@propulsionworks/cloudformation 0.1.22 → 0.1.23
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/out/exports/resources.generated/aws-appintegrations-application.d.ts +1 -1
- package/out/exports/resources.generated/aws-aps-resourcepolicy.d.ts +15 -1
- package/out/exports/resources.generated/aws-aps-workspace.d.ts +2 -4
- package/out/exports/resources.generated/aws-b2bi-transformer.d.ts +89 -0
- package/out/exports/resources.generated/aws-batch-computeenvironment.d.ts +12 -4
- package/out/exports/resources.generated/aws-codepipeline-webhook.d.ts +19 -2
- package/out/exports/resources.generated/aws-connect-predefinedattribute.d.ts +3 -3
- package/out/exports/resources.generated/aws-datazone-policygrant.d.ts +298 -0
- package/out/exports/resources.generated/aws-deadline-fleet.d.ts +7 -2
- package/out/exports/resources.generated/aws-deadline-licenseendpoint.d.ts +1 -1
- package/out/exports/resources.generated/aws-dynamodb-globaltable.d.ts +1 -0
- package/out/exports/resources.generated/aws-dynamodb-table.d.ts +7 -4
- package/out/exports/resources.generated/aws-ec2-ippoolroutetableassociation.d.ts +5 -5
- package/out/exports/resources.generated/aws-ec2-vpnconnection.d.ts +4 -0
- package/out/exports/resources.generated/aws-entityresolution-idmappingworkflow.d.ts +13 -0
- package/out/exports/resources.generated/aws-events-rule.d.ts +5 -0
- package/out/exports/resources.generated/aws-fsx-filesystem.d.ts +2 -0
- package/out/exports/resources.generated/aws-glue-connection.d.ts +30 -0
- package/out/exports/resources.generated/aws-guardduty-ipset.d.ts +10 -6
- package/out/exports/resources.generated/aws-guardduty-threatentityset.d.ts +27 -2
- package/out/exports/resources.generated/aws-guardduty-threatintelset.d.ts +13 -7
- package/out/exports/resources.generated/aws-guardduty-trustedentityset.d.ts +26 -2
- package/out/exports/resources.generated/aws-inspectorv2-codesecurityintegration.d.ts +28 -12
- package/out/exports/resources.generated/aws-inspectorv2-codesecurityscanconfiguration.d.ts +21 -7
- package/out/exports/resources.generated/aws-iot-encryptionconfiguration.d.ts +42 -0
- package/out/exports/resources.generated/aws-ivs-stage.d.ts +0 -1
- package/out/exports/resources.generated/aws-kinesisanalyticsv2-application.d.ts +24 -0
- package/out/exports/resources.generated/aws-lambda-eventinvokeconfig.d.ts +3 -3
- package/out/exports/resources.generated/aws-logs-loggroup.d.ts +2 -3
- package/out/exports/resources.generated/aws-mediapackagev2-channel.d.ts +1 -1
- package/out/exports/resources.generated/aws-networkfirewall-tlsinspectionconfiguration.d.ts +4 -4
- package/out/exports/resources.generated/aws-quicksight-analysis.d.ts +1 -1
- package/out/exports/resources.generated/aws-s3-bucket.d.ts +1 -1
- package/out/exports/resources.generated/aws-s3-bucketpolicy.d.ts +2 -2
- package/out/exports/resources.generated/aws-sagemaker-cluster.d.ts +8 -2
- package/out/exports/resources.generated/aws-servicediscovery-httpnamespace.d.ts +4 -4
- package/out/exports/resources.generated/aws-servicediscovery-instance.d.ts +1 -1
- package/out/exports/resources.generated/aws-servicediscovery-service.d.ts +6 -31
- package/out/exports/resources.generated/aws-ssm-patchbaseline.d.ts +6 -1
- package/out/exports/resources.generated/aws-ssmquicksetup-configurationmanager.d.ts +1 -1
- package/out/exports/resources.generated/aws-synthetics-canary.d.ts +3 -2
- package/out/exports/resources.generated/aws-vpclattice-resourcegateway.d.ts +5 -0
- package/out/exports/resources.generated/aws-workspacesweb-portal.d.ts +1 -0
- package/out/exports/resources.generated/aws-workspacesweb-sessionlogger.d.ts +19 -2
- package/package.json +1 -1
|
@@ -1,45 +1,62 @@
|
|
|
1
1
|
import type { ResourceDefinitionWithAttributes } from "../main.ts";
|
|
2
2
|
/**
|
|
3
|
-
*
|
|
3
|
+
* The `AWS::GuardDuty::ThreatEntitySet` resource helps you create a list of known malicious IP addresses and domain names in your AWS environment. Once you activate this list, GuardDuty will use the entries in this list as an additional source of threat detection and generate findings when there is an activity associated with these known malicious IP addresses and domain names. GuardDuty continues to monitor independently of this custom threat entity set.
