@propulsionworks/cloudformation 0.1.0 → 0.1.2

package/out/exports/resources.generated/aws-transfer-webapp.d.ts

@@ -1,7 +1,12 @@
 import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
+/**
+ * Creates a web app based on specified parameters, and returns the ID for the new web app.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-webapp.html}
+ */
 export type TransferWebApp = ResourceDefinitionWithAttributes<"AWS::Transfer::WebApp", TransferWebAppProps, TransferWebAppAttribs>;
 /**
  * Creates a web app based on specified parameters, and returns the ID for the new web app.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-webapp.html}
  */
 export type TransferWebAppProps = {
     /**
@@ -10,39 +15,49 @@ export type TransferWebAppProps = {
      * Before you enter a custom URL for this parameter, follow the steps described in [Update your access endpoint with a custom URL](https://docs.aws.amazon.com//transfer/latest/userguide/webapp-customize.html) .
      * @minLength 1
      * @maxLength 1024
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-webapp.html#cfn-transfer-webapp-accessendpoint}
      */
     AccessEndpoint?: string | undefined;
     /**
      * You can provide a structure that contains the details for the identity provider to use with your web app.
      *
      * For more details about this parameter, see [Configure your identity provider for Transfer Family web apps](https://docs.aws.amazon.com//transfer/latest/userguide/webapp-identity-center.html) .
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-webapp.html#cfn-transfer-webapp-identityproviderdetails}
      */
     IdentityProviderDetails: IdentityProviderDetails;
     /**
      * Key-value pairs that can be used to group and search for web apps. Tags are metadata attached to web apps for any purpose.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-webapp.html#cfn-transfer-webapp-tags}
      */
     Tags?: Tag[] | undefined;
     /**
      * A structure that contains the customization fields for the web app. You can provide a title, logo, and icon to customize the appearance of your web app.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-webapp.html#cfn-transfer-webapp-webappcustomization}
      */
     WebAppCustomization?: WebAppCustomization | undefined;
     /**
      * Setting for the type of endpoint policy for the web app. The default value is `STANDARD` .
      *
      * If your web app was created in an AWS GovCloud (US) Region , the value of this parameter can be `FIPS` , which indicates the web app endpoint is FIPS-compliant.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-webapp.html#cfn-transfer-webapp-webappendpointpolicy}
      */
     WebAppEndpointPolicy?: WebAppEndpointPolicy | undefined;
     /**
      * A union that contains the value for number of concurrent connections or the user sessions on your web app.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-webapp.html#cfn-transfer-webapp-webappunits}
      */
     WebAppUnits?: WebAppUnits | undefined;
 };
+/**
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-webapp.html#aws-resource-transfer-webapp-return-values}
+ */
 export type TransferWebAppAttribs = {
     /**
      * The Amazon Resource Name (ARN) of the web app.
      * @minLength 20
      * @maxLength 1600
      * @pattern arn:.*
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-webapp.html#cfn-transfer-webapp-arn}
      */
     Arn: string;
     /**
@@ -50,6 +65,7 @@ export type TransferWebAppAttribs = {
      * @minLength 10
      * @maxLength 1224
      * @pattern ^arn:[\w-]+:sso::\d{12}:application/(sso)?ins-[a-zA-Z0-9-.]{16}/apl-[a-zA-Z0-9]{16}$
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-transfer-webapp-identityproviderdetails.html#cfn-transfer-webapp-identityproviderdetails-applicationarn}
      */
     "IdentityProviderDetails.ApplicationArn": string;
     /**
@@ -57,11 +73,13 @@ export type TransferWebAppAttribs = {
      * @minLength 24
      * @maxLength 24
      * @pattern ^webapp-([0-9a-f]{17})$
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-webapp.html#cfn-transfer-webapp-webappid}
      */
     WebAppId: string;
 };
 /**
  * A structure that describes the values to use for the IAM Identity Center settings when you create or update a web app.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-transfer-webapp-identityproviderdetails.html}
  */
 export type IdentityProviderDetails = {
     /**
@@ -69,6 +87,7 @@ export type IdentityProviderDetails = {
      * @minLength 10
      * @maxLength 1224
      * @pattern ^arn:[\w-]+:sso:::instance/(sso)?ins-[a-zA-Z0-9-.]{16}$
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-transfer-webapp-identityproviderdetails.html#cfn-transfer-webapp-identityproviderdetails-instancearn}
      */
     InstanceArn?: string | undefined;
     /**
@@ -76,35 +95,44 @@ export type IdentityProviderDetails = {
      * @minLength 20
      * @maxLength 2048
      * @pattern ^arn:[a-z-]+:iam::[0-9]{12}:role[:/]\S+$
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-transfer-webapp-identityproviderdetails.html#cfn-transfer-webapp-identityproviderdetails-role}
      */
     Role?: string | undefined;
 };
 /**
  * A structure that contains the customization fields for the web app. You can provide a title, logo, and icon to customize the appearance of your web app.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-transfer-webapp-webappcustomization.html}
  */
 export type WebAppCustomization = {
     /**
      * Returns an icon file data string (in base64 encoding).
