@propulsionworks/cloudformation 0.0.2 → 0.1.0

package/out/exports/resources.generated/aws-s3-bucketpolicy.d.ts

@@ -0,0 +1,34 @@
+import type { ResourceDefinition, TemplatePolicyDocument } from "../main.ts";
+export type S3BucketPolicy = ResourceDefinition<"AWS::S3::BucketPolicy", S3BucketPolicyProps>;
+/**
+ * Applies an Amazon S3 bucket policy to an Amazon S3 bucket. If you are using an identity other than the root user of the AWS account that owns the bucket, the calling identity must have the `PutBucketPolicy` permissions on the specified bucket and belong to the bucket owner's account in order to use this operation.
+ *
+ * If you don't have `PutBucketPolicy` permissions, Amazon S3 returns a `403 Access Denied` error. If you have the correct permissions, but you're not using an identity that belongs to the bucket owner's account, Amazon S3 returns a `405 Method Not Allowed` error.
+ *
+ * > As a security precaution, the root user of the AWS account that owns a bucket can always use this operation, even if the policy explicitly denies the root user the ability to perform this action.
+ *
+ * When using the `AWS::S3::BucketPolicy` resource, you can create, update, and delete bucket policies for S3 buckets located in regions different from the stack's region. This cross-region bucket policy modification functionality is supported for backward compatibility with existing workflows.
+ *
+ * > If the [DeletionPolicy attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-deletionpolicy.html) is not specified or set to `Delete` , the bucket policy will be removed when the stack is deleted. If set to `Retain` , the bucket policy will be preserved even after the stack is deleted.
+ *
+ * For example, a CloudFormation stack in `us-east-1` can use the `AWS::S3::BucketPolicy` resource to manage the bucket policy for an S3 bucket in `us-west-2` . The retention or removal of the bucket policy during the stack deletion is determined by the `DeletionPolicy` attribute specified in the stack template.
+ *
+ * For more information, see [Bucket policy examples](https://docs.aws.amazon.com/AmazonS3/latest/userguide/example-bucket-policies.html) .
+ *
+ * The following operations are related to `PutBucketPolicy` :
+ *
+ * - [CreateBucket](https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateBucket.html)
+ * - [DeleteBucket](https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteBucket.html)
+ */
+export type S3BucketPolicyProps = {
+    /**
+     * The name of the Amazon S3 bucket to which the policy applies.
+     */
+    Bucket: string;
+    /**
+     * A policy document containing permissions to add to the specified bucket. In IAM, you must provide policy documents in JSON format. However, in CloudFormation you can provide the policy in JSON or YAML format because CloudFormation converts YAML to JSON before submitting it to IAM. For more information, see the AWS::IAM::Policy [PolicyDocument](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-policy.html#cfn-iam-policy-policydocument) resource description in this guide and [Access Policy Language Overview](https://docs.aws.amazon.com/AmazonS3/latest/dev/access-policy-language-overview.html) in the *Amazon S3 User Guide* .
+     * @policy
+     */
+    PolicyDocument: TemplatePolicyDocument;
+};
+//# sourceMappingURL=aws-s3-bucketpolicy.d.ts.map

package/out/exports/resources.generated/aws-s3-multiregionaccesspoint.d.ts

@@ -0,0 +1,85 @@
+import type { ResourceDefinitionWithAttributes } from "../main.ts";
+export type S3MultiRegionAccessPoint = ResourceDefinitionWithAttributes<"AWS::S3::MultiRegionAccessPoint", S3MultiRegionAccessPointProps, S3MultiRegionAccessPointAttribs>;
+/**
+ * The `AWS::S3::MultiRegionAccessPoint` resource creates an Amazon S3 Multi-Region Access Point. To learn more about Multi-Region Access Points, see [Multi-Region Access Points in Amazon S3](https://docs.aws.amazon.com/AmazonS3/latest/userguide/MultiRegionAccessPoints.html) in the in the *Amazon S3 User Guide* .
+ */
+export type S3MultiRegionAccessPointProps = {
+    /**
+     * The name of the Multi-Region Access Point.
