@propulsionworks/cloudformation 0.0.1 → 0.1.0

package/out/exports/resources.generated/aws-route53resolver-resolverrule.d.ts

@@ -0,0 +1,101 @@
+import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
+export type Route53ResolverResolverRule = ResourceDefinitionWithAttributes<"AWS::Route53Resolver::ResolverRule", Route53ResolverResolverRuleProps, Route53ResolverResolverRuleAttribs>;
+/**
+ * For DNS queries that originate in your VPCs, specifies which Resolver endpoint the queries pass through, one domain name that you want to forward to your network, and the IP addresses of the DNS resolvers in your network.
+ */
+export type Route53ResolverResolverRuleProps = {
+    /**
+     * DNS queries for this domain name are forwarded to the IP addresses that are specified in `TargetIps` . If a query matches multiple Resolver rules (example.com and www.example.com), the query is routed using the Resolver rule that contains the most specific domain name (www.example.com).
+     * @minLength 1
+     * @maxLength 256
+     */
+    DomainName?: string | undefined;
+    /**
+     * The name for the Resolver rule, which you specified when you created the Resolver rule.
+     * @minLength 0
+     * @maxLength 64
+     */
+    Name?: string | undefined;
+    /**
+     * The ID of the endpoint that the rule is associated with.
+     * @minLength 1
+     * @maxLength 64
+     */
+    ResolverEndpointId?: string | undefined;
+    /**
+     * When you want to forward DNS queries for specified domain name to resolvers on your network, specify `FORWARD` .
+     *
+     * When you have a forwarding rule to forward DNS queries for a domain to your network and you want Resolver to process queries for a subdomain of that domain, specify `SYSTEM` .
+     *
+     * For example, to forward DNS queries for example.com to resolvers on your network, you create a rule and specify `FORWARD` for `RuleType` . To then have Resolver process queries for apex.example.com, you create a rule and specify `SYSTEM` for `RuleType` .
+     *
+     * Currently, only Resolver can create rules that have a value of `RECURSIVE` for `RuleType` .
+     */
+    RuleType: "FORWARD" | "SYSTEM" | "RECURSIVE" | "DELEGATE";
+    /**
+     * Tags help organize and categorize your Resolver rules. Each tag consists of a key and an optional value, both of which you define.
+     */
+    Tags?: Tag[] | undefined;
+    /**
+     * An array that contains the IP addresses and ports that an outbound endpoint forwards DNS queries to. Typically, these are the IP addresses of DNS resolvers on your network.
+     */
+    TargetIps?: TargetAddress[] | undefined;
+};
+export type Route53ResolverResolverRuleAttribs = {
+    /**
+     * The Amazon Resource Name (ARN) of the resolver rule, such as `arn:aws:route53resolver:us-east-1:123456789012:resolver-rule/resolver-rule-a1bzhi` .
+     */
+    Arn: string;
+    /**
+     * DNS queries for this domain name are forwarded to the IP addresses that are specified in TargetIps. If a query matches multiple resolver rules (example.com and www.example.com), the query is routed using the resolver rule that contains the most specific domain name (www.example.com).
+     * @minLength 1
+     * @maxLength 256
+     */
+    DomainName: string;
+    /**
+     * A friendly name that lets you easily find a rule in the Resolver dashboard in the Route 53 console.
+     * @minLength 0
+     * @maxLength 64
+     */
+    Name: string;
+    /**
+     * The ID of the outbound endpoint that the rule is associated with, such as `rslvr-out-fdc049932dexample` .
+     * @minLength 1
+     * @maxLength 64
+     */
+    ResolverEndpointId: string;
+    /**
+     * When the value of `RuleType` is `FORWARD` , the ID that Resolver assigned to the resolver rule when you created it, such as `rslvr-rr-5328a0899aexample` . This value isn't applicable when `RuleType` is `SYSTEM` .
+     */
+    ResolverRuleId: string;
+};
+/**
+ * In a [CreateResolverRule](https://docs.aws.amazon.com/Route53/latest/APIReference/API_route53resolver_CreateResolverRule.html) request, an array of the IPs that you want to forward DNS queries to.
+ */
+export type TargetAddress = {
+    /**
+     * One IPv4 address that you want to forward DNS queries to.
+     */
+    Ip?: string | undefined;
+    /**
+     * One IPv6 address that you want to forward DNS queries to.
+     */
+    Ipv6?: string | undefined;
+    /**
+     * The port at `Ip` that you want to forward DNS queries to.
+     * @minLength 0
+     * @maxLength 65535
+     */
+    Port?: string | undefined;
+    /**
+     * The protocols for the target address. The protocol you choose needs to be supported by the outbound endpoint of the Resolver rule.
+     */
+    Protocol?: "Do53" | "DoH" | undefined;
+    /**
+     * The Server Name Indication of the DoH server that you want to forward queries to. This is only used if the Protocol of the `TargetAddress` is `DoH` .
