@propulsionworks/cloudformation 0.0.1 → 0.1.0

package/out/exports/resources.generated/aws-ec2-capacityreservation.d.ts

@@ -0,0 +1,186 @@
+import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
+export type EC2CapacityReservation = ResourceDefinitionWithAttributes<"AWS::EC2::CapacityReservation", EC2CapacityReservationProps, EC2CapacityReservationAttribs>;
+/**
+ * Creates a new Capacity Reservation with the specified attributes. For more information, see [Capacity Reservations](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-capacity-reservations.html) in the *Amazon EC2 User Guide* .
+ */
+export type EC2CapacityReservationProps = {
+    /**
+     * The Availability Zone in which to create the Capacity Reservation.
+     */
+    AvailabilityZone?: string | undefined;
+    /**
+     * The Availability Zone ID of the Capacity Reservation.
+     */
+    AvailabilityZoneId?: string | undefined;
+    /**
+     * Indicates whether the Capacity Reservation supports EBS-optimized instances. This optimization provides dedicated throughput to Amazon EBS and an optimized configuration stack to provide optimal I/O performance. This optimization isn't available with all instance types. Additional usage charges apply when using an EBS- optimized instance.
+     */
+    EbsOptimized?: boolean | undefined;
+    /**
+     * The date and time at which the Capacity Reservation expires. When a Capacity Reservation expires, the reserved capacity is released and you can no longer launch instances into it. The Capacity Reservation's state changes to `expired` when it reaches its end date and time.
+     *
+     * You must provide an `EndDate` value if `EndDateType` is `limited` . Omit `EndDate` if `EndDateType` is `unlimited` .
+     *
+     * If the `EndDateType` is `limited` , the Capacity Reservation is cancelled within an hour from the specified time. For example, if you specify 5/31/2019, 13:30:55, the Capacity Reservation is guaranteed to end between 13:30:55 and 14:30:55 on 5/31/2019.
+     *
+     * If you are requesting a future-dated Capacity Reservation, you can't specify an end date and time that is within the commitment duration.
+     */
+    EndDate?: string | undefined;
+    /**
+     * Indicates the way in which the Capacity Reservation ends. A Capacity Reservation can have one of the following end types:
+     *
+     * - `unlimited` - The Capacity Reservation remains active until you explicitly cancel it. Do not provide an `EndDate` if the `EndDateType` is `unlimited` .
+     * - `limited` - The Capacity Reservation expires automatically at a specified date and time. You must provide an `EndDate` value if the `EndDateType` value is `limited` .
+     */
+    EndDateType?: string | undefined;
+    /**
+     * *Deprecated.*
+     */
+    EphemeralStorage?: boolean | undefined;
+    /**
+     * The number of instances for which to reserve capacity.
+     *
+     * > You can request future-dated Capacity Reservations for an instance count with a minimum of 100 vCPUs. For example, if you request a future-dated Capacity Reservation for `m5.xlarge` instances, you must request at least 25 instances ( *25 * m5.xlarge = 100 vCPUs* ).
+     *
+     * Valid range: 1 - 1000
+     */
+    InstanceCount: number;
+    /**
+     * Indicates the type of instance launches that the Capacity Reservation accepts. The options include:
+     *
+     * - `open` - The Capacity Reservation automatically matches all instances that have matching attributes (instance type, platform, and Availability Zone). Instances that have matching attributes run in the Capacity Reservation automatically without specifying any additional parameters.
+     * - `targeted` - The Capacity Reservation only accepts instances that have matching attributes (instance type, platform, and Availability Zone), and explicitly target the Capacity Reservation. This ensures that only permitted instances can use the reserved capacity.
+     *
+     * > If you are requesting a future-dated Capacity Reservation, you must specify `targeted` .
+     *
+     * Default: `open`
+     */
+    InstanceMatchCriteria?: string | undefined;
+    /**
+     * The type of operating system for which to reserve capacity.
+     */
+    InstancePlatform: string;
+    /**
+     * The instance type for which to reserve capacity.
+     *
+     * > You can request future-dated Capacity Reservations for instance types in the C, M, R, I, and T instance families only.
+     *
+     * For more information, see [Instance types](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html) in the *Amazon EC2 User Guide* .
+     */
+    InstanceType: string;
+    /**
+     * > Not supported for future-dated Capacity Reservations.
