@propulsionworks/cloudformation 0.0.2 → 0.1.0

package/out/exports/resources.generated/aws-backup-backupselection.d.ts

@@ -0,0 +1,112 @@
+import type { ResourceDefinitionWithAttributes } from "../main.ts";
+export type BackupBackupSelection = ResourceDefinitionWithAttributes<"AWS::Backup::BackupSelection", BackupBackupSelectionProps, BackupBackupSelectionAttribs>;
+/**
+ * Specifies a set of resources to assign to a backup plan.
+ *
+ * For a sample AWS CloudFormation template, see the [AWS Backup Developer Guide](https://docs.aws.amazon.com/aws-backup/latest/devguide/assigning-resources.html#assigning-resources-cfn) .
+ */
+export type BackupBackupSelectionProps = {
+    /**
+     * Uniquely identifies a backup plan.
+     */
+    BackupPlanId: string;
+    /**
+     * Specifies the body of a request to assign a set of resources to a backup plan.
+     *
+     * It includes an array of resources, an optional array of patterns to exclude resources, an optional role to provide access to the AWS service the resource belongs to, and an optional array of tags used to identify a set of resources.
+     */
+    BackupSelection: BackupSelectionResourceType;
+};
+export type BackupBackupSelectionAttribs = {
+    /**
+     * Uniquely identifies a backup plan.
+     */
+    BackupPlanId: string;
+    /**
+     * Uniquely identifies the backup selection.
+     */
+    Id: string;
+    /**
+     * Uniquely identifies a request to assign a set of resources to a backup plan.
+     */
+    SelectionId: string;
+};
+/**
+ * Specifies an object containing properties used to assign a set of resources to a backup plan.
+ */
+export type BackupSelectionResourceType = {
+    /**
+     * A list of conditions that you define to assign resources to your backup plans using tags. For example, `"StringEquals": { "ConditionKey": "aws:ResourceTag/CreatedByCryo", "ConditionValue": "true" },` . Condition operators are case sensitive.
+     *
+     * `Conditions` differs from `ListOfTags` as follows:
+     *
+     * - When you specify more than one condition, you only assign the resources that match ALL conditions (using AND logic).
+     * - `Conditions` supports `StringEquals` , `StringLike` , `StringNotEquals` , and `StringNotLike` . `ListOfTags` only supports `StringEquals` .
+     */
+    Conditions?: {
+        StringEquals?: ConditionParameter[] | undefined;
+        StringLike?: ConditionParameter[] | undefined;
+        StringNotEquals?: ConditionParameter[] | undefined;
+        StringNotLike?: ConditionParameter[] | undefined;
+    } | undefined;
+    /**
+     * The ARN of the IAM role that AWS Backup uses to authenticate when backing up the target resource; for example, `arn:aws:iam::123456789012:role/S3Access` .
+     */
+    IamRoleArn: string;
+    /**
+     * A list of conditions that you define to assign resources to your backup plans using tags. For example, `"StringEquals": { "ConditionKey": "aws:ResourceTag/CreatedByCryo", "ConditionValue": "true" },` . Condition operators are case sensitive.
+     *
+     * `ListOfTags` differs from `Conditions` as follows:
+     *
+     * - When you specify more than one condition, you assign all resources that match AT LEAST ONE condition (using OR logic).
+     * - `ListOfTags` only supports `StringEquals` . `Conditions` supports `StringEquals` , `StringLike` , `StringNotEquals` , and `StringNotLike` .
+     */
+    ListOfTags?: ConditionResourceType[] | undefined;
+    /**
+     * A list of Amazon Resource Names (ARNs) to exclude from a backup plan. The maximum number of ARNs is 500 without wildcards, or 30 ARNs with wildcards.
+     *
+     * If you need to exclude many resources from a backup plan, consider a different resource selection strategy, such as assigning only one or a few resource types or refining your resource selection using tags.
+     */
+    NotResources?: string[] | undefined;
+    /**
+     * An array of strings that contain Amazon Resource Names (ARNs) of resources to assign to a backup plan.
+     */
+    Resources?: string[] | undefined;
+    /**
+     * The display name of a resource selection document.
