@propulsionworks/cloudformation 0.0.1 → 0.1.0

package/out/exports/resources.generated/aws-cloudfront-distributiontenant.d.ts

@@ -0,0 +1,161 @@
+import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
+export type CloudFrontDistributionTenant = ResourceDefinitionWithAttributes<"AWS::CloudFront::DistributionTenant", CloudFrontDistributionTenantProps, CloudFrontDistributionTenantAttribs>;
+/**
+ * The distribution tenant.
+ */
+export type CloudFrontDistributionTenantProps = {
+    /**
+     * The ID of the connection group for the distribution tenant. If you don't specify a connection group, CloudFront uses the default connection group.
+     */
+    ConnectionGroupId?: string | undefined;
+    /**
+     * Customizations for the distribution tenant. For each distribution tenant, you can specify the geographic restrictions, and the Amazon Resource Names (ARNs) for the ACM certificate and AWS WAF web ACL. These are specific values that you can override or disable from the multi-tenant distribution that was used to create the distribution tenant.
+     */
+    Customizations?: Customizations | undefined;
+    /**
+     * The ID of the multi-tenant distribution.
+     */
+    DistributionId: string;
+    /**
+     * The domains associated with the distribution tenant.
+     */
+    Domains: string[];
+    /**
+     * Indicates whether the distribution tenant is in an enabled state. If disabled, the distribution tenant won't serve traffic.
+     */
+    Enabled?: boolean | undefined;
+    /**
+     * An object that represents the request for the Amazon CloudFront managed ACM certificate.
+     */
+    ManagedCertificateRequest?: ManagedCertificateRequest | undefined;
+    /**
+     * The name of the distribution tenant.
+     */
+    Name: string;
+    /**
+     * A list of parameter values to add to the resource. A parameter is specified as a key-value pair. A valid parameter value must exist for any parameter that is marked as required in the multi-tenant distribution.
+     */
+    Parameters?: Parameter[] | undefined;
+    /**
+     * A complex type that contains zero or more `Tag` elements.
+     */
+    Tags?: Tag[] | undefined;
+};
+export type CloudFrontDistributionTenantAttribs = {
+    /**
+     * The Amazon Resource Name (ARN) of the distribution tenant.
+     */
+    Arn: string;
+    /**
+     * The date and time when the distribution tenant was created.
+     * @format date-time
+     */
+    CreatedTime: string;
+    /**
+     * The current version of the distribution tenant.
+     */
+    ETag: string;
+    /**
+     * The ID of the distribution tenant.
+     */
+    Id: string;
+    /**
+     * The date and time when the distribution tenant was updated.
+     * @format date-time
+     */
+    LastModifiedTime: string;
+    /**
+     * The status of the distribution tenant.
+     */
+    Status: string;
+};
+/**
+ * The AWS Certificate Manager (ACM) certificate associated with your distribution.
+ */
+export type Certificate = {
+    /**
+     * The Amazon Resource Name (ARN) of the ACM certificate.
+     */
+    Arn?: string | undefined;
+};
+/**
+ * Customizations for the distribution tenant. For each distribution tenant, you can specify the geographic restrictions, and the Amazon Resource Names (ARNs) for the ACM certificate and AWS WAF web ACL. These are specific values that you can override or disable from the multi-tenant distribution that was used to create the distribution tenant.
+ */
+export type Customizations = {
+    /**
+     * The AWS Certificate Manager (ACM) certificate.
+     */
+    Certificate?: Certificate | undefined;
+    /**
+     * The geographic restrictions.
+     */
+    GeoRestrictions?: GeoRestrictionCustomization | undefined;
+    /**
+     * The AWS WAF web ACL.
+     */
+    WebAcl?: WebAclCustomization | undefined;
+};
+/**
+ * The customizations that you specified for the distribution tenant for geographic restrictions.
+ */
+export type GeoRestrictionCustomization = {
+    /**
+     * The locations for geographic restrictions.
+     */
+    Locations?: string[] | undefined;
+    /**
+     * The method that you want to use to restrict distribution of your content by country:
+     *
+     * - `none` : No geographic restriction is enabled, meaning access to content is not restricted by client geo location.
+     * - `blacklist` : The `Location` elements specify the countries in which you don't want CloudFront to distribute your content.
+     * - `whitelist` : The `Location` elements specify the countries in which you want CloudFront to distribute your content.
+     */
+    RestrictionType?: "blacklist" | "whitelist" | "none" | undefined;
+};
+/**
+ * An object that represents the request for the Amazon CloudFront managed ACM certificate.
+ */
+export type ManagedCertificateRequest = {
+    /**
+     * You can opt out of certificate transparency logging by specifying the `disabled` option. Opt in by specifying `enabled` . For more information, see [Certificate Transparency Logging](https://docs.aws.amazon.com/acm/latest/userguide/acm-concepts.html#concept-transparency) in the *AWS Certificate Manager User Guide* .
+     */
+    CertificateTransparencyLoggingPreference?: "enabled" | "disabled" | undefined;
+    /**
+     * The primary domain name associated with the CloudFront managed ACM certificate.
+     */
+    PrimaryDomainName?: string | undefined;
+    /**
+     * Specify how the HTTP validation token will be served when requesting the CloudFront managed ACM certificate.
+     *
+     * - For `cloudfront` , CloudFront will automatically serve the validation token. Choose this mode if you can point the domain's DNS to CloudFront immediately.
+     * - For `self-hosted` , you serve the validation token from your existing infrastructure. Choose this mode when you need to maintain current traffic flow while your certificate is being issued. You can place the validation token at the well-known path on your existing web server, wait for ACM to validate and issue the certificate, and then update your DNS to point to CloudFront.
+     */
+    ValidationTokenHost?: "cloudfront" | "self-hosted" | undefined;
+};
+/**
+ * A list of parameter values to add to the resource. A parameter is specified as a key-value pair. A valid parameter value must exist for any parameter that is marked as required in the multi-tenant distribution.
+ */
+export type Parameter = {
+    /**
+     * The parameter name.
+     */
+    Name?: string | undefined;
+    /**
+     * The parameter value.
+     */
+    Value?: string | undefined;
+};
+/**
+ * The AWS WAF web ACL customization specified for the distribution tenant.
+ */
+export type WebAclCustomization = {
+    /**
+     * The action for the AWS WAF web ACL customization. You can specify `override` to specify a separate AWS WAF web ACL for the distribution tenant. If you specify `disable` , the distribution tenant won't have AWS WAF web ACL protections and won't inherit from the multi-tenant distribution.
+     */
+    Action?: "override" | "disable" | undefined;
+    /**
+     * The Amazon Resource Name (ARN) of the AWS WAF web ACL.
+     */
+    Arn?: string | undefined;
+};
+//# sourceMappingURL=aws-cloudfront-distributiontenant.d.ts.map

