@propulsionworks/cloudformation 0.1.20 → 0.1.22

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (91) hide show
  1. package/out/exports/resources.generated/aws-apigateway-deployment.d.ts +1 -1
  2. package/out/exports/resources.generated/aws-appconfig-configurationprofile.d.ts +3 -3
  3. package/out/exports/resources.generated/aws-appconfig-deployment.d.ts +5 -0
  4. package/out/exports/resources.generated/aws-appintegrations-application.d.ts +52 -0
  5. package/out/exports/resources.generated/aws-aps-resourcepolicy.d.ts +22 -0
  6. package/out/exports/resources.generated/aws-arcregionswitch-plan.d.ts +132 -0
  7. package/out/exports/resources.generated/aws-athena-datacatalog.d.ts +15 -6
  8. package/out/exports/resources.generated/aws-athena-workgroup.d.ts +3 -3
  9. package/out/exports/resources.generated/aws-batch-jobdefinition.d.ts +2 -2
  10. package/out/exports/resources.generated/aws-batch-jobqueue.d.ts +7 -0
  11. package/out/exports/resources.generated/aws-batch-serviceenvironment.d.ts +1 -1
  12. package/out/exports/resources.generated/aws-billingconductor-customlineitem.d.ts +2 -2
  13. package/out/exports/resources.generated/aws-cloudfront-distribution.d.ts +4 -0
  14. package/out/exports/resources.generated/aws-codebuild-project.d.ts +17 -0
  15. package/out/exports/resources.generated/aws-codepipeline-webhook.d.ts +1 -0
  16. package/out/exports/resources.generated/aws-connect-user.d.ts +5 -0
  17. package/out/exports/resources.generated/aws-deadline-fleet.d.ts +16 -0
  18. package/out/exports/resources.generated/aws-deadline-monitor.d.ts +6 -1
  19. package/out/exports/resources.generated/aws-docdb-dbcluster.d.ts +5 -1
  20. package/out/exports/resources.generated/aws-dynamodb-globaltable.d.ts +4 -0
  21. package/out/exports/resources.generated/aws-dynamodb-table.d.ts +4 -0
  22. package/out/exports/resources.generated/aws-ec2-ec2fleet.d.ts +1 -1
  23. package/out/exports/resources.generated/aws-ec2-ippoolroutetableassociation.d.ts +33 -0
  24. package/out/exports/resources.generated/aws-ec2-launchtemplate.d.ts +7 -53
  25. package/out/exports/resources.generated/aws-ec2-natgateway.d.ts +1 -1
  26. package/out/exports/resources.generated/aws-ec2-transitgatewayconnectpeer.d.ts +5 -4
  27. package/out/exports/resources.generated/aws-ec2-volume.d.ts +2 -0
  28. package/out/exports/resources.generated/aws-ecr-repository.d.ts +2 -0
  29. package/out/exports/resources.generated/aws-ecr-repositorycreationtemplate.d.ts +2 -2
  30. package/out/exports/resources.generated/aws-ecs-capacityprovider.d.ts +0 -2
  31. package/out/exports/resources.generated/aws-eks-addon.d.ts +10 -0
  32. package/out/exports/resources.generated/aws-eks-cluster.d.ts +5 -0
  33. package/out/exports/resources.generated/aws-elasticloadbalancingv2-loadbalancer.d.ts +2 -1
  34. package/out/exports/resources.generated/aws-entityresolution-matchingworkflow.d.ts +16 -0
  35. package/out/exports/resources.generated/aws-evs-environment.d.ts +1 -9
  36. package/out/exports/resources.generated/aws-fsx-filesystem.d.ts +8 -0
  37. package/out/exports/resources.generated/aws-glue-job.d.ts +19 -8
  38. package/out/exports/resources.generated/aws-glue-tableoptimizer.d.ts +18 -1
  39. package/out/exports/resources.generated/aws-guardduty-threatentityset.d.ts +89 -0
  40. package/out/exports/resources.generated/aws-guardduty-trustedentityset.d.ts +89 -0
  41. package/out/exports/resources.generated/aws-imagebuilder-component.d.ts +1 -1
  42. package/out/exports/resources.generated/aws-imagebuilder-containerrecipe.d.ts +2 -2
  43. package/out/exports/resources.generated/aws-imagebuilder-distributionconfiguration.d.ts +1 -1
  44. package/out/exports/resources.generated/aws-imagebuilder-imagerecipe.d.ts +4 -2
  45. package/out/exports/resources.generated/aws-imagebuilder-workflow.d.ts +1 -1
  46. package/out/exports/resources.generated/aws-inspectorv2-codesecurityintegration.d.ts +160 -0
  47. package/out/exports/resources.generated/aws-inspectorv2-codesecurityscanconfiguration.d.ts +121 -0
  48. package/out/exports/resources.generated/aws-iot-mitigationaction.d.ts +2 -2
  49. package/out/exports/resources.generated/aws-iotsitewise-assetmodel.d.ts +46 -2
  50. package/out/exports/resources.generated/aws-ivs-playbackrestrictionpolicy.d.ts +2 -2
  51. package/out/exports/resources.generated/aws-ivs-stage.d.ts +54 -0
  52. package/out/exports/resources.generated/aws-kinesisfirehose-deliverystream.d.ts +1 -1
  53. package/out/exports/resources.generated/aws-lambda-permission.d.ts +2 -2
  54. package/out/exports/resources.generated/aws-lambda-url.d.ts +1 -1
  55. package/out/exports/resources.generated/aws-lambda-version.d.ts +1 -1
  56. package/out/exports/resources.generated/aws-logs-destination.d.ts +1 -1
  57. package/out/exports/resources.generated/aws-mediapackagev2-originendpoint.d.ts +18 -0
  58. package/out/exports/resources.generated/aws-networkfirewall-firewall.d.ts +36 -6
  59. package/out/exports/resources.generated/aws-networkfirewall-firewallpolicy.d.ts +16 -9
  60. package/out/exports/resources.generated/aws-networkfirewall-loggingconfiguration.d.ts +8 -8
  61. package/out/exports/resources.generated/aws-networkfirewall-rulegroup.d.ts +36 -22
  62. package/out/exports/resources.generated/aws-networkfirewall-vpcendpointassociation.d.ts +3 -3
