@propulsionworks/cloudformation 0.0.1 → 0.1.0

package/out/exports/resources.generated/aws-rds-dbparametergroup.d.ts

@@ -0,0 +1,85 @@
+import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
+export type RDSDBParameterGroup = ResourceDefinitionWithAttributes<"AWS::RDS::DBParameterGroup", RDSDBParameterGroupProps, RDSDBParameterGroupAttribs>;
+/**
+ * The `AWS::RDS::DBParameterGroup` resource creates a custom parameter group for an RDS database family.
+ *
+ * This type can be declared in a template and referenced in the `DBParameterGroupName` property of an `[AWS::RDS::DBInstance](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-database-instance.html)` resource.
+ *
+ * For information about configuring parameters for Amazon RDS DB instances, see [Working with parameter groups](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_WorkingWithParamGroups.html) in the *Amazon RDS User Guide* .
+ *
+ * For information about configuring parameters for Amazon Aurora DB instances, see [Working with parameter groups](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_WorkingWithParamGroups.html) in the *Amazon Aurora User Guide* .
+ *
+ * > Applying a parameter group to a DB instance may require the DB instance to reboot, resulting in a database outage for the duration of the reboot.
+ */
+export type RDSDBParameterGroupProps = {
+    /**
+     * The name of the DB parameter group.
+     *
+     * Constraints:
+     *
+     * - Must be 1 to 255 letters, numbers, or hyphens.
+     * - First character must be a letter
+     * - Can't end with a hyphen or contain two consecutive hyphens
+     *
+     * If you don't specify a value for `DBParameterGroupName` property, a name is automatically created for the DB parameter group.
+     *
+     * > This value is stored as a lowercase string.
+     * @pattern ^[a-zA-Z]{1}(?:-?[a-zA-Z0-9])*$
+     */
+    DBParameterGroupName?: string | undefined;
+    /**
+     * Provides the customer-specified description for this DB parameter group.
+     */
+    Description: string;
+    /**
+     * The DB parameter group family name. A DB parameter group can be associated with one and only one DB parameter group family, and can be applied only to a DB instance running a database engine and engine version compatible with that DB parameter group family.
+     *
+     * To list all of the available parameter group families for a DB engine, use the following command:
+     *
+     * `aws rds describe-db-engine-versions --query "DBEngineVersions[].DBParameterGroupFamily" --engine <engine>`
+     *
+     * For example, to list all of the available parameter group families for the MySQL DB engine, use the following command:
+     *
+     * `aws rds describe-db-engine-versions --query "DBEngineVersions[].DBParameterGroupFamily" --engine mysql`
+     *
+     * > The output contains duplicates.
+     *
+     * The following are the valid DB engine values:
+     *
+     * - `aurora-mysql`
+     * - `aurora-postgresql`
+     * - `db2-ae`
+     * - `db2-se`
+     * - `mysql`
+     * - `oracle-ee`
+     * - `oracle-ee-cdb`
+     * - `oracle-se2`
+     * - `oracle-se2-cdb`
+     * - `postgres`
+     * - `sqlserver-ee`
+     * - `sqlserver-se`
+     * - `sqlserver-ex`
+     * - `sqlserver-web`
+     */
+    Family: string;
+    /**
+     * A mapping of parameter names and values for the parameter update. You must specify at least one parameter name and value.
+     *
+     * For more information about parameter groups, see [Working with parameter groups](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_WorkingWithParamGroups.html) in the *Amazon RDS User Guide* , or [Working with parameter groups](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_WorkingWithParamGroups.html) in the *Amazon Aurora User Guide* .
+     *
+     * > AWS CloudFormation doesn't support specifying an apply method for each individual parameter. The default apply method for each parameter is used.
+     */
+    Parameters?: Record<string, unknown> | undefined;
+    /**
+     * Tags to assign to the DB parameter group.
+     */
+    Tags?: Tag[] | undefined;
+};
+export type RDSDBParameterGroupAttribs = {
+    /**
+     * The name of the DB parameter group.
+     * @pattern ^[a-zA-Z]{1}(?:-?[a-zA-Z0-9])*$
+     */
+    DBParameterGroupName: string;
+};
+//# sourceMappingURL=aws-rds-dbparametergroup.d.ts.map