package/out/exports/resources.generated/aws-cloudfront-function.d.ts

@@ -0,0 +1,75 @@
+import type { ResourceDefinitionWithAttributes } from "../main.ts";
+export type CloudFrontFunction = ResourceDefinitionWithAttributes<"AWS::CloudFront::Function", CloudFrontFunctionProps, CloudFrontFunctionAttribs>;
+/**
+ * Creates a CloudFront function.
+ *
+ * To create a function, you provide the function code and some configuration information about the function. The response contains an Amazon Resource Name (ARN) that uniquely identifies the function, and the function’s stage.
+ *
+ * By default, when you create a function, it’s in the `DEVELOPMENT` stage. In this stage, you can [test the function](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/test-function.html) in the CloudFront console (or with `TestFunction` in the CloudFront API).
+ *
+ * When you’re ready to use your function with a CloudFront distribution, publish the function to the `LIVE` stage. You can do this in the CloudFront console, with `PublishFunction` in the CloudFront API, or by updating the `AWS::CloudFront::Function` resource with the `AutoPublish` property set to `true` . When the function is published to the `LIVE` stage, you can attach it to a distribution’s cache behavior, using the function’s ARN.
+ *
+ * To automatically publish the function to the `LIVE` stage when it’s created, set the `AutoPublish` property to `true` .
+ */
+export type CloudFrontFunctionProps = {
+    /**
+     * A flag that determines whether to automatically publish the function to the `LIVE` stage when it’s created. To automatically publish to the `LIVE` stage, set this property to `true` .
+     */
+    AutoPublish?: boolean | undefined;
+    /**
+     * The function code. For more information about writing a CloudFront function, see [Writing function code for CloudFront Functions](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/writing-function-code.html) in the *Amazon CloudFront Developer Guide* .
+     */
+    FunctionCode: string;
+    /**
+     * Contains configuration information about a CloudFront function.
+     */
+    FunctionConfig: FunctionConfig;
+    /**
+     * A name to identify the function.
+     */
+    Name: string;
+};
+export type CloudFrontFunctionAttribs = {
+    /**
+     * The ARN of the function. For example:
+     *
+     * `arn:aws:cloudfront::123456789012:function/ExampleFunction` .
+     *
+     * To get the function ARN, use the following syntax:
+     *
+     * `!GetAtt *Function_Logical_ID* .FunctionMetadata.FunctionARN`
+     */
+    FunctionARN: string;
+    /**
+     * The Amazon Resource Name (ARN) of the function. The ARN uniquely identifies the function.
+     */
+    "FunctionMetadata.FunctionARN": string;
+    Stage: string;
+};
+/**
+ * Contains configuration information about a CloudFront function.
+ */
+export type FunctionConfig = {
+    /**
+     * A comment to describe the function.
+     */
+    Comment: string;
+    /**
+     * The configuration for the key value store associations.
+     */
+    KeyValueStoreAssociations?: KeyValueStoreAssociation[] | undefined;
+    /**
+     * The function's runtime environment version.
+     */
+    Runtime: string;
+};
+/**
+ * The key value store association.
+ */
+export type KeyValueStoreAssociation = {
+    /**
+     * The Amazon Resource Name (ARN) of the key value store association.
+     */
+    KeyValueStoreARN: string;
+};
+//# sourceMappingURL=aws-cloudfront-function.d.ts.map

