@propulsionworks/cloudformation 0.0.1 → 0.1.0

package/out/exports/resources.generated/aws-arczonalshift-zonalautoshiftconfiguration.d.ts

@@ -0,0 +1,101 @@
+import type { ResourceDefinition } from "../main.ts";
+export type ARCZonalShiftZonalAutoshiftConfiguration = ResourceDefinition<"AWS::ARCZonalShift::ZonalAutoshiftConfiguration", ARCZonalShiftZonalAutoshiftConfigurationProps>;
+/**
+ * The zonal autoshift configuration for a resource includes the practice run configuration and the status for running autoshifts, zonal autoshift status. When a resource has a practice run configuation, Route 53 ARC starts weekly zonal shifts for the resource, to shift traffic away from an Availability Zone. Weekly practice runs help you to make sure that your application can continue to operate normally with the loss of one Availability Zone.
+ *
+ * You can update the zonal autoshift autoshift status to enable or disable zonal autoshift. When zonal autoshift is `ENABLED` , you authorize AWS to shift away resource traffic for an application from an Availability Zone during events, on your behalf, to help reduce time to recovery. Traffic is also shifted away for the required weekly practice runs.
+ */
+export type ARCZonalShiftZonalAutoshiftConfigurationProps = {
+    /**
+     * A practice run configuration for a resource includes the Amazon CloudWatch alarms that you've specified for a practice run, as well as any blocked dates or blocked windows for the practice run. When a resource has a practice run configuration, ARC shifts traffic for the resource weekly for practice runs.
+     *
+     * Practice runs are required for zonal autoshift. The zonal shifts that ARC starts for practice runs help you to ensure that shifting away traffic from an Availability Zone during an autoshift is safe for your application.
+     *
+     * You can update or delete a practice run configuration. Before you delete a practice run configuration, you must disable zonal autoshift for the resource. A practice run configuration is required when zonal autoshift is enabled.
+     */
+    PracticeRunConfiguration?: PracticeRunConfiguration | undefined;
+    /**
+     * The identifier for the resource that AWS shifts traffic for. The identifier is the Amazon Resource Name (ARN) for the resource.
+     *
+     * At this time, supported resources are Network Load Balancers and Application Load Balancers with cross-zone load balancing turned off.
+     * @minLength 8
+     * @maxLength 1024
+     */
+    ResourceIdentifier: string;
+    /**
+     * When zonal autoshift is `ENABLED` , you authorize AWS to shift away resource traffic for an application from an Availability Zone during events, on your behalf, to help reduce time to recovery. Traffic is also shifted away for the required weekly practice runs.
+     */
+    ZonalAutoshiftStatus: ZonalAutoshiftStatus;
+} | {
+    /**
+     * A practice run configuration for a resource includes the Amazon CloudWatch alarms that you've specified for a practice run, as well as any blocked dates or blocked windows for the practice run. When a resource has a practice run configuration, ARC shifts traffic for the resource weekly for practice runs.
+     *
+     * Practice runs are required for zonal autoshift. The zonal shifts that ARC starts for practice runs help you to ensure that shifting away traffic from an Availability Zone during an autoshift is safe for your application.
+     *
+     * You can update or delete a practice run configuration. Before you delete a practice run configuration, you must disable zonal autoshift for the resource. A practice run configuration is required when zonal autoshift is enabled.
+     */
+    PracticeRunConfiguration: PracticeRunConfiguration;
+    /**
+     * The identifier for the resource that AWS shifts traffic for. The identifier is the Amazon Resource Name (ARN) for the resource.
+     *
+     * At this time, supported resources are Network Load Balancers and Application Load Balancers with cross-zone load balancing turned off.
+     * @minLength 8
+     * @maxLength 1024
+     */
+    ResourceIdentifier: string;
+    /**
+     * When zonal autoshift is `ENABLED` , you authorize AWS to shift away resource traffic for an application from an Availability Zone during events, on your behalf, to help reduce time to recovery. Traffic is also shifted away for the required weekly practice runs.
+     */
+    ZonalAutoshiftStatus?: ZonalAutoshiftStatus | undefined;
+};
+/**
+ * A control condition is an alarm that you specify for a practice run. When you configure practice runs with zonal autoshift for a resource, you specify Amazon CloudWatch alarms, which you create in CloudWatch to use with the practice run. The alarms that you specify are an *outcome alarm* , to monitor application health during practice runs and, optionally, a *blocking alarm* , to block practice runs from starting or to interrupt a practice run in progress.
+ *
+ * Control condition alarms do not apply for autoshifts.
