@propulsionworks/cloudformation 0.1.20 → 0.1.22

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (91) hide show
  1. package/out/exports/resources.generated/aws-apigateway-deployment.d.ts +1 -1
  2. package/out/exports/resources.generated/aws-appconfig-configurationprofile.d.ts +3 -3
  3. package/out/exports/resources.generated/aws-appconfig-deployment.d.ts +5 -0
  4. package/out/exports/resources.generated/aws-appintegrations-application.d.ts +52 -0
  5. package/out/exports/resources.generated/aws-aps-resourcepolicy.d.ts +22 -0
  6. package/out/exports/resources.generated/aws-arcregionswitch-plan.d.ts +132 -0
  7. package/out/exports/resources.generated/aws-athena-datacatalog.d.ts +15 -6
  8. package/out/exports/resources.generated/aws-athena-workgroup.d.ts +3 -3
  9. package/out/exports/resources.generated/aws-batch-jobdefinition.d.ts +2 -2
  10. package/out/exports/resources.generated/aws-batch-jobqueue.d.ts +7 -0
  11. package/out/exports/resources.generated/aws-batch-serviceenvironment.d.ts +1 -1
  12. package/out/exports/resources.generated/aws-billingconductor-customlineitem.d.ts +2 -2
  13. package/out/exports/resources.generated/aws-cloudfront-distribution.d.ts +4 -0
  14. package/out/exports/resources.generated/aws-codebuild-project.d.ts +17 -0
  15. package/out/exports/resources.generated/aws-codepipeline-webhook.d.ts +1 -0
  16. package/out/exports/resources.generated/aws-connect-user.d.ts +5 -0
  17. package/out/exports/resources.generated/aws-deadline-fleet.d.ts +16 -0
  18. package/out/exports/resources.generated/aws-deadline-monitor.d.ts +6 -1
  19. package/out/exports/resources.generated/aws-docdb-dbcluster.d.ts +5 -1
  20. package/out/exports/resources.generated/aws-dynamodb-globaltable.d.ts +4 -0
  21. package/out/exports/resources.generated/aws-dynamodb-table.d.ts +4 -0
  22. package/out/exports/resources.generated/aws-ec2-ec2fleet.d.ts +1 -1
  23. package/out/exports/resources.generated/aws-ec2-ippoolroutetableassociation.d.ts +33 -0
  24. package/out/exports/resources.generated/aws-ec2-launchtemplate.d.ts +7 -53
  25. package/out/exports/resources.generated/aws-ec2-natgateway.d.ts +1 -1
  26. package/out/exports/resources.generated/aws-ec2-transitgatewayconnectpeer.d.ts +5 -4
  27. package/out/exports/resources.generated/aws-ec2-volume.d.ts +2 -0
  28. package/out/exports/resources.generated/aws-ecr-repository.d.ts +2 -0
  29. package/out/exports/resources.generated/aws-ecr-repositorycreationtemplate.d.ts +2 -2
  30. package/out/exports/resources.generated/aws-ecs-capacityprovider.d.ts +0 -2
  31. package/out/exports/resources.generated/aws-eks-addon.d.ts +10 -0
  32. package/out/exports/resources.generated/aws-eks-cluster.d.ts +5 -0
  33. package/out/exports/resources.generated/aws-elasticloadbalancingv2-loadbalancer.d.ts +2 -1
  34. package/out/exports/resources.generated/aws-entityresolution-matchingworkflow.d.ts +16 -0
  35. package/out/exports/resources.generated/aws-evs-environment.d.ts +1 -9
  36. package/out/exports/resources.generated/aws-fsx-filesystem.d.ts +8 -0
  37. package/out/exports/resources.generated/aws-glue-job.d.ts +19 -8
  38. package/out/exports/resources.generated/aws-glue-tableoptimizer.d.ts +18 -1
  39. package/out/exports/resources.generated/aws-guardduty-threatentityset.d.ts +89 -0
  40. package/out/exports/resources.generated/aws-guardduty-trustedentityset.d.ts +89 -0
  41. package/out/exports/resources.generated/aws-imagebuilder-component.d.ts +1 -1
  42. package/out/exports/resources.generated/aws-imagebuilder-containerrecipe.d.ts +2 -2
  43. package/out/exports/resources.generated/aws-imagebuilder-distributionconfiguration.d.ts +1 -1
  44. package/out/exports/resources.generated/aws-imagebuilder-imagerecipe.d.ts +4 -2
  45. package/out/exports/resources.generated/aws-imagebuilder-workflow.d.ts +1 -1
  46. package/out/exports/resources.generated/aws-inspectorv2-codesecurityintegration.d.ts +160 -0
  47. package/out/exports/resources.generated/aws-inspectorv2-codesecurityscanconfiguration.d.ts +121 -0
  48. package/out/exports/resources.generated/aws-iot-mitigationaction.d.ts +2 -2
  49. package/out/exports/resources.generated/aws-iotsitewise-assetmodel.d.ts +46 -2
  50. package/out/exports/resources.generated/aws-ivs-playbackrestrictionpolicy.d.ts +2 -2
  51. package/out/exports/resources.generated/aws-ivs-stage.d.ts +54 -0
  52. package/out/exports/resources.generated/aws-kinesisfirehose-deliverystream.d.ts +1 -1
  53. package/out/exports/resources.generated/aws-lambda-permission.d.ts +2 -2
  54. package/out/exports/resources.generated/aws-lambda-url.d.ts +1 -1
  55. package/out/exports/resources.generated/aws-lambda-version.d.ts +1 -1
  56. package/out/exports/resources.generated/aws-logs-destination.d.ts +1 -1
  57. package/out/exports/resources.generated/aws-mediapackagev2-originendpoint.d.ts +18 -0
  58. package/out/exports/resources.generated/aws-networkfirewall-firewall.d.ts +36 -6
  59. package/out/exports/resources.generated/aws-networkfirewall-firewallpolicy.d.ts +16 -9
  60. package/out/exports/resources.generated/aws-networkfirewall-loggingconfiguration.d.ts +8 -8
  61. package/out/exports/resources.generated/aws-networkfirewall-rulegroup.d.ts +36 -22
  62. package/out/exports/resources.generated/aws-networkfirewall-vpcendpointassociation.d.ts +3 -3
  63. package/out/exports/resources.generated/aws-observabilityadmin-organizationtelemetryrule.d.ts +137 -0
  64. package/out/exports/resources.generated/aws-observabilityadmin-telemetryrule.d.ts +132 -0
  65. package/out/exports/resources.generated/aws-omics-workflowversion.d.ts +2 -2
  66. package/out/exports/resources.generated/aws-opensearchservice-domain.d.ts +21 -0
