@propulsionworks/cloudformation 0.1.21 → 0.1.23

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (79) hide show
  1. package/out/exports/resources.generated/aws-apigateway-deployment.d.ts +1 -1
  2. package/out/exports/resources.generated/aws-appintegrations-application.d.ts +52 -0
  3. package/out/exports/resources.generated/aws-aps-resourcepolicy.d.ts +36 -0
  4. package/out/exports/resources.generated/aws-aps-workspace.d.ts +2 -4
  5. package/out/exports/resources.generated/aws-b2bi-transformer.d.ts +89 -0
  6. package/out/exports/resources.generated/aws-batch-computeenvironment.d.ts +12 -4
  7. package/out/exports/resources.generated/aws-batch-jobdefinition.d.ts +2 -2
  8. package/out/exports/resources.generated/aws-billingconductor-customlineitem.d.ts +2 -2
  9. package/out/exports/resources.generated/aws-cloudfront-distribution.d.ts +4 -0
  10. package/out/exports/resources.generated/aws-codepipeline-webhook.d.ts +20 -2
  11. package/out/exports/resources.generated/aws-connect-predefinedattribute.d.ts +3 -3
  12. package/out/exports/resources.generated/aws-connect-user.d.ts +5 -0
  13. package/out/exports/resources.generated/aws-datazone-policygrant.d.ts +298 -0
  14. package/out/exports/resources.generated/aws-deadline-fleet.d.ts +10 -2
  15. package/out/exports/resources.generated/aws-deadline-licenseendpoint.d.ts +1 -1
  16. package/out/exports/resources.generated/aws-dynamodb-globaltable.d.ts +5 -0
  17. package/out/exports/resources.generated/aws-dynamodb-table.d.ts +11 -4
  18. package/out/exports/resources.generated/aws-ec2-ec2fleet.d.ts +1 -1
  19. package/out/exports/resources.generated/aws-ec2-ippoolroutetableassociation.d.ts +33 -0
  20. package/out/exports/resources.generated/aws-ec2-launchtemplate.d.ts +3 -0
  21. package/out/exports/resources.generated/aws-ec2-volume.d.ts +2 -0
  22. package/out/exports/resources.generated/aws-ec2-vpnconnection.d.ts +4 -0
  23. package/out/exports/resources.generated/aws-ecs-capacityprovider.d.ts +0 -2
  24. package/out/exports/resources.generated/aws-ecs-service.d.ts +1 -1
  25. package/out/exports/resources.generated/aws-eks-addon.d.ts +10 -0
  26. package/out/exports/resources.generated/aws-eks-cluster.d.ts +1 -1
  27. package/out/exports/resources.generated/aws-elasticloadbalancingv2-loadbalancer.d.ts +1 -1
  28. package/out/exports/resources.generated/aws-entityresolution-idmappingworkflow.d.ts +13 -0
  29. package/out/exports/resources.generated/aws-events-rule.d.ts +5 -0
  30. package/out/exports/resources.generated/aws-fsx-filesystem.d.ts +10 -0
  31. package/out/exports/resources.generated/aws-glue-connection.d.ts +30 -0
  32. package/out/exports/resources.generated/aws-glue-job.d.ts +19 -8
  33. package/out/exports/resources.generated/aws-glue-tableoptimizer.d.ts +18 -1
  34. package/out/exports/resources.generated/aws-guardduty-ipset.d.ts +10 -6
  35. package/out/exports/resources.generated/aws-guardduty-threatentityset.d.ts +114 -0
  36. package/out/exports/resources.generated/aws-guardduty-threatintelset.d.ts +13 -7
  37. package/out/exports/resources.generated/aws-guardduty-trustedentityset.d.ts +113 -0
  38. package/out/exports/resources.generated/aws-imagebuilder-component.d.ts +1 -1
  39. package/out/exports/resources.generated/aws-imagebuilder-containerrecipe.d.ts +2 -2
  40. package/out/exports/resources.generated/aws-imagebuilder-distributionconfiguration.d.ts +1 -1
  41. package/out/exports/resources.generated/aws-imagebuilder-imagerecipe.d.ts +4 -2
  42. package/out/exports/resources.generated/aws-imagebuilder-workflow.d.ts +1 -1
  43. package/out/exports/resources.generated/aws-inspectorv2-codesecurityintegration.d.ts +176 -0
  44. package/out/exports/resources.generated/aws-inspectorv2-codesecurityscanconfiguration.d.ts +135 -0
  45. package/out/exports/resources.generated/aws-iot-encryptionconfiguration.d.ts +42 -0
  46. package/out/exports/resources.generated/aws-iot-mitigationaction.d.ts +2 -2
  47. package/out/exports/resources.generated/aws-ivs-playbackrestrictionpolicy.d.ts +2 -2
  48. package/out/exports/resources.generated/aws-ivs-stage.d.ts +54 -1
  49. package/out/exports/resources.generated/aws-kinesisanalyticsv2-application.d.ts +24 -0
  50. package/out/exports/resources.generated/aws-lambda-eventinvokeconfig.d.ts +3 -3
  51. package/out/exports/resources.generated/aws-lambda-permission.d.ts +2 -2
  52. package/out/exports/resources.generated/aws-logs-loggroup.d.ts +2 -3
  53. package/out/exports/resources.generated/aws-mediapackagev2-channel.d.ts +1 -1
  54. package/out/exports/resources.generated/aws-networkfirewall-tlsinspectionconfiguration.d.ts +4 -4
  55. package/out/exports/resources.generated/aws-observabilityadmin-organizationtelemetryrule.d.ts +137 -0
  56. package/out/exports/resources.generated/aws-observabilityadmin-telemetryrule.d.ts +132 -0
  57. package/out/exports/resources.generated/aws-omics-workflowversion.d.ts +2 -2
  58. package/out/exports/resources.generated/aws-opensearchservice-domain.d.ts +21 -0
