@propulsionworks/cloudformation 0.1.21 → 0.1.23
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/out/exports/resources.generated/aws-apigateway-deployment.d.ts +1 -1
- package/out/exports/resources.generated/aws-appintegrations-application.d.ts +52 -0
- package/out/exports/resources.generated/aws-aps-resourcepolicy.d.ts +36 -0
- package/out/exports/resources.generated/aws-aps-workspace.d.ts +2 -4
- package/out/exports/resources.generated/aws-b2bi-transformer.d.ts +89 -0
- package/out/exports/resources.generated/aws-batch-computeenvironment.d.ts +12 -4
- package/out/exports/resources.generated/aws-batch-jobdefinition.d.ts +2 -2
- package/out/exports/resources.generated/aws-billingconductor-customlineitem.d.ts +2 -2
- package/out/exports/resources.generated/aws-cloudfront-distribution.d.ts +4 -0
- package/out/exports/resources.generated/aws-codepipeline-webhook.d.ts +20 -2
- package/out/exports/resources.generated/aws-connect-predefinedattribute.d.ts +3 -3
- package/out/exports/resources.generated/aws-connect-user.d.ts +5 -0
- package/out/exports/resources.generated/aws-datazone-policygrant.d.ts +298 -0
- package/out/exports/resources.generated/aws-deadline-fleet.d.ts +10 -2
- package/out/exports/resources.generated/aws-deadline-licenseendpoint.d.ts +1 -1
- package/out/exports/resources.generated/aws-dynamodb-globaltable.d.ts +5 -0
- package/out/exports/resources.generated/aws-dynamodb-table.d.ts +11 -4
- package/out/exports/resources.generated/aws-ec2-ec2fleet.d.ts +1 -1
- package/out/exports/resources.generated/aws-ec2-ippoolroutetableassociation.d.ts +33 -0
- package/out/exports/resources.generated/aws-ec2-launchtemplate.d.ts +3 -0
- package/out/exports/resources.generated/aws-ec2-volume.d.ts +2 -0
- package/out/exports/resources.generated/aws-ec2-vpnconnection.d.ts +4 -0
- package/out/exports/resources.generated/aws-ecs-capacityprovider.d.ts +0 -2
- package/out/exports/resources.generated/aws-ecs-service.d.ts +1 -1
- package/out/exports/resources.generated/aws-eks-addon.d.ts +10 -0
- package/out/exports/resources.generated/aws-eks-cluster.d.ts +1 -1
- package/out/exports/resources.generated/aws-elasticloadbalancingv2-loadbalancer.d.ts +1 -1
- package/out/exports/resources.generated/aws-entityresolution-idmappingworkflow.d.ts +13 -0
- package/out/exports/resources.generated/aws-events-rule.d.ts +5 -0
- package/out/exports/resources.generated/aws-fsx-filesystem.d.ts +10 -0
- package/out/exports/resources.generated/aws-glue-connection.d.ts +30 -0
- package/out/exports/resources.generated/aws-glue-job.d.ts +19 -8
- package/out/exports/resources.generated/aws-glue-tableoptimizer.d.ts +18 -1
- package/out/exports/resources.generated/aws-guardduty-ipset.d.ts +10 -6
- package/out/exports/resources.generated/aws-guardduty-threatentityset.d.ts +114 -0
- package/out/exports/resources.generated/aws-guardduty-threatintelset.d.ts +13 -7
- package/out/exports/resources.generated/aws-guardduty-trustedentityset.d.ts +113 -0
- package/out/exports/resources.generated/aws-imagebuilder-component.d.ts +1 -1
- package/out/exports/resources.generated/aws-imagebuilder-containerrecipe.d.ts +2 -2
- package/out/exports/resources.generated/aws-imagebuilder-distributionconfiguration.d.ts +1 -1
- package/out/exports/resources.generated/aws-imagebuilder-imagerecipe.d.ts +4 -2
- package/out/exports/resources.generated/aws-imagebuilder-workflow.d.ts +1 -1
- package/out/exports/resources.generated/aws-inspectorv2-codesecurityintegration.d.ts +176 -0
- package/out/exports/resources.generated/aws-inspectorv2-codesecurityscanconfiguration.d.ts +135 -0
- package/out/exports/resources.generated/aws-iot-encryptionconfiguration.d.ts +42 -0
- package/out/exports/resources.generated/aws-iot-mitigationaction.d.ts +2 -2
- package/out/exports/resources.generated/aws-ivs-playbackrestrictionpolicy.d.ts +2 -2
- package/out/exports/resources.generated/aws-ivs-stage.d.ts +54 -1
- package/out/exports/resources.generated/aws-kinesisanalyticsv2-application.d.ts +24 -0
- package/out/exports/resources.generated/aws-lambda-eventinvokeconfig.d.ts +3 -3
- package/out/exports/resources.generated/aws-lambda-permission.d.ts +2 -2
- package/out/exports/resources.generated/aws-logs-loggroup.d.ts +2 -3
- package/out/exports/resources.generated/aws-mediapackagev2-channel.d.ts +1 -1
- package/out/exports/resources.generated/aws-networkfirewall-tlsinspectionconfiguration.d.ts +4 -4
- package/out/exports/resources.generated/aws-observabilityadmin-organizationtelemetryrule.d.ts +137 -0
- package/out/exports/resources.generated/aws-observabilityadmin-telemetryrule.d.ts +132 -0
- package/out/exports/resources.generated/aws-omics-workflowversion.d.ts +2 -2
- package/out/exports/resources.generated/aws-opensearchservice-domain.d.ts +21 -0
- package/out/exports/resources.generated/aws-quicksight-analysis.d.ts +1 -1
- package/out/exports/resources.generated/aws-quicksight-dataset.d.ts +6 -6
- package/out/exports/resources.generated/aws-rds-dbproxy.d.ts +1 -1
- package/out/exports/resources.generated/aws-s3-bucket.d.ts +1 -1
- package/out/exports/resources.generated/aws-s3-bucketpolicy.d.ts +2 -2
- package/out/exports/resources.generated/aws-s3express-accesspoint.d.ts +1 -0
- package/out/exports/resources.generated/aws-s3tables-tablebucketpolicy.d.ts +2 -2
- package/out/exports/resources.generated/aws-s3tables-tablepolicy.d.ts +2 -2
- package/out/exports/resources.generated/aws-sagemaker-cluster.d.ts +96 -0
- package/out/exports/resources.generated/aws-sagemaker-domain.d.ts +0 -6
- package/out/exports/resources.generated/aws-servicediscovery-httpnamespace.d.ts +4 -4
- package/out/exports/resources.generated/aws-servicediscovery-instance.d.ts +1 -1
- package/out/exports/resources.generated/aws-servicediscovery-service.d.ts +6 -31
- package/out/exports/resources.generated/aws-sqs-queue.d.ts +2 -1
- package/out/exports/resources.generated/aws-ssm-patchbaseline.d.ts +6 -1
- package/out/exports/resources.generated/aws-ssmquicksetup-configurationmanager.d.ts +1 -1
- package/out/exports/resources.generated/aws-synthetics-canary.d.ts +29 -0
- package/out/exports/resources.generated/aws-vpclattice-resourcegateway.d.ts +5 -0
- package/out/exports/resources.generated/aws-workspacesweb-portal.d.ts +1 -0
- package/out/exports/resources.generated/aws-workspacesweb-sessionlogger.d.ts +19 -2
- package/package.json +1 -1
|
@@ -69,6 +69,11 @@ export type FSxFileSystemProps = {
|
|
|
69
69
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-filesystem.html#cfn-fsx-filesystem-lustreconfiguration}
|
|
70
70
|
*/
|
|
71
71
|
LustreConfiguration?: LustreConfiguration | undefined;
|
|
72
|
+
/**
|
|
73
|
+
* The network type of the file system.
