@propulsionworks/cloudformation 0.1.20 → 0.1.22
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/out/exports/resources.generated/aws-apigateway-deployment.d.ts +1 -1
- package/out/exports/resources.generated/aws-appconfig-configurationprofile.d.ts +3 -3
- package/out/exports/resources.generated/aws-appconfig-deployment.d.ts +5 -0
- package/out/exports/resources.generated/aws-appintegrations-application.d.ts +52 -0
- package/out/exports/resources.generated/aws-aps-resourcepolicy.d.ts +22 -0
- package/out/exports/resources.generated/aws-arcregionswitch-plan.d.ts +132 -0
- package/out/exports/resources.generated/aws-athena-datacatalog.d.ts +15 -6
- package/out/exports/resources.generated/aws-athena-workgroup.d.ts +3 -3
- package/out/exports/resources.generated/aws-batch-jobdefinition.d.ts +2 -2
- package/out/exports/resources.generated/aws-batch-jobqueue.d.ts +7 -0
- package/out/exports/resources.generated/aws-batch-serviceenvironment.d.ts +1 -1
- package/out/exports/resources.generated/aws-billingconductor-customlineitem.d.ts +2 -2
- package/out/exports/resources.generated/aws-cloudfront-distribution.d.ts +4 -0
- package/out/exports/resources.generated/aws-codebuild-project.d.ts +17 -0
- package/out/exports/resources.generated/aws-codepipeline-webhook.d.ts +1 -0
- package/out/exports/resources.generated/aws-connect-user.d.ts +5 -0
- package/out/exports/resources.generated/aws-deadline-fleet.d.ts +16 -0
- package/out/exports/resources.generated/aws-deadline-monitor.d.ts +6 -1
- package/out/exports/resources.generated/aws-docdb-dbcluster.d.ts +5 -1
- package/out/exports/resources.generated/aws-dynamodb-globaltable.d.ts +4 -0
- package/out/exports/resources.generated/aws-dynamodb-table.d.ts +4 -0
- package/out/exports/resources.generated/aws-ec2-ec2fleet.d.ts +1 -1
- package/out/exports/resources.generated/aws-ec2-ippoolroutetableassociation.d.ts +33 -0
- package/out/exports/resources.generated/aws-ec2-launchtemplate.d.ts +7 -53
- package/out/exports/resources.generated/aws-ec2-natgateway.d.ts +1 -1
- package/out/exports/resources.generated/aws-ec2-transitgatewayconnectpeer.d.ts +5 -4
- package/out/exports/resources.generated/aws-ec2-volume.d.ts +2 -0
- package/out/exports/resources.generated/aws-ecr-repository.d.ts +2 -0
- package/out/exports/resources.generated/aws-ecr-repositorycreationtemplate.d.ts +2 -2
- package/out/exports/resources.generated/aws-ecs-capacityprovider.d.ts +0 -2
- package/out/exports/resources.generated/aws-eks-addon.d.ts +10 -0
- package/out/exports/resources.generated/aws-eks-cluster.d.ts +5 -0
- package/out/exports/resources.generated/aws-elasticloadbalancingv2-loadbalancer.d.ts +2 -1
- package/out/exports/resources.generated/aws-entityresolution-matchingworkflow.d.ts +16 -0
- package/out/exports/resources.generated/aws-evs-environment.d.ts +1 -9
- package/out/exports/resources.generated/aws-fsx-filesystem.d.ts +8 -0
- package/out/exports/resources.generated/aws-glue-job.d.ts +19 -8
- package/out/exports/resources.generated/aws-glue-tableoptimizer.d.ts +18 -1
- package/out/exports/resources.generated/aws-guardduty-threatentityset.d.ts +89 -0
- package/out/exports/resources.generated/aws-guardduty-trustedentityset.d.ts +89 -0
- package/out/exports/resources.generated/aws-imagebuilder-component.d.ts +1 -1
- package/out/exports/resources.generated/aws-imagebuilder-containerrecipe.d.ts +2 -2
- package/out/exports/resources.generated/aws-imagebuilder-distributionconfiguration.d.ts +1 -1
- package/out/exports/resources.generated/aws-imagebuilder-imagerecipe.d.ts +4 -2
- package/out/exports/resources.generated/aws-imagebuilder-workflow.d.ts +1 -1
- package/out/exports/resources.generated/aws-inspectorv2-codesecurityintegration.d.ts +160 -0
- package/out/exports/resources.generated/aws-inspectorv2-codesecurityscanconfiguration.d.ts +121 -0
- package/out/exports/resources.generated/aws-iot-mitigationaction.d.ts +2 -2
- package/out/exports/resources.generated/aws-iotsitewise-assetmodel.d.ts +46 -2
- package/out/exports/resources.generated/aws-ivs-playbackrestrictionpolicy.d.ts +2 -2
- package/out/exports/resources.generated/aws-ivs-stage.d.ts +54 -0
- package/out/exports/resources.generated/aws-kinesisfirehose-deliverystream.d.ts +1 -1
- package/out/exports/resources.generated/aws-lambda-permission.d.ts +2 -2
- package/out/exports/resources.generated/aws-lambda-url.d.ts +1 -1
- package/out/exports/resources.generated/aws-lambda-version.d.ts +1 -1
- package/out/exports/resources.generated/aws-logs-destination.d.ts +1 -1
- package/out/exports/resources.generated/aws-mediapackagev2-originendpoint.d.ts +18 -0
- package/out/exports/resources.generated/aws-networkfirewall-firewall.d.ts +36 -6
- package/out/exports/resources.generated/aws-networkfirewall-firewallpolicy.d.ts +16 -9
- package/out/exports/resources.generated/aws-networkfirewall-loggingconfiguration.d.ts +8 -8
- package/out/exports/resources.generated/aws-networkfirewall-rulegroup.d.ts +36 -22
- package/out/exports/resources.generated/aws-networkfirewall-vpcendpointassociation.d.ts +3 -3
- package/out/exports/resources.generated/aws-observabilityadmin-organizationtelemetryrule.d.ts +137 -0
- package/out/exports/resources.generated/aws-observabilityadmin-telemetryrule.d.ts +132 -0
- package/out/exports/resources.generated/aws-omics-workflowversion.d.ts +2 -2
- package/out/exports/resources.generated/aws-opensearchservice-domain.d.ts +21 -0
- package/out/exports/resources.generated/aws-opsworks-app.d.ts +4 -4
- package/out/exports/resources.generated/aws-opsworks-elasticloadbalancerattachment.d.ts +1 -1
- package/out/exports/resources.generated/aws-opsworks-instance.d.ts +14 -14
- package/out/exports/resources.generated/aws-opsworks-layer.d.ts +8 -8
- package/out/exports/resources.generated/aws-opsworks-stack.d.ts +25 -25
- package/out/exports/resources.generated/aws-opsworkscm-server.d.ts +2 -2
- package/out/exports/resources.generated/aws-pcs-cluster.d.ts +4 -0
- package/out/exports/resources.generated/aws-qbusiness-webexperience.d.ts +1 -1
- package/out/exports/resources.generated/aws-quicksight-dataset.d.ts +6 -6
- package/out/exports/resources.generated/aws-rds-dbcluster.d.ts +5 -0
- package/out/exports/resources.generated/aws-rds-dbinstance.d.ts +4 -29
- package/out/exports/resources.generated/aws-rds-dbproxy.d.ts +2 -2
- package/out/exports/resources.generated/aws-s3-accesspoint.d.ts +1 -1
- package/out/exports/resources.generated/aws-s3express-accesspoint.d.ts +1 -0
- package/out/exports/resources.generated/aws-s3tables-tablebucketpolicy.d.ts +2 -2
- package/out/exports/resources.generated/aws-s3tables-tablepolicy.d.ts +2 -2
- package/out/exports/resources.generated/aws-sagemaker-cluster.d.ts +101 -2
- package/out/exports/resources.generated/aws-sagemaker-domain.d.ts +0 -6
- package/out/exports/resources.generated/aws-sagemaker-processingjob.d.ts +72 -46
- package/out/exports/resources.generated/aws-sqs-queue.d.ts +2 -1
- package/out/exports/resources.generated/aws-synthetics-canary.d.ts +28 -0
- package/out/exports/resources.generated/aws-verifiedpermissions-policystore.d.ts +3 -5
- package/out/exports/resources.generated/aws-workspacesweb-portal.d.ts +7 -0
- package/out/exports/resources.generated/aws-workspacesweb-sessionlogger.d.ts +125 -0
- package/package.json +1 -1
|
@@ -1,10 +1,10 @@
|
|
|
1
1
|
import type { ResourceDefinition } from "../main.ts";
|
|
2
2
|
/**
|
|
3
|
-
* Use the
|
|
3
|
+
* Use the logging configuration to define the destinations and logging options for an firewall.
