@propulsionworks/cloudformation 0.0.1 → 0.1.0

package/out/exports/resources.generated/aws-ec2-verifiedaccessgroup.d.ts

@@ -0,0 +1,69 @@
+import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
+export type EC2VerifiedAccessGroup = ResourceDefinitionWithAttributes<"AWS::EC2::VerifiedAccessGroup", EC2VerifiedAccessGroupProps, EC2VerifiedAccessGroupAttribs>;
+/**
+ * An AWS Verified Access group is a collection of AWS Verified Access endpoints who's associated applications have similar security requirements. Each instance within a Verified Access group shares an Verified Access policy. For example, you can group all Verified Access instances associated with "sales" applications together and use one common Verified Access policy.
+ */
+export type EC2VerifiedAccessGroupProps = {
+    /**
+     * A description for the AWS Verified Access group.
+     */
+    Description?: string | undefined;
+    /**
+     * The Verified Access policy document.
+     */
+    PolicyDocument?: string | undefined;
+    /**
+     * The status of the Verified Access policy.
+     */
+    PolicyEnabled?: boolean | undefined;
+    /**
+     * The options for additional server side encryption.
+     */
+    SseSpecification?: SseSpecification | undefined;
+    /**
+     * The tags.
+     */
+    Tags?: Tag[] | undefined;
+    /**
+     * The ID of the AWS Verified Access instance.
+     */
+    VerifiedAccessInstanceId: string;
+};
+export type EC2VerifiedAccessGroupAttribs = {
+    /**
+     * The creation time.
+     */
+    CreationTime: string;
+    /**
+     * The last updated time.
+     */
+    LastUpdatedTime: string;
+    /**
+     * The ID of the AWS account that owns the group.
+     */
+    Owner: string;
+    /**
+     * The ARN of the Verified Access group.
+     */
+    VerifiedAccessGroupArn: string;
+    /**
+     * The ID of the Verified Access group.
+     */
+    VerifiedAccessGroupId: string;
+};
+/**
+ * AWS Verified Access provides server side encryption by default to data at rest using AWS -owned KMS keys. You also have the option of using customer managed KMS keys, which can be specified using the options below.
+ */
+export type SseSpecification = {
+    /**
+     * Enable or disable the use of customer managed KMS keys for server side encryption.
+     *
+     * Valid values: `True` | `False`
+     */
+    CustomerManagedKeyEnabled?: boolean | undefined;
+    /**
+     * The ARN of the KMS key.
+     */
+    KmsKeyArn?: string | undefined;
+};
+//# sourceMappingURL=aws-ec2-verifiedaccessgroup.d.ts.map

package/out/exports/resources.generated/aws-ec2-verifiedaccessinstance.d.ts

@@ -0,0 +1,141 @@
+import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
+export type EC2VerifiedAccessInstance = ResourceDefinitionWithAttributes<"AWS::EC2::VerifiedAccessInstance", EC2VerifiedAccessInstanceProps, EC2VerifiedAccessInstanceAttribs>;
+/**
+ * An AWS Verified Access instance is a regional entity that evaluates application requests and grants access only when your security requirements are met.
+ */
+export type EC2VerifiedAccessInstanceProps = {
+    /**
+     * The custom subdomain.
+     */
+    CidrEndpointsCustomSubDomain?: string | undefined;
+    /**
+     * A description for the AWS Verified Access instance.
+     */
+    Description?: string | undefined;
+    /**
+     * Indicates whether support for Federal Information Processing Standards (FIPS) is enabled on the instance.
+     */
+    FipsEnabled?: boolean | undefined;
+    /**
+     * The logging configuration for the Verified Access instances.
+     */
+    LoggingConfigurations?: VerifiedAccessLogs | undefined;
+    /**
+     * The tags.
+     */
+    Tags?: Tag[] | undefined;
+    /**
+     * The IDs of the AWS Verified Access trust providers.