|
|
4
|
+
*
|
|
5
|
+
* Only the users of the GuardDuty administrator account can manage this list. These settings automatically apply to the member accounts.
|
|
4
6
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatentityset.html}
|
|
5
7
|
*/
|
|
6
8
|
export type GuardDutyThreatEntitySet = ResourceDefinitionWithAttributes<"AWS::GuardDuty::ThreatEntitySet", GuardDutyThreatEntitySetProps, GuardDutyThreatEntitySetAttribs>;
|
|
7
9
|
/**
|
|
8
|
-
*
|
|
10
|
+
* The `AWS::GuardDuty::ThreatEntitySet` resource helps you create a list of known malicious IP addresses and domain names in your AWS environment. Once you activate this list, GuardDuty will use the entries in this list as an additional source of threat detection and generate findings when there is an activity associated with these known malicious IP addresses and domain names. GuardDuty continues to monitor independently of this custom threat entity set.
|
|
11
|
+
*
|
|
12
|
+
* Only the users of the GuardDuty administrator account can manage this list. These settings automatically apply to the member accounts.
|
|
9
13
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatentityset.html}
|
|
10
14
|
*/
|
|
11
15
|
export type GuardDutyThreatEntitySetProps = {
|
|
12
16
|
/**
|
|
17
|
+
* A boolean value that determines if GuardDuty can start using this list for custom threat detection. For GuardDuty to consider the entries in this list and generate findings based on associated activity, this list must be active.
|
|
13
18
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatentityset.html#cfn-guardduty-threatentityset-activate}
|
|
14
19
|
*/
|
|
15
20
|
Activate?: boolean | undefined;
|
|
16
21
|
/**
|
|
22
|
+
* The unique regional detector ID of the GuardDuty account for which you want to create a threat entity set.
|
|
23
|
+
*
|
|
24
|
+
* To find the `detectorId` in the current Region, see the Settings page in the GuardDuty console, or run the [ListDetectors](https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html) API.
|
|
17
25
|
* @minLength 1
|
|
18
26
|
* @maxLength 32
|
|
19
27
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatentityset.html#cfn-guardduty-threatentityset-detectorid}
|
|
20
28
|
*/
|
|
21
29
|
DetectorId?: string | undefined;
|
|
22
30
|
/**
|
|
31
|
+
* The AWS account ID that owns the Amazon S3 bucket specified in the *Location* field.
|
|
32
|
+
*
|
|
33
|
+
* Whether or not you provide the account ID for this optional field, GuardDuty validates that the account ID associated with the `DetectorId` owns the S3 bucket in the `Location` field. If GuardDuty finds that this S3 bucket doesn't belong to the specified account ID, you will get an error at the time of activating this list.
|
|
23
34
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatentityset.html#cfn-guardduty-threatentityset-expectedbucketowner}
|
|
24
35
|
*/
|
|
25
36
|
ExpectedBucketOwner?: string | undefined;
|
|
26
37
|
/**
|
|
38
|
+
* The format of the file that contains the threat entity set. For information about supported formats, see [List formats](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_upload-lists.html#prepare_list) in the *Amazon GuardDuty User Guide* .
|
|
27
39
|
* @minLength 1
|
|
28
40
|
* @maxLength 300
|
|
29
41
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatentityset.html#cfn-guardduty-threatentityset-format}
|
|
30
42
|
*/
|
|
31
43
|
Format: string;
|
|
32
44
|
/**
|
|
45
|
+
* The URI of the file that contains the threat entity set.
