@propulsionworks/cloudformation 0.0.1 → 0.1.0

package/out/exports/resources.generated/aws-lambda-function.d.ts

@@ -0,0 +1,374 @@
+import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
+export type LambdaFunction = ResourceDefinitionWithAttributes<"AWS::Lambda::Function", LambdaFunctionProps, LambdaFunctionAttribs>;
+/**
+ * The `AWS::Lambda::Function` resource creates a Lambda function. To create a function, you need a [deployment package](https://docs.aws.amazon.com/lambda/latest/dg/gettingstarted-package.html) and an [execution role](https://docs.aws.amazon.com/lambda/latest/dg/lambda-intro-execution-role.html) . The deployment package is a .zip file archive or container image that contains your function code. The execution role grants the function permission to use AWS services, such as Amazon CloudWatch Logs for log streaming and AWS X-Ray for request tracing.
+ *
+ * You set the package type to `Image` if the deployment package is a [container image](https://docs.aws.amazon.com/lambda/latest/dg/lambda-images.html) . For these functions, include the URI of the container image in the Amazon ECR registry in the [`ImageUri` property of the `Code` property](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-code.html#cfn-lambda-function-code-imageuri) . You do not need to specify the handler and runtime properties.
+ *
+ * You set the package type to `Zip` if the deployment package is a [.zip file archive](https://docs.aws.amazon.com/lambda/latest/dg/gettingstarted-package.html#gettingstarted-package-zip) . For these functions, specify the Amazon S3 location of your .zip file in the `Code` property. Alternatively, for Node.js and Python functions, you can define your function inline in the [`ZipFile` property of the `Code` property](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-code.html#cfn-lambda-function-code-zipfile) . In both cases, you must also specify the handler and runtime properties.
+ *
+ * You can use [code signing](https://docs.aws.amazon.com/lambda/latest/dg/configuration-codesigning.html) if your deployment package is a .zip file archive. To enable code signing for this function, specify the ARN of a code-signing configuration. When a user attempts to deploy a code package with `UpdateFunctionCode` , Lambda checks that the code package has a valid signature from a trusted publisher. The code-signing configuration includes a set of signing profiles, which define the trusted publishers for this function.
+ *
+ * When you update a `AWS::Lambda::Function` resource, CloudFormation calls the [UpdateFunctionConfiguration](https://docs.aws.amazon.com/lambda/latest/api/API_UpdateFunctionConfiguration.html) and [UpdateFunctionCode](https://docs.aws.amazon.com/lambda/latest/api/API_UpdateFunctionCode.html) Lambda APIs under the hood. Because these calls happen sequentially, and invocations can happen between these calls, your function may encounter errors in the time between the calls. For example, if you remove an environment variable, and the code that references that environment variable in the same CloudFormation update, you may see invocation errors related to a missing environment variable. To work around this, you can invoke your function against a version or alias by default, rather than the `$LATEST` version.
+ *
+ * Note that you configure [provisioned concurrency](https://docs.aws.amazon.com/lambda/latest/dg/provisioned-concurrency.html) on a `AWS::Lambda::Version` or a `AWS::Lambda::Alias` .
+ *
+ * For a complete introduction to Lambda functions, see [What is Lambda?](https://docs.aws.amazon.com/lambda/latest/dg/lambda-welcome.html) in the *Lambda developer guide.*
+ */
+export type LambdaFunctionProps = {
+    /**
+     * The instruction set architecture that the function supports. Enter a string array with one of the valid values (arm64 or x86_64). The default value is `x86_64` .
+     */
+    Architectures?: ("x86_64" | "arm64")[] | undefined;
+    /**
+     * The code for the function. You can define your function code in multiple ways:
+     *
+     * - For .zip deployment packages, you can specify the Amazon S3 location of the .zip file in the `S3Bucket` , `S3Key` , and `S3ObjectVersion` properties.
+     * - For .zip deployment packages, you can alternatively define the function code inline in the `ZipFile` property. This method works only for Node.js and Python functions.
+     * - For container images, specify the URI of your container image in the Amazon ECR registry in the `ImageUri` property.
+     */
+    Code: Code;
+    /**
+     * To enable code signing for this function, specify the ARN of a code-signing configuration. A code-signing configuration
+     * includes a set of signing profiles, which define the trusted publishers for this function.
+     * @pattern arn:(aws[a-zA-Z-]*)?:lambda:[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:code-signing-config:csc-[a-z0-9]{17}
+     */
+    CodeSigningConfigArn?: string | undefined;
+    /**
+     * A dead-letter queue configuration that specifies the queue or topic where Lambda sends asynchronous events when they fail processing. For more information, see [Dead-letter queues](https://docs.aws.amazon.com/lambda/latest/dg/invocation-async.html#invocation-dlq) .
+     */
+    DeadLetterConfig?: DeadLetterConfig | undefined;
+    /**
+     * A description of the function.
+     * @maxLength 256
+     */
+    Description?: string | undefined;
+    /**
+     * Environment variables that are accessible from function code during execution.