+ *
+ * For more information, see [Considerations when you configure zonal autoshift](https://docs.aws.amazon.com/r53recovery/latest/dg/arc-zonal-autoshift.considerations.html) in the Route 53 ARC Developer Guide.
+ */
+export type ControlCondition = {
+    /**
+     * The Amazon Resource Name (ARN) for an Amazon CloudWatch alarm that you specify as a control condition for a practice run.
+     * @minLength 8
+     * @maxLength 1024
+     * @pattern ^.*$
+     */
+    AlarmIdentifier: string;
+    /**
+     * The type of alarm specified for a practice run. You can only specify Amazon CloudWatch alarms for practice runs, so the only valid value is `CLOUDWATCH` .
+     */
+    Type: string;
+};
+/**
+ * A practice run configuration for a resource includes the Amazon CloudWatch alarms that you've specified for a practice run, as well as any blocked dates or blocked windows for the practice run.
+ *
+ * When a resource has a practice run configuation, Route 53 ARC starts weekly zonal shifts for the resource, to shift traffic away from an Availability Zone. Weekly practice runs help you to make sure that your application can continue to operate normally with the loss of one Availability Zone.
+ *
+ * You can update or delete a practice run configuration. When you delete a practice run configuration, zonal autoshift is disabled for the resource. A practice run configuration is required when zonal autoshift is enabled.
+ */
+export type PracticeRunConfiguration = {
+    /**
+     * An array of one or more dates that you can specify when AWS does not start practice runs for a resource. Dates are in UTC.
+     *
+     * Specify blocked dates in the format `YYYY-MM-DD` , separated by spaces.
+     */
+    BlockedDates?: string[] | undefined;
+    /**
+     * An array of one or more days and times that you can specify when Route 53 ARC does not start practice runs for a resource. Days and times are in UTC.
+     *
+     * Specify blocked windows in the format `DAY:HH:MM-DAY:HH:MM` , separated by spaces. For example, `MON:18:30-MON:19:30 TUE:18:30-TUE:19:30` .
+     */
+    BlockedWindows?: string[] | undefined;
+    /**
+     * An optional alarm that you can specify that blocks practice runs when the alarm is in an `ALARM` state. When a blocking alarm goes into an `ALARM` state, it prevents practice runs from being started, and ends practice runs that are in progress.
+     */
+    BlockingAlarms?: ControlCondition[] | undefined;
+    /**
+     * The alarm that you specify to monitor the health of your application during practice runs. When the outcome alarm goes into an `ALARM` state, the practice run is ended and the outcome is set to `FAILED` .
+     */
+    OutcomeAlarms: ControlCondition[];
+};
+export type ZonalAutoshiftStatus = "ENABLED";
+//# sourceMappingURL=aws-arczonalshift-zonalautoshiftconfiguration.d.ts.map

package/out/exports/resources.generated/aws-athena-capacityreservation.d.ts

@@ -0,0 +1,72 @@
+import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
+export type AthenaCapacityReservation = ResourceDefinitionWithAttributes<"AWS::Athena::CapacityReservation", AthenaCapacityReservationProps, AthenaCapacityReservationAttribs>;
+/**
+ * Specifies a capacity reservation with the provided name and number of requested data processing units.
+ */
+export type AthenaCapacityReservationProps = {
+    /**
+     * Assigns Athena workgroups (and hence their queries) to capacity reservations. A capacity reservation can have only one capacity assignment configuration, but the capacity assignment configuration can be made up of multiple individual assignments. Each assignment specifies how Athena queries can consume capacity from the capacity reservation that their workgroup is mapped to.
+     */
+    CapacityAssignmentConfiguration?: CapacityAssignmentConfiguration | undefined;
+    /**
+     * The name of the capacity reservation.
+     * @pattern [a-zA-Z0-9._-]{1,128}
+     */
+    Name: string;
+    /**
+     * An array of key-value pairs to apply to the capacity reservation.
+     *
+     * For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .
+     */
+    Tags?: Tag[] | undefined;
+    /**
+     * The number of data processing units requested.
+     * @min 1
+     * @format int64
+     */
+    TargetDpus: number;
+};
+export type AthenaCapacityReservationAttribs = {
+    /**
+     * The number of data processing units currently allocated.
+     * @min 0
+     * @format int64
+     */
+    AllocatedDpus: number;
+    /**
+     * The ARN of the capacity reservation.
+     */
+    Arn: string;
+    /**
+     * The time in UTC epoch millis when the capacity reservation was created.
+     */
+    CreationTime: string;
+    /**
+     * The time of the most recent capacity allocation that succeeded.
+     */
+    LastSuccessfulAllocationTime: string;
+    /**
+     * The status of the capacity reservation.