|
|
33
46
|
* @minLength 1
|
|
34
47
|
* @maxLength 300
|
|
35
48
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatentityset.html#cfn-guardduty-threatentityset-location}
|
|
36
49
|
*/
|
|
37
50
|
Location: string;
|
|
38
51
|
/**
|
|
52
|
+
* The user-friendly name to identify the threat entity set. Valid characters are alphanumeric, whitespace, dash (-), and underscores (_).
|
|
39
53
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatentityset.html#cfn-guardduty-threatentityset-name}
|
|
40
54
|
*/
|
|
41
55
|
Name?: string | undefined;
|
|
42
56
|
/**
|
|
57
|
+
* The tags to be added to a new threat entity set resource. Each tag consists of a key and an optional value, both of which you define.
|
|
58
|
+
*
|
|
59
|
+
* For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .
|
|
43
60
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatentityset.html#cfn-guardduty-threatentityset-tags}
|
|
44
61
|
*/
|
|
45
62
|
Tags?: TagItem[] | undefined;
|
|
@@ -49,37 +66,45 @@ export type GuardDutyThreatEntitySetProps = {
|
|
|
49
66
|
*/
|
|
50
67
|
export type GuardDutyThreatEntitySetAttribs = {
|
|
51
68
|
/**
|
|
69
|
+
* The timestamp when the threat entity set was created.
|
|
52
70
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatentityset.html#cfn-guardduty-threatentityset-createdat}
|
|
53
71
|
*/
|
|
54
72
|
CreatedAt: string;
|
|
55
73
|
/**
|
|
74
|
+
* The details associated with the *Error* status of your threat entity list.
|
|
56
75
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatentityset.html#cfn-guardduty-threatentityset-errordetails}
|
|
57
76
|
*/
|
|
58
77
|
ErrorDetails: string;
|
|
59
78
|
/**
|
|
79
|
+
* Returns the unique ID associated with the newly created threat entity set.
|
|
60
80
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatentityset.html#cfn-guardduty-threatentityset-id}
|
|
61
81
|
*/
|
|
62
82
|
Id: string;
|
|
63
83
|
/**
|
|
84
|
+
* The status of your `ThreatEntitySet` . For information about valid status values, see [Understanding list statuses](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_upload-lists.html#guardduty-entity-list-statuses) in the *Amazon GuardDuty User Guide* .
|
|
64
85
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatentityset.html#cfn-guardduty-threatentityset-status}
|
|
65
86
|
*/
|
|
66
87
|
Status: "INACTIVE" | "ACTIVATING" | "ACTIVE" | "DEACTIVATING" | "ERROR" | "DELETE_PENDING" | "DELETED";
|
|
67
88
|
/**
|
|
89
|
+
* The timestamp when the threat entity set was updated.
|
|
68
90
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatentityset.html#cfn-guardduty-threatentityset-updatedat}
|
|
69
91
|
*/
|
|
70
92
|
UpdatedAt: string;
|
|
71
93
|
};
|
|
72
94
|
/**
|
|
95
|
+
* Describes a tag. For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .
|
|
73
96
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-guardduty-threatentityset-tagitem.html}
|
|
74
97
|
*/
|
|
75
98
|
export type TagItem = {
|
|
76
99
|
/**
|
|
100
|
+
* The tag key.
|
|
77
101
|
* @minLength 1
|
|
78
102
|
* @maxLength 128
|
|
79
103
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-guardduty-threatentityset-tagitem.html#cfn-guardduty-threatentityset-tagitem-key}
|
|
80
104
|
*/
|
|
81
105
|
Key: string;
|
|
82
106
|
/**
|
|
107
|
+
* The tag value. This is optional.