package/out/exports/resources.generated/aws-cloudfront-keygroup.d.ts

@@ -0,0 +1,43 @@
+import type { ResourceDefinitionWithAttributes } from "../main.ts";
+export type CloudFrontKeyGroup = ResourceDefinitionWithAttributes<"AWS::CloudFront::KeyGroup", CloudFrontKeyGroupProps, CloudFrontKeyGroupAttribs>;
+/**
+ * A key group.
+ *
+ * A key group contains a list of public keys that you can use with [CloudFront signed URLs and signed cookies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/PrivateContent.html) .
+ */
+export type CloudFrontKeyGroupProps = {
+    /**
+     * The key group configuration.
+     */
+    KeyGroupConfig: KeyGroupConfig;
+};
+export type CloudFrontKeyGroupAttribs = {
+    /**
+     * The identifier for the key group.
+     */
+    Id: string;
+    /**
+     * The date and time when the key group was last modified.
+     */
+    LastModifiedTime: string;
+};
+/**
+ * A key group configuration.
+ *
+ * A key group contains a list of public keys that you can use with [CloudFront signed URLs and signed cookies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/PrivateContent.html) .
+ */
+export type KeyGroupConfig = {
+    /**
+     * A comment to describe the key group. The comment cannot be longer than 128 characters.
+     */
+    Comment?: string | undefined;
+    /**
+     * A list of the identifiers of the public keys in the key group.
+     */
+    Items: string[];
+    /**
+     * A name to identify the key group.
+     */
+    Name: string;
+};
+//# sourceMappingURL=aws-cloudfront-keygroup.d.ts.map

package/out/exports/resources.generated/aws-cloudfront-keyvaluestore.d.ts

@@ -0,0 +1,47 @@
+import type { ResourceDefinitionWithAttributes } from "../main.ts";
+export type CloudFrontKeyValueStore = ResourceDefinitionWithAttributes<"AWS::CloudFront::KeyValueStore", CloudFrontKeyValueStoreProps, CloudFrontKeyValueStoreAttribs>;
+/**
+ * The key value store. Use this to separate data from function code, allowing you to update data without having to publish a new version of a function. The key value store holds keys and their corresponding values.
+ */
+export type CloudFrontKeyValueStoreProps = {
+    /**
+     * A comment for the key value store.
+     */
+    Comment?: string | undefined;
+    /**
+     * The import source for the key value store.
+     */
+    ImportSource?: ImportSource | undefined;
+    /**
+     * The name of the key value store.
+     */
+    Name: string;
+};
+export type CloudFrontKeyValueStoreAttribs = {
+    /**
+     * The Amazon Resource Name (ARN) of the key value store.
+     */
+    Arn: string;
+    /**
+     * The unique Id for the key value store.
+     */
+    Id: string;
+    /**
+     * The current status of the key value store. For more information, see [Key value store statuses](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/kvs-with-functions-create.html#key-value-store-status) in the *.*
+     */
+    Status: string;
+};
+/**
+ * The import source for the key value store.
+ */
+export type ImportSource = {
+    /**
+     * The Amazon Resource Name (ARN) of the import source for the key value store.
+     */
+    SourceArn: string;
+    /**
+     * The source type of the import source for the key value store.
+     */
+    SourceType: string;
+};
+//# sourceMappingURL=aws-cloudfront-keyvaluestore.d.ts.map

package/out/exports/resources.generated/aws-cloudfront-monitoringsubscription.d.ts