  67. package/out/exports/resources.generated/aws-opsworks-app.d.ts +4 -4
  68. package/out/exports/resources.generated/aws-opsworks-elasticloadbalancerattachment.d.ts +1 -1
  69. package/out/exports/resources.generated/aws-opsworks-instance.d.ts +14 -14
  70. package/out/exports/resources.generated/aws-opsworks-layer.d.ts +8 -8
  71. package/out/exports/resources.generated/aws-opsworks-stack.d.ts +25 -25
  72. package/out/exports/resources.generated/aws-opsworkscm-server.d.ts +2 -2
  73. package/out/exports/resources.generated/aws-pcs-cluster.d.ts +4 -0
  74. package/out/exports/resources.generated/aws-qbusiness-webexperience.d.ts +1 -1
  75. package/out/exports/resources.generated/aws-quicksight-dataset.d.ts +6 -6
  76. package/out/exports/resources.generated/aws-rds-dbcluster.d.ts +5 -0
  77. package/out/exports/resources.generated/aws-rds-dbinstance.d.ts +4 -29
  78. package/out/exports/resources.generated/aws-rds-dbproxy.d.ts +2 -2
  79. package/out/exports/resources.generated/aws-s3-accesspoint.d.ts +1 -1
  80. package/out/exports/resources.generated/aws-s3express-accesspoint.d.ts +1 -0
  81. package/out/exports/resources.generated/aws-s3tables-tablebucketpolicy.d.ts +2 -2
  82. package/out/exports/resources.generated/aws-s3tables-tablepolicy.d.ts +2 -2
  83. package/out/exports/resources.generated/aws-sagemaker-cluster.d.ts +101 -2
  84. package/out/exports/resources.generated/aws-sagemaker-domain.d.ts +0 -6
  85. package/out/exports/resources.generated/aws-sagemaker-processingjob.d.ts +72 -46
  86. package/out/exports/resources.generated/aws-sqs-queue.d.ts +2 -1
  87. package/out/exports/resources.generated/aws-synthetics-canary.d.ts +28 -0
  88. package/out/exports/resources.generated/aws-verifiedpermissions-policystore.d.ts +3 -5
  89. package/out/exports/resources.generated/aws-workspacesweb-portal.d.ts +7 -0
  90. package/out/exports/resources.generated/aws-workspacesweb-sessionlogger.d.ts +125 -0
  91. package/package.json +1 -1
@@ -1,10 +1,10 @@
1
1
  import type { ResourceDefinition } from "../main.ts";
2
2
  /**
3
- * Use the `LoggingConfiguration` to define the destinations and logging options for an `Firewall` .
3
+ * Use the logging configuration to define the destinations and logging options for an firewall.
4
4
  *
5
5
  * You must change the logging configuration by changing one `LogDestinationConfig` setting at a time in your `LogDestinationConfigs` .
6
6
  *
7
- * You can make only one of the following changes to your `LoggingConfiguration` resource:
7
+ * You can make only one of the following changes to your logging configuration resource:
8
8
  *
9
9
  * - Create a new log destination object by adding a single `LogDestinationConfig` array element to `LogDestinationConfigs` .
10
10
  * - Delete a log destination object by removing a single `LogDestinationConfig` array element from `LogDestinationConfigs` .
@@ -15,11 +15,11 @@ import type { ResourceDefinition } from "../main.ts";
15
15
  */
16
16
  export type NetworkFirewallLoggingConfiguration = ResourceDefinition<"AWS::NetworkFirewall::LoggingConfiguration", NetworkFirewallLoggingConfigurationProps>;
17
17
  /**
18
- * Use the `LoggingConfiguration` to define the destinations and logging options for an `Firewall` .
18
+ * Use the logging configuration to define the destinations and logging options for an firewall.
19
19
  *
20
20
  * You must change the logging configuration by changing one `LogDestinationConfig` setting at a time in your `LogDestinationConfigs` .
21
21
  *
22
- * You can make only one of the following changes to your `LoggingConfiguration` resource:
22
+ * You can make only one of the following changes to your logging configuration resource:
23
23
  *
24
24
  * - Create a new log destination object by adding a single `LogDestinationConfig` array element to `LogDestinationConfigs` .
25
25
  * - Delete a log destination object by removing a single `LogDestinationConfig` array element from `LogDestinationConfigs` .
@@ -34,7 +34,7 @@ export type NetworkFirewallLoggingConfigurationProps = {
34
34
  */
35
35
  EnableMonitoringDashboard?: boolean | undefined;
36
36
  /**
37
- * The Amazon Resource Name (ARN) of the `Firewall` that the logging configuration is associated with. You can't change the firewall specification after you create the logging configuration.
37
+ * The Amazon Resource Name (ARN) of the firewallthat the logging configuration is associated with. You can't change the firewall specification after you create the logging configuration.
38
38
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-loggingconfiguration.html#cfn-networkfirewall-loggingconfiguration-firewallarn}
39
39
  */
40
40
  FirewallArn: string;
@@ -47,13 +47,13 @@ export type NetworkFirewallLoggingConfigurationProps = {
47
47
  */
48
48
  FirewallName?: string | undefined;
49
49
  /**
50
- * Defines how AWS Network Firewall performs logging for a `Firewall` .
50
+ * Defines how AWS Network Firewall performs logging for a firewall.
51
51
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-loggingconfiguration.html#cfn-networkfirewall-loggingconfiguration-loggingconfiguration}
52
52
  */
53
53
  LoggingConfiguration: LoggingConfiguration;
54
54
  };
55
55
  /**
56
- * Defines where AWS Network Firewall sends logs for the firewall for one log type. This is used in `LoggingConfiguration` . You can send each type of log to an Amazon S3 bucket, a CloudWatch log group, or a Kinesis Data Firehose delivery stream.
56
+ * Defines where AWS Network Firewall sends logs for the firewall for one log type. This is used in logging configuration. You can send each type of log to an Amazon S3 bucket, a CloudWatch log group, or a Kinesis Data Firehose delivery stream.