+     */
+    Status: CapacityReservationStatus;
+};
+/**
+ * A mapping between one or more workgroups and a capacity reservation.
+ */
+export type CapacityAssignment = {
+    /**
+     * The list of workgroup names for the capacity assignment.
+     */
+    WorkgroupNames: string[];
+};
+/**
+ * Assigns Athena workgroups (and hence their queries) to capacity reservations. A capacity reservation can have only one capacity assignment configuration, but the capacity assignment configuration can be made up of multiple individual assignments. Each assignment specifies how Athena queries can consume capacity from the capacity reservation that their workgroup is mapped to.
+ */
+export type CapacityAssignmentConfiguration = {
+    /**
+     * The list of assignments that make up the capacity assignment configuration.
+     */
+    CapacityAssignments: CapacityAssignment[];
+};
+export type CapacityReservationStatus = "PENDING" | "ACTIVE" | "CANCELLING" | "CANCELLED" | "FAILED" | "UPDATE_PENDING";
+//# sourceMappingURL=aws-athena-capacityreservation.d.ts.map

package/out/exports/resources.generated/aws-athena-datacatalog.d.ts

@@ -0,0 +1,79 @@
+import type { ResourceDefinition, Tag } from "../main.ts";
+export type AthenaDataCatalog = ResourceDefinition<"AWS::Athena::DataCatalog", AthenaDataCatalogProps>;
+/**
+ * The AWS::Athena::DataCatalog resource specifies an Amazon Athena data catalog, which contains a name, description, type, parameters, and tags. For more information, see [DataCatalog](https://docs.aws.amazon.com/athena/latest/APIReference/API_DataCatalog.html) in the *Amazon Athena API Reference* .
+ */
+export type AthenaDataCatalogProps = {
+    /**
+     * The type of connection for a `FEDERATED` data catalog (for example, `REDSHIFT` , `MYSQL` , or `SQLSERVER` ). For information about individual connectors, see [Available data source connectors](https://docs.aws.amazon.com/athena/latest/ug/connectors-available.html) .
+     */
+    ConnectionType?: string | undefined;
+    /**
+     * A description of the data catalog.
+     * @minLength 1
+     * @maxLength 1024
+     */
+    Description?: string | undefined;
+    /**
+     * Text of the error that occurred during data catalog creation or deletion.
+     */
+    Error?: string | undefined;
+    /**
+     * The name of the data catalog. The catalog name must be unique for the AWS account and can use a maximum of 128 alphanumeric, underscore, at sign, or hyphen characters.
+     * @minLength 1
+     * @maxLength 256
+     */
+    Name: string;
+    /**
+     * Specifies the Lambda function or functions to use for the data catalog. The mapping used depends on the catalog type.
+     *
+     * - The `HIVE` data catalog type uses the following syntax. The `metadata-function` parameter is required. `The sdk-version` parameter is optional and defaults to the currently supported version.
+     *
+     * `metadata-function= *lambda_arn* , sdk-version= *version_number*`
+     * - The `LAMBDA` data catalog type uses one of the following sets of required parameters, but not both.
+     *
+     * - When one Lambda function processes metadata and another Lambda function reads data, the following syntax is used. Both parameters are required.
+     *
+     * `metadata-function= *lambda_arn* , record-function= *lambda_arn*`
+     * - A composite Lambda function that processes both metadata and data uses the following syntax.
+     *
+     * `function= *lambda_arn*`
+     * - The `GLUE` type takes a catalog ID parameter and is required. The `*catalog_id*` is the account ID of the AWS account to which the Glue catalog belongs.
+     *
+     * `catalog-id= *catalog_id*`
+     *
+     * - The `GLUE` data catalog type also applies to the default `AwsDataCatalog` that already exists in your account, of which you can have only one and cannot modify.
+     */
+    Parameters?: Record<string, string> | undefined;
+    /**
+     * The status of the creation or deletion of the data catalog.
+     *
+     * - The `LAMBDA` , `GLUE` , and `HIVE` data catalog types are created synchronously. Their status is either `CREATE_COMPLETE` or `CREATE_FAILED` .
+     * - The `FEDERATED` data catalog type is created asynchronously.
+     *
+     * Data catalog creation status:
+     *
+     * - `CREATE_IN_PROGRESS` : Federated data catalog creation in progress.
+     * - `CREATE_COMPLETE` : Data catalog creation complete.
+     * - `CREATE_FAILED` : Data catalog could not be created.
+     * - `CREATE_FAILED_CLEANUP_IN_PROGRESS` : Federated data catalog creation failed and is being removed.
