@propulsionworks/cloudformation 0.0.2 → 0.1.1

package/out/exports/resources.generated/aws-wafregional-xssmatchset.d.ts

@@ -0,0 +1,142 @@
+import type { ResourceDefinitionWithAttributes } from "../main.ts";
+/**
+ * > AWS WAF Classic support will end on September 30, 2025.
+ * >
+ * > This is *AWS WAF Classic* documentation. For more information, see [AWS WAF Classic](https://docs.aws.amazon.com/waf/latest/developerguide/classic-waf-chapter.html) in the developer guide.
+ * >
+ * > *For the latest version of AWS WAF* , use the AWS WAF V2 API and see the [AWS WAF Developer Guide](https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html) . With the latest version, AWS WAF has a single set of endpoints for regional and global use.
+ *
+ * A complex type that contains `XssMatchTuple` objects, which specify the parts of web requests that you want AWS WAF to inspect for cross-site scripting attacks and, if you want AWS WAF to inspect a header, the name of the header. If a `XssMatchSet` contains more than one `XssMatchTuple` object, a request needs to include cross-site scripting attacks in only one of the specified parts of the request to be considered a match.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafregional-xssmatchset.html}
+ */
+export type WAFRegionalXssMatchSet = ResourceDefinitionWithAttributes<"AWS::WAFRegional::XssMatchSet", WAFRegionalXssMatchSetProps, WAFRegionalXssMatchSetAttribs>;
+/**
+ * > AWS WAF Classic support will end on September 30, 2025.
+ * >
+ * > This is *AWS WAF Classic* documentation. For more information, see [AWS WAF Classic](https://docs.aws.amazon.com/waf/latest/developerguide/classic-waf-chapter.html) in the developer guide.
+ * >
+ * > *For the latest version of AWS WAF* , use the AWS WAF V2 API and see the [AWS WAF Developer Guide](https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html) . With the latest version, AWS WAF has a single set of endpoints for regional and global use.
+ *
+ * A complex type that contains `XssMatchTuple` objects, which specify the parts of web requests that you want AWS WAF to inspect for cross-site scripting attacks and, if you want AWS WAF to inspect a header, the name of the header. If a `XssMatchSet` contains more than one `XssMatchTuple` object, a request needs to include cross-site scripting attacks in only one of the specified parts of the request to be considered a match.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafregional-xssmatchset.html}
+ */
+export type WAFRegionalXssMatchSetProps = {
+    /**
+     * The name, if any, of the `XssMatchSet` .
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafregional-xssmatchset.html#cfn-wafregional-xssmatchset-name}
+     */
+    Name: string;
+    /**
+     * Specifies the parts of web requests that you want to inspect for cross-site scripting attacks.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafregional-xssmatchset.html#cfn-wafregional-xssmatchset-xssmatchtuples}
+     */
+    XssMatchTuples?: XssMatchTuple[] | undefined;
+};
+/**
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafregional-xssmatchset.html#aws-resource-wafregional-xssmatchset-return-values}
+ */
+export type WAFRegionalXssMatchSetAttribs = {
+    /**
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafregional-xssmatchset.html#cfn-wafregional-xssmatchset-id}
+     */
+    Id: string;
+};
+/**
+ * The part of a web request that you want AWS WAF to inspect, such as a specific header or a query string.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafregional-xssmatchset-fieldtomatch.html}
+ */
+export type FieldToMatch = {
+    /**
+     * When the value of `Type` is `HEADER` , enter the name of the header that you want AWS WAF to search, for example, `User-Agent` or `Referer` . The name of the header is not case sensitive.
+     *
+     * When the value of `Type` is `SINGLE_QUERY_ARG` , enter the name of the parameter that you want AWS WAF to search, for example, `UserName` or `SalesRegion` . The parameter name is not case sensitive.
+     *
+     * If the value of `Type` is any other value, omit `Data` .
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafregional-xssmatchset-fieldtomatch.html#cfn-wafregional-xssmatchset-fieldtomatch-data}
+     */
+    Data?: string | undefined;
+    /**
+     * The part of the web request that you want AWS WAF to search for a specified string. Parts of a request that you can search include the following:
+     *
+     * - `HEADER` : A specified request header, for example, the value of the `User-Agent` or `Referer` header. If you choose `HEADER` for the type, specify the name of the header in `Data` .