57
57
  *
58
58
  * Network Firewall generates logs for stateful rule groups. You can save alert and flow log types. The stateful rules engine records flow logs for all network traffic that it receives. It records alert logs for traffic that matches stateful rules that have the rule action set to `DROP` or `ALERT` .
59
59
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-loggingconfiguration-logdestinationconfig.html}
@@ -92,7 +92,7 @@ export type LogDestinationConfig = {
92
92
  LogType: "ALERT" | "FLOW" | "TLS";
93
93
  };
94
94
  /**
95
- * Defines how AWS Network Firewall performs logging for a `Firewall` .
95
+ * Defines how AWS Network Firewall performs logging for a firewall.
96
96
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-loggingconfiguration-loggingconfiguration.html}
97
97
  */
98
98
  export type LoggingConfiguration = {
@@ -1,11 +1,11 @@
1
1
  import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
2
2
  /**
3
- * Use the `RuleGroup` to define a reusable collection of stateless or stateful network traffic filtering rules. You use rule groups in an `FirewallPolicy` to specify the filtering behavior of an `Firewall` .
3
+ * Use the [](https://docs.aws.amazon.com/RuleGroup) to define a reusable collection of stateless or stateful network traffic filtering rules. You use rule groups in an firewall policy to specify the filtering behavior of an firewall.
4
4
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-rulegroup.html}
5
5
  */
6
6
  export type NetworkFirewallRuleGroup = ResourceDefinitionWithAttributes<"AWS::NetworkFirewall::RuleGroup", NetworkFirewallRuleGroupProps, NetworkFirewallRuleGroupAttribs>;
7
7
  /**
8
- * Use the `RuleGroup` to define a reusable collection of stateless or stateful network traffic filtering rules. You use rule groups in an `FirewallPolicy` to specify the filtering behavior of an `Firewall` .
8
+ * Use the [](https://docs.aws.amazon.com/RuleGroup) to define a reusable collection of stateless or stateful network traffic filtering rules. You use rule groups in an firewall policy to specify the filtering behavior of an firewall.
9
9
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-rulegroup.html}
10
10
  */
11
11
  export type NetworkFirewallRuleGroupProps = {
@@ -35,6 +35,16 @@ export type NetworkFirewallRuleGroupProps = {
35
35
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-rulegroup.html#cfn-networkfirewall-rulegroup-rulegroupname}
36
36
  */
37
37
  RuleGroupName: string;
38
+ /**
39
+ * A complex type containing the currently selected rule option fields that will be displayed for rule summarization returned by `DescribeRuleGroupSummary` .
40
+ *
41
+ * - The `RuleOptions` specified in `SummaryConfiguration`
42
+ * - Rule metadata organization preferences
43
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-rulegroup.html#cfn-networkfirewall-rulegroup-summaryconfiguration}
44
+ */
45
+ SummaryConfiguration?: {
46
+ RuleOptions?: SummaryRuleOption[] | undefined;
47
+ } | undefined;
38
48
  /**
39
49
  * An array of key-value pairs to apply to this resource.
40
50
  *
@@ -54,12 +64,12 @@ export type NetworkFirewallRuleGroupProps = {
54
64
  */
55
65
  export type NetworkFirewallRuleGroupAttribs = {
56
66
  /**
57
- * The Amazon Resource Name (ARN) of the `RuleGroup` .
67
+ * The Amazon Resource Name (ARN) of the rule group.
58
68
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-rulegroup.html#cfn-networkfirewall-rulegroup-rulegrouparn}
59
69
  */
60
70
  RuleGroupArn: string;
61
71
  /**
62
- * The unique ID of the `RuleGroup` resource.
72
+ * The unique ID of the rule group resource.
63
73
  * @minLength 36
64
74
  * @maxLength 36
65
75
  * @pattern ^([0-9a-f]{8})-([0-9a-f]{4}-){3}([0-9a-f]{12})$
@@ -81,7 +91,7 @@ export type ActionDefinition = {
81
91
  PublishMetricAction?: PublishMetricAction | undefined;
82
92
  };
83
93
  /**
84
- * A single IP address specification. This is used in the `RuleGroup.MatchAttributes` source and destination specifications.
94
+ * A single IP address specification. This is used in the match attributes source and destination specifications.
85
95
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-rulegroup-address.html}
86
96
  */
87
97
  export type Address = {
@@ -110,8 +120,8 @@ export type Address = {
110
120
  *
111
121
  * You can use custom actions in the following places:
112
122
  *
113
- * - In an `RuleGroup.StatelessRulesAndCustomActions` . The custom actions are available for use by name inside the `StatelessRulesAndCustomActions` where you define them. You can use them for your stateless rule actions to specify what to do with a packet that matches the rule's match attributes.
114
- * - In an `FirewallPolicy` specification, in `StatelessCustomActions` . The custom actions are available for use inside the policy where you define them. You can use them for the policy's default stateless actions settings to specify what to do with packets that don't match any of the policy's stateless rules.
123
+ * - In a `StatelessRulesAndCustomActions` . The custom actions are available for use by name inside the `StatelessRulesAndCustomActions` where you define them. You can use them for your stateless rule actions to specify what to do with a packet that matches the rule's match attributes.
124
+ * - In an firewall policy specification, in `StatelessCustomActions` . The custom actions are available for use inside the policy where you define them. You can use them for the policy's default stateless actions settings to specify what to do with packets that don't match any of the policy's stateless rules.
115
125
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-rulegroup-customaction.html}
116
126
  */
117
127
  export type CustomAction = {
@@ -216,7 +226,7 @@ export type Header = {
216
226
  SourcePort: string;
217
227
  };
218
228
  /**
219
- * A list of IP addresses and address ranges, in CIDR notation. This is part of a `RuleGroup.RuleVariables` .
229
+ * A list of IP addresses and address ranges, in CIDR notation. This is part of a `RuleVariables` .
220
230
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-rulegroup-ipset.html}
221
231
  */
222
232
  export type IPSet = {
@@ -227,12 +237,12 @@ export type IPSet = {
227
237
  Definition?: string[] | undefined;
228
238
  };
229
239
  /**
230
- * Configures one or more `IPSetReferences` for a Suricata-compatible rule group. An IP set reference is a rule variable that references a resource that you create and manage in another AWS service, such as an Amazon VPC prefix list. Network Firewall IP set references enable you to dynamically update the contents of your rules. When you create, update, or delete the IP set you are referencing in your rule, Network Firewall automatically updates the rule's content with the changes. For more information about IP set references in Network Firewall , see [Using IP set references](https://docs.aws.amazon.com/network-firewall/latest/developerguide/rule-groups-ip-set-references.html) in the *Network Firewall Developer Guide* .
