@propulsionworks/cloudformation 0.0.2 → 0.1.0

package/out/exports/resources.generated/aws-ec2-routeserverpropagation.d.ts

@@ -0,0 +1,18 @@
+import type { ResourceDefinition } from "../main.ts";
+export type EC2RouteServerPropagation = ResourceDefinition<"AWS::EC2::RouteServerPropagation", EC2RouteServerPropagationProps>;
+/**
+ * Specifies route propagation from a route server to a route table.
+ *
+ * For more information see [Dynamic routing in your VPC with VPC Route Server](https://docs.aws.amazon.com/vpc/latest/userguide/dynamic-routing-route-server.html) in the *Amazon VPC User Guide* .
+ */
+export type EC2RouteServerPropagationProps = {
+    /**
+     * The ID of the route server configured for route propagation.
+     */
+    RouteServerId: string;
+    /**
+     * The ID of the route table configured for route server propagation.
+     */
+    RouteTableId: string;
+};
+//# sourceMappingURL=aws-ec2-routeserverpropagation.d.ts.map

package/out/exports/resources.generated/aws-ec2-routetable.d.ts

@@ -0,0 +1,24 @@
+import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
+export type EC2RouteTable = ResourceDefinitionWithAttributes<"AWS::EC2::RouteTable", EC2RouteTableProps, EC2RouteTableAttribs>;
+/**
+ * Specifies a route table for the specified VPC. After you create a route table, you can add routes and associate the table with a subnet.
+ *
+ * For more information, see [Route tables](https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Route_Tables.html) in the *Amazon VPC User Guide* .
+ */
+export type EC2RouteTableProps = {
+    /**
+     * Any tags assigned to the route table.
+     */
+    Tags?: Tag[] | undefined;
+    /**
+     * The ID of the VPC.
+     */
+    VpcId: string;
+};
+export type EC2RouteTableAttribs = {
+    /**
+     * The ID of the route table.
+     */
+    RouteTableId: string;
+};
+//# sourceMappingURL=aws-ec2-routetable.d.ts.map