  63. package/out/exports/resources.generated/aws-observabilityadmin-organizationtelemetryrule.d.ts +137 -0
  64. package/out/exports/resources.generated/aws-observabilityadmin-telemetryrule.d.ts +132 -0
  65. package/out/exports/resources.generated/aws-omics-workflowversion.d.ts +2 -2
  66. package/out/exports/resources.generated/aws-opensearchservice-domain.d.ts +21 -0
  67. package/out/exports/resources.generated/aws-opsworks-app.d.ts +4 -4
  68. package/out/exports/resources.generated/aws-opsworks-elasticloadbalancerattachment.d.ts +1 -1
  69. package/out/exports/resources.generated/aws-opsworks-instance.d.ts +14 -14
  70. package/out/exports/resources.generated/aws-opsworks-layer.d.ts +8 -8
  71. package/out/exports/resources.generated/aws-opsworks-stack.d.ts +25 -25
  72. package/out/exports/resources.generated/aws-opsworkscm-server.d.ts +2 -2
  73. package/out/exports/resources.generated/aws-pcs-cluster.d.ts +4 -0
  74. package/out/exports/resources.generated/aws-qbusiness-webexperience.d.ts +1 -1
  75. package/out/exports/resources.generated/aws-quicksight-dataset.d.ts +6 -6
  76. package/out/exports/resources.generated/aws-rds-dbcluster.d.ts +5 -0
  77. package/out/exports/resources.generated/aws-rds-dbinstance.d.ts +4 -29
  78. package/out/exports/resources.generated/aws-rds-dbproxy.d.ts +2 -2
  79. package/out/exports/resources.generated/aws-s3-accesspoint.d.ts +1 -1
  80. package/out/exports/resources.generated/aws-s3express-accesspoint.d.ts +1 -0
  81. package/out/exports/resources.generated/aws-s3tables-tablebucketpolicy.d.ts +2 -2
  82. package/out/exports/resources.generated/aws-s3tables-tablepolicy.d.ts +2 -2
  83. package/out/exports/resources.generated/aws-sagemaker-cluster.d.ts +101 -2
  84. package/out/exports/resources.generated/aws-sagemaker-domain.d.ts +0 -6
  85. package/out/exports/resources.generated/aws-sagemaker-processingjob.d.ts +72 -46
  86. package/out/exports/resources.generated/aws-sqs-queue.d.ts +2 -1
  87. package/out/exports/resources.generated/aws-synthetics-canary.d.ts +28 -0
  88. package/out/exports/resources.generated/aws-verifiedpermissions-policystore.d.ts +3 -5
  89. package/out/exports/resources.generated/aws-workspacesweb-portal.d.ts +7 -0
  90. package/out/exports/resources.generated/aws-workspacesweb-sessionlogger.d.ts +125 -0
  91. package/package.json +1 -1
@@ -0,0 +1,121 @@
1
+ import type { ResourceDefinitionWithAttributes } from "../main.ts";
2
+ /**
3
+ * Inspector CodeSecurityScanConfiguration resource schema
4
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-inspectorv2-codesecurityscanconfiguration.html}
5
+ */
6
+ export type InspectorV2CodeSecurityScanConfiguration = ResourceDefinitionWithAttributes<"AWS::InspectorV2::CodeSecurityScanConfiguration", InspectorV2CodeSecurityScanConfigurationProps, InspectorV2CodeSecurityScanConfigurationAttribs>;
7
+ /**
8
+ * Inspector CodeSecurityScanConfiguration resource schema
9
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-inspectorv2-codesecurityscanconfiguration.html}
10
+ */
11
+ export type InspectorV2CodeSecurityScanConfigurationProps = {
12
+ /**
13
+ * Code Security Scan Configuration
14
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-inspectorv2-codesecurityscanconfiguration.html#cfn-inspectorv2-codesecurityscanconfiguration-configuration}
15
+ */
16
+ Configuration?: CodeSecurityScanConfiguration | undefined;
17
+ /**
18
+ * Configuration Level
19
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-inspectorv2-codesecurityscanconfiguration.html#cfn-inspectorv2-codesecurityscanconfiguration-level}
20
+ */
21
+ Level?: ConfigurationLevel | undefined;
22
+ /**
23
+ * Code Security Scan Configuration name
24
+ * @minLength 1
25
+ * @maxLength 60
26
+ * @pattern ^[a-zA-Z0-9-_$:.]*$
27
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-inspectorv2-codesecurityscanconfiguration.html#cfn-inspectorv2-codesecurityscanconfiguration-name}
28
+ */
29
+ Name?: string | undefined;
30
+ /**
31
+ * Scope Settings
32
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-inspectorv2-codesecurityscanconfiguration.html#cfn-inspectorv2-codesecurityscanconfiguration-scopesettings}
33
+ */
34
+ ScopeSettings?: ScopeSettings | undefined;
35
+ /**
36
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-inspectorv2-codesecurityscanconfiguration.html#cfn-inspectorv2-codesecurityscanconfiguration-tags}
37
+ */
38
+ Tags?: Record<string, string> | undefined;
39
+ };
40
+ /**
41
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-inspectorv2-codesecurityscanconfiguration.html#aws-resource-inspectorv2-codesecurityscanconfiguration-return-values}
42
+ */
43
+ export type InspectorV2CodeSecurityScanConfigurationAttribs = {
44
+ /**
45
+ * Code Security Scan Configuration ARN
46
+ * @pattern ^arn:(aws[a-zA-Z-]*)?:inspector2:[a-z]{2}(-gov)?-[a-z]+-\d{1}:\d{12}:owner/(\d{12}|o-[a-z0-9]{10,32})/codesecurity-configuration/[a-f0-9-]{36}$
47
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-inspectorv2-codesecurityscanconfiguration.html#cfn-inspectorv2-codesecurityscanconfiguration-arn}
48
+ */
49
+ Arn: string;
50
+ };
51
+ /**
52
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityscanconfiguration-codesecurityscanconfiguration.html}
53
+ */
54
+ export type CodeSecurityScanConfiguration = {
55
+ /**
56