+     *
+     * The Amazon Resource Name (ARN) of the Outpost on which to create the Capacity Reservation.
+     */
+    OutPostArn?: string | undefined;
+    /**
+     * > Not supported for future-dated Capacity Reservations.
+     *
+     * The Amazon Resource Name (ARN) of the cluster placement group in which to create the Capacity Reservation. For more information, see [Capacity Reservations for cluster placement groups](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/cr-cpg.html) in the *Amazon EC2 User Guide* .
+     */
+    PlacementGroupArn?: string | undefined;
+    /**
+     * The tags to apply to the Capacity Reservation during launch.
+     */
+    TagSpecifications?: TagSpecification[] | undefined;
+    /**
+     * Indicates the tenancy of the Capacity Reservation. A Capacity Reservation can have one of the following tenancy settings:
+     *
+     * - `default` - The Capacity Reservation is created on hardware that is shared with other AWS accounts .
+     * - `dedicated` - The Capacity Reservation is created on single-tenant hardware that is dedicated to a single AWS account .
+     */
+    Tenancy?: string | undefined;
+    /**
+     * The ID of the AWS account to which to assign billing of the unused capacity of the Capacity Reservation. A request will be sent to the specified account. That account must accept the request for the billing to be assigned to their account. For more information, see [Billing assignment for shared Amazon EC2 Capacity Reservations](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/assign-billing.html) .
+     *
+     * You can assign billing only for shared Capacity Reservations. To share a Capacity Reservation, you must add it to a resource share. For more information, see [AWS::RAM::ResourceShare](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ram-resourceshare.html) .
+     */
+    UnusedReservationBillingOwnerId?: string | undefined;
+};
+export type EC2CapacityReservationAttribs = {
+    /**
+     * Returns the Availability Zone in which the capacity is reserved. For example: `us-east-1a` .
+     */
+    AvailabilityZone: string;
+    /**
+     * Returns the remaining capacity, which indicates the number of instances that can be launched in the Capacity Reservation. For example: `9` .
+     */
+    AvailableInstanceCount: number;
+    /**
+     * The Amazon Resource Name (ARN) of the Capacity Reservation.
+     */
+    CapacityReservationArn: string;
+    /**
+     * The ID of the Capacity Reservation Fleet to which the Capacity Reservation belongs. Only valid for Capacity Reservations that were created by a Capacity Reservation Fleet.
+     */
+    CapacityReservationFleetId: string;
+    /**
+     * The date and time at which the Capacity Reservation was created.
+     */
+    CreateDate: string;
+    /**
+     * The delivery method for a future-dated Capacity Reservation. `incremental` indicates that the requested capacity is delivered in addition to any running instances and reserved capacity that you have in your account at the requested date and time.
+     */
+    DeliveryPreference: string;
+    /**
+     * The ID of the Capacity Reservation.
+     */
+    Id: string;
+    /**
+     * Returns the type of instance for which the capacity is reserved. For example: `m4.large` .
+     */
+    InstanceType: string;
+    /**
+     * The ID of the AWS account that owns the Capacity Reservation.
+     */
+    OwnerId: string;
+    /**
+     * The type of Capacity Reservation.
+     */
+    ReservationType: string;
+    /**
+     * The date and time at which the Capacity Reservation was started.
+     */
+    StartDate: string;
+    /**
+     * The current state of the Capacity Reservation. A Capacity Reservation can be in one of the following states:
+     *
+     * - `active` - The capacity is available for use.
+     * - `expired` - The Capacity Reservation expired automatically at the date and time specified in your reservation request. The reserved capacity is no longer available for your use.
+     * - `cancelled` - The Capacity Reservation was canceled. The reserved capacity is no longer available for your use.
+     * - `pending` - The Capacity Reservation request was successful but the capacity provisioning is still pending.
+     * - `failed` - The Capacity Reservation request has failed. A request can fail due to request parameters that are not valid, capacity constraints, or instance limit constraints. You can view a failed request for 60 minutes.
+     * - `scheduled` - ( *Future-dated Capacity Reservations* ) The future-dated Capacity Reservation request was approved and the Capacity Reservation is scheduled for delivery on the requested start date.
+     * - `payment-pending` - ( *Capacity Blocks* ) The upfront payment has not been processed yet.
