@propulsionworks/cloudformation 0.1.20 → 0.1.22
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/out/exports/resources.generated/aws-apigateway-deployment.d.ts +1 -1
- package/out/exports/resources.generated/aws-appconfig-configurationprofile.d.ts +3 -3
- package/out/exports/resources.generated/aws-appconfig-deployment.d.ts +5 -0
- package/out/exports/resources.generated/aws-appintegrations-application.d.ts +52 -0
- package/out/exports/resources.generated/aws-aps-resourcepolicy.d.ts +22 -0
- package/out/exports/resources.generated/aws-arcregionswitch-plan.d.ts +132 -0
- package/out/exports/resources.generated/aws-athena-datacatalog.d.ts +15 -6
- package/out/exports/resources.generated/aws-athena-workgroup.d.ts +3 -3
- package/out/exports/resources.generated/aws-batch-jobdefinition.d.ts +2 -2
- package/out/exports/resources.generated/aws-batch-jobqueue.d.ts +7 -0
- package/out/exports/resources.generated/aws-batch-serviceenvironment.d.ts +1 -1
- package/out/exports/resources.generated/aws-billingconductor-customlineitem.d.ts +2 -2
- package/out/exports/resources.generated/aws-cloudfront-distribution.d.ts +4 -0
- package/out/exports/resources.generated/aws-codebuild-project.d.ts +17 -0
- package/out/exports/resources.generated/aws-codepipeline-webhook.d.ts +1 -0
- package/out/exports/resources.generated/aws-connect-user.d.ts +5 -0
- package/out/exports/resources.generated/aws-deadline-fleet.d.ts +16 -0
- package/out/exports/resources.generated/aws-deadline-monitor.d.ts +6 -1
- package/out/exports/resources.generated/aws-docdb-dbcluster.d.ts +5 -1
- package/out/exports/resources.generated/aws-dynamodb-globaltable.d.ts +4 -0
- package/out/exports/resources.generated/aws-dynamodb-table.d.ts +4 -0
- package/out/exports/resources.generated/aws-ec2-ec2fleet.d.ts +1 -1
- package/out/exports/resources.generated/aws-ec2-ippoolroutetableassociation.d.ts +33 -0
- package/out/exports/resources.generated/aws-ec2-launchtemplate.d.ts +7 -53
- package/out/exports/resources.generated/aws-ec2-natgateway.d.ts +1 -1
- package/out/exports/resources.generated/aws-ec2-transitgatewayconnectpeer.d.ts +5 -4
- package/out/exports/resources.generated/aws-ec2-volume.d.ts +2 -0
- package/out/exports/resources.generated/aws-ecr-repository.d.ts +2 -0
- package/out/exports/resources.generated/aws-ecr-repositorycreationtemplate.d.ts +2 -2
- package/out/exports/resources.generated/aws-ecs-capacityprovider.d.ts +0 -2
- package/out/exports/resources.generated/aws-eks-addon.d.ts +10 -0
- package/out/exports/resources.generated/aws-eks-cluster.d.ts +5 -0
- package/out/exports/resources.generated/aws-elasticloadbalancingv2-loadbalancer.d.ts +2 -1
- package/out/exports/resources.generated/aws-entityresolution-matchingworkflow.d.ts +16 -0
- package/out/exports/resources.generated/aws-evs-environment.d.ts +1 -9
- package/out/exports/resources.generated/aws-fsx-filesystem.d.ts +8 -0
- package/out/exports/resources.generated/aws-glue-job.d.ts +19 -8
- package/out/exports/resources.generated/aws-glue-tableoptimizer.d.ts +18 -1
- package/out/exports/resources.generated/aws-guardduty-threatentityset.d.ts +89 -0
- package/out/exports/resources.generated/aws-guardduty-trustedentityset.d.ts +89 -0
- package/out/exports/resources.generated/aws-imagebuilder-component.d.ts +1 -1
- package/out/exports/resources.generated/aws-imagebuilder-containerrecipe.d.ts +2 -2
- package/out/exports/resources.generated/aws-imagebuilder-distributionconfiguration.d.ts +1 -1
- package/out/exports/resources.generated/aws-imagebuilder-imagerecipe.d.ts +4 -2
- package/out/exports/resources.generated/aws-imagebuilder-workflow.d.ts +1 -1
- package/out/exports/resources.generated/aws-inspectorv2-codesecurityintegration.d.ts +160 -0
- package/out/exports/resources.generated/aws-inspectorv2-codesecurityscanconfiguration.d.ts +121 -0
- package/out/exports/resources.generated/aws-iot-mitigationaction.d.ts +2 -2
- package/out/exports/resources.generated/aws-iotsitewise-assetmodel.d.ts +46 -2
- package/out/exports/resources.generated/aws-ivs-playbackrestrictionpolicy.d.ts +2 -2
- package/out/exports/resources.generated/aws-ivs-stage.d.ts +54 -0
- package/out/exports/resources.generated/aws-kinesisfirehose-deliverystream.d.ts +1 -1
- package/out/exports/resources.generated/aws-lambda-permission.d.ts +2 -2
- package/out/exports/resources.generated/aws-lambda-url.d.ts +1 -1
- package/out/exports/resources.generated/aws-lambda-version.d.ts +1 -1
- package/out/exports/resources.generated/aws-logs-destination.d.ts +1 -1
- package/out/exports/resources.generated/aws-mediapackagev2-originendpoint.d.ts +18 -0
- package/out/exports/resources.generated/aws-networkfirewall-firewall.d.ts +36 -6
- package/out/exports/resources.generated/aws-networkfirewall-firewallpolicy.d.ts +16 -9
- package/out/exports/resources.generated/aws-networkfirewall-loggingconfiguration.d.ts +8 -8
- package/out/exports/resources.generated/aws-networkfirewall-rulegroup.d.ts +36 -22
- package/out/exports/resources.generated/aws-networkfirewall-vpcendpointassociation.d.ts +3 -3
- package/out/exports/resources.generated/aws-observabilityadmin-organizationtelemetryrule.d.ts +137 -0
- package/out/exports/resources.generated/aws-observabilityadmin-telemetryrule.d.ts +132 -0
- package/out/exports/resources.generated/aws-omics-workflowversion.d.ts +2 -2
- package/out/exports/resources.generated/aws-opensearchservice-domain.d.ts +21 -0
- package/out/exports/resources.generated/aws-opsworks-app.d.ts +4 -4
- package/out/exports/resources.generated/aws-opsworks-elasticloadbalancerattachment.d.ts +1 -1