      * @minLength 1
      * @maxLength 20960
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-transfer-webapp-webappcustomization.html#cfn-transfer-webapp-webappcustomization-faviconfile}
      */
     FaviconFile?: string | undefined;
     /**
      * Returns a logo file data string (in base64 encoding).
      * @minLength 1
      * @maxLength 51200
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-transfer-webapp-webappcustomization.html#cfn-transfer-webapp-webappcustomization-logofile}
      */
     LogoFile?: string | undefined;
     /**
      * Returns the page title that you defined for your web app.
      * @minLength 0
      * @maxLength 100
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-transfer-webapp-webappcustomization.html#cfn-transfer-webapp-webappcustomization-title}
      */
     Title?: string | undefined;
 };
+/**
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-transfer-webapp-webappendpointpolicy.html}
+ */
 export type WebAppEndpointPolicy = "STANDARD" | "FIPS";
 /**
  * Contains an integer value that represents the value for number of concurrent connections or the user sessions on your web app.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-transfer-webapp-webappunits.html}
  */
 export type WebAppUnits = {
     /**

package/out/exports/resources.generated/aws-transfer-workflow.d.ts

@@ -1,7 +1,12 @@
 import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
+/**
+ * Allows you to create a workflow with specified steps and step details the workflow invokes after file transfer completes. After creating a workflow, you can associate the workflow created with any transfer servers by specifying the `workflow-details` field in `CreateServer` and `UpdateServer` operations.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-workflow.html}
+ */
 export type TransferWorkflow = ResourceDefinitionWithAttributes<"AWS::Transfer::Workflow", TransferWorkflowProps, TransferWorkflowAttribs>;
 /**
  * Allows you to create a workflow with specified steps and step details the workflow invokes after file transfer completes. After creating a workflow, you can associate the workflow created with any transfer servers by specifying the `workflow-details` field in `CreateServer` and `UpdateServer` operations.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-workflow.html}
  */
 export type TransferWorkflowProps = {
     /**
@@ -9,27 +14,35 @@ export type TransferWorkflowProps = {
      * @minLength 0
      * @maxLength 256
      * @pattern ^[\w\- ]*$
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-workflow.html#cfn-transfer-workflow-description}
      */
     Description?: string | undefined;
     /**
      * Specifies the steps (actions) to take if errors are encountered during execution of the workflow.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-workflow.html#cfn-transfer-workflow-onexceptionsteps}
      */
     OnExceptionSteps?: WorkflowStep[] | undefined;
     /**
      * Specifies the details for the steps that are in the specified workflow.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-workflow.html#cfn-transfer-workflow-steps}
      */
     Steps: WorkflowStep[];
     /**
      * Key-value pairs that can be used to group and search for workflows. Tags are metadata attached to workflows for any purpose.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-workflow.html#cfn-transfer-workflow-tags}
      */
     Tags?: Tag[] | undefined;
 };
+/**
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-workflow.html#aws-resource-transfer-workflow-return-values}
+ */
 export type TransferWorkflowAttribs = {
     /**
      * Specifies the unique Amazon Resource Name (ARN) for the workflow.
