@propulsionworks/cloudformation 0.0.2 → 0.1.0

package/out/exports/resources.generated/aws-codestar-githubrepository.d.ts

@@ -0,0 +1,73 @@
+import type { ResourceDefinitionWithAttributes } from "../main.ts";
+export type CodeStarGitHubRepository = ResourceDefinitionWithAttributes<"AWS::CodeStar::GitHubRepository", CodeStarGitHubRepositoryProps, CodeStarGitHubRepositoryAttribs>;
+/**
+ * The `AWS::CodeStar::GitHubRepository` resource creates a GitHub repository where users can store source code for use with AWS workflows. You must provide a location for the source code ZIP file in the AWS CloudFormation template, so the code can be uploaded to the created repository. You must have created a personal access token in GitHub to provide in the AWS CloudFormation template. AWS uses this token to connect to GitHub on your behalf.
+ */
+export type CodeStarGitHubRepositoryProps = {
+    /**
+     * Information about code to be committed to a repository after it is created in an AWS CloudFormation stack.
+     */
+    Code?: Code | undefined;
+    ConnectionArn?: string | undefined;
+    /**
+     * Indicates whether to enable issues for the GitHub repository. You can use GitHub issues to track information and bugs for your repository.
+     */
+    EnableIssues?: boolean | undefined;
+    /**
+     * Indicates whether the GitHub repository is a private repository. If so, you choose who can see and commit to this repository.
+     */
+    IsPrivate?: boolean | undefined;
+    /**
+     * The GitHub user's personal access token for the GitHub repository.
+     */
+    RepositoryAccessToken?: string | undefined;
+    /**
+     * A comment or description about the new repository. This description is displayed in GitHub after the repository is created.
+     */
+    RepositoryDescription?: string | undefined;
+    /**
+     * The name of the repository you want to create in GitHub with AWS CloudFormation stack creation.
+     */
+    RepositoryName: string;
+    /**
+     * The GitHub user name for the owner of the GitHub repository to be created. If this repository should be owned by a GitHub organization, provide its name.
+     */
+    RepositoryOwner: string;
+};
+export type CodeStarGitHubRepositoryAttribs = {
+    /**
+     * The repository ID.
+     */
+    Id: string;
+};
+/**
+ * The `Code` property type specifies information about code to be committed.
+ *
+ * `Code` is a property of the `AWS::CodeStar::GitHubRepository` resource.
+ */
+export type Code = {
+    /**
+     * Information about the Amazon S3 bucket that contains a ZIP file of code to be committed to the repository.
+     */
+    S3: S3;
+};
+/**
+ * The `S3` property type specifies information about the Amazon S3 bucket that contains the code to be committed to the new repository.
+ *
+ * `S3` is a property of the `AWS::CodeStar::GitHubRepository` resource.
+ */
+export type S3 = {
+    /**
+     * The name of the Amazon S3 bucket that contains the ZIP file with the content to be committed to the new repository.
+     */
+    Bucket: string;
+    /**
+     * The S3 object key or file name for the ZIP file.
+     */
+    Key: string;
+    /**
+     * The object version of the ZIP file, if versioning is enabled for the Amazon S3 bucket.
+     */
+    ObjectVersion?: string | undefined;
+};
+//# sourceMappingURL=aws-codestar-githubrepository.d.ts.map