package/out/exports/resources.generated/aws-rds-dbproxy.d.ts

@@ -0,0 +1,120 @@
+import type { ResourceDefinitionWithAttributes } from "../main.ts";
+export type RDSDBProxy = ResourceDefinitionWithAttributes<"AWS::RDS::DBProxy", RDSDBProxyProps, RDSDBProxyAttribs>;
+/**
+ * The `AWS::RDS::DBProxy` resource creates or updates a DB proxy.
+ *
+ * For information about RDS Proxy for Amazon RDS, see [Managing Connections with Amazon RDS Proxy](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-proxy.html) in the *Amazon RDS User Guide* .
+ *
+ * For information about RDS Proxy for Amazon Aurora, see [Managing Connections with Amazon RDS Proxy](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/rds-proxy.html) in the *Amazon Aurora User Guide* .
+ *
+ * > Limitations apply to RDS Proxy, including DB engine version limitations and AWS Region limitations.
+ * >
+ * > For information about limitations that apply to RDS Proxy for Amazon RDS, see [Limitations for RDS Proxy](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-proxy.html#rds-proxy.limitations) in the *Amazon RDS User Guide* .
+ * >
+ * > For information about that apply to RDS Proxy for Amazon Aurora, see [Limitations for RDS Proxy](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/rds-proxy.html#rds-proxy.limitations) in the *Amazon Aurora User Guide* .
+ */
+export type RDSDBProxyProps = {
+    /**
+     * The authorization mechanism that the proxy uses.
+     */
+    Auth: AuthFormat[];
+    /**
+     * The identifier for the proxy. This name must be unique for all proxies owned by your AWS account in the specified AWS Region . An identifier must begin with a letter and must contain only ASCII letters, digits, and hyphens; it can't end with a hyphen or contain two consecutive hyphens.
+     * @maxLength 64
+     * @pattern [0-z]*
+     */
+    DBProxyName: string;
+    /**
+     * Specifies whether the proxy includes detailed information about SQL statements in its logs. This information helps you to debug issues involving SQL behavior or the performance and scalability of the proxy connections. The debug information includes the text of SQL statements that you submit through the proxy. Thus, only enable this setting when needed for debugging, and only when you have security measures in place to safeguard any sensitive information that appears in the logs.
+     */
+    DebugLogging?: boolean | undefined;
+    /**
+     * The kinds of databases that the proxy can connect to. This value determines which database network protocol the proxy recognizes when it interprets network traffic to and from the database. For Aurora MySQL, RDS for MariaDB, and RDS for MySQL databases, specify `MYSQL` . For Aurora PostgreSQL and RDS for PostgreSQL databases, specify `POSTGRESQL` . For RDS for Microsoft SQL Server, specify `SQLSERVER` .
+     */
+    EngineFamily: "MYSQL" | "POSTGRESQL" | "SQLSERVER";
+    /**
+     * The number of seconds that a connection to the proxy can be inactive before the proxy disconnects it. You can set this value higher or lower than the connection timeout limit for the associated database.
+     */
+    IdleClientTimeout?: number | undefined;
+    /**
+     * Specifies whether Transport Layer Security (TLS) encryption is required for connections to the proxy. By enabling this setting, you can enforce encrypted TLS connections to the proxy.
+     */
+    RequireTLS?: boolean | undefined;
+    /**
+     * The Amazon Resource Name (ARN) of the IAM role that the proxy uses to access secrets in AWS Secrets Manager.
+     */
+    RoleArn: string;
+    /**
