@propulsionworks/cloudformation 0.0.1 → 0.1.0

package/out/exports/resources.generated/aws-iot-domainconfiguration.d.ts

@@ -0,0 +1,149 @@
+import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
+export type IoTDomainConfiguration = ResourceDefinitionWithAttributes<"AWS::IoT::DomainConfiguration", IoTDomainConfigurationProps, IoTDomainConfigurationAttribs>;
+/**
+ * Specifies a domain configuration.
+ */
+export type IoTDomainConfigurationProps = {
+    /**
+     * An enumerated string that specifies the application-layer protocol.
+     */
+    ApplicationProtocol?: "SECURE_MQTT" | "MQTT_WSS" | "HTTPS" | "DEFAULT" | undefined;
+    /**
+     * An enumerated string that specifies the authentication type.
+     */
+    AuthenticationType?: "AWS_X509" | "CUSTOM_AUTH" | "AWS_SIGV4" | "CUSTOM_AUTH_X509" | "DEFAULT" | undefined;
+    /**
+     * An object that specifies the authorization service for a domain.
+     */
+    AuthorizerConfig?: AuthorizerConfig | undefined;
+    /**
+     * An object that specifies the client certificate configuration for a domain.
+     */
+    ClientCertificateConfig?: ClientCertificateConfig | undefined;
+    /**
+     * The name of the domain configuration. This value must be unique to a region.
+     * @minLength 1
+     * @maxLength 128
+     * @pattern ^[\w.-]+$
+     */
+    DomainConfigurationName?: string | undefined;
+    /**
+     * The status to which the domain configuration should be updated.
+     *
+     * Valid values: `ENABLED` | `DISABLED`
+     */
+    DomainConfigurationStatus?: "ENABLED" | "DISABLED" | undefined;
+    /**
+     * The name of the domain.
+     * @minLength 1
+     * @maxLength 253
+     */
+    DomainName?: string | undefined;
+    /**
+     * The ARNs of the certificates that AWS IoT passes to the device during the TLS handshake. Currently you can specify only one certificate ARN. This value is not required for AWS -managed domains.
+     */
+    ServerCertificateArns?: string[] | undefined;
+    /**
+     * The server certificate configuration.
+     *
+     * For more information, see [Configurable endpoints](https://docs.aws.amazon.com//iot/latest/developerguide/iot-custom-endpoints-configurable.html) from the AWS IoT Core Developer Guide.
+     */
+    ServerCertificateConfig?: ServerCertificateConfig | undefined;
+    /**
+     * The type of service delivered by the endpoint.
+     *
+     * > AWS IoT Core currently supports only the `DATA` service type.
+     */
+    ServiceType?: "DATA" | "CREDENTIAL_PROVIDER" | "JOBS" | undefined;
+    /**
+     * Metadata which can be used to manage the domain configuration.
+     *
+     * > For URI Request parameters use format: ...key1=value1&key2=value2...
+     * >
+     * > For the CLI command-line parameter use format: &&tags "key1=value1&key2=value2..."
+     * >
+     * > For the cli-input-json file use format: "tags": "key1=value1&key2=value2..."
+     */
+    Tags?: Tag[] | undefined;
+    /**
+     * An object that specifies the TLS configuration for a domain.
+     */
+    TlsConfig?: TlsConfig | undefined;
+    /**
+     * The certificate used to validate the server certificate and prove domain name ownership. This certificate must be signed by a public certificate authority. This value is not required for AWS -managed domains.
+     * @pattern ^arn:aws(-cn|-us-gov|-iso-b|-iso)?:acm:[a-z]{2}-(gov-|iso-|isob-)?[a-z]{4,9}-\d{1}:\d{12}:certificate/[a-zA-Z0-9/-]+$
+     */
+    ValidationCertificateArn?: string | undefined;
+};
+export type IoTDomainConfigurationAttribs = {
+    /**
+     * The Amazon Resource Name (ARN) of the domain configuration.
+     */
+    Arn: string;
+    /**
+     * The type of service delivered by the domain.
+     */
+    DomainType: "ENDPOINT" | "AWS_MANAGED" | "CUSTOMER_MANAGED";
+};
+/**
+ * An object that specifies the authorization service for a domain.
+ */
+export type AuthorizerConfig = {
+    /**
+     * A Boolean that specifies whether the domain configuration's authorization service can be overridden.
+     */
+    AllowAuthorizerOverride?: boolean | undefined;
+    /**
+     * The name of the authorization service for a domain configuration.
+     * @minLength 1
+     * @maxLength 128
+     * @pattern ^[\w=,@-]+$
+     */
+    DefaultAuthorizerName?: string | undefined;
+};
+/**
+ * An object that specifies the client certificate configuration for a domain.
+ */
+export type ClientCertificateConfig = {
+    /**
+     * The ARN of the Lambda function that IoT invokes after mutual TLS authentication during the connection.
+     * @minLength 1
+     * @maxLength 170
+     */
+    ClientCertificateCallbackArn?: string | undefined;
+};
+/**
+ * The server certificate configuration.
+ *
+ * For more information, see [Configurable endpoints](https://docs.aws.amazon.com//iot/latest/developerguide/iot-custom-endpoints-configurable.html) from the AWS IoT Core Developer Guide.
+ */
+export type ServerCertificateConfig = {
+    /**
+     * A Boolean value that indicates whether Online Certificate Status Protocol (OCSP) server certificate check is enabled or not. For more information, see [Configurable endpoints](https://docs.aws.amazon.com//iot/latest/developerguide/iot-custom-endpoints-configurable.html) from the AWS IoT Core Developer Guide.
+     */
+    EnableOCSPCheck?: boolean | undefined;
+    /**
+     * The Amazon Resource Name (ARN) for an X.509 certificate stored in ACM. If provided, AWS IoT Core will use this certificate to validate the signature of the received OCSP response. The OCSP responder must sign responses using either this authorized responder certificate or the issuing certificate, depending on whether the ARN is provided or not. The certificate must be in the same account and region as the domain configuration.
+     * @minLength 1
+     * @maxLength 2048
+     * @pattern ^arn:aws(-cn|-us-gov|-iso-b|-iso)?:acm:[a-z]{2}-(gov-|iso-|isob-)?[a-z]{4,9}-\d{1}:\d{12}:certificate/[a-zA-Z0-9/-]+$
+     */
+    OcspAuthorizedResponderArn?: string | undefined;
+    /**
+     * The Amazon Resource Name (ARN) for a Lambda function that acts as a Request for Comments (RFC) 6960-compliant Online Certificate Status Protocol (OCSP) responder, supporting basic OCSP responses. The Lambda function accepts a base64-encoding of the OCSP request in the Distinguished Encoding Rules (DER) format. The Lambda function's response is also a base64-encoded OCSP response in the DER format. The response size must not exceed 4 kilobytes (KiB). The Lambda function must be in the same account and region as the domain configuration.
+     * @minLength 1
+     * @maxLength 170
+     */
+    OcspLambdaArn?: string | undefined;
+};
+/**
+ * An object that specifies the TLS configuration for a domain.
+ */
+export type TlsConfig = {
+    /**
+     * The security policy for a domain configuration. For more information, see [Security policies](https://docs.aws.amazon.com/iot/latest/developerguide/transport-security.html#tls-policy-table) in the *AWS IoT Core developer guide* .
+     * @maxLength 128
+     */
+    SecurityPolicy?: string | undefined;
+};
+//# sourceMappingURL=aws-iot-domainconfiguration.d.ts.map