- package/out/exports/resources.generated/aws-opsworks-instance.d.ts +14 -14
- package/out/exports/resources.generated/aws-opsworks-layer.d.ts +8 -8
- package/out/exports/resources.generated/aws-opsworks-stack.d.ts +25 -25
- package/out/exports/resources.generated/aws-opsworkscm-server.d.ts +2 -2
- package/out/exports/resources.generated/aws-pcs-cluster.d.ts +4 -0
- package/out/exports/resources.generated/aws-qbusiness-webexperience.d.ts +1 -1
- package/out/exports/resources.generated/aws-quicksight-dataset.d.ts +6 -6
- package/out/exports/resources.generated/aws-rds-dbcluster.d.ts +5 -0
- package/out/exports/resources.generated/aws-rds-dbinstance.d.ts +4 -29
- package/out/exports/resources.generated/aws-rds-dbproxy.d.ts +2 -2
- package/out/exports/resources.generated/aws-s3-accesspoint.d.ts +1 -1
- package/out/exports/resources.generated/aws-s3express-accesspoint.d.ts +1 -0
- package/out/exports/resources.generated/aws-s3tables-tablebucketpolicy.d.ts +2 -2
- package/out/exports/resources.generated/aws-s3tables-tablepolicy.d.ts +2 -2
- package/out/exports/resources.generated/aws-sagemaker-cluster.d.ts +101 -2
- package/out/exports/resources.generated/aws-sagemaker-domain.d.ts +0 -6
- package/out/exports/resources.generated/aws-sagemaker-processingjob.d.ts +72 -46
- package/out/exports/resources.generated/aws-sqs-queue.d.ts +2 -1
- package/out/exports/resources.generated/aws-synthetics-canary.d.ts +28 -0
- package/out/exports/resources.generated/aws-verifiedpermissions-policystore.d.ts +3 -5
- package/out/exports/resources.generated/aws-workspacesweb-portal.d.ts +7 -0
- package/out/exports/resources.generated/aws-workspacesweb-sessionlogger.d.ts +125 -0
- package/package.json +1 -1
|
@@ -0,0 +1,121 @@
|
|
|
1
|
+
import type { ResourceDefinitionWithAttributes } from "../main.ts";
|
|
2
|
+
/**
|
|
3
|
+
* Inspector CodeSecurityScanConfiguration resource schema
|
|
4
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-inspectorv2-codesecurityscanconfiguration.html}
|
|
5
|
+
*/
|
|
6
|
+
export type InspectorV2CodeSecurityScanConfiguration = ResourceDefinitionWithAttributes<"AWS::InspectorV2::CodeSecurityScanConfiguration", InspectorV2CodeSecurityScanConfigurationProps, InspectorV2CodeSecurityScanConfigurationAttribs>;
|
|
7
|
+
/**
|
|
8
|
+
* Inspector CodeSecurityScanConfiguration resource schema
|
|
9
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-inspectorv2-codesecurityscanconfiguration.html}
|
|
10
|
+
*/
|
|
11
|
+
export type InspectorV2CodeSecurityScanConfigurationProps = {
|
|
12
|
+
/**
|
|
13
|
+
* Code Security Scan Configuration
|
|
14
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-inspectorv2-codesecurityscanconfiguration.html#cfn-inspectorv2-codesecurityscanconfiguration-configuration}
|
|
15
|
+
*/
|
|
16
|
+
Configuration?: CodeSecurityScanConfiguration | undefined;
|
|
17
|
+
/**
|
|
18
|
+
* Configuration Level
|
|
19
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-inspectorv2-codesecurityscanconfiguration.html#cfn-inspectorv2-codesecurityscanconfiguration-level}
|
|
20
|
+
*/
|
|
21
|
+
Level?: ConfigurationLevel | undefined;
|
|
22
|
+
/**
|
|
23
|
+
* Code Security Scan Configuration name
|
|
24
|
+
* @minLength 1
|
|
25
|
+
* @maxLength 60
|
|
26
|
+
* @pattern ^[a-zA-Z0-9-_$:.]*$
|
|
27
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-inspectorv2-codesecurityscanconfiguration.html#cfn-inspectorv2-codesecurityscanconfiguration-name}
|
|
28
|
+
*/
|
|
29
|
+
Name?: string | undefined;
|
|
30
|
+
/**
|
|
31
|
+
* Scope Settings
|
|
32
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-inspectorv2-codesecurityscanconfiguration.html#cfn-inspectorv2-codesecurityscanconfiguration-scopesettings}
|
|
33
|
+
*/
|
|
34
|
+
ScopeSettings?: ScopeSettings | undefined;
|
|
35
|
+
/**
|
|
36
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-inspectorv2-codesecurityscanconfiguration.html#cfn-inspectorv2-codesecurityscanconfiguration-tags}
|
|
37
|
+
*/
|
|
38
|
+
Tags?: Record<string, string> | undefined;
|
|
39
|
+
};
|
|
40
|
+
/**
|
|
41
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-inspectorv2-codesecurityscanconfiguration.html#aws-resource-inspectorv2-codesecurityscanconfiguration-return-values}
|
|
42
|
+
*/
|
|
43
|
+
export type InspectorV2CodeSecurityScanConfigurationAttribs = {
|
|
44
|
+
/**
|
|
45
|
+
* Code Security Scan Configuration ARN
|
|
46
|
+
* @pattern ^arn:(aws[a-zA-Z-]*)?:inspector2:[a-z]{2}(-gov)?-[a-z]+-\d{1}:\d{12}:owner/(\d{12}|o-[a-z0-9]{10,32})/codesecurity-configuration/[a-f0-9-]{36}$
|
|
47
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-inspectorv2-codesecurityscanconfiguration.html#cfn-inspectorv2-codesecurityscanconfiguration-arn}
|
|
48
|
+
*/
|
|
49
|
+
Arn: string;
|
|
50
|
+
};
|
|
51
|
+
/**
|
|
52
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityscanconfiguration-codesecurityscanconfiguration.html}
|
|
53
|
+
*/
|
|
54
|
+
export type CodeSecurityScanConfiguration = {
|
|
55
|
+
/**
|
|
56
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityscanconfiguration-codesecurityscanconfiguration.html#cfn-inspectorv2-codesecurityscanconfiguration-codesecurityscanconfiguration-continuousintegrationscanconfiguration}
|
|
57
|
+
*/
|
|
58
|
+
continuousIntegrationScanConfiguration?: ContinuousIntegrationScanConfiguration | undefined;
|
|
59
|
+
/**
|
|
60
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityscanconfiguration-codesecurityscanconfiguration.html#cfn-inspectorv2-codesecurityscanconfiguration-codesecurityscanconfiguration-periodicscanconfiguration}
|
|
61
|
+
*/
|
|
62
|
+