240
+ * Configures one or more IP set references for a Suricata-compatible rule group. An IP set reference is a rule variable that references a resource that you create and manage in another AWS service, such as an Amazon VPC prefix list. Network Firewall IP set references enable you to dynamically update the contents of your rules. When you create, update, or delete the IP set you are referencing in your rule, Network Firewall automatically updates the rule's content with the changes. For more information about IP set references in Network Firewall , see [Using IP set references](https://docs.aws.amazon.com/network-firewall/latest/developerguide/rule-groups-ip-set-references.html) in the *Network Firewall Developer Guide* .
231
241
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-rulegroup-ipsetreference.html}
232
242
  */
233
243
  export type IPSetReference = {
234
244
  /**
235
- * The Amazon Resource Name (ARN) of the resource to include in the `RuleGroup.IPSetReference` .
245
+ * The Amazon Resource Name (ARN) of the resource to include in the IP set reference.
236
246
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-rulegroup-ipsetreference.html#cfn-networkfirewall-rulegroup-ipsetreference-referencearn}
237
247
  */
238
248
  ReferenceArn?: string | undefined;
@@ -280,7 +290,7 @@ export type MatchAttributes = {
280
290
  TCPFlags?: TCPFlagField[] | undefined;
281
291
  };
282
292
  /**
283
- * A single port range specification. This is used for source and destination port ranges in the stateless `RuleGroup.MatchAttributes` .
293
+ * A single port range specification. This is used for source and destination port ranges in the stateless match attributes.
284
294
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-rulegroup-portrange.html}
285
295
  */
286
296
  export type PortRange = {
@@ -317,7 +327,7 @@ export type PublishMetricAction = {
317
327
  Dimensions: Dimension[];
318
328
  };
319
329
  /**
320
- * Configures the `ReferenceSets` for a stateful rule group. For more information, see the [Using IP set references in Suricata compatible rule groups](https://docs.aws.amazon.com/network-firewall/latest/developerguide/rule-groups-ip-set-references.html) in the *Network Firewall User Guide* .
330
+ * Configures the reference sets for a stateful rule group. For more information, see the [Using IP set references in Suricata compatible rule groups](https://docs.aws.amazon.com/network-firewall/latest/developerguide/rule-groups-ip-set-references.html) in the *Network Firewall User Guide* .
321
331
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-rulegroup-referencesets.html}
322
332
  */
323
333
  export type ReferenceSets = {
@@ -335,7 +345,7 @@ export type RuleDefinition = {
335
345
  /**
336
346
  * The actions to take on a packet that matches one of the stateless rule definition's match attributes. You must specify a standard action and you can add custom actions.
337
347
  *
338
- * > Network Firewall only forwards a packet for stateful rule inspection if you specify `aws:forward_to_sfe` for a rule that the packet matches, or if the packet doesn't match any stateless rule and you specify `aws:forward_to_sfe` for the `StatelessDefaultActions` setting for the `FirewallPolicy` .
348
+ * > Network Firewall only forwards a packet for stateful rule inspection if you specify `aws:forward_to_sfe` for a rule that the packet matches, or if the packet doesn't match any stateless rule and you specify `aws:forward_to_sfe` for the `StatelessDefaultActions` setting for the firewall policy.
339
349
  *
340
350
  * For every rule, you must specify exactly one of the following standard actions.
341
351
  *
@@ -409,7 +419,7 @@ export type RuleOption = {
409
419
  */
410
420
  export type RuleOrder = "DEFAULT_ACTION_ORDER" | "STRICT_ORDER";
411
421
  /**
412
- * Settings that are available for use in the rules in the `RuleGroup` where this is defined. See `CreateRuleGroup` or `UpdateRuleGroup` for usage.
422
+ * Settings that are available for use in the rules in the rule group where this is defined.
413
423
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-rulegroup-rulevariables.html}
414
424
  */
415
425
  export type RuleVariables = {
@@ -439,7 +449,7 @@ export type RulesSource = {
439
449
  *
440
450
  * These rules contain the inspection criteria and the action to take for traffic that matches the criteria, so this type of rule group doesn't have a separate action setting.
441
451
  *
442
- * > You can't use the `priority` keyword if the `RuleOrder` option in `StatefulRuleOptions` is set to `STRICT_ORDER` .
452
+ * > You can't use the `priority` keyword if the `RuleOrder` option in StatefulRuleOptions is set to `STRICT_ORDER` .
443
453
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-rulegroup-rulessource.html#cfn-networkfirewall-rulegroup-rulessource-rulesstring}
444
454
  */
445
455
  RulesString?: string | undefined;
@@ -459,7 +469,7 @@ export type RulesSource = {
459
469
  *
460
470
  * For HTTPS traffic, domain filtering is SNI-based. It uses the server name indicator extension of the TLS handshake.
461
471
  *
462
- * By default, Network Firewall domain list inspection only includes traffic coming from the VPC where you deploy the firewall. To inspect traffic from IP addresses outside of the deployment VPC, you set the `HOME_NET` rule variable to include the CIDR range of the deployment VPC plus the other CIDR ranges. For more information, see `RuleGroup.RuleVariables` in this guide and [Stateful domain list rule groups in AWS Network Firewall](https://docs.aws.amazon.com/network-firewall/latest/developerguide/stateful-rule-groups-domain-names.html) in the *Network Firewall Developer Guide*
472
+ * By default, Network Firewall domain list inspection only includes traffic coming from the VPC where you deploy the firewall. To inspect traffic from IP addresses outside of the deployment VPC, you set the `HOME_NET` rule variable to include the CIDR range of the deployment VPC plus the other CIDR ranges. For more information, see `RuleVariables` in this guide and [Stateful domain list rule groups in AWS Network Firewall](https://docs.aws.amazon.com/network-firewall/latest/developerguide/stateful-rule-groups-domain-names.html) in the *Network Firewall Developer Guide*
463
473
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-rulegroup-rulessourcelist.html}
464
474
  */
465
475
  export type RulesSourceList = {
@@ -493,12 +503,12 @@ export type StatefulRule = {
493
503
  * The actions for a stateful rule are defined as follows:
494
504
  *
495
505
  * - *PASS* - Permits the packets to go to the intended destination.