package/out/exports/resources.generated/aws-codestarconnections-connection.d.ts

@@ -0,0 +1,51 @@
+import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
+export type CodeStarConnectionsConnection = ResourceDefinitionWithAttributes<"AWS::CodeStarConnections::Connection", CodeStarConnectionsConnectionProps, CodeStarConnectionsConnectionAttribs>;
+/**
+ * The AWS::CodeStarConnections::Connection resource can be used to connect external source providers with services like AWS CodePipeline .
+ *
+ * *Note:* A connection created through AWS CloudFormation is in `PENDING` status by default. You can make its status `AVAILABLE` by updating the connection in the console.
+ */
+export type CodeStarConnectionsConnectionProps = {
+    /**
+     * The name of the connection. Connection names must be unique in an AWS account .
+     * @minLength 1
+     * @maxLength 32
+     */
+    ConnectionName: string;
+    /**
+     * The Amazon Resource Name (ARN) of the host associated with the connection.
+     * @minLength 0
+     * @maxLength 256
+     * @pattern arn:aws(-[\w]+)*:.+:.+:[0-9]{12}:.+
+     */
+    HostArn?: string | undefined;
+    /**
+     * The name of the external provider where your third-party code repository is configured.
+     */
+    ProviderType?: string | undefined;
+    /**
+     * Specifies the tags applied to the resource.
+     */
+    Tags?: Tag[] | undefined;
+};
+export type CodeStarConnectionsConnectionAttribs = {
+    /**
+     * The Amazon Resource Name (ARN) of the connection. The ARN is used as the connection reference when the connection is shared between AWS services. For example: `arn:aws:codestar-connections:us-west-2:123456789012:connection/39e4c34d-e13a-4e94-a886-ea67651bf042` .
+     * @minLength 0
+     * @maxLength 256
+     * @pattern arn:aws(-[\w]+)*:.+:.+:[0-9]{12}:.+
+     */
+    ConnectionArn: string;
+    /**
+     * The current status of the connection. For example: `PENDING` , `AVAILABLE` , or `ERROR` .
+     */
+    ConnectionStatus: string;
+    /**
+     * The AWS account ID of the owner of the connection. For Bitbucket, this is the account ID of the owner of the Bitbucket repository. For example: `123456789012` .
+     * @minLength 12
+     * @maxLength 12
+     * @pattern [0-9]{12}
+     */
+    OwnerAccountId: string;
+};
+//# sourceMappingURL=aws-codestarconnections-connection.d.ts.map

package/out/exports/resources.generated/aws-codestarconnections-repositorylink.d.ts

@@ -0,0 +1,48 @@
+import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
+export type CodeStarConnectionsRepositoryLink = ResourceDefinitionWithAttributes<"AWS::CodeStarConnections::RepositoryLink", CodeStarConnectionsRepositoryLinkProps, CodeStarConnectionsRepositoryLinkAttribs>;
+/**
+ * Information about the repository link resource, such as the repository link ARN, the associated connection ARN, encryption key ARN, and owner ID.
+ */
+export type CodeStarConnectionsRepositoryLinkProps = {
+    /**
+     * The Amazon Resource Name (ARN) of the connection associated with the repository link.
+     * @pattern arn:(aws|aws-us-gov|aws-cn):.+:.+:[0-9]{12}:.+
+     */
+    ConnectionArn: string;
+    /**
+     * The Amazon Resource Name (ARN) of the encryption key for the repository associated with the repository link.
+     * @pattern arn:(aws|aws-us-gov|aws-cn):.+:.+:[0-9]{12}:.+
+     */
+    EncryptionKeyArn?: string | undefined;
+    /**
+     * The owner ID for the repository associated with the repository link, such as the owner ID in GitHub.
+     * @pattern [a-za-z0-9_\.-]+
+     */
+    OwnerId: string;
+    /**
+     * The name of the repository associated with the repository link.
+     * @pattern [a-za-z0-9_\.-]+
+     */
+    RepositoryName: string;
+    /**
+     * The tags for the repository to be associated with the repository link.
+     */
+    Tags?: Tag[] | undefined;
+};
+export type CodeStarConnectionsRepositoryLinkAttribs = {
+    /**
+     * The name of the external provider where your third-party code repository is configured.
+     */
+    ProviderType: "GitHub" | "Bitbucket" | "GitHubEnterprise" | "GitLab" | "GitLabSelfManaged";
+    /**
+     * A unique Amazon Resource Name (ARN) to designate the repository link.
+     * @pattern arn:(aws|aws-us-gov|aws-cn):.+:.+:[0-9]{12}:.+
+     */
+    RepositoryLinkArn: string;
+    /**
+     * A UUID that uniquely identifies the RepositoryLink.
+     * @pattern [0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}
+     */
+    RepositoryLinkId: string;
+};
+//# sourceMappingURL=aws-codestarconnections-repositorylink.d.ts.map

package/out/exports/resources.generated/aws-codestarconnections-syncconfiguration.d.ts