+     * @minLength 0
+     * @maxLength 255
+     */
+    ServerNameIndication?: string | undefined;
+};
+//# sourceMappingURL=aws-route53resolver-resolverrule.d.ts.map

package/out/exports/resources.generated/aws-route53resolver-resolverruleassociation.d.ts

@@ -0,0 +1,38 @@
+import type { ResourceDefinitionWithAttributes } from "../main.ts";
+export type Route53ResolverResolverRuleAssociation = ResourceDefinitionWithAttributes<"AWS::Route53Resolver::ResolverRuleAssociation", Route53ResolverResolverRuleAssociationProps, Route53ResolverResolverRuleAssociationAttribs>;
+/**
+ * In the response to an [AssociateResolverRule](https://docs.aws.amazon.com/Route53/latest/APIReference/API_route53resolver_AssociateResolverRule.html) , [DisassociateResolverRule](https://docs.aws.amazon.com/Route53/latest/APIReference/API_route53resolver_DisassociateResolverRule.html) , or [ListResolverRuleAssociations](https://docs.aws.amazon.com/Route53/latest/APIReference/API_route53resolver_ListResolverRuleAssociations.html) request, provides information about an association between a resolver rule and a VPC. The association determines which DNS queries that originate in the VPC are forwarded to your network.
+ */
+export type Route53ResolverResolverRuleAssociationProps = {
+    /**
+     * The name of an association between a Resolver rule and a VPC.
+     */
+    Name?: string | undefined;
+    /**
+     * The ID of the Resolver rule that you associated with the VPC that is specified by `VPCId` .
+     */
+    ResolverRuleId: string;
+    /**
+     * The ID of the VPC that you associated the Resolver rule with.
+     */
+    VPCId: string;
+};
+export type Route53ResolverResolverRuleAssociationAttribs = {
+    /**
+     * The name of an association between a resolver rule and a VPC, such as `test.example.com in beta VPC` .
+     */
+    Name: string;
+    /**
+     * The ID of the resolver rule association that you want to get information about, such as `rslvr-rrassoc-97242eaf88example` .
+     */
+    ResolverRuleAssociationId: string;
+    /**
+     * The ID of the resolver rule that you associated with the VPC that is specified by `VPCId` , such as `rslvr-rr-5328a0899example` .
+     */
+    ResolverRuleId: string;
+    /**
+     * The ID of the VPC that you associated the resolver rule with, such as `vpc-03cf94c75cexample` .
+     */
+    VPCId: string;
+};
+//# sourceMappingURL=aws-route53resolver-resolverruleassociation.d.ts.map

package/out/exports/resources.generated/aws-rum-appmonitor.d.ts

@@ -0,0 +1,332 @@
+import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
+export type RUMAppMonitor = ResourceDefinitionWithAttributes<"AWS::RUM::AppMonitor", RUMAppMonitorProps, RUMAppMonitorAttribs>;
+/**
+ * Creates a CloudWatch RUM app monitor, which you can use to collect telemetry data from your application and send it to CloudWatch RUM. The data includes performance and reliability information such as page load time, client-side errors, and user behavior.
+ *
+ * After you create an app monitor, sign in to the CloudWatch RUM console to get the JavaScript code snippet to add to your web application. For more information, see [How do I find a code snippet that I've already generated?](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-RUM-find-code-snippet.html)
+ */
+export type RUMAppMonitorProps = {
+    /**
+     * A structure that contains much of the configuration data for the app monitor. If you are using Amazon Cognito for authorization, you must include this structure in your request, and it must include the ID of the Amazon Cognito identity pool to use for authorization. If you don't include `AppMonitorConfiguration` , you must set up your own authorization method. For more information, see [Authorize your application to send data to AWS](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-RUM-get-started-authorization.html) .
+     *
+     * If you omit this argument, the sample rate used for CloudWatch RUM is set to 10% of the user sessions.
+     */
+    AppMonitorConfiguration?: AppMonitorConfiguration | undefined;
+    /**
+     * Specifies whether this app monitor allows the web client to define and send custom events. If you omit this parameter, custom events are `DISABLED` .
+     */
+    CustomEvents?: CustomEvents | undefined;
+    /**
+     * Data collected by CloudWatch RUM is kept by RUM for 30 days and then deleted. This parameter specifies whether CloudWatch RUM sends a copy of this telemetry data to Amazon CloudWatch Logs in your account. This enables you to keep the telemetry data for more than 30 days, but it does incur Amazon CloudWatch Logs charges.
+     *
+     * If you omit this parameter, the default is `false` .
+     */
+    CwLogEnabled?: boolean | undefined;
+    /**
+     * A structure that contains the configuration for how an app monitor can deobfuscate stack traces.
+     */
+    DeobfuscationConfiguration?: DeobfuscationConfiguration | undefined;
+    /**
+     * The top-level internet domain name for which your application has administrative authority. This parameter or the `DomainList` parameter is required.