496
- * - *DROP* - Blocks the packets from going to the intended destination and sends an alert log message, if alert logging is configured in the `Firewall` `LoggingConfiguration` .
506
+ * - *DROP* - Blocks the packets from going to the intended destination and sends an alert log message, if alert logging is configured in the firewall logging configuration.
497
507
  * - *REJECT* - Drops traffic that matches the conditions of the stateful rule and sends a TCP reset packet back to sender of the packet. A TCP reset packet is a packet with no payload and a `RST` bit contained in the TCP header flags. `REJECT` is available only for TCP traffic.
498
- * - *ALERT* - Permits the packets to go to the intended destination and sends an alert log message, if alert logging is configured in the `Firewall` `LoggingConfiguration` .
508
+ * - *ALERT* - Permits the packets to go to the intended destination and sends an alert log message, if alert logging is configured in the firewall logging configuration.
499
509
  *
500
510
  * You can use this action to test a rule that you intend to use to drop traffic. You can enable the rule with `ALERT` action, verify in the logs that the rule is filtering as you want, then change the action to `DROP` .
501
- * - *REJECT* - Drops TCP traffic that matches the conditions of the stateful rule, and sends a TCP reset packet back to sender of the packet. A TCP reset packet is a packet with no payload and a `RST` bit contained in the TCP header flags. Also sends an alert log mesage if alert logging is configured in the `Firewall` `LoggingConfiguration` .
511
+ * - *REJECT* - Drops TCP traffic that matches the conditions of the stateful rule, and sends a TCP reset packet back to sender of the packet. A TCP reset packet is a packet with no payload and a `RST` bit contained in the TCP header flags. Also sends an alert log mesage if alert logging is configured in the firewall logging configuration.
502
512
  *
503
513
  * `REJECT` isn't currently available for use with IMAP and FTP protocols.
504
514
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-rulegroup-statefulrule.html#cfn-networkfirewall-rulegroup-statefulrule-action}
@@ -527,7 +537,7 @@ export type StatefulRuleOptions = {
527
537
  RuleOrder?: RuleOrder | undefined;
528
538
  };
529
539
  /**
530
- * A single stateless rule. This is used in `RuleGroup.StatelessRulesAndCustomActions` .
540
+ * A single stateless rule. This is used in `StatelessRulesAndCustomActions` .
531
541
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-rulegroup-statelessrule.html}
532
542
  */
533
543
  export type StatelessRule = {
@@ -554,7 +564,7 @@ export type StatelessRule = {
554
564
  */
555
565
  export type StatelessRulesAndCustomActions = {
556
566
  /**
557
- * Defines an array of individual custom action definitions that are available for use by the stateless rules in this `StatelessRulesAndCustomActions` specification. You name each custom action that you define, and then you can use it by name in your stateless rule `RuleGroup.RuleDefinition` `Actions` specification.
567
+ * Defines an array of individual custom action definitions that are available for use by the stateless rules in this `StatelessRulesAndCustomActions` specification. You name each custom action that you define, and then you can use it by name in your stateless rule definition `Actions` specification.
558
568
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-rulegroup-statelessrulesandcustomactions.html#cfn-networkfirewall-rulegroup-statelessrulesandcustomactions-customactions}
559
569
  */
560
570
  CustomActions?: CustomAction[] | undefined;
@@ -564,12 +574,16 @@ export type StatelessRulesAndCustomActions = {
564
574
  */
565
575
  StatelessRules: StatelessRule[];
566
576
  };
577
+ /**
578
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-rulegroup-summaryruleoption.html}
579
+ */
580
+ export type SummaryRuleOption = "SID" | "MSG" | "METADATA";
567
581
  /**
568
582
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-rulegroup-tcpflag.html}
569
583
  */
570
584
  export type TCPFlag = "FIN" | "SYN" | "RST" | "PSH" | "ACK" | "URG" | "ECE" | "CWR";
571
585
  /**
572
- * TCP flags and masks to inspect packets for. This is used in the `RuleGroup.MatchAttributes` specification.
586
+ * TCP flags and masks to inspect packets for. This is used in the match attributes specification.
573
587
  *
574
588
  * For example:
575
589
  *
@@ -13,7 +13,7 @@ import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
13
13
  *
14
14
  * You can use AWS Resource Access Manager to share a `Firewall` that you own with other accounts, which gives them the ability to use the firewall to create VPC endpoint associations. For information about sharing a firewall, see `PutResourcePolicy` in this guide and see [Sharing Network Firewall resources](https://docs.aws.amazon.com/network-firewall/latest/developerguide/sharing.html) in the *AWS Network Firewall Developer Guide* .
15
15
  *
16
- * The status of the VPC endpoint association, which indicates whether it's ready to filter network traffic, is provided in the corresponding `VpcEndpointAssociationStatus` . You can retrieve both the association and its status by calling `DescribeVpcEndpointAssociation` .
16
+ * The status of the VPC endpoint association, which indicates whether it's ready to filter network traffic, is provided in the corresponding VPC endpoint association status. You can retrieve both the association and its status by calling `DescribeVpcEndpointAssociation` .
17
17
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-vpcendpointassociation.html}
18
18
  */
19
19
  export type NetworkFirewallVpcEndpointAssociation = ResourceDefinitionWithAttributes<"AWS::NetworkFirewall::VpcEndpointAssociation", NetworkFirewallVpcEndpointAssociationProps, NetworkFirewallVpcEndpointAssociationAttribs>;
@@ -31,7 +31,7 @@ export type NetworkFirewallVpcEndpointAssociation = ResourceDefinitionWithAttrib
31
31
  *
32
32
  * You can use AWS Resource Access Manager to share a `Firewall` that you own with other accounts, which gives them the ability to use the firewall to create VPC endpoint associations. For information about sharing a firewall, see `PutResourcePolicy` in this guide and see [Sharing Network Firewall resources](https://docs.aws.amazon.com/network-firewall/latest/developerguide/sharing.html) in the *AWS Network Firewall Developer Guide* .
33
33
  *
34
- * The status of the VPC endpoint association, which indicates whether it's ready to filter network traffic, is provided in the corresponding `VpcEndpointAssociationStatus` . You can retrieve both the association and its status by calling `DescribeVpcEndpointAssociation` .