+     * @minLength 3
+     * @maxLength 50
+     * @pattern ^[a-z0-9][-a-z0-9]{1,48}[a-z0-9]$
+     */
+    Name?: string | undefined;
+    /**
+     * The PublicAccessBlock configuration that you want to apply to this Multi-Region Access Point. You can enable the configuration options in any combination. For more information about when Amazon S3 considers an object public, see [The Meaning of "Public"](https://docs.aws.amazon.com/AmazonS3/latest/dev/access-control-block-public-access.html#access-control-block-public-access-policy-status) in the *Amazon S3 User Guide* .
+     */
+    PublicAccessBlockConfiguration?: PublicAccessBlockConfiguration | undefined;
+    /**
+     * A collection of the Regions and buckets associated with the Multi-Region Access Point.
+     */
+    Regions: Region[];
+};
+export type S3MultiRegionAccessPointAttribs = {
+    /**
+     * The alias for the Multi-Region Access Point. For more information about the distinction between the name and the alias of an Multi-Region Access Point, see [Managing Multi-Region Access Points](https://docs.aws.amazon.com/AmazonS3/latest/userguide/CreatingMultiRegionAccessPoints.html#multi-region-access-point-naming) in the *Amazon S3 User Guide* .
+     */
+    Alias: string;
+    /**
+     * The timestamp of when the Multi-Region Access Point is created.
+     */
+    CreatedAt: string;
+};
+/**
+ * The PublicAccessBlock configuration that you want to apply to this Amazon S3 Multi-Region Access Point. You can enable the configuration options in any combination. For more information about when Amazon S3 considers an object public, see [The Meaning of "Public"](https://docs.aws.amazon.com/AmazonS3/latest/dev/access-control-block-public-access.html#access-control-block-public-access-policy-status) in the *Amazon S3 User Guide* .
+ */
+export type PublicAccessBlockConfiguration = {
+    /**
+     * Specifies whether Amazon S3 should block public access control lists (ACLs) for this bucket and objects in this bucket. Setting this element to `TRUE` causes the following behavior:
+     *
+     * - PUT Bucket ACL and PUT Object ACL calls fail if the specified ACL is public.
+     * - PUT Object calls fail if the request includes a public ACL.
+     * - PUT Bucket calls fail if the request includes a public ACL.
+     *
+     * Enabling this setting doesn't affect existing policies or ACLs.
+     */
+    BlockPublicAcls?: boolean | undefined;
+    /**
+     * Specifies whether Amazon S3 should block public bucket policies for this bucket. Setting this element to `TRUE` causes Amazon S3 to reject calls to PUT Bucket policy if the specified bucket policy allows public access.
+     *
+     * Enabling this setting doesn't affect existing bucket policies.
+     */
+    BlockPublicPolicy?: boolean | undefined;
+    /**
+     * Specifies whether Amazon S3 should ignore public ACLs for this bucket and objects in this bucket. Setting this element to `TRUE` causes Amazon S3 to ignore all public ACLs on this bucket and objects in this bucket.
+     *
+     * Enabling this setting doesn't affect the persistence of any existing ACLs and doesn't prevent new public ACLs from being set.
+     */
+    IgnorePublicAcls?: boolean | undefined;
+    /**
+     * Specifies whether Amazon S3 should restrict public bucket policies for this bucket. Setting this element to `TRUE` restricts access to this bucket to only AWS service principals and authorized users within this account if the bucket has a public policy.
+     *
+     * Enabling this setting doesn't affect previously stored bucket policies, except that public and cross-account access within any public bucket policy, including non-public delegation to specific accounts, is blocked.
+     */
+    RestrictPublicBuckets?: boolean | undefined;
+};
+/**
+ * A bucket associated with a specific Region when creating Multi-Region Access Points.
+ */
+export type Region = {
+    /**
+     * The name of the associated bucket for the Region.
+     * @minLength 3
+     * @maxLength 63
+     * @pattern ^[a-z0-9][a-z0-9//.//-]*[a-z0-9]$
+     */
+    Bucket: string;
+    /**
+     * The AWS account ID that owns the Amazon S3 bucket that's associated with this Multi-Region Access Point.