      * @minLength 20
      * @maxLength 1600
      * @pattern arn:.*
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-workflow.html#cfn-transfer-workflow-arn}
      */
     Arn: string;
     /**
@@ -37,11 +50,13 @@ export type TransferWorkflowAttribs = {
      * @minLength 19
      * @maxLength 19
      * @pattern ^w-([a-z0-9]{17})$
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-workflow.html#cfn-transfer-workflow-workflowid}
      */
     WorkflowId: string;
 };
 /**
  * Specifies the Amazon EFS identifier and the path for the file being used.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-transfer-workflow-efsinputfilelocation.html}
  */
 export type EfsInputFileLocation = {
     /**
@@ -49,6 +64,7 @@ export type EfsInputFileLocation = {
      * @minLength 0
      * @maxLength 128
      * @pattern ^(arn:aws[-a-z]*:elasticfilesystem:[0-9a-z-:]+:(access-point/fsap|file-system/fs)-[0-9a-f]{8,40}|fs(ap)?-[0-9a-f]{8,40})$
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-transfer-workflow-efsinputfilelocation.html#cfn-transfer-workflow-efsinputfilelocation-filesystemid}
      */
     FileSystemId?: string | undefined;
     /**
@@ -56,33 +72,40 @@ export type EfsInputFileLocation = {
      * @minLength 1
      * @maxLength 65536
      * @pattern ^[^\x00]+$
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-transfer-workflow-efsinputfilelocation.html#cfn-transfer-workflow-efsinputfilelocation-path}
      */
     Path?: string | undefined;
 };
 /**
  * Specifies the location for the file that's being processed.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-transfer-workflow-inputfilelocation.html}
  */
 export type InputFileLocation = {
     /**
      * Specifies the details for the Amazon Elastic File System (Amazon EFS) file that's being decrypted.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-transfer-workflow-inputfilelocation.html#cfn-transfer-workflow-inputfilelocation-efsfilelocation}
      */
     EfsFileLocation?: EfsInputFileLocation | undefined;
     /**
      * Specifies the details for the Amazon S3 file that's being copied or decrypted.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-transfer-workflow-inputfilelocation.html#cfn-transfer-workflow-inputfilelocation-s3filelocation}
      */
     S3FileLocation?: S3InputFileLocation | undefined;
 };
 /**
  * Specifies the S3 details for the file being used, such as bucket, ETag, and so forth.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-transfer-workflow-s3filelocation.html}
  */
 export type S3FileLocation = {
     /**
      * Specifies the details for the file location for the file that's being used in the workflow. Only applicable if you are using Amazon S3 storage.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-transfer-workflow-s3filelocation.html#cfn-transfer-workflow-s3filelocation-s3filelocation}
      */
     S3FileLocation?: S3InputFileLocation | undefined;
 };
 /**
  * Specifies the details for the Amazon S3 location for an input file to a workflow.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-transfer-workflow-s3inputfilelocation.html}
  */
 export type S3InputFileLocation = {
     /**
@@ -90,6 +113,7 @@ export type S3InputFileLocation = {
      * @minLength 3
      * @maxLength 63
      * @pattern ^[a-z0-9][\.\-a-z0-9]{1,61}[a-z0-9]$
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-transfer-workflow-s3inputfilelocation.html#cfn-transfer-workflow-s3inputfilelocation-bucket}
      */
     Bucket?: string | undefined;
     /**
@@ -97,11 +121,13 @@ export type S3InputFileLocation = {
      * @minLength 0
      * @maxLength 1024
      * @pattern .*
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-transfer-workflow-s3inputfilelocation.html#cfn-transfer-workflow-s3inputfilelocation-key}
      */
     Key?: string | undefined;
 };
 /**
  * The basic building block of a workflow.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-transfer-workflow-workflowstep.html}
  */
 export type WorkflowStep = {
     /**
@@ -112,6 +138,7 @@ export type WorkflowStep = {
      * - A description
      * - An Amazon S3 location for the destination of the file copy.
      * - A flag that indicates whether to overwrite an existing file of the same name. The default is `FALSE` .
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-transfer-workflow-workflowstep.html#cfn-transfer-workflow-workflowstep-copystepdetails}
      */
     CopyStepDetails?: {
         DestinationFileLocation?: S3FileLocation | undefined;
@@ -138,6 +165,7 @@ export type WorkflowStep = {
      * Details for a step that invokes an AWS Lambda function.