+     * - `METHOD` : The HTTP method, which indicates the type of operation that the request is asking the origin to perform.
+     * - `QUERY_STRING` : A query string, which is the part of a URL that appears after a `?` character, if any.
+     * - `URI` : The part of a web request that identifies a resource, for example, `/images/daily-ad.jpg` .
+     * - `BODY` : The part of a request that contains any additional data that you want to send to your web server as the HTTP request body, such as data from a form. The request body immediately follows the request headers. Note that only the first `8192` bytes of the request body are forwarded to AWS WAF for inspection. To allow or block requests based on the length of the body, you can create a size constraint set.
+     * - `SINGLE_QUERY_ARG` : The parameter in the query string that you will inspect, such as *UserName* or *SalesRegion* . The maximum length for `SINGLE_QUERY_ARG` is 30 characters.
+     * - `ALL_QUERY_ARGS` : Similar to `SINGLE_QUERY_ARG` , but rather than inspecting a single parameter, AWS WAF will inspect all parameters within the query for the value or regex pattern that you specify in `TargetString` .
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafregional-xssmatchset-fieldtomatch.html#cfn-wafregional-xssmatchset-fieldtomatch-type}
+     */
+    Type: string;
+};
+/**
+ * > AWS WAF Classic support will end on September 30, 2025.
+ * >
+ * > This is *AWS WAF Classic* documentation. For more information, see [AWS WAF Classic](https://docs.aws.amazon.com/waf/latest/developerguide/classic-waf-chapter.html) in the developer guide.
+ * >
+ * > *For the latest version of AWS WAF* , use the AWS WAF V2 API and see the [AWS WAF Developer Guide](https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html) . With the latest version, AWS WAF has a single set of endpoints for regional and global use.
+ *
+ * Specifies the part of a web request that you want AWS WAF to inspect for cross-site scripting attacks and, if you want AWS WAF to inspect a header, the name of the header.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafregional-xssmatchset-xssmatchtuple.html}
+ */
+export type XssMatchTuple = {
+    /**
+     * The part of a web request that you want AWS WAF to inspect, such as a specified header or a query string.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafregional-xssmatchset-xssmatchtuple.html#cfn-wafregional-xssmatchset-xssmatchtuple-fieldtomatch}
+     */
+    FieldToMatch: FieldToMatch;
+    /**
+     * Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass AWS WAF . If you specify a transformation, AWS WAF performs the transformation on `FieldToMatch` before inspecting it for a match.
+     *
+     * You can only specify a single type of TextTransformation.
+     *
+     * *CMD_LINE*
+     *
+     * When you're concerned that attackers are injecting an operating system command line command and using unusual formatting to disguise some or all of the command, use this option to perform the following transformations:
+     *
+     * - Delete the following characters: \ " ' ^
+     * - Delete spaces before the following characters: / (
+     * - Replace the following characters with a space: , ;
+     * - Replace multiple spaces with one space
+     * - Convert uppercase letters (A-Z) to lowercase (a-z)
+     *
+     * *COMPRESS_WHITE_SPACE*
+     *
+     * Use this option to replace the following characters with a space character (decimal 32):
+     *
+     * - \f, formfeed, decimal 12
+     * - \t, tab, decimal 9
+     * - \n, newline, decimal 10
+     * - \r, carriage return, decimal 13
+     * - \v, vertical tab, decimal 11
+     * - non-breaking space, decimal 160
+     *
+     * `COMPRESS_WHITE_SPACE` also replaces multiple spaces with one space.
+     *
+     * *HTML_ENTITY_DECODE*
+     *
+     * Use this option to replace HTML-encoded characters with unencoded characters. `HTML_ENTITY_DECODE` performs the following operations:
+     *
+     * - Replaces `(ampersand)quot;` with `"`
+     * - Replaces `(ampersand)nbsp;` with a non-breaking space, decimal 160
+     * - Replaces `(ampersand)lt;` with a "less than" symbol
+     * - Replaces `(ampersand)gt;` with `>`
+     * - Replaces characters that are represented in hexadecimal format, `(ampersand)#xhhhh;` , with the corresponding characters
+     * - Replaces characters that are represented in decimal format, `(ampersand)#nnnn;` , with the corresponding characters
+     *
+     * *LOWERCASE*
+     *
+     * Use this option to convert uppercase letters (A-Z) to lowercase (a-z).
