@propulsionworks/cloudformation 0.0.1 → 0.1.0

package/out/exports/resources.generated/aws-route53resolver-firewallrulegroup.d.ts

@@ -0,0 +1,174 @@
+import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
+export type Route53ResolverFirewallRuleGroup = ResourceDefinitionWithAttributes<"AWS::Route53Resolver::FirewallRuleGroup", Route53ResolverFirewallRuleGroupProps, Route53ResolverFirewallRuleGroupAttribs>;
+/**
+ * High-level information for a firewall rule group. A firewall rule group is a collection of rules that DNS Firewall uses to filter DNS network traffic for a VPC. To retrieve the rules for the rule group, call [ListFirewallRules](https://docs.aws.amazon.com/Route53/latest/APIReference/API_route53resolver_ListFirewallRules.html) .
+ */
+export type Route53ResolverFirewallRuleGroupProps = {
+    /**
+     * A list of the rules that you have defined.
+     */
+    FirewallRules?: FirewallRule[] | undefined;
+    /**
+     * The name of the rule group.
+     * @minLength 1
+     * @maxLength 64
+     * @pattern (?!^[0-9]+$)([a-zA-Z0-9\-_' ']+)
+     */
+    Name?: string | undefined;
+    /**
+     * A list of the tag keys and values that you want to associate with the rule group.
+     */
+    Tags?: Tag[] | undefined;
+};
+export type Route53ResolverFirewallRuleGroupAttribs = {
+    /**
+     * The ARN (Amazon Resource Name) of the rule group.
+     * @minLength 1
+     * @maxLength 600
+     */
+    Arn: string;
+    /**
+     * The date and time that the rule group was created, in Unix time format and Coordinated Universal Time (UTC).
+     * @minLength 20
+     * @maxLength 40
+     */
+    CreationTime: string;
+    /**
+     * A unique string defined by you to identify the request. This allows you to retry failed requests without the risk of running the operation twice. This can be any unique string, for example, a timestamp.
+     * @minLength 1
+     * @maxLength 255
+     */
+    CreatorRequestId: string;
+    /**
+     * The ID of the rule group.
+     * @minLength 1
+     * @maxLength 64
+     */
+    Id: string;
+    /**
+     * The date and time that the rule group was last modified, in Unix time format and Coordinated Universal Time (UTC).
+     * @minLength 20
+     * @maxLength 40
+     */
+    ModificationTime: string;
+    /**
+     * The AWS account ID for the account that created the rule group. When a rule group is shared with your account, this is the account that has shared the rule group with you.
+     * @minLength 12
+     * @maxLength 32
+     */
+    OwnerId: string;
+    /**
+     * The number of rules in the rule group.
+     */
+    RuleCount: number;
+    /**
+     * Whether the rule group is shared with other AWS accounts , or was shared with the current account by another AWS account . Sharing is configured through AWS Resource Access Manager ( AWS RAM ).
+     */
+    ShareStatus: "NOT_SHARED" | "SHARED_WITH_ME" | "SHARED_BY_ME";
+    /**
+     * The status of the domain list.
+     */
+    Status: "COMPLETE" | "DELETING" | "UPDATING" | "INACTIVE_OWNER_ACCOUNT_CLOSED";
+    /**
+     * Additional information about the status of the rule group, if available.
+     */
+    StatusMessage: string;
+};
+/**
+ * A single firewall rule in a rule group.
+ */
+export type FirewallRule = {
+    /**
+     * The action that DNS Firewall should take on a DNS query when it matches one of the domains in the rule's domain list, or a threat in a DNS Firewall Advvanced rule:
+     *
+     * - `ALLOW` - Permit the request to go through. Not available for DNS Firewall Advanced rules.
+     * - `ALERT` - Permit the request to go through but send an alert to the logs.
+     * - `BLOCK` - Disallow the request. If this is specified,then `BlockResponse` must also be specified.
+     *
+     * if `BlockResponse` is `OVERRIDE` , then all of the following `OVERRIDE` attributes must be specified:
+     *
+     * - `BlockOverrideDnsType`
+     * - `BlockOverrideDomain`
+     * - `BlockOverrideTtl`
+     */
+    Action: "ALLOW" | "BLOCK" | "ALERT";
+    /**
+     * The DNS record's type. This determines the format of the record value that you provided in `BlockOverrideDomain` . Used for the rule action `BLOCK` with a `BlockResponse` setting of `OVERRIDE` .
+     */
+    BlockOverrideDnsType?: "CNAME" | undefined;
+    /**
+     * The custom DNS record to send back in response to the query. Used for the rule action `BLOCK` with a `BlockResponse` setting of `OVERRIDE` .
