration for the resource share */
+    ResourceShareConfiguration?: ResourceShare_ResourceShareConfiguration;
     /** Specifies from which source accounts the service principal has access to the resources in this resource share. */
     Sources?: string[];
     /** The current status of the resource share. */
@@ -45974,11 +45977,29 @@ export declare class BedrockKnowledgeBase_KnowledgeBaseConfiguration {
   constructor(props: {
     Type: BedrockKnowledgeBase_KnowledgeBaseType;
     KendraKnowledgeBaseConfiguration?: BedrockKnowledgeBase_KendraKnowledgeBaseConfiguration;
+    ManagedKnowledgeBaseConfiguration?: BedrockKnowledgeBase_ManagedKnowledgeBaseConfiguration;
     SqlKnowledgeBaseConfiguration?: BedrockKnowledgeBase_SqlKnowledgeBaseConfiguration;
     VectorKnowledgeBaseConfiguration?: BedrockKnowledgeBase_VectorKnowledgeBaseConfiguration;
   });
 }
 
+export declare class BedrockKnowledgeBase_ManagedKnowledgeBaseConfiguration {
+  constructor(props: {
+    /** The ARN of the model used to create vector embeddings for the knowledge base. */
+    EmbeddingModelArn: string;
+    EmbeddingModelConfiguration?: BedrockKnowledgeBase_EmbeddingModelConfiguration;
+    EmbeddingModelType?: BedrockKnowledgeBase_EmbeddingModelType;
+    ServerSideEncryptionConfiguration?: BedrockKnowledgeBase_ManagedKnowledgeBaseServerSideEncryptionConfiguration;
+  });
+}
+
+export declare class BedrockKnowledgeBase_ManagedKnowledgeBaseServerSideEncryptionConfiguration {
+  constructor(props: {
+    /** The ARN of the AWS KMS key used to encrypt the managed knowledge base. */
+    KmsKeyArn?: string;
+  });
+}
+
 export declare class BedrockKnowledgeBase_MongoDbAtlasConfiguration {
   constructor(props: {
     /** Name of the collection within MongoDB Atlas. */
@@ -65347,6 +65368,19 @@ export declare class EcsService_LogConfiguration {
   });
 }
 
+export declare class EcsService_MetricConfiguration {
+  constructor(props: {
+    MetricNames: "CPUUtilization" | "MemoryUtilization"[];
+    ResolutionSeconds: 20 | 60;
+  });
+}
+
+export declare class EcsService_MonitoringConfiguration {
+  constructor(props: {
+    MetricConfigurations: EcsService_MetricConfiguration[];
+  });
+}
+
 export declare class EcsService_NetworkConfiguration {
   constructor(props: {
     /** The VPC subnets and security groups that are associated with a task.
@@ -65996,6 +66030,8 @@ export declare class EKSCluster_ResourcesVpcConfig {
   constructor(props: {
     /** Specify subnets for your Amazon EKS nodes. Amazon EKS creates cross-account elastic network interfaces in these subnets to allow communication between your nodes and the Kubernetes control plane. */
     SubnetIds: string[];
+    /** Specify the egress mode for the cluster control plane. If you set this to CUSTOMER_ROUTED, the control plane routes traffic through your VPC subnets instead of using AWS managed networking. */
+    ControlPlaneEgressMode?: string;
     /** Set this value to true to enable private access for your cluster's Kubernetes API server endpoint. If you enable private access, Kubernetes API requests from within your cluster's VPC use the private VPC endpoint. The default value for this parameter is false, which disables private access for your Kubernetes API server. If you disable private access and you have nodes or AWS Fargate pods in the cluster, then ensure that publicAccessCidrs includes the necessary CIDR blocks for communication with the nodes or Fargate pods. */
     EndpointPrivateAccess?: boolean;
     /** Set this value to false to disable public access to your cluster's Kubernetes API server endpoint. If you disable public access, your cluster's Kubernetes API server can only receive requests from within the cluster VPC. The default value for this parameter is true, which enables public access for your Kubernetes API server. */
@@ -81706,6 +81742,7 @@ export declare class KnowledgeBaseConfiguration {
   constructor(props: {
     Type: BedrockKnowledgeBase_KnowledgeBaseType;
     KendraKnowledgeBaseConfiguration?: BedrockKnowledgeBase_KendraKnowledgeBaseConfiguration;
+    ManagedKnowledgeBaseConfiguration?: BedrockKnowledgeBase_ManagedKnowledgeBaseConfiguration;
     SqlKnowledgeBaseConfiguration?: BedrockKnowledgeBase_SqlKnowledgeBaseConfiguration;
     VectorKnowledgeBaseConfiguration?: BedrockKnowledgeBase_VectorKnowledgeBaseConfiguration;
   });
@@ -83036,6 +83073,8 @@ export declare class LayerVersion_Content {
     S3Bucket: string;
     /** The Amazon S3 key of the layer archive. */
     S3Key: string;
+    /** Specifies whether Lambda should copy the deployment package to its internal storage (COPY) or reference it directly from your S3 bucket (REFERENCE). */
+    S3ObjectStorageMode?: "COPY" | "REFERENCE";
     /** For versioned objects, the version of the layer archive object to use. */
     S3ObjectVersion?: string;
   });
@@ -85799,6 +85838,23 @@ export declare class ManagedInstancesStorageConfiguration {
   });
 }
 