|
|
74
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-filesystem.html#cfn-fsx-filesystem-networktype}
|
|
75
|
+
*/
|
|
76
|
+
NetworkType?: string | undefined;
|
|
72
77
|
/**
|
|
73
78
|
* The ONTAP configuration properties of the FSx for ONTAP file system that you are creating. This configuration is required if the `FileSystemType` is set to `ONTAP` .
|
|
74
79
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-filesystem.html#cfn-fsx-filesystem-ontapconfiguration}
|
|
@@ -582,6 +587,11 @@ export type OpenZFSConfiguration = {
|
|
|
582
587
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-filesystem-openzfsconfiguration.html#cfn-fsx-filesystem-openzfsconfiguration-endpointipaddressrange}
|
|
583
588
|
*/
|
|
584
589
|
EndpointIpAddressRange?: string | undefined;
|
|
590
|
+
/**
|
|
591
|
+
* (Multi-AZ only) Specifies the IP address range in which the endpoints to access your file system will be created. By default in the Amazon FSx API and Amazon FSx console, Amazon FSx selects an available /118 IP address range for you from one of the VPC's CIDR ranges. You can have overlapping endpoint IP addresses for file systems deployed in the same VPC/route tables, as long as they don't overlap with any subnet.
|
|
592
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-filesystem-openzfsconfiguration.html#cfn-fsx-filesystem-openzfsconfiguration-endpointipv6addressrange}
|
|
593
|
+
*/
|
|
594
|
+
EndpointIpv6AddressRange?: string | undefined;
|
|
585
595
|
/**
|
|
586
596
|
* To delete a file system if there are child volumes present below the root volume, use the string `DELETE_CHILD_VOLUMES_AND_SNAPSHOTS` . If your file system has child volumes and you don't use this option, the delete request will fail.
|
|
587
597
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-filesystem-openzfsconfiguration.html#cfn-fsx-filesystem-openzfsconfiguration-options}
|
|
@@ -176,10 +176,40 @@ export type ConnectionInput = {
|
|
|
176
176
|
* - `SAPODATA` - Designates a connection to SAP OData.
|
|
177
177
|
* - `SERVICENOW` - Designates a connection to ServiceNow.
|
|
178
178
|
* - `SLACK` - Designates a connection to Slack.
|
|
179
|
+
* - `SNOWFLAKE` - Designates a connection to Snowflake.
|
|
179
180
|
* - `SNAPCHATADS` - Designates a connection to Snapchat Ads.
|
|
180
181
|
* - `STRIPE` - Designates a connection to Stripe.
|
|
181
182
|
* - `ZENDESK` - Designates a connection to Zendesk.
|
|
182
183
|
* - `ZOHOCRM` - Designates a connection to Zoho CRM.
|
|
184
|
+
* - `ADOBEANALYTICS` - Designates a connection to Adobe Analytics.
|
|
185
|
+
* - `LINKEDIN` - Designates a connection to LinkedIn.
|
|
186
|
+
* - `MIXPANEL` - Designates a connection to Mixpanel.
|
|
187
|
+
* - `ASANA` - Designates a connection to Asana.
|
|
188
|
+
* - `SMARTSHEET` - Designates a connection to Smartsheet.
|
|
189
|
+
* - `DATADOG` - Designates a connection to Datadog.
|
|
190
|
+
* - `WOOCOMMERCE` - Designates a connection to WooCommerce.
|
|
191
|
+
* - `PAYPAL` - Designates a connection to PayPal.
|
|
192
|
+
* - `QUICKBOOKS` - Designates a connection to QuickBooks.
|
|
193
|
+
* - `FACEBOOKPAGEINSIGHTS` - Designates a connection to Facebook Page Insights.
|
|
194
|
+
* - `FRESHDESK` - Designates a connection to Freshdesk.
|
|
195
|
+
* - `TWILIO` - Designates a connection to Twilio.
|
|
196
|
+
* - `DOCUSIGNMONITOR` - Designates a connection to DocuSign Monitor.
|
|
197
|
+
* - `FRESHSALES` - Designates a connection to Freshsales.
|
|
198
|
+
* - `ZOOM` - Designates a connection to Zoom.
|
|
199
|
+
* - `GOOGLESEARCHCONSOLE` - Designates a connection to Google Search Console.
|
|
200
|
+
* - `SALESFORCECOMMERCECLOUD` - Designates a connection to Salesforce Commerce Cloud.
|
|
201
|
+
* - `SAPCONCUR` - Designates a connection to SAP Concur.