package/out/exports/resources.generated/aws-iot-fleetmetric.d.ts

@@ -0,0 +1,79 @@
+import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
+export type IoTFleetMetric = ResourceDefinitionWithAttributes<"AWS::IoT::FleetMetric", IoTFleetMetricProps, IoTFleetMetricAttribs>;
+/**
+ * Use the `AWS::IoT::FleetMetric` resource to declare a fleet metric.
+ */
+export type IoTFleetMetricProps = {
+    /**
+     * The field to aggregate.
+     */
+    AggregationField?: string | undefined;
+    /**
+     * The type of the aggregation query.
+     */
+    AggregationType?: AggregationType | undefined;
+    /**
+     * The fleet metric description.
+     */
+    Description?: string | undefined;
+    /**
+     * The name of the index to search.
+     */
+    IndexName?: string | undefined;
+    /**
+     * The name of the fleet metric to create.
+     */
+    MetricName: string;
+    /**
+     * The time in seconds between fleet metric emissions. Range [60(1 min), 86400(1 day)] and must be multiple of 60.
+     */
+    Period?: number | undefined;
+    /**
+     * The search query string.
+     */
+    QueryString?: string | undefined;
+    /**
+     * The query version.
+     */
+    QueryVersion?: string | undefined;
+    /**
+     * Metadata which can be used to manage the fleet metric.
+     */
+    Tags?: Tag[] | undefined;
+    /**
+     * Used to support unit transformation such as milliseconds to seconds. Must be a unit supported by CW metric. Default to null.
+     */
+    Unit?: string | undefined;
+};
+export type IoTFleetMetricAttribs = {
+    /**
+     * The time the fleet metric was created.
+     */
+    CreationDate: string;
+    /**
+     * The time the fleet metric was last modified.
+     */
+    LastModifiedDate: string;
+    /**
+     * The Amazon Resource Name (ARN) of the fleet metric.
+     */
+    MetricArn: string;
+    /**
+     * The fleet metric version.
+     */
+    Version: number;
+};
+/**
+ * The type of aggregation queries.
+ */
+export type AggregationType = {
+    /**
+     * The name of the aggregation type.
+     */
+    Name: string;
+    /**
+     * A list of the values of aggregation types.
+     */
+    Values: string[];
+};
+//# sourceMappingURL=aws-iot-fleetmetric.d.ts.map