+     */
+    SelectionName: string;
+};
+/**
+ * Includes information about tags you define to assign tagged resources to a backup plan.
+ *
+ * Include the prefix `aws:ResourceTag` in your tags. For example, `"aws:ResourceTag/TagKey1": "Value1"` .
+ */
+export type ConditionParameter = {
+    /**
+     * The key in a key-value pair. For example, in the tag `Department: Accounting` , `Department` is the key.
+     */
+    ConditionKey?: string | undefined;
+    /**
+     * The value in a key-value pair. For example, in the tag `Department: Accounting` , `Accounting` is the value.
+     */
+    ConditionValue?: string | undefined;
+};
+/**
+ * Specifies an object that contains an array of triplets made up of a condition type (such as `STRINGEQUALS` ), a key, and a value. Conditions are used to filter resources in a selection that is assigned to a backup plan.
+ */
+export type ConditionResourceType = {
+    /**
+     * The key in a key-value pair. For example, in `"Department": "accounting"` , `"Department"` is the key.
+     */
+    ConditionKey: string;
+    /**
+     * An operation, such as `STRINGEQUALS` , that is applied to a key-value pair used to filter resources in a selection.
+     */
+    ConditionType: string;
+    /**
+     * The value in a key-value pair. For example, in `"Department": "accounting"` , `"accounting"` is the value.
+     */
+    ConditionValue: string;
+};
+//# sourceMappingURL=aws-backup-backupselection.d.ts.map

package/out/exports/resources.generated/aws-backup-backupvault.d.ts

@@ -0,0 +1,93 @@
+import type { ResourceDefinitionWithAttributes, TemplatePolicyDocument } from "../main.ts";
+export type BackupBackupVault = ResourceDefinitionWithAttributes<"AWS::Backup::BackupVault", BackupBackupVaultProps, BackupBackupVaultAttribs>;
+/**
+ * Creates a logical container where backups are stored. A `CreateBackupVault` request includes a name, optionally one or more resource tags, an encryption key, and a request ID.
+ *
+ * Do not include sensitive data, such as passport numbers, in the name of a backup vault.
+ *
+ * For a sample AWS CloudFormation template, see the [AWS Backup Developer Guide](https://docs.aws.amazon.com/aws-backup/latest/devguide/assigning-resources.html#assigning-resources-cfn) .
+ */
+export type BackupBackupVaultProps = {
+    /**
+     * A resource-based policy that is used to manage access permissions on the target backup vault.
+     * @policy
+     */
+    AccessPolicy?: TemplatePolicyDocument | undefined;
+    /**
+     * The name of a logical container where backups are stored. Backup vaults are identified by names that are unique to the account used to create them and the AWS Region where they are created.
+     */
+    BackupVaultName: string;
+    /**
+     * The tags to assign to the backup vault.
+     */
+    BackupVaultTags?: Record<string, string> | undefined;
+    /**
+     * A server-side encryption key you can specify to encrypt your backups from services that support full AWS Backup management; for example, `arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab` . If you specify a key, you must specify its ARN, not its alias. If you do not specify a key, AWS Backup creates a KMS key for you by default.
+     *
+     * To learn which AWS Backup services support full AWS Backup management and how AWS Backup handles encryption for backups from services that do not yet support full AWS Backup , see [Encryption for backups in AWS Backup](https://docs.aws.amazon.com/aws-backup/latest/devguide/encryption.html)
+     */
+    EncryptionKeyArn?: string | undefined;
+    /**
+     * Configuration for [AWS Backup Vault Lock](https://docs.aws.amazon.com/aws-backup/latest/devguide/vault-lock.html) .
+     */
+    LockConfiguration?: LockConfigurationType | undefined;
+    /**
+     * The SNS event notifications for the specified backup vault.
+     */
+    Notifications?: NotificationObjectType | undefined;
+};
+export type BackupBackupVaultAttribs = {
+    /**
+     * An Amazon Resource Name (ARN) that uniquely identifies a backup vault; for example, `arn:aws:backup:us-east-1:123456789012:backup-vault:aBackupVault` .