+     */
+    Environment?: Environment | undefined;
+    /**
+     * The size of the function's `/tmp` directory in MB. The default value is 512, but it can be any whole number between 512 and 10,240 MB.
+     */
+    EphemeralStorage?: EphemeralStorage | undefined;
+    /**
+     * Connection settings for an Amazon EFS file system. To connect a function to a file system, a mount target must be available in every Availability Zone that your function connects to. If your template contains an [AWS::EFS::MountTarget](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-efs-mounttarget.html) resource, you must also specify a `DependsOn` attribute to ensure that the mount target is created or updated before the function.
+     *
+     * For more information about using the `DependsOn` attribute, see [DependsOn Attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-dependson.html) .
+     */
+    FileSystemConfigs?: FileSystemConfig[] | undefined;
+    /**
+     * The name of the Lambda function, up to 64 characters in length. If you don't specify a name, AWS CloudFormation generates one.
+     *
+     * If you specify a name, you cannot perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name.
+     * @minLength 1
+     */
+    FunctionName?: string | undefined;
+    /**
+     * The name of the method within your code that Lambda calls to run your function. Handler is required if the deployment package is a .zip file archive. The format includes the file name. It can also include namespaces and other qualifiers, depending on the runtime. For more information, see [Lambda programming model](https://docs.aws.amazon.com/lambda/latest/dg/foundation-progmodel.html) .
+     * @maxLength 128
+     * @pattern ^[^\s]+$
+     */
+    Handler?: string | undefined;
+    /**
+     * Configuration values that override the container image Dockerfile settings. For more information, see [Container image settings](https://docs.aws.amazon.com/lambda/latest/dg/images-create.html#images-parms) .
+     */
+    ImageConfig?: ImageConfig | undefined;
+    /**
+     * The ARN of the AWS Key Management Service ( AWS KMS ) customer managed key that's used to encrypt the following resources:
+     *
+     * - The function's [environment variables](https://docs.aws.amazon.com/lambda/latest/dg/configuration-envvars.html#configuration-envvars-encryption) .
+     * - The function's [Lambda SnapStart](https://docs.aws.amazon.com/lambda/latest/dg/snapstart-security.html) snapshots.
+     * - When used with `SourceKMSKeyArn` , the unzipped version of the .zip deployment package that's used for function invocations. For more information, see [Specifying a customer managed key for Lambda](https://docs.aws.amazon.com/lambda/latest/dg/encrypt-zip-package.html#enable-zip-custom-encryption) .
+     * - The optimized version of the container image that's used for function invocations. Note that this is not the same key that's used to protect your container image in the Amazon Elastic Container Registry (Amazon ECR). For more information, see [Function lifecycle](https://docs.aws.amazon.com/lambda/latest/dg/images-create.html#images-lifecycle) .
+     *
+     * If you don't provide a customer managed key, Lambda uses an [AWS owned key](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-owned-cmk) or an [AWS managed key](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-managed-cmk) .
+     * @pattern ^(arn:(aws[a-zA-Z-]*)?:[a-z0-9-.]+:.*)|()$
+     */
+    KmsKeyArn?: string | undefined;
+    /**
+     * A list of [function layers](https://docs.aws.amazon.com/lambda/latest/dg/configuration-layers.html) to add to the function's execution environment. Specify each layer by its ARN, including the version.
+     */
+    Layers?: string[] | undefined;
+    /**
+     * The function's Amazon CloudWatch Logs configuration settings.
+     */
+    LoggingConfig?: LoggingConfig | undefined;
+    /**
+     * The amount of [memory available to the function](https://docs.aws.amazon.com/lambda/latest/dg/configuration-function-common.html#configuration-memory-console) at runtime. Increasing the function memory also increases its CPU allocation. The default value is 128 MB. The value can be any multiple of 1 MB. Note that new AWS accounts have reduced concurrency and memory quotas. AWS raises these quotas automatically based on your usage. You can also request a quota increase.
+     */
+    MemorySize?: number | undefined;
+    /**
+     * The type of deployment package. Set to `Image` for container image and set `Zip` for .zip file archive.
+     */
+    PackageType?: "Image" | "Zip" | undefined;
+    /**
+     * The status of your function's recursive loop detection configuration.
+     *
+     * When this value is set to `Allow` and Lambda detects your function being invoked as part of a recursive loop, it doesn't take any action.
+     *
+     * When this value is set to `Terminate` and Lambda detects your function being invoked as part of a recursive loop, it stops your function being invoked and notifies you.
+     */
+    RecursiveLoop?: RecursiveLoop | undefined;
+    /**
+     * The number of simultaneous executions to reserve for the function.
+     * @min 0
+     */
+    ReservedConcurrentExecutions?: number | undefined;
+    /**
+     * The Amazon Resource Name (ARN) of the function's execution role.
+     * @pattern ^arn:(aws[a-zA-Z-]*)?:iam::\d{12}:role/?[a-zA-Z_0-9+=,.@\-_/]+$
+     */
+    Role: string;
+    /**
+     * The identifier of the function's [runtime](https://docs.aws.amazon.com/lambda/latest/dg/lambda-runtimes.html) . Runtime is required if the deployment package is a .zip file archive. Specifying a runtime results in an error if you're deploying a function using a container image.