@@ -0,0 +1,58 @@
+import type { ResourceDefinitionWithAttributes } from "../main.ts";
+export type CodeStarConnectionsSyncConfiguration = ResourceDefinitionWithAttributes<"AWS::CodeStarConnections::SyncConfiguration", CodeStarConnectionsSyncConfigurationProps, CodeStarConnectionsSyncConfigurationAttribs>;
+/**
+ * Information, such as repository, branch, provider, and resource names for a specific sync configuration.
+ */
+export type CodeStarConnectionsSyncConfigurationProps = {
+    /**
+     * The branch associated with a specific sync configuration.
+     */
+    Branch: string;
+    /**
+     * The file path to the configuration file associated with a specific sync configuration. The path should point to an actual file in the sync configurations linked repository.
+     */
+    ConfigFile: string;
+    /**
+     * Whether to enable or disable publishing of deployment status to source providers.
+     */
+    PublishDeploymentStatus?: "ENABLED" | "DISABLED" | undefined;
+    /**
+     * The ID of the repository link associated with a specific sync configuration.
+     * @pattern [0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}
+     */
+    RepositoryLinkId: string;
+    /**
+     * The name of the connection resource associated with a specific sync configuration.
+     * @pattern [a-za-z0-9_\.-]+
+     */
+    ResourceName: string;
+    /**
+     * The Amazon Resource Name (ARN) of the IAM role associated with a specific sync configuration.
+     */
+    RoleArn: string;
+    /**
+     * The type of sync for a specific sync configuration.
+     */
+    SyncType: string;
+    /**
+     * When to trigger Git sync to begin the stack update.
+     */
+    TriggerResourceUpdateOn?: "ANY_CHANGE" | "FILE_CHANGE" | undefined;
+};
+export type CodeStarConnectionsSyncConfigurationAttribs = {
+    /**
+     * The owner ID for the repository associated with a specific sync configuration, such as the owner ID in GitHub.
+     * @pattern [a-za-z0-9_\.-]+
+     */
+    OwnerId: string;
+    /**
+     * The name of the external provider where your third-party code repository is configured.
+     */
+    ProviderType: "GitHub" | "Bitbucket" | "GitHubEnterprise" | "GitLab" | "GitLabSelfManaged";
+    /**
+     * The name of the repository that is being synced to.
+     * @pattern [a-za-z0-9_\.-]+
+     */
+    RepositoryName: string;
+};
+//# sourceMappingURL=aws-codestarconnections-syncconfiguration.d.ts.map

package/out/exports/resources.generated/aws-codestarnotifications-notificationrule.d.ts