|
|
4
4
|
*
|
|
5
5
|
* You must change the logging configuration by changing one `LogDestinationConfig` setting at a time in your `LogDestinationConfigs` .
|
|
6
6
|
*
|
|
7
|
-
* You can make only one of the following changes to your
|
|
7
|
+
* You can make only one of the following changes to your logging configuration resource:
|
|
8
8
|
*
|
|
9
9
|
* - Create a new log destination object by adding a single `LogDestinationConfig` array element to `LogDestinationConfigs` .
|
|
10
10
|
* - Delete a log destination object by removing a single `LogDestinationConfig` array element from `LogDestinationConfigs` .
|
|
@@ -15,11 +15,11 @@ import type { ResourceDefinition } from "../main.ts";
|
|
|
15
15
|
*/
|
|
16
16
|
export type NetworkFirewallLoggingConfiguration = ResourceDefinition<"AWS::NetworkFirewall::LoggingConfiguration", NetworkFirewallLoggingConfigurationProps>;
|
|
17
17
|
/**
|
|
18
|
-
* Use the
|
|
18
|
+
* Use the logging configuration to define the destinations and logging options for an firewall.
|
|
19
19
|
*
|
|
20
20
|
* You must change the logging configuration by changing one `LogDestinationConfig` setting at a time in your `LogDestinationConfigs` .
|
|
21
21
|
*
|
|
22
|
-
* You can make only one of the following changes to your
|
|
22
|
+
* You can make only one of the following changes to your logging configuration resource:
|
|
23
23
|
*
|
|
24
24
|
* - Create a new log destination object by adding a single `LogDestinationConfig` array element to `LogDestinationConfigs` .
|
|
25
25
|
* - Delete a log destination object by removing a single `LogDestinationConfig` array element from `LogDestinationConfigs` .
|
|
@@ -34,7 +34,7 @@ export type NetworkFirewallLoggingConfigurationProps = {
|
|
|
34
34
|
*/
|
|
35
35
|
EnableMonitoringDashboard?: boolean | undefined;
|
|
36
36
|
/**
|
|
37
|
-
* The Amazon Resource Name (ARN) of the
|
|
37
|
+
* The Amazon Resource Name (ARN) of the firewallthat the logging configuration is associated with. You can't change the firewall specification after you create the logging configuration.
|
|
38
38
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-loggingconfiguration.html#cfn-networkfirewall-loggingconfiguration-firewallarn}
|
|
39
39
|
*/
|
|
40
40
|
FirewallArn: string;
|
|
@@ -47,13 +47,13 @@ export type NetworkFirewallLoggingConfigurationProps = {
|
|
|
47
47
|
*/
|
|
48
48
|
FirewallName?: string | undefined;
|
|
49
49
|
/**
|
|
50
|
-
* Defines how AWS Network Firewall performs logging for a
|
|
50
|
+
* Defines how AWS Network Firewall performs logging for a firewall.
|
|
51
51
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-loggingconfiguration.html#cfn-networkfirewall-loggingconfiguration-loggingconfiguration}
|
|
52
52
|
*/
|
|
53
53
|
LoggingConfiguration: LoggingConfiguration;
|
|
54
54
|
};
|
|
55
55
|
/**
|
|
56
|
-
* Defines where AWS Network Firewall sends logs for the firewall for one log type. This is used in
|
|
56
|
+
* Defines where AWS Network Firewall sends logs for the firewall for one log type. This is used in logging configuration. You can send each type of log to an Amazon S3 bucket, a CloudWatch log group, or a Kinesis Data Firehose delivery stream.
|
|
57
57
|
*
|
|
58
58
|
* Network Firewall generates logs for stateful rule groups. You can save alert and flow log types. The stateful rules engine records flow logs for all network traffic that it receives. It records alert logs for traffic that matches stateful rules that have the rule action set to `DROP` or `ALERT` .
|
|
59
59
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-loggingconfiguration-logdestinationconfig.html}
|
|
@@ -92,7 +92,7 @@ export type LogDestinationConfig = {
|
|
|
92
92
|
LogType: "ALERT" | "FLOW" | "TLS";
|
|
93
93
|
};
|
|
94
94
|
/**
|
|
95
|
-
* Defines how AWS Network Firewall performs logging for a
|
|
95
|
+
* Defines how AWS Network Firewall performs logging for a firewall.
|
|
96
96
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-loggingconfiguration-loggingconfiguration.html}
|
|
97
97
|
*/
|
|
98
98
|
export type LoggingConfiguration = {
|
|
@@ -1,11 +1,11 @@
|
|
|
1
1
|
import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
|
|
2
2
|
/**
|
|
3
|
-
* Use the
|
|
3
|
+
* Use the [](https://docs.aws.amazon.com/RuleGroup) to define a reusable collection of stateless or stateful network traffic filtering rules. You use rule groups in an firewall policy to specify the filtering behavior of an firewall.