+     *
+     * The following list includes deprecated runtimes. Lambda blocks creating new functions and updating existing functions shortly after each runtime is deprecated. For more information, see [Runtime use after deprecation](https://docs.aws.amazon.com/lambda/latest/dg/lambda-runtimes.html#runtime-deprecation-levels) .
+     *
+     * For a list of all currently supported runtimes, see [Supported runtimes](https://docs.aws.amazon.com/lambda/latest/dg/lambda-runtimes.html#runtimes-supported) .
+     */
+    Runtime?: string | undefined;
+    /**
+     * Sets the runtime management configuration for a function's version. For more information, see [Runtime updates](https://docs.aws.amazon.com/lambda/latest/dg/runtimes-update.html) .
+     */
+    RuntimeManagementConfig?: RuntimeManagementConfig | undefined;
+    /**
+     * The function's [AWS Lambda SnapStart](https://docs.aws.amazon.com/lambda/latest/dg/snapstart.html) setting.
+     */
+    SnapStart?: SnapStart | undefined;
+    /**
+     * A list of [tags](https://docs.aws.amazon.com/lambda/latest/dg/tagging.html) to apply to the function.
+     *
+     * > You must have the `lambda:TagResource` , `lambda:UntagResource` , and `lambda:ListTags` permissions for your [IAM principal](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_terms-and-concepts.html) to manage the AWS CloudFormation stack. If you don't have these permissions, there might be unexpected behavior with stack-level tags propagating to the resource during resource creation and update.
+     */
+    Tags?: Tag[] | undefined;
+    /**
+     * The amount of time (in seconds) that Lambda allows a function to run before stopping it. The default is 3 seconds. The maximum allowed value is 900 seconds. For more information, see [Lambda execution environment](https://docs.aws.amazon.com/lambda/latest/dg/runtimes-context.html) .
+     * @min 1
+     */
+    Timeout?: number | undefined;
+    /**
+     * Set `Mode` to `Active` to sample and trace a subset of incoming requests with [X-Ray](https://docs.aws.amazon.com/lambda/latest/dg/services-xray.html) .
+     */
+    TracingConfig?: TracingConfig | undefined;
+    /**
+     * For network connectivity to AWS resources in a VPC, specify a list of security groups and subnets in the VPC. When you connect a function to a VPC, it can access resources and the internet only through that VPC. For more information, see [Configuring a Lambda function to access resources in a VPC](https://docs.aws.amazon.com/lambda/latest/dg/configuration-vpc.html) .
+     */
+    VpcConfig?: VpcConfig | undefined;
+};
+export type LambdaFunctionAttribs = {
+    /**
+     * The Amazon Resource Name (ARN) of the function.
+     */
+    Arn: string;
+    /**
+     * When set to ``PublishedVersions``, Lambda creates a snapshot of the execution environment when you publish a function version.
+     */
+    "SnapStartResponse.ApplyOn": "PublishedVersions" | "None";
+    /**
+     * When you provide a [qualified Amazon Resource Name (ARN)](https://docs.aws.amazon.com/lambda/latest/dg/configuration-versions.html#versioning-versions-using), this response element indicates whether SnapStart is activated for the specified function version.
+     */
+    "SnapStartResponse.OptimizationStatus": "On" | "Off";
+};
+/**
+ * The [deployment package](https://docs.aws.amazon.com/lambda/latest/dg/gettingstarted-package.html) for a Lambda function. To deploy a function defined as a container image, you specify the location of a container image in the Amazon ECR registry. For a .zip file deployment package, you can specify the location of an object in Amazon S3. For Node.js and Python functions, you can specify the function code inline in the template.
+ *
+ * > When you specify source code inline for a Node.js function, the `index` file that AWS CloudFormation creates uses the extension `.js` . This means that Lambda treats the file as a CommonJS module. ES modules aren't supported for inline functions.
+ *
+ * Changes to a deployment package in Amazon S3 or a container image in ECR are not detected automatically during stack updates. To update the function code, change the object key or version in the template.
+ */
+export type Code = {
+    /**
+     * URI of a [container image](https://docs.aws.amazon.com/lambda/latest/dg/lambda-images.html) in the Amazon ECR registry.
+     */
+    ImageUri?: string | undefined;
+    /**
+     * An Amazon S3 bucket in the same AWS Region as your function. The bucket can be in a different AWS account .
+     * @minLength 3
+     * @maxLength 63
+     * @pattern ^[0-9A-Za-z\.\-_]*(?<!\.)$
+     */
+    S3Bucket?: string | undefined;
+    /**
+     * The Amazon S3 key of the deployment package.
+     * @minLength 1
+     * @maxLength 1024
+     */
+    S3Key?: string | undefined;
+    /**
+     * For versioned objects, the version of the deployment package object to use.