+     * An optional set of key-value pairs to associate arbitrary data of your choosing with the proxy.
+     */
+    Tags?: TagFormat[] | undefined;
+    /**
+     * One or more VPC security group IDs to associate with the new proxy.
+     *
+     * If you plan to update the resource, don't specify VPC security groups in a shared VPC.
+     */
+    VpcSecurityGroupIds?: string[] | undefined;
+    /**
+     * One or more VPC subnet IDs to associate with the new proxy.
+     */
+    VpcSubnetIds: string[];
+};
+export type RDSDBProxyAttribs = {
+    /**
+     * The Amazon Resource Name (ARN) for the proxy.
+     */
+    DBProxyArn: string;
+    /**
+     * The endpoint that you can use to connect to the DB proxy. You include the endpoint value in the connection string for a database client application.
+     */
+    Endpoint: string;
+    /**
+     * The VPC ID to associate with the DB proxy.
+     */
+    VpcId: string;
+};
+/**
+ * Specifies the details of authentication used by a proxy to log in as a specific database user.
+ */
+export type AuthFormat = {
+    /**
+     * The type of authentication that the proxy uses for connections from the proxy to the underlying database.
+     */
+    AuthScheme?: "SECRETS" | undefined;
+    /**
+     * Specifies the details of authentication used by a proxy to log in as a specific database user.
+     */
+    ClientPasswordAuthType?: "MYSQL_NATIVE_PASSWORD" | "POSTGRES_SCRAM_SHA_256" | "POSTGRES_MD5" | "SQL_SERVER_AUTHENTICATION" | undefined;
+    /**
+     * A user-specified description about the authentication used by a proxy to log in as a specific database user.
+     */
+    Description?: string | undefined;
+    /**
+     * A value that indicates whether to require or disallow AWS Identity and Access Management (IAM) authentication for connections to the proxy. The `ENABLED` value is valid only for proxies with RDS for Microsoft SQL Server.
+     */
+    IAMAuth?: "DISABLED" | "REQUIRED" | "ENABLED" | undefined;
+    /**
+     * The Amazon Resource Name (ARN) representing the secret that the proxy uses to authenticate to the RDS DB instance or Aurora DB cluster. These secrets are stored within Amazon Secrets Manager.
+     */
+    SecretArn?: string | undefined;
+};
+/**
+ * Metadata assigned to an Amazon RDS resource consisting of a key-value pair.
+ *
+ * For more information, see [Tagging Amazon RDS resources](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Tagging.html) in the *Amazon RDS User Guide* or [Tagging Amazon Aurora and Amazon RDS resources](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_Tagging.html) in the *Amazon Aurora User Guide* .
+ */
+export type TagFormat = {
+    /**
+     * A key is the required name of the tag. The string value can be from 1 to 128 Unicode characters in length and can't be prefixed with `aws:` or `rds:` . The string can only contain only the set of Unicode letters, digits, white-space, '_', '.', ':', '/', '=', '+', '-', '@' (Java regex: "^([\\p{L}\\p{Z}\\p{N}_.:/=+\\-@]*)$").
+     * @maxLength 128
+     * @pattern (\w|\d|\s|\\|-|\.:=+-)*
+     */
+    Key?: string | undefined;
+    /**
+     * A value is the optional value of the tag. The string value can be from 1 to 256 Unicode characters in length and can't be prefixed with `aws:` or `rds:` . The string can only contain only the set of Unicode letters, digits, white-space, '_', '.', ':', '/', '=', '+', '-', '@' (Java regex: "^([\\p{L}\\p{Z}\\p{N}_.:/=+\\-@]*)$").
+     * @maxLength 128
+     * @pattern (\w|\d|\s|\\|-|\.:=+-)*
+     */
+    Value?: string | undefined;
+};
+//# sourceMappingURL=aws-rds-dbproxy.d.ts.map