|
|
202
|
+
* - `DYNATRACE` - Designates a connection to Dynatrace.
|
|
203
|
+
* - `MICROSOFTDYNAMIC365FINANCEANDOPS` - Designates a connection to Microsoft Dynamics 365 Finance and Operations.
|
|
204
|
+
* - `MICROSOFTTEAMS` - Designates a connection to Microsoft Teams.
|
|
205
|
+
* - `BLACKBAUDRAISEREDGENXT` - Designates a connection to Blackbaud Raiser's Edge NXT.
|
|
206
|
+
* - `MAILCHIMP` - Designates a connection to Mailchimp.
|
|
207
|
+
* - `GITLAB` - Designates a connection to GitLab.
|
|
208
|
+
* - `PENDO` - Designates a connection to Pendo.
|
|
209
|
+
* - `PRODUCTBOARD` - Designates a connection to Productboard.
|
|
210
|
+
* - `CIRCLECI` - Designates a connection to CircleCI.
|
|
211
|
+
* - `PIPEDIVE` - Designates a connection to Pipedrive.
|
|
212
|
+
* - `SENDGRID` - Designates a connection to SendGrid.
|
|
183
213
|
*
|
|
184
214
|
* For more information on the connection parameters needed for a particular connector, see the documentation for the connector in [Adding an AWS Glue connection](https://docs.aws.amazon.com/glue/latest/dg/console-connections.html) in the AWS Glue User Guide.
|
|
185
215
|
*
|
|
@@ -157,14 +157,25 @@ export type GlueJobProps = {
|
|
|
157
157
|
*/
|
|
158
158
|
Timeout?: number | undefined;
|
|
159
159
|
/**
|
|
160
|
-
* The type of predefined worker that is allocated when a job runs.
|
|
161
|
-
*
|
|
162
|
-
*
|
|
163
|
-
*
|
|
164
|
-
*
|
|
165
|
-
*
|
|
166
|
-
* -
|
|
167
|
-
* -
|
|
160
|
+
* The type of predefined worker that is allocated when a job runs.
|
|
161
|
+
*
|
|
162
|
+
* AWS Glue provides multiple worker types to accommodate different workload requirements:
|
|
163
|
+
*
|
|
164
|
+
* G Worker Types (General-purpose compute workers):
|
|
165
|
+
*
|
|
166
|
+
* - G.1X: 1 DPU (4 vCPUs, 16 GB memory, 94GB disk)
|
|
167
|
+
* - G.2X: 2 DPU (8 vCPUs, 32 GB memory, 138GB disk)
|
|
168
|
+
* - G.4X: 4 DPU (16 vCPUs, 64 GB memory, 256GB disk)
|
|
169
|
+
* - G.8X: 8 DPU (32 vCPUs, 128 GB memory, 512GB disk)
|
|
170
|
+
* - G.12X: 12 DPU (48 vCPUs, 192 GB memory, 768GB disk)
|
|
171
|
+
* - G.16X: 16 DPU (64 vCPUs, 256 GB memory, 1024GB disk)
|
|
172
|
+
*
|
|
173
|
+
* R Worker Types (Memory-optimized workers):
|
|
174
|
+
*
|
|
175
|
+
* - R.1X: 1 M-DPU (4 vCPUs, 32 GB memory)
|
|
176
|
+
* - R.2X: 2 M-DPU (8 vCPUs, 64 GB memory)
|
|
177
|
+
* - R.4X: 4 M-DPU (16 vCPUs, 128 GB memory)
|
|
178
|
+
* - R.8X: 8 M-DPU (32 vCPUs, 256 GB memory)
|
|
168
179
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-glue-job.html#cfn-glue-job-workertype}
|
|
169
180
|
*/
|
|
170
181
|
WorkerType?: "Standard" | "G.1X" | "G.2X" | "G.025X" | "G.4X" | "G.8X" | "Z.2X" | "G.12X" | "G.16X" | "R.1X" | "R.2X" | "R.4X" | "R.8X" | undefined;
|
|
@@ -64,6 +64,23 @@ export type IcebergConfiguration = {
|
|
|
64
64
|
*/
|
|
65
65
|
OrphanFileRetentionPeriodInDays?: number | undefined;
|
|
66
66
|
};
|
|
67
|
+
/**
|
|
68
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-glue-tableoptimizer-icebergretentionconfiguration.html}
|
|
69
|
+
*/
|
|
70
|
+
export type IcebergRetentionConfiguration = {
|
|
71
|
+
/**
|
|
72
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-glue-tableoptimizer-icebergretentionconfiguration.html#cfn-glue-tableoptimizer-icebergretentionconfiguration-cleanexpiredfiles}
|
|
73
|
+
*/
|
|
74
|
+
CleanExpiredFiles?: boolean | undefined;
|
|
75
|
+
/**
|
|
76
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-glue-tableoptimizer-icebergretentionconfiguration.html#cfn-glue-tableoptimizer-icebergretentionconfiguration-numberofsnapshotstoretain}
|
|
77
|
+
*/
|
|
78
|
+
NumberOfSnapshotsToRetain?: number | undefined;
|
|
79
|
+
/**
|
|
80
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-glue-tableoptimizer-icebergretentionconfiguration.html#cfn-glue-tableoptimizer-icebergretentionconfiguration-snapshotretentionperiodindays}
|
|
81
|
+
*/
|
|
82
|
+
SnapshotRetentionPeriodInDays?: number | undefined;
|
|
83
|
+
};
|
|
67
84
|
/**
|
|
68
85
|
* Configuration for removing files that are are not tracked by the Iceberg table metadata, and are older than your configured age limit. This configuration helps optimize storage usage and costs by automatically cleaning up files that are no longer needed by the table.
|
|
69
86
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-glue-tableoptimizer-orphanfiledeletionconfiguration.html}
|
|
@@ -84,7 +101,7 @@ export type RetentionConfiguration = {
|
|
|
84
101
|
* The configuration for an Iceberg snapshot retention optimizer.