+     * - `payment-failed` - ( *Capacity Blocks* ) The upfront payment was not processed in the 12-hour time frame. Your Capacity Block was released.
+     * - `assessing` - ( *Future-dated Capacity Reservations* ) Amazon EC2 is assessing your request for a future-dated Capacity Reservation.
+     * - `delayed` - ( *Future-dated Capacity Reservations* ) Amazon EC2 encountered a delay in provisioning the requested future-dated Capacity Reservation. Amazon EC2 is unable to deliver the requested capacity by the requested start date and time.
+     * - `unsupported` - ( *Future-dated Capacity Reservations* ) Amazon EC2 can't support the future-dated Capacity Reservation request due to capacity constraints. You can view unsupported requests for 30 days. The Capacity Reservation will not be delivered.
+     */
+    State: string;
+    /**
+     * Returns the tenancy of the Capacity Reservation. For example: `dedicated` .
+     */
+    Tenancy: string;
+    /**
+     * Returns the total number of instances for which the Capacity Reservation reserves capacity. For example: `15` .
+     */
+    TotalInstanceCount: number;
+};
+/**
+ * An array of key-value pairs to apply to this resource.
+ *
+ * For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .
+ */
+export type TagSpecification = {
+    /**
+     * The type of resource to tag. Specify `capacity-reservation` .
+     */
+    ResourceType?: string | undefined;
+    /**
+     * The tags to apply to the resource.
+     */
+    Tags?: Tag[] | undefined;
+};
+//# sourceMappingURL=aws-ec2-capacityreservation.d.ts.map

package/out/exports/resources.generated/aws-ec2-capacityreservationfleet.d.ts

@@ -0,0 +1,117 @@
+import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
+export type EC2CapacityReservationFleet = ResourceDefinitionWithAttributes<"AWS::EC2::CapacityReservationFleet", EC2CapacityReservationFleetProps, EC2CapacityReservationFleetAttribs>;
+/**
+ * Creates a new Capacity Reservation Fleet with the specified attributes. For more information, see [Capacity Reservation Fleets](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/cr-fleets.html) in the *Amazon EC2 User Guide* .
+ */
+export type EC2CapacityReservationFleetProps = {
+    /**
+     * The strategy used by the Capacity Reservation Fleet to determine which of the specified instance types to use. Currently, only the `prioritized` allocation strategy is supported. For more information, see [Allocation strategy](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/crfleet-concepts.html#allocation-strategy) in the *Amazon EC2 User Guide* .
+     *
+     * Valid values: `prioritized`
+     */
+    AllocationStrategy?: string | undefined;
+    /**
+     * The date and time at which the Capacity Reservation Fleet expires. When the Capacity Reservation Fleet expires, its state changes to `expired` and all of the Capacity Reservations in the Fleet expire.
+     *
+     * The Capacity Reservation Fleet expires within an hour after the specified time. For example, if you specify `5/31/2019` , `13:30:55` , the Capacity Reservation Fleet is guaranteed to expire between `13:30:55` and `14:30:55` on `5/31/2019` .
+     */
+    EndDate?: string | undefined;
+    /**
+     * Indicates the type of instance launches that the Capacity Reservation Fleet accepts. All Capacity Reservations in the Fleet inherit this instance matching criteria.
+     *
+     * Currently, Capacity Reservation Fleets support `open` instance matching criteria only. This means that instances that have matching attributes (instance type, platform, and Availability Zone) run in the Capacity Reservations automatically. Instances do not need to explicitly target a Capacity Reservation Fleet to use its reserved capacity.
+     */
+    InstanceMatchCriteria?: "open" | undefined;
+    /**
+     * Information about the instance types for which to reserve the capacity.
+     */
+    InstanceTypeSpecifications?: InstanceTypeSpecification[] | undefined;
+    /**
+     * Used to add an end date to a Capacity Reservation Fleet that has no end date and time. To add an end date to a Capacity Reservation Fleet, specify `true` for this paramater and specify the end date and time (in UTC time format) for the *EndDate* parameter.
+     */
+    NoRemoveEndDate?: boolean | undefined;
+    /**
+     * Used to remove an end date from a Capacity Reservation Fleet that is configured to end automatically at a specific date and time. To remove the end date from a Capacity Reservation Fleet, specify `true` for this paramater and omit the *EndDate* parameter.