package/out/exports/resources.generated/aws-rds-dbproxyendpoint.d.ts

@@ -0,0 +1,77 @@
+import type { ResourceDefinitionWithAttributes } from "../main.ts";
+export type RDSDBProxyEndpoint = ResourceDefinitionWithAttributes<"AWS::RDS::DBProxyEndpoint", RDSDBProxyEndpointProps, RDSDBProxyEndpointAttribs>;
+/**
+ * The `AWS::RDS::DBProxyEndpoint` resource creates or updates a DB proxy endpoint. You can use custom proxy endpoints to access a proxy through a different VPC than the proxy's default VPC.
+ *
+ * For more information about RDS Proxy, see [AWS::RDS::DBProxy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbproxy.html) .
+ */
+export type RDSDBProxyEndpointProps = {
+    /**
+     * The name of the DB proxy endpoint to create.
+     * @maxLength 64
+     * @pattern [0-z]*
+     */
+    DBProxyEndpointName: string;
+    /**
+     * The name of the DB proxy associated with the DB proxy endpoint that you create.
+     * @maxLength 64
+     * @pattern [0-z]*
+     */
+    DBProxyName: string;
+    /**
+     * An optional set of key-value pairs to associate arbitrary data of your choosing with the proxy.
+     */
+    Tags?: TagFormat[] | undefined;
+    /**
+     * A value that indicates whether the DB proxy endpoint can be used for read/write or read-only operations.
+     */
+    TargetRole?: "READ_WRITE" | "READ_ONLY" | undefined;
+    /**
+     * The VPC security group IDs for the DB proxy endpoint that you create. You can specify a different set of security group IDs than for the original DB proxy. The default is the default security group for the VPC.
+     */
+    VpcSecurityGroupIds?: string[] | undefined;
+    /**
+     * The VPC subnet IDs for the DB proxy endpoint that you create. You can specify a different set of subnet IDs than for the original DB proxy.
+     */
+    VpcSubnetIds: string[];
+};
+export type RDSDBProxyEndpointAttribs = {
+    /**
+     * The Amazon Resource Name (ARN) for the DB proxy endpoint.
+     * @pattern arn:aws[A-Za-z0-9-]{0,64}:rds:[A-Za-z0-9-]{1,64}:[0-9]{12}:.*
+     */
+    DBProxyEndpointArn: string;
+    /**
+     * The endpoint that you can use to connect to the DB proxy. You include the endpoint value in the connection string for a database client application.
+     * @maxLength 256
+     */
+    Endpoint: string;
+    /**
+     * Indicates whether this endpoint is the default endpoint for the associated DB proxy. Default DB proxy endpoints always have read/write capability. Other endpoints that you associate with the DB proxy can be either read/write or read-only.
+     */
+    IsDefault: boolean;
+    /**
+     * Provides the VPC ID of the DB proxy endpoint.
+     */
+    VpcId: string;
+};
+/**
+ * Metadata assigned to an Amazon RDS resource consisting of a key-value pair.
+ *
+ * For more information, see [Tagging Amazon RDS resources](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Tagging.html) in the *Amazon RDS User Guide* or [Tagging Amazon Aurora and Amazon RDS resources](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_Tagging.html) in the *Amazon Aurora User Guide* .
+ */
+export type TagFormat = {
+    /**
+     * A key is the required name of the tag. The string value can be from 1 to 128 Unicode characters in length and can't be prefixed with `aws:` or `rds:` . The string can only contain only the set of Unicode letters, digits, white-space, '_', '.', ':', '/', '=', '+', '-', '@' (Java regex: "^([\\p{L}\\p{Z}\\p{N}_.:/=+\\-@]*)$").
+     * @maxLength 128
+     * @pattern (\w|\d|\s|\\|-|\.:=+-)*
+     */
+    Key?: string | undefined;
+    /**
+     * A value is the optional value of the tag. The string value can be from 1 to 256 Unicode characters in length and can't be prefixed with `aws:` or `rds:` . The string can only contain only the set of Unicode letters, digits, white-space, '_', '.', ':', '/', '=', '+', '-', '@' (Java regex: "^([\\p{L}\\p{Z}\\p{N}_.:/=+\\-@]*)$").
+     * @maxLength 128
+     * @pattern (\w|\d|\s|\\|-|\.:=+-)*
+     */
+    Value?: string | undefined;
+};
+//# sourceMappingURL=aws-rds-dbproxyendpoint.d.ts.map