|
|
85
102
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-glue-tableoptimizer-retentionconfiguration.html#cfn-glue-tableoptimizer-retentionconfiguration-icebergconfiguration}
|
|
86
103
|
*/
|
|
87
|
-
IcebergConfiguration?:
|
|
104
|
+
IcebergConfiguration?: IcebergRetentionConfiguration | undefined;
|
|
88
105
|
};
|
|
89
106
|
/**
|
|
90
107
|
* Specifies configuration details of a table optimizer.
|
|
@@ -1,16 +1,20 @@
|
|
|
1
1
|
import type { ResourceDefinitionWithAttributes } from "../main.ts";
|
|
2
2
|
/**
|
|
3
|
-
* The `AWS::GuardDuty::IPSet` resource
|
|
3
|
+
* The `AWS::GuardDuty::IPSet` resource helps you create a list of trusted IP addresses that you can use for secure communication with AWS infrastructure and applications. Once you activate this list, GuardDuty will not generate findings when there is an activity associated with these safe IP addresses.
|
|
4
|
+
*
|
|
5
|
+
* Only the users of the GuardDuty administrator account can manage this list. These settings are also applied to the member accounts.
|
|
4
6
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-ipset.html}
|
|
5
7
|
*/
|
|
6
8
|
export type GuardDutyIPSet = ResourceDefinitionWithAttributes<"AWS::GuardDuty::IPSet", GuardDutyIPSetProps, GuardDutyIPSetAttribs>;
|
|
7
9
|
/**
|
|
8
|
-
* The `AWS::GuardDuty::IPSet` resource
|
|
10
|
+
* The `AWS::GuardDuty::IPSet` resource helps you create a list of trusted IP addresses that you can use for secure communication with AWS infrastructure and applications. Once you activate this list, GuardDuty will not generate findings when there is an activity associated with these safe IP addresses.
|
|
11
|
+
*
|
|
12
|
+
* Only the users of the GuardDuty administrator account can manage this list. These settings are also applied to the member accounts.
|
|
9
13
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-ipset.html}
|
|
10
14
|
*/
|
|
11
15
|
export type GuardDutyIPSetProps = {
|
|
12
16
|
/**
|
|
13
|
-
*
|
|
17
|
+
* A boolean value that determines if GuardDuty can start using this list for custom threat detection. For GuardDuty to prevent generating findings based on an activity associated with these entries, this list must be active.
|
|
14
18
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-ipset.html#cfn-guardduty-ipset-activate}
|
|
15
19
|
*/
|
|
16
20
|
Activate?: boolean | undefined;
|
|
@@ -32,7 +36,7 @@ export type GuardDutyIPSetProps = {
|
|
|
32
36
|
*/
|
|
33
37
|
ExpectedBucketOwner?: string | undefined;
|
|
34
38
|
/**
|
|
35
|
-
* The format of the file that contains the IPSet.
|
|
39
|
+
* The format of the file that contains the IPSet. For information about supported formats, see [List formats](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_upload-lists.html#prepare_list) in the *Amazon GuardDuty User Guide* .
|
|
36
40
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-ipset.html#cfn-guardduty-ipset-format}
|
|
37
41
|
*/
|
|
38
42
|
Format: string;
|
|
@@ -46,14 +50,14 @@ export type GuardDutyIPSetProps = {
|
|
|
46
50
|
/**
|
|
47
51
|
* The user-friendly name to identify the IPSet.
|
|
48
52
|
*
|
|
49
|
-
*
|
|
53
|
+
* The name of your list must be unique within an AWS account and Region. Valid characters are alphanumeric, whitespace, dash (-), and underscores (_).
|
|
50
54
|
* @minLength 1
|
|
51
55
|
* @maxLength 300
|
|
52
56
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-ipset.html#cfn-guardduty-ipset-name}
|
|
53
57
|
*/
|
|
54
58
|
Name?: string | undefined;
|
|
55
59
|
/**
|
|
56
|
-
* The tags to be added to a new
|
|
60
|
+
* The tags to be added to a new threat entity set resource. Each tag consists of a key and an optional value, both of which you define.
|
|
57
61
|
*
|
|
58
62
|
* For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .
|
|
59
63
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-ipset.html#cfn-guardduty-ipset-tags}
|
|
@@ -0,0 +1,114 @@
|
|
|
1
|
+
import type { ResourceDefinitionWithAttributes } from "../main.ts";
|
|
2
|
+
/**
|
|
3
|
+
* The `AWS::GuardDuty::ThreatEntitySet` resource helps you create a list of known malicious IP addresses and domain names in your AWS environment. Once you activate this list, GuardDuty will use the entries in this list as an additional source of threat detection and generate findings when there is an activity associated with these known malicious IP addresses and domain names. GuardDuty continues to monitor independently of this custom threat entity set.
|
|
4
|
+
*
|
|
5
|
+
* Only the users of the GuardDuty administrator account can manage this list. These settings automatically apply to the member accounts.
|
|
6
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatentityset.html}
|
|
7
|
+
*/
|
|
8
|
+
export type GuardDutyThreatEntitySet = ResourceDefinitionWithAttributes<"AWS::GuardDuty::ThreatEntitySet", GuardDutyThreatEntitySetProps, GuardDutyThreatEntitySetAttribs>;
|
|
9
|
+
/**
|
|
10
|
+
* The `AWS::GuardDuty::ThreatEntitySet` resource helps you create a list of known malicious IP addresses and domain names in your AWS environment. Once you activate this list, GuardDuty will use the entries in this list as an additional source of threat detection and generate findings when there is an activity associated with these known malicious IP addresses and domain names. GuardDuty continues to monitor independently of this custom threat entity set.
|
|
11
|
+
*
|
|
12
|
+
* Only the users of the GuardDuty administrator account can manage this list. These settings automatically apply to the member accounts.
|
|
13
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatentityset.html}
|
|
14
|
+
*/
|
|
15
|
+
export type GuardDutyThreatEntitySetProps = {
|
|
16
|
+
/**
|
|
17
|
+
* A boolean value that determines if GuardDuty can start using this list for custom threat detection. For GuardDuty to consider the entries in this list and generate findings based on associated activity, this list must be active.