  59. package/out/exports/resources.generated/aws-quicksight-analysis.d.ts +1 -1
  60. package/out/exports/resources.generated/aws-quicksight-dataset.d.ts +6 -6
  61. package/out/exports/resources.generated/aws-rds-dbproxy.d.ts +1 -1
  62. package/out/exports/resources.generated/aws-s3-bucket.d.ts +1 -1
  63. package/out/exports/resources.generated/aws-s3-bucketpolicy.d.ts +2 -2
  64. package/out/exports/resources.generated/aws-s3express-accesspoint.d.ts +1 -0
  65. package/out/exports/resources.generated/aws-s3tables-tablebucketpolicy.d.ts +2 -2
  66. package/out/exports/resources.generated/aws-s3tables-tablepolicy.d.ts +2 -2
  67. package/out/exports/resources.generated/aws-sagemaker-cluster.d.ts +96 -0
  68. package/out/exports/resources.generated/aws-sagemaker-domain.d.ts +0 -6
  69. package/out/exports/resources.generated/aws-servicediscovery-httpnamespace.d.ts +4 -4
  70. package/out/exports/resources.generated/aws-servicediscovery-instance.d.ts +1 -1
  71. package/out/exports/resources.generated/aws-servicediscovery-service.d.ts +6 -31
  72. package/out/exports/resources.generated/aws-sqs-queue.d.ts +2 -1
  73. package/out/exports/resources.generated/aws-ssm-patchbaseline.d.ts +6 -1
  74. package/out/exports/resources.generated/aws-ssmquicksetup-configurationmanager.d.ts +1 -1
  75. package/out/exports/resources.generated/aws-synthetics-canary.d.ts +29 -0
  76. package/out/exports/resources.generated/aws-vpclattice-resourcegateway.d.ts +5 -0
  77. package/out/exports/resources.generated/aws-workspacesweb-portal.d.ts +1 -0
  78. package/out/exports/resources.generated/aws-workspacesweb-sessionlogger.d.ts +19 -2
  79. package/package.json +1 -1
@@ -69,6 +69,11 @@ export type FSxFileSystemProps = {
69
69
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-filesystem.html#cfn-fsx-filesystem-lustreconfiguration}
70
70
  */
71
71
  LustreConfiguration?: LustreConfiguration | undefined;
72
+ /**
73
+ * The network type of the file system.
74
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-filesystem.html#cfn-fsx-filesystem-networktype}
75
+ */
76
+ NetworkType?: string | undefined;
72
77
  /**
73
78
  * The ONTAP configuration properties of the FSx for ONTAP file system that you are creating. This configuration is required if the `FileSystemType` is set to `ONTAP` .
74
79
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-filesystem.html#cfn-fsx-filesystem-ontapconfiguration}
@@ -582,6 +587,11 @@ export type OpenZFSConfiguration = {
582
587
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-filesystem-openzfsconfiguration.html#cfn-fsx-filesystem-openzfsconfiguration-endpointipaddressrange}
583
588
  */
584
589
  EndpointIpAddressRange?: string | undefined;
590
+ /**
591
+ * (Multi-AZ only) Specifies the IP address range in which the endpoints to access your file system will be created. By default in the Amazon FSx API and Amazon FSx console, Amazon FSx selects an available /118 IP address range for you from one of the VPC's CIDR ranges. You can have overlapping endpoint IP addresses for file systems deployed in the same VPC/route tables, as long as they don't overlap with any subnet.
592
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-filesystem-openzfsconfiguration.html#cfn-fsx-filesystem-openzfsconfiguration-endpointipv6addressrange}
593
+ */
594
+ EndpointIpv6AddressRange?: string | undefined;
585
595
  /**
586
596
  * To delete a file system if there are child volumes present below the root volume, use the string `DELETE_CHILD_VOLUMES_AND_SNAPSHOTS` . If your file system has child volumes and you don't use this option, the delete request will fail.
587
597
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-filesystem-openzfsconfiguration.html#cfn-fsx-filesystem-openzfsconfiguration-options}
@@ -176,10 +176,40 @@ export type ConnectionInput = {
176
176
  * - `SAPODATA` - Designates a connection to SAP OData.
177
177
  * - `SERVICENOW` - Designates a connection to ServiceNow.
178
178
  * - `SLACK` - Designates a connection to Slack.
179
+ * - `SNOWFLAKE` - Designates a connection to Snowflake.
179
180
  * - `SNAPCHATADS` - Designates a connection to Snapchat Ads.
180
181
  * - `STRIPE` - Designates a connection to Stripe.
181
182
  * - `ZENDESK` - Designates a connection to Zendesk.
182
183
  * - `ZOHOCRM` - Designates a connection to Zoho CRM.
184
+ * - `ADOBEANALYTICS` - Designates a connection to Adobe Analytics.
185
+ * - `LINKEDIN` - Designates a connection to LinkedIn.
186
+ * - `MIXPANEL` - Designates a connection to Mixpanel.
187
+ * - `ASANA` - Designates a connection to Asana.
188
+ * - `SMARTSHEET` - Designates a connection to Smartsheet.
189
+ * - `DATADOG` - Designates a connection to Datadog.
190
+ * - `WOOCOMMERCE` - Designates a connection to WooCommerce.
191
+ * - `PAYPAL` - Designates a connection to PayPal.
192
+ * - `QUICKBOOKS` - Designates a connection to QuickBooks.
193
+ * - `FACEBOOKPAGEINSIGHTS` - Designates a connection to Facebook Page Insights.
194
+ * - `FRESHDESK` - Designates a connection to Freshdesk.