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityscanconfiguration-codesecurityscanconfiguration.html#cfn-inspectorv2-codesecurityscanconfiguration-codesecurityscanconfiguration-continuousintegrationscanconfiguration}
57
+ */
58
+ continuousIntegrationScanConfiguration?: ContinuousIntegrationScanConfiguration | undefined;
59
+ /**
60
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityscanconfiguration-codesecurityscanconfiguration.html#cfn-inspectorv2-codesecurityscanconfiguration-codesecurityscanconfiguration-periodicscanconfiguration}
61
+ */
62
+ periodicScanConfiguration?: PeriodicScanConfiguration | undefined;
63
+ /**
64
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityscanconfiguration-codesecurityscanconfiguration.html#cfn-inspectorv2-codesecurityscanconfiguration-codesecurityscanconfiguration-rulesetcategories}
65
+ */
66
+ ruleSetCategories: RuleSetCategory[];
67
+ };
68
+ /**
69
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityscanconfiguration-configurationlevel.html}
70
+ */
71
+ export type ConfigurationLevel = "ORGANIZATION" | "ACCOUNT";
72
+ /**
73
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityscanconfiguration-continuousintegrationscanconfiguration.html}
74
+ */
75
+ export type ContinuousIntegrationScanConfiguration = {
76
+ /**
77
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityscanconfiguration-continuousintegrationscanconfiguration.html#cfn-inspectorv2-codesecurityscanconfiguration-continuousintegrationscanconfiguration-supportedevents}
78
+ */
79
+ supportedEvents: ContinuousIntegrationScanEvent[];
80
+ };
81
+ /**
82
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityscanconfiguration-continuousintegrationscanevent.html}
83
+ */
84
+ export type ContinuousIntegrationScanEvent = "PULL_REQUEST" | "PUSH";
85
+ /**
86
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityscanconfiguration-periodicscanconfiguration.html}
87
+ */
88
+ export type PeriodicScanConfiguration = {
89
+ /**
90
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityscanconfiguration-periodicscanconfiguration.html#cfn-inspectorv2-codesecurityscanconfiguration-periodicscanconfiguration-frequency}
91
+ */
92
+ frequency?: PeriodicScanFrequency | undefined;
93
+ /**
94
+ * @minLength 1
95
+ * @maxLength 256
96
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityscanconfiguration-periodicscanconfiguration.html#cfn-inspectorv2-codesecurityscanconfiguration-periodicscanconfiguration-frequencyexpression}
97
+ */
98
+ frequencyExpression?: string | undefined;
99
+ };
100
+ /**
101
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityscanconfiguration-periodicscanfrequency.html}
102
+ */
103
+ export type PeriodicScanFrequency = "WEEKLY" | "MONTHLY" | "NEVER";
104
+ /**
105
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityscanconfiguration-projectselectionscope.html}
106
+ */
107
+ export type ProjectSelectionScope = "ALL";
108
+ /**
109
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityscanconfiguration-rulesetcategory.html}
110
+ */
111
+ export type RuleSetCategory = "SAST" | "IAC" | "SCA";
112
+ /**
113
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityscanconfiguration-scopesettings.html}
114
+ */
115
+ export type ScopeSettings = {
116
+ /**
117
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityscanconfiguration-scopesettings.html#cfn-inspectorv2-codesecurityscanconfiguration-scopesettings-projectselectionscope}
118
+ */
119
+ projectSelectionScope?: ProjectSelectionScope | undefined;
120
+ };
121
+ //# sourceMappingURL=aws-inspectorv2-codesecurityscanconfiguration.d.ts.map
@@ -112,7 +112,7 @@ export type EnableIoTLoggingParams = {
112
112
  LogLevel: "DEBUG" | "INFO" | "ERROR" | "WARN" | "UNSET_VALUE";
113
113
  /**
114
114
  * The Amazon Resource Name (ARN) of the IAM role used for logging.
115
- * @minLength 20
115
+ * @minLength 11
116
116
  * @maxLength 2048
117
117
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iot-mitigationaction-enableiotloggingparams.html#cfn-iot-mitigationaction-enableiotloggingparams-rolearnforlogging}
118
118
  */
@@ -125,7 +125,7 @@ export type EnableIoTLoggingParams = {
125
125
  export type PublishFindingToSnsParams = {
126
126
  /**
127
127
  * The ARN of the topic to which you want to publish the findings.
128
- * @minLength 20
128
+ * @minLength 11
129
129
  * @maxLength 2048
130
130
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iot-mitigationaction-publishfindingtosnsparams.html#cfn-iot-mitigationaction-publishfindingtosnsparams-topicarn}
131
131
  */
@@ -2,20 +2,22 @@ import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
2
2
  /**
3
3
  * Creates an asset model from specified property and hierarchy definitions. You create assets from asset models. With asset models, you can easily create assets of the same type that have standardized definitions. Each asset created from a model inherits the asset model's property and hierarchy definitions. For more information, see [Defining asset models](https://docs.aws.amazon.com/iot-sitewise/latest/userguide/define-models.html) in the *AWS IoT SiteWise User Guide* .
4
4
  *
5
- * You can create two types of asset models, `ASSET_MODEL` or `COMPONENT_MODEL` .
5
+ * You can create three types of asset models, `ASSET_MODEL` , `COMPONENT_MODEL` , or an `INTERFACE` .
6
6
  *
7
7
  * - *ASSET_MODEL* – (default) An asset model that you can use to create assets. Can't be included as a component in another asset model.