package/out/exports/resources.generated/aws-iot-jobtemplate.d.ts

@@ -0,0 +1,190 @@
+import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
+export type IoTJobTemplate = ResourceDefinitionWithAttributes<"AWS::IoT::JobTemplate", IoTJobTemplateProps, IoTJobTemplateAttribs>;
+/**
+ * Represents a job template.
+ */
+export type IoTJobTemplateProps = {
+    /**
+     * The criteria that determine when and how a job abort takes place.
+     */
+    AbortConfig?: {
+        CriteriaList: AbortCriteria[];
+    } | undefined;
+    /**
+     * A description of the job template.
+     * @maxLength 2028
+     * @pattern [^\p{C}]+
+     */
+    Description: string;
+    /**
+     * The package version Amazon Resource Names (ARNs) that are installed on the device’s reserved named shadow ( `$package` ) when the job successfully completes.
+     *
+     * *Note:* Up to 25 package version ARNS are allowed.
+     */
+    DestinationPackageVersions?: string[] | undefined;
+    /**
+     * The job document.
+     *
+     * Required if you don't specify a value for `documentSource` .
+     * @maxLength 32768
+     */
+    Document?: string | undefined;
+    /**
+     * An S3 link, or S3 object URL, to the job document. The link is an Amazon S3 object URL and is required if you don't specify a value for `document` .
+     *
+     * For example, `--document-source https://s3. *region-code* .amazonaws.com/example-firmware/device-firmware.1.0`
+     *
+     * For more information, see [Methods for accessing a bucket](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-bucket-intro.html) .
+     * @minLength 1
+     * @maxLength 1350
+     */
+    DocumentSource?: string | undefined;
+    /**
+     * The ARN of the job to use as the basis for the job template.
+     */
+    JobArn?: string | undefined;
+    /**
+     * Allows you to create the criteria to retry a job.
+     */
+    JobExecutionsRetryConfig?: {
+        RetryCriteriaList?: RetryCriteria[] | undefined;
+    } | undefined;
+    /**
+     * Allows you to create a staged rollout of a job.
+     */
+    JobExecutionsRolloutConfig?: {
+        /**
+         * The rate of increase for a job rollout. This parameter allows you to define an exponential rate for a job rollout.
+         */
+        ExponentialRolloutRate?: ExponentialRolloutRate | undefined;
+        /**
+         * The maximum number of things that will be notified of a pending job, per minute. This parameter allows you to create a staged rollout.
+         */
+        MaximumPerMinute?: number | undefined;
+    } | undefined;
+    /**
+     * A unique identifier for the job template. We recommend using a UUID. Alpha-numeric characters, "-", and "_" are valid for use here.
+     * @minLength 1
+     * @maxLength 64
+     * @pattern [a-zA-Z0-9_-]+
+     */
+    JobTemplateId: string;
+    /**
+     * An optional configuration within the SchedulingConfig to setup a recurring maintenance window with a predetermined start time and duration for the rollout of a job document to all devices in a target group for a job.
+     */
+    MaintenanceWindows?: MaintenanceWindow[] | undefined;
+    /**
+     * Configuration for pre-signed S3 URLs.
+     */
+    PresignedUrlConfig?: {
+        ExpiresInSec?: number | undefined;
+        RoleArn: string;
+    } | undefined;
+    /**
+     * Metadata that can be used to manage the job template.
+     */
+    Tags?: Tag[] | undefined;
+    /**
+     * Specifies the amount of time each device has to finish its execution of the job. A timer is started when the job execution status is set to `IN_PROGRESS` . If the job execution status is not set to another terminal state before the timer expires, it will be automatically set to `TIMED_OUT` .
+     */
+    TimeoutConfig?: {
+        InProgressTimeoutInMinutes: number;
+    } | undefined;
+};
+export type IoTJobTemplateAttribs = {
+    /**
+     * The ARN of the job to use as the basis for the job template.
+     */
+    Arn: string;
+};
+/**
+ * The criteria that determine when and how a job abort takes place.
+ */
+export type AbortCriteria = {
+    /**
+     * The type of job action to take to initiate the job abort.
+     */
+    Action: Action;
+    /**
+     * The type of job execution failures that can initiate a job abort.
+     */
+    FailureType: FailureType;
+    /**