package/out/exports/resources.generated/aws-ec2-securitygroup.d.ts

@@ -0,0 +1,194 @@
+import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
+export type EC2SecurityGroup = ResourceDefinitionWithAttributes<"AWS::EC2::SecurityGroup", EC2SecurityGroupProps, EC2SecurityGroupAttribs>;
+/**
+ * Specifies a security group.
+ *
+ * You must specify ingress rules to allow inbound traffic. By default, no inbound traffic is allowed.
+ *
+ * When you create a security group, if you do not add egress rules, we add egress rules that allow all outbound IPv4 and IPv6 traffic. Otherwise, we do not add them. After the security group is created, if you remove all egress rules that you added, we do not add egress rules, so no outbound traffic is allowed.
+ *
+ * If you modify a rule, CloudFormation removes the existing rule and then adds a new rule. There is a brief period when neither the original rule or the new rule exists, so the corresponding traffic is dropped.
+ *
+ * This type supports updates. For more information about updating stacks, see [AWS CloudFormation Stacks Updates](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks.html) .
+ *
+ * > To cross-reference two security groups in the ingress and egress rules of those security groups, use the [AWS::EC2::SecurityGroupEgress](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-security-group-egress.html) and [AWS::EC2::SecurityGroupIngress](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-security-group-ingress.html) resources to define your rules. Do not use the embedded ingress and egress rules in the `AWS::EC2::SecurityGroup` . Doing so creates a circular dependency, which AWS CloudFormation doesn't allow.
+ */
+export type EC2SecurityGroupProps = {
+    /**
+     * A description for the security group.
+     *
+     * Constraints: Up to 255 characters in length
+     *
+     * Valid characters: a-z, A-Z, 0-9, spaces, and ._-:/()#,@[]+=&;{}!$*
+     */
+    GroupDescription: string;
+    /**
+     * The name of the security group. Names are case-insensitive and must be unique within the VPC.
+     *
+     * Constraints: Up to 255 characters in length. Can't start with `sg-` .
+     *
+     * Valid characters: a-z, A-Z, 0-9, spaces, and ._-:/()#,@[]+=&;{}!$*
+     */
+    GroupName?: string | undefined;
+    /**
+     * The outbound rules associated with the security group.
+     */
+    SecurityGroupEgress?: Egress[] | undefined;
+    /**
+     * The inbound rules associated with the security group.
+     */
+    SecurityGroupIngress?: Ingress[] | undefined;
+    /**
+     * Any tags assigned to the security group.
+     */
+    Tags?: Tag[] | undefined;
+    /**
+     * The ID of the VPC for the security group. If you do not specify a VPC, the default is to use the default VPC for the Region. If there's no specified VPC and no default VPC, security group creation fails.
+     */
+    VpcId?: string | undefined;
+};
+export type EC2SecurityGroupAttribs = {
+    /**
+     * The ID of the security group, such as `sg-94b3a1f6` .
+     */
+    GroupId: string;
+    /**
+     * The group name or group ID depending on whether the SG is created in default or specific VPC
+     */
+    Id: string;
+    /**
+     * The ID of the VPC, such as `vpc-0669f8f9` .
+     */
+    VpcId: string;
+};
+/**
+ * Adds the specified outbound (egress) rule to a security group.
+ *
+ * An outbound rule permits instances to send traffic to the specified IPv4 or IPv6 address range, the IP address ranges that are specified by a prefix list, or the instances that are associated with a destination security group. For more information, see [Security group rules](https://docs.aws.amazon.com/vpc/latest/userguide/security-group-rules.html) .
+ *
+ * You must specify exactly one of the following destinations: an IPv4 address range, an IPv6 address range, a prefix list, or a security group.
+ *
+ * You must specify a protocol for each rule (for example, TCP). If the protocol is TCP or UDP, you must also specify a port or port range. If the protocol is ICMP or ICMPv6, you must also specify the ICMP/ICMPv6 type and code.