+     * @minLength 1
+     * @maxLength 255
+     */
+    BlockOverrideDomain?: string | undefined;
+    /**
+     * The recommended amount of time, in seconds, for the DNS resolver or web browser to cache the provided override record. Used for the rule action `BLOCK` with a `BlockResponse` setting of `OVERRIDE` .
+     * @min 0
+     * @max 604800
+     */
+    BlockOverrideTtl?: number | undefined;
+    /**
+     * The way that you want DNS Firewall to block the request. Used for the rule action setting `BLOCK` .
+     *
+     * - `NODATA` - Respond indicating that the query was successful, but no response is available for it.
+     * - `NXDOMAIN` - Respond indicating that the domain name that's in the query doesn't exist.
+     * - `OVERRIDE` - Provide a custom override in the response. This option requires custom handling details in the rule's `BlockOverride*` settings.
+     */
+    BlockResponse?: "NODATA" | "NXDOMAIN" | "OVERRIDE" | undefined;
+    /**
+     * The confidence threshold for DNS Firewall Advanced. You must provide this value when you create a DNS Firewall Advanced rule. The confidence level values mean:
+     *
+     * - `LOW` : Provides the highest detection rate for threats, but also increases false positives.
+     * - `MEDIUM` : Provides a balance between detecting threats and false positives.
+     * - `HIGH` : Detects only the most well corroborated threats with a low rate of false positives.
+     */
+    ConfidenceThreshold?: "LOW" | "MEDIUM" | "HIGH" | undefined;
+    /**
+     * The type of the DNS Firewall Advanced rule. Valid values are:
+     *
+     * - `DGA` : Domain generation algorithms detection. DGAs are used by attackers to generate a large number of domains to to launch malware attacks.
+     * - `DNS_TUNNELING` : DNS tunneling detection. DNS tunneling is used by attackers to exfiltrate data from the client by using the DNS tunnel without making a network connection to the client.
+     */
+    DnsThreatProtection?: "DGA" | "DNS_TUNNELING" | undefined;
+    /**
+     * The ID of the domain list that's used in the rule.
+     * @minLength 1
+     * @maxLength 64
+     */
+    FirewallDomainListId?: string | undefined;
+    /**
+     * How you want the the rule to evaluate DNS redirection in the DNS redirection chain, such as CNAME, or DNAME.
+     *
+     * `Inspect_Redirection_Domain` (Default) inspects all domains in the redirection chain. The individual domains in the redirection chain must be added to the domain list.
+     *
+     * `Trust_Redirection_Domain` inspects only the first domain in the redirection chain. You don't need to add the subsequent domains in the domain in the redirection list to the domain list.
+     */
+    FirewallDomainRedirectionAction?: "INSPECT_REDIRECTION_DOMAIN" | "TRUST_REDIRECTION_DOMAIN" | undefined;
+    /**
+     * The priority of the rule in the rule group. This value must be unique within the rule group. DNS Firewall processes the rules in a rule group by order of priority, starting from the lowest setting.
+     */
+    Priority: number;
+    /**
+     * The DNS query type you want the rule to evaluate. Allowed values are;
+     *
+     * - A: Returns an IPv4 address.
+     * - AAAA: Returns an Ipv6 address.
+     * - CAA: Restricts CAs that can create SSL/TLS certifications for the domain.
+     * - CNAME: Returns another domain name.
+     * - DS: Record that identifies the DNSSEC signing key of a delegated zone.
+     * - MX: Specifies mail servers.
+     * - NAPTR: Regular-expression-based rewriting of domain names.
+     * - NS: Authoritative name servers.
+     * - PTR: Maps an IP address to a domain name.
+     * - SOA: Start of authority record for the zone.
+     * - SPF: Lists the servers authorized to send emails from a domain.
+     * - SRV: Application specific values that identify servers.
+     * - TXT: Verifies email senders and application-specific values.
+     * - A query type you define by using the DNS type ID, for example 28 for AAAA. The values must be defined as TYPE NUMBER , where the NUMBER can be 1-65334, for example, TYPE28. For more information, see [List of DNS record types](https://docs.aws.amazon.com/https://en.wikipedia.org/wiki/List_of_DNS_record_types) .
+     * @minLength 1
+     * @maxLength 16
+     */
+    Qtype?: string | undefined;
+};
+//# sourceMappingURL=aws-route53resolver-firewallrulegroup.d.ts.map