package/out/exports/resources.generated/aws-rds-dbproxytargetgroup.d.ts

@@ -0,0 +1,111 @@
+import type { ResourceDefinitionWithAttributes } from "../main.ts";
+export type RDSDBProxyTargetGroup = ResourceDefinitionWithAttributes<"AWS::RDS::DBProxyTargetGroup", RDSDBProxyTargetGroupProps, RDSDBProxyTargetGroupAttribs>;
+/**
+ * The `AWS::RDS::DBProxyTargetGroup` resource represents a set of RDS DB instances, Aurora DB clusters, or both that a proxy can connect to. Currently, each target group is associated with exactly one RDS DB instance or Aurora DB cluster.
+ *
+ * This data type is used as a response element in the `DescribeDBProxyTargetGroups` action.
+ *
+ * For information about RDS Proxy for Amazon RDS, see [Managing Connections with Amazon RDS Proxy](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-proxy.html) in the *Amazon RDS User Guide* .
+ *
+ * For information about RDS Proxy for Amazon Aurora, see [Managing Connections with Amazon RDS Proxy](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/rds-proxy.html) in the *Amazon Aurora User Guide* .
+ *
+ * For a sample template that creates a DB proxy and registers a DB instance, see [Examples](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbproxy.html#aws-resource-rds-dbproxy--examples) in AWS::RDS::DBProxy.
+ *
+ * > Limitations apply to RDS Proxy, including DB engine version limitations and AWS Region limitations.
+ * >
+ * > For information about limitations that apply to RDS Proxy for Amazon RDS, see [Limitations for RDS Proxy](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-proxy.html#rds-proxy.limitations) in the *Amazon RDS User Guide* .
+ * >
+ * > For information about that apply to RDS Proxy for Amazon Aurora, see [Limitations for RDS Proxy](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/rds-proxy.html#rds-proxy.limitations) in the *Amazon Aurora User Guide* .
+ */
+export type RDSDBProxyTargetGroupProps = {
+    /**
+     * Displays the settings that control the size and behavior of the connection pool associated with a `DBProxyTarget` .
+     */
+    ConnectionPoolConfigurationInfo?: ConnectionPoolConfigurationInfoFormat | undefined;
+    /**
+     * One or more DB cluster identifiers.
+     */
+    DBClusterIdentifiers?: string[] | undefined;
+    /**
+     * One or more DB instance identifiers.
+     */
+    DBInstanceIdentifiers?: string[] | undefined;
+    /**
+     * The identifier of the `DBProxy` that is associated with the `DBProxyTargetGroup` .
+     * @maxLength 64
+     * @pattern [A-z][0-z]*
+     */
+    DBProxyName: string;
+    /**
+     * The identifier for the target group.
+     *
+     * > Currently, this property must be set to `default` .
+     */
+    TargetGroupName: "default";
+};
+export type RDSDBProxyTargetGroupAttribs = {
+    /**
+     * The Amazon Resource Name (ARN) representing the target group.
+     */
+    TargetGroupArn: string;
+};
+/**
+ * Specifies the settings that control the size and behavior of the connection pool associated with a `DBProxyTargetGroup` .
+ */
+export type ConnectionPoolConfigurationInfoFormat = {
+    /**
+     * The number of seconds for a proxy to wait for a connection to become available in the connection pool. This setting only applies when the proxy has opened its maximum number of connections and all connections are busy with client sessions.
+     *
+     * Default: `120`
+     *
+     * Constraints:
+     *
+     * - Must be between 0 and 3600.
+     */
+    ConnectionBorrowTimeout?: number | undefined;
+    /**
+     * Add an initialization query, or modify the current one. You can specify one or more SQL statements for the proxy to run when opening each new database connection. The setting is typically used with `SET` statements to make sure that each connection has identical settings. Make sure that the query you add is valid. To include multiple variables in a single `SET` statement, use comma separators.
+     *
+     * For example: `SET variable1=value1, variable2=value2`
+     *
+     * For multiple statements, use semicolons as the separator.
+     *
+     * Default: no initialization query
+     */
+    InitQuery?: string | undefined;
+    /**
+     * The maximum size of the connection pool for each target in a target group. The value is expressed as a percentage of the `max_connections` setting for the RDS DB instance or Aurora DB cluster used by the target group.
+     *
+     * If you specify `MaxIdleConnectionsPercent` , then you must also include a value for this parameter.
+     *
+     * Default: `10` for RDS for Microsoft SQL Server, and `100` for all other engines
+     *
+     * Constraints:
+     *
+     * - Must be between 1 and 100.
+     * @min 0
+     * @max 100
+     */
+    MaxConnectionsPercent?: number | undefined;
+    /**
+     * A value that controls how actively the proxy closes idle database connections in the connection pool. The value is expressed as a percentage of the `max_connections` setting for the RDS DB instance or Aurora DB cluster used by the target group. With a high value, the proxy leaves a high percentage of idle database connections open. A low value causes the proxy to close more idle connections and return them to the database.
+     *
+     * If you specify this parameter, then you must also include a value for `MaxConnectionsPercent` .
+     *
+     * Default: The default value is half of the value of `MaxConnectionsPercent` . For example, if `MaxConnectionsPercent` is 80, then the default value of `MaxIdleConnectionsPercent` is 40. If the value of `MaxConnectionsPercent` isn't specified, then for SQL Server, `MaxIdleConnectionsPercent` is `5` , and for all other engines, the default is `50` .
+     *
+     * Constraints:
+     *
+     * - Must be between 0 and the value of `MaxConnectionsPercent` .
+     * @min 0
+     * @max 100
+     */
+    MaxIdleConnectionsPercent?: number | undefined;
+    /**
+     * Each item in the list represents a class of SQL operations that normally cause all later statements in a session using a proxy to be pinned to the same underlying database connection. Including an item in the list exempts that class of SQL operations from the pinning behavior.
+     *
+     * Default: no session pinning filters
+     */
+    SessionPinningFilters?: string[] | undefined;
+};
+//# sourceMappingURL=aws-rds-dbproxytargetgroup.d.ts.map