+ *
+ * Rule changes are propagated to instances associated with the security group as quickly as possible. However, a small delay might occur.
+ */
+export type Egress = {
+    /**
+     * The IPv4 address range, in CIDR format.
+     *
+     * You must specify exactly one of the following: `CidrIp` , `CidrIpv6` , `DestinationPrefixListId` , or `DestinationSecurityGroupId` .
+     *
+     * For examples of rules that you can add to security groups for specific access scenarios, see [Security group rules for different use cases](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-rules-reference.html) in the *Amazon EC2 User Guide* .
+     */
+    CidrIp?: string | undefined;
+    /**
+     * The IPv6 address range, in CIDR format.
+     *
+     * You must specify exactly one of the following: `CidrIp` , `CidrIpv6` , `DestinationPrefixListId` , or `DestinationSecurityGroupId` .
+     *
+     * For examples of rules that you can add to security groups for specific access scenarios, see [Security group rules for different use cases](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-rules-reference.html) in the *Amazon EC2 User Guide* .
+     */
+    CidrIpv6?: string | undefined;
+    /**
+     * A description for the security group rule.
+     *
+     * Constraints: Up to 255 characters in length. Allowed characters are a-z, A-Z, 0-9, spaces, and ._-:/()#,@[]+=;{}!$*
+     */
+    Description?: string | undefined;
+    /**
+     * The prefix list IDs for the destination AWS service. This is the AWS service that you want to access through a VPC endpoint from instances associated with the security group.
+     *
+     * You must specify exactly one of the following: `CidrIp` , `CidrIpv6` , `DestinationPrefixListId` , or `DestinationSecurityGroupId` .
+     */
+    DestinationPrefixListId?: string | undefined;
+    /**
+     * The ID of the destination VPC security group.
+     *
+     * You must specify exactly one of the following: `CidrIp` , `CidrIpv6` , `DestinationPrefixListId` , or `DestinationSecurityGroupId` .
+     */
+    DestinationSecurityGroupId?: string | undefined;
+    /**
+     * If the protocol is TCP or UDP, this is the start of the port range. If the protocol is ICMP or ICMPv6, this is the ICMP type or -1 (all ICMP types).
+     */
+    FromPort?: number | undefined;
+    /**
+     * The IP protocol name ( `tcp` , `udp` , `icmp` , `icmpv6` ) or number (see [Protocol Numbers](https://docs.aws.amazon.com/http://www.iana.org/assignments/protocol-numbers/protocol-numbers.xhtml) ).
+     *
+     * Use `-1` to specify all protocols. When authorizing security group rules, specifying `-1` or a protocol number other than `tcp` , `udp` , `icmp` , or `icmpv6` allows traffic on all ports, regardless of any port range you specify. For `tcp` , `udp` , and `icmp` , you must specify a port range. For `icmpv6` , the port range is optional; if you omit the port range, traffic for all types and codes is allowed.
+     */
+    IpProtocol: string;
+    /**
+     * If the protocol is TCP or UDP, this is the end of the port range. If the protocol is ICMP or ICMPv6, this is the ICMP code or -1 (all ICMP codes). If the start port is -1 (all ICMP types), then the end port must be -1 (all ICMP codes).
+     */
+    ToPort?: number | undefined;
+};
+/**
+ * Adds an inbound (ingress) rule to a security group.
+ *
+ * An inbound rule permits instances to receive traffic from the specified IPv4 or IPv6 address range, the IP address ranges that are specified by a prefix list, or the instances that are associated with a source security group. For more information, see [Security group rules](https://docs.aws.amazon.com/vpc/latest/userguide/security-group-rules.html) .
+ *
+ * You must specify exactly one of the following sources: an IPv4 address range, an IPv6 address range, a prefix list, or a security group.
+ *
+ * You must specify a protocol for each rule (for example, TCP). If the protocol is TCP or UDP, you must also specify a port or port range. If the protocol is ICMP or ICMPv6, you must also specify the ICMP/ICMPv6 type and code.