+     * - `CREATE_FAILED_CLEANUP_COMPLETE` : Federated data catalog creation failed and was removed.
+     * - `CREATE_FAILED_CLEANUP_FAILED` : Federated data catalog creation failed but could not be removed.
+     *
+     * Data catalog deletion status:
+     *
+     * - `DELETE_IN_PROGRESS` : Federated data catalog deletion in progress.
+     * - `DELETE_COMPLETE` : Federated data catalog deleted.
+     * - `DELETE_FAILED` : Federated data catalog could not be deleted.
+     */
+    Status?: "CREATE_IN_PROGRESS" | "CREATE_COMPLETE" | "CREATE_FAILED" | "CREATE_FAILED_CLEANUP_IN_PROGRESS" | "CREATE_FAILED_CLEANUP_COMPLETE" | "CREATE_FAILED_CLEANUP_FAILED" | "DELETE_IN_PROGRESS" | "DELETE_COMPLETE" | "DELETE_FAILED" | undefined;
+    /**
+     * The tags (key-value pairs) to associate with this resource.
+     */
+    Tags?: Tag[] | undefined;
+    /**
+     * The type of data catalog: `LAMBDA` for a federated catalog, `GLUE` for AWS Glue Catalog, or `HIVE` for an external hive metastore.
+     */
+    Type: "LAMBDA" | "GLUE" | "HIVE" | "FEDERATED";
+};
+//# sourceMappingURL=aws-athena-datacatalog.d.ts.map

package/out/exports/resources.generated/aws-athena-namedquery.d.ts

@@ -0,0 +1,44 @@
+import type { ResourceDefinitionWithAttributes } from "../main.ts";
+export type AthenaNamedQuery = ResourceDefinitionWithAttributes<"AWS::Athena::NamedQuery", AthenaNamedQueryProps, AthenaNamedQueryAttribs>;
+/**
+ * The `AWS::Athena::NamedQuery` resource specifies an Amazon Athena saved query, where `QueryString` contains the SQL query statements that make up the query.
+ */
+export type AthenaNamedQueryProps = {
+    /**
+     * The database to which the query belongs.
+     * @minLength 1
+     * @maxLength 255
+     */
+    Database: string;
+    /**
+     * The query description.
+     * @minLength 1
+     * @maxLength 1024
+     */
+    Description?: string | undefined;
+    /**
+     * The query name.
+     * @minLength 1
+     * @maxLength 128
+     */
+    Name?: string | undefined;
+    /**
+     * The SQL statements that make up the query.
+     * @minLength 1
+     * @maxLength 262144
+     */
+    QueryString: string;
+    /**
+     * The name of the workgroup that contains the named query.
+     * @minLength 1
+     * @maxLength 128
+     */
+    WorkGroup?: string | undefined;
+};
+export type AthenaNamedQueryAttribs = {
+    /**
+     * The unique ID of the query.
+     */
+    NamedQueryId: string;
+};
+//# sourceMappingURL=aws-athena-namedquery.d.ts.map

package/out/exports/resources.generated/aws-athena-preparedstatement.d.ts

@@ -0,0 +1,32 @@
+import type { ResourceDefinition } from "../main.ts";
+export type AthenaPreparedStatement = ResourceDefinition<"AWS::Athena::PreparedStatement", AthenaPreparedStatementProps>;
+/**
+ * Specifies a prepared statement for use with SQL queries in Athena.
+ */
+export type AthenaPreparedStatementProps = {
+    /**
+     * The description of the prepared statement.
+     * @minLength 1
+     * @maxLength 1024
+     */
+    Description?: string | undefined;
+    /**
+     * The query string for the prepared statement.
+     * @minLength 1
+     * @maxLength 262144
+     */
+    QueryStatement: string;
+    /**
+     * The name of the prepared statement.
+     * @minLength 1
+     * @maxLength 256
+     */
+    StatementName: string;
+    /**
+     * The workgroup to which the prepared statement belongs.
+     * @minLength 1
+     * @maxLength 128
+     */
+    WorkGroup: string;
+};
+//# sourceMappingURL=aws-athena-preparedstatement.d.ts.map

package/out/exports/resources.generated/aws-athena-workgroup.d.ts

@@ -0,0 +1,254 @@
+import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
+export type AthenaWorkGroup = ResourceDefinitionWithAttributes<"AWS::Athena::WorkGroup", AthenaWorkGroupProps, AthenaWorkGroupAttribs>;
+/**
+ * The AWS::Athena::WorkGroup resource specifies an Amazon Athena workgroup, which contains a name, description, creation time, state, and other configuration, listed under `WorkGroupConfiguration` . Each workgroup enables you to isolate queries for you or your group from other queries in the same account. For more information, see [CreateWorkGroup](https://docs.aws.amazon.com/athena/latest/APIReference/API_CreateWorkGroup.html) in the *Amazon Athena API Reference* .