+     * @minLength 12
+     * @maxLength 12
+     * @pattern ^[0-9]{12}$
+     */
+    BucketAccountId?: string | undefined;
+};
+//# sourceMappingURL=aws-s3-multiregionaccesspoint.d.ts.map

package/out/exports/resources.generated/aws-s3-multiregionaccesspointpolicy.d.ts

@@ -0,0 +1,28 @@
+import type { ResourceDefinitionWithAttributes, TemplatePolicyDocument } from "../main.ts";
+export type S3MultiRegionAccessPointPolicy = ResourceDefinitionWithAttributes<"AWS::S3::MultiRegionAccessPointPolicy", S3MultiRegionAccessPointPolicyProps, S3MultiRegionAccessPointPolicyAttribs>;
+/**
+ * Applies an Amazon S3 access policy to an Amazon S3 Multi-Region Access Point.
+ *
+ * It is not possible to delete an access policy for a Multi-Region Access Point from the CloudFormation template. When you attempt to delete the policy, CloudFormation updates the policy using `DeletionPolicy:Retain` and `UpdateReplacePolicy:Retain` . CloudFormation updates the policy to only allow access to the account that created the bucket.
+ */
+export type S3MultiRegionAccessPointPolicyProps = {
+    /**
+     * The name of the Multi-Region Access Point.
+     * @minLength 3
+     * @maxLength 50
+     * @pattern ^[a-z0-9][-a-z0-9]{1,48}[a-z0-9]$
+     */
+    MrapName: string;
+    /**
+     * The access policy associated with the Multi-Region Access Point.
+     * @policy
+     */
+    Policy: TemplatePolicyDocument;
+};
+export type S3MultiRegionAccessPointPolicyAttribs = {
+    /**
+     * Specifies whether the policy is public or not.
+     */
+    "PolicyStatus.IsPublic": "true" | "false";
+};
+//# sourceMappingURL=aws-s3-multiregionaccesspointpolicy.d.ts.map

package/out/exports/resources.generated/aws-s3-storagelens.d.ts

@@ -0,0 +1,309 @@
+import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
+export type S3StorageLens = ResourceDefinitionWithAttributes<"AWS::S3::StorageLens", S3StorageLensProps, S3StorageLensAttribs>;
+/**
+ * The AWS::S3::StorageLens resource creates an Amazon S3 Storage Lens configuration.
+ */
+export type S3StorageLensProps = {
+    /**
+     * This resource contains the details Amazon S3 Storage Lens configuration.
+     */
+    StorageLensConfiguration: StorageLensConfiguration;
+    /**
+     * A set of tags (key–value pairs) to associate with the Storage Lens configuration.
+     */
+    Tags?: Tag[] | undefined;
+};
+export type S3StorageLensAttribs = {
+    /**
+     * This property contains the details of the ARN of the S3 Storage Lens configuration. This property is read-only.
+     */
+    "StorageLensConfiguration.StorageLensArn": string;
+};
+/**
+ * This resource contains the details of the account-level metrics for Amazon S3 Storage Lens.
+ */
+export type AccountLevel = {
+    /**
+     * This property contains the details of account-level activity metrics for S3 Storage Lens.
+     */
+    ActivityMetrics?: ActivityMetrics | undefined;
+    /**
+     * This property contains the details of account-level advanced cost optimization metrics for S3 Storage Lens.
+     */
+    AdvancedCostOptimizationMetrics?: AdvancedCostOptimizationMetrics | undefined;
+    /**
+     * This property contains the details of account-level advanced data protection metrics for S3 Storage Lens.
+     */
+    AdvancedDataProtectionMetrics?: AdvancedDataProtectionMetrics | undefined;
+    /**
+     * This property contains the details of the account-level bucket-level configurations for Amazon S3 Storage Lens. To enable bucket-level configurations, make sure to also set the same metrics at the account level.
+     */
+    BucketLevel: BucketLevel;
+    /**
+     * This property contains the details of account-level detailed status code metrics for S3 Storage Lens.
+     */
+    DetailedStatusCodesMetrics?: DetailedStatusCodesMetrics | undefined;
+    /**
+     * This property determines the scope of Storage Lens group data that is displayed in the Storage Lens dashboard.
+     */
+    StorageLensGroupLevel?: StorageLensGroupLevel | undefined;
+};
+/**
+ * This resource enables Amazon S3 Storage Lens activity metrics. Activity metrics show details about how your storage is requested, such as requests (for example, All requests, Get requests, Put requests), bytes uploaded or downloaded, and errors.
+ *
+ * For more information, see [Assessing your storage activity and usage with S3 Storage Lens](https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage_lens.html) in the *Amazon S3 User Guide* . For a complete list of metrics, see [S3 Storage Lens metrics glossary](https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage_lens_metrics_glossary.html) in the *Amazon S3 User Guide* .