+     * @minLength 1
+     * @maxLength 1024
+     */
+    S3ObjectVersion?: string | undefined;
+    /**
+     * The ARN of the AWS Key Management Service ( AWS KMS ) customer managed key that's used to encrypt your function's .zip deployment package. If you don't provide a customer managed key, Lambda uses an [AWS owned key](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-owned-cmk) .
+     * @pattern ^(arn:(aws[a-zA-Z-]*)?:[a-z0-9-.]+:.*)|()$
+     */
+    SourceKMSKeyArn?: string | undefined;
+    /**
+     * (Node.js and Python) The source code of your Lambda function. If you include your function source inline with this parameter, AWS CloudFormation places it in a file named `index` and zips it to create a [deployment package](https://docs.aws.amazon.com/lambda/latest/dg/gettingstarted-package.html) . This zip file cannot exceed 4MB. For the `Handler` property, the first part of the handler identifier must be `index` . For example, `index.handler` .
+     *
+     * > When you specify source code inline for a Node.js function, the `index` file that AWS CloudFormation creates uses the extension `.js` . This means that Lambda treats the file as a CommonJS module. ES modules aren't supported for inline functions.
+     *
+     * For JSON, you must escape quotes and special characters such as newline ( `\n` ) with a backslash.
+     *
+     * If you specify a function that interacts with an AWS CloudFormation custom resource, you don't have to write your own functions to send responses to the custom resource that invoked the function. AWS CloudFormation provides a response module ( [cfn-response](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/cfn-lambda-function-code-cfnresponsemodule.html) ) that simplifies sending responses. See [Using AWS Lambda with AWS CloudFormation](https://docs.aws.amazon.com/lambda/latest/dg/services-cloudformation.html) for details.
+     */
+    ZipFile?: string | undefined;
+};
+/**
+ * The [dead-letter queue](https://docs.aws.amazon.com/lambda/latest/dg/invocation-async-retain-records.html#invocation-dlq) for failed asynchronous invocations.
+ */
+export type DeadLetterConfig = {
+    /**
+     * The Amazon Resource Name (ARN) of an Amazon SQS queue or Amazon SNS topic.
+     * @pattern ^(arn:(aws[a-zA-Z-]*)?:[a-z0-9-.]+:.*)|()$
+     */
+    TargetArn?: string | undefined;
+};
+/**
+ * A function's environment variable settings. You can use environment variables to adjust your function's behavior without updating code. An environment variable is a pair of strings that are stored in a function's version-specific configuration.
+ */
+export type Environment = {
+    /**
+     * Environment variable key-value pairs. For more information, see [Using Lambda environment variables](https://docs.aws.amazon.com/lambda/latest/dg/configuration-envvars.html) .
+     *
+     * If the value of the environment variable is a time or a duration, enclose the value in quotes.
+     */
+    Variables?: Record<string, string> | undefined;
+};
+/**
+ * The size of the function's `/tmp` directory in MB. The default value is 512, but it can be any whole number between 512 and 10,240 MB.
+ */
+export type EphemeralStorage = {
+    /**
+     * The size of the function's `/tmp` directory.
+     * @min 512
+     * @max 10240
+     */
+    Size: number;
+};
+/**
+ * Details about the connection between a Lambda function and an [Amazon EFS file system](https://docs.aws.amazon.com/lambda/latest/dg/configuration-filesystem.html) .
+ */
+export type FileSystemConfig = {
+    /**
+     * The Amazon Resource Name (ARN) of the Amazon EFS access point that provides access to the file system.
+     * @maxLength 200
+     * @pattern ^arn:aws[a-zA-Z-]*:elasticfilesystem:[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:access-point/fsap-[a-f0-9]{17}$
+     */
+    Arn: string;
+    /**
+     * The path where the function can access the file system, starting with `/mnt/` .
+     * @maxLength 160
+     * @pattern ^/mnt/[a-zA-Z0-9-_.]+$
+     */
+    LocalMountPath: string;
+};
+/**
+ * Configuration values that override the container image Dockerfile settings. For more information, see [Container image settings](https://docs.aws.amazon.com/lambda/latest/dg/images-create.html#images-parms) .
+ */
+export type ImageConfig = {
+    /**
+     * Specifies parameters that you want to pass in with ENTRYPOINT. You can specify a maximum of 1,500 parameters in the list.
+     */
+    Command?: string[] | undefined;
+    /**
+     * Specifies the entry point to their application, which is typically the location of the runtime executable. You can specify a maximum of 1,500 string entries in the list.
+     */
+    EntryPoint?: string[] | undefined;
+    /**
+     * Specifies the working directory. The length of the directory string cannot exceed 1,000 characters.
+     */
+    WorkingDirectory?: string | undefined;
+};
+/**
+ * The function's Amazon CloudWatch Logs configuration settings.
+ */
+export type LoggingConfig = {
+    /**
+     * Set this property to filter the application logs for your function that Lambda sends to CloudWatch. Lambda only sends application logs at the selected level of detail and lower, where `TRACE` is the highest level and `FATAL` is the lowest.