+export declare class ManagedKnowledgeBaseConfiguration {
+  constructor(props: {
+    /** The ARN of the model used to create vector embeddings for the knowledge base. */
+    EmbeddingModelArn: string;
+    EmbeddingModelConfiguration?: BedrockKnowledgeBase_EmbeddingModelConfiguration;
+    EmbeddingModelType?: BedrockKnowledgeBase_EmbeddingModelType;
+    ServerSideEncryptionConfiguration?: BedrockKnowledgeBase_ManagedKnowledgeBaseServerSideEncryptionConfiguration;
+  });
+}
+
+export declare class ManagedKnowledgeBaseServerSideEncryptionConfiguration {
+  constructor(props: {
+    /** The ARN of the AWS KMS key used to encrypt the managed knowledge base. */
+    KmsKeyArn?: string;
+  });
+}
+
 export declare class ManagedLoggingConfiguration {
   constructor(props: {
     /** Enables managed log persistence. */
@@ -88745,6 +88801,13 @@ export declare class MetricCharacteristics {
   });
 }
 
+export declare class MetricConfiguration {
+  constructor(props: {
+    MetricNames: "CPUUtilization" | "MemoryUtilization"[];
+    ResolutionSeconds: 20 | 60;
+  });
+}
+
 export declare class MetricDefinitionObject {
   constructor(props: {
     /** The JSON path to reference the entity id in the event. */
@@ -104171,6 +104234,15 @@ export declare class ResourceServerScopeType {
   });
 }
 
+export declare class ResourceShare_ResourceShareConfiguration {
+  constructor(props: {
+    /** The resource share restricts access to an account */
+    ExclusiveAccountAccess?: boolean;
+    /** Specifies whether the consumer account retains access to the resource share after leaving the organization. */
+    RetainSharingOnAccountLeaveOrganization?: boolean;
+  });
+}
+
 export declare class ResourceShare_Tag {
   constructor(props: {
     /** The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. */
@@ -104180,6 +104252,15 @@ export declare class ResourceShare_Tag {
   });
 }
 
+export declare class ResourceShareConfiguration {
+  constructor(props: {
+    /** The resource share restricts access to an account */
+    ExclusiveAccountAccess?: boolean;
+    /** Specifies whether the consumer account retains access to the resource share after leaving the organization. */
+    RetainSharingOnAccountLeaveOrganization?: boolean;
+  });
+}
+
 export declare class ResourceStatementRequest {
   constructor(props: {
     Resources?: string[];
@@ -104191,6 +104272,8 @@ export declare class ResourcesVpcConfig {
   constructor(props: {
     /** Specify subnets for your Amazon EKS nodes. Amazon EKS creates cross-account elastic network interfaces in these subnets to allow communication between your nodes and the Kubernetes control plane. */
     SubnetIds: string[];
+    /** Specify the egress mode for the cluster control plane. If you set this to CUSTOMER_ROUTED, the control plane routes traffic through your VPC subnets instead of using AWS managed networking. */
+    ControlPlaneEgressMode?: string;
     /** Set this value to true to enable private access for your cluster's Kubernetes API server endpoint. If you enable private access, Kubernetes API requests from within your cluster's VPC use the private VPC endpoint. The default value for this parameter is false, which disables private access for your Kubernetes API server. If you disable private access and you have nodes or AWS Fargate pods in the cluster, then ensure that publicAccessCidrs includes the necessary CIDR blocks for communication with the nodes or Fargate pods. */
     EndpointPrivateAccess?: boolean;
     /** Set this value to false to disable public access to your cluster's Kubernetes API server endpoint. If you disable public access, your cluster's Kubernetes API server can only receive requests from within the cluster VPC. The default value for this parameter is true, which enables public access for your Kubernetes API server. */
@@ -124815,6 +124898,8 @@ export type BedrockFlow_SupportedLanguages = "Python_3";
 