+ */
+export type ActivityMetrics = {
+    /**
+     * A property that indicates whether the activity metrics is enabled.
+     */
+    IsEnabled?: boolean | undefined;
+};
+/**
+ * This resource enables Amazon S3 Storage Lens advanced cost optimization metrics. Advanced cost optimization metrics provide insights that you can use to manage and optimize your storage costs, for example, lifecycle rule counts for transitions, expirations, and incomplete multipart uploads.
+ *
+ * For more information, see [Assessing your storage activity and usage with S3 Storage Lens](https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage_lens.html) in the *Amazon S3 User Guide* . For a complete list of metrics, see [S3 Storage Lens metrics glossary](https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage_lens_metrics_glossary.html) in the *Amazon S3 User Guide* .
+ */
+export type AdvancedCostOptimizationMetrics = {
+    /**
+     * Indicates whether advanced cost optimization metrics are enabled.
+     */
+    IsEnabled?: boolean | undefined;
+};
+/**
+ * This resource enables Amazon S3 Storage Lens advanced data protection metrics. Advanced data protection metrics provide insights that you can use to perform audits and protect your data, for example replication rule counts within and across Regions.
+ *
+ * For more information, see [Assessing your storage activity and usage with S3 Storage Lens](https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage_lens.html) in the *Amazon S3 User Guide* . For a complete list of metrics, see [S3 Storage Lens metrics glossary](https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage_lens_metrics_glossary.html) in the *Amazon S3 User Guide* .
+ */
+export type AdvancedDataProtectionMetrics = {
+    /**
+     * Indicates whether advanced data protection metrics are enabled.
+     */
+    IsEnabled?: boolean | undefined;
+};
+/**
+ * This resource contains the details of the AWS Organization for Amazon S3 Storage Lens.
+ */
+export type AwsOrg = {
+    /**
+     * This resource contains the ARN of the AWS Organization.
+     */
+    Arn: string;
+};
+/**
+ * A property for the bucket-level storage metrics for Amazon S3 Storage Lens.
+ */
+export type BucketLevel = {
+    /**
+     * A property for bucket-level activity metrics for S3 Storage Lens.
+     */
+    ActivityMetrics?: ActivityMetrics | undefined;
+    /**
+     * A property for bucket-level advanced cost optimization metrics for S3 Storage Lens.
+     */
+    AdvancedCostOptimizationMetrics?: AdvancedCostOptimizationMetrics | undefined;
+    /**
+     * A property for bucket-level advanced data protection metrics for S3 Storage Lens.
+     */
+    AdvancedDataProtectionMetrics?: AdvancedDataProtectionMetrics | undefined;
+    /**
+     * A property for bucket-level detailed status code metrics for S3 Storage Lens.
+     */
+    DetailedStatusCodesMetrics?: DetailedStatusCodesMetrics | undefined;
+    /**
+     * A property for bucket-level prefix-level storage metrics for S3 Storage Lens.
+     */
+    PrefixLevel?: PrefixLevel | undefined;
+};
+/**
+ * This resource contains the details of the buckets and Regions for the Amazon S3 Storage Lens configuration.
+ */
+export type BucketsAndRegions = {
+    /**
+     * This property contains the details of the buckets for the Amazon S3 Storage Lens configuration. This should be the bucket Amazon Resource Name(ARN). For valid values, see [Buckets ARN format here](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_Include.html#API_control_Include_Contents) in the *Amazon S3 API Reference* .
+     */
+    Buckets?: string[] | undefined;
+    /**
+     * This property contains the details of the Regions for the S3 Storage Lens configuration.
+     */
+    Regions?: string[] | undefined;
+};
+/**
+ * This resource enables the Amazon CloudWatch publishing option for Amazon S3 Storage Lens metrics.
+ *
+ * For more information, see [Monitor S3 Storage Lens metrics in CloudWatch](https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage_lens_view_metrics_cloudwatch.html) in the *Amazon S3 User Guide* .
+ */
+export type CloudWatchMetrics = {
+    /**
+     * This property identifies whether the CloudWatch publishing option for S3 Storage Lens is enabled.
+     */
+    IsEnabled: boolean;
+};
+/**
+ * This resource contains the details of the Amazon S3 Storage Lens metrics export.