+     */
+    ApplicationLogLevel?: "TRACE" | "DEBUG" | "INFO" | "WARN" | "ERROR" | "FATAL" | undefined;
+    /**
+     * The format in which Lambda sends your function's application and system logs to CloudWatch. Select between plain text and structured JSON.
+     */
+    LogFormat?: "Text" | "JSON" | undefined;
+    /**
+     * The name of the Amazon CloudWatch log group the function sends logs to. By default, Lambda functions send logs to a default log group named `/aws/lambda/<function name>` . To use a different log group, enter an existing log group or enter a new log group name.
+     * @minLength 1
+     * @maxLength 512
+     * @pattern [\.\-_/#A-Za-z0-9]+
+     */
+    LogGroup?: string | undefined;
+    /**
+     * Set this property to filter the system logs for your function that Lambda sends to CloudWatch. Lambda only sends system logs at the selected level of detail and lower, where `DEBUG` is the highest level and `WARN` is the lowest.
+     */
+    SystemLogLevel?: "DEBUG" | "INFO" | "WARN" | undefined;
+};
+/**
+ * The function recursion configuration.
+ */
+export type RecursiveLoop = "Allow" | "Terminate";
+/**
+ * Sets the runtime management configuration for a function's version. For more information, see [Runtime updates](https://docs.aws.amazon.com/lambda/latest/dg/runtimes-update.html) .
+ */
+export type RuntimeManagementConfig = {
+    /**
+     * The ARN of the runtime version you want the function to use.
+     *
+     * > This is only required if you're using the *Manual* runtime update mode.
+     */
+    RuntimeVersionArn?: string | undefined;
+    /**
+     * Specify the runtime update mode.
+     *
+     * - *Auto (default)* - Automatically update to the most recent and secure runtime version using a [Two-phase runtime version rollout](https://docs.aws.amazon.com/lambda/latest/dg/runtimes-update.html#runtime-management-two-phase) . This is the best choice for most customers to ensure they always benefit from runtime updates.
+     * - *FunctionUpdate* - Lambda updates the runtime of you function to the most recent and secure runtime version when you update your function. This approach synchronizes runtime updates with function deployments, giving you control over when runtime updates are applied and allowing you to detect and mitigate rare runtime update incompatibilities early. When using this setting, you need to regularly update your functions to keep their runtime up-to-date.
+     * - *Manual* - You specify a runtime version in your function configuration. The function will use this runtime version indefinitely. In the rare case where a new runtime version is incompatible with an existing function, this allows you to roll back your function to an earlier runtime version. For more information, see [Roll back a runtime version](https://docs.aws.amazon.com/lambda/latest/dg/runtimes-update.html#runtime-management-rollback) .
+     *
+     * *Valid Values* : `Auto` | `FunctionUpdate` | `Manual`
+     */
+    UpdateRuntimeOn: "Auto" | "FunctionUpdate" | "Manual";
+};
+/**
+ * The function's [AWS Lambda SnapStart](https://docs.aws.amazon.com/lambda/latest/dg/snapstart.html) setting.
+ */
+export type SnapStart = {
+    /**
+     * Set `ApplyOn` to `PublishedVersions` to create a snapshot of the initialized execution environment when you publish a function version.
+     */
+    ApplyOn: "PublishedVersions" | "None";
+};
+/**
+ * The function's [AWS X-Ray](https://docs.aws.amazon.com/lambda/latest/dg/services-xray.html) tracing configuration. To sample and record incoming requests, set `Mode` to `Active` .
+ */
+export type TracingConfig = {
+    /**
+     * The tracing mode.
+     */
+    Mode?: "Active" | "PassThrough" | undefined;
+};
+/**
+ * The VPC security groups and subnets that are attached to a Lambda function. When you connect a function to a VPC, Lambda creates an elastic network interface for each combination of security group and subnet in the function's VPC configuration. The function can only access resources and the internet through that VPC. For more information, see [VPC Settings](https://docs.aws.amazon.com/lambda/latest/dg/configuration-vpc.html) .
+ *
+ * > When you delete a function, AWS CloudFormation monitors the state of its network interfaces and waits for Lambda to delete them before proceeding. If the VPC is defined in the same stack, the network interfaces need to be deleted by Lambda before AWS CloudFormation can delete the VPC's resources.
+ * >
+ * > To monitor network interfaces, AWS CloudFormation needs the `ec2:DescribeNetworkInterfaces` permission. It obtains this from the user or role that modifies the stack. If you don't provide this permission, AWS CloudFormation does not wait for network interfaces to be deleted.
+ */
+export type VpcConfig = {
+    /**
+     * Allows outbound IPv6 traffic on VPC functions that are connected to dual-stack subnets.
+     */
+    Ipv6AllowedForDualStack?: boolean | undefined;
+    /**
+     * A list of VPC security group IDs.
+     */
+    SecurityGroupIds?: string[] | undefined;
+    /**
+     * A list of VPC subnet IDs.