+     */
+    BackupVaultArn: string;
+    /**
+     * The name of a logical container where backups are stored. Backup vaults are identified by names that are unique to the account used to create them and the Region where they are created. They consist of lowercase and uppercase letters, numbers, and hyphens.
+     */
+    BackupVaultName: string;
+};
+/**
+ * The `LockConfigurationType` property type specifies configuration for [AWS Backup Vault Lock](https://docs.aws.amazon.com/aws-backup/latest/devguide/vault-lock.html) .
+ */
+export type LockConfigurationType = {
+    /**
+     * The AWS Backup Vault Lock configuration that specifies the number of days before the lock date. For example, setting `ChangeableForDays` to 30 on Jan. 1, 2022 at 8pm UTC will set the lock date to Jan. 31, 2022 at 8pm UTC.
+     *
+     * AWS Backup enforces a 72-hour cooling-off period before Vault Lock takes effect and becomes immutable. Therefore, you must set `ChangeableForDays` to 3 or greater.
+     *
+     * Before the lock date, you can delete Vault Lock from the vault using `DeleteBackupVaultLockConfiguration` or change the Vault Lock configuration using `PutBackupVaultLockConfiguration` . On and after the lock date, the Vault Lock becomes immutable and cannot be changed or deleted.
+     *
+     * If this parameter is not specified, you can delete Vault Lock from the vault using `DeleteBackupVaultLockConfiguration` or change the Vault Lock configuration using `PutBackupVaultLockConfiguration` at any time.
+     */
+    ChangeableForDays?: number | undefined;
+    /**
+     * The AWS Backup Vault Lock configuration that specifies the maximum retention period that the vault retains its recovery points. This setting can be useful if, for example, your organization's policies require you to destroy certain data after retaining it for four years (1460 days).
+     *
+     * If this parameter is not included, Vault Lock does not enforce a maximum retention period on the recovery points in the vault. If this parameter is included without a value, Vault Lock will not enforce a maximum retention period.
+     *
+     * If this parameter is specified, any backup or copy job to the vault must have a lifecycle policy with a retention period equal to or shorter than the maximum retention period. If the job's retention period is longer than that maximum retention period, then the vault fails the backup or copy job, and you should either modify your lifecycle settings or use a different vault. Recovery points already saved in the vault prior to Vault Lock are not affected.
+     */
+    MaxRetentionDays?: number | undefined;
+    /**
+     * The AWS Backup Vault Lock configuration that specifies the minimum retention period that the vault retains its recovery points. This setting can be useful if, for example, your organization's policies require you to retain certain data for at least seven years (2555 days).
+     *
+     * If this parameter is not specified, Vault Lock will not enforce a minimum retention period.
+     *
+     * If this parameter is specified, any backup or copy job to the vault must have a lifecycle policy with a retention period equal to or longer than the minimum retention period. If the job's retention period is shorter than that minimum retention period, then the vault fails that backup or copy job, and you should either modify your lifecycle settings or use a different vault. Recovery points already saved in the vault prior to Vault Lock are not affected.
+     */
+    MinRetentionDays: number;
+};
+/**
+ * Specifies an object containing SNS event notification properties for the target backup vault.
+ */
+export type NotificationObjectType = {
+    /**
+     * An array of events that indicate the status of jobs to back up resources to the backup vault. For valid events, see [BackupVaultEvents](https://docs.aws.amazon.com/aws-backup/latest/devguide/API_PutBackupVaultNotifications.html#API_PutBackupVaultNotifications_RequestSyntax) in the *AWS Backup API Guide* .
+     */
+    BackupVaultEvents: string[];
+    /**
+     * An ARN that uniquely identifies an Amazon Simple Notification Service (Amazon SNS) topic; for example, `arn:aws:sns:us-west-2:111122223333:MyTopic` .