periodicScanConfiguration?: PeriodicScanConfiguration | undefined;
|
|
63
|
+
/**
|
|
64
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityscanconfiguration-codesecurityscanconfiguration.html#cfn-inspectorv2-codesecurityscanconfiguration-codesecurityscanconfiguration-rulesetcategories}
|
|
65
|
+
*/
|
|
66
|
+
ruleSetCategories: RuleSetCategory[];
|
|
67
|
+
};
|
|
68
|
+
/**
|
|
69
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityscanconfiguration-configurationlevel.html}
|
|
70
|
+
*/
|
|
71
|
+
export type ConfigurationLevel = "ORGANIZATION" | "ACCOUNT";
|
|
72
|
+
/**
|
|
73
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityscanconfiguration-continuousintegrationscanconfiguration.html}
|
|
74
|
+
*/
|
|
75
|
+
export type ContinuousIntegrationScanConfiguration = {
|
|
76
|
+
/**
|
|
77
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityscanconfiguration-continuousintegrationscanconfiguration.html#cfn-inspectorv2-codesecurityscanconfiguration-continuousintegrationscanconfiguration-supportedevents}
|
|
78
|
+
*/
|
|
79
|
+
supportedEvents: ContinuousIntegrationScanEvent[];
|
|
80
|
+
};
|
|
81
|
+
/**
|
|
82
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityscanconfiguration-continuousintegrationscanevent.html}
|
|
83
|
+
*/
|
|
84
|
+
export type ContinuousIntegrationScanEvent = "PULL_REQUEST" | "PUSH";
|
|
85
|
+
/**
|
|
86
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityscanconfiguration-periodicscanconfiguration.html}
|
|
87
|
+
*/
|
|
88
|
+
export type PeriodicScanConfiguration = {
|
|
89
|
+
/**
|
|
90
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityscanconfiguration-periodicscanconfiguration.html#cfn-inspectorv2-codesecurityscanconfiguration-periodicscanconfiguration-frequency}
|
|
91
|
+
*/
|
|
92
|
+
frequency?: PeriodicScanFrequency | undefined;
|
|
93
|
+
/**
|
|
94
|
+
* @minLength 1
|
|
95
|
+
* @maxLength 256
|
|
96
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityscanconfiguration-periodicscanconfiguration.html#cfn-inspectorv2-codesecurityscanconfiguration-periodicscanconfiguration-frequencyexpression}
|
|
97
|
+
*/
|
|
98
|
+
frequencyExpression?: string | undefined;
|
|
99
|
+
};
|
|
100
|
+
/**
|
|
101
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityscanconfiguration-periodicscanfrequency.html}
|
|
102
|
+
*/
|
|
103
|
+
export type PeriodicScanFrequency = "WEEKLY" | "MONTHLY" | "NEVER";
|
|
104
|
+
/**
|
|
105
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityscanconfiguration-projectselectionscope.html}
|
|
106
|
+
*/
|
|
107
|
+
export type ProjectSelectionScope = "ALL";
|
|
108
|
+
/**
|
|
109
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityscanconfiguration-rulesetcategory.html}
|
|
110
|
+
*/
|
|
111
|
+
export type RuleSetCategory = "SAST" | "IAC" | "SCA";
|
|
112
|
+
/**
|
|
113
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityscanconfiguration-scopesettings.html}
|
|
114
|
+
*/
|
|
115
|
+
export type ScopeSettings = {
|
|
116
|
+
/**
|
|
117
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityscanconfiguration-scopesettings.html#cfn-inspectorv2-codesecurityscanconfiguration-scopesettings-projectselectionscope}
|
|
118
|
+
*/
|
|
119
|
+
projectSelectionScope?: ProjectSelectionScope | undefined;
|
|
120
|
+
};
|
|
121
|
+
//# sourceMappingURL=aws-inspectorv2-codesecurityscanconfiguration.d.ts.map
|
|
@@ -112,7 +112,7 @@ export type EnableIoTLoggingParams = {
|
|
|
112
112
|
LogLevel: "DEBUG" | "INFO" | "ERROR" | "WARN" | "UNSET_VALUE";
|
|
113
113
|
/**
|
|
114
114
|
* The Amazon Resource Name (ARN) of the IAM role used for logging.
|
|
115
|
-
* @minLength
|
|
115
|
+
* @minLength 11
|
|
116
116
|
* @maxLength 2048
|
|
117
117
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iot-mitigationaction-enableiotloggingparams.html#cfn-iot-mitigationaction-enableiotloggingparams-rolearnforlogging}
|
|
118
118
|
*/
|
|
@@ -125,7 +125,7 @@ export type EnableIoTLoggingParams = {
|
|
|
125
125
|
export type PublishFindingToSnsParams = {
|
|
126
126
|
/**
|
|
127
127
|
* The ARN of the topic to which you want to publish the findings.
|
|
128
|
-
* @minLength
|
|
128
|
+
* @minLength 11
|
|
129
129
|
* @maxLength 2048
|
|
130
130
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iot-mitigationaction-publishfindingtosnsparams.html#cfn-iot-mitigationaction-publishfindingtosnsparams-topicarn}
|
|
131
131
|
*/
|
|
@@ -2,20 +2,22 @@ import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
|
|
|
2
2
|
/**
|
|
3
3
|
* Creates an asset model from specified property and hierarchy definitions. You create assets from asset models. With asset models, you can easily create assets of the same type that have standardized definitions. Each asset created from a model inherits the asset model's property and hierarchy definitions. For more information, see [Defining asset models](https://docs.aws.amazon.com/iot-sitewise/latest/userguide/define-models.html) in the *AWS IoT SiteWise User Guide* .
|
|
4
4
|
*
|
|
5
|
-
* You can create
|
|
5
|
+
* You can create three types of asset models, `ASSET_MODEL` , `COMPONENT_MODEL` , or an `INTERFACE` .
|
|
6
6
|
*
|
|
7
7
|
* - *ASSET_MODEL* – (default) An asset model that you can use to create assets. Can't be included as a component in another asset model.
|
|
8
8
|
* - *COMPONENT_MODEL* – A reusable component that you can include in the composite models of other asset models. You can't create assets directly from this type of asset model.
|
|
9
|
+
* - *INTERFACE* – An interface is a type of model that defines a standard structure that can be applied to different asset models.