+     */
+    VerifiedAccessTrustProviderIds?: string[] | undefined;
+    /**
+     * The IDs of the AWS Verified Access trust providers.
+     */
+    VerifiedAccessTrustProviders?: VerifiedAccessTrustProvider[] | undefined;
+};
+export type EC2VerifiedAccessInstanceAttribs = {
+    /**
+     * The name servers.
+     */
+    CidrEndpointsCustomSubDomainNameServers: string[];
+    /**
+     * The creation time.
+     */
+    CreationTime: string;
+    /**
+     * The last updated time.
+     */
+    LastUpdatedTime: string;
+    /**
+     * The ID of the Verified Access instance.
+     */
+    VerifiedAccessInstanceId: string;
+};
+/**
+ * Describes the options for Verified Access logs.
+ */
+export type VerifiedAccessLogs = {
+    /**
+     * CloudWatch Logs logging destination.
+     */
+    CloudWatchLogs?: {
+        /**
+         * Indicates whether logging is enabled.
+         */
+        Enabled?: boolean | undefined;
+        /**
+         * The ID of the CloudWatch Logs log group.
+         */
+        LogGroup?: string | undefined;
+    } | undefined;
+    /**
+     * Indicates whether to include trust data sent by trust providers in the logs.
+     */
+    IncludeTrustContext?: boolean | undefined;
+    /**
+     * Kinesis logging destination.
+     */
+    KinesisDataFirehose?: {
+        /**
+         * The ID of the delivery stream.
+         */
+        DeliveryStream?: string | undefined;
+        /**
+         * Indicates whether logging is enabled.
+         */
+        Enabled?: boolean | undefined;
+    } | undefined;
+    /**
+     * The logging version.
+     *
+     * Valid values: `ocsf-0.1` | `ocsf-1.0.0-rc.2`
+     */
+    LogVersion?: string | undefined;
+    /**
+     * Amazon S3 logging options.
+     */
+    S3?: {
+        /**
+         * The bucket name.
+         */
+        BucketName?: string | undefined;
+        /**
+         * The ID of the AWS account that owns the Amazon S3 bucket.
+         */
+        BucketOwner?: string | undefined;
+        /**
+         * Indicates whether logging is enabled.
+         */
+        Enabled?: boolean | undefined;
+        /**
+         * The bucket prefix.
+         */
+        Prefix?: string | undefined;
+    } | undefined;
+};
+/**
+ * A trust provider is a third-party entity that creates, maintains, and manages identity information for users and devices. When an application request is made, the identity information sent by the trust provider is evaluated by Verified Access before allowing or denying the application request.
+ */
+export type VerifiedAccessTrustProvider = {
+    /**
+     * A description for the AWS Verified Access trust provider.
+     */
+    Description?: string | undefined;
+    /**
+     * The type of device-based trust provider.
+     */
+    DeviceTrustProviderType?: string | undefined;
+    /**
+     * The type of Verified Access trust provider.
+     */
+    TrustProviderType?: string | undefined;
+    /**
+     * The type of user-based trust provider.
+     */
+    UserTrustProviderType?: string | undefined;
+    /**
+     * The ID of the AWS Verified Access trust provider.
+     */
+    VerifiedAccessTrustProviderId?: string | undefined;
+};
+//# sourceMappingURL=aws-ec2-verifiedaccessinstance.d.ts.map

package/out/exports/resources.generated/aws-ec2-verifiedaccesstrustprovider.d.ts

@@ -0,0 +1,154 @@
+import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
+export type EC2VerifiedAccessTrustProvider = ResourceDefinitionWithAttributes<"AWS::EC2::VerifiedAccessTrustProvider", EC2VerifiedAccessTrustProviderProps, EC2VerifiedAccessTrustProviderAttribs>;
+/**
+ * A trust provider is a third-party entity that creates, maintains, and manages identity information for users and devices. When an application request is made, the identity information sent by the trust provider is evaluated by Verified Access before allowing or denying the application request.