+     */
+    SNSTopicArn: string;
+};
+//# sourceMappingURL=aws-backup-backupvault.d.ts.map

package/out/exports/resources.generated/aws-backup-framework.d.ts

@@ -0,0 +1,94 @@
+import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
+export type BackupFramework = ResourceDefinitionWithAttributes<"AWS::Backup::Framework", BackupFrameworkProps, BackupFrameworkAttribs>;
+/**
+ * Creates a framework with one or more controls. A framework is a collection of controls that you can use to evaluate your backup practices. By using pre-built customizable controls to define your policies, you can evaluate whether your backup practices comply with your policies and which resources are not yet in compliance.
+ *
+ * For a sample AWS CloudFormation template, see the [AWS Backup Developer Guide](https://docs.aws.amazon.com/aws-backup/latest/devguide/bam-cfn-integration.html#bam-cfn-frameworks-template) .
+ */
+export type BackupFrameworkProps = {
+    /**
+     * Contains detailed information about all of the controls of a framework. Each framework must contain at least one control.
+     */
+    FrameworkControls: FrameworkControl[];
+    /**
+     * An optional description of the framework with a maximum 1,024 characters.
+     * @minLength 0
+     * @maxLength 1024
+     */
+    FrameworkDescription?: string | undefined;
+    /**
+     * The unique name of a framework. This name is between 1 and 256 characters, starting with a letter, and consisting of letters (a-z, A-Z), numbers (0-9), and underscores (_).
+     * @minLength 1
+     * @maxLength 256
+     * @pattern [a-zA-Z][_a-zA-Z0-9]*
+     */
+    FrameworkName?: string | undefined;
+    /**
+     * The tags to assign to your framework.
+     */
+    FrameworkTags?: Tag[] | undefined;
+};
+export type BackupFrameworkAttribs = {
+    /**
+     * The UTC time when you created your framework.
+     */
+    CreationTime: string;
+    /**
+     * Depolyment status refers to whether your framework has completed deployment. This status is usually `Completed` , but might also be `Create in progress` or another status. For a list of statuses, see [Framework compliance status](https://docs.aws.amazon.com/aws-backup/latest/devguide/viewing-frameworks.html) in the *Developer Guide* .
+     */
+    DeploymentStatus: string;
+    /**
+     * The Amazon Resource Name (ARN) of your framework.
+     */
+    FrameworkArn: string;
+    /**
+     * Framework status refers to whether you have turned on resource tracking for all of your resources. This status is `Active` when you turn on all resources the framework evaluates. For other statuses and steps to correct them, see [Framework compliance status](https://docs.aws.amazon.com/aws-backup/latest/devguide/viewing-frameworks.html) in the *Developer Guide* .
+     */
+    FrameworkStatus: string;
+};
+/**
+ * The parameters for a control. A control can have zero, one, or more than one parameter. An example of a control with two parameters is: "backup plan frequency is at least `daily` and the retention period is at least `1 year` ". The first parameter is `daily` . The second parameter is `1 year` .
+ */
+export type ControlInputParameter = {
+    /**
+     * The name of a parameter, for example, `BackupPlanFrequency` .
+     */
+    ParameterName: string;
+    /**
+     * The value of parameter, for example, `hourly` .
+     */
+    ParameterValue: string;
+};
+/**
+ * Contains detailed information about all of the controls of a framework. Each framework must contain at least one control.
+ */
+export type FrameworkControl = {
+    /**
+     * The name/value pairs.
+     */
+    ControlInputParameters?: ControlInputParameter[] | undefined;
+    /**
+     * The name of a control. This name is between 1 and 256 characters.
+     */
+    ControlName: string;
+    /**
+     * The scope of a control. The control scope defines what the control will evaluate. Three examples of control scopes are: a specific backup plan, all backup plans with a specific tag, or all backup plans.
+     *
+     * For more information, see [`ControlScope` .](https://docs.aws.amazon.com/aws-backup/latest/devguide/API_ControlScope.html)
+     */
+    ControlScope?: {
+        /**
+         * The ID of the only AWS resource that you want your control scope to contain.
+         */
+        ComplianceResourceIds?: string[] | undefined;
+        /**
+         * Describes whether the control scope includes one or more types of resources, such as `EFS` or `RDS`.
+         */
+        ComplianceResourceTypes?: string[] | undefined;
+        /**
+         * Describes whether the control scope includes resources with one or more tags. Each tag is a key-value pair.