+     *
+     * *URL_DECODE*
+     *
+     * Use this option to decode a URL-encoded value.
+     *
+     * *NONE*
+     *
+     * Specify `NONE` if you don't want to perform any text transformations.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafregional-xssmatchset-xssmatchtuple.html#cfn-wafregional-xssmatchset-xssmatchtuple-texttransformation}
+     */
+    TextTransformation: string;
+};
+//# sourceMappingURL=aws-wafregional-xssmatchset.d.ts.map

package/out/exports/resources.generated/aws-wafv2-ipset.d.ts

@@ -0,0 +1,96 @@
+import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
+/**
+ * > This is the latest version of *AWS WAF* , named AWS WAF V2, released in November, 2019. For information, including how to migrate your AWS WAF resources from the prior release, see the [AWS WAF developer guide](https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html) .
+ *
+ * Use an `IPSet` to identify web requests that originate from specific IP addresses or ranges of IP addresses. For example, if you're receiving a lot of requests from a ranges of IP addresses, you can configure AWS WAF to block them using an IP set that lists those IP addresses.
+ *
+ * You use an IP set by providing its Amazon Resource Name (ARN) to the rule statement `IPSetReferenceStatement` , when you add a rule to a rule group or web ACL.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-ipset.html}
+ */
+export type WAFv2IPSet = ResourceDefinitionWithAttributes<"AWS::WAFv2::IPSet", WAFv2IPSetProps, WAFv2IPSetAttribs>;
+/**
+ * > This is the latest version of *AWS WAF* , named AWS WAF V2, released in November, 2019. For information, including how to migrate your AWS WAF resources from the prior release, see the [AWS WAF developer guide](https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html) .
+ *
+ * Use an `IPSet` to identify web requests that originate from specific IP addresses or ranges of IP addresses. For example, if you're receiving a lot of requests from a ranges of IP addresses, you can configure AWS WAF to block them using an IP set that lists those IP addresses.
+ *
+ * You use an IP set by providing its Amazon Resource Name (ARN) to the rule statement `IPSetReferenceStatement` , when you add a rule to a rule group or web ACL.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-ipset.html}
+ */
+export type WAFv2IPSetProps = {
+    /**
+     * Contains an array of strings that specifies zero or more IP addresses or blocks of IP addresses that you want AWS WAF to inspect for in incoming requests. All addresses must be specified using Classless Inter-Domain Routing (CIDR) notation. AWS WAF supports all IPv4 and IPv6 CIDR ranges except for `/0` .
+     *
+     * Example address strings:
+     *
+     * - For requests that originated from the IP address 192.0.2.44, specify `192.0.2.44/32` .
+     * - For requests that originated from IP addresses from 192.0.2.0 to 192.0.2.255, specify `192.0.2.0/24` .
+     * - For requests that originated from the IP address 1111:0000:0000:0000:0000:0000:0000:0111, specify `1111:0000:0000:0000:0000:0000:0000:0111/128` .
+     * - For requests that originated from IP addresses 1111:0000:0000:0000:0000:0000:0000:0000 to 1111:0000:0000:0000:ffff:ffff:ffff:ffff, specify `1111:0000:0000:0000:0000:0000:0000:0000/64` .
+     *
+     * For more information about CIDR notation, see the Wikipedia entry [Classless Inter-Domain Routing](https://docs.aws.amazon.com/https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing) .
+     *
+     * Example JSON `Addresses` specifications:
+     *
+     * - Empty array: `"Addresses": []`
+     * - Array with one address: `"Addresses": ["192.0.2.44/32"]`
+     * - Array with three addresses: `"Addresses": ["192.0.2.44/32", "192.0.2.0/24", "192.0.0.0/16"]`
+     * - INVALID specification: `"Addresses": [""]` INVALID
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-ipset.html#cfn-wafv2-ipset-addresses}
+     */
+    Addresses: string[];
+    /**
+     * A description of the IP set that helps with identification.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-ipset.html#cfn-wafv2-ipset-description}
+     */
+    Description?: string | undefined;
+    /**
+     * The version of the IP addresses, either `IPV4` or `IPV6` .
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-ipset.html#cfn-wafv2-ipset-ipaddressversion}
+     */
+    IPAddressVersion: IPAddressVersion;
+    /**
+     * The name of the IP set. You cannot change the name of an `IPSet` after you create it.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-ipset.html#cfn-wafv2-ipset-name}
+     */
+    Name?: string | undefined;
+    /**
+     * Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AWS AppSync GraphQL API, an Amazon Cognito user pool, an AWS App Runner service, or an AWS Verified Access instance. Valid Values are `CLOUDFRONT` and `REGIONAL` .