|
|
83
108
|
* @minLength 0
|
|
84
109
|
* @maxLength 256
|
|
85
110
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-guardduty-threatentityset-tagitem.html#cfn-guardduty-threatentityset-tagitem-value}
|
|
@@ -1,21 +1,25 @@
|
|
|
1
1
|
import type { ResourceDefinitionWithAttributes } from "../main.ts";
|
|
2
2
|
/**
|
|
3
|
-
* The `AWS::GuardDuty::ThreatIntelSet` resource
|
|
3
|
+
* The `AWS::GuardDuty::ThreatIntelSet` resource helps you create a list of known malicious IP addresses in your AWS environment. Once you activate this list, GuardDuty will use list the entries in this list as an additional source for threat detection and generate findings when there is an activity associated with these known malicious IP addresses. GuardDuty continues to monitor independently of this custom threat intelligence set.
|
|
4
|
+
*
|
|
5
|
+
* Only the users of the GuardDuty administrator account can manage this list. These settings automatically apply to the member accounts.
|
|
4
6
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatintelset.html}
|
|
5
7
|
*/
|
|
6
8
|
export type GuardDutyThreatIntelSet = ResourceDefinitionWithAttributes<"AWS::GuardDuty::ThreatIntelSet", GuardDutyThreatIntelSetProps, GuardDutyThreatIntelSetAttribs>;
|
|
7
9
|
/**
|
|
8
|
-
* The `AWS::GuardDuty::ThreatIntelSet` resource
|
|
10
|
+
* The `AWS::GuardDuty::ThreatIntelSet` resource helps you create a list of known malicious IP addresses in your AWS environment. Once you activate this list, GuardDuty will use list the entries in this list as an additional source for threat detection and generate findings when there is an activity associated with these known malicious IP addresses. GuardDuty continues to monitor independently of this custom threat intelligence set.
|
|
11
|
+
*
|
|
12
|
+
* Only the users of the GuardDuty administrator account can manage this list. These settings automatically apply to the member accounts.
|
|
9
13
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatintelset.html}
|
|
10
14
|
*/
|
|
11
15
|
export type GuardDutyThreatIntelSetProps = {
|
|
12
16
|
/**
|
|
13
|
-
* A
|
|
17
|
+
* A boolean value that determines if GuardDuty can start using this list for custom threat detection. For GuardDuty to be able to generate findings based on an activity associated with these entries, this list must be active.
|
|
14
18
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatintelset.html#cfn-guardduty-threatintelset-activate}
|
|
15
19
|
*/
|
|
16
20
|
Activate?: boolean | undefined;
|
|
17
21
|
/**
|
|
18
|
-
* The unique ID of the detector of the GuardDuty account for which you want to create a `
|
|
22
|
+
* The unique ID of the detector of the GuardDuty account for which you want to create a `threatIntelSet` .
|
|
19
23
|
*
|
|
20
24
|
* To find the `detectorId` in the current Region, see the
|
|
21
25
|
* Settings page in the GuardDuty console, or run the [ListDetectors](https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html) API.
|
|
@@ -32,7 +36,7 @@ export type GuardDutyThreatIntelSetProps = {
|
|
|
32
36
|
*/
|
|
33
37
|
ExpectedBucketOwner?: string | undefined;
|
|
34
38
|
/**
|
|
35
|
-
* The format of the file that contains the ThreatIntelSet.
|
|
39
|
+
* The format of the file that contains the `ThreatIntelSet` . For information about supported formats, see [List formats](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_upload-lists.html#prepare_list) in the *Amazon GuardDuty User Guide* .
|
|
36
40
|
* @minLength 1
|
|
37
41
|
* @maxLength 300
|
|
38
42
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatintelset.html#cfn-guardduty-threatintelset-format}
|
|
@@ -46,12 +50,14 @@ export type GuardDutyThreatIntelSetProps = {
|
|
|
46
50
|
*/
|
|
47
51
|
Location: string;
|
|
48
52
|
/**
|
|
49
|
-
*
|
|
53
|
+
* The user-friendly name to identify the ThreatIntelSet.
|
|
54
|
+
*
|
|
55
|
+
* The name of your list must be unique within an AWS account and Region. Valid characters are alphanumeric, whitespace, dash (-), and underscores (_).
|
|
50
56
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatintelset.html#cfn-guardduty-threatintelset-name}
|
|
51
57
|
*/
|
|
52
58
|
Name?: string | undefined;
|
|
53
59
|
/**
|
|
54
|
-
* The tags to be added to a new threat
|
|
60
|
+
* The tags to be added to a new threat entity set resource. Each tag consists of a key and an optional value, both of which you define.