34
+ * The status of the VPC endpoint association, which indicates whether it's ready to filter network traffic, is provided in the corresponding VPC endpoint association status. You can retrieve both the association and its status by calling `DescribeVpcEndpointAssociation` .
35
35
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-vpcendpointassociation.html}
36
36
  */
37
37
  export type NetworkFirewallVpcEndpointAssociationProps = {
@@ -66,7 +66,7 @@ export type NetworkFirewallVpcEndpointAssociationProps = {
66
66
  */
67
67
  export type NetworkFirewallVpcEndpointAssociationAttribs = {
68
68
  /**
69
- * An endpoint Id.
69
+ * The unique ID of the firewall endpoint for the subnet that you attached to the firewall.For example: "vpce-111122223333"
70
70
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-vpcendpointassociation.html#cfn-networkfirewall-vpcendpointassociation-endpointid}
71
71
  */
72
72
  EndpointId: string;
@@ -0,0 +1,137 @@
1
+ import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
2
+ /**
3
+ * The AWS::ObservabilityAdmin::OrganizationTelemetryRule resource defines a CloudWatch Observability Admin Organization Telemetry Rule.
4
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-observabilityadmin-organizationtelemetryrule.html}
5
+ */
6
+ export type ObservabilityAdminOrganizationTelemetryRule = ResourceDefinitionWithAttributes<"AWS::ObservabilityAdmin::OrganizationTelemetryRule", ObservabilityAdminOrganizationTelemetryRuleProps, ObservabilityAdminOrganizationTelemetryRuleAttribs>;
7
+ /**
8
+ * The AWS::ObservabilityAdmin::OrganizationTelemetryRule resource defines a CloudWatch Observability Admin Organization Telemetry Rule.
9
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-observabilityadmin-organizationtelemetryrule.html}
10
+ */
11
+ export type ObservabilityAdminOrganizationTelemetryRuleProps = {
12
+ /**
13
+ * The telemetry rule
14
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-observabilityadmin-organizationtelemetryrule.html#cfn-observabilityadmin-organizationtelemetryrule-rule}
15
+ */
16
+ Rule: TelemetryRule;
17
+ /**
18
+ * The name of the organization telemetry rule
19
+ * @minLength 1
20
+ * @maxLength 100
21
+ * @pattern ^[0-9A-Za-z-]+$
22
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-observabilityadmin-organizationtelemetryrule.html#cfn-observabilityadmin-organizationtelemetryrule-rulename}
23
+ */
24
+ RuleName: string;
25
+ /**
26
+ * An array of key-value pairs to apply to this resource
27
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-observabilityadmin-organizationtelemetryrule.html#cfn-observabilityadmin-organizationtelemetryrule-tags}
28
+ */
29
+ Tags?: Tag[] | undefined;
30
+ };
31
+ /**
32
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-observabilityadmin-organizationtelemetryrule.html#aws-resource-observabilityadmin-organizationtelemetryrule-return-values}
33
+ */
34
+ export type ObservabilityAdminOrganizationTelemetryRuleAttribs = {
35
+ /**
36
+ * The arn of the organization telemetry rule
37
+ * @minLength 1
38
+ * @maxLength 1011
39
+ * @pattern ^arn:aws([a-z0-9\-]+)?:([a-zA-Z0-9\-]+):([a-z0-9\-]+)?:([0-9]{12})?:(.+)$
40
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-observabilityadmin-organizationtelemetryrule.html#cfn-observabilityadmin-organizationtelemetryrule-rulearn}
41
+ */
42
+ RuleArn: string;
43
+ };
44
+ /**
45
+ * Type of telemetry destination
46
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-organizationtelemetryrule-destinationtype.html}
47
+ */
48
+ export type DestinationType = "cloud-watch-logs";
49
+ /**
50
+ * Resource Type associated with the Organization Telemetry Rule
51
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-organizationtelemetryrule-resourcetype.html}
52
+ */
53
+ export type ResourceType = "AWS::EC2::VPC";
54
+ /**
55
+ * The destination configuration for telemetry data
56
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-organizationtelemetryrule-telemetrydestinationconfiguration.html}
57
+ */
58
+ export type TelemetryDestinationConfiguration = {
59
+ /**
60
+ * Pattern for telemetry data destination
61
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-organizationtelemetryrule-telemetrydestinationconfiguration.html#cfn-observabilityadmin-organizationtelemetryrule-telemetrydestinationconfiguration-destinationpattern}
62
+ */
63
+ DestinationPattern?: string | undefined;
64
+ /**
65
+ * Type of telemetry destination
66
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-organizationtelemetryrule-telemetrydestinationconfiguration.html#cfn-observabilityadmin-organizationtelemetryrule-telemetrydestinationconfiguration-destinationtype}
67
+ */
68
+ DestinationType?: DestinationType | undefined;
69
+ /**
70
+ * Number of days to retain the telemetry data in the specified destination
71
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-organizationtelemetryrule-telemetrydestinationconfiguration.html#cfn-observabilityadmin-organizationtelemetryrule-telemetrydestinationconfiguration-retentionindays}
72
+ */
73
+ RetentionInDays?: number | undefined;
74
+ /**
75
+ * Telemetry parameters for VPC Flow logs
76
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-organizationtelemetryrule-telemetrydestinationconfiguration.html#cfn-observabilityadmin-organizationtelemetryrule-telemetrydestinationconfiguration-vpcflowlogparameters}
77
+ */
78
+ VPCFlowLogParameters?: VPCFlowLogParameters | undefined;
79
+ };
80
+ /**
81
+ * The telemetry rule
82
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-organizationtelemetryrule-telemetryrule.html}
83
+ */
84
+ export type TelemetryRule = {
85
+ /**
86
+ * The destination configuration for telemetry data
87
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-organizationtelemetryrule-telemetryrule.html#cfn-observabilityadmin-organizationtelemetryrule-telemetryrule-destinationconfiguration}
88
+ */
89
+ DestinationConfiguration?: TelemetryDestinationConfiguration | undefined;
90
+ /**
91
+ * Resource Type associated with the Organization Telemetry Rule
92
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-organizationtelemetryrule-telemetryrule.html#cfn-observabilityadmin-organizationtelemetryrule-telemetryrule-resourcetype}
93
+ */
94
+ ResourceType: ResourceType;
95
+ /**
96
+ * Selection Criteria on scope level for rule application
97
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-organizationtelemetryrule-telemetryrule.html#cfn-observabilityadmin-organizationtelemetryrule-telemetryrule-scope}
98
+ */
99
+ Scope?: string | undefined;
100
+ /**
101
+ * Selection Criteria on resource level for rule application
102
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-organizationtelemetryrule-telemetryrule.html#cfn-observabilityadmin-organizationtelemetryrule-telemetryrule-selectioncriteria}
103
+ */
104
+ SelectionCriteria?: string | undefined;
105
+ /**
106
+ * Telemetry Type associated with the Organization Telemetry Rule
107
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-organizationtelemetryrule-telemetryrule.html#cfn-observabilityadmin-organizationtelemetryrule-telemetryrule-telemetrytype}
108
+ */
109
+ TelemetryType: TelemetryType;
110
+ };
111
+ /**
112
+ * Telemetry Type associated with the Organization Telemetry Rule
113
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-organizationtelemetryrule-telemetrytype.html}
114
+ */
115
+ export type TelemetryType = "Logs";
116
+ /**
117
+ * Telemetry parameters for VPC Flow logs
118
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-organizationtelemetryrule-vpcflowlogparameters.html}
119
+ */
120
+ export type VPCFlowLogParameters = {
121
+ /**
122
+ * The fields to include in the flow log record. If you omit this parameter, the flow log is created using the default format.