@@ -0,0 +1,34 @@
+import type { ResourceDefinition } from "../main.ts";
+export type CloudFrontMonitoringSubscription = ResourceDefinition<"AWS::CloudFront::MonitoringSubscription", CloudFrontMonitoringSubscriptionProps>;
+/**
+ * A monitoring subscription. This structure contains information about whether additional CloudWatch metrics are enabled for a given CloudFront distribution.
+ */
+export type CloudFrontMonitoringSubscriptionProps = {
+    /**
+     * The ID of the distribution that you are enabling metrics for.
+     */
+    DistributionId: string;
+    /**
+     * A subscription configuration for additional CloudWatch metrics.
+     */
+    MonitoringSubscription: MonitoringSubscription;
+};
+/**
+ * A monitoring subscription. This structure contains information about whether additional CloudWatch metrics are enabled for a given CloudFront distribution.
+ */
+export type MonitoringSubscription = {
+    /**
+     * A subscription configuration for additional CloudWatch metrics.
+     */
+    RealtimeMetricsSubscriptionConfig?: RealtimeMetricsSubscriptionConfig | undefined;
+};
+/**
+ * A subscription configuration for additional CloudWatch metrics.
+ */
+export type RealtimeMetricsSubscriptionConfig = {
+    /**
+     * A flag that indicates whether additional CloudWatch metrics are enabled for a given CloudFront distribution.
+     */
+    RealtimeMetricsSubscriptionStatus: "Enabled" | "Disabled";
+};
+//# sourceMappingURL=aws-cloudfront-monitoringsubscription.d.ts.map

package/out/exports/resources.generated/aws-cloudfront-originaccesscontrol.d.ts

@@ -0,0 +1,60 @@
+import type { ResourceDefinitionWithAttributes } from "../main.ts";
+export type CloudFrontOriginAccessControl = ResourceDefinitionWithAttributes<"AWS::CloudFront::OriginAccessControl", CloudFrontOriginAccessControlProps, CloudFrontOriginAccessControlAttribs>;
+/**
+ * Creates a new origin access control in CloudFront. After you create an origin access control, you can add it to an origin in a CloudFront distribution so that CloudFront sends authenticated (signed) requests to the origin.
+ *
+ * This makes it possible to block public access to the origin, allowing viewers (users) to access the origin's content only through CloudFront.
+ *
+ * For more information about using a CloudFront origin access control, see [Restricting access to an AWS origin](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-origin.html) in the *Amazon CloudFront Developer Guide* .
+ */
+export type CloudFrontOriginAccessControlProps = {
+    /**
+     * The origin access control.
+     */
+    OriginAccessControlConfig: OriginAccessControlConfig;
+};
+export type CloudFrontOriginAccessControlAttribs = {
+    /**
+     * The unique identifier of the origin access control.
+     */
+    Id: string;
+};
+/**
+ * Creates a new origin access control in CloudFront. After you create an origin access control, you can add it to an origin in a CloudFront distribution so that CloudFront sends authenticated (signed) requests to the origin.
+ *
+ * This makes it possible to block public access to the origin, allowing viewers (users) to access the origin's content only through CloudFront.
+ *
+ * For more information about using a CloudFront origin access control, see [Restricting access to an AWS origin](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-origin.html) in the *Amazon CloudFront Developer Guide* .
+ */
+export type OriginAccessControlConfig = {
+    /**
+     * A description of the origin access control.
+     */
+    Description?: string | undefined;
+    /**
+     * A name to identify the origin access control. You can specify up to 64 characters.
+     */
+    Name: string;
+    /**
+     * The type of origin that this origin access control is for.
+     * @pattern ^(s3|mediastore|lambda|mediapackagev2)$
+     */
+    OriginAccessControlOriginType: string;
+    /**
+     * Specifies which requests CloudFront signs (adds authentication information to). Specify `always` for the most common use case. For more information, see [origin access control advanced settings](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-s3.html#oac-advanced-settings) in the *Amazon CloudFront Developer Guide* .
+     *
+     * This field can have one of the following values:
+     *
+     * - `always` – CloudFront signs all origin requests, overwriting the `Authorization` header from the viewer request if one exists.
+     * - `never` – CloudFront doesn't sign any origin requests. This value turns off origin access control for all origins in all distributions that use this origin access control.
+     * - `no-override` – If the viewer request doesn't contain the `Authorization` header, then CloudFront signs the origin request. If the viewer request contains the `Authorization` header, then CloudFront doesn't sign the origin request and instead passes along the `Authorization` header from the viewer request. *WARNING: To pass along the `Authorization` header from the viewer request, you *must* add the `Authorization` header to a [cache policy](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/controlling-the-cache-key.html) for all cache behaviors that use origins associated with this origin access control.*
+     * @pattern ^(never|no-override|always)$
+     */
+    SigningBehavior: string;
+    /**
+     * The signing protocol of the origin access control, which determines how CloudFront signs (authenticates) requests. The only valid value is `sigv4` .
+     * @pattern ^(sigv4)$
+     */
+    SigningProtocol: string;
+};
+//# sourceMappingURL=aws-cloudfront-originaccesscontrol.d.ts.map