|
|
9
10
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotsitewise-assetmodel.html}
|
|
10
11
|
*/
|
|
11
12
|
export type IoTSiteWiseAssetModel = ResourceDefinitionWithAttributes<"AWS::IoTSiteWise::AssetModel", IoTSiteWiseAssetModelProps, IoTSiteWiseAssetModelAttribs>;
|
|
12
13
|
/**
|
|
13
14
|
* Creates an asset model from specified property and hierarchy definitions. You create assets from asset models. With asset models, you can easily create assets of the same type that have standardized definitions. Each asset created from a model inherits the asset model's property and hierarchy definitions. For more information, see [Defining asset models](https://docs.aws.amazon.com/iot-sitewise/latest/userguide/define-models.html) in the *AWS IoT SiteWise User Guide* .
|
|
14
15
|
*
|
|
15
|
-
* You can create
|
|
16
|
+
* You can create three types of asset models, `ASSET_MODEL` , `COMPONENT_MODEL` , or an `INTERFACE` .
|
|
16
17
|
*
|
|
17
18
|
* - *ASSET_MODEL* – (default) An asset model that you can use to create assets. Can't be included as a component in another asset model.
|
|
18
19
|
* - *COMPONENT_MODEL* – A reusable component that you can include in the composite models of other asset models. You can't create assets directly from this type of asset model.
|
|
20
|
+
* - *INTERFACE* – An interface is a type of model that defines a standard structure that can be applied to different asset models.
|
|
19
21
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotsitewise-assetmodel.html}
|
|
20
22
|
*/
|
|
21
23
|
export type IoTSiteWiseAssetModelProps = {
|
|
@@ -66,6 +68,11 @@ export type IoTSiteWiseAssetModelProps = {
|
|
|
66
68
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotsitewise-assetmodel.html#cfn-iotsitewise-assetmodel-assetmodeltype}
|
|
67
69
|
*/
|
|
68
70
|
AssetModelType?: string | undefined;
|
|
71
|
+
/**
|
|
72
|
+
* a list of asset model and interface relationships
|
|
73
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotsitewise-assetmodel.html#cfn-iotsitewise-assetmodel-enforcedassetmodelinterfacerelationships}
|
|
74
|
+
*/
|
|
75
|
+
EnforcedAssetModelInterfaceRelationships?: EnforcedAssetModelInterfaceRelationship[] | undefined;
|
|
69
76
|
/**
|
|
70
77
|
* A list of key-value pairs that contain metadata for the asset. For more information, see [Tagging your AWS IoT SiteWise resources](https://docs.aws.amazon.com/iot-sitewise/latest/userguide/tag-resources.html) in the *AWS IoT SiteWise User Guide* .
|
|
71
78
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotsitewise-assetmodel.html#cfn-iotsitewise-assetmodel-tags}
|
|
@@ -256,6 +263,43 @@ export type DataType = "STRING" | "INTEGER" | "DOUBLE" | "BOOLEAN" | "STRUCT";
|
|
|
256
263
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iotsitewise-assetmodel-datatypespec.html}
|
|
257
264
|
*/
|
|
258
265
|
export type DataTypeSpec = "AWS/ALARM_STATE";
|
|
266
|
+
/**
|
|
267
|
+
* Contains information about enforced interface property and asset model property
|
|
268
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iotsitewise-assetmodel-enforcedassetmodelinterfacepropertymapping.html}
|
|
269
|
+
*/
|
|
270
|
+
export type EnforcedAssetModelInterfacePropertyMapping = {
|
|
271
|
+
/**
|
|
272
|
+
* The external ID of the enforced asset model property
|
|
273
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iotsitewise-assetmodel-enforcedassetmodelinterfacepropertymapping.html#cfn-iotsitewise-assetmodel-enforcedassetmodelinterfacepropertymapping-assetmodelpropertyexternalid}
|
|
274
|
+
*/
|
|
275
|
+
AssetModelPropertyExternalId?: string | undefined;
|
|
276
|
+
/**
|
|
277
|
+
* The logical ID of the enforced asset model property
|
|
278
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iotsitewise-assetmodel-enforcedassetmodelinterfacepropertymapping.html#cfn-iotsitewise-assetmodel-enforcedassetmodelinterfacepropertymapping-assetmodelpropertylogicalid}
|
|
279
|
+
*/
|
|
280
|
+
AssetModelPropertyLogicalId?: string | undefined;
|
|
281
|
+
/**
|
|
282
|
+
* The external ID of the enforced interface property
|
|
283
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iotsitewise-assetmodel-enforcedassetmodelinterfacepropertymapping.html#cfn-iotsitewise-assetmodel-enforcedassetmodelinterfacepropertymapping-interfaceassetmodelpropertyexternalid}
|
|
284
|
+
*/
|
|
285
|
+
InterfaceAssetModelPropertyExternalId: string;
|
|
286
|
+
};
|
|
287
|
+
/**
|
|
288
|
+
* Contains information about enforced interface hierarchy and asset model hierarchy
|
|
289
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iotsitewise-assetmodel-enforcedassetmodelinterfacerelationship.html}
|
|
290
|
+
*/
|
|
291
|
+
export type EnforcedAssetModelInterfaceRelationship = {
|
|
292
|
+
/**
|
|
293
|
+
* The ID of the interface that is enforced to the asset model
|
|
294
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iotsitewise-assetmodel-enforcedassetmodelinterfacerelationship.html#cfn-iotsitewise-assetmodel-enforcedassetmodelinterfacerelationship-interfaceassetmodelid}
|
|
295
|
+
*/
|
|
296
|
+
InterfaceAssetModelId?: string | undefined;
|
|
297
|
+
/**
|
|
298
|
+
* Contains information about enforced interface property and asset model property
|
|
299
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iotsitewise-assetmodel-enforcedassetmodelinterfacerelationship.html#cfn-iotsitewise-assetmodel-enforcedassetmodelinterfacerelationship-propertymappings}
|
|
300
|
+
*/
|
|
301
|
+
PropertyMappings?: EnforcedAssetModelInterfacePropertyMapping[] | undefined;
|
|
302
|
+
};
|
|
259
303
|
/**
|
|
260
304
|
* Contains expression variable information.
|
|
261
305
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iotsitewise-assetmodel-expressionvariable.html}
|
|
@@ -14,13 +14,13 @@ export type IVSPlaybackRestrictionPolicyProps = {
|
|
|
14
14
|
* @default []
|
|
15
15
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ivs-playbackrestrictionpolicy.html#cfn-ivs-playbackrestrictionpolicy-allowedcountries}
|
|
16
16
|
*/
|
|
17
|
-
AllowedCountries
|
|
17
|
+
AllowedCountries?: string[] | undefined;
|
|
18
18
|
/**
|
|
19
19
|
* A list of origin sites that control CORS restriction. Allowed values are the same as valid values of the Origin header defined at [https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Origin"](https://docs.aws.amazon.com/https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Origin)
|
|
20
20
|
* @default []
|
|
21
21
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ivs-playbackrestrictionpolicy.html#cfn-ivs-playbackrestrictionpolicy-allowedorigins}
|
|
22
22
|
*/
|
|
23
|
-
AllowedOrigins
|
|
23
|
+
AllowedOrigins?: string[] | undefined;
|
|
24
24
|
/**
|
|
25
25
|
* Whether channel playback is constrained by the origin site.