+     * @minLength 1
+     * @maxLength 253
+     * @pattern ^(localhost)|^((25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)$|^(?![-.])([A-Za-z0-9-\.\-]{0,63})((?![-])([a-zA-Z0-9]{1}|^[a-zA-Z0-9]{0,1}))\.(?![-])[A-Za-z-0-9]{1,63}((?![-])([a-zA-Z0-9]{1}|^[a-zA-Z0-9]{0,1}))|^(\*\.)(?![-.])([A-Za-z0-9-\.\-]{0,63})((?![-])([a-zA-Z0-9]{1}|^[a-zA-Z0-9]{0,1}))\.(?![-])[A-Za-z-0-9]{1,63}((?![-])([a-zA-Z0-9]{1}|^[a-zA-Z0-9]{0,1}))
+     */
+    Domain: string;
+    /**
+     * List the domain names for which your application has administrative authority. This parameter or the `Domain` parameter is required.
+     *
+     * You can have a minimum of 1 and a maximum of 5 `Domain` under `DomainList` . Each `Domain` must be a minimum length of 1 and a maximum of 253 characters.
+     */
+    DomainList?: string[] | undefined;
+    /**
+     * A name for the app monitor. This parameter is required.
+     * @minLength 1
+     * @maxLength 255
+     * @pattern [\.\-_/#A-Za-z0-9]+
+     */
+    Name: string;
+    /**
+     * Use this structure to assign a resource-based policy to a CloudWatch RUM app monitor to control access to it. Each app monitor can have one resource-based policy. The maximum size of the policy is 4 KB. To learn more about using resource policies with RUM, see [Using resource-based policies with CloudWatch RUM](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-RUM-resource-policies.html) .
+     */
+    ResourcePolicy?: ResourcePolicy | undefined;
+    /**
+     * Assigns one or more tags (key-value pairs) to the app monitor.
+     *
+     * Tags can help you organize and categorize your resources. You can also use them to scope user permissions by granting a user permission to access or change only resources with certain tag values.
+     *
+     * Tags don't have any semantic meaning to AWS and are interpreted strictly as strings of characters.
+     *
+     * You can associate as many as 50 tags with an app monitor.
+     *
+     * For more information, see [Tagging AWS resources](https://docs.aws.amazon.com/general/latest/gr/aws_tagging.html) .
+     */
+    Tags?: Tag[] | undefined;
+} | {
+    /**
+     * A structure that contains much of the configuration data for the app monitor. If you are using Amazon Cognito for authorization, you must include this structure in your request, and it must include the ID of the Amazon Cognito identity pool to use for authorization. If you don't include `AppMonitorConfiguration` , you must set up your own authorization method. For more information, see [Authorize your application to send data to AWS](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-RUM-get-started-authorization.html) .
+     *
+     * If you omit this argument, the sample rate used for CloudWatch RUM is set to 10% of the user sessions.
+     */
+    AppMonitorConfiguration?: AppMonitorConfiguration | undefined;
+    /**
+     * Specifies whether this app monitor allows the web client to define and send custom events. If you omit this parameter, custom events are `DISABLED` .
+     */
+    CustomEvents?: CustomEvents | undefined;
+    /**
+     * Data collected by CloudWatch RUM is kept by RUM for 30 days and then deleted. This parameter specifies whether CloudWatch RUM sends a copy of this telemetry data to Amazon CloudWatch Logs in your account. This enables you to keep the telemetry data for more than 30 days, but it does incur Amazon CloudWatch Logs charges.
+     *
+     * If you omit this parameter, the default is `false` .
+     */
+    CwLogEnabled?: boolean | undefined;
+    /**
+     * A structure that contains the configuration for how an app monitor can deobfuscate stack traces.
+     */
+    DeobfuscationConfiguration?: DeobfuscationConfiguration | undefined;
+    /**
+     * The top-level internet domain name for which your application has administrative authority. This parameter or the `DomainList` parameter is required.
+     * @minLength 1
+     * @maxLength 253
+     * @pattern ^(localhost)|^((25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)$|^(?![-.])([A-Za-z0-9-\.\-]{0,63})((?![-])([a-zA-Z0-9]{1}|^[a-zA-Z0-9]{0,1}))\.(?![-])[A-Za-z-0-9]{1,63}((?![-])([a-zA-Z0-9]{1}|^[a-zA-Z0-9]{0,1}))|^(\*\.)(?![-.])([A-Za-z0-9-\.\-]{0,63})((?![-])([a-zA-Z0-9]{1}|^[a-zA-Z0-9]{0,1}))\.(?![-])[A-Za-z-0-9]{1,63}((?![-])([a-zA-Z0-9]{1}|^[a-zA-Z0-9]{0,1}))
+     */
+    Domain?: string | undefined;
+    /**
+     * List the domain names for which your application has administrative authority. This parameter or the `Domain` parameter is required.
+     *
+     * You can have a minimum of 1 and a maximum of 5 `Domain` under `DomainList` . Each `Domain` must be a minimum length of 1 and a maximum of 253 characters.
+     */
+    DomainList: string[];
+    /**
+     * A name for the app monitor. This parameter is required.