195
+ * - `TWILIO` - Designates a connection to Twilio.
196
+ * - `DOCUSIGNMONITOR` - Designates a connection to DocuSign Monitor.
197
+ * - `FRESHSALES` - Designates a connection to Freshsales.
198
+ * - `ZOOM` - Designates a connection to Zoom.
199
+ * - `GOOGLESEARCHCONSOLE` - Designates a connection to Google Search Console.
200
+ * - `SALESFORCECOMMERCECLOUD` - Designates a connection to Salesforce Commerce Cloud.
201
+ * - `SAPCONCUR` - Designates a connection to SAP Concur.
202
+ * - `DYNATRACE` - Designates a connection to Dynatrace.
203
+ * - `MICROSOFTDYNAMIC365FINANCEANDOPS` - Designates a connection to Microsoft Dynamics 365 Finance and Operations.
204
+ * - `MICROSOFTTEAMS` - Designates a connection to Microsoft Teams.
205
+ * - `BLACKBAUDRAISEREDGENXT` - Designates a connection to Blackbaud Raiser's Edge NXT.
206
+ * - `MAILCHIMP` - Designates a connection to Mailchimp.
207
+ * - `GITLAB` - Designates a connection to GitLab.
208
+ * - `PENDO` - Designates a connection to Pendo.
209
+ * - `PRODUCTBOARD` - Designates a connection to Productboard.
210
+ * - `CIRCLECI` - Designates a connection to CircleCI.
211
+ * - `PIPEDIVE` - Designates a connection to Pipedrive.
212
+ * - `SENDGRID` - Designates a connection to SendGrid.
183
213
  *
184
214
  * For more information on the connection parameters needed for a particular connector, see the documentation for the connector in [Adding an AWS Glue connection](https://docs.aws.amazon.com/glue/latest/dg/console-connections.html) in the AWS Glue User Guide.
185
215
  *
@@ -157,14 +157,25 @@ export type GlueJobProps = {
157
157
  */
158
158
  Timeout?: number | undefined;
159
159
  /**
160
- * The type of predefined worker that is allocated when a job runs. Accepts a value of G.1X, G.2X, G.4X, G.8X or G.025X for Spark jobs. Accepts the value Z.2X for Ray jobs.
161
- *
162
- * - For the `G.1X` worker type, each worker maps to 1 DPU (4 vCPUs, 16 GB of memory) with 94GB disk, and provides 1 executor per worker. We recommend this worker type for workloads such as data transforms, joins, and queries, to offers a scalable and cost effective way to run most jobs.
163
- * - For the `G.2X` worker type, each worker maps to 2 DPU (8 vCPUs, 32 GB of memory) with 138GB disk, and provides 1 executor per worker. We recommend this worker type for workloads such as data transforms, joins, and queries, to offers a scalable and cost effective way to run most jobs.
164
- * - For the `G.4X` worker type, each worker maps to 4 DPU (16 vCPUs, 64 GB of memory) with 256GB disk, and provides 1 executor per worker. We recommend this worker type for jobs whose workloads contain your most demanding transforms, aggregations, joins, and queries. This worker type is available only for AWS Glue version 3.0 or later Spark ETL jobs in the following AWS Regions: US East (Ohio), US East (N. Virginia), US West (N. California), US West (Oregon), Asia Pacific (Mumbai), Asia Pacific (Seoul), Asia Pacific (Singapore), Asia Pacific (Sydney), Asia Pacific (Tokyo), Canada (Central), Europe (Frankfurt), Europe (Ireland), Europe (London), Europe (Spain), Europe (Stockholm), and South America (São Paulo).
165
- * - For the `G.8X` worker type, each worker maps to 8 DPU (32 vCPUs, 128 GB of memory) with 512GB disk, and provides 1 executor per worker. We recommend this worker type for jobs whose workloads contain your most demanding transforms, aggregations, joins, and queries. This worker type is available only for AWS Glue version 3.0 or later Spark ETL jobs, in the same AWS Regions as supported for the `G.4X` worker type.
166
- * - For the `G.025X` worker type, each worker maps to 0.25 DPU (2 vCPUs, 4 GB of memory) with 84GB disk, and provides 1 executor per worker. We recommend this worker type for low volume streaming jobs. This worker type is only available for AWS Glue version 3.0 or later streaming jobs.
167
- * - For the `Z.2X` worker type, each worker maps to 2 M-DPU (8vCPUs, 64 GB of memory) with 128 GB disk, and provides up to 8 Ray workers based on the autoscaler.
160
+ * The type of predefined worker that is allocated when a job runs.