|
|
26
26
|
* @default false
|
|
@@ -56,12 +56,38 @@ export type IVSStageAttribs = {
|
|
|
56
56
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ivs-stage-autoparticipantrecordingconfiguration.html}
|
|
57
57
|
*/
|
|
58
58
|
export type AutoParticipantRecordingConfiguration = {
|
|
59
|
+
/**
|
|
60
|
+
* HLS configuration object for individual participant recording.
|
|
61
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ivs-stage-autoparticipantrecordingconfiguration.html#cfn-ivs-stage-autoparticipantrecordingconfiguration-hlsconfiguration}
|
|
62
|
+
*/
|
|
63
|
+
HlsConfiguration?: {
|
|
64
|
+
/**
|
|
65
|
+
* An object representing a configuration of participant HLS recordings for individual participant recording.
|
|
66
|
+
*/
|
|
67
|
+
ParticipantRecordingHlsConfiguration?: {
|
|
68
|
+
/**
|
|
69
|
+
* Defines the target duration for recorded segments generated when recording a stage participant. Segments may have durations longer than the specified value when needed to ensure each segment begins with a keyframe. Default: 6.
|
|
70
|
+
* @min 2
|
|
71
|
+
* @max 10
|
|
72
|
+
* @default 6
|
|
73
|
+
*/
|
|
74
|
+
TargetSegmentDurationSeconds?: number | undefined;
|
|
75
|
+
} | undefined;
|
|
76
|
+
} | undefined;
|
|
59
77
|
/**
|
|
60
78
|
* Types of media to be recorded. Default: `AUDIO_VIDEO` .
|
|
61
79
|
* @default ["AUDIO_VIDEO"]
|
|
62
80
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ivs-stage-autoparticipantrecordingconfiguration.html#cfn-ivs-stage-autoparticipantrecordingconfiguration-mediatypes}
|
|
63
81
|
*/
|
|
64
82
|
MediaTypes?: ("AUDIO_VIDEO" | "AUDIO_ONLY")[] | undefined;
|
|
83
|
+
/**
|
|
84
|
+
* If a stage publisher disconnects and then reconnects within the specified interval, the multiple recordings will be considered a single recording and merged together. The default value is 0, which disables merging.
|
|
85
|
+
* @min 0
|
|
86
|
+
* @max 300
|
|
87
|
+
* @default 0
|
|
88
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ivs-stage-autoparticipantrecordingconfiguration.html#cfn-ivs-stage-autoparticipantrecordingconfiguration-recordingreconnectwindowseconds}
|
|
89
|
+
*/
|
|
90
|
+
RecordingReconnectWindowSeconds?: number | undefined;
|
|
65
91
|
/**
|
|
66
92
|
* ARN of the StorageConfiguration resource to use for individual participant recording. Default: "" (empty string, no storage configuration is specified). Individual participant recording cannot be started unless a storage configuration is specified, when a Stage is created or updated.
|
|
67
93
|
* @minLength 0
|
|
@@ -70,5 +96,33 @@ export type AutoParticipantRecordingConfiguration = {
|
|
|
70
96
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ivs-stage-autoparticipantrecordingconfiguration.html#cfn-ivs-stage-autoparticipantrecordingconfiguration-storageconfigurationarn}
|
|
71
97
|
*/
|
|
72
98
|
StorageConfigurationArn: string;
|
|
99
|
+
/**
|
|
100
|
+
* A complex type that allows you to enable/disable the recording of thumbnails for individual participant recording and modify the interval at which thumbnails are generated for the live session.
|
|
101
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ivs-stage-autoparticipantrecordingconfiguration.html#cfn-ivs-stage-autoparticipantrecordingconfiguration-thumbnailconfiguration}
|
|
102
|
+
*/
|
|
103
|
+
ThumbnailConfiguration?: {
|
|
104
|
+
/**
|
|
105
|
+
* An object representing a configuration of thumbnails for recorded video from an individual participant.
|
|
106
|
+
*/
|
|
107
|
+
ParticipantThumbnailConfiguration?: {
|
|
108
|
+
/**
|
|
109
|
+
* Thumbnail recording mode. Default: DISABLED.
|
|
110
|
+
* @default "INTERVAL"
|
|
111
|
+
*/
|
|
112
|
+
RecordingMode?: "INTERVAL" | "DISABLED" | undefined;
|
|
113
|
+
/**
|
|
114
|
+
* Indicates the format in which thumbnails are recorded. SEQUENTIAL records all generated thumbnails in a serial manner, to the media/thumbnails/high directory. LATEST saves the latest thumbnail in media/latest_thumbnail/high/thumb.jpg and overwrites it at the interval specified by targetIntervalSeconds. You can enable both SEQUENTIAL and LATEST. Default: SEQUENTIAL.
|
|
115
|
+
* @default ["SEQUENTIAL"]
|
|
116
|
+
*/
|
|
117
|
+
Storage?: ("SEQUENTIAL" | "LATEST")[] | undefined;
|
|
118
|
+
/**
|
|
119
|
+
* The targeted thumbnail-generation interval in seconds. This is configurable only if recordingMode is INTERVAL. Default: 60.
|
|
120
|
+
* @min 1
|
|
121
|
+
* @max 86400
|
|
122
|
+
* @default 60
|
|
123
|
+
*/
|
|
124
|
+
TargetIntervalSeconds?: number | undefined;
|
|
125
|
+
} | undefined;
|
|
126
|
+
} | undefined;
|
|
73
127
|
};
|
|
74
128
|
//# sourceMappingURL=aws-ivs-stage.d.ts.map
|
|
@@ -702,7 +702,7 @@ export type Deserializer = {
|
|
|
702
702
|
OpenXJsonSerDe?: OpenXJsonSerDe | undefined;
|
|
703
703
|
};
|
|
704
704
|
/**
|
|
705
|
-
* Describes the configuration of a destination in Apache Iceberg Tables.
|
|
705
|
+
* Describes the configuration of a destination in Apache Iceberg Tables. This section is only needed for tables where you want to update or delete data.