+     * The minimum number of things which must receive job execution notifications before the job can be aborted.
+     */
+    MinNumberOfExecutedThings: number;
+    /**
+     * The minimum percentage of job execution failures that must occur to initiate the job abort.
+     *
+     * AWS IoT Core supports up to two digits after the decimal (for example, 10.9 and 10.99, but not 10.999).
+     */
+    ThresholdPercentage: number;
+};
+export type Action = "CANCEL";
+/**
+ * Allows you to create an exponential rate of rollout for a job.
+ */
+export type ExponentialRolloutRate = {
+    /**
+     * The minimum number of things that will be notified of a pending job, per minute at the start of job rollout. This parameter allows you to define the initial rate of rollout.
+     */
+    BaseRatePerMinute: number;
+    /**
+     * The exponential factor to increase the rate of rollout for a job.
+     *
+     * AWS IoT Core supports up to one digit after the decimal (for example, 1.5, but not 1.55).
+     */
+    IncrementFactor: number;
+    /**
+     * The criteria to initiate the increase in rate of rollout for a job.
+     */
+    RateIncreaseCriteria: RateIncreaseCriteria;
+};
+export type FailureType = "FAILED" | "REJECTED" | "TIMED_OUT" | "ALL";
+export type JobRetryFailureType = "FAILED" | "TIMED_OUT" | "ALL";
+/**
+ * An optional configuration within the `SchedulingConfig` to setup a recurring maintenance window with a predetermined start time and duration for the rollout of a job document to all devices in a target group for a job.
+ */
+export type MaintenanceWindow = {
+    /**
+     * Displays the duration of the next maintenance window.
+     * @min 1
+     * @max 1430
+     */
+    DurationInMinutes?: number | undefined;
+    /**
+     * Displays the start time of the next maintenance window.
+     * @minLength 1
+     * @maxLength 256
+     */
+    StartTime?: string | undefined;
+};
+/**
+ * Allows you to define a criteria to initiate the increase in rate of rollout for a job.
+ */
+export type RateIncreaseCriteria = {
+    /**
+     * The threshold for number of notified things that will initiate the increase in rate of rollout.
+     */
+    NumberOfNotifiedThings?: number | undefined;
+    /**
+     * The threshold for number of succeeded things that will initiate the increase in rate of rollout.
+     */
+    NumberOfSucceededThings?: number | undefined;
+};
+/**
+ * The criteria that determines how many retries are allowed for each failure type for a job.
+ */
+export type RetryCriteria = {
+    /**
+     * The type of job execution failures that can initiate a job retry.
+     */
+    FailureType?: JobRetryFailureType | undefined;
+    /**
+     * The number of retries allowed for a failure type for the job.
+     * @min 0
+     * @max 10
+     */
+    NumberOfRetries?: number | undefined;
+};
+//# sourceMappingURL=aws-iot-jobtemplate.d.ts.map

package/out/exports/resources.generated/aws-iot-logging.d.ts

@@ -0,0 +1,30 @@
+import type { ResourceDefinition } from "../main.ts";
+export type IoTLogging = ResourceDefinition<"AWS::IoT::Logging", IoTLoggingProps>;
+/**
+ * Configure logging.
+ *
+ * > If you already set the log function of AWS IoT Core , you can't deploy the AWS Cloud Development Kit (AWS CDK) to change the logging settings. You can change the logging settings by either:
+ * >
+ * > - Importing the existing logging resource into your AWS CloudFormation stack, such as with the [infrastructure as code generator (IaC generator)](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/generate-IaC.html) .
+ * > - Calling `aws iot set-v2-logging-options --disable-all-logs` before creating a new CloudFormation stack. This command disables all AWS IoT logging. As a result, no AWS IoT logs will be delivered to Amazon CloudWatch until you re-enable logging.
+ */
+export type IoTLoggingProps = {
+    /**
+     * The account ID.
+     * @minLength 12
+     * @maxLength 12
+     * @pattern ^[0-9]{12}$
+     */
+    AccountId: string;
+    /**
+     * The default log level. Valid Values: `DEBUG | INFO | ERROR | WARN | DISABLED`
+     */
+    DefaultLogLevel: "ERROR" | "WARN" | "INFO" | "DEBUG" | "DISABLED";
+    /**
+     * The role ARN used for the log.
+     * @minLength 20
+     * @maxLength 2048
+     */
+    RoleArn: string;
+};
+//# sourceMappingURL=aws-iot-logging.d.ts.map