161
+ *
162
+ * AWS Glue provides multiple worker types to accommodate different workload requirements:
163
+ *
164
+ * G Worker Types (General-purpose compute workers):
165
+ *
166
+ * - G.1X: 1 DPU (4 vCPUs, 16 GB memory, 94GB disk)
167
+ * - G.2X: 2 DPU (8 vCPUs, 32 GB memory, 138GB disk)
168
+ * - G.4X: 4 DPU (16 vCPUs, 64 GB memory, 256GB disk)
169
+ * - G.8X: 8 DPU (32 vCPUs, 128 GB memory, 512GB disk)
170
+ * - G.12X: 12 DPU (48 vCPUs, 192 GB memory, 768GB disk)
171
+ * - G.16X: 16 DPU (64 vCPUs, 256 GB memory, 1024GB disk)
172
+ *
173
+ * R Worker Types (Memory-optimized workers):
174
+ *
175
+ * - R.1X: 1 M-DPU (4 vCPUs, 32 GB memory)
176
+ * - R.2X: 2 M-DPU (8 vCPUs, 64 GB memory)
177
+ * - R.4X: 4 M-DPU (16 vCPUs, 128 GB memory)
178
+ * - R.8X: 8 M-DPU (32 vCPUs, 256 GB memory)
168
179
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-glue-job.html#cfn-glue-job-workertype}
169
180
  */
170
181
  WorkerType?: "Standard" | "G.1X" | "G.2X" | "G.025X" | "G.4X" | "G.8X" | "Z.2X" | "G.12X" | "G.16X" | "R.1X" | "R.2X" | "R.4X" | "R.8X" | undefined;
@@ -64,6 +64,23 @@ export type IcebergConfiguration = {
64
64
  */
65
65
  OrphanFileRetentionPeriodInDays?: number | undefined;
66
66
  };
67
+ /**
68
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-glue-tableoptimizer-icebergretentionconfiguration.html}
69
+ */
70
+ export type IcebergRetentionConfiguration = {
71
+ /**
72
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-glue-tableoptimizer-icebergretentionconfiguration.html#cfn-glue-tableoptimizer-icebergretentionconfiguration-cleanexpiredfiles}
73
+ */
74
+ CleanExpiredFiles?: boolean | undefined;
75
+ /**
76
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-glue-tableoptimizer-icebergretentionconfiguration.html#cfn-glue-tableoptimizer-icebergretentionconfiguration-numberofsnapshotstoretain}
77
+ */
78
+ NumberOfSnapshotsToRetain?: number | undefined;
79
+ /**
80
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-glue-tableoptimizer-icebergretentionconfiguration.html#cfn-glue-tableoptimizer-icebergretentionconfiguration-snapshotretentionperiodindays}
81
+ */
82
+ SnapshotRetentionPeriodInDays?: number | undefined;
83
+ };
67
84
  /**
68
85
  * Configuration for removing files that are are not tracked by the Iceberg table metadata, and are older than your configured age limit. This configuration helps optimize storage usage and costs by automatically cleaning up files that are no longer needed by the table.
69
86
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-glue-tableoptimizer-orphanfiledeletionconfiguration.html}
@@ -84,7 +101,7 @@ export type RetentionConfiguration = {
84
101
  * The configuration for an Iceberg snapshot retention optimizer.
85
102
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-glue-tableoptimizer-retentionconfiguration.html#cfn-glue-tableoptimizer-retentionconfiguration-icebergconfiguration}
86
103
  */
87
- IcebergConfiguration?: IcebergConfiguration | undefined;
104
+ IcebergConfiguration?: IcebergRetentionConfiguration | undefined;
88
105
  };
89
106
  /**
90
107
  * Specifies configuration details of a table optimizer.
@@ -1,16 +1,20 @@
1
1
  import type { ResourceDefinitionWithAttributes } from "../main.ts";
2
2
  /**
3
- * The `AWS::GuardDuty::IPSet` resource specifies a new `IPSet` . An `IPSet` is a list of trusted IP addresses from which secure communication is allowed with AWS infrastructure and applications.
3
+ * The `AWS::GuardDuty::IPSet` resource helps you create a list of trusted IP addresses that you can use for secure communication with AWS infrastructure and applications. Once you activate this list, GuardDuty will not generate findings when there is an activity associated with these safe IP addresses.
4
+ *
5
+ * Only the users of the GuardDuty administrator account can manage this list. These settings are also applied to the member accounts.
4
6
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-ipset.html}
5
7
  */
6
8
  export type GuardDutyIPSet = ResourceDefinitionWithAttributes<"AWS::GuardDuty::IPSet", GuardDutyIPSetProps, GuardDutyIPSetAttribs>;
7
9
  /**
8
- * The `AWS::GuardDuty::IPSet` resource specifies a new `IPSet` . An `IPSet` is a list of trusted IP addresses from which secure communication is allowed with AWS infrastructure and applications.
10
+ * The `AWS::GuardDuty::IPSet` resource helps you create a list of trusted IP addresses that you can use for secure communication with AWS infrastructure and applications. Once you activate this list, GuardDuty will not generate findings when there is an activity associated with these safe IP addresses.
11
+ *
12
+ * Only the users of the GuardDuty administrator account can manage this list. These settings are also applied to the member accounts.
9
13
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-ipset.html}
10
14
  */
11
15
  export type GuardDutyIPSetProps = {
12
16
  /**
13
- * Indicates whether or not GuardDuty uses the `IPSet` .
17
+ * A boolean value that determines if GuardDuty can start using this list for custom threat detection. For GuardDuty to prevent generating findings based on an activity associated with these entries, this list must be active.
14
18
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-ipset.html#cfn-guardduty-ipset-activate}
15
19
  */
16
20
  Activate?: boolean | undefined;
@@ -32,7 +36,7 @@ export type GuardDutyIPSetProps = {
32
36
  */
33
37
  ExpectedBucketOwner?: string | undefined;
34
38
  /**
35
- * The format of the file that contains the IPSet.
39
+ * The format of the file that contains the IPSet. For information about supported formats, see [List formats](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_upload-lists.html#prepare_list) in the *Amazon GuardDuty User Guide* .
36
40
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-ipset.html#cfn-guardduty-ipset-format}
37
41
  */
38
42
  Format: string;
@@ -46,14 +50,14 @@ export type GuardDutyIPSetProps = {
46
50
  /**
47
51
  * The user-friendly name to identify the IPSet.
48
52
  *
49
- * Allowed characters are alphanumeric, whitespace, dash (-), and underscores (_).
53
+ * The name of your list must be unique within an AWS account and Region. Valid characters are alphanumeric, whitespace, dash (-), and underscores (_).
50
54
  * @minLength 1
51
55
  * @maxLength 300
52
56
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-ipset.html#cfn-guardduty-ipset-name}
53
57
  */
54
58
  Name?: string | undefined;
55
59
  /**
56
- * The tags to be added to a new IP set resource. Each tag consists of a key and an optional value, both of which you define.