+ */
+export type DataExport = {
+    /**
+     * This property enables the Amazon CloudWatch publishing option for S3 Storage Lens metrics.
+     */
+    CloudWatchMetrics?: CloudWatchMetrics | undefined;
+    /**
+     * This property contains the details of the bucket where the S3 Storage Lens metrics export will be placed.
+     */
+    S3BucketDestination?: S3BucketDestination | undefined;
+};
+/**
+ * This resource enables Amazon S3 Storage Lens detailed status code metrics. Detailed status code metrics generate metrics for HTTP status codes, such as `200 OK` , `403 Forbidden` , `503 Service Unavailable` and others.
+ *
+ * For more information, see [Assessing your storage activity and usage with S3 Storage Lens](https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage_lens.html) in the *Amazon S3 User Guide* . For a complete list of metrics, see [S3 Storage Lens metrics glossary](https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage_lens_metrics_glossary.html) in the *Amazon S3 User Guide* .
+ */
+export type DetailedStatusCodesMetrics = {
+    /**
+     * Indicates whether detailed status code metrics are enabled.
+     */
+    IsEnabled?: boolean | undefined;
+};
+/**
+ * This resource contains the type of server-side encryption used to encrypt an Amazon S3 Storage Lens metrics export. For valid values, see the [StorageLensDataExportEncryption](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_StorageLensDataExportEncryption.html) in the *Amazon S3 API Reference* .
+ */
+export type Encryption = {
+    /**
+     * S3 default server-side encryption.
+     */
+    SSES3: Record<string, unknown>;
+} | {
+    SSEKMS: SSEKMS;
+};
+/**
+ * This resource contains the details of the prefix-level of the Amazon S3 Storage Lens.
+ */
+export type PrefixLevel = {
+    /**
+     * A property for the prefix-level storage metrics for Amazon S3 Storage Lens.
+     */
+    StorageMetrics: PrefixLevelStorageMetrics;
+};
+/**
+ * This resource contains the details of the prefix-level storage metrics for Amazon S3 Storage Lens.
+ */
+export type PrefixLevelStorageMetrics = {
+    /**
+     * This property identifies whether the details of the prefix-level storage metrics for S3 Storage Lens are enabled.
+     */
+    IsEnabled?: boolean | undefined;
+    /**
+     * This property identifies whether the details of the prefix-level storage metrics for S3 Storage Lens are enabled.
+     */
+    SelectionCriteria?: SelectionCriteria | undefined;
+};
+/**
+ * This resource contains the details of the bucket where the Amazon S3 Storage Lens metrics export will be placed.
+ */
+export type S3BucketDestination = {
+    /**
+     * This property contains the details of the AWS account ID of the S3 Storage Lens export bucket destination.
+     */
+    AccountId: string;
+    /**
+     * This property contains the details of the ARN of the bucket destination of the S3 Storage Lens export.
+     */
+    Arn: string;
+    /**
+     * This property contains the details of the encryption of the bucket destination of the Amazon S3 Storage Lens metrics export.
+     */
+    Encryption?: Encryption | undefined;
+    /**
+     * This property contains the details of the format of the S3 Storage Lens export bucket destination.
+     */
+    Format: "CSV" | "Parquet";
+    /**
+     * This property contains the details of the output schema version of the S3 Storage Lens export bucket destination.
+     */
+    OutputSchemaVersion: "V_1";
+    /**
+     * This property contains the details of the prefix of the bucket destination of the S3 Storage Lens export .
+     */
+    Prefix?: string | undefined;
+};
+/**
+ * Specifies the use of server-side encryption using an AWS Key Management Service key (SSE-KMS) to encrypt the delivered S3 Storage Lens metrics export file.
+ */
+export type SSEKMS = {
+    /**
+     * Specifies the Amazon Resource Name (ARN) of the customer managed AWS KMS key to use for encrypting the S3 Storage Lens metrics export file. Amazon S3 only supports symmetric encryption keys. For more information, see [Special-purpose keys](https://docs.aws.amazon.com/kms/latest/developerguide/key-types.html) in the *AWS Key Management Service Developer Guide* .
+     */
+    KeyId: string;
+};
+/**
+ * This resource contains the details of the Amazon S3 Storage Lens selection criteria.
+ */
+export type SelectionCriteria = {
+    /**
+     * This property contains the details of the S3 Storage Lens delimiter being used.