+ */
+export type EC2VerifiedAccessTrustProviderProps = {
+    /**
+     * A description for the AWS Verified Access trust provider.
+     */
+    Description?: string | undefined;
+    /**
+     * The options for device-identity trust provider.
+     */
+    DeviceOptions?: DeviceOptions | undefined;
+    /**
+     * The type of device-based trust provider.
+     */
+    DeviceTrustProviderType?: string | undefined;
+    /**
+     * The OpenID Connect (OIDC) options.
+     */
+    NativeApplicationOidcOptions?: NativeApplicationOidcOptions | undefined;
+    /**
+     * The options for an OpenID Connect-compatible user-identity trust provider.
+     */
+    OidcOptions?: OidcOptions | undefined;
+    /**
+     * The identifier to be used when working with policy rules.
+     */
+    PolicyReferenceName: string;
+    /**
+     * The options for additional server side encryption.
+     */
+    SseSpecification?: {
+        /**
+         * Whether to encrypt the policy with the provided key or disable encryption
+         */
+        CustomerManagedKeyEnabled?: boolean | undefined;
+        /**
+         * KMS Key Arn used to encrypt the group policy
+         */
+        KmsKeyArn?: string | undefined;
+    } | undefined;
+    /**
+     * The tags.
+     */
+    Tags?: Tag[] | undefined;
+    /**
+     * The type of Verified Access trust provider.
+     */
+    TrustProviderType: string;
+    /**
+     * The type of user-based trust provider.
+     */
+    UserTrustProviderType?: string | undefined;
+};
+export type EC2VerifiedAccessTrustProviderAttribs = {
+    /**
+     * The creation time.
+     */
+    CreationTime: string;
+    /**
+     * The last updated time.
+     */
+    LastUpdatedTime: string;
+    /**
+     * The ID of the Verified Access trust provider.
+     */
+    VerifiedAccessTrustProviderId: string;
+};
+/**
+ * Describes the options for an AWS Verified Access device-identity based trust provider.
+ */
+export type DeviceOptions = {
+    /**
+     * The URL AWS Verified Access will use to verify the authenticity of the device tokens.
+     */
+    PublicSigningKeyUrl?: string | undefined;
+    /**
+     * The ID of the tenant application with the device-identity provider.
+     */
+    TenantId?: string | undefined;
+};
+/**
+ * Describes the OpenID Connect (OIDC) options.
+ */
+export type NativeApplicationOidcOptions = {
+    /**
+     * The authorization endpoint of the IdP.
+     */
+    AuthorizationEndpoint?: string | undefined;
+    /**
+     * The OAuth 2.0 client identifier.
+     */
+    ClientId?: string | undefined;
+    /**
+     * The OAuth 2.0 client secret.
+     */
+    ClientSecret?: string | undefined;
+    /**
+     * The OIDC issuer identifier of the IdP.
+     */
+    Issuer?: string | undefined;
+    /**
+     * The public signing key endpoint.
+     */
+    PublicSigningKeyEndpoint?: string | undefined;
+    /**
+     * The set of user claims to be requested from the IdP.
+     */
+    Scope?: string | undefined;
+    /**
+     * The token endpoint of the IdP.
+     */
+    TokenEndpoint?: string | undefined;
+    /**
+     * The user info endpoint of the IdP.
+     */
+    UserInfoEndpoint?: string | undefined;
+};
+/**
+ * Describes the options for an OpenID Connect-compatible user-identity trust provider.
+ */
+export type OidcOptions = {
+    /**
+     * The OIDC authorization endpoint.
+     */
+    AuthorizationEndpoint?: string | undefined;
+    /**
+     * The client identifier.
+     */
+    ClientId?: string | undefined;
+    /**
+     * The client secret.
+     */
+    ClientSecret?: string | undefined;
+    /**
+     * The OIDC issuer.