60
+ * The tags to be added to a new threat entity set resource. Each tag consists of a key and an optional value, both of which you define.
57
61
  *
58
62
  * For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .
59
63
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-ipset.html#cfn-guardduty-ipset-tags}
@@ -0,0 +1,114 @@
1
+ import type { ResourceDefinitionWithAttributes } from "../main.ts";
2
+ /**
3
+ * The `AWS::GuardDuty::ThreatEntitySet` resource helps you create a list of known malicious IP addresses and domain names in your AWS environment. Once you activate this list, GuardDuty will use the entries in this list as an additional source of threat detection and generate findings when there is an activity associated with these known malicious IP addresses and domain names. GuardDuty continues to monitor independently of this custom threat entity set.
4
+ *
5
+ * Only the users of the GuardDuty administrator account can manage this list. These settings automatically apply to the member accounts.
6
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatentityset.html}
7
+ */
8
+ export type GuardDutyThreatEntitySet = ResourceDefinitionWithAttributes<"AWS::GuardDuty::ThreatEntitySet", GuardDutyThreatEntitySetProps, GuardDutyThreatEntitySetAttribs>;
9
+ /**
10
+ * The `AWS::GuardDuty::ThreatEntitySet` resource helps you create a list of known malicious IP addresses and domain names in your AWS environment. Once you activate this list, GuardDuty will use the entries in this list as an additional source of threat detection and generate findings when there is an activity associated with these known malicious IP addresses and domain names. GuardDuty continues to monitor independently of this custom threat entity set.
11
+ *
12
+ * Only the users of the GuardDuty administrator account can manage this list. These settings automatically apply to the member accounts.
13
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatentityset.html}
14
+ */
15
+ export type GuardDutyThreatEntitySetProps = {
16
+ /**
17
+ * A boolean value that determines if GuardDuty can start using this list for custom threat detection. For GuardDuty to consider the entries in this list and generate findings based on associated activity, this list must be active.
18
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatentityset.html#cfn-guardduty-threatentityset-activate}
19
+ */
20
+ Activate?: boolean | undefined;
21
+ /**
22
+ * The unique regional detector ID of the GuardDuty account for which you want to create a threat entity set.
23
+ *
24
+ * To find the `detectorId` in the current Region, see the Settings page in the GuardDuty console, or run the [ListDetectors](https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html) API.
25
+ * @minLength 1
26
+ * @maxLength 32
27
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatentityset.html#cfn-guardduty-threatentityset-detectorid}
28
+ */
29
+ DetectorId?: string | undefined;
30
+ /**
31
+ * The AWS account ID that owns the Amazon S3 bucket specified in the *Location* field.
32
+ *
33
+ * Whether or not you provide the account ID for this optional field, GuardDuty validates that the account ID associated with the `DetectorId` owns the S3 bucket in the `Location` field. If GuardDuty finds that this S3 bucket doesn't belong to the specified account ID, you will get an error at the time of activating this list.
34
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatentityset.html#cfn-guardduty-threatentityset-expectedbucketowner}
35
+ */
36
+ ExpectedBucketOwner?: string | undefined;
37
+ /**
38
+ * The format of the file that contains the threat entity set. For information about supported formats, see [List formats](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_upload-lists.html#prepare_list) in the *Amazon GuardDuty User Guide* .
39
+ * @minLength 1
40
+ * @maxLength 300
41
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatentityset.html#cfn-guardduty-threatentityset-format}
42
+ */
43
+ Format: string;
44
+ /**
45
+ * The URI of the file that contains the threat entity set.
46
+ * @minLength 1
47
+ * @maxLength 300
48
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatentityset.html#cfn-guardduty-threatentityset-location}
49
+ */
50
+ Location: string;
51
+ /**
52
+ * The user-friendly name to identify the threat entity set. Valid characters are alphanumeric, whitespace, dash (-), and underscores (_).
53
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatentityset.html#cfn-guardduty-threatentityset-name}
54
+ */
55
+ Name?: string | undefined;
56
+ /**
57
+ * The tags to be added to a new threat entity set resource. Each tag consists of a key and an optional value, both of which you define.
58
+ *
59
+ * For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .
60
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatentityset.html#cfn-guardduty-threatentityset-tags}
61
+ */
62
+ Tags?: TagItem[] | undefined;
63
+ };
64
+ /**
65
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatentityset.html#aws-resource-guardduty-threatentityset-return-values}
66
+ */
67
+ export type GuardDutyThreatEntitySetAttribs = {
68
+ /**
69
+ * The timestamp when the threat entity set was created.
70
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatentityset.html#cfn-guardduty-threatentityset-createdat}
71
+ */
72
+ CreatedAt: string;
73
+ /**
74
+ * The details associated with the *Error* status of your threat entity list.
75
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatentityset.html#cfn-guardduty-threatentityset-errordetails}
76
+ */
77
+ ErrorDetails: string;
78
+ /**
79
+ * Returns the unique ID associated with the newly created threat entity set.
80
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatentityset.html#cfn-guardduty-threatentityset-id}
81
+ */
82
+ Id: string;
83
+ /**
84
+ * The status of your `ThreatEntitySet` . For information about valid status values, see [Understanding list statuses](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_upload-lists.html#guardduty-entity-list-statuses) in the *Amazon GuardDuty User Guide* .
85
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatentityset.html#cfn-guardduty-threatentityset-status}
86
+ */
87
+ Status: "INACTIVE" | "ACTIVATING" | "ACTIVE" | "DEACTIVATING" | "ERROR" | "DELETE_PENDING" | "DELETED";
88
+ /**
89
+ * The timestamp when the threat entity set was updated.