|
|
18
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatentityset.html#cfn-guardduty-threatentityset-activate}
|
|
19
|
+
*/
|
|
20
|
+
Activate?: boolean | undefined;
|
|
21
|
+
/**
|
|
22
|
+
* The unique regional detector ID of the GuardDuty account for which you want to create a threat entity set.
|
|
23
|
+
*
|
|
24
|
+
* To find the `detectorId` in the current Region, see the Settings page in the GuardDuty console, or run the [ListDetectors](https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html) API.
|
|
25
|
+
* @minLength 1
|
|
26
|
+
* @maxLength 32
|
|
27
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatentityset.html#cfn-guardduty-threatentityset-detectorid}
|
|
28
|
+
*/
|
|
29
|
+
DetectorId?: string | undefined;
|
|
30
|
+
/**
|
|
31
|
+
* The AWS account ID that owns the Amazon S3 bucket specified in the *Location* field.
|
|
32
|
+
*
|
|
33
|
+
* Whether or not you provide the account ID for this optional field, GuardDuty validates that the account ID associated with the `DetectorId` owns the S3 bucket in the `Location` field. If GuardDuty finds that this S3 bucket doesn't belong to the specified account ID, you will get an error at the time of activating this list.
|
|
34
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatentityset.html#cfn-guardduty-threatentityset-expectedbucketowner}
|
|
35
|
+
*/
|
|
36
|
+
ExpectedBucketOwner?: string | undefined;
|
|
37
|
+
/**
|
|
38
|
+
* The format of the file that contains the threat entity set. For information about supported formats, see [List formats](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_upload-lists.html#prepare_list) in the *Amazon GuardDuty User Guide* .
|
|
39
|
+
* @minLength 1
|
|
40
|
+
* @maxLength 300
|
|
41
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatentityset.html#cfn-guardduty-threatentityset-format}
|
|
42
|
+
*/
|
|
43
|
+
Format: string;
|
|
44
|
+
/**
|
|
45
|
+
* The URI of the file that contains the threat entity set.
|
|
46
|
+
* @minLength 1
|
|
47
|
+
* @maxLength 300
|
|
48
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatentityset.html#cfn-guardduty-threatentityset-location}
|
|
49
|
+
*/
|
|
50
|
+
Location: string;
|
|
51
|
+
/**
|
|
52
|
+
* The user-friendly name to identify the threat entity set. Valid characters are alphanumeric, whitespace, dash (-), and underscores (_).
|
|
53
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatentityset.html#cfn-guardduty-threatentityset-name}
|
|
54
|
+
*/
|
|
55
|
+
Name?: string | undefined;
|
|
56
|
+
/**
|
|
57
|
+
* The tags to be added to a new threat entity set resource. Each tag consists of a key and an optional value, both of which you define.
|
|
58
|
+
*
|
|
59
|
+
* For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .
|
|
60
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatentityset.html#cfn-guardduty-threatentityset-tags}
|
|
61
|
+
*/
|
|
62
|
+
Tags?: TagItem[] | undefined;
|
|
63
|
+
};
|
|
64
|
+
/**
|
|
65
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatentityset.html#aws-resource-guardduty-threatentityset-return-values}
|
|
66
|
+
*/
|
|
67
|
+
export type GuardDutyThreatEntitySetAttribs = {
|
|
68
|
+
/**
|
|
69
|
+
* The timestamp when the threat entity set was created.
|
|
70
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatentityset.html#cfn-guardduty-threatentityset-createdat}
|
|
71
|
+
*/
|
|
72
|
+
CreatedAt: string;
|
|
73
|
+
/**
|
|
74
|
+
* The details associated with the *Error* status of your threat entity list.
|
|
75
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatentityset.html#cfn-guardduty-threatentityset-errordetails}
|
|
76
|
+
*/
|
|
77
|
+
ErrorDetails: string;
|
|
78
|
+
/**
|
|
79
|
+
* Returns the unique ID associated with the newly created threat entity set.
|
|
80
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatentityset.html#cfn-guardduty-threatentityset-id}
|
|
81
|
+
*/
|
|
82
|
+
Id: string;
|
|
83
|
+
/**
|
|
84
|
+
* The status of your `ThreatEntitySet` . For information about valid status values, see [Understanding list statuses](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_upload-lists.html#guardduty-entity-list-statuses) in the *Amazon GuardDuty User Guide* .
|
|
85
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatentityset.html#cfn-guardduty-threatentityset-status}
|
|
86
|
+
*/
|
|
87
|
+
Status: "INACTIVE" | "ACTIVATING" | "ACTIVE" | "DEACTIVATING" | "ERROR" | "DELETE_PENDING" | "DELETED";
|
|
88
|
+
/**
|
|
89
|
+
* The timestamp when the threat entity set was updated.
|
|
90
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatentityset.html#cfn-guardduty-threatentityset-updatedat}
|
|
91
|
+
*/
|
|
92
|
+
UpdatedAt: string;
|
|
93
|
+
};
|
|
94
|
+
/**
|
|
95
|
+
* Describes a tag. For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .
|
|
96
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-guardduty-threatentityset-tagitem.html}
|
|
97
|
+
*/
|
|
98
|
+
export type TagItem = {
|
|
99
|
+
/**
|
|
100
|
+
* The tag key.
|
|
101
|
+
* @minLength 1
|
|
102
|
+
* @maxLength 128
|
|
103
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-guardduty-threatentityset-tagitem.html#cfn-guardduty-threatentityset-tagitem-key}
|
|
104
|
+
*/
|
|
105
|
+
Key: string;
|
|
106
|
+
/**
|
|
107
|
+
* The tag value. This is optional.
|
|
108
|
+
* @minLength 0
|
|
109
|
+
* @maxLength 256
|
|
110
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-guardduty-threatentityset-tagitem.html#cfn-guardduty-threatentityset-tagitem-value}
|
|
111
|
+
*/
|
|
112
|
+
Value: string;
|
|
113
|
+
};
|
|
114
|
+
//# sourceMappingURL=aws-guardduty-threatentityset.d.ts.map
|
|
@@ -1,21 +1,25 @@
|
|
|
1
1
|
import type { ResourceDefinitionWithAttributes } from "../main.ts";
|
|
2
2
|
/**
|
|
3
|
-
* The `AWS::GuardDuty::ThreatIntelSet` resource
|
|
3
|
+
* The `AWS::GuardDuty::ThreatIntelSet` resource helps you create a list of known malicious IP addresses in your AWS environment. Once you activate this list, GuardDuty will use list the entries in this list as an additional source for threat detection and generate findings when there is an activity associated with these known malicious IP addresses. GuardDuty continues to monitor independently of this custom threat intelligence set.