package/out/exports/resources.generated/aws-iot-mitigationaction.d.ts

@@ -0,0 +1,132 @@
+import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
+export type IoTMitigationAction = ResourceDefinitionWithAttributes<"AWS::IoT::MitigationAction", IoTMitigationActionProps, IoTMitigationActionAttribs>;
+/**
+ * Defines an action that can be applied to audit findings by using StartAuditMitigationActionsTask. For API reference, see [CreateMitigationAction](https://docs.aws.amazon.com/iot/latest/apireference/API_CreateMitigationAction.html) and for general information, see [Mitigation actions](https://docs.aws.amazon.com/iot/latest/developerguide/dd-mitigation-actions.html) .
+ */
+export type IoTMitigationActionProps = {
+    /**
+     * The friendly name of the mitigation action.
+     * @minLength 1
+     * @maxLength 128
+     * @pattern [a-zA-Z0-9:_-]+
+     */
+    ActionName?: string | undefined;
+    /**
+     * The set of parameters for this mitigation action. The parameters vary, depending on the kind of action you apply.
+     */
+    ActionParams: ActionParams;
+    /**
+     * The IAM role ARN used to apply this mitigation action.
+     */
+    RoleArn: string;
+    /**
+     * Metadata that can be used to manage the mitigation action.
+     */
+    Tags?: Tag[] | undefined;
+};
+export type IoTMitigationActionAttribs = {
+    /**
+     * The Amazon Resource Name (ARN) of the mitigation action.
+     */
+    MitigationActionArn: string;
+    /**
+     * The ID of the mitigation action.
+     */
+    MitigationActionId: string;
+};
+/**
+ * Defines the type of action and the parameters for that action.
+ */
+export type ActionParams = {
+    /**
+     * Specifies the group to which you want to add the devices.
+     */
+    AddThingsToThingGroupParams?: AddThingsToThingGroupParams | undefined;
+    /**
+     * Specifies the logging level and the role with permissions for logging. You cannot specify a logging level of `DISABLED` .
+     */
+    EnableIoTLoggingParams?: EnableIoTLoggingParams | undefined;
+    /**
+     * Specifies the topic to which the finding should be published.
+     */
+    PublishFindingToSnsParams?: PublishFindingToSnsParams | undefined;
+    /**
+     * Replaces the policy version with a default or blank policy. You specify the template name. Only a value of `BLANK_POLICY` is currently supported.
+     */
+    ReplaceDefaultPolicyVersionParams?: ReplaceDefaultPolicyVersionParams | undefined;
+    /**
+     * Specifies the new state for the CA certificate. Only a value of `DEACTIVATE` is currently supported.
+     */
+    UpdateCACertificateParams?: UpdateCACertificateParams | undefined;
+    /**
+     * Specifies the new state for a device certificate. Only a value of `DEACTIVATE` is currently supported.
+     */
+    UpdateDeviceCertificateParams?: UpdateDeviceCertificateParams | undefined;
+};
+/**
+ * Parameters used when defining a mitigation action that move a set of things to a thing group.
+ */
+export type AddThingsToThingGroupParams = {
+    /**
+     * Specifies if this mitigation action can move the things that triggered the mitigation action even if they are part of one or more dynamic thing groups.
+     */
+    OverrideDynamicGroups?: boolean | undefined;
+    /**
+     * The list of groups to which you want to add the things that triggered the mitigation action. You can add a thing to a maximum of 10 groups, but you can't add a thing to more than one group in the same hierarchy.
+     */
+    ThingGroupNames: string[];
+};
+/**
+ * Parameters used when defining a mitigation action that enable AWS IoT Core logging.
+ */
+export type EnableIoTLoggingParams = {
+    /**
+     * Specifies the type of information to be logged.
+     */
+    LogLevel: "DEBUG" | "INFO" | "ERROR" | "WARN" | "UNSET_VALUE";
+    /**
+     * The Amazon Resource Name (ARN) of the IAM role used for logging.
+     * @minLength 20
+     * @maxLength 2048
+     */
+    RoleArnForLogging: string;
+};
+/**
+ * Parameters to define a mitigation action that publishes findings to Amazon SNS. You can implement your own custom actions in response to the Amazon SNS messages.
+ */
+export type PublishFindingToSnsParams = {
+    /**
+     * The ARN of the topic to which you want to publish the findings.
+     * @minLength 20
+     * @maxLength 2048
+     */
+    TopicArn: string;
+};
+/**
+ * Parameters to define a mitigation action that adds a blank policy to restrict permissions.
+ */
+export type ReplaceDefaultPolicyVersionParams = {
+    /**
+     * The name of the template to be applied. The only supported value is `BLANK_POLICY` .
+     */
+    TemplateName: "BLANK_POLICY" | "UNSET_VALUE";
+};
+/**
+ * Parameters to define a mitigation action that changes the state of the CA certificate to inactive.
+ */
+export type UpdateCACertificateParams = {
+    /**
+     * The action that you want to apply to the CA certificate. The only supported value is `DEACTIVATE` .
+     */
+    Action: "DEACTIVATE" | "UNSET_VALUE";
+};
+/**
+ * Parameters to define a mitigation action that changes the state of the device certificate to inactive.
+ */
+export type UpdateDeviceCertificateParams = {
+    /**
+     * The action that you want to apply to the device certificate. The only supported value is `DEACTIVATE` .
+     */
+    Action: "DEACTIVATE" | "UNSET_VALUE";
+};
+//# sourceMappingURL=aws-iot-mitigationaction.d.ts.map