      *
      * Consists of the Lambda function's name, target, and timeout (in seconds).
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-transfer-workflow-workflowstep.html#cfn-transfer-workflow-workflowstep-customstepdetails}
      */
     CustomStepDetails?: {
         /**
@@ -178,6 +206,7 @@ export type WorkflowStep = {
      * - An S3 or Amazon EFS location for the destination of the file decryption.
      * - A flag that indicates whether to overwrite an existing file of the same name. The default is `FALSE` .
      * - The type of encryption that's used. Currently, only PGP encryption is supported.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-transfer-workflow-workflowstep.html#cfn-transfer-workflow-workflowstep-decryptstepdetails}
      */
     DecryptStepDetails?: {
         DestinationFileLocation: InputFileLocation;
@@ -206,6 +235,7 @@ export type WorkflowStep = {
     } | undefined;
     /**
      * Details for a step that deletes the file.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-transfer-workflow-workflowstep.html#cfn-transfer-workflow-workflowstep-deletestepdetails}
      */
     DeleteStepDetails?: {
         /**
@@ -227,6 +257,7 @@ export type WorkflowStep = {
      * Details for a step that creates one or more tags.
      *
      * You specify one or more tags. Each tag contains a key-value pair.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-transfer-workflow-workflowstep.html#cfn-transfer-workflow-workflowstep-tagstepdetails}
      */
     TagStepDetails?: {
         /**
@@ -256,6 +287,7 @@ export type WorkflowStep = {
      * - *`DECRYPT`* - Decrypt a file that was encrypted before it was uploaded.
      * - *`DELETE`* - Delete the file.
      * - *`TAG`* - Add a tag to the file.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-transfer-workflow-workflowstep.html#cfn-transfer-workflow-workflowstep-type}
      */
     Type?: "COPY" | "CUSTOM" | "DECRYPT" | "DELETE" | "TAG" | undefined;
 };

package/out/exports/resources.generated/aws-verifiedpermissions-identitysource.d.ts

@@ -1,4 +1,20 @@
 import type { ResourceDefinitionWithAttributes } from "../main.ts";
+/**
+ * Creates or updates a reference to Amazon Cognito as an external identity provider.
+ *
+ * If you are creating a new identity source, then you must specify a `Configuration` . If you are updating an existing identity source, then you must specify an `UpdateConfiguration` .
+ *
+ * After you create an identity source, you can use the identities provided by the IdP as proxies for the principal in authorization queries that use the [IsAuthorizedWithToken](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html) operation. These identities take the form of tokens that contain claims about the user, such as IDs, attributes and group memberships. Amazon Cognito provides both identity tokens and access tokens, and Verified Permissions can use either or both. Any combination of identity and access tokens results in the same Cedar principal. Verified Permissions automatically translates the information about the identities into the standard Cedar attributes that can be evaluated by your policies. Because the Amazon Cognito identity and access tokens can contain different information, the tokens you choose to use determine the attributes that are available to access in the Cedar principal from your policies.
+ *
+ * Amazon Cognito Identity is not available in all of the same AWS Regions as Amazon Verified Permissions . Because of this, the `AWS::VerifiedPermissions::IdentitySource` type is not available to create from AWS CloudFormation in Regions where Amazon Cognito Identity is not currently available. Users can still create `AWS::VerifiedPermissions::IdentitySource` in those Regions, but only from the AWS CLI , Amazon Verified Permissions SDK, or from the AWS console.
+ *
+ * > To reference a user from this identity source in your Cedar policies, use the following syntax.
+ * >
+ * > *IdentityType::"<CognitoUserPoolIdentifier>|<CognitoClientId>*
+ * >
+ * > Where `IdentityType` is the string that you provide to the `PrincipalEntityType` parameter for this operation. The `CognitoUserPoolId` and `CognitoClientId` are defined by the Amazon Cognito user pool.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-verifiedpermissions-identitysource.html}
+ */
 export type VerifiedPermissionsIdentitySource = ResourceDefinitionWithAttributes<"AWS::VerifiedPermissions::IdentitySource", VerifiedPermissionsIdentitySourceProps, VerifiedPermissionsIdentitySourceAttribs>;
 /**
  * Creates or updates a reference to Amazon Cognito as an external identity provider.