+     * @minLength 1
+     * @maxLength 255
+     * @pattern [\.\-_/#A-Za-z0-9]+
+     */
+    Name: string;
+    /**
+     * Use this structure to assign a resource-based policy to a CloudWatch RUM app monitor to control access to it. Each app monitor can have one resource-based policy. The maximum size of the policy is 4 KB. To learn more about using resource policies with RUM, see [Using resource-based policies with CloudWatch RUM](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-RUM-resource-policies.html) .
+     */
+    ResourcePolicy?: ResourcePolicy | undefined;
+    /**
+     * Assigns one or more tags (key-value pairs) to the app monitor.
+     *
+     * Tags can help you organize and categorize your resources. You can also use them to scope user permissions by granting a user permission to access or change only resources with certain tag values.
+     *
+     * Tags don't have any semantic meaning to AWS and are interpreted strictly as strings of characters.
+     *
+     * You can associate as many as 50 tags with an app monitor.
+     *
+     * For more information, see [Tagging AWS resources](https://docs.aws.amazon.com/general/latest/gr/aws_tagging.html) .
+     */
+    Tags?: Tag[] | undefined;
+};
+export type RUMAppMonitorAttribs = {
+    /**
+     * The ID of the app monitor, such as `123456ab-1234-4ca9-9d2f-a1b2c3456789` .
+     * @minLength 36
+     * @maxLength 36
+     * @pattern ^[a-fA-F0-9]{8}-[a-fA-F0-9]{4}-[a-fA-F0-9]{4}-[a-fA-F0-9]{4}-[a-fA-F0-9]{12}$
+     */
+    Id: string;
+};
+/**
+ * This structure contains much of the configuration data for the app monitor.
+ */
+export type AppMonitorConfiguration = {
+    /**
+     * If you set this to `true` , the CloudWatch RUM web client sets two cookies, a session cookie and a user cookie. The cookies allow the CloudWatch RUM web client to collect data relating to the number of users an application has and the behavior of the application across a sequence of events. Cookies are stored in the top-level domain of the current page.
+     */
+    AllowCookies?: boolean | undefined;
+    /**
+     * If you set this to `true` , CloudWatch RUM sends client-side traces to X-Ray for each sampled session. You can then see traces and segments from these user sessions in the RUM dashboard and the CloudWatch ServiceLens console. For more information, see [What is AWS X-Ray ?](https://docs.aws.amazon.com/xray/latest/devguide/aws-xray.html)
+     */
+    EnableXRay?: boolean | undefined;
+    /**
+     * A list of URLs in your website or application to exclude from RUM data collection.
+     *
+     * You can't include both `ExcludedPages` and `IncludedPages` in the same app monitor.
+     */
+    ExcludedPages?: string[] | undefined;
+    /**
+     * A list of pages in your application that are to be displayed with a "favorite" icon in the CloudWatch RUM console.
+     */
+    FavoritePages?: string[] | undefined;
+    /**
+     * The ARN of the guest IAM role that is attached to the Amazon Cognito identity pool that is used to authorize the sending of data to CloudWatch RUM.
+     */
+    GuestRoleArn?: string | undefined;
+    /**
+     * The ID of the Amazon Cognito identity pool that is used to authorize the sending of data to CloudWatch RUM.
+     * @minLength 1
+     * @maxLength 55
+     * @pattern [\w-]+:[0-9a-f-]+
+     */
+    IdentityPoolId?: string | undefined;
+    /**
+     * If this app monitor is to collect data from only certain pages in your application, this structure lists those pages.
+     *
+     * You can't include both `ExcludedPages` and `IncludedPages` in the same app monitor.
+     */
+    IncludedPages?: string[] | undefined;
+    /**
+     * An array of structures that each define a destination that this app monitor will send extended metrics to.
+     */
+    MetricDestinations?: MetricDestination[] | undefined;
+    /**
+     * Specifies the portion of user sessions to use for CloudWatch RUM data collection. Choosing a higher portion gives you more data but also incurs more costs.
+     *
+     * The range for this value is 0 to 1 inclusive. Setting this to 1 means that 100% of user sessions are sampled, and setting it to 0.1 means that 10% of user sessions are sampled.
+     *
+     * If you omit this parameter, the default of 0.1 is used, and 10% of sessions will be sampled.
+     * @min 0
+     * @max 1
+     */
+    SessionSampleRate?: number | undefined;
+    /**
+     * An array that lists the types of telemetry data that this app monitor is to collect.
+     *
+     * - `errors` indicates that RUM collects data about unhandled JavaScript errors raised by your application.
+     * - `performance` indicates that RUM collects performance data about how your application and its resources are loaded and rendered. This includes Core Web Vitals.
+     * - `http` indicates that RUM collects data about HTTP errors thrown by your application.
+     */
+    Telemetries?: Telemetry[] | undefined;
+};
+/**
+ * This structure specifies whether this app monitor allows the web client to define and send custom events.