8
8
  * - *COMPONENT_MODEL* – A reusable component that you can include in the composite models of other asset models. You can't create assets directly from this type of asset model.
9
+ * - *INTERFACE* – An interface is a type of model that defines a standard structure that can be applied to different asset models.
9
10
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotsitewise-assetmodel.html}
10
11
  */
11
12
  export type IoTSiteWiseAssetModel = ResourceDefinitionWithAttributes<"AWS::IoTSiteWise::AssetModel", IoTSiteWiseAssetModelProps, IoTSiteWiseAssetModelAttribs>;
12
13
  /**
13
14
  * Creates an asset model from specified property and hierarchy definitions. You create assets from asset models. With asset models, you can easily create assets of the same type that have standardized definitions. Each asset created from a model inherits the asset model's property and hierarchy definitions. For more information, see [Defining asset models](https://docs.aws.amazon.com/iot-sitewise/latest/userguide/define-models.html) in the *AWS IoT SiteWise User Guide* .
14
15
  *
15
- * You can create two types of asset models, `ASSET_MODEL` or `COMPONENT_MODEL` .
16
+ * You can create three types of asset models, `ASSET_MODEL` , `COMPONENT_MODEL` , or an `INTERFACE` .
16
17
  *
17
18
  * - *ASSET_MODEL* – (default) An asset model that you can use to create assets. Can't be included as a component in another asset model.
18
19
  * - *COMPONENT_MODEL* – A reusable component that you can include in the composite models of other asset models. You can't create assets directly from this type of asset model.
20
+ * - *INTERFACE* – An interface is a type of model that defines a standard structure that can be applied to different asset models.
19
21
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotsitewise-assetmodel.html}
20
22
  */
21
23
  export type IoTSiteWiseAssetModelProps = {
@@ -66,6 +68,11 @@ export type IoTSiteWiseAssetModelProps = {
66
68
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotsitewise-assetmodel.html#cfn-iotsitewise-assetmodel-assetmodeltype}
67
69
  */
68
70
  AssetModelType?: string | undefined;
71
+ /**
72
+ * a list of asset model and interface relationships
73
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotsitewise-assetmodel.html#cfn-iotsitewise-assetmodel-enforcedassetmodelinterfacerelationships}
74
+ */
75
+ EnforcedAssetModelInterfaceRelationships?: EnforcedAssetModelInterfaceRelationship[] | undefined;
69
76
  /**
70
77
  * A list of key-value pairs that contain metadata for the asset. For more information, see [Tagging your AWS IoT SiteWise resources](https://docs.aws.amazon.com/iot-sitewise/latest/userguide/tag-resources.html) in the *AWS IoT SiteWise User Guide* .
71
78
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotsitewise-assetmodel.html#cfn-iotsitewise-assetmodel-tags}
@@ -256,6 +263,43 @@ export type DataType = "STRING" | "INTEGER" | "DOUBLE" | "BOOLEAN" | "STRUCT";
256
263
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iotsitewise-assetmodel-datatypespec.html}
257
264
  */
258
265
  export type DataTypeSpec = "AWS/ALARM_STATE";
266
+ /**
267
+ * Contains information about enforced interface property and asset model property
268
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iotsitewise-assetmodel-enforcedassetmodelinterfacepropertymapping.html}
269
+ */
270
+ export type EnforcedAssetModelInterfacePropertyMapping = {
271
+ /**
272
+ * The external ID of the enforced asset model property
273
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iotsitewise-assetmodel-enforcedassetmodelinterfacepropertymapping.html#cfn-iotsitewise-assetmodel-enforcedassetmodelinterfacepropertymapping-assetmodelpropertyexternalid}
274
+ */
275
+ AssetModelPropertyExternalId?: string | undefined;
276
+ /**
277
+ * The logical ID of the enforced asset model property
278
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iotsitewise-assetmodel-enforcedassetmodelinterfacepropertymapping.html#cfn-iotsitewise-assetmodel-enforcedassetmodelinterfacepropertymapping-assetmodelpropertylogicalid}
279
+ */
280
+ AssetModelPropertyLogicalId?: string | undefined;
281
+ /**
282
+ * The external ID of the enforced interface property
283
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iotsitewise-assetmodel-enforcedassetmodelinterfacepropertymapping.html#cfn-iotsitewise-assetmodel-enforcedassetmodelinterfacepropertymapping-interfaceassetmodelpropertyexternalid}
284
+ */
285
+ InterfaceAssetModelPropertyExternalId: string;
286
+ };
287
+ /**
288
+ * Contains information about enforced interface hierarchy and asset model hierarchy
289
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iotsitewise-assetmodel-enforcedassetmodelinterfacerelationship.html}
290
+ */
291
+ export type EnforcedAssetModelInterfaceRelationship = {
292
+ /**
293
+ * The ID of the interface that is enforced to the asset model
294
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iotsitewise-assetmodel-enforcedassetmodelinterfacerelationship.html#cfn-iotsitewise-assetmodel-enforcedassetmodelinterfacerelationship-interfaceassetmodelid}
295
+ */
296
+ InterfaceAssetModelId?: string | undefined;
297
+ /**
298
+ * Contains information about enforced interface property and asset model property
299
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iotsitewise-assetmodel-enforcedassetmodelinterfacerelationship.html#cfn-iotsitewise-assetmodel-enforcedassetmodelinterfacerelationship-propertymappings}
300
+ */
301
+ PropertyMappings?: EnforcedAssetModelInterfacePropertyMapping[] | undefined;
302
+ };
259
303
  /**
260
304
  * Contains expression variable information.