90
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatentityset.html#cfn-guardduty-threatentityset-updatedat}
91
+ */
92
+ UpdatedAt: string;
93
+ };
94
+ /**
95
+ * Describes a tag. For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .
96
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-guardduty-threatentityset-tagitem.html}
97
+ */
98
+ export type TagItem = {
99
+ /**
100
+ * The tag key.
101
+ * @minLength 1
102
+ * @maxLength 128
103
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-guardduty-threatentityset-tagitem.html#cfn-guardduty-threatentityset-tagitem-key}
104
+ */
105
+ Key: string;
106
+ /**
107
+ * The tag value. This is optional.
108
+ * @minLength 0
109
+ * @maxLength 256
110
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-guardduty-threatentityset-tagitem.html#cfn-guardduty-threatentityset-tagitem-value}
111
+ */
112
+ Value: string;
113
+ };
114
+ //# sourceMappingURL=aws-guardduty-threatentityset.d.ts.map
@@ -1,21 +1,25 @@
1
1
  import type { ResourceDefinitionWithAttributes } from "../main.ts";
2
2
  /**
3
- * The `AWS::GuardDuty::ThreatIntelSet` resource specifies a new `ThreatIntelSet` . A `ThreatIntelSet` consists of known malicious IP addresses. GuardDuty generates findings based on the `ThreatIntelSet` after it is activated.
3
+ * The `AWS::GuardDuty::ThreatIntelSet` resource helps you create a list of known malicious IP addresses in your AWS environment. Once you activate this list, GuardDuty will use list the entries in this list as an additional source for threat detection and generate findings when there is an activity associated with these known malicious IP addresses. GuardDuty continues to monitor independently of this custom threat intelligence set.
4
+ *
5
+ * Only the users of the GuardDuty administrator account can manage this list. These settings automatically apply to the member accounts.
4
6
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatintelset.html}
5
7
  */
6
8
  export type GuardDutyThreatIntelSet = ResourceDefinitionWithAttributes<"AWS::GuardDuty::ThreatIntelSet", GuardDutyThreatIntelSetProps, GuardDutyThreatIntelSetAttribs>;
7
9
  /**
8
- * The `AWS::GuardDuty::ThreatIntelSet` resource specifies a new `ThreatIntelSet` . A `ThreatIntelSet` consists of known malicious IP addresses. GuardDuty generates findings based on the `ThreatIntelSet` after it is activated.
10
+ * The `AWS::GuardDuty::ThreatIntelSet` resource helps you create a list of known malicious IP addresses in your AWS environment. Once you activate this list, GuardDuty will use list the entries in this list as an additional source for threat detection and generate findings when there is an activity associated with these known malicious IP addresses. GuardDuty continues to monitor independently of this custom threat intelligence set.
11
+ *
12
+ * Only the users of the GuardDuty administrator account can manage this list. These settings automatically apply to the member accounts.
9
13
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatintelset.html}
10
14
  */
11
15
  export type GuardDutyThreatIntelSetProps = {
12
16
  /**
13
- * A Boolean value that indicates whether GuardDuty is to start using the uploaded ThreatIntelSet.
17
+ * A boolean value that determines if GuardDuty can start using this list for custom threat detection. For GuardDuty to be able to generate findings based on an activity associated with these entries, this list must be active.
14
18
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatintelset.html#cfn-guardduty-threatintelset-activate}
15
19
  */
16
20
  Activate?: boolean | undefined;
17
21
  /**
18
- * The unique ID of the detector of the GuardDuty account for which you want to create a `ThreatIntelSet` .
22
+ * The unique ID of the detector of the GuardDuty account for which you want to create a `threatIntelSet` .
19
23
  *
20
24
  * To find the `detectorId` in the current Region, see the
21
25
  * Settings page in the GuardDuty console, or run the [ListDetectors](https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html) API.
@@ -32,7 +36,7 @@ export type GuardDutyThreatIntelSetProps = {
32
36
  */
33
37
  ExpectedBucketOwner?: string | undefined;
34
38
  /**
35
- * The format of the file that contains the ThreatIntelSet.
39
+ * The format of the file that contains the `ThreatIntelSet` . For information about supported formats, see [List formats](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_upload-lists.html#prepare_list) in the *Amazon GuardDuty User Guide* .
36
40
  * @minLength 1
37
41
  * @maxLength 300
38
42
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatintelset.html#cfn-guardduty-threatintelset-format}
@@ -46,12 +50,14 @@ export type GuardDutyThreatIntelSetProps = {
46
50
  */
47
51
  Location: string;
48
52
  /**
49
- * A user-friendly ThreatIntelSet name displayed in all findings that are generated by activity that involves IP addresses included in this ThreatIntelSet.
53
+ * The user-friendly name to identify the ThreatIntelSet.
54
+ *
55
+ * The name of your list must be unique within an AWS account and Region. Valid characters are alphanumeric, whitespace, dash (-), and underscores (_).
50
56
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatintelset.html#cfn-guardduty-threatintelset-name}
51
57
  */
52
58
  Name?: string | undefined;
53
59
  /**
54
- * The tags to be added to a new threat list resource. Each tag consists of a key and an optional value, both of which you define.
60
+ * The tags to be added to a new threat entity set resource. Each tag consists of a key and an optional value, both of which you define.
55
61
  *
56
62
  * For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .
57
63
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatintelset.html#cfn-guardduty-threatintelset-tags}
@@ -0,0 +1,113 @@
1
+ import type { ResourceDefinitionWithAttributes } from "../main.ts";
2
+ /**
3
+ * The `AWS::GuardDuty::TrustedEntitySet` resource helps you create a list of IP addresses and domain names that you can use for secure communication with your AWS infrastructure and applications. Once you activate this list, GuardDuty will not generate findings when there is an activity associated with these safe IP addresses and domain names. At any given time, you can have only one trusted entity set.