+     *
+     * > For `CLOUDFRONT` , you must create your WAFv2 resources in the US East (N. Virginia) Region, `us-east-1` .
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-ipset.html#cfn-wafv2-ipset-scope}
+     */
+    Scope: Scope;
+    /**
+     * Key:value pairs associated with an AWS resource. The key:value pair can be anything you define. Typically, the tag key represents a category (such as "environment") and the tag value represents a specific value within that category (such as "test," "development," or "production"). You can add up to 50 tags to each AWS resource.
+     *
+     * > To modify tags on existing resources, use the AWS WAF APIs or command line interface. With AWS CloudFormation , you can only add tags to AWS WAF resources during resource creation.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-ipset.html#cfn-wafv2-ipset-tags}
+     */
+    Tags?: Tag[] | undefined;
+};
+/**
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-ipset.html#aws-resource-wafv2-ipset-return-values}
+ */
+export type WAFv2IPSetAttribs = {
+    /**
+     * The Amazon Resource Name (ARN) of the IP set.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-ipset.html#cfn-wafv2-ipset-arn}
+     */
+    Arn: string;
+    /**
+     * The ID of the IP set.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-ipset.html#cfn-wafv2-ipset-id}
+     */
+    Id: string;
+};
+/**
+ * Type of addresses in the IPSet, use IPV4 for IPV4 IP addresses, IPV6 for IPV6 address.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-ipset-ipaddressversion.html}
+ */
+export type IPAddressVersion = "IPV4" | "IPV6";
+/**
+ * Use CLOUDFRONT for CloudFront IPSet, use REGIONAL for Application Load Balancer and API Gateway.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-ipset-scope.html}
+ */
+export type Scope = "CLOUDFRONT" | "REGIONAL";
+//# sourceMappingURL=aws-wafv2-ipset.d.ts.map

package/out/exports/resources.generated/aws-wafv2-loggingconfiguration.d.ts

@@ -0,0 +1,184 @@
+import type { ResourceDefinitionWithAttributes } from "../main.ts";
+/**
+ * Defines an association between logging destinations and a web ACL resource, for logging from AWS WAF . As part of the association, you can specify parts of the standard logging fields to keep out of the logs and you can specify filters so that you log only a subset of the logging records.
+ *
+ * If you configure data protection for the web ACL, the protection applies to the data that AWS WAF sends to the logs.
+ *
+ * > You can define one logging destination per web ACL.
+ *
+ * You can access information about the traffic that AWS WAF inspects using the following steps:
+ *
+ * - Create your logging destination. You can use an Amazon CloudWatch Logs log group, an Amazon Simple Storage Service (Amazon S3) bucket, or an Amazon Kinesis Data Firehose.
+ *
+ * The name that you give the destination must start with `aws-waf-logs-` . Depending on the type of destination, you might need to configure additional settings or permissions.
+ *
+ * For configuration requirements and pricing information for each destination type, see [Logging web ACL traffic](https://docs.aws.amazon.com/waf/latest/developerguide/logging.html) in the *AWS WAF Developer Guide* .
+ * - Associate your logging destination to your web ACL using a `PutLoggingConfiguration` request.
+ *
+ * When you successfully enable logging using a `PutLoggingConfiguration` request, AWS WAF creates an additional role or policy that is required to write logs to the logging destination. For an Amazon CloudWatch Logs log group, AWS WAF creates a resource policy on the log group. For an Amazon S3 bucket, AWS WAF creates a bucket policy. For an Amazon Kinesis Data Firehose, AWS WAF creates a service-linked role.
+ *
+ * For additional information about web ACL logging, see [Logging web ACL traffic information](https://docs.aws.amazon.com/waf/latest/developerguide/logging.html) in the *AWS WAF Developer Guide* .
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-loggingconfiguration.html}
+ */
+export type WAFv2LoggingConfiguration = ResourceDefinitionWithAttributes<"AWS::WAFv2::LoggingConfiguration", WAFv2LoggingConfigurationProps, WAFv2LoggingConfigurationAttribs>;
+/**
+ * Defines an association between logging destinations and a web ACL resource, for logging from AWS WAF . As part of the association, you can specify parts of the standard logging fields to keep out of the logs and you can specify filters so that you log only a subset of the logging records.