261
305
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iotsitewise-assetmodel-expressionvariable.html}
@@ -14,13 +14,13 @@ export type IVSPlaybackRestrictionPolicyProps = {
14
14
  * @default []
15
15
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ivs-playbackrestrictionpolicy.html#cfn-ivs-playbackrestrictionpolicy-allowedcountries}
16
16
  */
17
- AllowedCountries: string[];
17
+ AllowedCountries?: string[] | undefined;
18
18
  /**
19
19
  * A list of origin sites that control CORS restriction. Allowed values are the same as valid values of the Origin header defined at [https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Origin"](https://docs.aws.amazon.com/https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Origin)
20
20
  * @default []
21
21
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ivs-playbackrestrictionpolicy.html#cfn-ivs-playbackrestrictionpolicy-allowedorigins}
22
22
  */
23
- AllowedOrigins: string[];
23
+ AllowedOrigins?: string[] | undefined;
24
24
  /**
25
25
  * Whether channel playback is constrained by the origin site.
26
26
  * @default false
@@ -56,12 +56,38 @@ export type IVSStageAttribs = {
56
56
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ivs-stage-autoparticipantrecordingconfiguration.html}
57
57
  */
58
58
  export type AutoParticipantRecordingConfiguration = {
59
+ /**
60
+ * HLS configuration object for individual participant recording.
61
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ivs-stage-autoparticipantrecordingconfiguration.html#cfn-ivs-stage-autoparticipantrecordingconfiguration-hlsconfiguration}
62
+ */
63
+ HlsConfiguration?: {
64
+ /**
65
+ * An object representing a configuration of participant HLS recordings for individual participant recording.
66
+ */
67
+ ParticipantRecordingHlsConfiguration?: {
68
+ /**
69
+ * Defines the target duration for recorded segments generated when recording a stage participant. Segments may have durations longer than the specified value when needed to ensure each segment begins with a keyframe. Default: 6.
70
+ * @min 2
71
+ * @max 10
72
+ * @default 6
73
+ */
74
+ TargetSegmentDurationSeconds?: number | undefined;
75
+ } | undefined;
76
+ } | undefined;
59
77
  /**
60
78
  * Types of media to be recorded. Default: `AUDIO_VIDEO` .
61
79
  * @default ["AUDIO_VIDEO"]
62
80
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ivs-stage-autoparticipantrecordingconfiguration.html#cfn-ivs-stage-autoparticipantrecordingconfiguration-mediatypes}
63
81
  */
64
82
  MediaTypes?: ("AUDIO_VIDEO" | "AUDIO_ONLY")[] | undefined;
83
+ /**
84
+ * If a stage publisher disconnects and then reconnects within the specified interval, the multiple recordings will be considered a single recording and merged together. The default value is 0, which disables merging.
85
+ * @min 0
86
+ * @max 300
87
+ * @default 0
88
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ivs-stage-autoparticipantrecordingconfiguration.html#cfn-ivs-stage-autoparticipantrecordingconfiguration-recordingreconnectwindowseconds}
89
+ */
90
+ RecordingReconnectWindowSeconds?: number | undefined;
65
91
  /**
66
92
  * ARN of the StorageConfiguration resource to use for individual participant recording. Default: "" (empty string, no storage configuration is specified). Individual participant recording cannot be started unless a storage configuration is specified, when a Stage is created or updated.
67
93
  * @minLength 0
@@ -70,5 +96,33 @@ export type AutoParticipantRecordingConfiguration = {
70
96
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ivs-stage-autoparticipantrecordingconfiguration.html#cfn-ivs-stage-autoparticipantrecordingconfiguration-storageconfigurationarn}
71
97
  */
72
98
  StorageConfigurationArn: string;
99
+ /**
100
+ * A complex type that allows you to enable/disable the recording of thumbnails for individual participant recording and modify the interval at which thumbnails are generated for the live session.
101
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ivs-stage-autoparticipantrecordingconfiguration.html#cfn-ivs-stage-autoparticipantrecordingconfiguration-thumbnailconfiguration}
102
+ */
103
+ ThumbnailConfiguration?: {
104
+ /**
105
+ * An object representing a configuration of thumbnails for recorded video from an individual participant.
106
+ */
107
+ ParticipantThumbnailConfiguration?: {
108
+ /**
109
+ * Thumbnail recording mode. Default: DISABLED.
110
+ * @default "INTERVAL"
111
+ */
112
+ RecordingMode?: "INTERVAL" | "DISABLED" | undefined;
113
+ /**
114
+ * Indicates the format in which thumbnails are recorded. SEQUENTIAL records all generated thumbnails in a serial manner, to the media/thumbnails/high directory. LATEST saves the latest thumbnail in media/latest_thumbnail/high/thumb.jpg and overwrites it at the interval specified by targetIntervalSeconds. You can enable both SEQUENTIAL and LATEST. Default: SEQUENTIAL.
115
+ * @default ["SEQUENTIAL"]
116
+ */
117
+ Storage?: ("SEQUENTIAL" | "LATEST")[] | undefined;
118
+ /**
119
+ * The targeted thumbnail-generation interval in seconds. This is configurable only if recordingMode is INTERVAL. Default: 60.
120
+ * @min 1
121
+ * @max 86400
122
+ * @default 60
123
+ */
124
+ TargetIntervalSeconds?: number | undefined;
125
+ } | undefined;
126
+ } | undefined;
73
127
  };
74
128
  //# sourceMappingURL=aws-ivs-stage.d.ts.map
@@ -702,7 +702,7 @@ export type Deserializer = {
702
702
  OpenXJsonSerDe?: OpenXJsonSerDe | undefined;
703
703
  };
704
704
  /**
705
- * Describes the configuration of a destination in Apache Iceberg Tables.
705
+ * Describes the configuration of a destination in Apache Iceberg Tables. This section is only needed for tables where you want to update or delete data.