+     */
+    Delimiter?: string | undefined;
+    /**
+     * This property contains the details of the max depth that S3 Storage Lens will collect metrics up to.
+     */
+    MaxDepth?: number | undefined;
+    /**
+     * This property contains the details of the minimum storage bytes percentage threshold that S3 Storage Lens will collect metrics up to.
+     */
+    MinStorageBytesPercentage?: number | undefined;
+};
+/**
+ * This is the property of the Amazon S3 Storage Lens configuration.
+ */
+export type StorageLensConfiguration = {
+    /**
+     * This property contains the details of the account-level metrics for Amazon S3 Storage Lens configuration.
+     */
+    AccountLevel: AccountLevel;
+    /**
+     * This property contains the details of the AWS Organization for the S3 Storage Lens configuration.
+     */
+    AwsOrg?: AwsOrg | undefined;
+    /**
+     * This property contains the details of this S3 Storage Lens configuration's metrics export.
+     */
+    DataExport?: DataExport | undefined;
+    /**
+     * This property contains the details of the bucket and or Regions excluded for Amazon S3 Storage Lens configuration.
+     */
+    Exclude?: BucketsAndRegions | undefined;
+    /**
+     * This property contains the details of the ID of the S3 Storage Lens configuration.
+     */
+    Id: string;
+    /**
+     * This property contains the details of the bucket and or Regions included for Amazon S3 Storage Lens configuration.
+     */
+    Include?: BucketsAndRegions | undefined;
+    /**
+     * This property contains the details of whether the Amazon S3 Storage Lens configuration is enabled.
+     */
+    IsEnabled: boolean;
+};
+/**
+ * This resource determines the scope of Storage Lens group data that is displayed in the Storage Lens dashboard.
+ */
+export type StorageLensGroupLevel = {
+    /**
+     * This property indicates which Storage Lens group ARNs to include or exclude in the Storage Lens group aggregation. If this value is left null, then all Storage Lens groups are selected.
+     */
+    StorageLensGroupSelectionCriteria?: StorageLensGroupSelectionCriteria | undefined;
+};
+/**
+ * This resource indicates which Storage Lens group ARNs to include or exclude in the Storage Lens group aggregation. You can only attach Storage Lens groups to your dashboard if they're included in your Storage Lens group aggregation. If this value is left null, then all Storage Lens groups are selected.
+ */
+export type StorageLensGroupSelectionCriteria = {
+    /**
+     * This property indicates which Storage Lens group ARNs to exclude from the Storage Lens group aggregation.
+     */
+    Exclude?: string[] | undefined;
+    /**
+     * This property indicates which Storage Lens group ARNs to include in the Storage Lens group aggregation.
+     */
+    Include?: string[] | undefined;
+};
+//# sourceMappingURL=aws-s3-storagelens.d.ts.map

package/out/exports/resources.generated/aws-s3-storagelensgroup.d.ts

@@ -0,0 +1,141 @@
+import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
+export type S3StorageLensGroup = ResourceDefinitionWithAttributes<"AWS::S3::StorageLensGroup", S3StorageLensGroupProps, S3StorageLensGroupAttribs>;
+/**
+ * The `AWS::S3::StorageLensGroup` resource creates an S3 Storage Lens group. A Storage Lens group is a custom grouping of objects that include filters for prefixes, suffixes, object tags, object size, or object age. You can create an S3 Storage Lens group that includes a single filter or multiple filter conditions. To specify multiple filter conditions, you use `AND` or `OR` logical operators. For more information about S3 Storage Lens groups, see [Working with S3 Storage Lens groups](https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage-lens-groups-overview.html) .
+ */
+export type S3StorageLensGroupProps = {
+    /**
+     * This property contains the criteria for the Storage Lens group data that is displayed
+     */
+    Filter: Filter;
+    /**
+     * This property contains the Storage Lens group name.
+     */
+    Name: string;
+    /**
+     * This property contains the AWS resource tags that you're adding to your Storage Lens group. This parameter is optional.
+     */
+    Tags?: Tag[] | undefined;
+};
+export type S3StorageLensGroupAttribs = {
+    /**
+     * The ARN for the Amazon S3 Storage Lens Group.