+ */
+export type CustomEvents = {
+    /**
+     * Set this to `ENABLED` to allow the web client to send custom events for this app monitor.
+     *
+     * Valid values are `ENABLED` and `DISABLED` .
+     */
+    Status?: CustomEventsStatus | undefined;
+};
+export type CustomEventsStatus = "ENABLED" | "DISABLED";
+/**
+ * A structure that contains the configuration for how an app monitor can deobfuscate stack traces.
+ */
+export type DeobfuscationConfiguration = {
+    /**
+     * A structure that contains the configuration for how an app monitor can unminify JavaScript error stack traces using source maps.
+     */
+    JavaScriptSourceMaps?: {
+        /**
+         * The S3Uri of the bucket or folder that stores the source map files. It is required if status is ENABLED.
+         * @pattern ^s3://[a-z0-9][-.a-z0-9]{1,61}(?:/[-!_*'().a-z0-9A-Z]+(?:/[-!_*'().a-z0-9A-Z]+)*)?/?$
+         */
+        S3Uri?: string | undefined;
+        /**
+         * Specifies whether JavaScript error stack traces should be unminified for this app monitor. The default is for JavaScript error stack trace unminification to be DISABLED
+         */
+        Status: "ENABLED" | "DISABLED";
+    } | undefined;
+};
+/**
+ * Specifies one custom metric or extended metric that you want the CloudWatch RUM app monitor to send to a destination. Valid destinations include CloudWatch and Evidently.
+ *
+ * By default, RUM app monitors send some metrics to CloudWatch . These default metrics are listed in [CloudWatch metrics that you can collect.](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-RUM-metrics.html)
+ *
+ * In addition to these default metrics, you can choose to send extended metrics or custom metrics or both.
+ *
+ * - Extended metrics enable you to send metrics with additional dimensions not included in the default metrics. You can also send extended metrics to Evidently as well as CloudWatch . The valid dimension names for the additional dimensions for extended metrics are `BrowserName` , `CountryCode` , `DeviceType` , `FileType` , `OSName` , and `PageId` . For more information, see [Extended metrics](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-RUM-vended-metrics.html) .
+ * - Custom metrics are metrics that you define. You can send custom metrics to CloudWatch or to CloudWatch Evidently or to both. With custom metrics, you can use any metric name and namespace, and to derive the metrics you can use any custom events, built-in events, custom attributes, or default attributes.
+ *
+ * You can't send custom metrics to the `AWS/RUM` namespace. You must send custom metrics to a custom namespace that you define. The namespace that you use can't start with `AWS/` . CloudWatch RUM prepends `RUM/CustomMetrics/` to the custom namespace that you define, so the final namespace for your metrics in CloudWatch is `RUM/CustomMetrics/ *your-custom-namespace*` .
+ *
+ * For information about syntax rules for specifying custom metrics and extended metrics, see [MetridDefinitionRequest](https://docs.aws.amazon.com/cloudwatchrum/latest/APIReference/API_MetricDefinitionRequest.html) in the *CloudWatch RUM API Reference* .
+ *
+ * The maximum number of metric definitions that one destination can contain is 2000.
+ *
+ * Extended metrics sent to CloudWatch and RUM custom metrics are charged as CloudWatch custom metrics. Each combination of additional dimension name and dimension value counts as a custom metric.
+ *
+ * If some metric definitions that you specify are not valid, then the operation will not modify any metric definitions even if other metric definitions specified are valid.
+ */
+export type MetricDefinition = {
+    /**
+     * This field is a map of field paths to dimension names. It defines the dimensions to associate with this metric in CloudWatch . The value of this field is used only if the metric destination is `CloudWatch` . If the metric destination is `Evidently` , the value of `DimensionKeys` is ignored.
+     */
+    DimensionKeys?: Record<string, string> | undefined;
+    /**
+     * The pattern that defines the metric. RUM checks events that happen in a user's session against the pattern, and events that match the pattern are sent to the metric destination.
+     *
+     * If the metrics destination is `CloudWatch` and the event also matches a value in `DimensionKeys` , then the metric is published with the specified dimensions.
+     * @minLength 1
+     * @maxLength 4000
+     */
+    EventPattern?: string | undefined;
+    /**
+     * The name of the metric that is defined in this structure.
+     * @minLength 1
+     * @maxLength 255
+     */
+    Name: string;
+    /**
+     * If you are creating a custom metric instead of an extended metrics, use this parameter to define the metric namespace for that custom metric. Do not specify this parameter if you are creating an extended metric.
+     *
+     * You can't use any string that starts with `AWS/` for your namespace.
+     * @minLength 1
+     * @maxLength 237
+     * @pattern [a-zA-Z0-9-._/#:]+$
+     */
+    Namespace?: string | undefined;
+    /**
+     * Use this field only if you are sending this metric to CloudWatch . It defines the CloudWatch metric unit that this metric is measured in.
+     * @minLength 1
+     * @maxLength 256
+     */
+    UnitLabel?: string | undefined;
+    /**
+     * The field within the event object that the metric value is sourced from.