package/out/exports/resources.generated/aws-route53resolver-firewallrulegroupassociation.d.ts

@@ -0,0 +1,89 @@
+import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
+export type Route53ResolverFirewallRuleGroupAssociation = ResourceDefinitionWithAttributes<"AWS::Route53Resolver::FirewallRuleGroupAssociation", Route53ResolverFirewallRuleGroupAssociationProps, Route53ResolverFirewallRuleGroupAssociationAttribs>;
+/**
+ * An association between a firewall rule group and a VPC, which enables DNS filtering for the VPC.
+ */
+export type Route53ResolverFirewallRuleGroupAssociationProps = {
+    /**
+     * The unique identifier of the firewall rule group.
+     * @minLength 1
+     * @maxLength 64
+     */
+    FirewallRuleGroupId: string;
+    /**
+     * If enabled, this setting disallows modification or removal of the association, to help prevent against accidentally altering DNS firewall protections.
+     */
+    MutationProtection?: "ENABLED" | "DISABLED" | undefined;
+    /**
+     * The name of the association.
+     * @minLength 0
+     * @maxLength 64
+     * @pattern (?!^[0-9]+$)([a-zA-Z0-9\-_' ']+)
+     */
+    Name?: string | undefined;
+    /**
+     * The setting that determines the processing order of the rule group among the rule groups that are associated with a single VPC. DNS Firewall filters VPC traffic starting from rule group with the lowest numeric priority setting.
+     *
+     * You must specify a unique priority for each rule group that you associate with a single VPC. To make it easier to insert rule groups later, leave space between the numbers, for example, use 101, 200, and so on. You can change the priority setting for a rule group association after you create it.
+     *
+     * The allowed values for `Priority` are between 100 and 9900 (excluding 100 and 9900).
+     */
+    Priority: number;
+    /**
+     * A list of the tag keys and values that you want to associate with the rule group.
+     */
+    Tags?: Tag[] | undefined;
+    /**
+     * The unique identifier of the VPC that is associated with the rule group.
+     * @minLength 1
+     * @maxLength 64
+     */
+    VpcId: string;
+};
+export type Route53ResolverFirewallRuleGroupAssociationAttribs = {
+    /**
+     * The Amazon Resource Name (ARN) of the firewall rule group association.
+     * @minLength 1
+     * @maxLength 600
+     */
+    Arn: string;
+    /**
+     * The date and time that the association was created, in Unix time format and Coordinated Universal Time (UTC).
+     * @minLength 20
+     * @maxLength 40
+     */
+    CreationTime: string;
+    /**
+     * A unique string defined by you to identify the request. This allows you to retry failed requests without the risk of running the operation twice. This can be any unique string, for example, a timestamp.
+     * @minLength 1
+     * @maxLength 255
+     */
+    CreatorRequestId: string;
+    /**
+     * The identifier for the association.
+     * @minLength 1
+     * @maxLength 64
+     */
+    Id: string;
+    /**
+     * The owner of the association, used only for associations that are not managed by you. If you use AWS Firewall Manager to manage your firewallls from DNS Firewall, then this reports Firewall Manager as the managed owner.
+     * @minLength 1
+     * @maxLength 512
+     */
+    ManagedOwnerName: string;
+    /**
+     * The date and time that the association was last modified, in Unix time format and Coordinated Universal Time (UTC).
+     * @minLength 20
+     * @maxLength 40
+     */
+    ModificationTime: string;
+    /**
+     * The current status of the association.
+     */
+    Status: "COMPLETE" | "DELETING" | "UPDATING" | "INACTIVE_OWNER_ACCOUNT_CLOSED";
+    /**
+     * Additional information about the status of the response, if available.
+     */
+    StatusMessage: string;
+};
+//# sourceMappingURL=aws-route53resolver-firewallrulegroupassociation.d.ts.map