package/out/exports/resources.generated/aws-rds-dbsecuritygroup.d.ts

@@ -0,0 +1,56 @@
+import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
+export type RDSDBSecurityGroup = ResourceDefinitionWithAttributes<"AWS::RDS::DBSecurityGroup", RDSDBSecurityGroupProps, RDSDBSecurityGroupAttribs>;
+/**
+ * The `AWS::RDS::DBSecurityGroup` resource creates or updates an Amazon RDS DB security group.
+ *
+ * > EC2-Classic was retired on August 15, 2022. If you haven't migrated from EC2-Classic to a VPC, we recommend that you migrate as soon as possible. For more information, see [Migrate from EC2-Classic to a VPC](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/vpc-migrate.html) in the *Amazon EC2 User Guide* , the blog [EC2-Classic Networking is Retiring – Here’s How to Prepare](https://docs.aws.amazon.com/aws/ec2-classic-is-retiring-heres-how-to-prepare/) , and [Moving a DB instance not in a VPC into a VPC](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_VPC.Non-VPC2VPC.html) in the *Amazon RDS User Guide* .
+ */
+export type RDSDBSecurityGroupProps = {
+    /**
+     * Ingress rules to be applied to the DB security group.
+     */
+    DBSecurityGroupIngress: Ingress[];
+    /**
+     * The identifier of an Amazon virtual private cloud (VPC). This property indicates the VPC that this DB security group belongs to.
+     *
+     * > This property is included for backwards compatibility and is no longer recommended for providing security information to an RDS DB instance.
+     */
+    EC2VpcId?: string | undefined;
+    /**
+     * Provides the description of the DB security group.
+     */
+    GroupDescription: string;
+    /**
+     * Metadata assigned to an Amazon RDS resource consisting of a key-value pair.
+     *
+     * For more information, see [Tagging Amazon RDS resources](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Tagging.html) in the *Amazon RDS User Guide* or [Tagging Amazon Aurora and Amazon RDS resources](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_Tagging.html) in the *Amazon Aurora User Guide* .
+     */
+    Tags?: Tag[] | undefined;
+};
+export type RDSDBSecurityGroupAttribs = {
+    Id: string;
+};
+/**
+ * The `Ingress` property type specifies an individual ingress rule within an `AWS::RDS::DBSecurityGroup` resource.
+ *
+ * > EC2-Classic was retired on August 15, 2022. If you haven't migrated from EC2-Classic to a VPC, we recommend that you migrate as soon as possible. For more information, see [Migrate from EC2-Classic to a VPC](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/vpc-migrate.html) in the *Amazon EC2 User Guide* , the blog [EC2-Classic Networking is Retiring – Here’s How to Prepare](https://docs.aws.amazon.com/aws/ec2-classic-is-retiring-heres-how-to-prepare/) , and [Moving a DB instance not in a VPC into a VPC](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_VPC.Non-VPC2VPC.html) in the *Amazon RDS User Guide* .
+ */
+export type Ingress = {
+    /**
+     * The IP range to authorize.
+     */
+    CIDRIP?: string | undefined;
+    /**
+     * Id of the EC2 security group to authorize. For VPC DB security groups, `EC2SecurityGroupId` must be provided. Otherwise, `EC2SecurityGroupOwnerId` and either `EC2SecurityGroupName` or `EC2SecurityGroupId` must be provided.
+     */
+    EC2SecurityGroupId?: string | undefined;
+    /**
+     * Name of the EC2 security group to authorize. For VPC DB security groups, `EC2SecurityGroupId` must be provided. Otherwise, `EC2SecurityGroupOwnerId` and either `EC2SecurityGroupName` or `EC2SecurityGroupId` must be provided.
+     */
+    EC2SecurityGroupName?: string | undefined;
+    /**
+     * AWS account number of the owner of the EC2 security group specified in the `EC2SecurityGroupName` parameter. The AWS access key ID isn't an acceptable value. For VPC DB security groups, `EC2SecurityGroupId` must be provided. Otherwise, `EC2SecurityGroupOwnerId` and either `EC2SecurityGroupName` or `EC2SecurityGroupId` must be provided.
+     */
+    EC2SecurityGroupOwnerId?: string | undefined;
+};
+//# sourceMappingURL=aws-rds-dbsecuritygroup.d.ts.map