package/out/exports/resources.generated/aws-iot-policy.d.ts

@@ -0,0 +1,30 @@
+import type { ResourceDefinitionWithAttributes, TemplatePolicyDocument, Tag } from "../main.ts";
+export type IoTPolicy = ResourceDefinitionWithAttributes<"AWS::IoT::Policy", IoTPolicyProps, IoTPolicyAttribs>;
+/**
+ * Use the `AWS::IoT::Policy` resource to declare an AWS IoT policy. For more information about working with AWS IoT policies, see [Authorization](https://docs.aws.amazon.com/iot/latest/developerguide/authorization.html) in the *AWS IoT Developer Guide* .
+ */
+export type IoTPolicyProps = {
+    /**
+     * The JSON document that describes the policy.
+     * @minLength 1
+     * @maxLength 404600
+     * @policy
+     */
+    PolicyDocument: TemplatePolicyDocument;
+    /**
+     * The policy name.
+     */
+    PolicyName?: string | undefined;
+    Tags?: Tag[] | undefined;
+};
+export type IoTPolicyAttribs = {
+    /**
+     * The Amazon Resource Name (ARN) of the AWS IoT policy, such as `arn:aws:iot:us-east-2:123456789012:policy/MyPolicy` .
+     */
+    Arn: string;
+    /**
+     * The name of this policy.
+     */
+    Id: string;
+};
+//# sourceMappingURL=aws-iot-policy.d.ts.map

package/out/exports/resources.generated/aws-iot-policyprincipalattachment.d.ts

@@ -0,0 +1,21 @@
+import type { ResourceDefinitionWithAttributes } from "../main.ts";
+export type IoTPolicyPrincipalAttachment = ResourceDefinitionWithAttributes<"AWS::IoT::PolicyPrincipalAttachment", IoTPolicyPrincipalAttachmentProps, IoTPolicyPrincipalAttachmentAttribs>;
+/**
+ * Use the `AWS::IoT::PolicyPrincipalAttachment` resource to attach an AWS IoT policy to a principal (an X.509 certificate or other credential).
+ *
+ * For information about working with AWS IoT policies and principals, see [Authorization](https://docs.aws.amazon.com/iot/latest/developerguide/authorization.html) in the *AWS IoT Developer Guide* .
+ */
+export type IoTPolicyPrincipalAttachmentProps = {
+    /**
+     * The name of the AWS IoT policy.
+     */
+    PolicyName: string;
+    /**
+     * The principal, which can be a certificate ARN (as returned from the `CreateCertificate` operation) or an Amazon Cognito ID.
+     */
+    Principal: string;
+};
+export type IoTPolicyPrincipalAttachmentAttribs = {
+    Id: string;
+};
+//# sourceMappingURL=aws-iot-policyprincipalattachment.d.ts.map