+     */
+    RemoveEndDate?: boolean | undefined;
+    /**
+     * The tags to assign to the Capacity Reservation Fleet. The tags are automatically assigned to the Capacity Reservations in the Fleet.
+     */
+    TagSpecifications?: TagSpecification[] | undefined;
+    /**
+     * Indicates the tenancy of the Capacity Reservation Fleet. All Capacity Reservations in the Fleet inherit this tenancy. The Capacity Reservation Fleet can have one of the following tenancy settings:
+     *
+     * - `default` - The Capacity Reservation Fleet is created on hardware that is shared with other AWS accounts .
+     * - `dedicated` - The Capacity Reservations are created on single-tenant hardware that is dedicated to a single AWS account .
+     */
+    Tenancy?: "default" | undefined;
+    /**
+     * The total number of capacity units to be reserved by the Capacity Reservation Fleet. This value, together with the instance type weights that you assign to each instance type used by the Fleet determine the number of instances for which the Fleet reserves capacity. Both values are based on units that make sense for your workload. For more information, see [Total target capacity](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/crfleet-concepts.html#target-capacity) in the *Amazon EC2 User Guide* .
+     * @min 1
+     * @max 25000
+     */
+    TotalTargetCapacity?: number | undefined;
+};
+export type EC2CapacityReservationFleetAttribs = {
+    /**
+     * The ID of the Capacity Reservation Fleet.
+     */
+    CapacityReservationFleetId: string;
+};
+/**
+ * Specifies information about an instance type to use in a Capacity Reservation Fleet.
+ *
+ * `InstanceTypeSpecification` is a property of the [AWS::EC2::CapacityReservationFleet](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-capacityreservationfleet.html) resource.
+ */
+export type InstanceTypeSpecification = {
+    /**
+     * The Availability Zone in which the Capacity Reservation Fleet reserves the capacity. A Capacity Reservation Fleet can't span Availability Zones. All instance type specifications that you specify for the Fleet must use the same Availability Zone.
+     */
+    AvailabilityZone?: string | undefined;
+    /**
+     * The ID of the Availability Zone in which the Capacity Reservation Fleet reserves the capacity. A Capacity Reservation Fleet can't span Availability Zones. All instance type specifications that you specify for the Fleet must use the same Availability Zone.
+     */
+    AvailabilityZoneId?: string | undefined;
+    /**
+     * Indicates whether the Capacity Reservation Fleet supports EBS-optimized instances types. This optimization provides dedicated throughput to Amazon EBS and an optimized configuration stack to provide optimal I/O performance. This optimization isn't available with all instance types. Additional usage charges apply when using EBS-optimized instance types.
+     */
+    EbsOptimized?: boolean | undefined;
+    /**
+     * The type of operating system for which the Capacity Reservation Fleet reserves capacity.
+     */
+    InstancePlatform?: string | undefined;
+    /**
+     * The instance type for which the Capacity Reservation Fleet reserves capacity.
+     */
+    InstanceType?: string | undefined;
+    /**
+     * The priority to assign to the instance type. This value is used to determine which of the instance types specified for the Fleet should be prioritized for use. A lower value indicates a high priority. For more information, see [Instance type priority](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/crfleet-concepts.html#instance-priority) in the *Amazon EC2 User Guide* .
+     * @min 0
+     * @max 999
+     */
+    Priority?: number | undefined;
+    /**
+     * The number of capacity units provided by the specified instance type. This value, together with the total target capacity that you specify for the Fleet determine the number of instances for which the Fleet reserves capacity. Both values are based on units that make sense for your workload. For more information, see [Total target capacity](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/crfleet-concepts.html#target-capacity) in the Amazon EC2 User Guide.
+     *
+     * Valid Range: Minimum value of `0.001` . Maximum value of `99.999` .
+     */
+    Weight?: number | undefined;
+};
+/**
+ * The tags to apply to a resource when the resource is being created. When you specify a tag, you must specify the resource type to tag, otherwise the request will fail.
+ *
+ * > The `Valid Values` lists all the resource types that can be tagged. However, the action you're using might not support tagging all of these resource types. If you try to tag a resource type that is unsupported for the action you're using, you'll get an error.
+ */
+export type TagSpecification = {
+    /**
+     * The type of resource to tag on creation. Specify `capacity-reservation-fleet` .