+     */
+    SubnetIds?: string[] | undefined;
+};
+//# sourceMappingURL=aws-lambda-function.d.ts.map

package/out/exports/resources.generated/aws-lambda-layerversion.d.ts

@@ -0,0 +1,59 @@
+import type { ResourceDefinitionWithAttributes } from "../main.ts";
+export type LambdaLayerVersion = ResourceDefinitionWithAttributes<"AWS::Lambda::LayerVersion", LambdaLayerVersionProps, LambdaLayerVersionAttribs>;
+/**
+ * The `AWS::Lambda::LayerVersion` resource creates a [Lambda layer](https://docs.aws.amazon.com/lambda/latest/dg/configuration-layers.html) from a ZIP archive.
+ */
+export type LambdaLayerVersionProps = {
+    /**
+     * A list of compatible [instruction set architectures](https://docs.aws.amazon.com/lambda/latest/dg/foundation-arch.html) .
+     */
+    CompatibleArchitectures?: string[] | undefined;
+    /**
+     * A list of compatible [function runtimes](https://docs.aws.amazon.com/lambda/latest/dg/lambda-runtimes.html) . Used for filtering with [ListLayers](https://docs.aws.amazon.com/lambda/latest/dg/API_ListLayers.html) and [ListLayerVersions](https://docs.aws.amazon.com/lambda/latest/dg/API_ListLayerVersions.html) .
+     */
+    CompatibleRuntimes?: string[] | undefined;
+    /**
+     * The function layer archive.
+     */
+    Content: Content;
+    /**
+     * The description of the version.
+     */
+    Description?: string | undefined;
+    /**
+     * The name or Amazon Resource Name (ARN) of the layer.
+     */
+    LayerName?: string | undefined;
+    /**
+     * The layer's software license. It can be any of the following:
+     *
+     * - An [SPDX license identifier](https://docs.aws.amazon.com/https://spdx.org/licenses/) . For example, `MIT` .
+     * - The URL of a license hosted on the internet. For example, `https://opensource.org/licenses/MIT` .
+     * - The full text of the license.
+     */
+    LicenseInfo?: string | undefined;
+};
+export type LambdaLayerVersionAttribs = {
+    /**
+     * The ARN of the layer version.
+     */
+    LayerVersionArn: string;
+};
+/**
+ * A ZIP archive that contains the contents of an [Lambda layer](https://docs.aws.amazon.com/lambda/latest/dg/configuration-layers.html) .
+ */
+export type Content = {
+    /**
+     * The Amazon S3 bucket of the layer archive.
+     */
+    S3Bucket: string;
+    /**
+     * The Amazon S3 key of the layer archive.
+     */
+    S3Key: string;
+    /**
+     * For versioned objects, the version of the layer archive object to use.
+     */
+    S3ObjectVersion?: string | undefined;
+};
+//# sourceMappingURL=aws-lambda-layerversion.d.ts.map

package/out/exports/resources.generated/aws-lambda-layerversionpermission.d.ts

@@ -0,0 +1,32 @@
+import type { ResourceDefinitionWithAttributes } from "../main.ts";
+export type LambdaLayerVersionPermission = ResourceDefinitionWithAttributes<"AWS::Lambda::LayerVersionPermission", LambdaLayerVersionPermissionProps, LambdaLayerVersionPermissionAttribs>;
+/**
+ * The `AWS::Lambda::LayerVersionPermission` resource adds permissions to the resource-based policy of a version of an [Lambda layer](https://docs.aws.amazon.com/lambda/latest/dg/configuration-layers.html) . Use this action to grant layer usage permission to other accounts. You can grant permission to a single account, all AWS accounts, or all accounts in an organization.
+ *
+ * > Since the release of the [UpdateReplacePolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-updatereplacepolicy.html) both `UpdateReplacePolicy` and `DeletionPolicy` are required to protect your Resources/LayerPermissions from deletion.
+ */
+export type LambdaLayerVersionPermissionProps = {
+    /**
+     * The API action that grants access to the layer. For example, `lambda:GetLayerVersion` .
+     */
+    Action: string;
+    /**
+     * The name or Amazon Resource Name (ARN) of the layer.
+     */
+    LayerVersionArn: string;
+    /**
+     * With the principal set to `*` , grant permission to all accounts in the specified organization.
+     */
+    OrganizationId?: string | undefined;
+    /**
+     * An account ID, or `*` to grant layer usage permission to all accounts in an organization, or all AWS accounts (if `organizationId` is not specified). For the last case, make sure that you really do want all AWS accounts to have usage permission to this layer.
+     */
+    Principal: string;
+};
+export type LambdaLayerVersionPermissionAttribs = {
+    /**
+     * ID generated by service
+     */
+    Id: string;
+};
+//# sourceMappingURL=aws-lambda-layerversionpermission.d.ts.map

package/out/exports/resources.generated/aws-lambda-permission.d.ts

@@ -0,0 +1,83 @@
+import type { ResourceDefinitionWithAttributes } from "../main.ts";
+export type LambdaPermission = ResourceDefinitionWithAttributes<"AWS::Lambda::Permission", LambdaPermissionProps, LambdaPermissionAttribs>;
+/**
+ * The `AWS::Lambda::Permission` resource grants an AWS service or another account permission to use a function. You can apply the policy at the function level, or specify a qualifier to restrict access to a single version or alias. If you use a qualifier, the invoker must use the full Amazon Resource Name (ARN) of that version or alias to invoke the function.