+     */
+    StorageLensGroupArn: string;
+};
+/**
+ * This resource is a logical operator that allows multiple filter conditions to be joined for more complex comparisons of Storage Lens group data. Objects must match all of the listed filter conditions that are joined by the `And` logical operator. Only one of each filter condition is allowed.
+ */
+export type And = {
+    /**
+     * This property contains a list of prefixes. At least one prefix must be specified. Up to 10 prefixes are allowed.
+     */
+    MatchAnyPrefix?: string[] | undefined;
+    /**
+     * This property contains a list of suffixes. At least one suffix must be specified. Up to 10 suffixes are allowed.
+     */
+    MatchAnySuffix?: string[] | undefined;
+    /**
+     * This property contains the list of object tags. At least one object tag must be specified. Up to 10 object tags are allowed.
+     */
+    MatchAnyTag?: Tag[] | undefined;
+    /**
+     * This property contains `DaysGreaterThan` and `DaysLessThan` properties to define the object age range (minimum and maximum number of days).
+     */
+    MatchObjectAge?: MatchObjectAge | undefined;
+    /**
+     * This property contains `BytesGreaterThan` and `BytesLessThan` to define the object size range (minimum and maximum number of Bytes).
+     */
+    MatchObjectSize?: MatchObjectSize | undefined;
+};
+/**
+ * This resource sets the criteria for the Storage Lens group data that is displayed. For multiple filter conditions, the `AND` or `OR` logical operator is used.
+ */
+export type Filter = {
+    /**
+     * This property contains the `And` logical operator, which allows multiple filter conditions to be joined for more complex comparisons of Storage Lens group data. Objects must match all of the listed filter conditions that are joined by the `And` logical operator. Only one of each filter condition is allowed.
+     */
+    And?: And | undefined;
+    /**
+     * This property contains a list of prefixes. At least one prefix must be specified. Up to 10 prefixes are allowed.
+     */
+    MatchAnyPrefix?: string[] | undefined;
+    /**
+     * This property contains a list of suffixes. At least one suffix must be specified. Up to 10 suffixes are allowed.
+     */
+    MatchAnySuffix?: string[] | undefined;
+    /**
+     * This property contains the list of S3 object tags. At least one object tag must be specified. Up to 10 object tags are allowed.
+     */
+    MatchAnyTag?: Tag[] | undefined;
+    /**
+     * This property contains `DaysGreaterThan` and `DaysLessThan` to define the object age range (minimum and maximum number of days).
+     */
+    MatchObjectAge?: MatchObjectAge | undefined;
+    /**
+     * This property contains `BytesGreaterThan` and `BytesLessThan` to define the object size range (minimum and maximum number of Bytes).
+     */
+    MatchObjectSize?: MatchObjectSize | undefined;
+    /**
+     * This property contains the `Or` logical operator, which allows multiple filter conditions to be joined. Objects can match any of the listed filter conditions, which are joined by the `Or` logical operator. Only one of each filter condition is allowed.
+     */
+    Or?: Or | undefined;
+};
+/**
+ * This resource contains `DaysGreaterThan` and `DaysLessThan` to define the object age range (minimum and maximum number of days).
+ */
+export type MatchObjectAge = {
+    /**
+     * This property indicates the minimum object age in days.
+     * @min 1
+     */
+    DaysGreaterThan?: number | undefined;
+    /**
+     * This property indicates the maximum object age in days.
+     * @min 1
+     */
+    DaysLessThan?: number | undefined;
+};
+/**
+ * This resource filters objects that match the specified object size range.
+ */
+export type MatchObjectSize = {
+    /**
+     * This property specifies the minimum object size in bytes. The value must be a positive number, greater than 0 and less than 5 TB.
+     * @min 1
+     * @format int64
+     */
+    BytesGreaterThan?: number | undefined;
+    /**
+     * This property specifies the maximum object size in bytes. The value must be a positive number, greater than the minimum object size and less than 5 TB.
+     * @min 1
+     * @format int64
+     */
+    BytesLessThan?: number | undefined;
+};
+/**
+ * This resource contains the `Or` logical operator, which allows multiple filter conditions to be joined for more complex comparisons of Storage Lens group data. Objects can match any of the listed filter conditions that are joined by the `Or` logical operator. Only one of each filter condition is allowed.
+ */
+export type Or = {
+    /**
+     * This property contains a list of prefixes. At least one prefix must be specified. Up to 10 prefixes are allowed.