package/out/exports/resources.generated/aws-cloudfront-originrequestpolicy.d.ts

@@ -0,0 +1,121 @@
+import type { ResourceDefinitionWithAttributes } from "../main.ts";
+export type CloudFrontOriginRequestPolicy = ResourceDefinitionWithAttributes<"AWS::CloudFront::OriginRequestPolicy", CloudFrontOriginRequestPolicyProps, CloudFrontOriginRequestPolicyAttribs>;
+/**
+ * An origin request policy.
+ *
+ * When it's attached to a cache behavior, the origin request policy determines the values that CloudFront includes in requests that it sends to the origin. Each request that CloudFront sends to the origin includes the following:
+ *
+ * - The request body and the URL path (without the domain name) from the viewer request.
+ * - The headers that CloudFront automatically includes in every origin request, including `Host` , `User-Agent` , and `X-Amz-Cf-Id` .
+ * - All HTTP headers, cookies, and URL query strings that are specified in the cache policy or the origin request policy. These can include items from the viewer request and, in the case of headers, additional ones that are added by CloudFront.
+ *
+ * CloudFront sends a request when it can't find an object in its cache that matches the request. If you want to send values to the origin and also include them in the cache key, use `CachePolicy` .
+ */
+export type CloudFrontOriginRequestPolicyProps = {
+    /**
+     * The origin request policy configuration.
+     */
+    OriginRequestPolicyConfig: OriginRequestPolicyConfig;
+};
+export type CloudFrontOriginRequestPolicyAttribs = {
+    /**
+     * The unique identifier for the origin request policy. For example: `befd7079-9bbc-4ebf-8ade-498a3694176c` .
+     */
+    Id: string;
+    /**
+     * The date and time when the origin request policy was last modified.
+     */
+    LastModifiedTime: string;
+};
+/**
+ * An object that determines whether any cookies in viewer requests (and if so, which cookies) are included in requests that CloudFront sends to the origin.
+ */
+export type CookiesConfig = {
+    /**
+     * Determines whether cookies in viewer requests are included in requests that CloudFront sends to the origin. Valid values are:
+     *
+     * - `none` – No cookies in viewer requests are included in requests that CloudFront sends to the origin. Even when this field is set to `none` , any cookies that are listed in a `CachePolicy` *are* included in origin requests.
+     * - `whitelist` – Only the cookies in viewer requests that are listed in the `CookieNames` type are included in requests that CloudFront sends to the origin.
+     * - `all` – All cookies in viewer requests are included in requests that CloudFront sends to the origin.
+     * - `allExcept` – All cookies in viewer requests are included in requests that CloudFront sends to the origin, **except** for those listed in the `CookieNames` type, which are not included.
+     * @pattern ^(none|whitelist|all|allExcept)$
+     */
+    CookieBehavior: string;
+    /**
+     * Contains a list of cookie names.
+     */
+    Cookies?: string[] | undefined;
+};
+/**
+ * An object that determines whether any HTTP headers (and if so, which headers) are included in requests that CloudFront sends to the origin.
+ */
+export type HeadersConfig = {
+    /**
+     * Determines whether any HTTP headers are included in requests that CloudFront sends to the origin. Valid values are:
+     *
+     * - `none` – No HTTP headers in viewer requests are included in requests that CloudFront sends to the origin. Even when this field is set to `none` , any headers that are listed in a `CachePolicy` *are* included in origin requests.
+     * - `whitelist` – Only the HTTP headers that are listed in the `Headers` type are included in requests that CloudFront sends to the origin.
+     * - `allViewer` – All HTTP headers in viewer requests are included in requests that CloudFront sends to the origin.