+     * @minLength 1
+     * @maxLength 256
+     * @pattern .*
+     */
+    ValueKey?: string | undefined;
+};
+/**
+ * Creates or updates a destination to receive extended metrics from CloudWatch RUM. You can send extended metrics to CloudWatch or to a CloudWatch Evidently experiment.
+ *
+ * For more information about extended metrics, see [Extended metrics that you can send to CloudWatch and CloudWatch Evidently](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-RUM-vended-metrics.html) .
+ */
+export type MetricDestination = {
+    /**
+     * Defines the destination to send the metrics to. Valid values are `CloudWatch` and `Evidently` . If you specify `Evidently` , you must also specify the ARN of the CloudWatch Evidently experiment that is to be the destination and an IAM role that has permission to write to the experiment.
+     */
+    Destination: "CloudWatch" | "Evidently";
+    /**
+     * Use this parameter only if `Destination` is `Evidently` . This parameter specifies the ARN of the Evidently experiment that will receive the extended metrics.
+     * @pattern arn:[^:]*:[^:]*:[^:]*:[^:]*:.*
+     */
+    DestinationArn?: string | undefined;
+    /**
+     * This parameter is required if `Destination` is `Evidently` . If `Destination` is `CloudWatch` , do not use this parameter.
+     *
+     * This parameter specifies the ARN of an IAM role that RUM will assume to write to the Evidently experiment that you are sending metrics to. This role must have permission to write to that experiment.
+     * @pattern arn:[^:]*:[^:]*:[^:]*:[^:]*:.*
+     */
+    IamRoleArn?: string | undefined;
+    /**
+     * An array of structures which define the metrics that you want to send.
+     */
+    MetricDefinitions?: MetricDefinition[] | undefined;
+};
+/**
+ * Use this structure to assign a resource-based policy to a CloudWatch RUM app monitor to control access to it. Each app monitor can have one resource-based policy. The maximum size of the policy is 4 KB. To learn more about using resource policies with RUM, see [Using resource-based policies with CloudWatch RUM](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-RUM-resource-policies.html) .
+ */
+export type ResourcePolicy = {
+    /**
+     * The JSON to use as the resource policy. The document can be up to 4 KB in size. For more information about the contents and syntax for this policy, see [Using resource-based policies with CloudWatch RUM](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-RUM-resource-policies.html) .
+     */
+    PolicyDocument: string;
+    /**
+     * A string value that you can use to conditionally update your policy. You can provide the revision ID of your existing policy to make mutating requests against that policy.
+     *
+     * When you assign a policy revision ID, then later requests about that policy will be rejected with an `InvalidPolicyRevisionIdException` error if they don't provide the correct current revision ID.
+     * @minLength 1
+     * @maxLength 255
+     */
+    PolicyRevisionId?: string | undefined;
+};
+export type Telemetry = "errors" | "performance" | "http";
+//# sourceMappingURL=aws-rum-appmonitor.d.ts.map

package/out/exports/resources.generated/aws-s3-accessgrant.d.ts

@@ -0,0 +1,92 @@
+import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
+export type S3AccessGrant = ResourceDefinitionWithAttributes<"AWS::S3::AccessGrant", S3AccessGrantProps, S3AccessGrantAttribs>;
+/**
+ * The `AWS::S3::AccessGrant` resource creates an access grant that gives a grantee access to your S3 data. The grantee can be an IAM user or role or a directory user, or group. Before you can create a grant, you must have an S3 Access Grants instance in the same Region as the S3 data. You can create an S3 Access Grants instance using the [AWS::S3::AccessGrantsInstance](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-s3-accessgrantsinstance.html) . You must also have registered at least one S3 data location in your S3 Access Grants instance using [AWS::S3::AccessGrantsLocation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-s3-accessgrantslocation.html) .
+ *
+ * - **Permissions** - You must have the `s3:CreateAccessGrant` permission to use this resource.
+ * - **Additional Permissions** - For any directory identity - `sso:DescribeInstance` and `sso:DescribeApplication`
+ *
+ * For directory users - `identitystore:DescribeUser`
+ *
+ * For directory groups - `identitystore:DescribeGroup`
+ */
+export type S3AccessGrantProps = {
+    /**
+     * The configuration options of the grant location. The grant location is the S3 path to the data to which you are granting access. It contains the `S3SubPrefix` field. The grant scope is the result of appending the subprefix to the location scope of the registered location.
+     */
+    AccessGrantsLocationConfiguration?: AccessGrantsLocationConfiguration | undefined;
+    /**
+     * The ID of the registered location to which you are granting access. S3 Access Grants assigns this ID when you register the location. S3 Access Grants assigns the ID `default` to the default location `s3://` and assigns an auto-generated ID to other locations that you register.
+     * @example "125f332b-a499-4eb6-806f-8a6a1aa4cb96"
+     */
+    AccessGrantsLocationId: string;
+    /**
+     * The Amazon Resource Name (ARN) of an AWS IAM Identity Center application associated with your Identity Center instance. If the grant includes an application ARN, the grantee can only access the S3 data through this application.