|
|
55
61
|
*
|
|
56
62
|
* For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .
|
|
57
63
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatintelset.html#cfn-guardduty-threatintelset-tags}
|
|
@@ -1,45 +1,62 @@
|
|
|
1
1
|
import type { ResourceDefinitionWithAttributes } from "../main.ts";
|
|
2
2
|
/**
|
|
3
|
-
*
|
|
3
|
+
* The `AWS::GuardDuty::TrustedEntitySet` resource helps you create a list of IP addresses and domain names that you can use for secure communication with your AWS infrastructure and applications. Once you activate this list, GuardDuty will not generate findings when there is an activity associated with these safe IP addresses and domain names. At any given time, you can have only one trusted entity set.
|
|
4
|
+
*
|
|
5
|
+
* Only the users of the GuardDuty administrator account can manage the entity sets. These settings automatically apply member accounts.
|
|
4
6
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-trustedentityset.html}
|
|
5
7
|
*/
|
|
6
8
|
export type GuardDutyTrustedEntitySet = ResourceDefinitionWithAttributes<"AWS::GuardDuty::TrustedEntitySet", GuardDutyTrustedEntitySetProps, GuardDutyTrustedEntitySetAttribs>;
|
|
7
9
|
/**
|
|
8
|
-
*
|
|
10
|
+
* The `AWS::GuardDuty::TrustedEntitySet` resource helps you create a list of IP addresses and domain names that you can use for secure communication with your AWS infrastructure and applications. Once you activate this list, GuardDuty will not generate findings when there is an activity associated with these safe IP addresses and domain names. At any given time, you can have only one trusted entity set.
|
|
11
|
+
*
|
|
12
|
+
* Only the users of the GuardDuty administrator account can manage the entity sets. These settings automatically apply member accounts.
|
|
9
13
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-trustedentityset.html}
|
|
10
14
|
*/
|
|
11
15
|
export type GuardDutyTrustedEntitySetProps = {
|
|
12
16
|
/**
|
|
17
|
+
* A boolean value that determines if GuardDuty can start using this list for custom threat detection. For GuardDuty to prevent generating findings based on an activity associated with these entries, this list must be active.
|
|
13
18
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-trustedentityset.html#cfn-guardduty-trustedentityset-activate}
|
|
14
19
|
*/
|
|
15
20
|
Activate?: boolean | undefined;
|
|
16
21
|
/**
|
|
22
|
+
* The unique regional detector ID of the GuardDuty account for which you want to create a trusted entity set.
|
|
23
|
+
*
|
|
24
|
+
* To find the `detectorId` in the current Region, see the Settings page in the GuardDuty console, or run the [ListDetectors](https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html) API.
|
|
17
25
|
* @minLength 1
|
|
18
26
|
* @maxLength 32
|
|
19
27
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-trustedentityset.html#cfn-guardduty-trustedentityset-detectorid}
|
|
20
28
|
*/
|
|
21
29
|
DetectorId?: string | undefined;
|
|
22
30
|
/**
|
|
31
|
+
* The AWS account ID that owns the Amazon S3 bucket specified in the *Location* field.
|
|
32
|
+
*
|
|
33
|
+
* Whether or not you provide the account ID for this optional field, GuardDuty validates that the account ID associated with the `DetectorId` value owns the S3 bucket in the `Location` field. If GuardDuty finds that this S3 bucket doesn't belong to the specified account ID, you will get an error at the time of activating this list.
|
|
23
34
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-trustedentityset.html#cfn-guardduty-trustedentityset-expectedbucketowner}
|
|
24
35
|
*/
|
|
25
36
|
ExpectedBucketOwner?: string | undefined;
|
|
26
37
|
/**
|
|
38
|
+
* The format of the file that contains the trusted entity set. For information about supported formats, see [List formats](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_upload-lists.html#prepare_list) in the *Amazon GuardDuty User Guide* .
|
|
27
39
|
* @minLength 1
|
|
28
40
|
* @maxLength 300
|
|
29
41
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-trustedentityset.html#cfn-guardduty-trustedentityset-format}
|
|
30
42
|
*/
|
|
31
43
|
Format: string;
|
|
32
44
|
/**
|
|
45
|
+
* The URI of the file that contains the trusted entity set.