@@ -14,10 +30,12 @@ export type VerifiedPermissionsIdentitySource = ResourceDefinitionWithAttributes
  * > *IdentityType::"<CognitoUserPoolIdentifier>|<CognitoClientId>*
  * >
  * > Where `IdentityType` is the string that you provide to the `PrincipalEntityType` parameter for this operation. The `CognitoUserPoolId` and `CognitoClientId` are defined by the Amazon Cognito user pool.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-verifiedpermissions-identitysource.html}
  */
 export type VerifiedPermissionsIdentitySourceProps = {
     /**
      * Contains configuration information used when creating a new identity source.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-verifiedpermissions-identitysource.html#cfn-verifiedpermissions-identitysource-configuration}
      */
     Configuration: IdentitySourceConfiguration;
     /**
@@ -25,6 +43,7 @@ export type VerifiedPermissionsIdentitySourceProps = {
      * @minLength 1
      * @maxLength 200
      * @pattern ^[a-zA-Z0-9-]*$
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-verifiedpermissions-identitysource.html#cfn-verifiedpermissions-identitysource-policystoreid}
      */
     PolicyStoreId: string;
     /**
@@ -32,20 +51,26 @@ export type VerifiedPermissionsIdentitySourceProps = {
      * @minLength 1
      * @maxLength 200
      * @pattern ^.*$
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-verifiedpermissions-identitysource.html#cfn-verifiedpermissions-identitysource-principalentitytype}
      */
     PrincipalEntityType?: string | undefined;
 };
+/**
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-verifiedpermissions-identitysource.html#aws-resource-verifiedpermissions-identitysource-return-values}
+ */
 export type VerifiedPermissionsIdentitySourceAttribs = {
     /**
      * The unique ID of the new or updated identity store.
      * @minLength 1
      * @maxLength 200
      * @pattern ^[a-zA-Z0-9-]*$
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-verifiedpermissions-identitysource.html#cfn-verifiedpermissions-identitysource-identitysourceid}
      */
     IdentitySourceId: string;
 };
 /**
  * The type of entity that a policy store maps to groups from an Amazon Cognito user pool identity source.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-verifiedpermissions-identitysource-cognitogroupconfiguration.html}
  */
 export type CognitoGroupConfiguration = {
     /**
@@ -53,21 +78,25 @@ export type CognitoGroupConfiguration = {
      * @minLength 1
      * @maxLength 200
      * @pattern ^([_a-zA-Z][_a-zA-Z0-9]*::)*[_a-zA-Z][_a-zA-Z0-9]*$
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-verifiedpermissions-identitysource-cognitogroupconfiguration.html#cfn-verifiedpermissions-identitysource-cognitogroupconfiguration-groupentitytype}
      */
     GroupEntityType: string;
 };
 /**
  * A structure that contains configuration information used when creating or updating an identity source that represents a connection to an Amazon Cognito user pool used as an identity provider for Verified Permissions .
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-verifiedpermissions-identitysource-cognitouserpoolconfiguration.html}
  */
 export type CognitoUserPoolConfiguration = {
     /**
      * The unique application client IDs that are associated with the specified Amazon Cognito user pool.
      *
      * Example: `"ClientIds": ["&ExampleCogClientId;"]`
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-verifiedpermissions-identitysource-cognitouserpoolconfiguration.html#cfn-verifiedpermissions-identitysource-cognitouserpoolconfiguration-clientids}
      */
     ClientIds?: string[] | undefined;
     /**
      * The type of entity that a policy store maps to groups from an Amazon Cognito user pool identity source.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-verifiedpermissions-identitysource-cognitouserpoolconfiguration.html#cfn-verifiedpermissions-identitysource-cognitouserpoolconfiguration-groupconfiguration}
      */
     GroupConfiguration?: CognitoGroupConfiguration | undefined;
     /**
@@ -75,6 +104,7 @@ export type CognitoUserPoolConfiguration = {
      * @minLength 1
      * @maxLength 255
      * @pattern ^arn:[a-zA-Z0-9-]+:cognito-idp:(([a-zA-Z0-9-]+:\d{12}:userpool/[\w-]+_[0-9a-zA-Z]+))$
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-verifiedpermissions-identitysource-cognitouserpoolconfiguration.html#cfn-verifiedpermissions-identitysource-cognitouserpoolconfiguration-userpoolarn}
      */
     UserPoolArn: string;
 };
@@ -84,6 +114,7 @@ export type CognitoUserPoolConfiguration = {
  * > At this time, the only valid member of this structure is a Amazon Cognito user pool configuration.