|
|
4
|
+
*
|
|
5
|
+
* Only the users of the GuardDuty administrator account can manage this list. These settings automatically apply to the member accounts.
|
|
4
6
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatintelset.html}
|
|
5
7
|
*/
|
|
6
8
|
export type GuardDutyThreatIntelSet = ResourceDefinitionWithAttributes<"AWS::GuardDuty::ThreatIntelSet", GuardDutyThreatIntelSetProps, GuardDutyThreatIntelSetAttribs>;
|
|
7
9
|
/**
|
|
8
|
-
* The `AWS::GuardDuty::ThreatIntelSet` resource
|
|
10
|
+
* The `AWS::GuardDuty::ThreatIntelSet` resource helps you create a list of known malicious IP addresses in your AWS environment. Once you activate this list, GuardDuty will use list the entries in this list as an additional source for threat detection and generate findings when there is an activity associated with these known malicious IP addresses. GuardDuty continues to monitor independently of this custom threat intelligence set.
|
|
11
|
+
*
|
|
12
|
+
* Only the users of the GuardDuty administrator account can manage this list. These settings automatically apply to the member accounts.
|
|
9
13
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatintelset.html}
|
|
10
14
|
*/
|
|
11
15
|
export type GuardDutyThreatIntelSetProps = {
|
|
12
16
|
/**
|
|
13
|
-
* A
|
|
17
|
+
* A boolean value that determines if GuardDuty can start using this list for custom threat detection. For GuardDuty to be able to generate findings based on an activity associated with these entries, this list must be active.
|
|
14
18
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatintelset.html#cfn-guardduty-threatintelset-activate}
|
|
15
19
|
*/
|
|
16
20
|
Activate?: boolean | undefined;
|
|
17
21
|
/**
|
|
18
|
-
* The unique ID of the detector of the GuardDuty account for which you want to create a `
|
|
22
|
+
* The unique ID of the detector of the GuardDuty account for which you want to create a `threatIntelSet` .
|
|
19
23
|
*
|
|
20
24
|
* To find the `detectorId` in the current Region, see the
|
|
21
25
|
* Settings page in the GuardDuty console, or run the [ListDetectors](https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html) API.
|
|
@@ -32,7 +36,7 @@ export type GuardDutyThreatIntelSetProps = {
|
|
|
32
36
|
*/
|
|
33
37
|
ExpectedBucketOwner?: string | undefined;
|
|
34
38
|
/**
|
|
35
|
-
* The format of the file that contains the ThreatIntelSet.
|
|
39
|
+
* The format of the file that contains the `ThreatIntelSet` . For information about supported formats, see [List formats](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_upload-lists.html#prepare_list) in the *Amazon GuardDuty User Guide* .
|
|
36
40
|
* @minLength 1
|
|
37
41
|
* @maxLength 300
|
|
38
42
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatintelset.html#cfn-guardduty-threatintelset-format}
|
|
@@ -46,12 +50,14 @@ export type GuardDutyThreatIntelSetProps = {
|
|
|
46
50
|
*/
|
|
47
51
|
Location: string;
|
|
48
52
|
/**
|
|
49
|
-
*
|
|
53
|
+
* The user-friendly name to identify the ThreatIntelSet.
|
|
54
|
+
*
|
|
55
|
+
* The name of your list must be unique within an AWS account and Region. Valid characters are alphanumeric, whitespace, dash (-), and underscores (_).
|
|
50
56
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatintelset.html#cfn-guardduty-threatintelset-name}
|
|
51
57
|
*/
|
|
52
58
|
Name?: string | undefined;
|
|
53
59
|
/**
|
|
54
|
-
* The tags to be added to a new threat
|
|
60
|
+
* The tags to be added to a new threat entity set resource. Each tag consists of a key and an optional value, both of which you define.
|
|
55
61
|
*
|
|
56
62
|
* For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .
|
|
57
63
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatintelset.html#cfn-guardduty-threatintelset-tags}
|
|
@@ -0,0 +1,113 @@
|
|
|
1
|
+
import type { ResourceDefinitionWithAttributes } from "../main.ts";
|
|
2
|
+
/**
|
|
3
|
+
* The `AWS::GuardDuty::TrustedEntitySet` resource helps you create a list of IP addresses and domain names that you can use for secure communication with your AWS infrastructure and applications. Once you activate this list, GuardDuty will not generate findings when there is an activity associated with these safe IP addresses and domain names. At any given time, you can have only one trusted entity set.
|
|
4
|
+
*
|
|
5
|
+
* Only the users of the GuardDuty administrator account can manage the entity sets. These settings automatically apply member accounts.
|
|
6
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-trustedentityset.html}
|
|
7
|
+
*/
|
|
8
|
+
export type GuardDutyTrustedEntitySet = ResourceDefinitionWithAttributes<"AWS::GuardDuty::TrustedEntitySet", GuardDutyTrustedEntitySetProps, GuardDutyTrustedEntitySetAttribs>;
|
|
9
|
+
/**
|
|
10
|
+
* The `AWS::GuardDuty::TrustedEntitySet` resource helps you create a list of IP addresses and domain names that you can use for secure communication with your AWS infrastructure and applications. Once you activate this list, GuardDuty will not generate findings when there is an activity associated with these safe IP addresses and domain names. At any given time, you can have only one trusted entity set.
|
|
11
|
+
*
|
|
12
|
+
* Only the users of the GuardDuty administrator account can manage the entity sets. These settings automatically apply member accounts.
|
|
13
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-trustedentityset.html}
|
|
14
|
+
*/
|
|
15
|
+
export type GuardDutyTrustedEntitySetProps = {
|
|
16
|
+
/**
|
|
17
|
+
* A boolean value that determines if GuardDuty can start using this list for custom threat detection. For GuardDuty to prevent generating findings based on an activity associated with these entries, this list must be active.