+ *
+ * Rule changes are propagated to instances associated with the security group as quickly as possible. However, a small delay might occur.
+ */
+export type Ingress = {
+    /**
+     * The IPv4 address range, in CIDR format.
+     *
+     * You must specify exactly one of the following: `CidrIp` , `CidrIpv6` , `SourcePrefixListId` , or `SourceSecurityGroupId` .
+     *
+     * For examples of rules that you can add to security groups for specific access scenarios, see [Security group rules for different use cases](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-rules-reference.html) in the *Amazon EC2 User Guide* .
+     */
+    CidrIp?: string | undefined;
+    /**
+     * The IPv6 address range, in CIDR format.
+     *
+     * You must specify exactly one of the following: `CidrIp` , `CidrIpv6` , `SourcePrefixListId` , or `SourceSecurityGroupId` .
+     *
+     * For examples of rules that you can add to security groups for specific access scenarios, see [Security group rules for different use cases](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-rules-reference.html) in the *Amazon EC2 User Guide* .
+     */
+    CidrIpv6?: string | undefined;
+    /**
+     * Updates the description of an ingress (inbound) security group rule. You can replace an existing description, or add a description to a rule that did not have one previously.
+     *
+     * Constraints: Up to 255 characters in length. Allowed characters are a-z, A-Z, 0-9, spaces, and ._-:/()#,@[]+=;{}!$*
+     */
+    Description?: string | undefined;
+    /**
+     * If the protocol is TCP or UDP, this is the start of the port range. If the protocol is ICMP or ICMPv6, this is the ICMP type or -1 (all ICMP types).
+     */
+    FromPort?: number | undefined;
+    /**
+     * The IP protocol name ( `tcp` , `udp` , `icmp` , `icmpv6` ) or number (see [Protocol Numbers](https://docs.aws.amazon.com/http://www.iana.org/assignments/protocol-numbers/protocol-numbers.xhtml) ).
+     *
+     * Use `-1` to specify all protocols. When authorizing security group rules, specifying `-1` or a protocol number other than `tcp` , `udp` , `icmp` , or `icmpv6` allows traffic on all ports, regardless of any port range you specify. For `tcp` , `udp` , and `icmp` , you must specify a port range. For `icmpv6` , the port range is optional; if you omit the port range, traffic for all types and codes is allowed.
+     */
+    IpProtocol: string;
+    /**
+     * The ID of a prefix list.
+     */
+    SourcePrefixListId?: string | undefined;
+    /**
+     * The ID of the security group.
+     */
+    SourceSecurityGroupId?: string | undefined;
+    /**
+     * [Default VPC] The name of the source security group. You must specify either the security group ID or the security group name. You can't specify the group name in combination with an IP address range. Creates rules that grant full ICMP, UDP, and TCP access.
+     *
+     * For security groups in a nondefault VPC, you must specify the group ID.
+     */
+    SourceSecurityGroupName?: string | undefined;
+    /**
+     * [nondefault VPC] The AWS account ID for the source security group, if the source security group is in a different account. You can't specify this property with an IP address range. Creates rules that grant full ICMP, UDP, and TCP access.
+     *
+     * If you specify `SourceSecurityGroupName` or `SourceSecurityGroupId` and that security group is owned by a different account than the account creating the stack, you must specify the `SourceSecurityGroupOwnerId` ; otherwise, this property is optional.
+     */
+    SourceSecurityGroupOwnerId?: string | undefined;
+    /**
+     * If the protocol is TCP or UDP, this is the end of the port range. If the protocol is ICMP or ICMPv6, this is the ICMP code or -1 (all ICMP codes). If the start port is -1 (all ICMP types), then the end port must be -1 (all ICMP codes).
+     */
+    ToPort?: number | undefined;
+};
+//# sourceMappingURL=aws-ec2-securitygroup.d.ts.map