+ */
+export type AthenaWorkGroupProps = {
+    /**
+     * The workgroup description.
+     * @minLength 0
+     * @maxLength 1024
+     */
+    Description?: string | undefined;
+    /**
+     * The workgroup name.
+     * @pattern [a-zA-Z0-9._-]{1,128}
+     */
+    Name: string;
+    /**
+     * The option to delete a workgroup and its contents even if the workgroup contains any named queries. The default is false.
+     */
+    RecursiveDeleteOption?: boolean | undefined;
+    /**
+     * The state of the workgroup: ENABLED or DISABLED.
+     */
+    State?: "ENABLED" | "DISABLED" | undefined;
+    /**
+     * The tags (key-value pairs) to associate with this resource.
+     */
+    Tags?: Tag[] | undefined;
+    /**
+     * The configuration of the workgroup, which includes the location in Amazon S3 where query results are stored, the encryption option, if any, used for query results, whether Amazon CloudWatch Metrics are enabled for the workgroup, and the limit for the amount of bytes scanned (cutoff) per query, if it is specified. The `EnforceWorkGroupConfiguration` option determines whether workgroup settings override client-side query settings.
+     */
+    WorkGroupConfiguration?: WorkGroupConfiguration | undefined;
+    /**
+     * The configuration information that will be updated for this workgroup, which includes the location in Amazon S3 where query results are stored, the encryption option, if any, used for query results, whether the Amazon CloudWatch Metrics are enabled for the workgroup, whether the workgroup settings override the client-side settings, and the data usage limit for the amount of bytes scanned per query, if it is specified.
+     */
+    WorkGroupConfigurationUpdates?: WorkGroupConfigurationUpdates | undefined;
+};
+export type AthenaWorkGroupAttribs = {
+    /**
+     * The date and time the workgroup was created, as a UNIX timestamp in seconds. For example: `1582761016` .
+     */
+    CreationTime: string;
+    /**
+     * Read only. The engine version on which the query runs. If the user requests a valid engine version other than Auto, the effective engine version is the same as the engine version that the user requested. If the user requests Auto, the effective engine version is chosen by Athena. When a request to update the engine version is made by a CreateWorkGroup or UpdateWorkGroup operation, the EffectiveEngineVersion field is ignored.
+     */
+    "WorkGroupConfiguration.EngineVersion.EffectiveEngineVersion": string;
+    /**
+     * Read only. The engine version on which the query runs. If the user requests a valid engine version other than Auto, the effective engine version is the same as the engine version that the user requested. If the user requests Auto, the effective engine version is chosen by Athena. When a request to update the engine version is made by a `CreateWorkGroup` or `UpdateWorkGroup` operation, the `EffectiveEngineVersion` field is ignored.
+     */
+    "WorkGroupConfigurationUpdates.EngineVersion.EffectiveEngineVersion": string;
+};
+/**
+ * Indicates that an Amazon S3 canned ACL should be set to control ownership of stored query results, including data files inserted by Athena as the result of statements like CTAS or INSERT INTO. When Athena stores query results in Amazon S3, the canned ACL is set with the `x-amz-acl` request header. For more information about S3 Object Ownership, see [Object Ownership settings](https://docs.aws.amazon.com/AmazonS3/latest/userguide/about-object-ownership.html#object-ownership-overview) in the *Amazon S3 User Guide* .
+ */
+export type AclConfiguration = {
+    /**
+     * The Amazon S3 canned ACL that Athena should specify when storing query results, including data files inserted by Athena as the result of statements like CTAS or INSERT INTO. Currently the only supported canned ACL is `BUCKET_OWNER_FULL_CONTROL` . If a query runs in a workgroup and the workgroup overrides client-side settings, then the Amazon S3 canned ACL specified in the workgroup's settings is used for all queries that run in the workgroup. For more information about Amazon S3 canned ACLs, see [Canned ACL](https://docs.aws.amazon.com/AmazonS3/latest/userguide/acl-overview.html#canned-acl) in the *Amazon S3 User Guide* .
+     */
+    S3AclOption: S3AclOption;
+};
+/**
+ * Specifies the customer managed KMS key that is used to encrypt the user's data stores in Athena. When an AWS managed key is used, this value is null. This setting does not apply to Athena SQL workgroups.