4
+ *
5
+ * Only the users of the GuardDuty administrator account can manage the entity sets. These settings automatically apply member accounts.
6
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-trustedentityset.html}
7
+ */
8
+ export type GuardDutyTrustedEntitySet = ResourceDefinitionWithAttributes<"AWS::GuardDuty::TrustedEntitySet", GuardDutyTrustedEntitySetProps, GuardDutyTrustedEntitySetAttribs>;
9
+ /**
10
+ * The `AWS::GuardDuty::TrustedEntitySet` resource helps you create a list of IP addresses and domain names that you can use for secure communication with your AWS infrastructure and applications. Once you activate this list, GuardDuty will not generate findings when there is an activity associated with these safe IP addresses and domain names. At any given time, you can have only one trusted entity set.
11
+ *
12
+ * Only the users of the GuardDuty administrator account can manage the entity sets. These settings automatically apply member accounts.
13
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-trustedentityset.html}
14
+ */
15
+ export type GuardDutyTrustedEntitySetProps = {
16
+ /**
17
+ * A boolean value that determines if GuardDuty can start using this list for custom threat detection. For GuardDuty to prevent generating findings based on an activity associated with these entries, this list must be active.
18
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-trustedentityset.html#cfn-guardduty-trustedentityset-activate}
19
+ */
20
+ Activate?: boolean | undefined;
21
+ /**
22
+ * The unique regional detector ID of the GuardDuty account for which you want to create a trusted entity set.
23
+ *
24
+ * To find the `detectorId` in the current Region, see the Settings page in the GuardDuty console, or run the [ListDetectors](https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html) API.
25
+ * @minLength 1
26
+ * @maxLength 32
27
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-trustedentityset.html#cfn-guardduty-trustedentityset-detectorid}
28
+ */
29
+ DetectorId?: string | undefined;
30
+ /**
31
+ * The AWS account ID that owns the Amazon S3 bucket specified in the *Location* field.
32
+ *
33
+ * Whether or not you provide the account ID for this optional field, GuardDuty validates that the account ID associated with the `DetectorId` value owns the S3 bucket in the `Location` field. If GuardDuty finds that this S3 bucket doesn't belong to the specified account ID, you will get an error at the time of activating this list.
34
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-trustedentityset.html#cfn-guardduty-trustedentityset-expectedbucketowner}
35
+ */
36
+ ExpectedBucketOwner?: string | undefined;
37
+ /**
38
+ * The format of the file that contains the trusted entity set. For information about supported formats, see [List formats](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_upload-lists.html#prepare_list) in the *Amazon GuardDuty User Guide* .
39
+ * @minLength 1
40
+ * @maxLength 300
41
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-trustedentityset.html#cfn-guardduty-trustedentityset-format}
42
+ */
43
+ Format: string;
44
+ /**
45
+ * The URI of the file that contains the trusted entity set.
46
+ * @minLength 1
47
+ * @maxLength 300
48
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-trustedentityset.html#cfn-guardduty-trustedentityset-location}
49
+ */
50
+ Location: string;
51
+ /**
52
+ * A user-friendly name to identify the trusted entity set. Valid characters include lowercase letters, uppercase letters, numbers, dash(-), and underscore (_).
53
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-trustedentityset.html#cfn-guardduty-trustedentityset-name}
54
+ */
55
+ Name?: string | undefined;
56
+ /**
57
+ * The tags to be added to a new trusted entity set resource. Each tag consists of a key and an optional value, both of which you define.
58
+ *
59
+ * For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .
60
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-trustedentityset.html#cfn-guardduty-trustedentityset-tags}
61
+ */
62
+ Tags?: TagItem[] | undefined;
63
+ };
64
+ /**
65
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-trustedentityset.html#aws-resource-guardduty-trustedentityset-return-values}
66
+ */
67
+ export type GuardDutyTrustedEntitySetAttribs = {
68
+ /**
69
+ * The timestamp when the trusted entity set was created.
70
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-trustedentityset.html#cfn-guardduty-trustedentityset-createdat}
71
+ */
72
+ CreatedAt: string;
73
+ /**
74
+ * Specifies the error details when the status of the trusted entity set shows as *Error* .
75
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-trustedentityset.html#cfn-guardduty-trustedentityset-errordetails}
76
+ */
77
+ ErrorDetails: string;
78
+ /**
79
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-trustedentityset.html#cfn-guardduty-trustedentityset-id}
80
+ */
81
+ Id: string;
82
+ /**
83
+ * The status of your `TrustedEntitySet` . For information about valid status values, see [Understanding list statuses](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_upload-lists.html#guardduty-entity-list-statuses) in the *Amazon GuardDuty User Guide* .
84
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-trustedentityset.html#cfn-guardduty-trustedentityset-status}
85
+ */
86
+ Status: "INACTIVE" | "ACTIVATING" | "ACTIVE" | "DEACTIVATING" | "ERROR" | "DELETE_PENDING" | "DELETED";
87
+ /**
88
+ * The timestamp when the trusted entity set was updated.
89
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-trustedentityset.html#cfn-guardduty-trustedentityset-updatedat}
90
+ */
91
+ UpdatedAt: string;
92
+ };
93
+ /**
94
+ * Describes a tag. For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .
95
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-guardduty-trustedentityset-tagitem.html}
96
+ */
97
+ export type TagItem = {
98
+ /**
99
+ * The tag key.
100
+ * @minLength 1
101
+ * @maxLength 128
102
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-guardduty-trustedentityset-tagitem.html#cfn-guardduty-trustedentityset-tagitem-key}
103
+ */
104
+ Key: string;
105
+ /**
106
+ * The tag value. This is optional.