|
|
4
4
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-rulegroup.html}
|
|
5
5
|
*/
|
|
6
6
|
export type NetworkFirewallRuleGroup = ResourceDefinitionWithAttributes<"AWS::NetworkFirewall::RuleGroup", NetworkFirewallRuleGroupProps, NetworkFirewallRuleGroupAttribs>;
|
|
7
7
|
/**
|
|
8
|
-
* Use the
|
|
8
|
+
* Use the [](https://docs.aws.amazon.com/RuleGroup) to define a reusable collection of stateless or stateful network traffic filtering rules. You use rule groups in an firewall policy to specify the filtering behavior of an firewall.
|
|
9
9
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-rulegroup.html}
|
|
10
10
|
*/
|
|
11
11
|
export type NetworkFirewallRuleGroupProps = {
|
|
@@ -35,6 +35,16 @@ export type NetworkFirewallRuleGroupProps = {
|
|
|
35
35
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-rulegroup.html#cfn-networkfirewall-rulegroup-rulegroupname}
|
|
36
36
|
*/
|
|
37
37
|
RuleGroupName: string;
|
|
38
|
+
/**
|
|
39
|
+
* A complex type containing the currently selected rule option fields that will be displayed for rule summarization returned by `DescribeRuleGroupSummary` .
|
|
40
|
+
*
|
|
41
|
+
* - The `RuleOptions` specified in `SummaryConfiguration`
|
|
42
|
+
* - Rule metadata organization preferences
|
|
43
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-rulegroup.html#cfn-networkfirewall-rulegroup-summaryconfiguration}
|
|
44
|
+
*/
|
|
45
|
+
SummaryConfiguration?: {
|
|
46
|
+
RuleOptions?: SummaryRuleOption[] | undefined;
|
|
47
|
+
} | undefined;
|
|
38
48
|
/**
|
|
39
49
|
* An array of key-value pairs to apply to this resource.
|
|
40
50
|
*
|
|
@@ -54,12 +64,12 @@ export type NetworkFirewallRuleGroupProps = {
|
|
|
54
64
|
*/
|
|
55
65
|
export type NetworkFirewallRuleGroupAttribs = {
|
|
56
66
|
/**
|
|
57
|
-
* The Amazon Resource Name (ARN) of the
|
|
67
|
+
* The Amazon Resource Name (ARN) of the rule group.
|
|
58
68
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-rulegroup.html#cfn-networkfirewall-rulegroup-rulegrouparn}
|
|
59
69
|
*/
|
|
60
70
|
RuleGroupArn: string;
|
|
61
71
|
/**
|
|
62
|
-
* The unique ID of the
|
|
72
|
+
* The unique ID of the rule group resource.
|
|
63
73
|
* @minLength 36
|
|
64
74
|
* @maxLength 36
|
|
65
75
|
* @pattern ^([0-9a-f]{8})-([0-9a-f]{4}-){3}([0-9a-f]{12})$
|
|
@@ -81,7 +91,7 @@ export type ActionDefinition = {
|
|
|
81
91
|
PublishMetricAction?: PublishMetricAction | undefined;
|
|
82
92
|
};
|
|
83
93
|
/**
|
|
84
|
-
* A single IP address specification. This is used in the
|
|
94
|
+
* A single IP address specification. This is used in the match attributes source and destination specifications.
|
|
85
95
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-rulegroup-address.html}
|
|
86
96
|
*/
|
|
87
97
|
export type Address = {
|
|
@@ -110,8 +120,8 @@ export type Address = {
|
|
|
110
120
|
*
|
|
111
121
|
* You can use custom actions in the following places:
|
|
112
122
|
*
|
|
113
|
-
* - In
|
|
114
|
-
* - In an
|
|
123
|
+
* - In a `StatelessRulesAndCustomActions` . The custom actions are available for use by name inside the `StatelessRulesAndCustomActions` where you define them. You can use them for your stateless rule actions to specify what to do with a packet that matches the rule's match attributes.
|
|
124
|
+
* - In an firewall policy specification, in `StatelessCustomActions` . The custom actions are available for use inside the policy where you define them. You can use them for the policy's default stateless actions settings to specify what to do with packets that don't match any of the policy's stateless rules.
|
|
115
125
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-rulegroup-customaction.html}
|
|
116
126
|
*/
|
|
117
127
|
export type CustomAction = {
|
|
@@ -216,7 +226,7 @@ export type Header = {
|
|
|
216
226
|
SourcePort: string;
|
|
217
227
|
};
|
|
218
228
|
/**
|
|
219
|
-
* A list of IP addresses and address ranges, in CIDR notation. This is part of a `
|
|
229
|
+
* A list of IP addresses and address ranges, in CIDR notation. This is part of a `RuleVariables` .
|
|
220
230
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-rulegroup-ipset.html}
|
|
221
231
|
*/
|
|
222
232
|
export type IPSet = {
|
|
@@ -227,12 +237,12 @@ export type IPSet = {
|
|
|
227
237
|
Definition?: string[] | undefined;
|
|
228
238
|
};
|
|
229
239
|
/**
|
|
230
|
-
* Configures one or more
|
|
240
|
+
* Configures one or more IP set references for a Suricata-compatible rule group. An IP set reference is a rule variable that references a resource that you create and manage in another AWS service, such as an Amazon VPC prefix list. Network Firewall IP set references enable you to dynamically update the contents of your rules. When you create, update, or delete the IP set you are referencing in your rule, Network Firewall automatically updates the rule's content with the changes. For more information about IP set references in Network Firewall , see [Using IP set references](https://docs.aws.amazon.com/network-firewall/latest/developerguide/rule-groups-ip-set-references.html) in the *Network Firewall Developer Guide* .
|
|
231
241
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-rulegroup-ipsetreference.html}
|
|
232
242
|
*/
|
|
233
243
|
export type IPSetReference = {
|
|
234
244
|
/**
|
|
235
|
-
* The Amazon Resource Name (ARN) of the resource to include in the
|
|
245
|
+
* The Amazon Resource Name (ARN) of the resource to include in the IP set reference.
|
|
236
246
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-rulegroup-ipsetreference.html#cfn-networkfirewall-rulegroup-ipsetreference-referencearn}
|
|
237
247
|
*/
|
|
238
248
|
ReferenceArn?: string | undefined;
|
|
@@ -280,7 +290,7 @@ export type MatchAttributes = {
|
|
|
280
290
|
TCPFlags?: TCPFlagField[] | undefined;
|
|
281
291
|
};
|
|
282
292
|
/**
|
|
283
|
-
* A single port range specification. This is used for source and destination port ranges in the stateless
|
|
293
|
+
* A single port range specification. This is used for source and destination port ranges in the stateless match attributes.
|
|
284
294
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-rulegroup-portrange.html}
|
|
285
295
|
*/
|
|
286
296
|
export type PortRange = {
|
|
@@ -317,7 +327,7 @@ export type PublishMetricAction = {
|
|
|
317
327
|
Dimensions: Dimension[];
|
|
318
328
|
};
|
|
319
329
|
/**
|
|
320
|
-
* Configures the
|
|
330
|
+
* Configures the reference sets for a stateful rule group. For more information, see the [Using IP set references in Suricata compatible rule groups](https://docs.aws.amazon.com/network-firewall/latest/developerguide/rule-groups-ip-set-references.html) in the *Network Firewall User Guide* .