 export type BedrockFlow_VectorSearchRerankingConfigurationType = "BEDROCK_RERANKING_MODEL";
 
+export type BedrockKnowledgeBase_EmbeddingModelType = "CUSTOM" | "MANAGED";
+
 export type BedrockKnowledgeBase_InclusionType = "EXCLUDE" | "INCLUDE";
 
 export type BedrockKnowledgeBase_KnowledgeBaseStatus =
@@ -124823,6 +124908,7 @@ export type BedrockKnowledgeBase_KnowledgeBaseStatus =
   | "DELETE_UNSUCCESSFUL"
   | "DELETING"
   | "FAILED"
+  | "UPDATE_UNSUCCESSFUL"
   | "UPDATING";
 
 export type BedrockKnowledgeBase_KnowledgeBaseStorageType =
@@ -124834,7 +124920,7 @@ export type BedrockKnowledgeBase_KnowledgeBaseStorageType =
   | "RDS"
   | "S3_VECTORS";
 
-export type BedrockKnowledgeBase_KnowledgeBaseType = "KENDRA" | "SQL" | "VECTOR";
+export type BedrockKnowledgeBase_KnowledgeBaseType = "KENDRA" | "MANAGED" | "SQL" | "VECTOR";
 
 export type BedrockKnowledgeBase_QueryEngineType = "REDSHIFT";
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intentius/chant-lexicon-aws",
-  "version": "0.8.0",
+  "version": "0.8.2",
   "description": "AWS CloudFormation lexicon for chant — declarative IaC in TypeScript",
   "license": "Apache-2.0",
   "homepage": "https://intentius.io/chant",
@@ -70,6 +70,6 @@
     "typescript": "^5.9.3"
   },
   "peerDependencies": {
-    "@intentius/chant": "^0.8.0"
+    "@intentius/chant": "^0.8.2"
   }
 }

package/src/generated/index.d.ts

@@ -11818,6 +11818,7 @@ export declare class EcsService {
     /** A list of load balancer objects to associate with the service. If you specify the ``Role`` property, ``LoadBalancers`` must be specified as well. For information about the number of load balancers that you can specify per service, see [Service Load Balancing](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/service-load-balancing.html) in the *Amazon Elastic Container Service Developer Guide*.
   To remove this property from your service resource, specify an empty ``LoadBalancer`` array. */
     LoadBalancers?: EcsService_LoadBalancer[];
+    Monitoring?: EcsService_MonitoringConfiguration;
     Name?: string;
     /** The network configuration for the service. This parameter is required for task definitions that use the ``awsvpc`` network mode to receive their own elastic network interface, and it is not supported for other network modes. For more information, see [Task Networking](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-networking.html) in the *Amazon Elastic Container Service Developer Guide*. */
     NetworkConfiguration?: EcsService_NetworkConfiguration;
@@ -28898,6 +28899,8 @@ export declare class ResourceShare {
     Principals?: string[];
     /** Specifies a list of one or more ARNs of the resources to associate with the resource share. */
     ResourceArns?: string[];
+    /** Specifies the configuration for the resource share */
+    ResourceShareConfiguration?: ResourceShare_ResourceShareConfiguration;
     /** Specifies from which source accounts the service principal has access to the resources in this resource share. */
     Sources?: string[];
     /** The current status of the resource share. */
@@ -45974,11 +45977,29 @@ export declare class BedrockKnowledgeBase_KnowledgeBaseConfiguration {
   constructor(props: {
     Type: BedrockKnowledgeBase_KnowledgeBaseType;
     KendraKnowledgeBaseConfiguration?: BedrockKnowledgeBase_KendraKnowledgeBaseConfiguration;
+    ManagedKnowledgeBaseConfiguration?: BedrockKnowledgeBase_ManagedKnowledgeBaseConfiguration;
     SqlKnowledgeBaseConfiguration?: BedrockKnowledgeBase_SqlKnowledgeBaseConfiguration;
     VectorKnowledgeBaseConfiguration?: BedrockKnowledgeBase_VectorKnowledgeBaseConfiguration;
   });
 }
 