+     */
+    Issuer?: string | undefined;
+    /**
+     * The OpenID Connect (OIDC) scope specified.
+     */
+    Scope?: string | undefined;
+    /**
+     * The OIDC token endpoint.
+     */
+    TokenEndpoint?: string | undefined;
+    /**
+     * The OIDC user info endpoint.
+     */
+    UserInfoEndpoint?: string | undefined;
+};
+//# sourceMappingURL=aws-ec2-verifiedaccesstrustprovider.d.ts.map

package/out/exports/resources.generated/aws-ec2-volume.d.ts

@@ -0,0 +1,139 @@
+import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
+export type EC2Volume = ResourceDefinitionWithAttributes<"AWS::EC2::Volume", EC2VolumeProps, EC2VolumeAttribs>;
+/**
+ * Specifies an Amazon Elastic Block Store (Amazon EBS) volume.
+ *
+ * When you use AWS CloudFormation to update an Amazon EBS volume that modifies `Iops` , `Size` , or `VolumeType` , there is a cooldown period before another operation can occur. This can cause your stack to report being in `UPDATE_IN_PROGRESS` or `UPDATE_ROLLBACK_IN_PROGRESS` for long periods of time.
+ *
+ * Amazon EBS does not support sizing down an Amazon EBS volume. AWS CloudFormation does not attempt to modify an Amazon EBS volume to a smaller size on rollback.
+ *
+ * Some common scenarios when you might encounter a cooldown period for Amazon EBS include:
+ *
+ * - You successfully update an Amazon EBS volume and the update succeeds. When you attempt another update within the cooldown window, that update will be subject to a cooldown period.
+ * - You successfully update an Amazon EBS volume and the update succeeds but another change in your `update-stack` call fails. The rollback will be subject to a cooldown period.
+ *
+ * For more information, see [Requirements for EBS volume modifications](https://docs.aws.amazon.com/ebs/latest/userguide/modify-volume-requirements.html) .
+ *
+ * *DeletionPolicy attribute*
+ *
+ * To control how AWS CloudFormation handles the volume when the stack is deleted, set a deletion policy for your volume. You can choose to retain the volume, to delete the volume, or to create a snapshot of the volume. For more information, see [DeletionPolicy attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-deletionpolicy.html) .
+ *
+ * > If you set a deletion policy that creates a snapshot, all tags on the volume are included in the snapshot.
+ */
+export type EC2VolumeProps = {
+    /**
+     * Indicates whether the volume is auto-enabled for I/O operations. By default, Amazon EBS disables I/O to the volume from attached EC2 instances when it determines that a volume's data is potentially inconsistent. If the consistency of the volume is not a concern, and you prefer that the volume be made available immediately if it's impaired, you can configure the volume to automatically enable I/O.
+     */
+    AutoEnableIO?: boolean | undefined;
+    /**
+     * The ID of the Availability Zone in which to create the volume. For example, `us-east-1a` .
+     */
+    AvailabilityZone: string;
+    /**
+     * Indicates whether the volume should be encrypted. The effect of setting the encryption state to `true` depends on the volume origin (new or from a snapshot), starting encryption state, ownership, and whether encryption by default is enabled. For more information, see [Encryption by default](https://docs.aws.amazon.com/ebs/latest/userguide/work-with-ebs-encr.html#encryption-by-default) in the *Amazon EBS User Guide* .
+     *
+     * Encrypted Amazon EBS volumes must be attached to instances that support Amazon EBS encryption. For more information, see [Supported instance types](https://docs.aws.amazon.com/ebs/latest/userguide/ebs-encryption-requirements.html#ebs-encryption_supported_instances) .
+     */
+    Encrypted?: boolean | undefined;
+    /**
+     * The number of I/O operations per second (IOPS). For `gp3` , `io1` , and `io2` volumes, this represents the number of IOPS that are provisioned for the volume. For `gp2` volumes, this represents the baseline performance of the volume and the rate at which the volume accumulates I/O credits for bursting.