+ *
+ * To grant permission to another account, specify the account ID as the `Principal` . To grant permission to an organization defined in AWS Organizations , specify the organization ID as the `PrincipalOrgID` . For AWS services, the principal is a domain-style identifier defined by the service, like `s3.amazonaws.com` or `sns.amazonaws.com` . For AWS services, you can also specify the ARN of the associated resource as the `SourceArn` . If you grant permission to a service principal without specifying the source, other accounts could potentially configure resources in their account to invoke your Lambda function.
+ *
+ * If your function has a function URL, you can specify the `FunctionUrlAuthType` parameter. This adds a condition to your permission that only applies when your function URL's `AuthType` matches the specified `FunctionUrlAuthType` . For more information about the `AuthType` parameter, see [Security and auth model for Lambda function URLs](https://docs.aws.amazon.com/lambda/latest/dg/urls-auth.html) .
+ *
+ * This resource adds a statement to a resource-based permission policy for the function. For more information about function policies, see [Lambda Function Policies](https://docs.aws.amazon.com/lambda/latest/dg/access-control-resource-based.html) .
+ */
+export type LambdaPermissionProps = {
+    /**
+     * The action that the principal can use on the function. For example, `lambda:InvokeFunction` or `lambda:GetFunction` .
+     * @minLength 1
+     * @maxLength 256
+     * @pattern ^(lambda:[*]|lambda:[a-zA-Z]+|[*])$
+     */
+    Action: string;
+    /**
+     * For Alexa Smart Home functions, a token that the invoker must supply.
+     * @minLength 1
+     * @maxLength 256
+     * @pattern ^[a-zA-Z0-9._\-]+$
+     */
+    EventSourceToken?: string | undefined;
+    /**
+     * The name or ARN of the Lambda function, version, or alias.
+     *
+     * **Name formats** - *Function name* – `my-function` (name-only), `my-function:v1` (with alias).
+     * - *Function ARN* – `arn:aws:lambda:us-west-2:123456789012:function:my-function` .
+     * - *Partial ARN* – `123456789012:function:my-function` .
+     *
+     * You can append a version number or alias to any of the formats. The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
+     * @minLength 1
+     * @maxLength 140
+     * @pattern ^(arn:(aws[a-zA-Z-]*)?:lambda:)?([a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:)?(\d{12}:)?(function:)?([a-zA-Z0-9-_]+)(:(\$LATEST|[a-zA-Z0-9-_]+))?$
+     */
+    FunctionName: string;
+    /**
+     * The type of authentication that your function URL uses. Set to `AWS_IAM` if you want to restrict access to authenticated users only. Set to `NONE` if you want to bypass IAM authentication to create a public endpoint. For more information, see [Security and auth model for Lambda function URLs](https://docs.aws.amazon.com/lambda/latest/dg/urls-auth.html) .
+     */
+    FunctionUrlAuthType?: "AWS_IAM" | "NONE" | undefined;
+    /**
+     * The AWS service , AWS account , IAM user, or IAM role that invokes the function. If you specify a service, use `SourceArn` or `SourceAccount` to limit who can invoke the function through that service.
+     * @minLength 1
+     * @maxLength 256
+     * @pattern ^.*$
+     */
+    Principal: string;
+    /**
+     * The identifier for your organization in AWS Organizations . Use this to grant permissions to all the AWS accounts under this organization.
+     * @minLength 12
+     * @maxLength 34
+     * @pattern ^o-[a-z0-9]{10,32}$
+     */
+    PrincipalOrgID?: string | undefined;
+    /**
+     * For AWS service , the ID of the AWS account that owns the resource. Use this together with `SourceArn` to ensure that the specified account owns the resource. It is possible for an Amazon S3 bucket to be deleted by its owner and recreated by another account.
+     * @minLength 12
+     * @maxLength 12
+     * @pattern ^\d{12}$
+     */
+    SourceAccount?: string | undefined;
+    /**
+     * For AWS services , the ARN of the AWS resource that invokes the function. For example, an Amazon S3 bucket or Amazon SNS topic.
+     *
+     * Note that Lambda configures the comparison using the `StringLike` operator.
+     * @minLength 12
+     * @maxLength 1024
+     * @pattern ^arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:([a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1})?:(\d{12})?:(.*)$
+     */
+    SourceArn?: string | undefined;
+};
+export type LambdaPermissionAttribs = {
+    /**
+     * @minLength 1
+     * @maxLength 256
+     * @pattern ^.*$
+     */
+    Id: string;
+};
+//# sourceMappingURL=aws-lambda-permission.d.ts.map

package/out/exports/resources.generated/aws-lambda-url.d.ts

@@ -0,0 +1,85 @@
+import type { ResourceDefinitionWithAttributes } from "../main.ts";
+export type LambdaUrl = ResourceDefinitionWithAttributes<"AWS::Lambda::Url", LambdaUrlProps, LambdaUrlAttribs>;
+/**
+ * The `AWS::Lambda::Url` resource creates a function URL with the specified configuration parameters. A [function URL](https://docs.aws.amazon.com/lambda/latest/dg/lambda-urls.html) is a dedicated HTTP(S) endpoint that you can use to invoke your function.