|
|
33
46
|
* @minLength 1
|
|
34
47
|
* @maxLength 300
|
|
35
48
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-trustedentityset.html#cfn-guardduty-trustedentityset-location}
|
|
36
49
|
*/
|
|
37
50
|
Location: string;
|
|
38
51
|
/**
|
|
52
|
+
* A user-friendly name to identify the trusted entity set. Valid characters include lowercase letters, uppercase letters, numbers, dash(-), and underscore (_).
|
|
39
53
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-trustedentityset.html#cfn-guardduty-trustedentityset-name}
|
|
40
54
|
*/
|
|
41
55
|
Name?: string | undefined;
|
|
42
56
|
/**
|
|
57
|
+
* The tags to be added to a new trusted entity set resource. Each tag consists of a key and an optional value, both of which you define.
|
|
58
|
+
*
|
|
59
|
+
* For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .
|
|
43
60
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-trustedentityset.html#cfn-guardduty-trustedentityset-tags}
|
|
44
61
|
*/
|
|
45
62
|
Tags?: TagItem[] | undefined;
|
|
@@ -49,10 +66,12 @@ export type GuardDutyTrustedEntitySetProps = {
|
|
|
49
66
|
*/
|
|
50
67
|
export type GuardDutyTrustedEntitySetAttribs = {
|
|
51
68
|
/**
|
|
69
|
+
* The timestamp when the trusted entity set was created.
|
|
52
70
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-trustedentityset.html#cfn-guardduty-trustedentityset-createdat}
|
|
53
71
|
*/
|
|
54
72
|
CreatedAt: string;
|
|
55
73
|
/**
|
|
74
|
+
* Specifies the error details when the status of the trusted entity set shows as *Error* .
|
|
56
75
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-trustedentityset.html#cfn-guardduty-trustedentityset-errordetails}
|
|
57
76
|
*/
|
|
58
77
|
ErrorDetails: string;
|
|
@@ -61,25 +80,30 @@ export type GuardDutyTrustedEntitySetAttribs = {
|
|
|
61
80
|
*/
|
|
62
81
|
Id: string;
|
|
63
82
|
/**
|
|
83
|
+
* The status of your `TrustedEntitySet` . For information about valid status values, see [Understanding list statuses](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_upload-lists.html#guardduty-entity-list-statuses) in the *Amazon GuardDuty User Guide* .
|
|
64
84
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-trustedentityset.html#cfn-guardduty-trustedentityset-status}
|
|
65
85
|
*/
|
|
66
86
|
Status: "INACTIVE" | "ACTIVATING" | "ACTIVE" | "DEACTIVATING" | "ERROR" | "DELETE_PENDING" | "DELETED";
|
|
67
87
|
/**
|
|
88
|
+
* The timestamp when the trusted entity set was updated.
|
|
68
89
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-trustedentityset.html#cfn-guardduty-trustedentityset-updatedat}
|
|
69
90
|
*/
|
|
70
91
|
UpdatedAt: string;
|
|
71
92
|
};
|
|
72
93
|
/**
|
|
94
|
+
* Describes a tag. For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .
|
|
73
95
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-guardduty-trustedentityset-tagitem.html}
|
|
74
96
|
*/
|
|
75
97
|
export type TagItem = {
|
|
76
98
|
/**
|
|
99
|
+
* The tag key.
|
|
77
100
|
* @minLength 1
|
|
78
101
|
* @maxLength 128
|
|
79
102
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-guardduty-trustedentityset-tagitem.html#cfn-guardduty-trustedentityset-tagitem-key}
|
|
80
103
|
*/
|
|
81
104
|
Key: string;
|
|
82
105
|
/**
|
|
106
|
+
* The tag value. This is optional.
|
|
83
107
|
* @minLength 0
|
|
84
108
|
* @maxLength 256
|
|
85
109
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-guardduty-trustedentityset-tagitem.html#cfn-guardduty-trustedentityset-tagitem-value}
|
|
@@ -1,21 +1,21 @@
|
|
|
1
1
|
import type { ResourceDefinitionWithAttributes } from "../main.ts";
|
|
2
2
|
/**
|
|
3
|
-
*
|
|
3
|
+
* Creates a code security integration with a source code repository provider.