+     *
+     * The following are the supported values for each volume type:
+     *
+     * - `gp3` : 3,000 - 16,000 IOPS
+     * - `io1` : 100 - 64,000 IOPS
+     * - `io2` : 100 - 256,000 IOPS
+     *
+     * For `io2` volumes, you can achieve up to 256,000 IOPS on [instances built on the Nitro System](https://docs.aws.amazon.com/ec2/latest/instancetypes/ec2-nitro-instances.html) . On other instances, you can achieve performance up to 32,000 IOPS.
+     *
+     * This parameter is required for `io1` and `io2` volumes. The default for `gp3` volumes is 3,000 IOPS. This parameter is not supported for `gp2` , `st1` , `sc1` , or `standard` volumes.
+     */
+    Iops?: number | undefined;
+    /**
+     * The identifier of the AWS KMS key to use for Amazon EBS encryption. If `KmsKeyId` is specified, the encrypted state must be `true` .
+     *
+     * If you omit this property and your account is enabled for encryption by default, or *Encrypted* is set to `true` , then the volume is encrypted using the default key specified for your account. If your account does not have a default key, then the volume is encrypted using the AWS managed key .
+     *
+     * Alternatively, if you want to specify a different key, you can specify one of the following:
+     *
+     * - Key ID. For example, 1234abcd-12ab-34cd-56ef-1234567890ab.
+     * - Key alias. Specify the alias for the key, prefixed with `alias/` . For example, for a key with the alias `my_cmk` , use `alias/my_cmk` . Or to specify the AWS managed key , use `alias/aws/ebs` .
+     * - Key ARN. For example, arn:aws:kms:us-east-1:012345678910:key/1234abcd-12ab-34cd-56ef-1234567890ab.
+     * - Alias ARN. For example, arn:aws:kms:us-east-1:012345678910:alias/ExampleAlias.
+     */
+    KmsKeyId?: string | undefined;
+    /**
+     * Indicates whether Amazon EBS Multi-Attach is enabled.
+     *
+     * AWS CloudFormation does not currently support updating a single-attach volume to be multi-attach enabled, updating a multi-attach enabled volume to be single-attach, or updating the size or number of I/O operations per second (IOPS) of a multi-attach enabled volume.
+     */
+    MultiAttachEnabled?: boolean | undefined;
+    /**
+     * The Amazon Resource Name (ARN) of the Outpost.
+     */
+    OutpostArn?: string | undefined;
+    /**
+     * The size of the volume, in GiBs. You must specify either a snapshot ID or a volume size. If you specify a snapshot, the default is the snapshot size. You can specify a volume size that is equal to or larger than the snapshot size.
+     *
+     * The following are the supported volumes sizes for each volume type:
+     *
+     * - `gp2` and `gp3` : 1 - 16,384 GiB
+     * - `io1` : 4 - 16,384 GiB
+     * - `io2` : 4 - 65,536 GiB
+     * - `st1` and `sc1` : 125 - 16,384 GiB
+     * - `standard` : 1 - 1024 GiB
+     */
+    Size?: number | undefined;
+    /**
+     * The snapshot from which to create the volume. You must specify either a snapshot ID or a volume size.
+     */
+    SnapshotId?: string | undefined;
+    /**
+     * The tags to apply to the volume during creation.
+     */
+    Tags?: Tag[] | undefined;
+    /**
+     * The throughput to provision for a volume, with a maximum of 1,000 MiB/s.
+     *
+     * This parameter is valid only for `gp3` volumes. The default value is 125.
+     *
+     * Valid Range: Minimum value of 125. Maximum value of 1000.