|
|
321
331
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-rulegroup-referencesets.html}
|
|
322
332
|
*/
|
|
323
333
|
export type ReferenceSets = {
|
|
@@ -335,7 +345,7 @@ export type RuleDefinition = {
|
|
|
335
345
|
/**
|
|
336
346
|
* The actions to take on a packet that matches one of the stateless rule definition's match attributes. You must specify a standard action and you can add custom actions.
|
|
337
347
|
*
|
|
338
|
-
* > Network Firewall only forwards a packet for stateful rule inspection if you specify `aws:forward_to_sfe` for a rule that the packet matches, or if the packet doesn't match any stateless rule and you specify `aws:forward_to_sfe` for the `StatelessDefaultActions` setting for the
|
|
348
|
+
* > Network Firewall only forwards a packet for stateful rule inspection if you specify `aws:forward_to_sfe` for a rule that the packet matches, or if the packet doesn't match any stateless rule and you specify `aws:forward_to_sfe` for the `StatelessDefaultActions` setting for the firewall policy.
|
|
339
349
|
*
|
|
340
350
|
* For every rule, you must specify exactly one of the following standard actions.
|
|
341
351
|
*
|
|
@@ -409,7 +419,7 @@ export type RuleOption = {
|
|
|
409
419
|
*/
|
|
410
420
|
export type RuleOrder = "DEFAULT_ACTION_ORDER" | "STRICT_ORDER";
|
|
411
421
|
/**
|
|
412
|
-
* Settings that are available for use in the rules in the
|
|
422
|
+
* Settings that are available for use in the rules in the rule group where this is defined.
|
|
413
423
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-rulegroup-rulevariables.html}
|
|
414
424
|
*/
|
|
415
425
|
export type RuleVariables = {
|
|
@@ -439,7 +449,7 @@ export type RulesSource = {
|
|
|
439
449
|
*
|
|
440
450
|
* These rules contain the inspection criteria and the action to take for traffic that matches the criteria, so this type of rule group doesn't have a separate action setting.
|
|
441
451
|
*
|
|
442
|
-
* > You can't use the `priority` keyword if the `RuleOrder` option in
|
|
452
|
+
* > You can't use the `priority` keyword if the `RuleOrder` option in StatefulRuleOptions is set to `STRICT_ORDER` .
|
|
443
453
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-rulegroup-rulessource.html#cfn-networkfirewall-rulegroup-rulessource-rulesstring}
|
|
444
454
|
*/
|
|
445
455
|
RulesString?: string | undefined;
|
|
@@ -459,7 +469,7 @@ export type RulesSource = {
|
|
|
459
469
|
*
|
|
460
470
|
* For HTTPS traffic, domain filtering is SNI-based. It uses the server name indicator extension of the TLS handshake.
|
|
461
471
|
*
|
|
462
|
-
* By default, Network Firewall domain list inspection only includes traffic coming from the VPC where you deploy the firewall. To inspect traffic from IP addresses outside of the deployment VPC, you set the `HOME_NET` rule variable to include the CIDR range of the deployment VPC plus the other CIDR ranges. For more information, see `
|
|
472
|
+
* By default, Network Firewall domain list inspection only includes traffic coming from the VPC where you deploy the firewall. To inspect traffic from IP addresses outside of the deployment VPC, you set the `HOME_NET` rule variable to include the CIDR range of the deployment VPC plus the other CIDR ranges. For more information, see `RuleVariables` in this guide and [Stateful domain list rule groups in AWS Network Firewall](https://docs.aws.amazon.com/network-firewall/latest/developerguide/stateful-rule-groups-domain-names.html) in the *Network Firewall Developer Guide*
|
|
463
473
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-rulegroup-rulessourcelist.html}
|
|
464
474
|
*/
|
|
465
475
|
export type RulesSourceList = {
|
|
@@ -493,12 +503,12 @@ export type StatefulRule = {
|
|
|
493
503
|
* The actions for a stateful rule are defined as follows:
|
|
494
504
|
*
|
|
495
505
|
* - *PASS* - Permits the packets to go to the intended destination.
|
|
496
|
-
* - *DROP* - Blocks the packets from going to the intended destination and sends an alert log message, if alert logging is configured in the
|
|
506
|
+
* - *DROP* - Blocks the packets from going to the intended destination and sends an alert log message, if alert logging is configured in the firewall logging configuration.
|
|
497
507
|
* - *REJECT* - Drops traffic that matches the conditions of the stateful rule and sends a TCP reset packet back to sender of the packet. A TCP reset packet is a packet with no payload and a `RST` bit contained in the TCP header flags. `REJECT` is available only for TCP traffic.
|
|
498
|
-
* - *ALERT* - Permits the packets to go to the intended destination and sends an alert log message, if alert logging is configured in the
|
|
508
|
+
* - *ALERT* - Permits the packets to go to the intended destination and sends an alert log message, if alert logging is configured in the firewall logging configuration.
|
|
499
509
|
*
|
|
500
510
|
* You can use this action to test a rule that you intend to use to drop traffic. You can enable the rule with `ALERT` action, verify in the logs that the rule is filtering as you want, then change the action to `DROP` .
|
|
501
|
-
* - *REJECT* - Drops TCP traffic that matches the conditions of the stateful rule, and sends a TCP reset packet back to sender of the packet. A TCP reset packet is a packet with no payload and a `RST` bit contained in the TCP header flags. Also sends an alert log mesage if alert logging is configured in the
|
|
511
|
+
* - *REJECT* - Drops TCP traffic that matches the conditions of the stateful rule, and sends a TCP reset packet back to sender of the packet. A TCP reset packet is a packet with no payload and a `RST` bit contained in the TCP header flags. Also sends an alert log mesage if alert logging is configured in the firewall logging configuration.
|
|
502
512
|
*
|
|
503
513
|
* `REJECT` isn't currently available for use with IMAP and FTP protocols.
|
|
504
514
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-rulegroup-statefulrule.html#cfn-networkfirewall-rulegroup-statefulrule-action}
|
|
@@ -527,7 +537,7 @@ export type StatefulRuleOptions = {
|
|
|
527
537
|
RuleOrder?: RuleOrder | undefined;
|
|
528
538
|
};
|
|
529
539
|
/**
|
|
530
|
-
* A single stateless rule. This is used in `
|
|
540
|
+
* A single stateless rule. This is used in `StatelessRulesAndCustomActions` .