+ */
+export type LambdaUrlProps = {
+    /**
+     * The type of authentication that your function URL uses. Set to `AWS_IAM` if you want to restrict access to authenticated users only. Set to `NONE` if you want to bypass IAM authentication to create a public endpoint. For more information, see [Security and auth model for Lambda function URLs](https://docs.aws.amazon.com/lambda/latest/dg/urls-auth.html) .
+     */
+    AuthType: "AWS_IAM" | "NONE";
+    /**
+     * The [Cross-Origin Resource Sharing (CORS)](https://docs.aws.amazon.com/https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS) settings for your function URL.
+     */
+    Cors?: Cors | undefined;
+    /**
+     * Use one of the following options:
+     *
+     * - `BUFFERED` – This is the default option. Lambda invokes your function using the `Invoke` API operation. Invocation results are available when the payload is complete. The maximum payload size is 6 MB.
+     * - `RESPONSE_STREAM` – Your function streams payload results as they become available. Lambda invokes your function using the `InvokeWithResponseStream` API operation. The maximum response payload size is 20 MB, however, you can [request a quota increase](https://docs.aws.amazon.com/servicequotas/latest/userguide/request-quota-increase.html) .
+     */
+    InvokeMode?: "BUFFERED" | "RESPONSE_STREAM" | undefined;
+    /**
+     * The alias name.
+     * @minLength 1
+     * @maxLength 128
+     * @pattern ((?!^[0-9]+$)([a-zA-Z0-9-_]+))
+     */
+    Qualifier?: string | undefined;
+    /**
+     * The name of the Lambda function.
+     *
+     * **Name formats** - *Function name* - `my-function` .
+     * - *Function ARN* - `lambda:  :  :function:my-function` .
+     * - *Partial ARN* - `:function:my-function` .
+     *
+     * The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
+     * @pattern ^(arn:(aws[a-zA-Z-]*)?:lambda:)?([a-z]{2}((-gov)|(-iso(b?)))?-[a-z]+-\d{1}:)?(\d{12}:)?(function:)?([a-zA-Z0-9-_]+)(:((?!\d+)[0-9a-zA-Z-_]+))?$
+     */
+    TargetFunctionArn: string;
+};
+export type LambdaUrlAttribs = {
+    /**
+     * The Amazon Resource Name (ARN) of the function.
+     * @pattern ^(arn:(aws[a-zA-Z-]*)?:lambda:)?([a-z]{2}((-gov)|(-iso(b?)))?-[a-z]+-\d{1}:)?(\d{12}:)?(function:)?([a-zA-Z0-9-_]+)(:((?!\d+)[0-9a-zA-Z-_]+))?$
+     */
+    FunctionArn: string;
+    /**
+     * The HTTP URL endpoint for your function.
+     */
+    FunctionUrl: string;
+};
+/**
+ * The [Cross-Origin Resource Sharing (CORS)](https://docs.aws.amazon.com/https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS) settings for your function URL. Use CORS to grant access to your function URL from any origin. You can also use CORS to control access for specific HTTP headers and methods in requests to your function URL.
+ */
+export type Cors = {
+    /**
+     * Whether you want to allow cookies or other credentials in requests to your function URL. The default is `false` .
+     */
+    AllowCredentials?: boolean | undefined;
+    /**
+     * The HTTP headers that origins can include in requests to your function URL. For example: `Date` , `Keep-Alive` , `X-Custom-Header` .
+     */
+    AllowHeaders?: string[] | undefined;
+    /**
+     * The HTTP methods that are allowed when calling your function URL. For example: `GET` , `POST` , `DELETE` , or the wildcard character ( `*` ).
+     */
+    AllowMethods?: ("GET" | "PUT" | "HEAD" | "POST" | "PATCH" | "DELETE" | "*")[] | undefined;
+    /**
+     * The origins that can access your function URL. You can list any number of specific origins, separated by a comma. For example: `https://www.example.com` , `http://localhost:60905` .
+     *
+     * Alternatively, you can grant access to all origins with the wildcard character ( `*` ).
+     */
+    AllowOrigins?: string[] | undefined;
+    /**
+     * The HTTP headers in your function response that you want to expose to origins that call your function URL. For example: `Date` , `Keep-Alive` , `X-Custom-Header` .
+     */
+    ExposeHeaders?: string[] | undefined;
+    /**
+     * The maximum amount of time, in seconds, that browsers can cache results of a preflight request. By default, this is set to `0` , which means the browser will not cache results.
+     * @min 0
+     * @max 86400
+     */
+    MaxAge?: number | undefined;
+};
+//# sourceMappingURL=aws-lambda-url.d.ts.map