+     */
+    Throughput?: number | undefined;
+    /**
+     * Specifies the Amazon EBS Provisioned Rate for Volume Initialization (volume initialization rate), in MiB/s, at which to download the snapshot blocks from Amazon S3 to the volume. This is also known as *volume initialization* . Specifying a volume initialization rate ensures that the volume is initialized at a predictable and consistent rate after creation.
+     *
+     * This parameter is supported only for volumes created from snapshots. Omit this parameter if:
+     *
+     * - You want to create the volume using fast snapshot restore. You must specify a snapshot that is enabled for fast snapshot restore. In this case, the volume is fully initialized at creation.
+     *
+     * > If you specify a snapshot that is enabled for fast snapshot restore and a volume initialization rate, the volume will be initialized at the specified rate instead of fast snapshot restore.
+     * - You want to create a volume that is initialized at the default rate.
+     *
+     * For more information, see [Initialize Amazon EBS volumes](https://docs.aws.amazon.com/ebs/latest/userguide/initalize-volume.html) in the *Amazon EC2 User Guide* .
+     *
+     * Valid range: 100 - 300 MiB/s
+     */
+    VolumeInitializationRate?: number | undefined;
+    /**
+     * The volume type. This parameter can be one of the following values:
+     *
+     * - General Purpose SSD: `gp2` | `gp3`
+     * - Provisioned IOPS SSD: `io1` | `io2`
+     * - Throughput Optimized HDD: `st1`
+     * - Cold HDD: `sc1`
+     * - Magnetic: `standard`
+     *
+     * For more information, see [Amazon EBS volume types](https://docs.aws.amazon.com/ebs/latest/userguide/ebs-volume-types.html) .
+     *
+     * Default: `gp2`
+     */
+    VolumeType?: string | undefined;
+};
+export type EC2VolumeAttribs = {
+    /**
+     * The ID of the volume.
+     */
+    VolumeId: string;
+};
+//# sourceMappingURL=aws-ec2-volume.d.ts.map

package/out/exports/resources.generated/aws-ec2-volumeattachment.d.ts

@@ -0,0 +1,26 @@
+import type { ResourceDefinition } from "../main.ts";
+export type EC2VolumeAttachment = ResourceDefinition<"AWS::EC2::VolumeAttachment", EC2VolumeAttachmentProps>;
+/**
+ * Attaches an Amazon EBS volume to a running instance and exposes it to the instance with the specified device name.
+ *
+ * Before this resource can be deleted (and therefore the volume detached), you must first unmount the volume in the instance. Failure to do so results in the volume being stuck in the busy state while it is trying to detach, which could possibly damage the file system or the data it contains.
+ *
+ * If an Amazon EBS volume is the root device of an instance, it cannot be detached while the instance is in the "running" state. To detach the root volume, stop the instance first.
+ *
+ * If the root volume is detached from an instance with an AWS Marketplace product code, then the product codes from that volume are no longer associated with the instance.
+ */
+export type EC2VolumeAttachmentProps = {
+    /**
+     * The device name (for example, `/dev/sdh` or `xvdh` ).
+     */
+    Device?: string | undefined;
+    /**
+     * The ID of the instance to which the volume attaches. This value can be a reference to an [`AWS::EC2::Instance`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-instance.html) resource, or it can be the physical ID of an existing EC2 instance.
+     */
+    InstanceId: string;
+    /**
+     * The ID of the Amazon EBS volume. The volume and instance must be within the same Availability Zone. This value can be a reference to an [`AWS::EC2::Volume`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-ebs-volume.html) resource, or it can be the volume ID of an existing Amazon EBS volume.
+     */
+    VolumeId: string;
+};
+//# sourceMappingURL=aws-ec2-volumeattachment.d.ts.map

package/out/exports/resources.generated/aws-ec2-vpc.d.ts

@@ -0,0 +1,77 @@
+import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
+export type EC2VPC = ResourceDefinitionWithAttributes<"AWS::EC2::VPC", EC2VPCProps, EC2VPCAttribs>;
+/**
+ * Specifies a virtual private cloud (VPC).