|
|
531
541
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-rulegroup-statelessrule.html}
|
|
532
542
|
*/
|
|
533
543
|
export type StatelessRule = {
|
|
@@ -554,7 +564,7 @@ export type StatelessRule = {
|
|
|
554
564
|
*/
|
|
555
565
|
export type StatelessRulesAndCustomActions = {
|
|
556
566
|
/**
|
|
557
|
-
* Defines an array of individual custom action definitions that are available for use by the stateless rules in this `StatelessRulesAndCustomActions` specification. You name each custom action that you define, and then you can use it by name in your stateless rule
|
|
567
|
+
* Defines an array of individual custom action definitions that are available for use by the stateless rules in this `StatelessRulesAndCustomActions` specification. You name each custom action that you define, and then you can use it by name in your stateless rule definition `Actions` specification.
|
|
558
568
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-rulegroup-statelessrulesandcustomactions.html#cfn-networkfirewall-rulegroup-statelessrulesandcustomactions-customactions}
|
|
559
569
|
*/
|
|
560
570
|
CustomActions?: CustomAction[] | undefined;
|
|
@@ -564,12 +574,16 @@ export type StatelessRulesAndCustomActions = {
|
|
|
564
574
|
*/
|
|
565
575
|
StatelessRules: StatelessRule[];
|
|
566
576
|
};
|
|
577
|
+
/**
|
|
578
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-rulegroup-summaryruleoption.html}
|
|
579
|
+
*/
|
|
580
|
+
export type SummaryRuleOption = "SID" | "MSG" | "METADATA";
|
|
567
581
|
/**
|
|
568
582
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-rulegroup-tcpflag.html}
|
|
569
583
|
*/
|
|
570
584
|
export type TCPFlag = "FIN" | "SYN" | "RST" | "PSH" | "ACK" | "URG" | "ECE" | "CWR";
|
|
571
585
|
/**
|
|
572
|
-
* TCP flags and masks to inspect packets for. This is used in the
|
|
586
|
+
* TCP flags and masks to inspect packets for. This is used in the match attributes specification.
|
|
573
587
|
*
|
|
574
588
|
* For example:
|
|
575
589
|
*
|
|
@@ -13,7 +13,7 @@ import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
|
|
|
13
13
|
*
|
|
14
14
|
* You can use AWS Resource Access Manager to share a `Firewall` that you own with other accounts, which gives them the ability to use the firewall to create VPC endpoint associations. For information about sharing a firewall, see `PutResourcePolicy` in this guide and see [Sharing Network Firewall resources](https://docs.aws.amazon.com/network-firewall/latest/developerguide/sharing.html) in the *AWS Network Firewall Developer Guide* .
|
|
15
15
|
*
|
|
16
|
-
* The status of the VPC endpoint association, which indicates whether it's ready to filter network traffic, is provided in the corresponding
|
|
16
|
+
* The status of the VPC endpoint association, which indicates whether it's ready to filter network traffic, is provided in the corresponding VPC endpoint association status. You can retrieve both the association and its status by calling `DescribeVpcEndpointAssociation` .
|
|
17
17
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-vpcendpointassociation.html}
|
|
18
18
|
*/
|
|
19
19
|
export type NetworkFirewallVpcEndpointAssociation = ResourceDefinitionWithAttributes<"AWS::NetworkFirewall::VpcEndpointAssociation", NetworkFirewallVpcEndpointAssociationProps, NetworkFirewallVpcEndpointAssociationAttribs>;
|
|
@@ -31,7 +31,7 @@ export type NetworkFirewallVpcEndpointAssociation = ResourceDefinitionWithAttrib
|
|
|
31
31
|
*
|
|
32
32
|
* You can use AWS Resource Access Manager to share a `Firewall` that you own with other accounts, which gives them the ability to use the firewall to create VPC endpoint associations. For information about sharing a firewall, see `PutResourcePolicy` in this guide and see [Sharing Network Firewall resources](https://docs.aws.amazon.com/network-firewall/latest/developerguide/sharing.html) in the *AWS Network Firewall Developer Guide* .
|
|
33
33
|
*
|
|
34
|
-
* The status of the VPC endpoint association, which indicates whether it's ready to filter network traffic, is provided in the corresponding
|
|
34
|
+
* The status of the VPC endpoint association, which indicates whether it's ready to filter network traffic, is provided in the corresponding VPC endpoint association status. You can retrieve both the association and its status by calling `DescribeVpcEndpointAssociation` .
|
|
35
35
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-vpcendpointassociation.html}
|
|
36
36
|
*/
|
|
37
37
|
export type NetworkFirewallVpcEndpointAssociationProps = {
|
|
@@ -66,7 +66,7 @@ export type NetworkFirewallVpcEndpointAssociationProps = {
|
|
|
66
66
|
*/
|
|
67
67
|
export type NetworkFirewallVpcEndpointAssociationAttribs = {
|
|
68
68
|
/**
|
|
69
|
-
*
|
|
69
|
+
* The unique ID of the firewall endpoint for the subnet that you attached to the firewall.For example: "vpce-111122223333"
|
|
70
70
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-vpcendpointassociation.html#cfn-networkfirewall-vpcendpointassociation-endpointid}
|
|
71
71
|
*/
|
|
72
72
|
EndpointId: string;
|
|
@@ -0,0 +1,137 @@
|
|
|
1
|
+
import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
|
|
2
|
+
/**
|
|
3
|
+
* The AWS::ObservabilityAdmin::OrganizationTelemetryRule resource defines a CloudWatch Observability Admin Organization Telemetry Rule.
|
|
4
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-observabilityadmin-organizationtelemetryrule.html}
|
|
5
|
+
*/
|
|
6
|
+
export type ObservabilityAdminOrganizationTelemetryRule = ResourceDefinitionWithAttributes<"AWS::ObservabilityAdmin::OrganizationTelemetryRule", ObservabilityAdminOrganizationTelemetryRuleProps, ObservabilityAdminOrganizationTelemetryRuleAttribs>;
|
|
7
|
+
/**
|
|
8
|
+
* The AWS::ObservabilityAdmin::OrganizationTelemetryRule resource defines a CloudWatch Observability Admin Organization Telemetry Rule.