123
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-organizationtelemetryrule-vpcflowlogparameters.html#cfn-observabilityadmin-organizationtelemetryrule-vpcflowlogparameters-logformat}
124
+ */
125
+ LogFormat?: string | undefined;
126
+ /**
127
+ * The maximum interval of time, in seconds, during which a flow of packets is captured and aggregated into a flow log record. Default is 600s.
128
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-organizationtelemetryrule-vpcflowlogparameters.html#cfn-observabilityadmin-organizationtelemetryrule-vpcflowlogparameters-maxaggregationinterval}
129
+ */
130
+ MaxAggregationInterval?: number | undefined;
131
+ /**
132
+ * The type of traffic captured for the flow log. Default is ALL
133
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-organizationtelemetryrule-vpcflowlogparameters.html#cfn-observabilityadmin-organizationtelemetryrule-vpcflowlogparameters-traffictype}
134
+ */
135
+ TrafficType?: string | undefined;
136
+ };
137
+ //# sourceMappingURL=aws-observabilityadmin-organizationtelemetryrule.d.ts.map
@@ -0,0 +1,132 @@
1
+ import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
2
+ /**
3
+ * The AWS::ObservabilityAdmin::TelemetryRule resource defines a CloudWatch Observability Admin Telemetry Rule.
4
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-observabilityadmin-telemetryrule.html}
5
+ */
6
+ export type ObservabilityAdminTelemetryRule = ResourceDefinitionWithAttributes<"AWS::ObservabilityAdmin::TelemetryRule", ObservabilityAdminTelemetryRuleProps, ObservabilityAdminTelemetryRuleAttribs>;
7
+ /**
8
+ * The AWS::ObservabilityAdmin::TelemetryRule resource defines a CloudWatch Observability Admin Telemetry Rule.
9
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-observabilityadmin-telemetryrule.html}
10
+ */
11
+ export type ObservabilityAdminTelemetryRuleProps = {
12
+ /**
13
+ * The telemetry rule
14
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-observabilityadmin-telemetryrule.html#cfn-observabilityadmin-telemetryrule-rule}
15
+ */
16
+ Rule: TelemetryRule;
17
+ /**
18
+ * The name of the telemetry rule
19
+ * @minLength 1
20
+ * @maxLength 100
21
+ * @pattern ^[0-9A-Za-z-]+$
22
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-observabilityadmin-telemetryrule.html#cfn-observabilityadmin-telemetryrule-rulename}
23
+ */
24
+ RuleName: string;
25
+ /**
26
+ * An array of key-value pairs to apply to this resource
27
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-observabilityadmin-telemetryrule.html#cfn-observabilityadmin-telemetryrule-tags}
28
+ */
29
+ Tags?: Tag[] | undefined;
30
+ };
31
+ /**
32
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-observabilityadmin-telemetryrule.html#aws-resource-observabilityadmin-telemetryrule-return-values}
33
+ */
34
+ export type ObservabilityAdminTelemetryRuleAttribs = {
35
+ /**
36
+ * The arn of the telemetry rule
37
+ * @minLength 1
38
+ * @maxLength 1011
39
+ * @pattern ^arn:aws([a-z0-9\-]+)?:([a-zA-Z0-9\-]+):([a-z0-9\-]+)?:([0-9]{12})?:(.+)$
40
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-observabilityadmin-telemetryrule.html#cfn-observabilityadmin-telemetryrule-rulearn}
41
+ */
42
+ RuleArn: string;
43
+ };
44
+ /**
45
+ * Type of telemetry destination
46
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-telemetryrule-destinationtype.html}
47
+ */
48
+ export type DestinationType = "cloud-watch-logs";
49
+ /**
50
+ * Resource Type associated with the Telemetry Rule
51
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-telemetryrule-resourcetype.html}
52
+ */
53
+ export type ResourceType = "AWS::EC2::VPC";
54
+ /**
55
+ * The destination configuration for telemetry data
56
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-telemetryrule-telemetrydestinationconfiguration.html}
57
+ */
58
+ export type TelemetryDestinationConfiguration = {
59
+ /**
60
+ * Pattern for telemetry data destination
61
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-telemetryrule-telemetrydestinationconfiguration.html#cfn-observabilityadmin-telemetryrule-telemetrydestinationconfiguration-destinationpattern}
62
+ */
63
+ DestinationPattern?: string | undefined;
64
+ /**
65
+ * Type of telemetry destination
66
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-telemetryrule-telemetrydestinationconfiguration.html#cfn-observabilityadmin-telemetryrule-telemetrydestinationconfiguration-destinationtype}
67
+ */
68
+ DestinationType?: DestinationType | undefined;
69
+ /**
70
+ * Number of days to retain the telemetry data in the specified destination
71
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-telemetryrule-telemetrydestinationconfiguration.html#cfn-observabilityadmin-telemetryrule-telemetrydestinationconfiguration-retentionindays}
72
+ */
73
+ RetentionInDays?: number | undefined;
74
+ /**
75
+ * Telemetry parameters for VPC Flow logs
76
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-telemetryrule-telemetrydestinationconfiguration.html#cfn-observabilityadmin-telemetryrule-telemetrydestinationconfiguration-vpcflowlogparameters}
77
+ */
78
+ VPCFlowLogParameters?: VPCFlowLogParameters | undefined;
79
+ };
80
+ /**
81
+ * The telemetry rule
82
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-telemetryrule-telemetryrule.html}
83
+ */
84
+ export type TelemetryRule = {
85
+ /**
86
+ * The destination configuration for telemetry data
87
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-telemetryrule-telemetryrule.html#cfn-observabilityadmin-telemetryrule-telemetryrule-destinationconfiguration}
88
+ */
89
+ DestinationConfiguration?: TelemetryDestinationConfiguration | undefined;
90
+ /**
91
+ * Resource Type associated with the Telemetry Rule
92
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-telemetryrule-telemetryrule.html#cfn-observabilityadmin-telemetryrule-telemetryrule-resourcetype}