+ *
+ * If you configure data protection for the web ACL, the protection applies to the data that AWS WAF sends to the logs.
+ *
+ * > You can define one logging destination per web ACL.
+ *
+ * You can access information about the traffic that AWS WAF inspects using the following steps:
+ *
+ * - Create your logging destination. You can use an Amazon CloudWatch Logs log group, an Amazon Simple Storage Service (Amazon S3) bucket, or an Amazon Kinesis Data Firehose.
+ *
+ * The name that you give the destination must start with `aws-waf-logs-` . Depending on the type of destination, you might need to configure additional settings or permissions.
+ *
+ * For configuration requirements and pricing information for each destination type, see [Logging web ACL traffic](https://docs.aws.amazon.com/waf/latest/developerguide/logging.html) in the *AWS WAF Developer Guide* .
+ * - Associate your logging destination to your web ACL using a `PutLoggingConfiguration` request.
+ *
+ * When you successfully enable logging using a `PutLoggingConfiguration` request, AWS WAF creates an additional role or policy that is required to write logs to the logging destination. For an Amazon CloudWatch Logs log group, AWS WAF creates a resource policy on the log group. For an Amazon S3 bucket, AWS WAF creates a bucket policy. For an Amazon Kinesis Data Firehose, AWS WAF creates a service-linked role.
+ *
+ * For additional information about web ACL logging, see [Logging web ACL traffic information](https://docs.aws.amazon.com/waf/latest/developerguide/logging.html) in the *AWS WAF Developer Guide* .
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-loggingconfiguration.html}
+ */
+export type WAFv2LoggingConfigurationProps = {
+    /**
+     * The logging destination configuration that you want to associate with the web ACL.
+     *
+     * > You can associate one logging destination to a web ACL.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-loggingconfiguration.html#cfn-wafv2-loggingconfiguration-logdestinationconfigs}
+     */
+    LogDestinationConfigs: string[];
+    /**
+     * Filtering that specifies which web requests are kept in the logs and which are dropped. You can filter on the rule action and on the web request labels that were applied by matching rules during web ACL evaluation.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-loggingconfiguration.html#cfn-wafv2-loggingconfiguration-loggingfilter}
+     */
+    LoggingFilter?: {
+        /**
+         * Default handling for logs that don't match any of the specified filtering conditions.
+         */
+        DefaultBehavior: "KEEP" | "DROP";
+        /**
+         * The filters that you want to apply to the logs.
+         */
+        Filters: Filter[];
+    } | undefined;
+    /**
+     * The parts of the request that you want to keep out of the logs.
+     *
+     * For example, if you redact the `SingleHeader` field, the `HEADER` field in the logs will be `REDACTED` for all rules that use the `SingleHeader` `FieldToMatch` setting.
+     *
+     * If you configure data protection for the web ACL, the protection applies to the data that AWS WAF sends to the logs.
+     *
+     * Redaction applies only to the component that's specified in the rule's `FieldToMatch` setting, so the `SingleHeader` redaction doesn't apply to rules that use the `Headers` `FieldToMatch` .
+     *
+     * > You can specify only the following fields for redaction: `UriPath` , `QueryString` , `SingleHeader` , and `Method` . > This setting has no impact on request sampling. You can only exclude fields from request sampling by disabling sampling in the web ACL visibility configuration or by configuring data protection for the web ACL.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-loggingconfiguration.html#cfn-wafv2-loggingconfiguration-redactedfields}
+     */
+    RedactedFields?: FieldToMatch[] | undefined;
+    /**
+     * The Amazon Resource Name (ARN) of the web ACL that you want to associate with `LogDestinationConfigs` .