+ *
+ * To add an IPv6 CIDR block to the VPC, see [AWS::EC2::VPCCidrBlock](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpccidrblock.html) .
+ *
+ * For more information, see [Virtual private clouds (VPC)](https://docs.aws.amazon.com/vpc/latest/userguide/configure-your-vpc.html) in the *Amazon VPC User Guide* .
+ */
+export type EC2VPCProps = {
+    /**
+     * The IPv4 network range for the VPC, in CIDR notation. For example, `10.0.0.0/16` . We modify the specified CIDR block to its canonical form; for example, if you specify `100.68.0.18/18` , we modify it to `100.68.0.0/18` .
+     *
+     * You must specify either `CidrBlock` or `Ipv4IpamPoolId` .
+     */
+    CidrBlock?: string | undefined;
+    /**
+     * Indicates whether the instances launched in the VPC get DNS hostnames. If enabled, instances in the VPC get DNS hostnames; otherwise, they do not. Disabled by default for nondefault VPCs. For more information, see [DNS attributes in your VPC](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-dns.html#vpc-dns-support) .
+     *
+     * You can only enable DNS hostnames if you've enabled DNS support.
+     */
+    EnableDnsHostnames?: boolean | undefined;
+    /**
+     * Indicates whether the DNS resolution is supported for the VPC. If enabled, queries to the Amazon provided DNS server at the 169.254.169.253 IP address, or the reserved IP address at the base of the VPC network range "plus two" succeed. If disabled, the Amazon provided DNS service in the VPC that resolves public DNS hostnames to IP addresses is not enabled. Enabled by default. For more information, see [DNS attributes in your VPC](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-dns.html#vpc-dns-support) .
+     */
+    EnableDnsSupport?: boolean | undefined;
+    /**
+     * The allowed tenancy of instances launched into the VPC.
+     *
+     * - `default` : An instance launched into the VPC runs on shared hardware by default, unless you explicitly specify a different tenancy during instance launch.
+     * - `dedicated` : An instance launched into the VPC runs on dedicated hardware by default, unless you explicitly specify a tenancy of `host` during instance launch. You cannot specify a tenancy of `default` during instance launch.
+     *
+     * Updating `InstanceTenancy` requires no replacement only if you are updating its value from `dedicated` to `default` . Updating `InstanceTenancy` from `default` to `dedicated` requires replacement.
+     */
+    InstanceTenancy?: string | undefined;
+    /**
+     * The ID of an IPv4 IPAM pool you want to use for allocating this VPC's CIDR. For more information, see [What is IPAM?](https://docs.aws.amazon.com//vpc/latest/ipam/what-is-it-ipam.html) in the *Amazon VPC IPAM User Guide* .
+     *
+     * You must specify either `CidrBlock` or `Ipv4IpamPoolId` .
+     */
+    Ipv4IpamPoolId?: string | undefined;
+    /**
+     * The netmask length of the IPv4 CIDR you want to allocate to this VPC from an Amazon VPC IP Address Manager (IPAM) pool. For more information about IPAM, see [What is IPAM?](https://docs.aws.amazon.com//vpc/latest/ipam/what-is-it-ipam.html) in the *Amazon VPC IPAM User Guide* .
+     */
+    Ipv4NetmaskLength?: number | undefined;
+    /**
+     * The tags for the VPC.
+     */
+    Tags?: Tag[] | undefined;
+};
+export type EC2VPCAttribs = {
+    /**
+     * The primary IPv4 CIDR block for the VPC. For example, 10.0.0.0/16.
+     */
+    CidrBlock: string;
+    /**
+     * The association IDs of the IPv4 CIDR blocks for the VPC. For example, [ vpc-cidr-assoc-0280ab6b ].
+     */
+    CidrBlockAssociations: string[];
+    /**
+     * The ID of the default network ACL for the VPC. For example, acl-814dafe3.