|
|
9
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-observabilityadmin-organizationtelemetryrule.html}
|
|
10
|
+
*/
|
|
11
|
+
export type ObservabilityAdminOrganizationTelemetryRuleProps = {
|
|
12
|
+
/**
|
|
13
|
+
* The telemetry rule
|
|
14
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-observabilityadmin-organizationtelemetryrule.html#cfn-observabilityadmin-organizationtelemetryrule-rule}
|
|
15
|
+
*/
|
|
16
|
+
Rule: TelemetryRule;
|
|
17
|
+
/**
|
|
18
|
+
* The name of the organization telemetry rule
|
|
19
|
+
* @minLength 1
|
|
20
|
+
* @maxLength 100
|
|
21
|
+
* @pattern ^[0-9A-Za-z-]+$
|
|
22
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-observabilityadmin-organizationtelemetryrule.html#cfn-observabilityadmin-organizationtelemetryrule-rulename}
|
|
23
|
+
*/
|
|
24
|
+
RuleName: string;
|
|
25
|
+
/**
|
|
26
|
+
* An array of key-value pairs to apply to this resource
|
|
27
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-observabilityadmin-organizationtelemetryrule.html#cfn-observabilityadmin-organizationtelemetryrule-tags}
|
|
28
|
+
*/
|
|
29
|
+
Tags?: Tag[] | undefined;
|
|
30
|
+
};
|
|
31
|
+
/**
|
|
32
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-observabilityadmin-organizationtelemetryrule.html#aws-resource-observabilityadmin-organizationtelemetryrule-return-values}
|
|
33
|
+
*/
|
|
34
|
+
export type ObservabilityAdminOrganizationTelemetryRuleAttribs = {
|
|
35
|
+
/**
|
|
36
|
+
* The arn of the organization telemetry rule
|
|
37
|
+
* @minLength 1
|
|
38
|
+
* @maxLength 1011
|
|
39
|
+
* @pattern ^arn:aws([a-z0-9\-]+)?:([a-zA-Z0-9\-]+):([a-z0-9\-]+)?:([0-9]{12})?:(.+)$
|
|
40
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-observabilityadmin-organizationtelemetryrule.html#cfn-observabilityadmin-organizationtelemetryrule-rulearn}
|
|
41
|
+
*/
|
|
42
|
+
RuleArn: string;
|
|
43
|
+
};
|
|
44
|
+
/**
|
|
45
|
+
* Type of telemetry destination
|
|
46
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-organizationtelemetryrule-destinationtype.html}
|
|
47
|
+
*/
|
|
48
|
+
export type DestinationType = "cloud-watch-logs";
|
|
49
|
+
/**
|
|
50
|
+
* Resource Type associated with the Organization Telemetry Rule
|
|
51
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-organizationtelemetryrule-resourcetype.html}
|
|
52
|
+
*/
|
|
53
|
+
export type ResourceType = "AWS::EC2::VPC";
|
|
54
|
+
/**
|
|
55
|
+
* The destination configuration for telemetry data
|
|
56
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-organizationtelemetryrule-telemetrydestinationconfiguration.html}
|
|
57
|
+
*/
|
|
58
|
+
export type TelemetryDestinationConfiguration = {
|
|
59
|
+
/**
|
|
60
|
+
* Pattern for telemetry data destination
|
|
61
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-organizationtelemetryrule-telemetrydestinationconfiguration.html#cfn-observabilityadmin-organizationtelemetryrule-telemetrydestinationconfiguration-destinationpattern}
|
|
62
|
+
*/
|
|
63
|
+
DestinationPattern?: string | undefined;
|
|
64
|
+
/**
|
|
65
|
+
* Type of telemetry destination
|
|
66
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-organizationtelemetryrule-telemetrydestinationconfiguration.html#cfn-observabilityadmin-organizationtelemetryrule-telemetrydestinationconfiguration-destinationtype}
|
|
67
|
+
*/
|
|
68
|
+
DestinationType?: DestinationType | undefined;
|
|
69
|
+
/**
|
|
70
|
+
* Number of days to retain the telemetry data in the specified destination
|
|
71
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-organizationtelemetryrule-telemetrydestinationconfiguration.html#cfn-observabilityadmin-organizationtelemetryrule-telemetrydestinationconfiguration-retentionindays}
|
|
72
|
+
*/
|
|
73
|
+
RetentionInDays?: number | undefined;
|
|
74
|
+
/**
|
|
75
|
+
* Telemetry parameters for VPC Flow logs
|
|
76
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-organizationtelemetryrule-telemetrydestinationconfiguration.html#cfn-observabilityadmin-organizationtelemetryrule-telemetrydestinationconfiguration-vpcflowlogparameters}
|
|
77
|
+
*/
|
|
78
|
+
VPCFlowLogParameters?: VPCFlowLogParameters | undefined;
|
|
79
|
+
};
|
|
80
|
+
/**
|
|
81
|
+
* The telemetry rule
|
|
82
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-organizationtelemetryrule-telemetryrule.html}
|
|
83
|
+
*/
|
|
84
|
+
export type TelemetryRule = {
|
|
85
|
+
/**
|
|
86
|
+
* The destination configuration for telemetry data
|
|
87
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-organizationtelemetryrule-telemetryrule.html#cfn-observabilityadmin-organizationtelemetryrule-telemetryrule-destinationconfiguration}
|
|
88
|
+
*/
|
|
89
|
+
DestinationConfiguration?: TelemetryDestinationConfiguration | undefined;
|
|
90
|
+
/**
|
|
91
|
+
* Resource Type associated with the Organization Telemetry Rule
|
|
92
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-organizationtelemetryrule-telemetryrule.html#cfn-observabilityadmin-organizationtelemetryrule-telemetryrule-resourcetype}
|
|
93
|
+
*/
|
|
94
|
+
ResourceType: ResourceType;
|
|
95
|
+
/**
|
|
96
|
+
* Selection Criteria on scope level for rule application
|
|
97
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-organizationtelemetryrule-telemetryrule.html#cfn-observabilityadmin-organizationtelemetryrule-telemetryrule-scope}
|
|
98
|
+
*/
|
|
99
|
+
Scope?: string | undefined;
|
|
100
|
+
/**
|
|
101
|
+
* Selection Criteria on resource level for rule application
|
|
102
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-organizationtelemetryrule-telemetryrule.html#cfn-observabilityadmin-organizationtelemetryrule-telemetryrule-selectioncriteria}
|
|
103
|
+
*/
|
|
104
|
+
SelectionCriteria?: string | undefined;
|
|
105
|
+
/**
|
|
106
|
+
* Telemetry Type associated with the Organization Telemetry Rule
|
|
107
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-organizationtelemetryrule-telemetryrule.html#cfn-observabilityadmin-organizationtelemetryrule-telemetryrule-telemetrytype}
|
|
108
|
+
*/
|
|
109
|
+
TelemetryType: TelemetryType;
|
|
110
|
+
};
|
|
111
|
+
/**
|
|
112
|
+
* Telemetry Type associated with the Organization Telemetry Rule
|
|
113
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-organizationtelemetryrule-telemetrytype.html}
|
|
114
|
+
*/
|
|
115
|
+
export type TelemetryType = "Logs";
|
|
116
|
+
/**
|
|
117
|
+
* Telemetry parameters for VPC Flow logs
|
|
118
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-organizationtelemetryrule-vpcflowlogparameters.html}
|
|
119
|
+
*/
|
|
120
|
+
export type VPCFlowLogParameters = {
|
|
121
|
+
/**
|
|
122
|
+
* The fields to include in the flow log record. If you omit this parameter, the flow log is created using the default format.
|
|
123
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-organizationtelemetryrule-vpcflowlogparameters.html#cfn-observabilityadmin-organizationtelemetryrule-vpcflowlogparameters-logformat}
|
|
124
|
+
*/
|
|
125
|
+
LogFormat?: string | undefined;
|
|
126
|
+
/**
|
|
127
|
+
* The maximum interval of time, in seconds, during which a flow of packets is captured and aggregated into a flow log record. Default is 600s.