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-loggingconfiguration.html#cfn-wafv2-loggingconfiguration-resourcearn}
+     */
+    ResourceArn: string;
+};
+/**
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-loggingconfiguration.html#aws-resource-wafv2-loggingconfiguration-return-values}
+ */
+export type WAFv2LoggingConfigurationAttribs = {
+    /**
+     * Indicates whether the logging configuration was created by AWS Firewall Manager , as part of an AWS WAF policy configuration. If true, only Firewall Manager can modify or delete the configuration.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-loggingconfiguration.html#cfn-wafv2-loggingconfiguration-managedbyfirewallmanager}
+     */
+    ManagedByFirewallManager: boolean;
+};
+/**
+ * A single match condition for a log filter.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-loggingconfiguration-condition.html}
+ */
+export type Condition = {
+    /**
+     * A single action condition. This is the action setting that a log record must contain in order to meet the condition.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-loggingconfiguration-condition.html#cfn-wafv2-loggingconfiguration-condition-actioncondition}
+     */
+    ActionCondition?: {
+        /**
+         * Logic to apply to the filtering conditions. You can specify that, in order to satisfy the filter, a log must match all conditions or must match at least one condition.
+         */
+        Action: "ALLOW" | "BLOCK" | "COUNT" | "CAPTCHA" | "CHALLENGE" | "EXCLUDED_AS_COUNT";
+    } | undefined;
+    /**
+     * A single label name condition. This is the fully qualified label name that a log record must contain in order to meet the condition. Fully qualified labels have a prefix, optional namespaces, and label name. The prefix identifies the rule group or web ACL context of the rule that added the label.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-loggingconfiguration-condition.html#cfn-wafv2-loggingconfiguration-condition-labelnamecondition}
+     */
+    LabelNameCondition?: {
+        /**
+         * The label name that a log record must contain in order to meet the condition. This must be a fully qualified label name. Fully qualified labels have a prefix, optional namespaces, and label name. The prefix identifies the rule group or web ACL context of the rule that added the label.
+         */
+        LabelName: string;
+    } | undefined;
+};
+/**
+ * The parts of the request that you want to keep out of the logs. This is used in the logging configuration `RedactedFields` specification.
+ *
+ * Example JSON for a `QueryString` field to match:
+ *
+ * `"FieldToMatch": { "QueryString": {} }`
+ *
+ * Example JSON for a `Method` field to match specification:
+ *
+ * `"FieldToMatch": { "Method": { "Name": "DELETE" } }`
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-loggingconfiguration-fieldtomatch.html}
+ */
+export type FieldToMatch = {
+    /**
+     * Redact the indicated HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-loggingconfiguration-fieldtomatch.html#cfn-wafv2-loggingconfiguration-fieldtomatch-method}
+     */
+    Method?: Record<string, unknown> | undefined;
+    /**
+     * Redact the query string. This is the part of a URL that appears after a `?` character, if any.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-loggingconfiguration-fieldtomatch.html#cfn-wafv2-loggingconfiguration-fieldtomatch-querystring}
+     */
+    QueryString?: Record<string, unknown> | undefined;
+    /**
+     * Redact a single header. Provide the name of the header to inspect, for example, `User-Agent` or `Referer` . This setting isn't case sensitive.
+     *
+     * Example JSON: `"SingleHeader": { "Name": "haystack" }`
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-loggingconfiguration-fieldtomatch.html#cfn-wafv2-loggingconfiguration-fieldtomatch-singleheader}
+     */
+    SingleHeader?: {
+        /**
+         * The name of the query header to inspect.
+         */
+        Name: string;
+    } | undefined;
+    /**
+     * Redact the request URI path. This is the part of the web request that identifies a resource, for example, `/images/daily-ad.jpg` .
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-loggingconfiguration-fieldtomatch.html#cfn-wafv2-loggingconfiguration-fieldtomatch-uripath}
+     */
+    UriPath?: Record<string, unknown> | undefined;
+};
+/**
+ * A single logging filter, used in `LoggingFilter` .
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-loggingconfiguration-filter.html}
+ */
+export type Filter = {
+    /**
+     * How to handle logs that satisfy the filter's conditions and requirement.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-loggingconfiguration-filter.html#cfn-wafv2-loggingconfiguration-filter-behavior}
+     */
+    Behavior: "KEEP" | "DROP";
+    /**
+     * Match conditions for the filter.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-loggingconfiguration-filter.html#cfn-wafv2-loggingconfiguration-filter-conditions}
+     */
+    Conditions: Condition[];
+    /**
+     * Logic to apply to the filtering conditions. You can specify that, in order to satisfy the filter, a log must match all conditions or must match at least one condition.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-loggingconfiguration-filter.html#cfn-wafv2-loggingconfiguration-filter-requirement}
+     */
+    Requirement: "MEETS_ALL" | "MEETS_ANY";
+};
+//# sourceMappingURL=aws-wafv2-loggingconfiguration.d.ts.map

package/out/exports/resources.generated/aws-wafv2-regexpatternset.d.ts

@@ -0,0 +1,68 @@
+import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
+/**
+ * > This is the latest version of *AWS WAF* , named AWS WAF V2, released in November, 2019. For information, including how to migrate your AWS WAF resources from the prior release, see the [AWS WAF developer guide](https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html) .