package/out/exports/resources.generated/aws-route53resolver-outpostresolver.d.ts

@@ -0,0 +1,78 @@
+import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
+export type Route53ResolverOutpostResolver = ResourceDefinitionWithAttributes<"AWS::Route53Resolver::OutpostResolver", Route53ResolverOutpostResolverProps, Route53ResolverOutpostResolverAttribs>;
+/**
+ * Creates a Amazon Route 53 Resolver on an Outpost.
+ */
+export type Route53ResolverOutpostResolverProps = {
+    /**
+     * Amazon EC2 instance count for the Resolver on the Outpost.
+     * @min 4
+     * @max 256
+     */
+    InstanceCount?: number | undefined;
+    /**
+     * Name of the Resolver.
+     * @minLength 1
+     * @maxLength 255
+     */
+    Name: string;
+    /**
+     * The ARN (Amazon Resource Name) for the Outpost.
+     * @minLength 1
+     * @maxLength 1024
+     */
+    OutpostArn: string;
+    /**
+     * The Amazon EC2 instance type. If you specify this, you must also specify a value for the `OutpostArn` .
+     * @minLength 1
+     * @maxLength 255
+     */
+    PreferredInstanceType: string;
+    /**
+     * A key value pair that helps you identify a Route 53 Resolver .
+     */
+    Tags?: Tag[] | undefined;
+};
+export type Route53ResolverOutpostResolverAttribs = {
+    /**
+     * The ARN (Amazon Resource Name) for the Resolver on an Outpost.
+     * @minLength 1
+     * @maxLength 1024
+     */
+    Arn: string;
+    /**
+     * The date and time that the Outpost Resolver was created, in Unix time format and Coordinated Universal Time (UTC).
+     * @minLength 20
+     * @maxLength 40
+     */
+    CreationTime: string;
+    /**
+     * A unique string that identifies the request that created the Resolver endpoint. The `CreatorRequestId` allows failed requests to be retried without the risk of running the operation twice.
+     * @minLength 1
+     * @maxLength 255
+     */
+    CreatorRequestId: string;
+    /**
+     * The ID of the Resolver on Outpost.
+     * @minLength 1
+     * @maxLength 64
+     */
+    Id: string;
+    /**
+     * The date and time that the Outpost Resolver was modified, in Unix time format and Coordinated Universal Time (UTC).
+     * @minLength 20
+     * @maxLength 40
+     */
+    ModificationTime: string;
+    /**
+     * Status of the Resolver.
+     *
+     * Valid Values: CREATING | OPERATIONAL | UPDATING | DELETING | ACTION_NEEDED | FAILED_CREATION | FAILED_DELETION.
+     */
+    Status: "CREATING" | "OPERATIONAL" | "DELETING" | "UPDATING" | "ACTION_NEEDED" | "FAILED_CREATION" | "FAILED_DELETION";
+    /**
+     * A detailed description of the Resolver.
+     */
+    StatusMessage: string;
+};
+//# sourceMappingURL=aws-route53resolver-outpostresolver.d.ts.map