93
+ */
94
+ ResourceType: ResourceType;
95
+ /**
96
+ * Selection Criteria on resource level for rule application
97
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-telemetryrule-telemetryrule.html#cfn-observabilityadmin-telemetryrule-telemetryrule-selectioncriteria}
98
+ */
99
+ SelectionCriteria?: string | undefined;
100
+ /**
101
+ * Telemetry Type associated with the Telemetry Rule
102
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-telemetryrule-telemetryrule.html#cfn-observabilityadmin-telemetryrule-telemetryrule-telemetrytype}
103
+ */
104
+ TelemetryType: TelemetryType;
105
+ };
106
+ /**
107
+ * Telemetry Type associated with the Telemetry Rule
108
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-telemetryrule-telemetrytype.html}
109
+ */
110
+ export type TelemetryType = "Logs";
111
+ /**
112
+ * Telemetry parameters for VPC Flow logs
113
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-telemetryrule-vpcflowlogparameters.html}
114
+ */
115
+ export type VPCFlowLogParameters = {
116
+ /**
117
+ * The fields to include in the flow log record. If you omit this parameter, the flow log is created using the default format.
118
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-telemetryrule-vpcflowlogparameters.html#cfn-observabilityadmin-telemetryrule-vpcflowlogparameters-logformat}
119
+ */
120
+ LogFormat?: string | undefined;
121
+ /**
122
+ * The maximum interval of time, in seconds, during which a flow of packets is captured and aggregated into a flow log record. Default is 600s.
123
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-telemetryrule-vpcflowlogparameters.html#cfn-observabilityadmin-telemetryrule-vpcflowlogparameters-maxaggregationinterval}
124
+ */
125
+ MaxAggregationInterval?: number | undefined;
126
+ /**
127
+ * The type of traffic captured for the flow log. Default is ALL
128
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-telemetryrule-vpcflowlogparameters.html#cfn-observabilityadmin-telemetryrule-vpcflowlogparameters-traffictype}
129
+ */
130
+ TrafficType?: string | undefined;
131
+ };
132
+ //# sourceMappingURL=aws-observabilityadmin-telemetryrule.d.ts.map
@@ -6,7 +6,7 @@ import type { ResourceDefinitionWithAttributes } from "../main.ts";
6
6
  *
7
7
  * Provide a version name that is unique for this workflow. You cannot change the name after HealthOmics creates the version.
8
8
  *
9
- * > Dont include any personally identifiable information (PII) in the version name. Version names appear in the workflow version ARN.
9
+ * > Don't include any personally identifiable information (PII) in the version name. Version names appear in the workflow version ARN.
10
10
  *
11
11
  * For more information, see [Workflow versioning in AWS HealthOmics](https://docs.aws.amazon.com/omics/latest/dev/workflow-versions.html) in the *AWS HealthOmics User Guide* .
12
12
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-omics-workflowversion.html}
@@ -19,7 +19,7 @@ export type OmicsWorkflowVersion = ResourceDefinitionWithAttributes<"AWS::Omics:
19
19
  *
20
20
  * Provide a version name that is unique for this workflow. You cannot change the name after HealthOmics creates the version.
21
21
  *
22
- * > Dont include any personally identifiable information (PII) in the version name. Version names appear in the workflow version ARN.
22
+ * > Don't include any personally identifiable information (PII) in the version name. Version names appear in the workflow version ARN.
23
23
  *
24
24
  * For more information, see [Workflow versioning in AWS HealthOmics](https://docs.aws.amazon.com/omics/latest/dev/workflow-versions.html) in the *AWS HealthOmics User Guide* .
25
25
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-omics-workflowversion.html}
@@ -182,6 +182,10 @@ export type AdvancedSecurityOptionsInput = {
182
182
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-advancedsecurityoptionsinput.html#cfn-opensearchservice-domain-advancedsecurityoptionsinput-enabled}
183
183
  */
184
184
  Enabled?: boolean | undefined;
185
+ /**
186
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-advancedsecurityoptionsinput.html#cfn-opensearchservice-domain-advancedsecurityoptionsinput-iamfederationoptions}
187
+ */
188
+ IAMFederationOptions?: IAMFederationOptions | undefined;
185
189
  /**
186
190
  * True to enable the internal user database.
187
191
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-advancedsecurityoptionsinput.html#cfn-opensearchservice-domain-advancedsecurityoptionsinput-internaluserdatabaseenabled}
@@ -405,6 +409,23 @@ export type EncryptionAtRestOptions = {
405
409
  */
406
410
  KmsKeyId?: string | undefined;
407
411
  };
412
+ /**
413
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-iamfederationoptions.html}
414
+ */
415
+ export type IAMFederationOptions = {
416
+ /**
417
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-iamfederationoptions.html#cfn-opensearchservice-domain-iamfederationoptions-enabled}
418
+ */
419
+ Enabled?: boolean | undefined;
420
+ /**
421
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-iamfederationoptions.html#cfn-opensearchservice-domain-iamfederationoptions-roleskey}
422
+ */
423
+ RolesKey?: string | undefined;
424
+ /**
425
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-iamfederationoptions.html#cfn-opensearchservice-domain-iamfederationoptions-subjectkey}
426
+ */
427
+ SubjectKey?: string | undefined;
428
+ };
408
429
  /**
409
430
  * Settings container for integrating IAM Identity Center with OpenSearch UI applications, which enables enabling secure user authentication and access control across multiple data sources. This setup supports single sign-on (SSO) through IAM Identity Center, allowing centralized user management.
410
431
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-identitycenteroptions.html}