package/out/exports/resources.generated/aws-ec2-securitygroupegress.d.ts

@@ -0,0 +1,71 @@
+import type { ResourceDefinitionWithAttributes } from "../main.ts";
+export type EC2SecurityGroupEgress = ResourceDefinitionWithAttributes<"AWS::EC2::SecurityGroupEgress", EC2SecurityGroupEgressProps, EC2SecurityGroupEgressAttribs>;
+/**
+ * Adds the specified outbound (egress) rule to a security group.
+ *
+ * An outbound rule permits instances to send traffic to the specified IPv4 or IPv6 address range, the IP addresses that are specified by a prefix list, or the instances that are associated with a destination security group. For more information, see [Security group rules](https://docs.aws.amazon.com/vpc/latest/userguide/security-group-rules.html) .
+ *
+ * You must specify exactly one of the following destinations: an IPv4 address range, an IPv6 address range, a prefix list, or a security group.
+ *
+ * You must specify a protocol for each rule (for example, TCP). If the protocol is TCP or UDP, you must also specify a port or port range. If the protocol is ICMP or ICMPv6, you must also specify the ICMP/ICMPv6 type and code. To specify all types or all codes, use -1.
+ *
+ * Rule changes are propagated to instances associated with the security group as quickly as possible. However, a small delay might occur.
+ */
+export type EC2SecurityGroupEgressProps = {
+    /**
+     * The IPv4 address range, in CIDR format.
+     *
+     * You must specify exactly one of the following: `CidrIp` , `CidrIpv6` , `DestinationPrefixListId` , or `DestinationSecurityGroupId` .
+     *
+     * For examples of rules that you can add to security groups for specific access scenarios, see [Security group rules for different use cases](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-rules-reference.html) in the *Amazon EC2 User Guide* .
+     */
+    CidrIp?: string | undefined;
+    /**
+     * The IPv6 address range, in CIDR format.
+     *
+     * You must specify exactly one of the following: `CidrIp` , `CidrIpv6` , `DestinationPrefixListId` , or `DestinationSecurityGroupId` .
+     *
+     * For examples of rules that you can add to security groups for specific access scenarios, see [Security group rules for different use cases](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-rules-reference.html) in the *Amazon EC2 User Guide* .
+     */
+    CidrIpv6?: string | undefined;
+    /**
+     * The description of an egress (outbound) security group rule.
+     *
+     * Constraints: Up to 255 characters in length. Allowed characters are a-z, A-Z, 0-9, spaces, and ._-:/()#,@[]+=;{}!$*
+     */
+    Description?: string | undefined;
+    /**
+     * The prefix list IDs for an AWS service. This is the AWS service to access through a VPC endpoint from instances associated with the security group.
+     *
+     * You must specify exactly one of the following: `CidrIp` , `CidrIpv6` , `DestinationPrefixListId` , or `DestinationSecurityGroupId` .
+     */
+    DestinationPrefixListId?: string | undefined;
+    /**
+     * The ID of the security group.
+     *
+     * You must specify exactly one of the following: `CidrIp` , `CidrIpv6` , `DestinationPrefixListId` , or `DestinationSecurityGroupId` .
+     */
+    DestinationSecurityGroupId?: string | undefined;
+    /**
+     * If the protocol is TCP or UDP, this is the start of the port range. If the protocol is ICMP or ICMPv6, this is the ICMP type or -1 (all ICMP types).
+     */
+    FromPort?: number | undefined;
+    /**
+     * The ID of the security group. You must specify either the security group ID or the security group name in the request. For security groups in a nondefault VPC, you must specify the security group ID.
+     */
+    GroupId: string;
+    /**
+     * The IP protocol name ( `tcp` , `udp` , `icmp` , `icmpv6` ) or number (see [Protocol Numbers](https://docs.aws.amazon.com/http://www.iana.org/assignments/protocol-numbers/protocol-numbers.xhtml) ).
+     *
+     * Use `-1` to specify all protocols. When authorizing security group rules, specifying `-1` or a protocol number other than `tcp` , `udp` , `icmp` , or `icmpv6` allows traffic on all ports, regardless of any port range you specify. For `tcp` , `udp` , and `icmp` , you must specify a port range. For `icmpv6` , the port range is optional; if you omit the port range, traffic for all types and codes is allowed.
+     */
+    IpProtocol: string;
+    /**
+     * If the protocol is TCP or UDP, this is the end of the port range. If the protocol is ICMP or ICMPv6, this is the ICMP code or -1 (all ICMP codes). If the start port is -1 (all ICMP types), then the end port must be -1 (all ICMP codes).
+     */
+    ToPort?: number | undefined;
+};
+export type EC2SecurityGroupEgressAttribs = {
+    Id: string;
+};
+//# sourceMappingURL=aws-ec2-securitygroupegress.d.ts.map