+ *
+ * Use an `RegexPatternSet` to have AWS WAF inspect a web request component for a specific set of regular expression patterns.
+ *
+ * You use a regex pattern set by providing its Amazon Resource Name (ARN) to the rule statement `RegexPatternSetReferenceStatement` , when you add a rule to a rule group or web ACL.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-regexpatternset.html}
+ */
+export type WAFv2RegexPatternSet = ResourceDefinitionWithAttributes<"AWS::WAFv2::RegexPatternSet", WAFv2RegexPatternSetProps, WAFv2RegexPatternSetAttribs>;
+/**
+ * > This is the latest version of *AWS WAF* , named AWS WAF V2, released in November, 2019. For information, including how to migrate your AWS WAF resources from the prior release, see the [AWS WAF developer guide](https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html) .
+ *
+ * Use an `RegexPatternSet` to have AWS WAF inspect a web request component for a specific set of regular expression patterns.
+ *
+ * You use a regex pattern set by providing its Amazon Resource Name (ARN) to the rule statement `RegexPatternSetReferenceStatement` , when you add a rule to a rule group or web ACL.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-regexpatternset.html}
+ */
+export type WAFv2RegexPatternSetProps = {
+    /**
+     * A description of the set that helps with identification.
+     * @pattern ^[a-zA-Z0-9=:#@/\-,.][a-zA-Z0-9+=:#@/\-,.\s]+[a-zA-Z0-9+=:#@/\-,.]{1,256}$
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-regexpatternset.html#cfn-wafv2-regexpatternset-description}
+     */
+    Description?: string | undefined;
+    /**
+     * The name of the set. You cannot change the name after you create the set.
+     * @pattern ^[0-9A-Za-z_-]{1,128}$
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-regexpatternset.html#cfn-wafv2-regexpatternset-name}
+     */
+    Name?: string | undefined;
+    /**
+     * The regular expression patterns in the set.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-regexpatternset.html#cfn-wafv2-regexpatternset-regularexpressionlist}
+     */
+    RegularExpressionList: string[];
+    /**
+     * Specifies whether this is for an Amazon CloudFront distribution or for a regional application. For an AWS Amplify application, use `CLOUDFRONT` . A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AWS AppSync GraphQL API, an Amazon Cognito user pool, an AWS App Runner service, or an AWS Verified Access instance. Valid Values are `CLOUDFRONT` and `REGIONAL` .
+     *
+     * > For `CLOUDFRONT` , you must create your WAFv2 resources in the US East (N. Virginia) Region, `us-east-1` .
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-regexpatternset.html#cfn-wafv2-regexpatternset-scope}
+     */
+    Scope: "CLOUDFRONT" | "REGIONAL";
+    /**
+     * Key:value pairs associated with an AWS resource. The key:value pair can be anything you define. Typically, the tag key represents a category (such as "environment") and the tag value represents a specific value within that category (such as "test," "development," or "production"). You can add up to 50 tags to each AWS resource.
+     *
+     * > To modify tags on existing resources, use the AWS WAF APIs or command line interface. With AWS CloudFormation , you can only add tags to AWS WAF resources during resource creation.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-regexpatternset.html#cfn-wafv2-regexpatternset-tags}
+     */
+    Tags?: Tag[] | undefined;
+};
+/**
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-regexpatternset.html#aws-resource-wafv2-regexpatternset-return-values}
+ */
+export type WAFv2RegexPatternSetAttribs = {
+    /**
+     * The Amazon Resource Name (ARN) of the regex pattern set.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-regexpatternset.html#cfn-wafv2-regexpatternset-arn}
+     */
+    Arn: string;
+    /**
+     * The ID of the regex pattern set.
+     * @pattern ^[0-9a-f]{8}-(?:[0-9a-f]{4}-){3}[0-9a-f]{12}$
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-regexpatternset.html#cfn-wafv2-regexpatternset-id}
+     */
+    Id: string;
+};
+//# sourceMappingURL=aws-wafv2-regexpatternset.d.ts.map