package/out/exports/resources.generated/aws-rds-dbsecuritygroupingress.d.ts

@@ -0,0 +1,37 @@
+import type { ResourceDefinitionWithAttributes } from "../main.ts";
+export type RDSDBSecurityGroupIngress = ResourceDefinitionWithAttributes<"AWS::RDS::DBSecurityGroupIngress", RDSDBSecurityGroupIngressProps, RDSDBSecurityGroupIngressAttribs>;
+/**
+ * The `AWS::RDS::DBSecurityGroupIngress` resource enables ingress to a DB security group using one of two forms of authorization. First, you can add EC2 or VPC security groups to the DB security group if the application using the database is running on EC2 or VPC instances. Second, IP ranges are available if the application accessing your database is running on the Internet.
+ *
+ * This type supports updates. For more information about updating stacks, see [AWS CloudFormation Stacks Updates](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks.html) .
+ *
+ * For details about the settings for DB security group ingress, see [AuthorizeDBSecurityGroupIngress](https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_AuthorizeDBSecurityGroupIngress.html) .
+ *
+ * > EC2-Classic was retired on August 15, 2022. If you haven't migrated from EC2-Classic to a VPC, we recommend that you migrate as soon as possible. For more information, see [Migrate from EC2-Classic to a VPC](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/vpc-migrate.html) in the *Amazon EC2 User Guide* , the blog [EC2-Classic Networking is Retiring – Here’s How to Prepare](https://docs.aws.amazon.com/aws/ec2-classic-is-retiring-heres-how-to-prepare/) , and [Moving a DB instance not in a VPC into a VPC](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_VPC.Non-VPC2VPC.html) in the *Amazon RDS User Guide* .
+ */
+export type RDSDBSecurityGroupIngressProps = {
+    /**
+     * The IP range to authorize.
+     */
+    CIDRIP?: string | undefined;
+    /**
+     * The name of the DB security group to add authorization to.
+     */
+    DBSecurityGroupName: string;
+    /**
+     * Id of the EC2 security group to authorize. For VPC DB security groups, `EC2SecurityGroupId` must be provided. Otherwise, `EC2SecurityGroupOwnerId` and either `EC2SecurityGroupName` or `EC2SecurityGroupId` must be provided.
+     */
+    EC2SecurityGroupId?: string | undefined;
+    /**
+     * Name of the EC2 security group to authorize. For VPC DB security groups, `EC2SecurityGroupId` must be provided. Otherwise, `EC2SecurityGroupOwnerId` and either `EC2SecurityGroupName` or `EC2SecurityGroupId` must be provided.
+     */
+    EC2SecurityGroupName?: string | undefined;
+    /**
+     * AWS account number of the owner of the EC2 security group specified in the `EC2SecurityGroupName` parameter. The AWS access key ID isn't an acceptable value. For VPC DB security groups, `EC2SecurityGroupId` must be provided. Otherwise, `EC2SecurityGroupOwnerId` and either `EC2SecurityGroupName` or `EC2SecurityGroupId` must be provided.
+     */
+    EC2SecurityGroupOwnerId?: string | undefined;
+};
+export type RDSDBSecurityGroupIngressAttribs = {
+    Id: string;
+};
+//# sourceMappingURL=aws-rds-dbsecuritygroupingress.d.ts.map