@@ -0,0 +1,82 @@
+import type { ResourceDefinitionWithAttributes } from "../main.ts";
+export type CodeStarNotificationsNotificationRule = ResourceDefinitionWithAttributes<"AWS::CodeStarNotifications::NotificationRule", CodeStarNotificationsNotificationRuleProps, CodeStarNotificationsNotificationRuleAttribs>;
+/**
+ * Creates a notification rule for a resource. The rule specifies the events you want notifications about and the targets (such as Amazon Simple Notification Service topics or  clients configured for Slack) where you want to receive them.
+ */
+export type CodeStarNotificationsNotificationRuleProps = {
+    /**
+     * The name or email alias of the person who created the notification rule.
+     * @minLength 1
+     * @maxLength 2048
+     */
+    CreatedBy?: string | undefined;
+    /**
+     * The level of detail to include in the notifications for this resource. `BASIC` will include only the contents of the event as it would appear in Amazon CloudWatch. `FULL` will include any supplemental information provided by AWS CodeStar Notifications and/or the service for the resource for which the notification is created.
+     */
+    DetailType: "BASIC" | "FULL";
+    /**
+     * The event type associated with this notification rule. For a complete list of event types and IDs, see [Notification concepts](https://docs.aws.amazon.com/dtconsole/latest/userguide/concepts.html#concepts-api) in the *Developer Tools Console User Guide* .
+     * @minLength 1
+     * @maxLength 2048
+     */
+    EventTypeId?: string | undefined;
+    /**
+     * A list of event types associated with this notification rule. For a complete list of event types and IDs, see [Notification concepts](https://docs.aws.amazon.com/dtconsole/latest/userguide/concepts.html#concepts-api) in the *Developer Tools Console User Guide* .
+     */
+    EventTypeIds: string[];
+    /**
+     * The name for the notification rule. Notification rule names must be unique in your AWS account .
+     * @minLength 1
+     * @maxLength 64
+     * @pattern [A-Za-z0-9\-_ ]+$
+     */
+    Name: string;
+    /**
+     * The Amazon Resource Name (ARN) of the resource to associate with the notification rule. Supported resources include pipelines in AWS CodePipeline , repositories in AWS CodeCommit , and build projects in AWS CodeBuild .
+     * @pattern ^arn:aws[^:\s]*:[^:\s]*:[^:\s]*:[0-9]{12}:[^\s]+$
+     */
+    Resource: string;
+    /**
+     * The status of the notification rule. The default value is `ENABLED` . If the status is set to `DISABLED` , notifications aren't sent for the notification rule.
+     */
+    Status?: "ENABLED" | "DISABLED" | undefined;
+    /**
+     * A list of tags to apply to this notification rule. Key names cannot start with " `aws` ".
+     */
+    Tags?: Record<string, string> | undefined;
+    /**
+     * The Amazon Resource Name (ARN) of the Amazon SNS topic or  client.
+     * @minLength 1
+     * @maxLength 2048
+     */
+    TargetAddress?: string | undefined;
+    /**
+     * A list of Amazon Resource Names (ARNs) of Amazon SNS topics and  clients to associate with the notification rule.
+     */
+    Targets: Target[];
+};
+export type CodeStarNotificationsNotificationRuleAttribs = {
+    /**
+     * The Amazon Resource Name (ARN) of the notification rule.
+     * @pattern ^arn:aws[^:\s]*:codestar-notifications:[^:\s]+:\d{12}:notificationrule\/(.*\S)?$
+     */
+    Arn: string;
+};
+/**
+ * Information about the  topics or  clients associated with a notification rule.
+ */
+export type Target = {
+    /**
+     * The Amazon Resource Name (ARN) of the  topic or  client.
+     */
+    TargetAddress: string;
+    /**
+     * The target type. Can be an Amazon Simple Notification Service topic or  client.
+     *
+     * - Amazon Simple Notification Service topics are specified as `SNS` .
+     * - clients are specified as `AWSChatbotSlack` .
+     * - clients for Microsoft Teams are specified as `AWSChatbotMicrosoftTeams` .
+     */
+    TargetType: string;
+};
+//# sourceMappingURL=aws-codestarnotifications-notificationrule.d.ts.map