+ */
+export type CustomerContentEncryptionConfiguration = {
+    /**
+     * The customer managed KMS key that is used to encrypt the user's data stores in Athena.
+     */
+    KmsKey: string;
+};
+/**
+ * If query results are encrypted in Amazon S3, indicates the encryption option used (for example, `SSE_KMS` or `CSE_KMS` ) and key information.
+ */
+export type EncryptionConfiguration = {
+    /**
+     * Indicates whether Amazon S3 server-side encryption with Amazon S3-managed keys ( `SSE_S3` ), server-side encryption with KMS-managed keys ( `SSE_KMS` ), or client-side encryption with KMS-managed keys ( `CSE_KMS` ) is used.
+     *
+     * If a query runs in a workgroup and the workgroup overrides client-side settings, then the workgroup's setting for encryption is used. It specifies whether query results must be encrypted, for all queries that run in this workgroup.
+     */
+    EncryptionOption: EncryptionOption;
+    /**
+     * For `SSE_KMS` and `CSE_KMS` , this is the KMS key ARN or ID.
+     */
+    KmsKey?: string | undefined;
+};
+/**
+ * Indicates whether Amazon S3 server-side encryption with Amazon S3-managed keys (SSE-S3), server-side encryption with KMS-managed keys (SSE-KMS), or client-side encryption with KMS-managed keys (CSE-KMS) is used.
+ */
+export type EncryptionOption = "SSE_S3" | "SSE_KMS" | "CSE_KMS";
+/**
+ * The Athena engine version for running queries, or the PySpark engine version for running sessions.
+ */
+export type EngineVersion = {
+    /**
+     * The engine version requested by the user. Possible values are determined by the output of `ListEngineVersions` , including AUTO. The default is AUTO.
+     */
+    SelectedEngineVersion?: string | undefined;
+};
+/**
+ * The location in Amazon S3 where query and calculation results are stored and the encryption option, if any, used for query and calculation results. These are known as "client-side settings". If workgroup settings override client-side settings, then the query uses the workgroup settings.
+ */
+export type ResultConfiguration = {
+    /**
+     * Indicates that an Amazon S3 canned ACL should be set to control ownership of stored query results. Currently the only supported canned ACL is `BUCKET_OWNER_FULL_CONTROL` . This is a client-side setting. If workgroup settings override client-side settings, then the query uses the ACL configuration that is specified for the workgroup, and also uses the location for storing query results specified in the workgroup. See `EnforceWorkGroupConfiguration` .
+     */
+    AclConfiguration?: AclConfiguration | undefined;
+    /**
+     * If query results are encrypted in Amazon S3, indicates the encryption option used (for example, `SSE_KMS` or `CSE_KMS` ) and key information. This is a client-side setting. If workgroup settings override client-side settings, then the query uses the encryption configuration that is specified for the workgroup, and also uses the location for storing query results specified in the workgroup. See `EnforceWorkGroupConfiguration` and [Override client-side settings](https://docs.aws.amazon.com/athena/latest/ug/workgroups-settings-override.html) .
+     */
+    EncryptionConfiguration?: EncryptionConfiguration | undefined;
+    /**
+     * The account ID that you expect to be the owner of the Amazon S3 bucket specified by `ResultConfiguration:OutputLocation` . If set, Athena uses the value for `ExpectedBucketOwner` when it makes Amazon S3 calls to your specified output location. If the `ExpectedBucketOwner` account ID does not match the actual owner of the Amazon S3 bucket, the call fails with a permissions error.
+     *
+     * This is a client-side setting. If workgroup settings override client-side settings, then the query uses the `ExpectedBucketOwner` setting that is specified for the workgroup, and also uses the location for storing query results specified in the workgroup. See `EnforceWorkGroupConfiguration` .
+     */
+    ExpectedBucketOwner?: string | undefined;
+    /**
+     * The location in Amazon S3 where your query results are stored, such as `s3://path/to/query/bucket/` . To run a query, you must specify the query results location using either a client-side setting for individual queries or a location specified by the workgroup. If workgroup settings override client-side settings, then the query uses the location specified for the workgroup. If no query location is set, Athena issues an error. For more information, see [Work with query results and recent queries](https://docs.aws.amazon.com/athena/latest/ug/querying.html) and `EnforceWorkGroupConfiguration` .
+     */
+    OutputLocation?: string | undefined;
+};
+/**
+ * The information about the updates in the query results, such as output location and encryption configuration for the query results.
+ */
+export type ResultConfigurationUpdates = {
+    /**
+     * The ACL configuration for the query results.
+     */
+    AclConfiguration?: AclConfiguration | undefined;
+    /**
+     * The encryption configuration for the query results.