706
706
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kinesisfirehose-deliverystream-destinationtableconfiguration.html}
707
707
  */
708
708
  export type DestinationTableConfiguration = {
@@ -47,7 +47,7 @@ export type LambdaPermissionProps = {
47
47
  * You can append a version number or alias to any of the formats. The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
48
48
  * @minLength 1
49
49
  * @maxLength 140
50
- * @pattern ^(arn:(aws[a-zA-Z-]*)?:lambda:)?([a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:)?(\d{12}:)?(function:)?([a-zA-Z0-9-_]+)(:(\$LATEST|[a-zA-Z0-9-_]+))?$
50
+ * @pattern ^(arn:(aws[a-zA-Z-]*)?:lambda:)?((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:)?(\d{12}:)?(function:)?([a-zA-Z0-9-_]+)(:(\$LATEST|[a-zA-Z0-9-_]+))?$
51
51
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-permission.html#cfn-lambda-permission-functionname}
52
52
  */
53
53
  FunctionName: string;
@@ -86,7 +86,7 @@ export type LambdaPermissionProps = {
86
86
  * Note that Lambda configures the comparison using the `StringLike` operator.
87
87
  * @minLength 12
88
88
  * @maxLength 1024
89
- * @pattern ^arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:([a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1})?:(\d{12})?:(.*)$
89
+ * @pattern ^arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1})?:(\d{12})?:(.*)$
90
90
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-permission.html#cfn-lambda-permission-sourcearn}
91
91
  */
92
92
  SourceArn?: string | undefined;
@@ -23,7 +23,7 @@ export type LambdaUrlProps = {
23
23
  * Use one of the following options:
24
24
  *
25
25
  * - `BUFFERED` – This is the default option. Lambda invokes your function using the `Invoke` API operation. Invocation results are available when the payload is complete. The maximum payload size is 6 MB.
26
- * - `RESPONSE_STREAM` – Your function streams payload results as they become available. Lambda invokes your function using the `InvokeWithResponseStream` API operation. The maximum response payload size is 20 MB, however, you can [request a quota increase](https://docs.aws.amazon.com/servicequotas/latest/userguide/request-quota-increase.html) .
26
+ * - `RESPONSE_STREAM` – Your function streams payload results as they become available. Lambda invokes your function using the `InvokeWithResponseStream` API operation. The maximum response payload size is 200 MB.
27
27
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-url.html#cfn-lambda-url-invokemode}
28
28
  */
29
29
  InvokeMode?: "BUFFERED" | "RESPONSE_STREAM" | undefined;
@@ -52,7 +52,7 @@ export type LambdaVersionProps = {
52
52
  export type LambdaVersionAttribs = {
53
53
  /**
54
54
  * The ARN of the function.
55
- * @pattern ^(arn:(aws[a-zA-Z-]*)?:lambda:)?([a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:)?(\d{12}:)?(function:)?([a-zA-Z0-9-_]+)(:(\$LATEST(\.PUBLISHED)?|[a-zA-Z0-9-_]+))?$
55
+ * @pattern ^(arn:(aws[a-zA-Z-]*)?:lambda:)?([a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:)?(\d{12}:)?(function:)?([a-zA-Z0-9-_]+)(:(\$LATEST|[a-zA-Z0-9-_]+))?$
56
56
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-version.html#cfn-lambda-version-functionarn}
57
57
  */
58
58
  FunctionArn: string;
@@ -30,7 +30,7 @@ export type LogsDestinationProps = {
30
30
  */
31
31
  RoleArn: string;
32
32
  /**
33
- * An array of key-value pairs to apply to this resource.
33
+ * The tags that have been assigned to this delivery destination.
34
34
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-logs-destination.html#cfn-logs-destination-tags}
35
35
  */
36
36
  Tags?: Tag[] | undefined;
@@ -455,6 +455,24 @@ export type DrmSystem = "CLEAR_KEY_AES_128" | "FAIRPLAY" | "PLAYREADY" | "WIDEVI
455
455
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediapackagev2-originendpoint-encryption.html}
456
456
  */
457
457
  export type Encryption = {
458
+ /**
459
+ * Excludes SEIG and SGPD boxes from segment metadata in CMAF containers.
460
+ *
461
+ * When set to `true` , MediaPackage omits these DRM metadata boxes from CMAF segments, which can improve compatibility with certain devices and players that don't support these boxes.
462
+ *
463
+ * Important considerations:
464
+ *
465
+ * - This setting only affects CMAF container formats
466
+ * - Key rotation can still be handled through media playlist signaling
467
+ * - PSSH and TENC boxes remain unaffected
468
+ * - Default behavior is preserved when this setting is disabled
469
+ *
470
+ * Valid values: `true` | `false`
471
+ *
472
+ * Default: `false`
473
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediapackagev2-originendpoint-encryption.html#cfn-mediapackagev2-originendpoint-encryption-cmafexcludesegmentdrmmetadata}
474
+ */
475
+ CmafExcludeSegmentDrmMetadata?: boolean | undefined;
458
476
  /**
459
477
  * A 128-bit, 16-byte hex value represented by a 32-character string, used in conjunction with the key for encrypting content. If you don't specify a value, then MediaPackage creates the constant initialization vector (IV).
460
478
  * @minLength 32
@@ -1,18 +1,28 @@
1
1
  import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
2
2
  /**
3
- * Use the `Firewall` to provide stateful, managed, network firewall and intrusion detection and prevention filtering for your VPCs in Amazon VPC .
3
+ * Use the firewall to provide stateful, managed, network firewall and intrusion detection and prevention filtering for your VPCs in Amazon VPC .
4
4
  *
5
5
  * The firewall defines the configuration settings for an AWS Network Firewall firewall. The settings include the firewall policy, the subnets in your VPC to use for the firewall endpoints, and any tags that are attached to the firewall AWS resource.
6
6
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-firewall.html}
7
7
  */
8
8
  export type NetworkFirewallFirewall = ResourceDefinitionWithAttributes<"AWS::NetworkFirewall::Firewall", NetworkFirewallFirewallProps, NetworkFirewallFirewallAttribs>;
9
9
  /**
10
- * Use the `Firewall` to provide stateful, managed, network firewall and intrusion detection and prevention filtering for your VPCs in Amazon VPC .
10
+ * Use the firewall to provide stateful, managed, network firewall and intrusion detection and prevention filtering for your VPCs in Amazon VPC .