|
|
128
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-organizationtelemetryrule-vpcflowlogparameters.html#cfn-observabilityadmin-organizationtelemetryrule-vpcflowlogparameters-maxaggregationinterval}
|
|
129
|
+
*/
|
|
130
|
+
MaxAggregationInterval?: number | undefined;
|
|
131
|
+
/**
|
|
132
|
+
* The type of traffic captured for the flow log. Default is ALL
|
|
133
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-organizationtelemetryrule-vpcflowlogparameters.html#cfn-observabilityadmin-organizationtelemetryrule-vpcflowlogparameters-traffictype}
|
|
134
|
+
*/
|
|
135
|
+
TrafficType?: string | undefined;
|
|
136
|
+
};
|
|
137
|
+
//# sourceMappingURL=aws-observabilityadmin-organizationtelemetryrule.d.ts.map
|
|
@@ -0,0 +1,132 @@
|
|
|
1
|
+
import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
|
|
2
|
+
/**
|
|
3
|
+
* The AWS::ObservabilityAdmin::TelemetryRule resource defines a CloudWatch Observability Admin Telemetry Rule.
|
|
4
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-observabilityadmin-telemetryrule.html}
|
|
5
|
+
*/
|
|
6
|
+
export type ObservabilityAdminTelemetryRule = ResourceDefinitionWithAttributes<"AWS::ObservabilityAdmin::TelemetryRule", ObservabilityAdminTelemetryRuleProps, ObservabilityAdminTelemetryRuleAttribs>;
|
|
7
|
+
/**
|
|
8
|
+
* The AWS::ObservabilityAdmin::TelemetryRule resource defines a CloudWatch Observability Admin Telemetry Rule.
|
|
9
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-observabilityadmin-telemetryrule.html}
|
|
10
|
+
*/
|
|
11
|
+
export type ObservabilityAdminTelemetryRuleProps = {
|
|
12
|
+
/**
|
|
13
|
+
* The telemetry rule
|
|
14
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-observabilityadmin-telemetryrule.html#cfn-observabilityadmin-telemetryrule-rule}
|
|
15
|
+
*/
|
|
16
|
+
Rule: TelemetryRule;
|
|
17
|
+
/**
|
|
18
|
+
* The name of the telemetry rule
|
|
19
|
+
* @minLength 1
|
|
20
|
+
* @maxLength 100
|
|
21
|
+
* @pattern ^[0-9A-Za-z-]+$
|
|
22
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-observabilityadmin-telemetryrule.html#cfn-observabilityadmin-telemetryrule-rulename}
|
|
23
|
+
*/
|
|
24
|
+
RuleName: string;
|
|
25
|
+
/**
|
|
26
|
+
* An array of key-value pairs to apply to this resource
|
|
27
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-observabilityadmin-telemetryrule.html#cfn-observabilityadmin-telemetryrule-tags}
|
|
28
|
+
*/
|
|
29
|
+
Tags?: Tag[] | undefined;
|
|
30
|
+
};
|
|
31
|
+
/**
|
|
32
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-observabilityadmin-telemetryrule.html#aws-resource-observabilityadmin-telemetryrule-return-values}
|
|
33
|
+
*/
|
|
34
|
+
export type ObservabilityAdminTelemetryRuleAttribs = {
|
|
35
|
+
/**
|
|
36
|
+
* The arn of the telemetry rule
|
|
37
|
+
* @minLength 1
|
|
38
|
+
* @maxLength 1011
|
|
39
|
+
* @pattern ^arn:aws([a-z0-9\-]+)?:([a-zA-Z0-9\-]+):([a-z0-9\-]+)?:([0-9]{12})?:(.+)$
|
|
40
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-observabilityadmin-telemetryrule.html#cfn-observabilityadmin-telemetryrule-rulearn}
|
|
41
|
+
*/
|
|
42
|
+
RuleArn: string;
|
|
43
|
+
};
|
|
44
|
+
/**
|
|
45
|
+
* Type of telemetry destination
|
|
46
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-telemetryrule-destinationtype.html}
|
|
47
|
+
*/
|
|
48
|
+
export type DestinationType = "cloud-watch-logs";
|
|
49
|
+
/**
|
|
50
|
+
* Resource Type associated with the Telemetry Rule
|
|
51
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-telemetryrule-resourcetype.html}
|
|
52
|
+
*/
|
|
53
|
+
export type ResourceType = "AWS::EC2::VPC";
|
|
54
|
+
/**
|
|
55
|
+
* The destination configuration for telemetry data
|
|
56
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-telemetryrule-telemetrydestinationconfiguration.html}
|
|
57
|
+
*/
|
|
58
|
+
export type TelemetryDestinationConfiguration = {
|
|
59
|
+
/**
|
|
60
|
+
* Pattern for telemetry data destination
|
|
61
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-telemetryrule-telemetrydestinationconfiguration.html#cfn-observabilityadmin-telemetryrule-telemetrydestinationconfiguration-destinationpattern}
|
|
62
|
+
*/
|
|
63
|
+
DestinationPattern?: string | undefined;
|
|
64
|
+
/**
|
|
65
|
+
* Type of telemetry destination
|
|
66
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-telemetryrule-telemetrydestinationconfiguration.html#cfn-observabilityadmin-telemetryrule-telemetrydestinationconfiguration-destinationtype}
|
|
67
|
+
*/
|
|
68
|
+
DestinationType?: DestinationType | undefined;
|
|
69
|
+
/**
|
|
70
|
+
* Number of days to retain the telemetry data in the specified destination
|
|
71
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-telemetryrule-telemetrydestinationconfiguration.html#cfn-observabilityadmin-telemetryrule-telemetrydestinationconfiguration-retentionindays}
|
|
72
|
+
*/
|
|
73
|
+
RetentionInDays?: number | undefined;
|
|
74
|
+
/**
|
|
75
|
+
* Telemetry parameters for VPC Flow logs
|
|
76
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-telemetryrule-telemetrydestinationconfiguration.html#cfn-observabilityadmin-telemetryrule-telemetrydestinationconfiguration-vpcflowlogparameters}
|
|
77
|
+
*/
|
|
78
|
+
VPCFlowLogParameters?: VPCFlowLogParameters | undefined;
|
|
79
|
+
};
|
|
80
|
+
/**
|
|
81
|
+
* The telemetry rule
|
|
82
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-telemetryrule-telemetryrule.html}
|
|
83
|
+
*/
|
|
84
|
+
export type TelemetryRule = {
|
|
85
|
+
/**
|
|
86
|
+
* The destination configuration for telemetry data
|
|
87
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-telemetryrule-telemetryrule.html#cfn-observabilityadmin-telemetryrule-telemetryrule-destinationconfiguration}
|
|
88
|
+
*/
|
|
89
|
+
DestinationConfiguration?: TelemetryDestinationConfiguration | undefined;
|
|
90
|
+
/**
|
|
91
|
+
* Resource Type associated with the Telemetry Rule
|
|
92
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-telemetryrule-telemetryrule.html#cfn-observabilityadmin-telemetryrule-telemetryrule-resourcetype}
|
|
93
|
+
*/
|
|
94
|
+
ResourceType: ResourceType;
|
|
95
|
+
/**
|
|
96
|
+
* Selection Criteria on resource level for rule application
|
|
97
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-telemetryrule-telemetryrule.html#cfn-observabilityadmin-telemetryrule-telemetryrule-selectioncriteria}
|
|
98
|
+
*/
|
|
99
|
+
SelectionCriteria?: string | undefined;
|
|
100
|
+
/**
|
|
101
|
+
* Telemetry Type associated with the Telemetry Rule
|
|
102
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-telemetryrule-telemetryrule.html#cfn-observabilityadmin-telemetryrule-telemetryrule-telemetrytype}
|
|
103
|
+
*/
|
|
104
|
+
TelemetryType: TelemetryType;
|
|
105
|
+
};
|
|
106
|
+
/**
|
|
107
|
+
* Telemetry Type associated with the Telemetry Rule
|
|
108
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-telemetryrule-telemetrytype.html}
|
|
109
|
+
*/
|
|
110
|
+
export type TelemetryType = "Logs";
|
|
111
|
+
/**
|
|
112
|
+
* Telemetry parameters for VPC Flow logs
|
|
113
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-telemetryrule-vpcflowlogparameters.html}
|
|
114
|
+
*/
|
|
115
|
+
export type VPCFlowLogParameters = {
|
|
116
|
+
/**
|
|
117
|
+
* The fields to include in the flow log record. If you omit this parameter, the flow log is created using the default format.