|
|
706
706
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kinesisfirehose-deliverystream-destinationtableconfiguration.html}
|
|
707
707
|
*/
|
|
708
708
|
export type DestinationTableConfiguration = {
|
|
@@ -47,7 +47,7 @@ export type LambdaPermissionProps = {
|
|
|
47
47
|
* You can append a version number or alias to any of the formats. The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
|
|
48
48
|
* @minLength 1
|
|
49
49
|
* @maxLength 140
|
|
50
|
-
* @pattern ^(arn:(aws[a-zA-Z-]*)?:lambda:)?([a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:)?(\d{12}:)?(function:)?([a-zA-Z0-9-_]+)(:(\$LATEST|[a-zA-Z0-9-_]+))?$
|
|
50
|
+
* @pattern ^(arn:(aws[a-zA-Z-]*)?:lambda:)?((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:)?(\d{12}:)?(function:)?([a-zA-Z0-9-_]+)(:(\$LATEST|[a-zA-Z0-9-_]+))?$
|
|
51
51
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-permission.html#cfn-lambda-permission-functionname}
|
|
52
52
|
*/
|
|
53
53
|
FunctionName: string;
|
|
@@ -86,7 +86,7 @@ export type LambdaPermissionProps = {
|
|
|
86
86
|
* Note that Lambda configures the comparison using the `StringLike` operator.
|
|
87
87
|
* @minLength 12
|
|
88
88
|
* @maxLength 1024
|
|
89
|
-
* @pattern ^arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:([a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1})?:(\d{12})?:(.*)$
|
|
89
|
+
* @pattern ^arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1})?:(\d{12})?:(.*)$
|
|
90
90
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-permission.html#cfn-lambda-permission-sourcearn}
|
|
91
91
|
*/
|
|
92
92
|
SourceArn?: string | undefined;
|
|
@@ -23,7 +23,7 @@ export type LambdaUrlProps = {
|
|
|
23
23
|
* Use one of the following options:
|
|
24
24
|
*
|
|
25
25
|
* - `BUFFERED` – This is the default option. Lambda invokes your function using the `Invoke` API operation. Invocation results are available when the payload is complete. The maximum payload size is 6 MB.
|
|
26
|
-
* - `RESPONSE_STREAM` – Your function streams payload results as they become available. Lambda invokes your function using the `InvokeWithResponseStream` API operation. The maximum response payload size is
|
|
26
|
+
* - `RESPONSE_STREAM` – Your function streams payload results as they become available. Lambda invokes your function using the `InvokeWithResponseStream` API operation. The maximum response payload size is 200 MB.
|
|
27
27
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-url.html#cfn-lambda-url-invokemode}
|
|
28
28
|
*/
|
|
29
29
|
InvokeMode?: "BUFFERED" | "RESPONSE_STREAM" | undefined;
|
|
@@ -52,7 +52,7 @@ export type LambdaVersionProps = {
|
|
|
52
52
|
export type LambdaVersionAttribs = {
|
|
53
53
|
/**
|
|
54
54
|
* The ARN of the function.
|
|
55
|
-
* @pattern ^(arn:(aws[a-zA-Z-]*)?:lambda:)?([a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:)?(\d{12}:)?(function:)?([a-zA-Z0-9-_]+)(:(\$LATEST
|
|
55
|
+
* @pattern ^(arn:(aws[a-zA-Z-]*)?:lambda:)?([a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:)?(\d{12}:)?(function:)?([a-zA-Z0-9-_]+)(:(\$LATEST|[a-zA-Z0-9-_]+))?$
|
|
56
56
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-version.html#cfn-lambda-version-functionarn}
|
|
57
57
|
*/
|
|
58
58
|
FunctionArn: string;
|
|
@@ -30,7 +30,7 @@ export type LogsDestinationProps = {
|
|
|
30
30
|
*/
|
|
31
31
|
RoleArn: string;
|
|
32
32
|
/**
|
|
33
|
-
*
|
|
33
|
+
* The tags that have been assigned to this delivery destination.
|
|
34
34
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-logs-destination.html#cfn-logs-destination-tags}
|
|
35
35
|
*/
|
|
36
36
|
Tags?: Tag[] | undefined;
|
|
@@ -455,6 +455,24 @@ export type DrmSystem = "CLEAR_KEY_AES_128" | "FAIRPLAY" | "PLAYREADY" | "WIDEVI
|
|
|
455
455
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediapackagev2-originendpoint-encryption.html}
|
|
456
456
|
*/
|
|
457
457
|
export type Encryption = {
|
|
458
|
+
/**
|
|
459
|
+
* Excludes SEIG and SGPD boxes from segment metadata in CMAF containers.
|
|
460
|
+
*
|
|
461
|
+
* When set to `true` , MediaPackage omits these DRM metadata boxes from CMAF segments, which can improve compatibility with certain devices and players that don't support these boxes.
|
|
462
|
+
*
|
|
463
|
+
* Important considerations:
|
|
464
|
+
*
|
|
465
|
+
* - This setting only affects CMAF container formats
|
|
466
|
+
* - Key rotation can still be handled through media playlist signaling
|
|
467
|
+
* - PSSH and TENC boxes remain unaffected
|
|
468
|
+
* - Default behavior is preserved when this setting is disabled
|
|
469
|
+
*
|
|
470
|
+
* Valid values: `true` | `false`
|
|
471
|
+
*
|
|
472
|
+
* Default: `false`
|
|
473
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediapackagev2-originendpoint-encryption.html#cfn-mediapackagev2-originendpoint-encryption-cmafexcludesegmentdrmmetadata}
|
|
474
|
+
*/
|
|
475
|
+
CmafExcludeSegmentDrmMetadata?: boolean | undefined;
|
|
458
476
|
/**
|
|
459
477
|
* A 128-bit, 16-byte hex value represented by a 32-character string, used in conjunction with the key for encrypting content. If you don't specify a value, then MediaPackage creates the constant initialization vector (IV).
|
|
460
478
|
* @minLength 32
|
|
@@ -1,18 +1,28 @@
|
|
|
1
1
|
import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
|
|
2
2
|
/**
|
|
3
|
-
* Use the
|
|
3
|
+
* Use the firewall to provide stateful, managed, network firewall and intrusion detection and prevention filtering for your VPCs in Amazon VPC .
|
|
4
4
|
*
|
|
5
5
|
* The firewall defines the configuration settings for an AWS Network Firewall firewall. The settings include the firewall policy, the subnets in your VPC to use for the firewall endpoints, and any tags that are attached to the firewall AWS resource.
|
|
6
6
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-firewall.html}
|
|
7
7
|
*/
|
|
8
8
|
export type NetworkFirewallFirewall = ResourceDefinitionWithAttributes<"AWS::NetworkFirewall::Firewall", NetworkFirewallFirewallProps, NetworkFirewallFirewallAttribs>;
|
|
9
9
|
/**
|
|
10
|
-
* Use the
|
|
10
|
+
* Use the firewall to provide stateful, managed, network firewall and intrusion detection and prevention filtering for your VPCs in Amazon VPC .