+     */
+    DefaultNetworkAcl: string;
+    /**
+     * The ID of the default security group for the VPC. For example, sg-b178e0d3.
+     */
+    DefaultSecurityGroup: string;
+    /**
+     * The IPv6 CIDR blocks for the VPC. For example, [ 2001:db8:1234:1a00::/56 ].
+     */
+    Ipv6CidrBlocks: string[];
+    /**
+     * The ID of the VPC.
+     */
+    VpcId: string;
+};
+//# sourceMappingURL=aws-ec2-vpc.d.ts.map

package/out/exports/resources.generated/aws-ec2-vpcblockpublicaccessexclusion.d.ts

@@ -0,0 +1,53 @@
+import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
+export type EC2VPCBlockPublicAccessExclusion = ResourceDefinitionWithAttributes<"AWS::EC2::VPCBlockPublicAccessExclusion", EC2VPCBlockPublicAccessExclusionProps, EC2VPCBlockPublicAccessExclusionAttribs>;
+/**
+ * Create a VPC Block Public Access (BPA) exclusion. A VPC BPA exclusion is a mode that can be applied to a single VPC or subnet that exempts it from the account’s BPA mode and will allow bidirectional or egress-only access. You can create BPA exclusions for VPCs and subnets even when BPA is not enabled on the account to ensure that there is no traffic disruption to the exclusions when VPC BPA is turned on. To learn more about VPC BPA, see [Block public access to VPCs and subnets](https://docs.aws.amazon.com/vpc/latest/userguide/security-vpc-bpa.html) in the *Amazon VPC User Guide* .
+ */
+export type EC2VPCBlockPublicAccessExclusionProps = {
+    /**
+     * The desired VPC Block Public Access mode for a specific VPC or subnet exclusion.
+     *
+     * - `allow-bidirectional` : Allow all internet traffic to and from the excluded VPCs and subnets.
+     * - `allow-egress` : Allow outbound internet traffic from the excluded VPCs and subnets. Block inbound internet traffic to the excluded VPCs and subnets. Only applies when VPC Block Public Access is set to `block-bidirectional` .
+     */
+    InternetGatewayExclusionMode: "allow-bidirectional" | "allow-egress";
+    /**
+     * The ID of the subnet you want to exclude. Required only if you don't specify VpcId.
+     */
+    SubnetId?: string | undefined;
+    /**
+     * An array of key-value pairs to apply to this resource.
+     */
+    Tags?: Tag[] | undefined;
+    /**
+     * The ID of the VPC you want to exclude. Required only if you don't specify SubnetId.
+     */
+    VpcId: string;
+} | {
+    /**
+     * The desired VPC Block Public Access mode for a specific VPC or subnet exclusion.
+     *
+     * - `allow-bidirectional` : Allow all internet traffic to and from the excluded VPCs and subnets.
+     * - `allow-egress` : Allow outbound internet traffic from the excluded VPCs and subnets. Block inbound internet traffic to the excluded VPCs and subnets. Only applies when VPC Block Public Access is set to `block-bidirectional` .
+     */
+    InternetGatewayExclusionMode: "allow-bidirectional" | "allow-egress";
+    /**
+     * The ID of the subnet you want to exclude. Required only if you don't specify VpcId.
+     */
+    SubnetId: string;
+    /**
+     * An array of key-value pairs to apply to this resource.
+     */
+    Tags?: Tag[] | undefined;
+    /**
+     * The ID of the VPC you want to exclude. Required only if you don't specify SubnetId.
+     */
+    VpcId?: string | undefined;
+};
+export type EC2VPCBlockPublicAccessExclusionAttribs = {
+    /**
+     * The ID of the exclusion.
+     */
+    ExclusionId: string;
+};
+//# sourceMappingURL=aws-ec2-vpcblockpublicaccessexclusion.d.ts.map