package/out/exports/resources.generated/aws-rds-dbshardgroup.d.ts

@@ -0,0 +1,79 @@
+import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
+export type RDSDBShardGroup = ResourceDefinitionWithAttributes<"AWS::RDS::DBShardGroup", RDSDBShardGroupProps, RDSDBShardGroupAttribs>;
+/**
+ * Creates a new DB shard group for Aurora Limitless Database. You must enable Aurora Limitless Database to create a DB shard group.
+ *
+ * Valid for: Aurora DB clusters only
+ */
+export type RDSDBShardGroupProps = {
+    /**
+     * Specifies whether to create standby DB shard groups for the DB shard group. Valid values are the following:
+     *
+     * - 0 - Creates a DB shard group without a standby DB shard group. This is the default value.
+     * - 1 - Creates a DB shard group with a standby DB shard group in a different Availability Zone (AZ).
+     * - 2 - Creates a DB shard group with two standby DB shard groups in two different AZs.
+     * @min 0
+     */
+    ComputeRedundancy?: number | undefined;
+    /**
+     * The name of the primary DB cluster for the DB shard group.
+     * @minLength 1
+     * @maxLength 63
+     */
+    DBClusterIdentifier: string;
+    /**
+     * The name of the DB shard group.
+     * @minLength 1
+     * @maxLength 63
+     */
+    DBShardGroupIdentifier?: string | undefined;
+    /**
+     * The maximum capacity of the DB shard group in Aurora capacity units (ACUs).
+     */
+    MaxACU: number;
+    /**
+     * The minimum capacity of the DB shard group in Aurora capacity units (ACUs).
+     */
+    MinACU?: number | undefined;
+    /**
+     * Specifies whether the DB shard group is publicly accessible.
+     *
+     * When the DB shard group is publicly accessible, its Domain Name System (DNS) endpoint resolves to the private IP address from within the DB shard group's virtual private cloud (VPC). It resolves to the public IP address from outside of the DB shard group's VPC. Access to the DB shard group is ultimately controlled by the security group it uses. That public access is not permitted if the security group assigned to the DB shard group doesn't permit it.
+     *
+     * When the DB shard group isn't publicly accessible, it is an internal DB shard group with a DNS name that resolves to a private IP address.
+     *
+     * Default: The default behavior varies depending on whether `DBSubnetGroupName` is specified.
+     *
+     * If `DBSubnetGroupName` isn't specified, and `PubliclyAccessible` isn't specified, the following applies:
+     *
+     * - If the default VPC in the target Region doesn’t have an internet gateway attached to it, the DB shard group is private.
+     * - If the default VPC in the target Region has an internet gateway attached to it, the DB shard group is public.
+     *
+     * If `DBSubnetGroupName` is specified, and `PubliclyAccessible` isn't specified, the following applies:
+     *
+     * - If the subnets are part of a VPC that doesn’t have an internet gateway attached to it, the DB shard group is private.
+     * - If the subnets are part of a VPC that has an internet gateway attached to it, the DB shard group is public.
+     */
+    PubliclyAccessible?: boolean | undefined;
+    /**
+     * An optional set of key-value pairs to associate arbitrary data of your choosing with the DB shard group.
+     */
+    Tags?: Tag[] | undefined;
+};
+export type RDSDBShardGroupAttribs = {
+    /**
+     * The AWS Region -unique, immutable identifier for the DB shard group.
+     */
+    DBShardGroupResourceId: string;
+    /**
+     * This data type represents the information you need to connect to an Amazon RDS DB instance. This data type is used as a response element in the following actions:
+     *
+     * - `CreateDBInstance`
+     * - `DescribeDBInstances`
+     * - `DeleteDBInstance`
+     *
+     * For the data structure that represents Amazon Aurora DB cluster endpoints, see `DBClusterEndpoint` .
+     */
+    Endpoint: string;
+};
+//# sourceMappingURL=aws-rds-dbshardgroup.d.ts.map

package/out/exports/resources.generated/aws-rds-dbsubnetgroup.d.ts

@@ -0,0 +1,34 @@
+import type { ResourceDefinition, Tag } from "../main.ts";
+export type RDSDBSubnetGroup = ResourceDefinition<"AWS::RDS::DBSubnetGroup", RDSDBSubnetGroupProps>;
+/**
+ * The `AWS::RDS::DBSubnetGroup` resource creates a database subnet group. Subnet groups must contain at least two subnets in two different Availability Zones in the same region.
+ *
+ * For more information, see [Working with DB subnet groups](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_VPC.WorkingWithRDSInstanceinaVPC.html#USER_VPC.Subnets) in the *Amazon RDS User Guide* .
+ */
+export type RDSDBSubnetGroupProps = {
+    /**
+     * The description for the DB subnet group.
+     */
+    DBSubnetGroupDescription: string;
+    /**
+     * The name for the DB subnet group. This value is stored as a lowercase string.
+     *
+     * Constraints:
+     *
+     * - Must contain no more than 255 letters, numbers, periods, underscores, spaces, or hyphens.
+     * - Must not be default.
+     * - First character must be a letter.
+     *
+     * Example: `mydbsubnetgroup`
+     */
+    DBSubnetGroupName?: string | undefined;
+    /**
+     * The EC2 Subnet IDs for the DB subnet group.
+     */
+    SubnetIds: string[];
+    /**
+     * Tags to assign to the DB subnet group.
+     */
+    Tags?: Tag[] | undefined;
+};
+//# sourceMappingURL=aws-rds-dbsubnetgroup.d.ts.map