package/out/exports/resources.generated/aws-route53resolver-resolverconfig.d.ts

@@ -0,0 +1,36 @@
+import type { ResourceDefinitionWithAttributes } from "../main.ts";
+export type Route53ResolverResolverConfig = ResourceDefinitionWithAttributes<"AWS::Route53Resolver::ResolverConfig", Route53ResolverResolverConfigProps, Route53ResolverResolverConfigAttribs>;
+/**
+ * A complex type that contains information about a Resolver configuration for a VPC.
+ */
+export type Route53ResolverResolverConfigProps = {
+    /**
+     * Represents the desired status of `AutodefinedReverse` . The only supported value on creation is `DISABLE` . Deletion of this resource will return `AutodefinedReverse` to its default value of `ENABLED` .
+     */
+    AutodefinedReverseFlag: "DISABLE";
+    /**
+     * The ID of the Amazon Virtual Private Cloud VPC or a Route 53 Profile that you're configuring Resolver for.
+     * @minLength 1
+     * @maxLength 64
+     */
+    ResourceId: string;
+};
+export type Route53ResolverResolverConfigAttribs = {
+    /**
+     * The status of whether or not the Route 53 Resolver will create autodefined rules for reverse DNS lookups. This is enabled by default.
+     */
+    AutodefinedReverse: "ENABLING" | "ENABLED" | "DISABLING" | "DISABLED";
+    /**
+     * ID for the Route 53 Resolver configuration.
+     * @minLength 1
+     * @maxLength 64
+     */
+    Id: string;
+    /**
+     * The owner account ID of the Amazon Virtual Private Cloud VPC.
+     * @minLength 12
+     * @maxLength 32
+     */
+    OwnerId: string;
+};
+//# sourceMappingURL=aws-route53resolver-resolverconfig.d.ts.map

package/out/exports/resources.generated/aws-route53resolver-resolverdnssecconfig.d.ts

@@ -0,0 +1,32 @@
+import type { ResourceDefinitionWithAttributes } from "../main.ts";
+export type Route53ResolverResolverDNSSECConfig = ResourceDefinitionWithAttributes<"AWS::Route53Resolver::ResolverDNSSECConfig", Route53ResolverResolverDNSSECConfigProps, Route53ResolverResolverDNSSECConfigAttribs>;
+/**
+ * The `AWS::Route53Resolver::ResolverDNSSECConfig` resource is a complex type that contains information about a configuration for DNSSEC validation.
+ */
+export type Route53ResolverResolverDNSSECConfigProps = {
+    /**
+     * The ID of the virtual private cloud (VPC) that you're configuring the DNSSEC validation status for.
+     * @minLength 1
+     * @maxLength 64
+     */
+    ResourceId?: string | undefined;
+};
+export type Route53ResolverResolverDNSSECConfigAttribs = {
+    /**
+     * The primary identifier of this `ResolverDNSSECConfig` resource. For example: `rdsc-689d45d1ae623bf3` .
+     * @minLength 1
+     * @maxLength 64
+     */
+    Id: string;
+    /**
+     * The AWS account of the owner. For example: `111122223333` .
+     * @minLength 12
+     * @maxLength 32
+     */
+    OwnerId: string;
+    /**
+     * The current status of this `ResolverDNSSECConfig` resource. For example: `Enabled` .
+     */
+    ValidationStatus: "ENABLING" | "ENABLED" | "DISABLING" | "DISABLED";
+};
+//# sourceMappingURL=aws-route53resolver-resolverdnssecconfig.d.ts.map

package/out/exports/resources.generated/aws-route53resolver-resolverendpoint.d.ts