|
|
18
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-trustedentityset.html#cfn-guardduty-trustedentityset-activate}
|
|
19
|
+
*/
|
|
20
|
+
Activate?: boolean | undefined;
|
|
21
|
+
/**
|
|
22
|
+
* The unique regional detector ID of the GuardDuty account for which you want to create a trusted entity set.
|
|
23
|
+
*
|
|
24
|
+
* To find the `detectorId` in the current Region, see the Settings page in the GuardDuty console, or run the [ListDetectors](https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html) API.
|
|
25
|
+
* @minLength 1
|
|
26
|
+
* @maxLength 32
|
|
27
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-trustedentityset.html#cfn-guardduty-trustedentityset-detectorid}
|
|
28
|
+
*/
|
|
29
|
+
DetectorId?: string | undefined;
|
|
30
|
+
/**
|
|
31
|
+
* The AWS account ID that owns the Amazon S3 bucket specified in the *Location* field.
|
|
32
|
+
*
|
|
33
|
+
* Whether or not you provide the account ID for this optional field, GuardDuty validates that the account ID associated with the `DetectorId` value owns the S3 bucket in the `Location` field. If GuardDuty finds that this S3 bucket doesn't belong to the specified account ID, you will get an error at the time of activating this list.
|
|
34
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-trustedentityset.html#cfn-guardduty-trustedentityset-expectedbucketowner}
|
|
35
|
+
*/
|
|
36
|
+
ExpectedBucketOwner?: string | undefined;
|
|
37
|
+
/**
|
|
38
|
+
* The format of the file that contains the trusted entity set. For information about supported formats, see [List formats](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_upload-lists.html#prepare_list) in the *Amazon GuardDuty User Guide* .
|
|
39
|
+
* @minLength 1
|
|
40
|
+
* @maxLength 300
|
|
41
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-trustedentityset.html#cfn-guardduty-trustedentityset-format}
|
|
42
|
+
*/
|
|
43
|
+
Format: string;
|
|
44
|
+
/**
|
|
45
|
+
* The URI of the file that contains the trusted entity set.
|
|
46
|
+
* @minLength 1
|
|
47
|
+
* @maxLength 300
|
|
48
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-trustedentityset.html#cfn-guardduty-trustedentityset-location}
|
|
49
|
+
*/
|
|
50
|
+
Location: string;
|
|
51
|
+
/**
|
|
52
|
+
* A user-friendly name to identify the trusted entity set. Valid characters include lowercase letters, uppercase letters, numbers, dash(-), and underscore (_).
|
|
53
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-trustedentityset.html#cfn-guardduty-trustedentityset-name}
|
|
54
|
+
*/
|
|
55
|
+
Name?: string | undefined;
|
|
56
|
+
/**
|
|
57
|
+
* The tags to be added to a new trusted entity set resource. Each tag consists of a key and an optional value, both of which you define.
|
|
58
|
+
*
|
|
59
|
+
* For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .
|
|
60
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-trustedentityset.html#cfn-guardduty-trustedentityset-tags}
|
|
61
|
+
*/
|
|
62
|
+
Tags?: TagItem[] | undefined;
|
|
63
|
+
};
|
|
64
|
+
/**
|
|
65
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-trustedentityset.html#aws-resource-guardduty-trustedentityset-return-values}
|
|
66
|
+
*/
|
|
67
|
+
export type GuardDutyTrustedEntitySetAttribs = {
|
|
68
|
+
/**
|
|
69
|
+
* The timestamp when the trusted entity set was created.
|
|
70
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-trustedentityset.html#cfn-guardduty-trustedentityset-createdat}
|
|
71
|
+
*/
|
|
72
|
+
CreatedAt: string;
|
|
73
|
+
/**
|
|
74
|
+
* Specifies the error details when the status of the trusted entity set shows as *Error* .
|
|
75
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-trustedentityset.html#cfn-guardduty-trustedentityset-errordetails}
|
|
76
|
+
*/
|
|
77
|
+
ErrorDetails: string;
|
|
78
|
+
/**
|
|
79
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-trustedentityset.html#cfn-guardduty-trustedentityset-id}
|
|
80
|
+
*/
|
|
81
|
+
Id: string;
|
|
82
|
+
/**
|
|
83
|
+
* The status of your `TrustedEntitySet` . For information about valid status values, see [Understanding list statuses](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_upload-lists.html#guardduty-entity-list-statuses) in the *Amazon GuardDuty User Guide* .
|
|
84
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-trustedentityset.html#cfn-guardduty-trustedentityset-status}
|
|
85
|
+
*/
|
|
86
|
+
Status: "INACTIVE" | "ACTIVATING" | "ACTIVE" | "DEACTIVATING" | "ERROR" | "DELETE_PENDING" | "DELETED";
|
|
87
|
+
/**
|
|
88
|
+
* The timestamp when the trusted entity set was updated.
|
|
89
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-trustedentityset.html#cfn-guardduty-trustedentityset-updatedat}
|
|
90
|
+
*/
|
|
91
|
+
UpdatedAt: string;
|
|
92
|
+
};
|
|
93
|
+
/**
|
|
94
|
+
* Describes a tag. For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .
|
|
95
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-guardduty-trustedentityset-tagitem.html}
|
|
96
|
+
*/
|
|
97
|
+
export type TagItem = {
|
|
98
|
+
/**
|
|
99
|
+
* The tag key.
|
|
100
|
+
* @minLength 1
|
|
101
|
+
* @maxLength 128
|
|
102
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-guardduty-trustedentityset-tagitem.html#cfn-guardduty-trustedentityset-tagitem-key}
|
|
103
|
+
*/
|
|
104
|
+
Key: string;
|
|
105
|
+
/**
|
|
106
|
+
* The tag value. This is optional.