+     */
+    ApplicationArn?: string | undefined;
+    /**
+     * The user, group, or role to which you are granting access. You can grant access to an IAM user or role. If you have added your corporate directory to AWS IAM Identity Center and associated your Identity Center instance with your S3 Access Grants instance, the grantee can also be a corporate directory user or group.
+     */
+    Grantee: Grantee;
+    /**
+     * The type of access that you are granting to your S3 data, which can be set to one of the following values:
+     *
+     * - `READ` – Grant read-only access to the S3 data.
+     * - `WRITE` – Grant write-only access to the S3 data.
+     * - `READWRITE` – Grant both read and write access to the S3 data.
+     */
+    Permission: "READ" | "WRITE" | "READWRITE";
+    /**
+     * The type of `S3SubPrefix` . The only possible value is `Object` . Pass this value if the access grant scope is an object. Do not pass this value if the access grant scope is a bucket or a bucket and a prefix.
+     */
+    S3PrefixType?: "Object" | undefined;
+    /**
+     * The AWS resource tags that you are adding to the access grant. Each tag is a label consisting of a user-defined key and value. Tags can help you manage, identify, organize, search for, and filter resources.
+     */
+    Tags?: Tag[] | undefined;
+};
+export type S3AccessGrantAttribs = {
+    /**
+     * The ARN of the access grant.
+     * @example "arn:aws:s3:us-east-2:111122223333:access-grants/default/grant/7c89cbd1-0f4e-40e3-861d-afb906952b77"
+     */
+    AccessGrantArn: string;
+    /**
+     * The ID of the access grant. S3 Access Grants auto-generates this ID when you create the access grant.
+     * @example "7c89cbd1-0f4e-40e3-861d-afb906952b77"
+     */
+    AccessGrantId: string;
+    /**
+     * The S3 path of the data to which you are granting access. It is the result of appending the `Subprefix` to the location scope.
+     */
+    GrantScope: string;
+};
+/**
+ * The configuration options of the S3 Access Grants location. It contains the `S3SubPrefix` field. The grant scope, the data to which you are granting access, is the result of appending the `Subprefix` field to the scope of the registered location.
+ */
+export type AccessGrantsLocationConfiguration = {
+    /**
+     * The `S3SubPrefix` is appended to the location scope creating the grant scope. Use this field to narrow the scope of the grant to a subset of the location scope. This field is required if the location scope is the default location `s3://` because you cannot create a grant for all of your S3 data in the Region and must narrow the scope. For example, if the location scope is the default location `s3://` , the `S3SubPrefx` can be a `<bucket-name>/*` , so the full grant scope path would be `s3://<bucket-name>/*` . Or the `S3SubPrefx` can be `<bucket-name>/<prefix-name>*` , so the full grant scope path would be `s3://<bucket-name>/<prefix-name>*` .
+     *
+     * If the `S3SubPrefix` includes a prefix, append the wildcard character `*` after the prefix to indicate that you want to include all object key names in the bucket that start with that prefix.
+     */
+    S3SubPrefix: string;
+};
+/**
+ * The user, group, or role to which you are granting access. You can grant access to an IAM user or role. If you have added your corporate directory to AWS IAM Identity Center and associated your Identity Center instance with your S3 Access Grants instance, the grantee can also be a corporate directory user or group.
+ */
+export type Grantee = {
+    /**
+     * The unique identifier of the `Grantee` . If the grantee type is `IAM` , the identifier is the IAM Amazon Resource Name (ARN) of the user or role. If the grantee type is a directory user or group, the identifier is 128-bit universally unique identifier (UUID) in the format `a1b2c3d4-5678-90ab-cdef-EXAMPLE11111` . You can obtain this UUID from your AWS IAM Identity Center instance.
+     */
+    GranteeIdentifier: string;
+    /**
+     * The type of the grantee to which access has been granted. It can be one of the following values:
+     *
+     * - `IAM` - An IAM user or role.
+     * - `DIRECTORY_USER` - Your corporate directory user. You can use this option if you have added your corporate identity directory to IAM Identity Center and associated the IAM Identity Center instance with your S3 Access Grants instance.
+     * - `DIRECTORY_GROUP` - Your corporate directory group. You can use this option if you have added your corporate identity directory to IAM Identity Center and associated the IAM Identity Center instance with your S3 Access Grants instance.
+     */
+    GranteeType: "IAM" | "DIRECTORY_USER" | "DIRECTORY_GROUP";
+};
+//# sourceMappingURL=aws-s3-accessgrant.d.ts.map

package/out/exports/resources.generated/aws-s3-accessgrantsinstance.d.ts

@@ -0,0 +1,31 @@
+import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
+export type S3AccessGrantsInstance = ResourceDefinitionWithAttributes<"AWS::S3::AccessGrantsInstance", S3AccessGrantsInstanceProps, S3AccessGrantsInstanceAttribs>;
+/**
+ * The `AWS::S3::AccessGrantInstance` resource creates an S3 Access Grants instance, which serves as a logical grouping for access grants. You can create one S3 Access Grants instance per Region per account.