+         */
+        Tags?: Tag[] | undefined;
+    } | undefined;
+};
+//# sourceMappingURL=aws-backup-framework.d.ts.map

package/out/exports/resources.generated/aws-backup-logicallyairgappedbackupvault.d.ts

@@ -0,0 +1,67 @@
+import type { ResourceDefinitionWithAttributes, TemplatePolicyDocument } from "../main.ts";
+export type BackupLogicallyAirGappedBackupVault = ResourceDefinitionWithAttributes<"AWS::Backup::LogicallyAirGappedBackupVault", BackupLogicallyAirGappedBackupVaultProps, BackupLogicallyAirGappedBackupVaultAttribs>;
+/**
+ * Creates a logical container to where backups may be copied.
+ *
+ * This request includes a name, the Region, the maximum number of retention days, the minimum number of retention days, and optionally can include tags and a creator request ID.
+ *
+ * > Do not include sensitive data, such as passport numbers, in the name of a backup vault.
+ */
+export type BackupLogicallyAirGappedBackupVaultProps = {
+    /**
+     * The backup vault access policy document in JSON format.
+     * @policy
+     */
+    AccessPolicy?: TemplatePolicyDocument | undefined;
+    /**
+     * The name of a logical container where backups are stored. Logically air-gapped backup vaults are identified by names that are unique to the account used to create them and the Region where they are created.
+     */
+    BackupVaultName: string;
+    /**
+     * The tags to assign to the vault.
+     */
+    BackupVaultTags?: Record<string, string> | undefined;
+    /**
+     * The maximum retention period that the vault retains its recovery points.
+     */
+    MaxRetentionDays: number;
+    /**
+     * This setting specifies the minimum retention period that the vault retains its recovery points.
+     *
+     * The minimum value accepted is 7 days.
+     */
+    MinRetentionDays: number;
+    /**
+     * Returns event notifications for the specified backup vault.
+     */
+    Notifications?: NotificationObjectType | undefined;
+};
+export type BackupLogicallyAirGappedBackupVaultAttribs = {
+    /**
+     * The ARN of the backup vault.
+     */
+    BackupVaultArn: string;
+    /**
+     * The ARN of the server-side encryption key.
+     */
+    EncryptionKeyArn: string;
+    /**
+     * The vault state. The possible values are `CREATING` , `AVAILABLE` , and `FAILED` .
+     */
+    VaultState: string;
+    /**
+     * The vault type. The possible values are `BACKUP_VAULT` and `LOGICALLY_AIR_GAPPED_BACKUP_VAULT` .
+     */
+    VaultType: string;
+};
+export type NotificationObjectType = {
+    /**
+     * An array of events that indicate the status of jobs to back up resources to the backup vault.
+     */
+    BackupVaultEvents: string[];
+    /**
+     * The Amazon Resource Name (ARN) that specifies the topic for a backup vault’s events; for example, `arn:aws:sns:us-west-2:111122223333:MyVaultTopic` .
+     */
+    SNSTopicArn: string;
+};
+//# sourceMappingURL=aws-backup-logicallyairgappedbackupvault.d.ts.map

package/out/exports/resources.generated/aws-backup-reportplan.d.ts

@@ -0,0 +1,82 @@
+import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
+export type BackupReportPlan = ResourceDefinitionWithAttributes<"AWS::Backup::ReportPlan", BackupReportPlanProps, BackupReportPlanAttribs>;
+/**
+ * Creates a report plan. A report plan is a document that contains information about the contents of the report and where AWS Backup will deliver it.
+ *
+ * If you call `CreateReportPlan` with a plan that already exists, you receive an `AlreadyExistsException` exception.
+ *
+ * For a sample AWS CloudFormation template, see the [AWS Backup Developer Guide](https://docs.aws.amazon.com/aws-backup/latest/devguide/assigning-resources.html#assigning-resources-cfn) .
+ */
+export type BackupReportPlanProps = {
+    /**
+     * Contains information about where and how to deliver your reports, specifically your Amazon S3 bucket name, S3 key prefix, and the formats of your reports.