107
+ * @minLength 0
108
+ * @maxLength 256
109
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-guardduty-trustedentityset-tagitem.html#cfn-guardduty-trustedentityset-tagitem-value}
110
+ */
111
+ Value: string;
112
+ };
113
+ //# sourceMappingURL=aws-guardduty-trustedentityset.d.ts.map
@@ -33,7 +33,7 @@ export type ImageBuilderComponentProps = {
33
33
  */
34
34
  Description?: string | undefined;
35
35
  /**
36
- * The ID of the KMS key that is used to encrypt this component.
36
+ * The Amazon Resource Name (ARN) that uniquely identifies the KMS key used to encrypt this component. This can be either the Key ARN or the Alias ARN. For more information, see [Key identifiers (KeyId)](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#key-id-key-ARN) in the *AWS Key Management Service Developer Guide* .
37
37
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-component.html#cfn-imagebuilder-component-kmskeyid}
38
38
  */
39
39
  KmsKeyId?: string | undefined;
@@ -45,7 +45,7 @@ export type ImageBuilderContainerRecipeProps = {
45
45
  */
46
46
  InstanceConfiguration?: InstanceConfiguration | undefined;
47
47
  /**
48
- * Identifies which KMS key is used to encrypt the container image for distribution to the target Region.
48
+ * The Amazon Resource Name (ARN) that uniquely identifies which KMS key is used to encrypt the container image for distribution to the target Region. This can be either the Key ARN or the Alias ARN. For more information, see [Key identifiers (KeyId)](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#key-id-key-ARN) in the *AWS Key Management Service Developer Guide* .
49
49
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-containerrecipe.html#cfn-imagebuilder-containerrecipe-kmskeyid}
50
50
  */
51
51
  KmsKeyId?: string | undefined;
@@ -161,7 +161,7 @@ export type EbsInstanceBlockDeviceSpecification = {
161
161
  */
162
162
  Iops?: number | undefined;
163
163
  /**
164
- * Use to configure the KMS key to use when encrypting the device.
164
+ * The Amazon Resource Name (ARN) that uniquely identifies the KMS key to use when encrypting the device. This can be either the Key ARN or the Alias ARN. For more information, see [Key identifiers (KeyId)](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#key-id-key-ARN) in the *AWS Key Management Service Developer Guide* .
165
165
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-imagebuilder-containerrecipe-ebsinstanceblockdevicespecification.html#cfn-imagebuilder-containerrecipe-ebsinstanceblockdevicespecification-kmskeyid}
166
166
  */
167
167
  KmsKeyId?: string | undefined;
@@ -61,7 +61,7 @@ export type AmiDistributionConfiguration = {
61
61
  */
62
62
  Description?: string | undefined;
63
63
  /**
64
- * The KMS key identifier used to encrypt the distributed image.
64
+ * The Amazon Resource Name (ARN) that uniquely identifies the KMS key used to encrypt the distributed image. This can be either the Key ARN or the Alias ARN. For more information, see [Key identifiers (KeyId)](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#key-id-key-ARN) in the *AWS Key Management Service Developer Guide* .
65
65
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-imagebuilder-distributionconfiguration-amidistributionconfiguration.html#cfn-imagebuilder-distributionconfiguration-amidistributionconfiguration-kmskeyid}
66
66
  */
67
67
  KmsKeyId?: string | undefined;
@@ -156,7 +156,7 @@ export type EbsInstanceBlockDeviceSpecification = {
156
156
  */
157
157
  Iops?: number | undefined;
158
158
  /**
159
- * Use to configure the KMS key to use when encrypting the device.
159
+ * The Amazon Resource Name (ARN) that uniquely identifies the KMS key to use when encrypting the device. This can be either the Key ARN or the Alias ARN. For more information, see [Key identifiers (KeyId)](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#key-id-key-ARN) in the *AWS Key Management Service Developer Guide* .
160
160
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-imagebuilder-imagerecipe-ebsinstanceblockdevicespecification.html#cfn-imagebuilder-imagerecipe-ebsinstanceblockdevicespecification-kmskeyid}
161
161
  */
162
162
  KmsKeyId?: string | undefined;
@@ -217,7 +217,9 @@ export type InstanceBlockDeviceMapping = {
217
217
  */
218
218
  export type SystemsManagerAgent = {
219
219
  /**
220
- * Controls whether the Systems Manager agent is removed from your final build image, prior to creating the new AMI. If this is set to true, then the agent is removed from the final image. If it's set to false, then the agent is left in, so that it is included in the new AMI. The default value is false.
220
+ * Controls whether the Systems Manager agent is removed from your final build image, prior to creating the new AMI. If this is set to true, then the agent is removed from the final image. If it's set to false, then the agent is left in, so that it is included in the new AMI. default value is false.
221
+ *
222
+ * The default behavior of uninstallAfterBuild is to remove the SSM Agent if it was installed by EC2 Image Builder
221
223
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-imagebuilder-imagerecipe-systemsmanageragent.html#cfn-imagebuilder-imagerecipe-systemsmanageragent-uninstallafterbuild}
222
224
  */
223
225
  UninstallAfterBuild?: boolean | undefined;
@@ -27,7 +27,7 @@ export type ImageBuilderWorkflowProps = {
27
27
  */
28
28
  Description?: string | undefined;
29
29
  /**
30
- * The ID of the KMS key that is used to encrypt this workflow resource.
30
+ * The Amazon Resource Name (ARN) that uniquely identifies the KMS key used to encrypt this workflow resource. This can be either the Key ARN or the Alias ARN. For more information, see [Key identifiers (KeyId)](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#key-id-key-ARN) in the *AWS Key Management Service Developer Guide* .
31
31
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-workflow.html#cfn-imagebuilder-workflow-kmskeyid}
32
32
  */
33
33
  KmsKeyId?: string | undefined;