+ *
+ * - **Permissions** - You must have the `s3:CreateAccessGrantsInstance` permission to use this resource.
+ * - **Additional Permissions** - To associate an IAM Identity Center instance with your S3 Access Grants instance, you must also have the `sso:DescribeInstance` , `sso:CreateApplication` , `sso:PutApplicationGrant` , and `sso:PutApplicationAuthenticationMethod` permissions.
+ */
+export type S3AccessGrantsInstanceProps = {
+    /**
+     * If you would like to associate your S3 Access Grants instance with an AWS IAM Identity Center instance, use this field to pass the Amazon Resource Name (ARN) of the AWS IAM Identity Center instance that you are associating with your S3 Access Grants instance. An IAM Identity Center instance is your corporate identity directory that you added to the IAM Identity Center.
+     * @example "arn:aws:sso:::instance/ssoins-6987e6a2fc43873b"
+     */
+    IdentityCenterArn?: string | undefined;
+    /**
+     * The AWS resource tags that you are adding to the S3 Access Grants instance. Each tag is a label consisting of a user-defined key and value. Tags can help you manage, identify, organize, search for, and filter resources.
+     */
+    Tags?: Tag[] | undefined;
+};
+export type S3AccessGrantsInstanceAttribs = {
+    /**
+     * The ARN of the S3 Access Grants instance.
+     * @example "arn:aws:s3:us-east-2:479290226168:access-grants/default"
+     */
+    AccessGrantsInstanceArn: string;
+    /**
+     * The ID of the S3 Access Grants instance. The ID is `default` . You can have one S3 Access Grants instance per Region per account.
+     */
+    AccessGrantsInstanceId: string;
+};
+//# sourceMappingURL=aws-s3-accessgrantsinstance.d.ts.map

package/out/exports/resources.generated/aws-s3-accessgrantslocation.d.ts

@@ -0,0 +1,42 @@
+import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
+export type S3AccessGrantsLocation = ResourceDefinitionWithAttributes<"AWS::S3::AccessGrantsLocation", S3AccessGrantsLocationProps, S3AccessGrantsLocationAttribs>;
+/**
+ * The `AWS::S3::AccessGrantsLocation` resource creates the S3 data location that you would like to register in your S3 Access Grants instance. Your S3 data must be in the same Region as your S3 Access Grants instance. The location can be one of the following:
+ *
+ * - The default S3 location `s3://`
+ * - A bucket - `S3://<bucket-name>`
+ * - A bucket and prefix - `S3://<bucket-name>/<prefix>`
+ *
+ * When you register a location, you must include the IAM role that has permission to manage the S3 location that you are registering. Give S3 Access Grants permission to assume this role [using a policy](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-grants-location.html) . S3 Access Grants assumes this role to manage access to the location and to vend temporary credentials to grantees or client applications.
+ *
+ * - **Permissions** - You must have the `s3:CreateAccessGrantsLocation` permission to use this resource.
+ * - **Additional Permissions** - You must also have the following permission for the specified IAM role: `iam:PassRole`
+ */
+export type S3AccessGrantsLocationProps = {
+    /**
+     * The Amazon Resource Name (ARN) of the IAM role for the registered location. S3 Access Grants assumes this role to manage access to the registered location.
+     * @example "arn:aws:iamw::123456789012:role/rolename"
+     */
+    IamRoleArn?: string | undefined;
+    /**
+     * The S3 URI path to the location that you are registering. The location scope can be the default S3 location `s3://` , the S3 path to a bucket, or the S3 path to a bucket and prefix. A prefix in S3 is a string of characters at the beginning of an object key name used to organize the objects that you store in your S3 buckets. For example, object key names that start with the `engineering/` prefix or object key names that start with the `marketing/campaigns/` prefix.
+     * @example "s3://test-bucket-access-grants-cmh/prefixA"
+     */
+    LocationScope?: string | undefined;
+    /**
+     * The AWS resource tags that you are adding to the S3 Access Grants location. Each tag is a label consisting of a user-defined key and value. Tags can help you manage, identify, organize, search for, and filter resources.
+     */
+    Tags?: Tag[] | undefined;
+};
+export type S3AccessGrantsLocationAttribs = {
+    /**
+     * The ARN of the location you are registering.
+     * @example "arn:aws:s3:us-east-2:479290226168:access-grants/default/location/125f332b-a499-4eb6-806f-8a6a1aa4cb96"
+     */
+    AccessGrantsLocationArn: string;
+    /**
+     * The ID of the registered location to which you are granting access. S3 Access Grants assigns this ID when you register the location. S3 Access Grants assigns the ID `default` to the default location `s3://` and assigns an auto-generated ID to other locations that you register.
+     */
+    AccessGrantsLocationId: string;
+};
+//# sourceMappingURL=aws-s3-accessgrantslocation.d.ts.map