+     */
+    ReportDeliveryChannel: {
+        /**
+         * A list of the format of your reports: CSV, JSON, or both. If not specified, the default format is CSV.
+         */
+        Formats?: string[] | undefined;
+        /**
+         * The unique name of the S3 bucket that receives your reports.
+         */
+        S3BucketName: string;
+        /**
+         * The prefix for where AWS Backup Audit Manager delivers your reports to Amazon S3. The prefix is this part of the following path: s3://your-bucket-name/prefix/Backup/us-west-2/year/month/day/report-name. If not specified, there is no prefix.
+         */
+        S3KeyPrefix?: string | undefined;
+    };
+    /**
+     * An optional description of the report plan with a maximum 1,024 characters.
+     * @minLength 0
+     * @maxLength 1024
+     * @pattern .*\S.*
+     */
+    ReportPlanDescription?: string | undefined;
+    /**
+     * The unique name of the report plan. This name is between 1 and 256 characters starting with a letter, and consisting of letters (a-z, A-Z), numbers (0-9), and underscores (_).
+     * @minLength 1
+     * @maxLength 256
+     * @pattern [a-zA-Z][_a-zA-Z0-9]*
+     */
+    ReportPlanName?: string | undefined;
+    /**
+     * The tags to assign to your report plan.
+     */
+    ReportPlanTags?: Tag[] | undefined;
+    /**
+     * Identifies the report template for the report. Reports are built using a report template. The report templates are:
+     *
+     * `RESOURCE_COMPLIANCE_REPORT | CONTROL_COMPLIANCE_REPORT | BACKUP_JOB_REPORT | COPY_JOB_REPORT | RESTORE_JOB_REPORT`
+     *
+     * If the report template is `RESOURCE_COMPLIANCE_REPORT` or `CONTROL_COMPLIANCE_REPORT` , this API resource also describes the report coverage by AWS Regions and frameworks.
+     */
+    ReportSetting: {
+        /**
+         * The list of AWS accounts that a report covers.
+         */
+        Accounts?: string[] | undefined;
+        /**
+         * The Amazon Resource Names (ARNs) of the frameworks a report covers.
+         */
+        FrameworkArns?: string[] | undefined;
+        /**
+         * The list of AWS organization units that a report covers.
+         */
+        OrganizationUnits?: string[] | undefined;
+        /**
+         * The list of AWS regions that a report covers.
+         */
+        Regions?: string[] | undefined;
+        /**
+         * Identifies the report template for the report. Reports are built using a report template. The report templates are: `BACKUP_JOB_REPORT | COPY_JOB_REPORT | RESTORE_JOB_REPORT`
+         */
+        ReportTemplate: string;
+    };
+};
+export type BackupReportPlanAttribs = {
+    /**
+     * The Amazon Resource Name (ARN) of your report plan.
+     */
+    ReportPlanArn: string;
+};
+//# sourceMappingURL=aws-backup-reportplan.d.ts.map

package/out/exports/resources.generated/aws-backup-restoretestingplan.d.ts

@@ -0,0 +1,81 @@
+import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
+export type BackupRestoreTestingPlan = ResourceDefinitionWithAttributes<"AWS::Backup::RestoreTestingPlan", BackupRestoreTestingPlanProps, BackupRestoreTestingPlanAttribs>;
+/**
+ * Creates a restore testing plan.
+ *
+ * The first of two steps to create a restore testing plan. After this request is successful, finish the procedure using CreateRestoreTestingSelection.
+ */
+export type BackupRestoreTestingPlanProps = {
+    /**
+     * The specified criteria to assign a set of resources, such as recovery point types or backup vaults.
+     */
+    RecoveryPointSelection: RestoreTestingRecoveryPointSelection;
+    /**
+     * The RestoreTestingPlanName is a unique string that is the name of the restore testing plan. This cannot be changed after creation, and it must consist of only alphanumeric characters and underscores.
+     */
+    RestoreTestingPlanName: string;
+    /**
+     * A CRON expression in specified timezone when a restore testing plan is executed. When no CRON expression is provided, AWS Backup will use the default expression `cron(0 5 ? * * *)` .