@@ -0,0 +1,114 @@
+import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
+export type Route53ResolverResolverEndpoint = ResourceDefinitionWithAttributes<"AWS::Route53Resolver::ResolverEndpoint", Route53ResolverResolverEndpointProps, Route53ResolverResolverEndpointAttribs>;
+/**
+ * Creates a Resolver endpoint. There are two types of Resolver endpoints, inbound and outbound:
+ *
+ * - An *inbound Resolver endpoint* forwards DNS queries to the DNS service for a VPC from your network.
+ * - An *outbound Resolver endpoint* forwards DNS queries from the DNS service for a VPC to your network.
+ *
+ * > - You cannot update `ResolverEndpointType` and `IpAddresses` in the same request.
+ * > - When you update a dual-stack IP address, you must update both IP addresses. You can’t update only an IPv4 or IPv6 and keep an existing IP address.
+ */
+export type Route53ResolverResolverEndpointProps = {
+    /**
+     * Indicates whether the Resolver endpoint allows inbound or outbound DNS queries:
+     *
+     * - `INBOUND` : allows DNS queries to your VPC from your network
+     * - `OUTBOUND` : allows DNS queries from your VPC to your network
+     */
+    Direction: string;
+    /**
+     * The subnets and IP addresses in your VPC that DNS queries originate from (for outbound endpoints) or that you forward DNS queries to (for inbound endpoints). The subnet ID uniquely identifies a VPC.
+     *
+     * > Even though the minimum is 1, Route 53 requires that you create at least two.
+     */
+    IpAddresses: IpAddressRequest[];
+    /**
+     * A friendly name that lets you easily find a configuration in the Resolver dashboard in the Route 53 console.
+     */
+    Name?: string | undefined;
+    /**
+     * The ARN (Amazon Resource Name) for the Outpost.
+     */
+    OutpostArn?: string | undefined;
+    /**
+     * The Amazon EC2 instance type.
+     */
+    PreferredInstanceType?: string | undefined;
+    /**
+     * Protocols used for the endpoint. DoH-FIPS is applicable for inbound endpoints only.
+     *
+     * For an inbound endpoint you can apply the protocols as follows:
+     *
+     * - Do53 and DoH in combination.
+     * - Do53 and DoH-FIPS in combination.
+     * - Do53 alone.
+     * - DoH alone.
+     * - DoH-FIPS alone.
+     * - None, which is treated as Do53.
+     *
+     * For an outbound endpoint you can apply the protocols as follows:
+     *
+     * - Do53 and DoH in combination.
+     * - Do53 alone.
+     * - DoH alone.
+     * - None, which is treated as Do53.
+     */
+    Protocols?: string[] | undefined;
+    /**
+     * The Resolver endpoint IP address type.
+     */
+    ResolverEndpointType?: string | undefined;
+    /**
+     * The ID of one or more security groups that control access to this VPC. The security group must include one or more inbound rules (for inbound endpoints) or outbound rules (for outbound endpoints). Inbound and outbound rules must allow TCP and UDP access. For inbound access, open port 53. For outbound access, open the port that you're using for DNS queries on your network.
+     */
+    SecurityGroupIds: string[];
+    /**
+     * Route 53 Resolver doesn't support updating tags through CloudFormation.
+     */
+    Tags?: Tag[] | undefined;
+};
+export type Route53ResolverResolverEndpointAttribs = {
+    /**
+     * The Amazon Resource Name (ARN) of the resolver endpoint, such as `arn:aws:route53resolver:us-east-1:123456789012:resolver-endpoint/resolver-endpoint-a1bzhi` .
+     */
+    Arn: string;
+    /**
+     * Indicates whether the resolver endpoint allows inbound or outbound DNS queries.
+     */
+    Direction: string;
+    /**
+     * The ID of the VPC that you want to create the resolver endpoint in.
+     */
+    HostVPCId: string;
+    /**
+     * The number of IP addresses that the resolver endpoint can use for DNS queries.
+     */
+    IpAddressCount: string;
+    /**
+     * The name that you assigned to the resolver endpoint when you created the endpoint.
+     */
+    Name: string;
+    /**
+     * The ID of the resolver endpoint.
+     */
+    ResolverEndpointId: string;
+};
+/**
+ * In a [CreateResolverEndpoint](https://docs.aws.amazon.com/Route53/latest/APIReference/API_route53resolver_CreateResolverEndpoint.html) request, the IP address that DNS queries originate from (for outbound endpoints) or that you forward DNS queries to (for inbound endpoints). `IpAddressRequest` also includes the ID of the subnet that contains the IP address.
+ */
+export type IpAddressRequest = {
+    /**
+     * The IPv4 address that you want to use for DNS queries.
+     */
+    Ip?: string | undefined;
+    /**
+     * The IPv6 address that you want to use for DNS queries.
+     */
+    Ipv6?: string | undefined;
+    /**
+     * The ID of the subnet that contains the IP address.
+     */
+    SubnetId: string;
+};
+//# sourceMappingURL=aws-route53resolver-resolverendpoint.d.ts.map