+export declare class BedrockKnowledgeBase_ManagedKnowledgeBaseConfiguration {
+  constructor(props: {
+    /** The ARN of the model used to create vector embeddings for the knowledge base. */
+    EmbeddingModelArn: string;
+    EmbeddingModelConfiguration?: BedrockKnowledgeBase_EmbeddingModelConfiguration;
+    EmbeddingModelType?: BedrockKnowledgeBase_EmbeddingModelType;
+    ServerSideEncryptionConfiguration?: BedrockKnowledgeBase_ManagedKnowledgeBaseServerSideEncryptionConfiguration;
+  });
+}
+
+export declare class BedrockKnowledgeBase_ManagedKnowledgeBaseServerSideEncryptionConfiguration {
+  constructor(props: {
+    /** The ARN of the AWS KMS key used to encrypt the managed knowledge base. */
+    KmsKeyArn?: string;
+  });
+}
+
 export declare class BedrockKnowledgeBase_MongoDbAtlasConfiguration {
   constructor(props: {
     /** Name of the collection within MongoDB Atlas. */
@@ -65347,6 +65368,19 @@ export declare class EcsService_LogConfiguration {
   });
 }
 
+export declare class EcsService_MetricConfiguration {
+  constructor(props: {
+    MetricNames: "CPUUtilization" | "MemoryUtilization"[];
+    ResolutionSeconds: 20 | 60;
+  });
+}
+
+export declare class EcsService_MonitoringConfiguration {
+  constructor(props: {
+    MetricConfigurations: EcsService_MetricConfiguration[];
+  });
+}
+
 export declare class EcsService_NetworkConfiguration {
   constructor(props: {
     /** The VPC subnets and security groups that are associated with a task.
@@ -65996,6 +66030,8 @@ export declare class EKSCluster_ResourcesVpcConfig {
   constructor(props: {
     /** Specify subnets for your Amazon EKS nodes. Amazon EKS creates cross-account elastic network interfaces in these subnets to allow communication between your nodes and the Kubernetes control plane. */
     SubnetIds: string[];
+    /** Specify the egress mode for the cluster control plane. If you set this to CUSTOMER_ROUTED, the control plane routes traffic through your VPC subnets instead of using AWS managed networking. */
+    ControlPlaneEgressMode?: string;
     /** Set this value to true to enable private access for your cluster's Kubernetes API server endpoint. If you enable private access, Kubernetes API requests from within your cluster's VPC use the private VPC endpoint. The default value for this parameter is false, which disables private access for your Kubernetes API server. If you disable private access and you have nodes or AWS Fargate pods in the cluster, then ensure that publicAccessCidrs includes the necessary CIDR blocks for communication with the nodes or Fargate pods. */
     EndpointPrivateAccess?: boolean;
     /** Set this value to false to disable public access to your cluster's Kubernetes API server endpoint. If you disable public access, your cluster's Kubernetes API server can only receive requests from within the cluster VPC. The default value for this parameter is true, which enables public access for your Kubernetes API server. */
@@ -81706,6 +81742,7 @@ export declare class KnowledgeBaseConfiguration {
   constructor(props: {
     Type: BedrockKnowledgeBase_KnowledgeBaseType;
     KendraKnowledgeBaseConfiguration?: BedrockKnowledgeBase_KendraKnowledgeBaseConfiguration;
+    ManagedKnowledgeBaseConfiguration?: BedrockKnowledgeBase_ManagedKnowledgeBaseConfiguration;
     SqlKnowledgeBaseConfiguration?: BedrockKnowledgeBase_SqlKnowledgeBaseConfiguration;
     VectorKnowledgeBaseConfiguration?: BedrockKnowledgeBase_VectorKnowledgeBaseConfiguration;
   });
@@ -83036,6 +83073,8 @@ export declare class LayerVersion_Content {
     S3Bucket: string;
     /** The Amazon S3 key of the layer archive. */
     S3Key: string;
+    /** Specifies whether Lambda should copy the deployment package to its internal storage (COPY) or reference it directly from your S3 bucket (REFERENCE). */
+    S3ObjectStorageMode?: "COPY" | "REFERENCE";
     /** For versioned objects, the version of the layer archive object to use. */
     S3ObjectVersion?: string;
   });
@@ -85799,6 +85838,23 @@ export declare class ManagedInstancesStorageConfiguration {
   });
 }
 