package/out/exports/resources.generated/aws-ec2-securitygroupingress.d.ts

@@ -0,0 +1,90 @@
+import type { ResourceDefinitionWithAttributes } from "../main.ts";
+export type EC2SecurityGroupIngress = ResourceDefinitionWithAttributes<"AWS::EC2::SecurityGroupIngress", EC2SecurityGroupIngressProps, EC2SecurityGroupIngressAttribs>;
+/**
+ * Adds an inbound (ingress) rule to a security group.
+ *
+ * An inbound rule permits instances to receive traffic from the specified IPv4 or IPv6 address range, the IP addresses that are specified by a prefix list, or the instances that are associated with a source security group. For more information, see [Security group rules](https://docs.aws.amazon.com/vpc/latest/userguide/security-group-rules.html) .
+ *
+ * You must specify exactly one of the following sources: an IPv4 address range, an IPv6 address range, a prefix list, or a security group.
+ *
+ * You must specify a protocol for each rule (for example, TCP). If the protocol is TCP or UDP, you must also specify a port or port range. If the protocol is ICMP or ICMPv6, you must also specify the ICMP/ICMPv6 type and code.
+ *
+ * Rule changes are propagated to instances associated with the security group as quickly as possible. However, a small delay might occur.
+ */
+export type EC2SecurityGroupIngressProps = {
+    /**
+     * The IPv4 address range, in CIDR format.
+     *
+     * You must specify exactly one of the following: `CidrIp` , `CidrIpv6` , `SourcePrefixListId` , or `SourceSecurityGroupId` .
+     *
+     * For examples of rules that you can add to security groups for specific access scenarios, see [Security group rules for different use cases](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-rules-reference.html) in the *Amazon EC2 User Guide* .
+     */
+    CidrIp?: string | undefined;
+    /**
+     * The IPv6 address range, in CIDR format.
+     *
+     * You must specify exactly one of the following: `CidrIp` , `CidrIpv6` , `SourcePrefixListId` , or `SourceSecurityGroupId` .
+     *
+     * For examples of rules that you can add to security groups for specific access scenarios, see [Security group rules for different use cases](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-rules-reference.html) in the *Amazon EC2 User Guide* .
+     */
+    CidrIpv6?: string | undefined;
+    /**
+     * Updates the description of an ingress (inbound) security group rule. You can replace an existing description, or add a description to a rule that did not have one previously.
+     *
+     * Constraints: Up to 255 characters in length. Allowed characters are a-z, A-Z, 0-9, spaces, and ._-:/()#,@[]+=;{}!$*
+     */
+    Description?: string | undefined;
+    /**
+     * The start of port range for the TCP and UDP protocols, or an ICMP/ICMPv6 type number. A value of `-1` indicates all ICMP/ICMPv6 types. If you specify all ICMP/ICMPv6 types, you must specify all codes.
+     *
+     * Use this for ICMP and any protocol that uses ports.
+     */
+    FromPort?: number | undefined;
+    /**
+     * The ID of the security group.
+     */
+    GroupId?: string | undefined;
+    /**
+     * [Default VPC] The name of the security group. For security groups for a default VPC you can specify either the ID or the name of the security group. For security groups for a nondefault VPC, you must specify the ID of the security group.
+     */
+    GroupName?: string | undefined;
+    /**
+     * The IP protocol name ( `tcp` , `udp` , `icmp` , `icmpv6` ) or number (see [Protocol Numbers](https://docs.aws.amazon.com/http://www.iana.org/assignments/protocol-numbers/protocol-numbers.xhtml) ).
+     *
+     * Use `-1` to specify all protocols. When authorizing security group rules, specifying `-1` or a protocol number other than `tcp` , `udp` , `icmp` , or `icmpv6` allows traffic on all ports, regardless of any port range you specify. For `tcp` , `udp` , and `icmp` , you must specify a port range. For `icmpv6` , the port range is optional; if you omit the port range, traffic for all types and codes is allowed.
+     */
+    IpProtocol: string;
+    /**
+     * The ID of a prefix list.
+     */
+    SourcePrefixListId?: string | undefined;
+    /**
+     * The ID of the security group. You must specify either the security group ID or the security group name. For security groups in a nondefault VPC, you must specify the security group ID.
+     */
+    SourceSecurityGroupId?: string | undefined;
+    /**
+     * [Default VPC] The name of the source security group. You must specify either the security group ID or the security group name. You can't specify the group name in combination with an IP address range. Creates rules that grant full ICMP, UDP, and TCP access.
+     *
+     * For security groups in a nondefault VPC, you must specify the group ID.
+     */
+    SourceSecurityGroupName?: string | undefined;
+    /**
+     * [nondefault VPC] The AWS account ID for the source security group, if the source security group is in a different account. You can't specify this property with an IP address range. Creates rules that grant full ICMP, UDP, and TCP access.
+     *
+     * If you specify `SourceSecurityGroupName` or `SourceSecurityGroupId` and that security group is owned by a different account than the account creating the stack, you must specify `SourceSecurityGroupOwnerId` ; otherwise, this property is optional.
+     */
+    SourceSecurityGroupOwnerId?: string | undefined;
+    /**
+     * The end of port range for the TCP and UDP protocols, or an ICMP/ICMPv6 code. A value of `-1` indicates all ICMP/ICMPv6 codes for the specified ICMP type. If you specify all ICMP/ICMPv6 types, you must specify all codes.
+     *
+     * Use this for ICMP and any protocol that uses ports.
+     */
+    ToPort?: number | undefined;
+};
+export type EC2SecurityGroupIngressAttribs = {
+    /**
+     * The Security Group Rule Id
+     */
+    Id: string;
+};
+//# sourceMappingURL=aws-ec2-securitygroupingress.d.ts.map