+     *
+     * To tag a resource after it has been created, see [CreateTags](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateTags.html) .
+     */
+    ResourceType?: string | undefined;
+    /**
+     * The tags to apply to the resource.
+     */
+    Tags?: Tag[] | undefined;
+};
+//# sourceMappingURL=aws-ec2-capacityreservationfleet.d.ts.map

package/out/exports/resources.generated/aws-ec2-carriergateway.d.ts

@@ -0,0 +1,30 @@
+import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
+export type EC2CarrierGateway = ResourceDefinitionWithAttributes<"AWS::EC2::CarrierGateway", EC2CarrierGatewayProps, EC2CarrierGatewayAttribs>;
+/**
+ * Creates a carrier gateway. For more information about carrier gateways, see [Carrier gateways](https://docs.aws.amazon.com/wavelength/latest/developerguide/how-wavelengths-work.html#wavelength-carrier-gateway) in the *AWS Wavelength Developer Guide* .
+ */
+export type EC2CarrierGatewayProps = {
+    /**
+     * The tags assigned to the carrier gateway.
+     */
+    Tags?: Tag[] | undefined;
+    /**
+     * The ID of the VPC associated with the carrier gateway.
+     */
+    VpcId: string;
+};
+export type EC2CarrierGatewayAttribs = {
+    /**
+     * The ID of the carrier gateway.
+     */
+    CarrierGatewayId: string;
+    /**
+     * The AWS account ID of the owner of the carrier gateway.
+     */
+    OwnerId: string;
+    /**
+     * The state of the carrier gateway.
+     */
+    State: string;
+};
+//# sourceMappingURL=aws-ec2-carriergateway.d.ts.map

package/out/exports/resources.generated/aws-ec2-clientvpnauthorizationrule.d.ts

@@ -0,0 +1,31 @@
+import type { ResourceDefinitionWithAttributes } from "../main.ts";
+export type EC2ClientVpnAuthorizationRule = ResourceDefinitionWithAttributes<"AWS::EC2::ClientVpnAuthorizationRule", EC2ClientVpnAuthorizationRuleProps, EC2ClientVpnAuthorizationRuleAttribs>;
+/**
+ * Specifies an ingress authorization rule to add to a Client VPN endpoint. Ingress authorization rules act as firewall rules that grant access to networks. You must configure ingress authorization rules to enable clients to access resources in AWS or on-premises networks.
+ */
+export type EC2ClientVpnAuthorizationRuleProps = {
+    /**
+     * The ID of the group to grant access to, for example, the Active Directory group or identity provider (IdP) group. Required if `AuthorizeAllGroups` is `false` or not specified.
+     */
+    AccessGroupId?: string | undefined;
+    /**
+     * Indicates whether to grant access to all clients. Specify `true` to grant all clients who successfully establish a VPN connection access to the network. Must be set to `true` if `AccessGroupId` is not specified.
+     */
+    AuthorizeAllGroups?: boolean | undefined;
+    /**
+     * The ID of the Client VPN endpoint.
+     */
+    ClientVpnEndpointId: string;
+    /**
+     * A brief description of the authorization rule.
+     */
+    Description?: string | undefined;
+    /**
+     * The IPv4 address range, in CIDR notation, of the network for which access is being authorized.
+     */
+    TargetNetworkCidr: string;
+};
+export type EC2ClientVpnAuthorizationRuleAttribs = {
+    Id: string;
+};
+//# sourceMappingURL=aws-ec2-clientvpnauthorizationrule.d.ts.map

package/out/exports/resources.generated/aws-ec2-clientvpnendpoint.d.ts

@@ -0,0 +1,235 @@
+import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
+export type EC2ClientVpnEndpoint = ResourceDefinitionWithAttributes<"AWS::EC2::ClientVpnEndpoint", EC2ClientVpnEndpointProps, EC2ClientVpnEndpointAttribs>;
+/**
+ * Specifies a Client VPN endpoint. A Client VPN endpoint is the resource you create and configure to enable and manage client VPN sessions. It is the destination endpoint at which all client VPN sessions are terminated.
+ */
+export type EC2ClientVpnEndpointProps = {
+    /**
+     * Information about the authentication method to be used to authenticate clients.