|
|
4
4
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-inspectorv2-codesecurityintegration.html}
|
|
5
5
|
*/
|
|
6
6
|
export type InspectorV2CodeSecurityIntegration = ResourceDefinitionWithAttributes<"AWS::InspectorV2::CodeSecurityIntegration", InspectorV2CodeSecurityIntegrationProps, InspectorV2CodeSecurityIntegrationAttribs>;
|
|
7
7
|
/**
|
|
8
|
-
*
|
|
8
|
+
* Creates a code security integration with a source code repository provider.
|
|
9
9
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-inspectorv2-codesecurityintegration.html}
|
|
10
10
|
*/
|
|
11
11
|
export type InspectorV2CodeSecurityIntegrationProps = {
|
|
12
12
|
/**
|
|
13
|
-
*
|
|
13
|
+
* Contains details required to create a code security integration with a specific repository provider.
|
|
14
14
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-inspectorv2-codesecurityintegration.html#cfn-inspectorv2-codesecurityintegration-createintegrationdetails}
|
|
15
15
|
*/
|
|
16
16
|
CreateIntegrationDetails?: CreateDetails | undefined;
|
|
17
17
|
/**
|
|
18
|
-
*
|
|
18
|
+
* The name of the code security integration.
|
|
19
19
|
* @minLength 1
|
|
20
20
|
* @maxLength 60
|
|
21
21
|
* @pattern ^[a-zA-Z0-9-_$:.]*$
|
|
@@ -23,16 +23,17 @@ export type InspectorV2CodeSecurityIntegrationProps = {
|
|
|
23
23
|
*/
|
|
24
24
|
Name?: string | undefined;
|
|
25
25
|
/**
|
|
26
|
+
* The tags to apply to the code security integration.
|
|
26
27
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-inspectorv2-codesecurityintegration.html#cfn-inspectorv2-codesecurityintegration-tags}
|
|
27
28
|
*/
|
|
28
29
|
Tags?: Record<string, string> | undefined;
|
|
29
30
|
/**
|
|
30
|
-
*
|
|
31
|
+
* The type of repository provider for the integration.
|
|
31
32
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-inspectorv2-codesecurityintegration.html#cfn-inspectorv2-codesecurityintegration-type}
|
|
32
33
|
*/
|
|
33
34
|
Type?: IntegrationType | undefined;
|
|
34
35
|
/**
|
|
35
|
-
*
|
|
36
|
+
* The updated integration details specific to the repository provider type.
|
|
36
37
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-inspectorv2-codesecurityintegration.html#cfn-inspectorv2-codesecurityintegration-updateintegrationdetails}
|
|
37
38
|
*/
|
|
38
39
|
UpdateIntegrationDetails?: UpdateDetails | undefined;
|
|
@@ -42,58 +43,63 @@ export type InspectorV2CodeSecurityIntegrationProps = {
|
|
|
42
43
|
*/
|
|
43
44
|
export type InspectorV2CodeSecurityIntegrationAttribs = {
|
|
44
45
|
/**
|
|
45
|
-
*
|
|
46
|
+
* The Amazon Resource Name (ARN) of the code security integration.
|
|
46
47
|
* @pattern ^arn:(aws[a-zA-Z-]*)?:inspector2:[a-z]{2}(-gov)?-[a-z]+-\d{1}:\d{12}:codesecurity-integration/[a-f0-9-]{36}$
|
|
47
48
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-inspectorv2-codesecurityintegration.html#cfn-inspectorv2-codesecurityintegration-arn}
|
|
48
49
|
*/
|
|
49
50
|
Arn: string;
|
|
50
51
|
/**
|
|
51
|
-
*
|
|
52
|
+
* The URL used to authorize the integration with the repository provider.