|
|
11
11
|
*
|
|
12
12
|
* The firewall defines the configuration settings for an AWS Network Firewall firewall. The settings include the firewall policy, the subnets in your VPC to use for the firewall endpoints, and any tags that are attached to the firewall AWS resource.
|
|
13
13
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-firewall.html}
|
|
14
14
|
*/
|
|
15
15
|
export type NetworkFirewallFirewallProps = {
|
|
16
|
+
/**
|
|
17
|
+
* A setting indicating whether the firewall is protected against changes to its Availability Zone configuration. When set to `TRUE` , you must first disable this protection before adding or removing Availability Zones.
|
|
18
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-firewall.html#cfn-networkfirewall-firewall-availabilityzonechangeprotection}
|
|
19
|
+
*/
|
|
20
|
+
AvailabilityZoneChangeProtection?: boolean | undefined;
|
|
21
|
+
/**
|
|
22
|
+
* The Availability Zones where the firewall endpoints are created for a transit gateway-attached firewall. Each mapping specifies an Availability Zone where the firewall processes traffic.
|
|
23
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-firewall.html#cfn-networkfirewall-firewall-availabilityzonemappings}
|
|
24
|
+
*/
|
|
25
|
+
AvailabilityZoneMappings?: AvailabilityZoneMapping[] | undefined;
|
|
16
26
|
/**
|
|
17
27
|
* A flag indicating whether it is possible to delete the firewall. A setting of `TRUE` indicates that the firewall is protected against deletion. Use this setting to protect against accidentally deleting a firewall that is in use. When you create a firewall, the operation initializes this flag to `TRUE` .
|
|
18
28
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-firewall.html#cfn-networkfirewall-firewall-deleteprotection}
|
|
@@ -63,7 +73,7 @@ export type NetworkFirewallFirewallProps = {
|
|
|
63
73
|
* In addition to these subnets, you can define other endpoints for the firewall in `VpcEndpointAssociation` resources. You can define these additional endpoints for any VPC, and for any of the Availability Zones where the firewall resource already has a subnet mapping. VPC endpoint associations give you the ability to protect multiple VPCs using a single firewall, and to define multiple firewall endpoints for a VPC in a single Availability Zone.
|
|
64
74
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-firewall.html#cfn-networkfirewall-firewall-subnetmappings}
|
|
65
75
|
*/
|
|
66
|
-
SubnetMappings
|
|
76
|
+
SubnetMappings?: SubnetMapping[] | undefined;
|
|
67
77
|
/**
|
|
68
78
|
* An array of key-value pairs to apply to this resource.
|
|
69
79
|
*
|
|
@@ -71,6 +81,13 @@ export type NetworkFirewallFirewallProps = {
|
|
|
71
81
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-firewall.html#cfn-networkfirewall-firewall-tags}
|
|
72
82
|
*/
|
|
73
83
|
Tags?: Tag[] | undefined;
|
|
84
|
+
/**
|
|
85
|
+
* The unique identifier of the transit gateway associated with this firewall. This field is only present for transit gateway-attached firewalls.
|
|
86
|
+
* @maxLength 128
|
|
87
|
+
* @pattern ^tgw-[0-9a-z]+$
|
|
88
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-firewall.html#cfn-networkfirewall-firewall-transitgatewayid}
|
|
89
|
+
*/
|
|
90
|
+
TransitGatewayId?: string | undefined;
|
|
74
91
|
/**
|
|
75
92
|
* The unique identifier of the VPC where the firewall is in use. You can't change the VPC of a firewall after you create the firewall.
|
|
76
93
|
* @minLength 1
|
|
@@ -78,7 +95,7 @@ export type NetworkFirewallFirewallProps = {
|
|
|
78
95
|
* @pattern ^vpc-[0-9a-f]+$
|
|
79
96
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-firewall.html#cfn-networkfirewall-firewall-vpcid}
|
|
80
97
|
*/
|
|
81
|
-
VpcId
|
|
98
|
+
VpcId?: string | undefined;
|
|
82
99
|
};
|
|
83
100
|
/**
|
|
84
101
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-firewall.html#aws-resource-networkfirewall-firewall-return-values}
|
|
@@ -90,12 +107,12 @@ export type NetworkFirewallFirewallAttribs = {
|
|
|
90
107
|
*/
|
|
91
108
|
EndpointIds: string[];
|
|
92
109
|
/**
|
|
93
|
-
* The Amazon Resource Name (ARN) of the
|
|
110
|
+
* The Amazon Resource Name (ARN) of the firewall.
|
|
94
111
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-firewall.html#cfn-networkfirewall-firewall-firewallarn}
|
|
95
112
|
*/
|
|
96
113
|
FirewallArn: string;
|
|
97
114
|
/**
|
|
98
|
-
* The name of the
|
|
115
|
+
* The name of the firewallresource.
|
|
99
116
|
* @minLength 36
|
|
100
117
|
* @maxLength 36
|
|
101
118
|
* @pattern ^([0-9a-f]{8})-([0-9a-f]{4}-){3}([0-9a-f]{12})$
|
|
@@ -103,6 +120,19 @@ export type NetworkFirewallFirewallAttribs = {
|
|
|
103
120
|
*/
|
|
104
121
|
FirewallId: string;
|
|
105
122
|
};
|
|
123
|
+
/**
|
|
124
|
+
* Defines the mapping between an Availability Zone and a firewall endpoint for a transit gateway-attached firewall. Each mapping represents where the firewall can process traffic. You use these mappings when calling `CreateFirewall` , `AssociateAvailabilityZones` , and `DisassociateAvailabilityZones` .
|
|
125
|
+
*
|
|
126
|
+
* To retrieve the current Availability Zone mappings for a firewall, use `DescribeFirewall` .
|
|
127
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-firewall-availabilityzonemapping.html}
|
|
128
|
+
*/
|
|
129
|
+
export type AvailabilityZoneMapping = {
|
|
130
|
+
/**
|
|
131
|
+
* The ID of the Availability Zone where the firewall endpoint is located. For example, `us-east-2a` . The Availability Zone must be in the same Region as the transit gateway.
|
|
132
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-firewall-availabilityzonemapping.html#cfn-networkfirewall-firewall-availabilityzonemapping-availabilityzone}
|
|
133
|
+
*/
|
|
134
|
+
AvailabilityZone: string;
|
|
135
|
+
};
|
|
106
136
|
/**
|
|
107
137
|
* An analysis type.