+     */
+    ScheduleExpression: string;
+    /**
+     * Optional. This is the timezone in which the schedule expression is set. By default, ScheduleExpressions are in UTC. You can modify this to a specified timezone.
+     */
+    ScheduleExpressionTimezone?: string | undefined;
+    /**
+     * Defaults to 24 hours.
+     *
+     * A value in hours after a restore test is scheduled before a job will be canceled if it doesn't start successfully. This value is optional. If this value is included, this parameter has a maximum value of 168 hours (one week).
+     */
+    StartWindowHours?: number | undefined;
+    /**
+     * Optional tags to include. A tag is a key-value pair you can use to manage, filter, and search for your resources. Allowed characters include UTF-8 letters,numbers, spaces, and the following characters: `+ - = . _ : /.`
+     */
+    Tags?: Tag[] | undefined;
+};
+export type BackupRestoreTestingPlanAttribs = {
+    /**
+     * An Amazon Resource Name (ARN) that uniquely identifies a restore testing plan.
+     */
+    RestoreTestingPlanArn: string;
+};
+/**
+ * `RecoveryPointSelection` has five parameters (three required and two optional). The values you specify determine which recovery point is included in the restore test. You must indicate with `Algorithm` if you want the latest recovery point within your `SelectionWindowDays` or if you want a random recovery point, and you must indicate through `IncludeVaults` from which vaults the recovery points can be chosen.
+ *
+ * `Algorithm` ( *required* ) Valid values: " `LATEST_WITHIN_WINDOW` " or " `RANDOM_WITHIN_WINDOW` ".
+ *
+ * `Recovery point types` ( *required* ) Valid values: " `SNAPSHOT` " and/or " `CONTINUOUS` ". Include `SNAPSHOT` to restore only snapshot recovery points; include `CONTINUOUS` to restore continuous recovery points (point in time restore / PITR); use both to restore either a snapshot or a continuous recovery point. The recovery point will be determined by the value for `Algorithm` .
+ *
+ * `IncludeVaults` ( *required* ). You must include one or more backup vaults. Use the wildcard ["*"] or specific ARNs.
+ *
+ * `SelectionWindowDays` ( *optional* ) Value must be an integer (in days) from 1 to 365. If not included, the value defaults to `30` .
+ *
+ * `ExcludeVaults` ( *optional* ). You can choose to input one or more specific backup vault ARNs to exclude those vaults' contents from restore eligibility. Or, you can include a list of selectors. If this parameter and its value are not included, it defaults to empty list.
+ */
+export type RestoreTestingRecoveryPointSelection = {
+    /**
+     * Acceptable values include "LATEST_WITHIN_WINDOW" or "RANDOM_WITHIN_WINDOW"
+     */
+    Algorithm: RestoreTestingRecoveryPointSelectionAlgorithm;
+    /**
+     * Accepted values include specific ARNs or list of selectors. Defaults to empty list if not listed.
+     */
+    ExcludeVaults?: string[] | undefined;
+    /**
+     * Accepted values include wildcard ["*"] or by specific ARNs or ARN wilcard replacement ["arn:aws:backup:us-west-2:123456789012:backup-vault:asdf", ...] ["arn:aws:backup:*:*:backup-vault:asdf-*", ...]
+     */
+    IncludeVaults: string[];
+    /**
+     * These are the types of recovery points.
+     *
+     * Include `SNAPSHOT` to restore only snapshot recovery points; include `CONTINUOUS` to restore continuous recovery points (point in time restore / PITR); use both to restore either a snapshot or a continuous recovery point. The recovery point will be determined by the value for `Algorithm` .
+     */
+    RecoveryPointTypes: RestoreTestingRecoveryPointType[];
+    /**
+     * Accepted values are integers from 1 to 365.