+export declare class ManagedKnowledgeBaseConfiguration {
+  constructor(props: {
+    /** The ARN of the model used to create vector embeddings for the knowledge base. */
+    EmbeddingModelArn: string;
+    EmbeddingModelConfiguration?: BedrockKnowledgeBase_EmbeddingModelConfiguration;
+    EmbeddingModelType?: BedrockKnowledgeBase_EmbeddingModelType;
+    ServerSideEncryptionConfiguration?: BedrockKnowledgeBase_ManagedKnowledgeBaseServerSideEncryptionConfiguration;
+  });
+}
+
+export declare class ManagedKnowledgeBaseServerSideEncryptionConfiguration {
+  constructor(props: {
+    /** The ARN of the AWS KMS key used to encrypt the managed knowledge base. */
+    KmsKeyArn?: string;
+  });
+}
+
 export declare class ManagedLoggingConfiguration {
   constructor(props: {
     /** Enables managed log persistence. */
@@ -88745,6 +88801,13 @@ export declare class MetricCharacteristics {
   });
 }
 
+export declare class MetricConfiguration {
+  constructor(props: {
+    MetricNames: "CPUUtilization" | "MemoryUtilization"[];
+    ResolutionSeconds: 20 | 60;
+  });
+}
+
 export declare class MetricDefinitionObject {
   constructor(props: {
     /** The JSON path to reference the entity id in the event. */
@@ -104171,6 +104234,15 @@ export declare class ResourceServerScopeType {
   });
 }
 
+export declare class ResourceShare_ResourceShareConfiguration {
+  constructor(props: {
+    /** The resource share restricts access to an account */
+    ExclusiveAccountAccess?: boolean;
+    /** Specifies whether the consumer account retains access to the resource share after leaving the organization. */
+    RetainSharingOnAccountLeaveOrganization?: boolean;
+  });
+}
+
 export declare class ResourceShare_Tag {
   constructor(props: {
     /** The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. */
@@ -104180,6 +104252,15 @@ export declare class ResourceShare_Tag {
   });
 }
 
+export declare class ResourceShareConfiguration {
+  constructor(props: {
+    /** The resource share restricts access to an account */
+    ExclusiveAccountAccess?: boolean;
+    /** Specifies whether the consumer account retains access to the resource share after leaving the organization. */
+    RetainSharingOnAccountLeaveOrganization?: boolean;
+  });
+}
+
 export declare class ResourceStatementRequest {
   constructor(props: {
     Resources?: string[];
@@ -104191,6 +104272,8 @@ export declare class ResourcesVpcConfig {
   constructor(props: {
     /** Specify subnets for your Amazon EKS nodes. Amazon EKS creates cross-account elastic network interfaces in these subnets to allow communication between your nodes and the Kubernetes control plane. */
     SubnetIds: string[];
+    /** Specify the egress mode for the cluster control plane. If you set this to CUSTOMER_ROUTED, the control plane routes traffic through your VPC subnets instead of using AWS managed networking. */
+    ControlPlaneEgressMode?: string;
     /** Set this value to true to enable private access for your cluster's Kubernetes API server endpoint. If you enable private access, Kubernetes API requests from within your cluster's VPC use the private VPC endpoint. The default value for this parameter is false, which disables private access for your Kubernetes API server. If you disable private access and you have nodes or AWS Fargate pods in the cluster, then ensure that publicAccessCidrs includes the necessary CIDR blocks for communication with the nodes or Fargate pods. */
     EndpointPrivateAccess?: boolean;
     /** Set this value to false to disable public access to your cluster's Kubernetes API server endpoint. If you disable public access, your cluster's Kubernetes API server can only receive requests from within the cluster VPC. The default value for this parameter is true, which enables public access for your Kubernetes API server. */
@@ -124815,6 +124898,8 @@ export type BedrockFlow_SupportedLanguages = "Python_3";
 