|
|
108
138
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-firewall-enabledanalysistype.html}
|
|
@@ -1,11 +1,11 @@
|
|
|
1
1
|
import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
|
|
2
2
|
/**
|
|
3
|
-
* Use the
|
|
3
|
+
* Use the firewall policy to define the stateless and stateful network traffic filtering behavior for your firewall. You can use one firewall policy for multiple firewalls.
|
|
4
4
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-firewallpolicy.html}
|
|
5
5
|
*/
|
|
6
6
|
export type NetworkFirewallFirewallPolicy = ResourceDefinitionWithAttributes<"AWS::NetworkFirewall::FirewallPolicy", NetworkFirewallFirewallPolicyProps, NetworkFirewallFirewallPolicyAttribs>;
|
|
7
7
|
/**
|
|
8
|
-
* Use the
|
|
8
|
+
* Use the firewall policy to define the stateless and stateful network traffic filtering behavior for your firewall. You can use one firewall policy for multiple firewalls.
|
|
9
9
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-firewallpolicy.html}
|
|
10
10
|
*/
|
|
11
11
|
export type NetworkFirewallFirewallPolicyProps = {
|
|
@@ -43,12 +43,12 @@ export type NetworkFirewallFirewallPolicyProps = {
|
|
|
43
43
|
*/
|
|
44
44
|
export type NetworkFirewallFirewallPolicyAttribs = {
|
|
45
45
|
/**
|
|
46
|
-
* The Amazon Resource Name (ARN) of the
|
|
46
|
+
* The Amazon Resource Name (ARN) of the firewall policy.
|
|
47
47
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-firewallpolicy.html#cfn-networkfirewall-firewallpolicy-firewallpolicyarn}
|
|
48
48
|
*/
|
|
49
49
|
FirewallPolicyArn: string;
|
|
50
50
|
/**
|
|
51
|
-
* The unique ID of the
|
|
51
|
+
* The unique ID of the firewall policy resource.
|
|
52
52
|
* @minLength 36
|
|
53
53
|
* @maxLength 36
|
|
54
54
|
* @pattern ^([0-9a-f]{8})-([0-9a-f]{4}-){3}([0-9a-f]{12})$
|
|
@@ -76,8 +76,8 @@ export type ActionDefinition = {
|
|
|
76
76
|
*
|
|
77
77
|
* You can use custom actions in the following places:
|
|
78
78
|
*
|
|
79
|
-
* - In an `
|
|
80
|
-
* - In an
|
|
79
|
+
* - In an `StatelessRulesAndCustomActions` . The custom actions are available for use by name inside the `StatelessRulesAndCustomActions` where you define them. You can use them for your stateless rule actions to specify what to do with a packet that matches the rule's match attributes.
|
|
80
|
+
* - In an firewall policy specification, in `StatelessCustomActions` . The custom actions are available for use inside the policy where you define them. You can use them for the policy's default stateless actions settings to specify what to do with packets that don't match any of the policy's stateless rules.
|
|
81
81
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-firewallpolicy-customaction.html}
|
|
82
82
|
*/
|
|
83
83
|
export type CustomAction = {
|
|
@@ -184,7 +184,7 @@ export type FirewallPolicy = {
|
|
|
184
184
|
TLSInspectionConfigurationArn?: string | undefined;
|
|
185
185
|
};
|
|
186
186
|
/**
|
|
187
|
-
* A list of IP addresses and address ranges, in CIDR notation. This is part of a
|
|
187
|
+
* A list of IP addresses and address ranges, in CIDR notation. This is part of a rule variable.
|
|
188
188
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-firewallpolicy-ipset.html}
|
|
189
189
|
*/
|
|
190
190
|
export type IPSet = {
|
|
@@ -259,13 +259,20 @@ export type StatefulRuleGroupOverride = {
|
|
|
259
259
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-firewallpolicy-statefulrulegroupreference.html}
|
|
260
260
|
*/
|
|
261
261
|
export type StatefulRuleGroupReference = {
|
|
262
|
+
/**
|
|
263
|
+
* AWS Network Firewall plans to augment the active threat defense managed rule group with an additional deep threat inspection capability. When this capability is released, AWS will analyze service logs of network traffic processed by these rule groups to identify threat indicators across customers. AWS will use these threat indicators to improve the active threat defense managed rule groups and protect the security of AWS customers and services.
|
|
264
|
+
*
|
|
265
|
+
* > Customers can opt-out of deep threat inspection at any time through the AWS Network Firewall console or API. When customers opt out, AWS Network Firewall will not use the network traffic processed by those customers' active threat defense rule groups for rule group improvement.
|
|
266
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-firewallpolicy-statefulrulegroupreference.html#cfn-networkfirewall-firewallpolicy-statefulrulegroupreference-deepthreatinspection}
|
|
267
|
+
*/
|
|
268
|
+
DeepThreatInspection?: boolean | undefined;
|
|
262
269
|
/**
|
|
263
270
|
* The action that allows the policy owner to override the behavior of the rule group within a policy.
|
|
264
271
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-firewallpolicy-statefulrulegroupreference.html#cfn-networkfirewall-firewallpolicy-statefulrulegroupreference-override}
|
|
265
272
|
*/
|
|
266
273
|
Override?: StatefulRuleGroupOverride | undefined;
|
|
267
274
|
/**
|
|
268
|
-
* An integer setting that indicates the order in which to run the stateful rule groups in a single
|
|
275
|
+
* An integer setting that indicates the order in which to run the stateful rule groups in a single firewall policy. This setting only applies to firewall policies that specify the `STRICT_ORDER` rule order in the stateful engine options settings.
|
|
269
276
|
*
|
|
270
277
|
* Network Firewall evalutes each stateful rule group against a packet starting with the group that has the lowest priority setting. You must ensure that the priority settings are unique within each policy.
|
|
271
278
|
*
|
|
@@ -285,7 +292,7 @@ export type StatefulRuleGroupReference = {
|
|
|
285
292
|
*/
|
|
286
293
|
export type StatelessRuleGroupReference = {
|
|
287
294
|
/**
|
|
288
|
-
* An integer setting that indicates the order in which to run the stateless rule groups in a single
|
|
295
|
+
* An integer setting that indicates the order in which to run the stateless rule groups in a single firewall policy. Network Firewall applies each stateless rule group to a packet starting with the group that has the lowest priority setting. You must ensure that the priority settings are unique within each policy.
|
|
289
296
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-firewallpolicy-statelessrulegroupreference.html#cfn-networkfirewall-firewallpolicy-statelessrulegroupreference-priority}
|
|
290
297
|
*/
|
|
291
298
|
Priority: number;
|