package/out/exports/resources.generated/aws-cognito-identitypool.d.ts

@@ -0,0 +1,126 @@
+import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
+export type CognitoIdentityPool = ResourceDefinitionWithAttributes<"AWS::Cognito::IdentityPool", CognitoIdentityPoolProps, CognitoIdentityPoolAttribs>;
+/**
+ * The `AWS::Cognito::IdentityPool` resource creates an Amazon Cognito identity pool.
+ *
+ * To avoid deleting the resource accidentally from AWS CloudFormation , use [DeletionPolicy Attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-deletionpolicy.html) and the [UpdateReplacePolicy Attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-updatereplacepolicy.html) to retain the resource on deletion or replacement.
+ */
+export type CognitoIdentityPoolProps = {
+    /**
+     * Enables the Basic (Classic) authentication flow.
+     */
+    AllowClassicFlow?: boolean | undefined;
+    /**
+     * Specifies whether the identity pool supports unauthenticated logins.
+     */
+    AllowUnauthenticatedIdentities: boolean;
+    /**
+     * The events to configure.
+     */
+    CognitoEvents?: Record<string, unknown> | undefined;
+    /**
+     * The Amazon Cognito user pools and their client IDs.
+     */
+    CognitoIdentityProviders?: CognitoIdentityProvider[] | undefined;
+    /**
+     * Configuration options for configuring Amazon Cognito streams.
+     */
+    CognitoStreams?: CognitoStreams | undefined;
+    /**
+     * The "domain" Amazon Cognito uses when referencing your users. This name acts as a placeholder that allows your backend and the Amazon Cognito service to communicate about the developer provider. For the `DeveloperProviderName` , you can use letters and periods (.), underscores (_), and dashes (-).
+     *
+     * *Minimum length* : 1
+     *
+     * *Maximum length* : 100
+     */
+    DeveloperProviderName?: string | undefined;
+    /**
+     * The name of your Amazon Cognito identity pool.
+     *
+     * *Minimum length* : 1
+     *
+     * *Maximum length* : 128
+     *
+     * *Pattern* : `[\w\s+=,.@-]+`
+     */
+    IdentityPoolName?: string | undefined;
+    /**
+     * Tags to assign to the identity pool. A tag is a label that you can apply to identity pools to categorize and manage them in different ways, such as by purpose, owner, environment, or other criteria.
+     */
+    IdentityPoolTags?: Tag[] | undefined;
+    /**
+     * The Amazon Resource Names (ARNs) of the OpenID connect providers.
+     */
+    OpenIdConnectProviderARNs?: string[] | undefined;
+    /**
+     * The configuration options to be applied to the identity pool.
+     */
+    PushSync?: PushSync | undefined;
+    /**
+     * The Amazon Resource Names (ARNs) of the Security Assertion Markup Language (SAML) providers.
+     */
+    SamlProviderARNs?: string[] | undefined;
+    /**
+     * Key-value pairs that map provider names to provider app IDs.
+     */
+    SupportedLoginProviders?: Record<string, unknown> | undefined;
+};
+export type CognitoIdentityPoolAttribs = {
+    Id: string;
+    /**
+     * The name of the Amazon Cognito identity pool, returned as a string.
+     */
+    Name: string;
+};
+/**
+ * `CognitoIdentityProvider` is a property of the [AWS::Cognito::IdentityPool](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-identitypool.html) resource that represents an Amazon Cognito user pool and its client ID.
+ */
+export type CognitoIdentityProvider = {
+    /**
+     * The client ID for the Amazon Cognito user pool.
+     */
+    ClientId: string;
+    /**
+     * The provider name for an Amazon Cognito user pool. For example: `cognito-idp.us-east-2.amazonaws.com/us-east-2_123456789` .
+     */
+    ProviderName: string;
+    /**
+     * TRUE if server-side token validation is enabled for the identity provider’s token.
+     *
+     * After you set the `ServerSideTokenCheck` to TRUE for an identity pool, that identity pool checks with the integrated user pools to make sure the user has not been globally signed out or deleted before the identity pool provides an OIDC token or AWS credentials for the user.
+     *
+     * If the user is signed out or deleted, the identity pool returns a 400 Not Authorized error.
+     */
+    ServerSideTokenCheck?: boolean | undefined;
+};
+/**
+ * `CognitoStreams` is a property of the [AWS::Cognito::IdentityPool](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-identitypool.html) resource that defines configuration options for Amazon Cognito streams.
+ */
+export type CognitoStreams = {
+    /**
+     * The Amazon Resource Name (ARN) of the role Amazon Cognito can assume to publish to the stream. This role must grant access to Amazon Cognito (cognito-sync) to invoke `PutRecord` on your Amazon Cognito stream.
+     */
+    RoleArn?: string | undefined;
+    /**
+     * The name of the Amazon Cognito stream to receive updates. This stream must be in the developer's account and in the same Region as the identity pool.
+     */
+    StreamName?: string | undefined;
+    /**
+     * Status of the Amazon Cognito streams. Valid values are: `ENABLED` or `DISABLED` .
+     */
+    StreamingStatus?: string | undefined;
+};
+/**
+ * `PushSync` is a property of the [AWS::Cognito::IdentityPool](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-identitypool.html) resource that defines the configuration options to be applied to an Amazon Cognito identity pool.
+ */
+export type PushSync = {
+    /**
+     * The ARNs of the Amazon SNS platform applications that could be used by clients.
+     */
+    ApplicationArns?: string[] | undefined;
+    /**
+     * An IAM role configured to allow Amazon Cognito to call Amazon SNS on behalf of the developer.
+     */
+    RoleArn?: string | undefined;
+};
+//# sourceMappingURL=aws-cognito-identitypool.d.ts.map