+     */
+    EncryptionConfiguration?: EncryptionConfiguration | undefined;
+    /**
+     * The AWS account ID that you expect to be the owner of the Amazon S3 bucket specified by `ResultConfiguration$OutputLocation` . If set, Athena uses the value for `ExpectedBucketOwner` when it makes Amazon S3 calls to your specified output location. If the `ExpectedBucketOwner` AWS account ID does not match the actual owner of the Amazon S3 bucket, the call fails with a permissions error.
+     *
+     * If workgroup settings override client-side settings, then the query uses the `ExpectedBucketOwner` setting that is specified for the workgroup, and also uses the location for storing query results specified in the workgroup. See `WorkGroupConfiguration$EnforceWorkGroupConfiguration` and [Workgroup Settings Override Client-Side Settings](https://docs.aws.amazon.com/athena/latest/ug/workgroups-settings-override.html) .
+     */
+    ExpectedBucketOwner?: string | undefined;
+    /**
+     * The location in Amazon S3 where your query results are stored, such as `s3://path/to/query/bucket/` . For more information, see [Query Results](https://docs.aws.amazon.com/athena/latest/ug/querying.html) If workgroup settings override client-side settings, then the query uses the location for the query results and the encryption configuration that are specified for the workgroup. The "workgroup settings override" is specified in EnforceWorkGroupConfiguration (true/false) in the WorkGroupConfiguration. See `EnforceWorkGroupConfiguration` .
+     */
+    OutputLocation?: string | undefined;
+    /**
+     * If set to `true` , indicates that the previously-specified ACL configuration for queries in this workgroup should be ignored and set to null. If set to `false` or not set, and a value is present in the `AclConfiguration` of `ResultConfigurationUpdates` , the `AclConfiguration` in the workgroup's `ResultConfiguration` is updated with the new value. For more information, see [Workgroup Settings Override Client-Side Settings](https://docs.aws.amazon.com/athena/latest/ug/workgroups-settings-override.html) .
+     */
+    RemoveAclConfiguration?: boolean | undefined;
+    /**
+     * If set to "true", indicates that the previously-specified encryption configuration (also known as the client-side setting) for queries in this workgroup should be ignored and set to null. If set to "false" or not set, and a value is present in the EncryptionConfiguration in ResultConfigurationUpdates (the client-side setting), the EncryptionConfiguration in the workgroup's ResultConfiguration will be updated with the new value. For more information, see [Override Client-Side Settings](https://docs.aws.amazon.com/athena/latest/ug/workgroups-settings-override.html) .
+     */
+    RemoveEncryptionConfiguration?: boolean | undefined;
+    /**
+     * If set to "true", removes the AWS account ID previously specified for `ResultConfiguration$ExpectedBucketOwner` . If set to "false" or not set, and a value is present in the `ExpectedBucketOwner` in `ResultConfigurationUpdates` (the client-side setting), the `ExpectedBucketOwner` in the workgroup's `ResultConfiguration` is updated with the new value. For more information, see [Workgroup Settings Override Client-Side Settings](https://docs.aws.amazon.com/athena/latest/ug/workgroups-settings-override.html) .
+     */
+    RemoveExpectedBucketOwner?: boolean | undefined;
+    /**
+     * If set to "true", indicates that the previously-specified query results location (also known as a client-side setting) for queries in this workgroup should be ignored and set to null. If set to "false" or not set, and a value is present in the OutputLocation in ResultConfigurationUpdates (the client-side setting), the OutputLocation in the workgroup's ResultConfiguration will be updated with the new value. For more information, see [Override Client-Side Settings](https://docs.aws.amazon.com/athena/latest/ug/workgroups-settings-override.html) .
+     */
+    RemoveOutputLocation?: boolean | undefined;
+};
+/**
+ * The Amazon S3 canned ACL that Athena should specify when storing query results. Currently the only supported canned ACL is BUCKET_OWNER_FULL_CONTROL
+ */
+export type S3AclOption = "BUCKET_OWNER_FULL_CONTROL";
+/**
+ * The configuration of the workgroup, which includes the location in Amazon S3 where query results are stored, the encryption option, if any, used for query results, whether Amazon CloudWatch Metrics are enabled for the workgroup, and the limit for the amount of bytes scanned (cutoff) per query, if it is specified. The `EnforceWorkGroupConfiguration` option determines whether workgroup settings override client-side query settings.
+ */
+export type WorkGroupConfiguration = {
+    /**
+     * Specifies a user defined JSON string that is passed to the session engine.
+     */
+    AdditionalConfiguration?: string | undefined;
+    /**
+     * The upper limit (cutoff) for the amount of bytes a single query in a workgroup is allowed to scan. No default is defined.