+     */
+    AuthenticationOptions: ClientAuthenticationRequest[];
+    /**
+     * The IPv4 address range, in CIDR notation, from which to assign client IP addresses. The address range cannot overlap with the local CIDR of the VPC in which the associated subnet is located, or the routes that you add manually. The address range cannot be changed after the Client VPN endpoint has been created. Client CIDR range must have a size of at least /22 and must not be greater than /12.
+     */
+    ClientCidrBlock: string;
+    /**
+     * The options for managing connection authorization for new client connections.
+     */
+    ClientConnectOptions?: ClientConnectOptions | undefined;
+    /**
+     * Options for enabling a customizable text banner that will be displayed on AWS provided clients when a VPN session is established.
+     */
+    ClientLoginBannerOptions?: ClientLoginBannerOptions | undefined;
+    /**
+     * Client route enforcement is a feature of the Client VPN service that helps enforce administrator defined routes on devices connected through the VPN. T his feature helps improve your security posture by ensuring that network traffic originating from a connected client is not inadvertently sent outside the VPN tunnel.
+     *
+     * Client route enforcement works by monitoring the route table of a connected device for routing policy changes to the VPN connection. If the feature detects any VPN routing policy modifications, it will automatically force an update to the route table, reverting it back to the expected route configurations.
+     */
+    ClientRouteEnforcementOptions?: ClientRouteEnforcementOptions | undefined;
+    /**
+     * Information about the client connection logging options.
+     *
+     * If you enable client connection logging, data about client connections is sent to a Cloudwatch Logs log stream. The following information is logged:
+     *
+     * - Client connection requests
+     * - Client connection results (successful and unsuccessful)
+     * - Reasons for unsuccessful client connection requests
+     * - Client connection termination time
+     */
+    ConnectionLogOptions: ConnectionLogOptions;
+    /**
+     * A brief description of the Client VPN endpoint.
+     */
+    Description?: string | undefined;
+    /**
+     * Indicates whether the client VPN session is disconnected after the maximum `sessionTimeoutHours` is reached. If `true` , users are prompted to reconnect client VPN. If `false` , client VPN attempts to reconnect automatically. The default value is `true` .
+     */
+    DisconnectOnSessionTimeout?: boolean | undefined;
+    /**
+     * Information about the DNS servers to be used for DNS resolution. A Client VPN endpoint can have up to two DNS servers. If no DNS server is specified, the DNS address configured on the device is used for the DNS server.
+     */
+    DnsServers?: string[] | undefined;
+    /**
+     * The IDs of one or more security groups to apply to the target network. You must also specify the ID of the VPC that contains the security groups.
+     */
+    SecurityGroupIds?: string[] | undefined;
+    /**
+     * Specify whether to enable the self-service portal for the Client VPN endpoint.
+     *
+     * Default Value: `enabled`
+     */
+    SelfServicePortal?: string | undefined;
+    /**
+     * The ARN of the server certificate. For more information, see the [AWS Certificate Manager User Guide](https://docs.aws.amazon.com/acm/latest/userguide/) .
+     */
+    ServerCertificateArn: string;
+    /**
+     * The maximum VPN session duration time in hours.
+     *
+     * Valid values: `8 | 10 | 12 | 24`
+     *
+     * Default value: `24`
+     */
+    SessionTimeoutHours?: number | undefined;
+    /**
+     * Indicates whether split-tunnel is enabled on the AWS Client VPN endpoint.
+     *
+     * By default, split-tunnel on a VPN endpoint is disabled.
+     *
+     * For information about split-tunnel VPN endpoints, see [Split-tunnel AWS Client VPN endpoint](https://docs.aws.amazon.com/vpn/latest/clientvpn-admin/split-tunnel-vpn.html) in the *AWS Client VPN Administrator Guide* .
+     */
+    SplitTunnel?: boolean | undefined;
+    /**
+     * The tags to apply to the Client VPN endpoint during creation.
+     */
+    TagSpecifications?: TagSpecification[] | undefined;
+    /**
+     * The transport protocol to be used by the VPN session.
+     *
+     * Default value: `udp`
+     */
+    TransportProtocol?: string | undefined;
+    /**
+     * The ID of the VPC to associate with the Client VPN endpoint. If no security group IDs are specified in the request, the default security group for the VPC is applied.
+     */
+    VpcId?: string | undefined;
+    /**
+     * The port number to assign to the Client VPN endpoint for TCP and UDP traffic.