package/out/exports/resources.generated/aws-route53resolver-resolverqueryloggingconfig.d.ts

@@ -0,0 +1,77 @@
+import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
+export type Route53ResolverResolverQueryLoggingConfig = ResourceDefinitionWithAttributes<"AWS::Route53Resolver::ResolverQueryLoggingConfig", Route53ResolverResolverQueryLoggingConfigProps, Route53ResolverResolverQueryLoggingConfigAttribs>;
+/**
+ * The AWS::Route53Resolver::ResolverQueryLoggingConfig resource is a complex type that contains settings for one query logging configuration.
+ */
+export type Route53ResolverResolverQueryLoggingConfigProps = {
+    /**
+     * The ARN of the resource that you want Resolver to send query logs: an Amazon S3 bucket, a CloudWatch Logs log group, or a Kinesis Data Firehose delivery stream.
+     * @minLength 1
+     * @maxLength 600
+     */
+    DestinationArn?: string | undefined;
+    /**
+     * The name of the query logging configuration.
+     * @minLength 1
+     * @maxLength 64
+     * @pattern (?!^[0-9]+$)([a-zA-Z0-9\-_' ']+)
+     */
+    Name?: string | undefined;
+    /**
+     * An array of key-value pairs to apply to this resource.
+     */
+    Tags?: Tag[] | undefined;
+};
+export type Route53ResolverResolverQueryLoggingConfigAttribs = {
+    /**
+     * The Amazon Resource Name (ARN) for the query logging configuration.
+     * @minLength 1
+     * @maxLength 600
+     */
+    Arn: string;
+    /**
+     * The number of VPCs that are associated with the query logging configuration.
+     */
+    AssociationCount: number;
+    /**
+     * The date and time that the query logging configuration was created, in Unix time format and Coordinated Universal Time (UTC).
+     * @minLength 20
+     * @maxLength 40
+     */
+    CreationTime: string;
+    /**
+     * A unique string that identifies the request that created the query logging configuration. The `CreatorRequestId` allows failed requests to be retried without the risk of running the operation twice.
+     * @minLength 1
+     * @maxLength 255
+     */
+    CreatorRequestId: string;
+    /**
+     * The ID for the query logging configuration.
+     * @minLength 1
+     * @maxLength 64
+     */
+    Id: string;
+    /**
+     * The AWS account ID for the account that created the query logging configuration.
+     * @minLength 12
+     * @maxLength 32
+     */
+    OwnerId: string;
+    /**
+     * An indication of whether the query logging configuration is shared with other AWS account s, or was shared with the current account by another AWS account . Sharing is configured through AWS Resource Access Manager ( AWS RAM ).
+     */
+    ShareStatus: "NOT_SHARED" | "SHARED_WITH_ME" | "SHARED_BY_ME";
+    /**
+     * The status of the specified query logging configuration. Valid values include the following:
+     *
+     * - `CREATING` : Resolver is creating the query logging configuration.
+     * - `CREATED` : The query logging configuration was successfully created. Resolver is logging queries that originate in the specified VPC.
+     * - `DELETING` : Resolver is deleting this query logging configuration.
+     * - `FAILED` : Resolver can't deliver logs to the location that is specified in the query logging configuration. Here are two common causes:
+     *
+     * - The specified destination (for example, an Amazon S3 bucket) was deleted.
+     * - Permissions don't allow sending logs to the destination.
+     */
+    Status: "CREATING" | "CREATED" | "DELETING" | "FAILED";
+};
+//# sourceMappingURL=aws-route53resolver-resolverqueryloggingconfig.d.ts.map