package/out/exports/resources.generated/aws-cognito-identitypoolprincipaltag.d.ts

@@ -0,0 +1,24 @@
+import type { ResourceDefinition } from "../main.ts";
+export type CognitoIdentityPoolPrincipalTag = ResourceDefinition<"AWS::Cognito::IdentityPoolPrincipalTag", CognitoIdentityPoolPrincipalTagProps>;
+/**
+ * A list of the identity pool principal tag assignments for attributes for access control.
+ */
+export type CognitoIdentityPoolPrincipalTagProps = {
+    /**
+     * The identity pool that you want to associate with this principal tag map.
+     */
+    IdentityPoolId: string;
+    /**
+     * The identity pool identity provider (IdP) that you want to associate with this principal tag map.
+     */
+    IdentityProviderName: string;
+    /**
+     * A JSON-formatted list of user claims and the principal tags that you want to associate with them. When Amazon Cognito requests credentials, it sets the value of the principal tag to the value of the user's claim.
+     */
+    PrincipalTags?: Record<string, unknown> | undefined;
+    /**
+     * Use a default set of mappings between claims and tags for this provider, instead of a custom map.
+     */
+    UseDefaults?: boolean | undefined;
+};
+//# sourceMappingURL=aws-cognito-identitypoolprincipaltag.d.ts.map

package/out/exports/resources.generated/aws-cognito-identitypoolroleattachment.d.ts