+     *
+     * Valid Values: `443` | `1194`
+     *
+     * Default Value: `443`
+     */
+    VpnPort?: number | undefined;
+};
+export type EC2ClientVpnEndpointAttribs = {
+    Id: string;
+};
+/**
+ * Information about the client certificate to be used for authentication.
+ */
+export type CertificateAuthenticationRequest = {
+    /**
+     * The ARN of the client certificate. The certificate must be signed by a certificate authority (CA) and it must be provisioned in AWS Certificate Manager (ACM).
+     */
+    ClientRootCertificateChainArn: string;
+};
+/**
+ * Describes the authentication method to be used by a Client VPN endpoint. For more information, see [Authentication](https://docs.aws.amazon.com/vpn/latest/clientvpn-admin/authentication-authrization.html#client-authentication) in the *AWS Client VPN Administrator Guide* .
+ */
+export type ClientAuthenticationRequest = {
+    /**
+     * Information about the Active Directory to be used, if applicable. You must provide this information if *Type* is `directory-service-authentication` .
+     */
+    ActiveDirectory?: DirectoryServiceAuthenticationRequest | undefined;
+    /**
+     * Information about the IAM SAML identity provider, if applicable.
+     */
+    FederatedAuthentication?: FederatedAuthenticationRequest | undefined;
+    /**
+     * Information about the authentication certificates to be used, if applicable. You must provide this information if *Type* is `certificate-authentication` .
+     */
+    MutualAuthentication?: CertificateAuthenticationRequest | undefined;
+    /**
+     * The type of client authentication to be used.
+     */
+    Type: string;
+};
+/**
+ * Indicates whether client connect options are enabled. The default is `false` (not enabled).
+ */
+export type ClientConnectOptions = {
+    /**
+     * Indicates whether client connect options are enabled. The default is `false` (not enabled).
+     */
+    Enabled: boolean;
+    /**
+     * The Amazon Resource Name (ARN) of the AWS Lambda function used for connection authorization.
+     */
+    LambdaFunctionArn?: string | undefined;
+};
+/**
+ * Options for enabling a customizable text banner that will be displayed on AWS provided clients when a VPN session is established.
+ */
+export type ClientLoginBannerOptions = {
+    /**
+     * Customizable text that will be displayed in a banner on AWS provided clients when a VPN session is established. UTF-8 encoded characters only. Maximum of 1400 characters.
+     */
+    BannerText?: string | undefined;
+    /**
+     * Enable or disable a customizable text banner that will be displayed on AWS provided clients when a VPN session is established.
+     *
+     * Valid values: `true | false`
+     *
+     * Default value: `false`
+     */
+    Enabled: boolean;
+};
+/**
+ * Client Route Enforcement is a feature of Client VPN that helps enforce administrator defined routes on devices connected through the VPN. This feature helps improve your security posture by ensuring that network traffic originating from a connected client is not inadvertently sent outside the VPN tunnel.
+ *
+ * Client Route Enforcement works by monitoring the route table of a connected device for routing policy changes to the VPN connection. If the feature detects any VPN routing policy modifications, it will automatically force an update to the route table, reverting it back to the expected route configurations.
+ */
+export type ClientRouteEnforcementOptions = {
+    /**
+     * Enable or disable Client Route Enforcement. The state can either be `true` (enabled) or `false` (disabled). The default is `false` .
+     *
+     * Valid values: `true | false`
+     *
+     * Default value: `false`
+     */
+    Enforced?: boolean | undefined;
+};
+/**
+ * Describes the client connection logging options for the Client VPN endpoint.
+ */
+export type ConnectionLogOptions = {
+    /**
+     * The name of the CloudWatch Logs log group. Required if connection logging is enabled.
+     */
+    CloudwatchLogGroup?: string | undefined;
+    /**
+     * The name of the CloudWatch Logs log stream to which the connection data is published.
+     */
+    CloudwatchLogStream?: string | undefined;
+    /**
+     * Indicates whether connection logging is enabled.
+     */
+    Enabled: boolean;
+};
+/**
+ * Describes the Active Directory to be used for client authentication.
+ */
+export type DirectoryServiceAuthenticationRequest = {
+    /**
+     * The ID of the Active Directory to be used for authentication.
+     */
+    DirectoryId: string;
+};
+/**
+ * The IAM SAML identity provider used for federated authentication.