11
11
  *
12
12
  * The firewall defines the configuration settings for an AWS Network Firewall firewall. The settings include the firewall policy, the subnets in your VPC to use for the firewall endpoints, and any tags that are attached to the firewall AWS resource.
13
13
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-firewall.html}
14
14
  */
15
15
  export type NetworkFirewallFirewallProps = {
16
+ /**
17
+ * A setting indicating whether the firewall is protected against changes to its Availability Zone configuration. When set to `TRUE` , you must first disable this protection before adding or removing Availability Zones.
18
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-firewall.html#cfn-networkfirewall-firewall-availabilityzonechangeprotection}
19
+ */
20
+ AvailabilityZoneChangeProtection?: boolean | undefined;
21
+ /**
22
+ * The Availability Zones where the firewall endpoints are created for a transit gateway-attached firewall. Each mapping specifies an Availability Zone where the firewall processes traffic.
23
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-firewall.html#cfn-networkfirewall-firewall-availabilityzonemappings}
24
+ */
25
+ AvailabilityZoneMappings?: AvailabilityZoneMapping[] | undefined;
16
26
  /**
17
27
  * A flag indicating whether it is possible to delete the firewall. A setting of `TRUE` indicates that the firewall is protected against deletion. Use this setting to protect against accidentally deleting a firewall that is in use. When you create a firewall, the operation initializes this flag to `TRUE` .
18
28
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-firewall.html#cfn-networkfirewall-firewall-deleteprotection}
@@ -63,7 +73,7 @@ export type NetworkFirewallFirewallProps = {
63
73
  * In addition to these subnets, you can define other endpoints for the firewall in `VpcEndpointAssociation` resources. You can define these additional endpoints for any VPC, and for any of the Availability Zones where the firewall resource already has a subnet mapping. VPC endpoint associations give you the ability to protect multiple VPCs using a single firewall, and to define multiple firewall endpoints for a VPC in a single Availability Zone.
64
74
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-firewall.html#cfn-networkfirewall-firewall-subnetmappings}
65
75
  */
66
- SubnetMappings: SubnetMapping[];
76
+ SubnetMappings?: SubnetMapping[] | undefined;
67
77
  /**
68
78
  * An array of key-value pairs to apply to this resource.
69
79
  *
@@ -71,6 +81,13 @@ export type NetworkFirewallFirewallProps = {
71
81
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-firewall.html#cfn-networkfirewall-firewall-tags}
72
82
  */
73
83
  Tags?: Tag[] | undefined;
84
+ /**
85
+ * The unique identifier of the transit gateway associated with this firewall. This field is only present for transit gateway-attached firewalls.
86
+ * @maxLength 128
87
+ * @pattern ^tgw-[0-9a-z]+$
88
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-firewall.html#cfn-networkfirewall-firewall-transitgatewayid}
89
+ */
90
+ TransitGatewayId?: string | undefined;
74
91
  /**
75
92
  * The unique identifier of the VPC where the firewall is in use. You can't change the VPC of a firewall after you create the firewall.
76
93
  * @minLength 1
@@ -78,7 +95,7 @@ export type NetworkFirewallFirewallProps = {
78
95
  * @pattern ^vpc-[0-9a-f]+$
79
96
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-firewall.html#cfn-networkfirewall-firewall-vpcid}
80
97
  */
81
- VpcId: string;
98
+ VpcId?: string | undefined;
82
99
  };
83
100
  /**
84
101
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-firewall.html#aws-resource-networkfirewall-firewall-return-values}
@@ -90,12 +107,12 @@ export type NetworkFirewallFirewallAttribs = {
90
107
  */
91
108
  EndpointIds: string[];
92
109
  /**
93
- * The Amazon Resource Name (ARN) of the `Firewall` .
110
+ * The Amazon Resource Name (ARN) of the firewall.
94
111
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-firewall.html#cfn-networkfirewall-firewall-firewallarn}
95
112
  */
96
113
  FirewallArn: string;
97
114
  /**
98
- * The name of the `Firewall` resource.
115
+ * The name of the firewallresource.
99
116
  * @minLength 36
100
117
  * @maxLength 36
101
118
  * @pattern ^([0-9a-f]{8})-([0-9a-f]{4}-){3}([0-9a-f]{12})$
@@ -103,6 +120,19 @@ export type NetworkFirewallFirewallAttribs = {
103
120
  */
104
121
  FirewallId: string;
105
122
  };
123
+ /**
124
+ * Defines the mapping between an Availability Zone and a firewall endpoint for a transit gateway-attached firewall. Each mapping represents where the firewall can process traffic. You use these mappings when calling `CreateFirewall` , `AssociateAvailabilityZones` , and `DisassociateAvailabilityZones` .
125
+ *
126
+ * To retrieve the current Availability Zone mappings for a firewall, use `DescribeFirewall` .
127
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-firewall-availabilityzonemapping.html}
128
+ */
129
+ export type AvailabilityZoneMapping = {
130
+ /**
131
+ * The ID of the Availability Zone where the firewall endpoint is located. For example, `us-east-2a` . The Availability Zone must be in the same Region as the transit gateway.
132
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-firewall-availabilityzonemapping.html#cfn-networkfirewall-firewall-availabilityzonemapping-availabilityzone}
133
+ */
134
+ AvailabilityZone: string;
135
+ };
106
136
  /**
107
137
  * An analysis type.
108
138
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-firewall-enabledanalysistype.html}
@@ -1,11 +1,11 @@
1
1
  import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
2
2
  /**
3
- * Use the `FirewallPolicy` to define the stateless and stateful network traffic filtering behavior for your `Firewall` . You can use one firewall policy for multiple firewalls.
3
+ * Use the firewall policy to define the stateless and stateful network traffic filtering behavior for your firewall. You can use one firewall policy for multiple firewalls.