+     * - `allViewerAndWhitelistCloudFront` – All HTTP headers in viewer requests and the additional CloudFront headers that are listed in the `Headers` type are included in requests that CloudFront sends to the origin. The additional headers are added by CloudFront.
+     * - `allExcept` – All HTTP headers in viewer requests are included in requests that CloudFront sends to the origin, **except** for those listed in the `Headers` type, which are not included.
+     * @pattern ^(none|whitelist|allViewer|allViewerAndWhitelistCloudFront|allExcept)$
+     */
+    HeaderBehavior: string;
+    /**
+     * Contains a list of HTTP header names.
+     */
+    Headers?: string[] | undefined;
+};
+/**
+ * An origin request policy configuration.
+ *
+ * This configuration determines the values that CloudFront includes in requests that it sends to the origin. Each request that CloudFront sends to the origin includes the following:
+ *
+ * - The request body and the URL path (without the domain name) from the viewer request.
+ * - The headers that CloudFront automatically includes in every origin request, including `Host` , `User-Agent` , and `X-Amz-Cf-Id` .
+ * - All HTTP headers, cookies, and URL query strings that are specified in the cache policy or the origin request policy. These can include items from the viewer request and, in the case of headers, additional ones that are added by CloudFront.
+ *
+ * CloudFront sends a request when it can't find an object in its cache that matches the request. If you want to send values to the origin and also include them in the cache key, use `CachePolicy` .
+ */
+export type OriginRequestPolicyConfig = {
+    /**
+     * A comment to describe the origin request policy. The comment cannot be longer than 128 characters.
+     */
+    Comment?: string | undefined;
+    /**
+     * The cookies from viewer requests to include in origin requests.
+     */
+    CookiesConfig: CookiesConfig;
+    /**
+     * The HTTP headers to include in origin requests. These can include headers from viewer requests and additional headers added by CloudFront.
+     */
+    HeadersConfig: HeadersConfig;
+    /**
+     * A unique name to identify the origin request policy.
+     */
+    Name: string;
+    /**
+     * The URL query strings from viewer requests to include in origin requests.
+     */
+    QueryStringsConfig: QueryStringsConfig;
+};
+/**
+ * An object that determines whether any URL query strings in viewer requests (and if so, which query strings) are included in requests that CloudFront sends to the origin.
+ */
+export type QueryStringsConfig = {
+    /**
+     * Determines whether any URL query strings in viewer requests are included in requests that CloudFront sends to the origin. Valid values are:
+     *
+     * - `none` – No query strings in viewer requests are included in requests that CloudFront sends to the origin. Even when this field is set to `none` , any query strings that are listed in a `CachePolicy` *are* included in origin requests.
+     * - `whitelist` – Only the query strings in viewer requests that are listed in the `QueryStringNames` type are included in requests that CloudFront sends to the origin.
+     * - `all` – All query strings in viewer requests are included in requests that CloudFront sends to the origin.
+     * - `allExcept` – All query strings in viewer requests are included in requests that CloudFront sends to the origin, **except** for those listed in the `QueryStringNames` type, which are not included.
+     * @pattern ^(none|whitelist|all|allExcept)$
+     */
+    QueryStringBehavior: string;
+    /**
+     * Contains a list of query string names.
+     */
+    QueryStrings?: string[] | undefined;
+};
+//# sourceMappingURL=aws-cloudfront-originrequestpolicy.d.ts.map