 export type BedrockFlow_VectorSearchRerankingConfigurationType = "BEDROCK_RERANKING_MODEL";
 
+export type BedrockKnowledgeBase_EmbeddingModelType = "CUSTOM" | "MANAGED";
+
 export type BedrockKnowledgeBase_InclusionType = "EXCLUDE" | "INCLUDE";
 
 export type BedrockKnowledgeBase_KnowledgeBaseStatus =
@@ -124823,6 +124908,7 @@ export type BedrockKnowledgeBase_KnowledgeBaseStatus =
   | "DELETE_UNSUCCESSFUL"
   | "DELETING"
   | "FAILED"
+  | "UPDATE_UNSUCCESSFUL"
   | "UPDATING";
 
 export type BedrockKnowledgeBase_KnowledgeBaseStorageType =
@@ -124834,7 +124920,7 @@ export type BedrockKnowledgeBase_KnowledgeBaseStorageType =
   | "RDS"
   | "S3_VECTORS";
 
-export type BedrockKnowledgeBase_KnowledgeBaseType = "KENDRA" | "SQL" | "VECTOR";
+export type BedrockKnowledgeBase_KnowledgeBaseType = "KENDRA" | "MANAGED" | "SQL" | "VECTOR";
 
 export type BedrockKnowledgeBase_QueryEngineType = "REDSHIFT";
 