  * >
  * > You must specify a `userPoolArn` , and optionally, a `ClientId` .
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-verifiedpermissions-identitysource-identitysourceconfiguration.html}
  */
 export type IdentitySourceConfiguration = {
     CognitoUserPoolConfiguration: CognitoUserPoolConfiguration;
@@ -94,16 +125,19 @@ export type IdentitySourceConfiguration = {
  * The configuration of an OpenID Connect (OIDC) identity source for handling access token claims. Contains the claim that you want to identify as the principal in an authorization request, and the values of the `aud` claim, or audiences, that you want to accept.
  *
  * This data type is part of a [OpenIdConnectTokenSelection](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_OpenIdConnectTokenSelection.html) structure, which is a parameter of [CreateIdentitySource](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_CreateIdentitySource.html) .
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-verifiedpermissions-identitysource-openidconnectaccesstokenconfiguration.html}
  */
 export type OpenIdConnectAccessTokenConfiguration = {
     /**
      * The access token `aud` claim values that you want to accept in your policy store. For example, `https://myapp.example.com, https://myapp2.example.com` .
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-verifiedpermissions-identitysource-openidconnectaccesstokenconfiguration.html#cfn-verifiedpermissions-identitysource-openidconnectaccesstokenconfiguration-audiences}
      */
     Audiences?: string[] | undefined;
     /**
      * The claim that determines the principal in OIDC access tokens. For example, `sub` .
      * @minLength 1
      * @default "sub"
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-verifiedpermissions-identitysource-openidconnectaccesstokenconfiguration.html#cfn-verifiedpermissions-identitysource-openidconnectaccesstokenconfiguration-principalidclaim}
      */
     PrincipalIdClaim?: string | undefined;
 };
@@ -111,16 +145,19 @@ export type OpenIdConnectAccessTokenConfiguration = {
  * Contains configuration details of an OpenID Connect (OIDC) identity provider, or identity source, that Verified Permissions can use to generate entities from authenticated identities. It specifies the issuer URL, token type that you want to use, and policy store entity details.
  *
  * This data type is part of a [Configuration](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_Configuration.html) structure, which is a parameter to [CreateIdentitySource](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_CreateIdentitySource.html) .
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-verifiedpermissions-identitysource-openidconnectconfiguration.html}
  */
 export type OpenIdConnectConfiguration = {
     /**
      * A descriptive string that you want to prefix to user entities from your OIDC identity provider. For example, if you set an `entityIdPrefix` of `MyOIDCProvider` , you can reference principals in your policies in the format `MyCorp::User::MyOIDCProvider|Carlos` .
      * @minLength 1
      * @maxLength 100
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-verifiedpermissions-identitysource-openidconnectconfiguration.html#cfn-verifiedpermissions-identitysource-openidconnectconfiguration-entityidprefix}
      */
     EntityIdPrefix?: string | undefined;
     /**
      * The claim in OIDC identity provider tokens that indicates a user's group membership, and the entity type that you want to map it to. For example, this object can map the contents of a `groups` claim to `MyCorp::UserGroup` .