package/out/exports/resources.generated/aws-cloudfront-publickey.d.ts

@@ -0,0 +1,43 @@
+import type { ResourceDefinitionWithAttributes } from "../main.ts";
+export type CloudFrontPublicKey = ResourceDefinitionWithAttributes<"AWS::CloudFront::PublicKey", CloudFrontPublicKeyProps, CloudFrontPublicKeyAttribs>;
+/**
+ * A public key that you can use with [signed URLs and signed cookies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/PrivateContent.html) , or with [field-level encryption](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/field-level-encryption.html) .
+ */
+export type CloudFrontPublicKeyProps = {
+    /**
+     * Configuration information about a public key that you can use with [signed URLs and signed cookies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/PrivateContent.html) , or with [field-level encryption](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/field-level-encryption.html) .
+     */
+    PublicKeyConfig: PublicKeyConfig;
+};
+export type CloudFrontPublicKeyAttribs = {
+    /**
+     * The date and time when the public key was uploaded.
+     */
+    CreatedTime: string;
+    /**
+     * The identifier of the public key.
+     */
+    Id: string;
+};
+/**
+ * Configuration information about a public key that you can use with [signed URLs and signed cookies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/PrivateContent.html) , or with [field-level encryption](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/field-level-encryption.html) .
+ */
+export type PublicKeyConfig = {
+    /**
+     * A string included in the request to help make sure that the request can't be replayed.
+     */
+    CallerReference: string;
+    /**
+     * A comment to describe the public key. The comment cannot be longer than 128 characters.
+     */
+    Comment?: string | undefined;
+    /**
+     * The public key that you can use with [signed URLs and signed cookies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/PrivateContent.html) , or with [field-level encryption](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/field-level-encryption.html) .
+     */
+    EncodedKey: string;
+    /**
+     * A name to help identify the public key.
+     */
+    Name: string;
+};
+//# sourceMappingURL=aws-cloudfront-publickey.d.ts.map

package/out/exports/resources.generated/aws-cloudfront-realtimelogconfig.d.ts

@@ -0,0 +1,62 @@
+import type { ResourceDefinitionWithAttributes } from "../main.ts";
+export type CloudFrontRealtimeLogConfig = ResourceDefinitionWithAttributes<"AWS::CloudFront::RealtimeLogConfig", CloudFrontRealtimeLogConfigProps, CloudFrontRealtimeLogConfigAttribs>;
+/**
+ * A real-time log configuration.
+ */
+export type CloudFrontRealtimeLogConfigProps = {
+    /**
+     * Contains information about the Amazon Kinesis data stream where you are sending real-time log data for this real-time log configuration.
+     */
+    EndPoints: EndPoint[];
+    /**
+     * A list of fields that are included in each real-time log record. In an API response, the fields are provided in the same order in which they are sent to the Amazon Kinesis data stream.
+     *
+     * For more information about fields, see [Real-time log configuration fields](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/real-time-logs.html#understand-real-time-log-config-fields) in the *Amazon CloudFront Developer Guide* .
+     */
+    Fields: string[];
+    /**
+     * The unique name of this real-time log configuration.
+     */
+    Name: string;
+    /**
+     * The sampling rate for this real-time log configuration. The sampling rate determines the percentage of viewer requests that are represented in the real-time log data. The sampling rate is an integer between 1 and 100, inclusive.
+     * @min 1
+     * @max 100
+     */
+    SamplingRate: number;
+};
+export type CloudFrontRealtimeLogConfigAttribs = {
+    /**
+     * The Amazon Resource Name (ARN) of the real-time log configuration. For example: `arn:aws:cloudfront::111122223333:realtime-log-config/ExampleNameForRealtimeLogConfig` .
+     */
+    Arn: string;
+};
+/**
+ * Contains information about the Amazon Kinesis data stream where you are sending real-time log data for this real-time log configuration.
+ */
+export type EndPoint = {
+    /**
+     * Contains information about the Amazon Kinesis data stream where you are sending real-time log data in a real-time log configuration.
+     */
+    KinesisStreamConfig: KinesisStreamConfig;
+    /**
+     * The type of data stream where you are sending real-time log data. The only valid value is `Kinesis` .
+     */
+    StreamType: string;
+};
+/**
+ * Contains information about the Amazon Kinesis data stream where you are sending real-time log data.
+ */
+export type KinesisStreamConfig = {
+    /**
+     * The Amazon Resource Name (ARN) of an AWS Identity and Access Management (IAM) role that CloudFront can use to send real-time log data to your Kinesis data stream.
+     *
+     * For more information the IAM role, see [Real-time log configuration IAM role](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/real-time-logs.html#understand-real-time-log-config-iam-role) in the *Amazon CloudFront Developer Guide* .
+     */
+    RoleArn: string;
+    /**
+     * The Amazon Resource Name (ARN) of the Kinesis data stream where you are sending real-time log data.
+     */
+    StreamArn: string;
+};
+//# sourceMappingURL=aws-cloudfront-realtimelogconfig.d.ts.map