+     */
+    SelectionWindowDays?: number | undefined;
+};
+export type RestoreTestingRecoveryPointSelectionAlgorithm = "LATEST_WITHIN_WINDOW" | "RANDOM_WITHIN_WINDOW";
+export type RestoreTestingRecoveryPointType = "SNAPSHOT" | "CONTINUOUS";
+//# sourceMappingURL=aws-backup-restoretestingplan.d.ts.map

package/out/exports/resources.generated/aws-backup-restoretestingselection.d.ts

@@ -0,0 +1,81 @@
+import type { ResourceDefinition } from "../main.ts";
+export type BackupRestoreTestingSelection = ResourceDefinition<"AWS::Backup::RestoreTestingSelection", BackupRestoreTestingSelectionProps>;
+/**
+ * This request can be sent after CreateRestoreTestingPlan request returns successfully. This is the second part of creating a resource testing plan, and it must be completed sequentially.
+ *
+ * This consists of `RestoreTestingSelectionName` , `ProtectedResourceType` , and one of the following:
+ *
+ * - `ProtectedResourceArns`
+ * - `ProtectedResourceConditions`
+ *
+ * Each protected resource type can have one single value.
+ *
+ * A restore testing selection can include a wildcard value ("*") for `ProtectedResourceArns` along with `ProtectedResourceConditions` . Alternatively, you can include up to 30 specific protected resource ARNs in `ProtectedResourceArns` .
+ *
+ * Cannot select by both protected resource types AND specific ARNs. Request will fail if both are included.
+ */
+export type BackupRestoreTestingSelectionProps = {
+    /**
+     * The Amazon Resource Name (ARN) of the IAM role that AWS Backup uses to create the target resource; for example: `arn:aws:iam::123456789012:role/S3Access` .
+     */
+    IamRoleArn: string;
+    /**
+     * You can include specific ARNs, such as `ProtectedResourceArns: ["arn:aws:...", "arn:aws:..."]` or you can include a wildcard: `ProtectedResourceArns: ["*"]` , but not both.
+     */
+    ProtectedResourceArns?: string[] | undefined;
+    /**
+     * In a resource testing selection, this parameter filters by specific conditions such as `StringEquals` or `StringNotEquals` .
+     */
+    ProtectedResourceConditions?: ProtectedResourceConditions | undefined;
+    /**
+     * The type of AWS resource included in a resource testing selection; for example, an Amazon EBS volume or an Amazon RDS database.
+     */
+    ProtectedResourceType: string;
+    /**
+     * You can override certain restore metadata keys by including the parameter `RestoreMetadataOverrides` in the body of `RestoreTestingSelection` . Key values are not case sensitive.
+     *
+     * See the complete list of [restore testing inferred metadata](https://docs.aws.amazon.com/aws-backup/latest/devguide/restore-testing-inferred-metadata.html) .
+     */
+    RestoreMetadataOverrides?: Record<string, string> | undefined;
+    /**
+     * Unique string that is the name of the restore testing plan.
+     *
+     * The name cannot be changed after creation. The name must consist of only alphanumeric characters and underscores. Maximum length is 50.
+     */
+    RestoreTestingPlanName: string;
+    /**
+     * The unique name of the restore testing selection that belongs to the related restore testing plan.
+     */
+    RestoreTestingSelectionName: string;
+    /**
+     * This is amount of hours (1 to 168) available to run a validation script on the data. The data will be deleted upon the completion of the validation script or the end of the specified retention period, whichever comes first.
+     */
+    ValidationWindowHours?: number | undefined;
+};
+/**
+ * Pair of two related strings. Allowed characters are letters, white space, and numbers that can be represented in UTF-8 and the following characters: `+ - = . _ : /`
+ */
+export type KeyValue = {
+    /**
+     * The tag key.
+     */
+    Key: string;
+    /**
+     * The tag value.
+     */
+    Value: string;
+};
+/**
+ * The conditions that you define for resources in your restore testing plan using tags.
+ */
+export type ProtectedResourceConditions = {
+    /**
+     * Filters the values of your tagged resources for only those resources that you tagged with the same value. Also called "exact matching."
+     */
+    StringEquals?: KeyValue[] | undefined;
+    /**
+     * Filters the values of your tagged resources for only those resources that you tagged that do not have the same value. Also called "negated matching."
+     */
+    StringNotEquals?: KeyValue[] | undefined;
+};
+//# sourceMappingURL=aws-backup-restoretestingselection.d.ts.map