|
|
118
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-telemetryrule-vpcflowlogparameters.html#cfn-observabilityadmin-telemetryrule-vpcflowlogparameters-logformat}
|
|
119
|
+
*/
|
|
120
|
+
LogFormat?: string | undefined;
|
|
121
|
+
/**
|
|
122
|
+
* The maximum interval of time, in seconds, during which a flow of packets is captured and aggregated into a flow log record. Default is 600s.
|
|
123
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-telemetryrule-vpcflowlogparameters.html#cfn-observabilityadmin-telemetryrule-vpcflowlogparameters-maxaggregationinterval}
|
|
124
|
+
*/
|
|
125
|
+
MaxAggregationInterval?: number | undefined;
|
|
126
|
+
/**
|
|
127
|
+
* The type of traffic captured for the flow log. Default is ALL
|
|
128
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-telemetryrule-vpcflowlogparameters.html#cfn-observabilityadmin-telemetryrule-vpcflowlogparameters-traffictype}
|
|
129
|
+
*/
|
|
130
|
+
TrafficType?: string | undefined;
|
|
131
|
+
};
|
|
132
|
+
//# sourceMappingURL=aws-observabilityadmin-telemetryrule.d.ts.map
|
|
@@ -6,7 +6,7 @@ import type { ResourceDefinitionWithAttributes } from "../main.ts";
|
|
|
6
6
|
*
|
|
7
7
|
* Provide a version name that is unique for this workflow. You cannot change the name after HealthOmics creates the version.
|
|
8
8
|
*
|
|
9
|
-
* > Don
|
|
9
|
+
* > Don't include any personally identifiable information (PII) in the version name. Version names appear in the workflow version ARN.
|
|
10
10
|
*
|
|
11
11
|
* For more information, see [Workflow versioning in AWS HealthOmics](https://docs.aws.amazon.com/omics/latest/dev/workflow-versions.html) in the *AWS HealthOmics User Guide* .
|
|
12
12
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-omics-workflowversion.html}
|
|
@@ -19,7 +19,7 @@ export type OmicsWorkflowVersion = ResourceDefinitionWithAttributes<"AWS::Omics:
|
|
|
19
19
|
*
|
|
20
20
|
* Provide a version name that is unique for this workflow. You cannot change the name after HealthOmics creates the version.
|
|
21
21
|
*
|
|
22
|
-
* > Don
|
|
22
|
+
* > Don't include any personally identifiable information (PII) in the version name. Version names appear in the workflow version ARN.
|
|
23
23
|
*
|
|
24
24
|
* For more information, see [Workflow versioning in AWS HealthOmics](https://docs.aws.amazon.com/omics/latest/dev/workflow-versions.html) in the *AWS HealthOmics User Guide* .
|
|
25
25
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-omics-workflowversion.html}
|
|
@@ -182,6 +182,10 @@ export type AdvancedSecurityOptionsInput = {
|
|
|
182
182
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-advancedsecurityoptionsinput.html#cfn-opensearchservice-domain-advancedsecurityoptionsinput-enabled}
|
|
183
183
|
*/
|
|
184
184
|
Enabled?: boolean | undefined;
|
|
185
|
+
/**
|
|
186
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-advancedsecurityoptionsinput.html#cfn-opensearchservice-domain-advancedsecurityoptionsinput-iamfederationoptions}
|
|
187
|
+
*/
|
|
188
|
+
IAMFederationOptions?: IAMFederationOptions | undefined;
|
|
185
189
|
/**
|
|
186
190
|
* True to enable the internal user database.
|
|
187
191
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-advancedsecurityoptionsinput.html#cfn-opensearchservice-domain-advancedsecurityoptionsinput-internaluserdatabaseenabled}
|
|
@@ -405,6 +409,23 @@ export type EncryptionAtRestOptions = {
|
|
|
405
409
|
*/
|
|
406
410
|
KmsKeyId?: string | undefined;
|
|
407
411
|
};
|
|
412
|
+
/**
|
|
413
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-iamfederationoptions.html}
|
|
414
|
+
*/
|
|
415
|
+
export type IAMFederationOptions = {
|
|
416
|
+
/**
|
|
417
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-iamfederationoptions.html#cfn-opensearchservice-domain-iamfederationoptions-enabled}
|
|
418
|
+
*/
|
|
419
|
+
Enabled?: boolean | undefined;
|
|
420
|
+
/**
|
|
421
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-iamfederationoptions.html#cfn-opensearchservice-domain-iamfederationoptions-roleskey}
|
|
422
|
+
*/
|
|
423
|
+
RolesKey?: string | undefined;
|
|
424
|
+
/**
|
|
425
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-iamfederationoptions.html#cfn-opensearchservice-domain-iamfederationoptions-subjectkey}
|
|
426
|
+
*/
|
|
427
|
+
SubjectKey?: string | undefined;
|
|
428
|
+
};
|
|
408
429
|
/**
|
|
409
430
|
* Settings container for integrating IAM Identity Center with OpenSearch UI applications, which enables enabling secure user authentication and access control across multiple data sources. This setup supports single sign-on (SSO) through IAM Identity Center, allowing centralized user management.
|
|
410
431
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-identitycenteroptions.html}
|