|
|
107
|
+
* @minLength 0
|
|
108
|
+
* @maxLength 256
|
|
109
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-guardduty-trustedentityset-tagitem.html#cfn-guardduty-trustedentityset-tagitem-value}
|
|
110
|
+
*/
|
|
111
|
+
Value: string;
|
|
112
|
+
};
|
|
113
|
+
//# sourceMappingURL=aws-guardduty-trustedentityset.d.ts.map
|
|
@@ -33,7 +33,7 @@ export type ImageBuilderComponentProps = {
|
|
|
33
33
|
*/
|
|
34
34
|
Description?: string | undefined;
|
|
35
35
|
/**
|
|
36
|
-
* The
|
|
36
|
+
* The Amazon Resource Name (ARN) that uniquely identifies the KMS key used to encrypt this component. This can be either the Key ARN or the Alias ARN. For more information, see [Key identifiers (KeyId)](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#key-id-key-ARN) in the *AWS Key Management Service Developer Guide* .
|
|
37
37
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-component.html#cfn-imagebuilder-component-kmskeyid}
|
|
38
38
|
*/
|
|
39
39
|
KmsKeyId?: string | undefined;
|
|
@@ -45,7 +45,7 @@ export type ImageBuilderContainerRecipeProps = {
|
|
|
45
45
|
*/
|
|
46
46
|
InstanceConfiguration?: InstanceConfiguration | undefined;
|
|
47
47
|
/**
|
|
48
|
-
*
|
|
48
|
+
* The Amazon Resource Name (ARN) that uniquely identifies which KMS key is used to encrypt the container image for distribution to the target Region. This can be either the Key ARN or the Alias ARN. For more information, see [Key identifiers (KeyId)](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#key-id-key-ARN) in the *AWS Key Management Service Developer Guide* .
|
|
49
49
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-containerrecipe.html#cfn-imagebuilder-containerrecipe-kmskeyid}
|
|
50
50
|
*/
|
|
51
51
|
KmsKeyId?: string | undefined;
|
|
@@ -161,7 +161,7 @@ export type EbsInstanceBlockDeviceSpecification = {
|
|
|
161
161
|
*/
|
|
162
162
|
Iops?: number | undefined;
|
|
163
163
|
/**
|
|
164
|
-
*
|
|
164
|
+
* The Amazon Resource Name (ARN) that uniquely identifies the KMS key to use when encrypting the device. This can be either the Key ARN or the Alias ARN. For more information, see [Key identifiers (KeyId)](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#key-id-key-ARN) in the *AWS Key Management Service Developer Guide* .
|
|
165
165
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-imagebuilder-containerrecipe-ebsinstanceblockdevicespecification.html#cfn-imagebuilder-containerrecipe-ebsinstanceblockdevicespecification-kmskeyid}
|
|
166
166
|
*/
|
|
167
167
|
KmsKeyId?: string | undefined;
|
|
@@ -61,7 +61,7 @@ export type AmiDistributionConfiguration = {
|
|
|
61
61
|
*/
|
|
62
62
|
Description?: string | undefined;
|
|
63
63
|
/**
|
|
64
|
-
* The KMS key
|
|
64
|
+
* The Amazon Resource Name (ARN) that uniquely identifies the KMS key used to encrypt the distributed image. This can be either the Key ARN or the Alias ARN. For more information, see [Key identifiers (KeyId)](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#key-id-key-ARN) in the *AWS Key Management Service Developer Guide* .
|
|
65
65
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-imagebuilder-distributionconfiguration-amidistributionconfiguration.html#cfn-imagebuilder-distributionconfiguration-amidistributionconfiguration-kmskeyid}
|
|
66
66
|
*/
|
|
67
67
|
KmsKeyId?: string | undefined;
|
|
@@ -156,7 +156,7 @@ export type EbsInstanceBlockDeviceSpecification = {
|
|
|
156
156
|
*/
|
|
157
157
|
Iops?: number | undefined;
|
|
158
158
|
/**
|
|
159
|
-
*
|
|
159
|
+
* The Amazon Resource Name (ARN) that uniquely identifies the KMS key to use when encrypting the device. This can be either the Key ARN or the Alias ARN. For more information, see [Key identifiers (KeyId)](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#key-id-key-ARN) in the *AWS Key Management Service Developer Guide* .
|
|
160
160
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-imagebuilder-imagerecipe-ebsinstanceblockdevicespecification.html#cfn-imagebuilder-imagerecipe-ebsinstanceblockdevicespecification-kmskeyid}
|
|
161
161
|
*/
|
|
162
162
|
KmsKeyId?: string | undefined;
|
|
@@ -217,7 +217,9 @@ export type InstanceBlockDeviceMapping = {
|
|
|
217
217
|
*/
|
|
218
218
|
export type SystemsManagerAgent = {
|
|
219
219
|
/**
|
|
220
|
-
* Controls whether the Systems Manager agent is removed from your final build image, prior to creating the new AMI. If this is set to true, then the agent is removed from the final image. If it's set to false, then the agent is left in, so that it is included in the new AMI.
|
|
220
|
+
* Controls whether the Systems Manager agent is removed from your final build image, prior to creating the new AMI. If this is set to true, then the agent is removed from the final image. If it's set to false, then the agent is left in, so that it is included in the new AMI. default value is false.
|
|
221
|
+
*
|
|
222
|
+
* The default behavior of uninstallAfterBuild is to remove the SSM Agent if it was installed by EC2 Image Builder
|
|
221
223
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-imagebuilder-imagerecipe-systemsmanageragent.html#cfn-imagebuilder-imagerecipe-systemsmanageragent-uninstallafterbuild}
|
|
222
224
|
*/
|
|
223
225
|
UninstallAfterBuild?: boolean | undefined;
|
|
@@ -27,7 +27,7 @@ export type ImageBuilderWorkflowProps = {
|
|
|
27
27
|
*/
|
|
28
28
|
Description?: string | undefined;
|
|
29
29
|
/**
|
|
30
|
-
* The
|
|
30
|
+
* The Amazon Resource Name (ARN) that uniquely identifies the KMS key used to encrypt this workflow resource. This can be either the Key ARN or the Alias ARN. For more information, see [Key identifiers (KeyId)](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#key-id-key-ARN) in the *AWS Key Management Service Developer Guide* .
|
|
31
31
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-workflow.html#cfn-imagebuilder-workflow-kmskeyid}
|
|
32
32
|
*/
|
|
33
33
|
KmsKeyId?: string | undefined;
|