@@ -0,0 +1,87 @@
+import type { ResourceDefinitionWithAttributes } from "../main.ts";
+export type CognitoIdentityPoolRoleAttachment = ResourceDefinitionWithAttributes<"AWS::Cognito::IdentityPoolRoleAttachment", CognitoIdentityPoolRoleAttachmentProps, CognitoIdentityPoolRoleAttachmentAttribs>;
+/**
+ * The `AWS::Cognito::IdentityPoolRoleAttachment` resource manages the role configuration for an Amazon Cognito identity pool.
+ */
+export type CognitoIdentityPoolRoleAttachmentProps = {
+    /**
+     * An identity pool ID in the format `REGION:GUID` .
+     */
+    IdentityPoolId: string;
+    /**
+     * How users for a specific identity provider are mapped to roles. This is a string to the `RoleMapping` object map. The string identifies the identity provider. For example: `graph.facebook.com` or `cognito-idp.us-east-1.amazonaws.com/us-east-1_abcdefghi:app_client_id` .
+     *
+     * If the `IdentityProvider` field isn't provided in this object, the string is used as the identity provider name.
+     *
+     * For more information, see the [RoleMapping property](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-identitypoolroleattachment-rolemapping.html) .
+     */
+    RoleMappings?: Record<string, RoleMapping> | undefined;
+    /**
+     * The map of the roles associated with this pool. For a given role, the key is either "authenticated" or "unauthenticated". The value is the role ARN.
+     */
+    Roles?: Record<string, string> | undefined;
+};
+export type CognitoIdentityPoolRoleAttachmentAttribs = {
+    /**
+     * The resource ID.
+     */
+    Id: string;
+};
+/**
+ * Defines how to map a claim to a role ARN.
+ */
+export type MappingRule = {
+    /**
+     * The claim name that must be present in the token. For example: "isAdmin" or "paid".
+     */
+    Claim: string;
+    /**
+     * The match condition that specifies how closely the claim value in the IdP token must match `Value` .
+     *
+     * Valid values are: `Equals` , `Contains` , `StartsWith` , and `NotEqual` .
+     */
+    MatchType: string;
+    /**
+     * The Amazon Resource Name (ARN) of the role.
+     */
+    RoleARN: string;
+    /**
+     * A brief string that the claim must match. For example, "paid" or "yes".
+     */
+    Value: string;
+};
+/**
+ * One of a set of `RoleMappings` , a property of the [AWS::Cognito::IdentityPoolRoleAttachment](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-identitypoolroleattachment.html) resource that defines the role-mapping attributes of an Amazon Cognito identity pool.
+ */
+export type RoleMapping = {
+    /**
+     * If you specify Token or Rules as the `Type` , `AmbiguousRoleResolution` is required.
+     *
+     * Specifies the action to be taken if either no rules match the claim value for the `Rules` type, or there is no `cognito:preferred_role` claim and there are multiple `cognito:roles` matches for the `Token` type.
+     */
+    AmbiguousRoleResolution?: string | undefined;
+    /**
+     * Identifier for the identity provider for which the role is mapped. For example: `graph.facebook.com` or `cognito-idp.us-east-1.amazonaws.com/us-east-1_abcdefghi:app_client_id (http://cognito-idp.us-east-1.amazonaws.com/us-east-1_abcdefghi:app_client_id)` . This is the identity provider that is used by the user for authentication.
+     *
+     * If the identity provider property isn't provided, the key of the entry in the `RoleMappings` map is used as the identity provider.
+     */
+    IdentityProvider?: string | undefined;
+    /**
+     * The rules to be used for mapping users to roles. If you specify "Rules" as the role-mapping type, RulesConfiguration is required.
+     */
+    RulesConfiguration?: RulesConfigurationType | undefined;
+    /**
+     * The role mapping type. Token will use `cognito:roles` and `cognito:preferred_role` claims from the Cognito identity provider token to map groups to roles. Rules will attempt to match claims from the token to map to a role.
+     */
+    Type: string;
+};
+/**
+ * `RulesConfigurationType` is a subproperty of the [RoleMapping](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-identitypoolroleattachment-rolemapping.html) property that defines the rules to be used for mapping users to roles.
+ */
+export type RulesConfigurationType = {
+    /**
+     * The rules. You can specify up to 25 rules per identity provider.
+     */
+    Rules: MappingRule[];
+};
+//# sourceMappingURL=aws-cognito-identitypoolroleattachment.d.ts.map

package/out/exports/resources.generated/aws-cognito-logdeliveryconfiguration.d.ts