package/out/exports/resources.generated/aws-route53resolver-resolverqueryloggingconfigassociation.d.ts

@@ -0,0 +1,56 @@
+import type { ResourceDefinitionWithAttributes } from "../main.ts";
+export type Route53ResolverResolverQueryLoggingConfigAssociation = ResourceDefinitionWithAttributes<"AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation", Route53ResolverResolverQueryLoggingConfigAssociationProps, Route53ResolverResolverQueryLoggingConfigAssociationAttribs>;
+/**
+ * The AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation resource is a configuration for DNS query logging. After you create a query logging configuration, Amazon Route 53 begins to publish log data to an Amazon CloudWatch Logs log group.
+ */
+export type Route53ResolverResolverQueryLoggingConfigAssociationProps = {
+    /**
+     * The ID of the query logging configuration that a VPC is associated with.
+     * @minLength 1
+     * @maxLength 64
+     */
+    ResolverQueryLogConfigId?: string | undefined;
+    /**
+     * The ID of the Amazon VPC that is associated with the query logging configuration.
+     * @minLength 1
+     * @maxLength 64
+     */
+    ResourceId?: string | undefined;
+};
+export type Route53ResolverResolverQueryLoggingConfigAssociationAttribs = {
+    /**
+     * The date and time that the VPC was associated with the query logging configuration, in Unix time format and Coordinated Universal Time (UTC).
+     * @minLength 20
+     * @maxLength 40
+     */
+    CreationTime: string;
+    /**
+     * If the value of `Status` is `FAILED` , the value of `Error` indicates the cause:
+     *
+     * - `DESTINATION_NOT_FOUND` : The specified destination (for example, an Amazon S3 bucket) was deleted.
+     * - `ACCESS_DENIED` : Permissions don't allow sending logs to the destination.
+     *
+     * If the value of `Status` is a value other than `FAILED` , `Error` is null.
+     */
+    Error: "NONE" | "DESTINATION_NOT_FOUND" | "ACCESS_DENIED";
+    /**
+     * Contains additional information about the error. If the value or `Error` is null, the value of `ErrorMessage` is also null.
+     */
+    ErrorMessage: string;
+    /**
+     * The ID of the query logging association.
+     * @minLength 1
+     * @maxLength 64
+     */
+    Id: string;
+    /**
+     * The status of the specified query logging association. Valid values include the following:
+     *
+     * - `CREATING` : Resolver is creating an association between an Amazon Virtual Private Cloud (Amazon VPC) and a query logging configuration.
+     * - `CREATED` : The association between an Amazon VPC and a query logging configuration was successfully created. Resolver is logging queries that originate in the specified VPC.
+     * - `DELETING` : Resolver is deleting this query logging association.
+     * - `FAILED` : Resolver either couldn't create or couldn't delete the query logging association.
+     */
+    Status: "CREATING" | "ACTIVE" | "ACTION_NEEDED" | "DELETING" | "FAILED" | "OVERRIDDEN";
+};
+//# sourceMappingURL=aws-route53resolver-resolverqueryloggingconfigassociation.d.ts.map