package/out/exports/resources.generated/aws-ec2-securitygroupvpcassociation.d.ts

@@ -0,0 +1,31 @@
+import type { ResourceDefinitionWithAttributes } from "../main.ts";
+export type EC2SecurityGroupVpcAssociation = ResourceDefinitionWithAttributes<"AWS::EC2::SecurityGroupVpcAssociation", EC2SecurityGroupVpcAssociationProps, EC2SecurityGroupVpcAssociationAttribs>;
+/**
+ * A security group association with a VPC.
+ */
+export type EC2SecurityGroupVpcAssociationProps = {
+    /**
+     * The association's security group ID.
+     */
+    GroupId: string;
+    /**
+     * The association's VPC ID.
+     */
+    VpcId: string;
+};
+export type EC2SecurityGroupVpcAssociationAttribs = {
+    /**
+     * The association's state.
+     */
+    State: SecurityGroupVpcAssociationState;
+    /**
+     * The association's state reason.
+     */
+    StateReason: string;
+    /**
+     * The AWS account ID of the owner of the VPC.
+     */
+    VpcOwnerId: string;
+};
+export type SecurityGroupVpcAssociationState = "associating" | "associated" | "association-failed" | "disassociating" | "disassociated" | "disassociation-failed";
+//# sourceMappingURL=aws-ec2-securitygroupvpcassociation.d.ts.map

package/out/exports/resources.generated/aws-ec2-snapshotblockpublicaccess.d.ts

@@ -0,0 +1,23 @@
+import type { ResourceDefinitionWithAttributes } from "../main.ts";
+export type EC2SnapshotBlockPublicAccess = ResourceDefinitionWithAttributes<"AWS::EC2::SnapshotBlockPublicAccess", EC2SnapshotBlockPublicAccessProps, EC2SnapshotBlockPublicAccessAttribs>;
+/**
+ * Specifies the state of the *block public access for snapshots* setting for the Region. For more information, see [Block public access for snapshots](https://docs.aws.amazon.com/ebs/latest/userguide/block-public-access-snapshots.html) .
+ */
+export type EC2SnapshotBlockPublicAccessProps = {
+    /**
+     * The mode in which to enable block public access for snapshots for the Region. Specify one of the following values:
+     *
+     * - `block-all-sharing` - Prevents all public sharing of snapshots in the Region. Users in the account will no longer be able to request new public sharing. Additionally, snapshots that are already publicly shared are treated as private and they are no longer publicly available.
+     *
+     * > If you enable block public access for snapshots in `block-all-sharing` mode, it does not change the permissions for snapshots that are already publicly shared. Instead, it prevents these snapshots from be publicly visible and publicly accessible. Therefore, the attributes for these snapshots still indicate that they are publicly shared, even though they are not publicly available.
+     * - `block-new-sharing` - Prevents only new public sharing of snapshots in the Region. Users in the account will no longer be able to request new public sharing. However, snapshots that are already publicly shared, remain publicly available.
+     */
+    State: "block-all-sharing" | "block-new-sharing";
+};
+export type EC2SnapshotBlockPublicAccessAttribs = {
+    /**
+     * `Ref` returns the ID of the AWS account.
+     */
+    AccountId: string;
+};
+//# sourceMappingURL=aws-ec2-snapshotblockpublicaccess.d.ts.map