@@ -0,0 +1,76 @@
+import type { ResourceDefinitionWithAttributes } from "../main.ts";
+export type CognitoLogDeliveryConfiguration = ResourceDefinitionWithAttributes<"AWS::Cognito::LogDeliveryConfiguration", CognitoLogDeliveryConfigurationProps, CognitoLogDeliveryConfigurationAttribs>;
+/**
+ * Sets up or modifies the logging configuration of a user pool. User pools can export user notification logs and, when threat protection is active, user-activity logs. For more information, see [Exporting user pool logs](https://docs.aws.amazon.com/cognito/latest/developerguide/exporting-quotas-and-usage.html) .
+ */
+export type CognitoLogDeliveryConfigurationProps = {
+    /**
+     * A logging destination of a user pool. User pools can have multiple logging destinations for message-delivery and user-activity logs.
+     */
+    LogConfigurations?: LogConfiguration[] | undefined;
+    /**
+     * The ID of the user pool where you configured logging.
+     */
+    UserPoolId: string;
+};
+export type CognitoLogDeliveryConfigurationAttribs = {
+    /**
+     * A user pool ID, for example `us-east-1_EXAMPLE` .
+     */
+    Id: string;
+};
+/**
+ * Configuration for the CloudWatch log group destination of user pool detailed activity logging, or of user activity log export with advanced security features.
+ */
+export type CloudWatchLogsConfiguration = {
+    /**
+     * The Amazon Resource Name (arn) of a CloudWatch Logs log group where your user pool sends logs. The log group must not be encrypted with AWS Key Management Service and must be in the same AWS account as your user pool.
+     *
+     * To send logs to log groups with a resource policy of a size greater than 5120 characters, configure a log group with a path that starts with `/aws/vendedlogs` . For more information, see [Enabling logging from certain AWS services](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/AWS-logs-and-resource-policy.html) .
+     */
+    LogGroupArn?: string | undefined;
+};
+/**
+ * Configuration for the Amazon Data Firehose stream destination of user activity log export with threat protection.
+ */
+export type FirehoseConfiguration = {
+    /**
+     * The ARN of an Amazon Data Firehose stream that's the destination for threat protection log export.
+     */
+    StreamArn?: string | undefined;
+};
+/**
+ * The configuration of user event logs to an external AWS service like Amazon Data Firehose, Amazon S3, or Amazon CloudWatch Logs.
+ */
+export type LogConfiguration = {
+    /**
+     * Configuration for the CloudWatch log group destination of user pool detailed activity logging, or of user activity log export with advanced security features.
+     */
+    CloudWatchLogsConfiguration?: CloudWatchLogsConfiguration | undefined;
+    /**
+     * The source of events that your user pool sends for logging. To send error-level logs about user notification activity, set to `userNotification` . To send info-level logs about threat-protection user activity in user pools with the Plus feature plan, set to `userAuthEvents` .
+     */
+    EventSource?: string | undefined;
+    /**
+     * Configuration for the Amazon Data Firehose stream destination of user activity log export with threat protection.
+     */
+    FirehoseConfiguration?: FirehoseConfiguration | undefined;
+    /**
+     * The `errorlevel` selection of logs that a user pool sends for detailed activity logging. To send `userNotification` activity with [information about message delivery](https://docs.aws.amazon.com/cognito/latest/developerguide/exporting-quotas-and-usage.html) , choose `ERROR` with `CloudWatchLogsConfiguration` . To send `userAuthEvents` activity with user logs from threat protection with the Plus feature plan, choose `INFO` with one of `CloudWatchLogsConfiguration` , `FirehoseConfiguration` , or `S3Configuration` .
+     */
+    LogLevel?: string | undefined;
+    /**
+     * Configuration for the Amazon S3 bucket destination of user activity log export with threat protection.
+     */
+    S3Configuration?: S3Configuration | undefined;
+};
+/**
+ * Configuration for the Amazon S3 bucket destination of user activity log export with threat protection.
+ */
+export type S3Configuration = {
+    /**
+     * The ARN of an Amazon S3 bucket that's the destination for threat protection log export.
+     */
+    BucketArn?: string | undefined;
+};
+//# sourceMappingURL=aws-cognito-logdeliveryconfiguration.d.ts.map