+     */
+    MatchAnyPrefix?: string[] | undefined;
+    /**
+     * This property contains the list of suffixes. At least one suffix must be specified. Up to 10 suffixes are allowed.
+     */
+    MatchAnySuffix?: string[] | undefined;
+    /**
+     * This property contains the list of S3 object tags. At least one object tag must be specified. Up to 10 object tags are allowed.
+     */
+    MatchAnyTag?: Tag[] | undefined;
+    /**
+     * This property filters objects that match the specified object age range.
+     */
+    MatchObjectAge?: MatchObjectAge | undefined;
+    /**
+     * This property contains the `BytesGreaterThan` and `BytesLessThan` values to define the object size range (minimum and maximum number of Bytes).
+     */
+    MatchObjectSize?: MatchObjectSize | undefined;
+};
+//# sourceMappingURL=aws-s3-storagelensgroup.d.ts.map

package/out/exports/resources.generated/aws-s3express-bucketpolicy.d.ts

@@ -0,0 +1,52 @@
+import type { ResourceDefinition, TemplatePolicyDocument } from "../main.ts";
+export type S3ExpressBucketPolicy = ResourceDefinition<"AWS::S3Express::BucketPolicy", S3ExpressBucketPolicyProps>;
+/**
+ * The `AWS::S3Express::BucketPolicy` resource defines an Amazon S3 bucket policy to an Amazon S3 directory bucket.
+ *
+ * - **Permissions** - If you are using an identity other than the root user of the AWS account that owns the bucket, the calling identity must both have the required permissions on the specified bucket and belong to the bucket owner's account in order to use this operation. For more information about directory bucket policies and permissions, see [AWS Identity and Access Management (IAM) for S3 Express One Zone](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-security-iam.html) in the *Amazon S3 User Guide* .
+ *
+ * > To ensure that bucket owners don't inadvertently lock themselves out of their own buckets, the root principal in a bucket owner's AWS account can perform the `GetBucketPolicy` , `PutBucketPolicy` , and `DeleteBucketPolicy` API actions, even if their bucket policy explicitly denies the root principal's access. Bucket owner root principals can only be blocked from performing these API actions by VPC endpoint policies and AWS Organizations policies.
+ *
+ * The required permissions for CloudFormation to use are based on the operations that are performed on the stack.
+ *
+ * - Create
+ *
+ * - s3express:GetBucketPolicy
+ * - s3express:PutBucketPolicy
+ * - Read
+ *
+ * - s3express:GetBucketPolicy
+ * - Update
+ *
+ * - s3express:GetBucketPolicy
+ * - s3express:PutBucketPolicy
+ * - Delete
+ *
+ * - s3express:GetBucketPolicy
+ * - s3express:DeleteBucketPolicy
+ * - List
+ *
+ * - s3express:GetBucketPolicy
+ * - s3express:ListAllMyDirectoryBuckets
+ *
+ * For more information about example bucket policies, see [Example bucket policies for S3 Express One Zone](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-security-iam-example-bucket-policies.html) in the *Amazon S3 User Guide* .
+ *
+ * The following operations are related to `AWS::S3Express::BucketPolicy` :
+ *
+ * - [PutBucketPolicy](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketPolicy.html)
+ * - [GetBucketPolicy](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketPolicy.html)
+ * - [DeleteBucketPolicy](https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteBucketPolicy.html)
+ * - [ListDirectoryBuckets](https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListDirectoryBuckets.html)
+ */
+export type S3ExpressBucketPolicyProps = {
+    /**
+     * The name of the S3 directory bucket to which the policy applies.
+     */
+    Bucket: string;
+    /**
+     * A policy document containing permissions to add to the specified bucket. In IAM, you must provide policy documents in JSON format. However, in CloudFormation you can provide the policy in JSON or YAML format because CloudFormation converts YAML to JSON before submitting it to IAM. For more information, see the AWS::IAM::Policy [PolicyDocument](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-policy.html#cfn-iam-policy-policydocument) resource description in this guide and [Policies and Permissions in Amazon S3](https://docs.aws.amazon.com/AmazonS3/latest/dev/access-policy-language-overview.html) in the *Amazon S3 User Guide* .
+     * @policy
+     */
+    PolicyDocument: TemplatePolicyDocument;
+};
+//# sourceMappingURL=aws-s3express-bucketpolicy.d.ts.map