package/src/generated/index.ts

@@ -2456,6 +2456,8 @@ export const BedrockFoundationModelContextEnrichmentConfiguration = createProper
 export const BedrockKnowledgeBase_EmbeddingModelConfiguration = createProperty("AWS::Bedrock::KnowledgeBase.EmbeddingModelConfiguration", "aws");
 export const BedrockKnowledgeBase_KendraKnowledgeBaseConfiguration = createProperty("AWS::Bedrock::KnowledgeBase.KendraKnowledgeBaseConfiguration", "aws");
 export const BedrockKnowledgeBase_KnowledgeBaseConfiguration = createProperty("AWS::Bedrock::KnowledgeBase.KnowledgeBaseConfiguration", "aws");
+export const BedrockKnowledgeBase_ManagedKnowledgeBaseConfiguration = createProperty("AWS::Bedrock::KnowledgeBase.ManagedKnowledgeBaseConfiguration", "aws");
+export const BedrockKnowledgeBase_ManagedKnowledgeBaseServerSideEncryptionConfiguration = createProperty("AWS::Bedrock::KnowledgeBase.ManagedKnowledgeBaseServerSideEncryptionConfiguration", "aws");
 export const BedrockKnowledgeBase_MongoDbAtlasConfiguration = createProperty("AWS::Bedrock::KnowledgeBase.MongoDbAtlasConfiguration", "aws");
 export const BedrockKnowledgeBase_MongoDbAtlasFieldMapping = createProperty("AWS::Bedrock::KnowledgeBase.MongoDbAtlasFieldMapping", "aws");
 export const BedrockKnowledgeBase_NeptuneAnalyticsConfiguration = createProperty("AWS::Bedrock::KnowledgeBase.NeptuneAnalyticsConfiguration", "aws");
@@ -4382,6 +4384,8 @@ export const EcsService_HookTimeoutConfig = createProperty("AWS::ECS::Service.Ho
 export const EcsService_LinearConfiguration = createProperty("AWS::ECS::Service.LinearConfiguration", "aws");
 export const EcsService_LoadBalancer = createProperty("AWS::ECS::Service.LoadBalancer", "aws");
 export const EcsService_LogConfiguration = createProperty("AWS::ECS::Service.LogConfiguration", "aws");
+export const EcsService_MetricConfiguration = createProperty("AWS::ECS::Service.MetricConfiguration", "aws");
+export const EcsService_MonitoringConfiguration = createProperty("AWS::ECS::Service.MonitoringConfiguration", "aws");
 export const EcsService_NetworkConfiguration = createProperty("AWS::ECS::Service.NetworkConfiguration", "aws");
 export const EcsService_PlacementConstraint = createProperty("AWS::ECS::Service.PlacementConstraint", "aws");
 export const EcsService_PlacementStrategy = createProperty("AWS::ECS::Service.PlacementStrategy", "aws");
@@ -6553,6 +6557,8 @@ export const ManagedInstancesLocalStorageConfiguration = createProperty("AWS::EC
 export const ManagedInstancesNetworkConfiguration = createProperty("AWS::ECS::CapacityProvider.ManagedInstancesNetworkConfiguration", "aws");
 export const ManagedInstancesProvider = createProperty("AWS::ECS::CapacityProvider.ManagedInstancesProvider", "aws");
 export const ManagedInstancesStorageConfiguration = createProperty("AWS::ECS::CapacityProvider.ManagedInstancesStorageConfiguration", "aws");
+export const ManagedKnowledgeBaseConfiguration = createProperty("AWS::Bedrock::KnowledgeBase.ManagedKnowledgeBaseConfiguration", "aws");
+export const ManagedKnowledgeBaseServerSideEncryptionConfiguration = createProperty("AWS::Bedrock::KnowledgeBase.ManagedKnowledgeBaseServerSideEncryptionConfiguration", "aws");
 export const ManagedLoggingConfiguration = createProperty("AWS::Athena::WorkGroup.ManagedLoggingConfiguration", "aws");
 export const ManagedPersistenceMonitoringConfiguration = createProperty("AWS::EMRServerless::Application.ManagedPersistenceMonitoringConfiguration", "aws");
 export const ManagedQueryResultsConfiguration = createProperty("AWS::Athena::WorkGroup.ManagedQueryResultsConfiguration", "aws");
@@ -6856,6 +6862,7 @@ export const Method_IntegrationResponse = createProperty("AWS::ApiGateway::Metho
 export const Method_MethodResponse = createProperty("AWS::ApiGateway::Method.MethodResponse", "aws");
 export const MethodResponse = createProperty("AWS::ApiGateway::Method.MethodResponse", "aws");
 export const MetricCharacteristics = createProperty("AWS::CloudWatch::AnomalyDetector.MetricCharacteristics", "aws");
+export const MetricConfiguration = createProperty("AWS::ECS::Service.MetricConfiguration", "aws");
 export const MetricDefinitionObject = createProperty("AWS::Evidently::Launch.MetricDefinitionObject", "aws");
 export const MetricDestination = createProperty("AWS::RUM::AppMonitor.MetricDestination", "aws");
 export const MetricFilter_Dimension = createProperty("AWS::Logs::MetricFilter.Dimension", "aws");
@@ -8511,7 +8518,9 @@ export const ResourceParameters = createProperty("AWS::Events::Connection.Resour
 export const ResourceQuery = createProperty("AWS::ResourceGroups::Group.ResourceQuery", "aws");
 export const ResourceRetentionPolicy = createProperty("AWS::Batch::JobDefinition.ResourceRetentionPolicy", "aws");
 export const ResourceServerScopeType = createProperty("AWS::Cognito::UserPoolResourceServer.ResourceServerScopeType", "aws");
+export const ResourceShare_ResourceShareConfiguration = createProperty("AWS::RAM::ResourceShare.ResourceShareConfiguration", "aws");
 export const ResourceShare_Tag = createProperty("AWS::RAM::ResourceShare.Tag", "aws");
+export const ResourceShareConfiguration = createProperty("AWS::RAM::ResourceShare.ResourceShareConfiguration", "aws");
 export const ResourceStatementRequest = createProperty("AWS::EC2::NetworkInsightsAccessScope.ResourceStatementRequest", "aws");
 export const ResourcesVpcConfig = createProperty("AWS::EKS::Cluster.ResourcesVpcConfig", "aws");
 export const ResourceTagParameter = createProperty("AWS::DataZone::ProjectProfile.ResourceTagParameter", "aws");