+ */
+export type FederatedAuthenticationRequest = {
+    /**
+     * The Amazon Resource Name (ARN) of the IAM SAML identity provider.
+     */
+    SAMLProviderArn: string;
+    /**
+     * The Amazon Resource Name (ARN) of the IAM SAML identity provider for the self-service portal.
+     */
+    SelfServiceSAMLProviderArn?: string | undefined;
+};
+/**
+ * Specifies the tags to apply to the Client VPN endpoint.
+ */
+export type TagSpecification = {
+    /**
+     * The type of resource to tag. To tag a Client VPN endpoint, `ResourceType` must be `client-vpn-endpoint` .
+     */
+    ResourceType: string;
+    /**
+     * The tags to apply to the resource.
+     */
+    Tags: Tag[];
+};
+//# sourceMappingURL=aws-ec2-clientvpnendpoint.d.ts.map

package/out/exports/resources.generated/aws-ec2-clientvpnroute.d.ts

@@ -0,0 +1,36 @@
+import type { ResourceDefinitionWithAttributes } from "../main.ts";
+export type EC2ClientVpnRoute = ResourceDefinitionWithAttributes<"AWS::EC2::ClientVpnRoute", EC2ClientVpnRouteProps, EC2ClientVpnRouteAttribs>;
+/**
+ * Specifies a network route to add to a Client VPN endpoint. Each Client VPN endpoint has a route table that describes the available destination network routes. Each route in the route table specifies the path for traffic to specific resources or networks.
+ *
+ * A target network association must be created before you can specify a route. If you're setting up all the components of a Client VPN endpoint at the same time, you must use the [DependsOn Attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-dependson.html) to declare a dependency on the `AWS::EC2::ClientVpnTargetNetworkAssociation` resource.
+ */
+export type EC2ClientVpnRouteProps = {
+    /**
+     * The ID of the Client VPN endpoint to which to add the route.
+     */
+    ClientVpnEndpointId: string;
+    /**
+     * A brief description of the route.
+     */
+    Description?: string | undefined;
+    /**
+     * The IPv4 address range, in CIDR notation, of the route destination. For example:
+     *
+     * - To add a route for Internet access, enter `0.0.0.0/0`
+     * - To add a route for a peered VPC, enter the peered VPC's IPv4 CIDR range
+     * - To add a route for an on-premises network, enter the AWS Site-to-Site VPN connection's IPv4 CIDR range
+     * - To add a route for the local network, enter the client CIDR range
+     */
+    DestinationCidrBlock: string;
+    /**
+     * The ID of the subnet through which you want to route traffic. The specified subnet must be an existing target network of the Client VPN endpoint.
+     *
+     * Alternatively, if you're adding a route for the local network, specify `local` .
+     */
+    TargetVpcSubnetId: string;
+};
+export type EC2ClientVpnRouteAttribs = {
+    Id: string;
+};
+//# sourceMappingURL=aws-ec2-clientvpnroute.d.ts.map

package/out/exports/resources.generated/aws-ec2-clientvpntargetnetworkassociation.d.ts

@@ -0,0 +1,19 @@
+import type { ResourceDefinitionWithAttributes } from "../main.ts";
+export type EC2ClientVpnTargetNetworkAssociation = ResourceDefinitionWithAttributes<"AWS::EC2::ClientVpnTargetNetworkAssociation", EC2ClientVpnTargetNetworkAssociationProps, EC2ClientVpnTargetNetworkAssociationAttribs>;
+/**
+ * Specifies a target network to associate with a Client VPN endpoint. A target network is a subnet in a VPC. You can associate multiple subnets from the same VPC with a Client VPN endpoint. You can associate only one subnet in each Availability Zone. We recommend that you associate at least two subnets to provide Availability Zone redundancy.
+ */
+export type EC2ClientVpnTargetNetworkAssociationProps = {
+    /**
+     * The ID of the Client VPN endpoint.
+     */
+    ClientVpnEndpointId: string;
+    /**
+     * The ID of the subnet to associate with the Client VPN endpoint.
+     */
+    SubnetId: string;
+};
+export type EC2ClientVpnTargetNetworkAssociationAttribs = {
+    Id: string;
+};
+//# sourceMappingURL=aws-ec2-clientvpntargetnetworkassociation.d.ts.map