+     *
+     * > This property currently supports integer types. Support for long values is planned.
+     */
+    BytesScannedCutoffPerQuery?: number | undefined;
+    /**
+     * Specifies the KMS key that is used to encrypt the user's data stores in Athena. This setting does not apply to Athena SQL workgroups.
+     */
+    CustomerContentEncryptionConfiguration?: CustomerContentEncryptionConfiguration | undefined;
+    /**
+     * If set to "true", the settings for the workgroup override client-side settings. If set to "false", client-side settings are used. For more information, see [Override client-side settings](https://docs.aws.amazon.com/athena/latest/ug/workgroups-settings-override.html) .
+     */
+    EnforceWorkGroupConfiguration?: boolean | undefined;
+    /**
+     * The engine version that all queries running on the workgroup use.
+     */
+    EngineVersion?: EngineVersion | undefined;
+    /**
+     * Role used to access user resources in an Athena for Apache Spark session. This property applies only to Spark-enabled workgroups in Athena.
+     */
+    ExecutionRole?: string | undefined;
+    /**
+     * Indicates that the Amazon CloudWatch metrics are enabled for the workgroup.
+     */
+    PublishCloudWatchMetricsEnabled?: boolean | undefined;
+    /**
+     * If set to `true` , allows members assigned to a workgroup to reference Amazon S3 Requester Pays buckets in queries. If set to `false` , workgroup members cannot query data from Requester Pays buckets, and queries that retrieve data from Requester Pays buckets cause an error. The default is `false` . For more information about Requester Pays buckets, see [Requester Pays Buckets](https://docs.aws.amazon.com/AmazonS3/latest/dev/RequesterPaysBuckets.html) in the *Amazon Simple Storage Service Developer Guide* .
+     */
+    RequesterPaysEnabled?: boolean | undefined;
+    /**
+     * Specifies the location in Amazon S3 where query results are stored and the encryption option, if any, used for query results. For more information, see [Work with query results and recent queries](https://docs.aws.amazon.com/athena/latest/ug/querying.html) .
+     */
+    ResultConfiguration?: ResultConfiguration | undefined;
+};
+/**
+ * The configuration information that will be updated for this workgroup, which includes the location in Amazon S3 where query results are stored, the encryption option, if any, used for query results, whether the Amazon CloudWatch Metrics are enabled for the workgroup, whether the workgroup settings override the client-side settings, and the data usage limit for the amount of bytes scanned per query, if it is specified.
+ */
+export type WorkGroupConfigurationUpdates = {
+    /**
+     * Additional Configuration that are passed to Athena Spark Calculations running in this workgroup
+     */
+    AdditionalConfiguration?: string | undefined;
+    /**
+     * The upper data usage limit (cutoff) for the amount of bytes a single query in a workgroup is allowed to scan.
+     */
+    BytesScannedCutoffPerQuery?: number | undefined;
+    /**
+     * Indicates the KMS key for encrypting notebook content.
+     */
+    CustomerContentEncryptionConfiguration?: CustomerContentEncryptionConfiguration | undefined;
+    /**
+     * If set to "true", the settings for the workgroup override client-side settings. If set to "false", client-side settings are used
+     */
+    EnforceWorkGroupConfiguration?: boolean | undefined;
+    /**
+     * The Athena engine version for running queries.
+     */
+    EngineVersion?: EngineVersion | undefined;
+    /**
+     * Execution Role ARN required to run Athena Spark Calculations
+     */
+    ExecutionRole?: string | undefined;
+    /**
+     * Indicates that the Amazon CloudWatch metrics are enabled for the workgroup.
+     */
+    PublishCloudWatchMetricsEnabled?: boolean | undefined;
+    /**
+     * Indicates that the data usage control limit per query is removed.
+     */
+    RemoveBytesScannedCutoffPerQuery?: boolean | undefined;
+    RemoveCustomerContentEncryptionConfiguration?: boolean | undefined;
+    /**
+     * If set to true, allows members assigned to a workgroup to reference Amazon S3 Requester Pays buckets in queries. If set to false, workgroup members cannot query data from Requester Pays buckets, and queries that retrieve data from Requester Pays buckets cause an error.
+     */
+    RequesterPaysEnabled?: boolean | undefined;
+    /**
+     * The result configuration information about the queries in this workgroup that will be updated. Includes the updated results location and an updated option for encrypting query results.
+     */
+    ResultConfigurationUpdates?: ResultConfigurationUpdates | undefined;
+};
+//# sourceMappingURL=aws-athena-workgroup.d.ts.map