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-verifiedpermissions-identitysource-openidconnectconfiguration.html#cfn-verifiedpermissions-identitysource-openidconnectconfiguration-groupconfiguration}
      */
     GroupConfiguration?: OpenIdConnectGroupConfiguration | undefined;
     /**
@@ -128,10 +165,12 @@ export type OpenIdConnectConfiguration = {
      * @minLength 1
      * @maxLength 2048
      * @pattern ^https://.*$
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-verifiedpermissions-identitysource-openidconnectconfiguration.html#cfn-verifiedpermissions-identitysource-openidconnectconfiguration-issuer}
      */
     Issuer: string;
     /**
      * The token type that you want to process from your OIDC identity provider. Your policy store can process either identity (ID) or access tokens from a given OIDC identity source.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-verifiedpermissions-identitysource-openidconnectconfiguration.html#cfn-verifiedpermissions-identitysource-openidconnectconfiguration-tokenselection}
      */
     TokenSelection: OpenIdConnectTokenSelection;
 };
@@ -139,11 +178,13 @@ export type OpenIdConnectConfiguration = {
  * The claim in OIDC identity provider tokens that indicates a user's group membership, and the entity type that you want to map it to. For example, this object can map the contents of a `groups` claim to `MyCorp::UserGroup` .
  *
  * This data type is part of a [OpenIdConnectConfiguration](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_OpenIdConnectConfiguration.html) structure, which is a parameter of [CreateIdentitySource](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_CreateIdentitySource.html) .
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-verifiedpermissions-identitysource-openidconnectgroupconfiguration.html}
  */
 export type OpenIdConnectGroupConfiguration = {
     /**
      * The token claim that you want Verified Permissions to interpret as group membership. For example, `groups` .
      * @minLength 1
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-verifiedpermissions-identitysource-openidconnectgroupconfiguration.html#cfn-verifiedpermissions-identitysource-openidconnectgroupconfiguration-groupclaim}
      */
     GroupClaim: string;
     /**
@@ -151,6 +192,7 @@ export type OpenIdConnectGroupConfiguration = {
      * @minLength 1
      * @maxLength 200
      * @pattern ^([_a-zA-Z][_a-zA-Z0-9]*::)*[_a-zA-Z][_a-zA-Z0-9]*$
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-verifiedpermissions-identitysource-openidconnectgroupconfiguration.html#cfn-verifiedpermissions-identitysource-openidconnectgroupconfiguration-groupentitytype}
      */
     GroupEntityType: string;
 };
@@ -158,16 +200,19 @@ export type OpenIdConnectGroupConfiguration = {
  * The configuration of an OpenID Connect (OIDC) identity source for handling identity (ID) token claims. Contains the claim that you want to identify as the principal in an authorization request, and the values of the `aud` claim, or audiences, that you want to accept.
  *
  * This data type is part of a [OpenIdConnectTokenSelection](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_OpenIdConnectTokenSelection.html) structure, which is a parameter of [CreateIdentitySource](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_CreateIdentitySource.html) .
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-verifiedpermissions-identitysource-openidconnectidentitytokenconfiguration.html}
  */
 export type OpenIdConnectIdentityTokenConfiguration = {
     /**
      * The ID token audience, or client ID, claim values that you want to accept in your policy store from an OIDC identity provider. For example, `1example23456789, 2example10111213` .
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-verifiedpermissions-identitysource-openidconnectidentitytokenconfiguration.html#cfn-verifiedpermissions-identitysource-openidconnectidentitytokenconfiguration-clientids}
      */
     ClientIds?: string[] | undefined;
     /**
      * The claim that determines the principal in OIDC access tokens. For example, `sub` .
      * @minLength 1
      * @default "sub"
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-verifiedpermissions-identitysource-openidconnectidentitytokenconfiguration.html#cfn-verifiedpermissions-identitysource-openidconnectidentitytokenconfiguration-principalidclaim}
      */
     PrincipalIdClaim?: string | undefined;
 };
@@ -175,6 +220,7 @@ export type OpenIdConnectIdentityTokenConfiguration = {
  * The token type that you want to process from your OIDC identity provider. Your policy store can process either identity (ID) or access tokens from a given OIDC identity source.
  *
  * This data type is part of a [OpenIdConnectConfiguration](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_OpenIdConnectConfiguration.html) structure, which is a parameter of [CreateIdentitySource](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_CreateIdentitySource.html) .
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-verifiedpermissions-identitysource-openidconnecttokenselection.html}
  */
 export type OpenIdConnectTokenSelection = {
     AccessTokenOnly: OpenIdConnectAccessTokenConfiguration;