4
4
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-firewallpolicy.html}
5
5
  */
6
6
  export type NetworkFirewallFirewallPolicy = ResourceDefinitionWithAttributes<"AWS::NetworkFirewall::FirewallPolicy", NetworkFirewallFirewallPolicyProps, NetworkFirewallFirewallPolicyAttribs>;
7
7
  /**
8
- * Use the `FirewallPolicy` to define the stateless and stateful network traffic filtering behavior for your `Firewall` . You can use one firewall policy for multiple firewalls.
8
+ * Use the firewall policy to define the stateless and stateful network traffic filtering behavior for your firewall. You can use one firewall policy for multiple firewalls.
9
9
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-firewallpolicy.html}
10
10
  */
11
11
  export type NetworkFirewallFirewallPolicyProps = {
@@ -43,12 +43,12 @@ export type NetworkFirewallFirewallPolicyProps = {
43
43
  */
44
44
  export type NetworkFirewallFirewallPolicyAttribs = {
45
45
  /**
46
- * The Amazon Resource Name (ARN) of the `FirewallPolicy` .
46
+ * The Amazon Resource Name (ARN) of the firewall policy.
47
47
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-firewallpolicy.html#cfn-networkfirewall-firewallpolicy-firewallpolicyarn}
48
48
  */
49
49
  FirewallPolicyArn: string;
50
50
  /**
51
- * The unique ID of the `FirewallPolicy` resource.
51
+ * The unique ID of the firewall policy resource.
52
52
  * @minLength 36
53
53
  * @maxLength 36
54
54
  * @pattern ^([0-9a-f]{8})-([0-9a-f]{4}-){3}([0-9a-f]{12})$
@@ -76,8 +76,8 @@ export type ActionDefinition = {
76
76
  *
77
77
  * You can use custom actions in the following places:
78
78
  *
79
- * - In an `RuleGroup.StatelessRulesAndCustomActions` . The custom actions are available for use by name inside the `StatelessRulesAndCustomActions` where you define them. You can use them for your stateless rule actions to specify what to do with a packet that matches the rule's match attributes.
80
- * - In an `FirewallPolicy` specification, in `StatelessCustomActions` . The custom actions are available for use inside the policy where you define them. You can use them for the policy's default stateless actions settings to specify what to do with packets that don't match any of the policy's stateless rules.
79
+ * - In an `StatelessRulesAndCustomActions` . The custom actions are available for use by name inside the `StatelessRulesAndCustomActions` where you define them. You can use them for your stateless rule actions to specify what to do with a packet that matches the rule's match attributes.
80
+ * - In an firewall policy specification, in `StatelessCustomActions` . The custom actions are available for use inside the policy where you define them. You can use them for the policy's default stateless actions settings to specify what to do with packets that don't match any of the policy's stateless rules.
81
81
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-firewallpolicy-customaction.html}
82
82
  */
83
83
  export type CustomAction = {
@@ -184,7 +184,7 @@ export type FirewallPolicy = {
184
184
  TLSInspectionConfigurationArn?: string | undefined;
185
185
  };
186
186
  /**
187
- * A list of IP addresses and address ranges, in CIDR notation. This is part of a `RuleVariables` .
187
+ * A list of IP addresses and address ranges, in CIDR notation. This is part of a rule variable.
188
188
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-firewallpolicy-ipset.html}
189
189
  */
190
190
  export type IPSet = {
@@ -259,13 +259,20 @@ export type StatefulRuleGroupOverride = {
259
259
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-firewallpolicy-statefulrulegroupreference.html}
260
260
  */
261
261
  export type StatefulRuleGroupReference = {
262
+ /**
263
+ * AWS Network Firewall plans to augment the active threat defense managed rule group with an additional deep threat inspection capability. When this capability is released, AWS will analyze service logs of network traffic processed by these rule groups to identify threat indicators across customers. AWS will use these threat indicators to improve the active threat defense managed rule groups and protect the security of AWS customers and services.
264
+ *
265
+ * > Customers can opt-out of deep threat inspection at any time through the AWS Network Firewall console or API. When customers opt out, AWS Network Firewall will not use the network traffic processed by those customers' active threat defense rule groups for rule group improvement.
266
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-firewallpolicy-statefulrulegroupreference.html#cfn-networkfirewall-firewallpolicy-statefulrulegroupreference-deepthreatinspection}
267
+ */
268
+ DeepThreatInspection?: boolean | undefined;
262
269
  /**
263
270
  * The action that allows the policy owner to override the behavior of the rule group within a policy.
264
271
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-firewallpolicy-statefulrulegroupreference.html#cfn-networkfirewall-firewallpolicy-statefulrulegroupreference-override}
265
272
  */
266
273
  Override?: StatefulRuleGroupOverride | undefined;
267
274
  /**
268
- * An integer setting that indicates the order in which to run the stateful rule groups in a single `FirewallPolicy` . This setting only applies to firewall policies that specify the `STRICT_ORDER` rule order in the stateful engine options settings.
275
+ * An integer setting that indicates the order in which to run the stateful rule groups in a single firewall policy. This setting only applies to firewall policies that specify the `STRICT_ORDER` rule order in the stateful engine options settings.
269
276
  *
270
277
  * Network Firewall evalutes each stateful rule group against a packet starting with the group that has the lowest priority setting. You must ensure that the priority settings are unique within each policy.
271
278
  *
@@ -285,7 +292,7 @@ export type StatefulRuleGroupReference = {
285
292
  */
286
293
  export type StatelessRuleGroupReference = {
287
294
  /**
288
- * An integer setting that indicates the order in which to run the stateless rule groups in a single `FirewallPolicy` . Network Firewall applies each stateless rule group to a packet starting with the group that has the lowest priority setting. You must ensure that the priority settings are unique within each policy.
295
+ * An integer setting that indicates the order in which to run the stateless rule groups in a single firewall policy. Network Firewall applies each stateless rule group to a packet starting with the group that has the lowest priority setting. You must ensure that the priority settings are unique within each policy.
289
296
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-firewallpolicy-statelessrulegroupreference.html#cfn-networkfirewall-firewallpolicy-statelessrulegroupreference-priority}
290
297
  */
291
298
  Priority: number;