|
|
52
53
|
* @pattern ^https://[-a-zA-Z0-9()@:%_+.~#?&//=]{1,1024}$
|
|
53
54
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-inspectorv2-codesecurityintegration.html#cfn-inspectorv2-codesecurityintegration-authorizationurl}
|
|
54
55
|
*/
|
|
55
56
|
AuthorizationUrl: string;
|
|
56
57
|
/**
|
|
57
|
-
*
|
|
58
|
+
* The timestamp when the code security integration was created.
|
|
58
59
|
* @format date-time
|
|
59
60
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-inspectorv2-codesecurityintegration.html#cfn-inspectorv2-codesecurityintegration-createdat}
|
|
60
61
|
*/
|
|
61
62
|
CreatedAt: string;
|
|
62
63
|
/**
|
|
63
|
-
*
|
|
64
|
+
* The timestamp when the code security integration was last updated.
|
|
64
65
|
* @format date-time
|
|
65
66
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-inspectorv2-codesecurityintegration.html#cfn-inspectorv2-codesecurityintegration-lastupdatedat}
|
|
66
67
|
*/
|
|
67
68
|
LastUpdatedAt: string;
|
|
68
69
|
/**
|
|
69
|
-
*
|
|
70
|
+
* The current status of the integration.
|
|
70
71
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-inspectorv2-codesecurityintegration.html#cfn-inspectorv2-codesecurityintegration-status}
|
|
71
72
|
*/
|
|
72
73
|
Status: IntegrationStatus;
|
|
73
74
|
/**
|
|
74
|
-
*
|
|
75
|
+
* The reason for the current status of the code security integration.
|
|
75
76
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-inspectorv2-codesecurityintegration.html#cfn-inspectorv2-codesecurityintegration-statusreason}
|
|
76
77
|
*/
|
|
77
78
|
StatusReason: string;
|
|
78
79
|
};
|
|
79
80
|
/**
|
|
81
|
+
* Contains details required to create a code security integration with a specific repository provider.
|
|
80
82
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityintegration-createdetails.html}
|
|
81
83
|
*/
|
|
82
84
|
export type CreateDetails = {
|
|
83
85
|
/**
|
|
86
|
+
* Details specific to creating an integration with a self-managed GitLab instance.
|
|
84
87
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityintegration-createdetails.html#cfn-inspectorv2-codesecurityintegration-createdetails-gitlabselfmanaged}
|
|
85
88
|
*/
|
|
86
89
|
gitlabSelfManaged: CreateGitLabSelfManagedIntegrationDetail;
|
|
87
90
|
};
|
|
88
91
|
/**
|
|
92
|
+
* Contains details required to create an integration with a self-managed GitLab instance.
|
|
89
93
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityintegration-creategitlabselfmanagedintegrationdetail.html}
|
|
90
94
|
*/
|
|
91
95
|
export type CreateGitLabSelfManagedIntegrationDetail = {
|
|
92
96
|
/**
|
|
97
|
+
* The personal access token used to authenticate with the self-managed GitLab instance.
|
|
93
98
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityintegration-creategitlabselfmanagedintegrationdetail.html#cfn-inspectorv2-codesecurityintegration-creategitlabselfmanagedintegrationdetail-accesstoken}
|
|
94
99
|
*/
|
|
95
100
|
accessToken: string;
|
|
96
101
|
/**
|
|
102
|
+
* The URL of the self-managed GitLab instance.
|
|
97
103
|
* @pattern ^https://[-a-zA-Z0-9()@:%_+.~#?&//=]{1,1024}$
|
|
98
104
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityintegration-creategitlabselfmanagedintegrationdetail.html#cfn-inspectorv2-codesecurityintegration-creategitlabselfmanagedintegrationdetail-instanceurl}
|
|
99
105
|
*/
|
|
@@ -108,38 +114,46 @@ export type IntegrationStatus = "PENDING" | "IN_PROGRESS" | "ACTIVE" | "INACTIVE
|
|
|
108
114
|
*/
|
|
109
115
|
export type IntegrationType = "GITLAB_SELF_MANAGED" | "GITHUB";
|
|
110
116
|
/**
|
|
117
|
+
* Contains details required to update a code security integration with a specific repository provider.
|
|
111
118
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityintegration-updatedetails.html}
|
|
112
119
|
*/
|
|
113
120
|
export type UpdateDetails = {
|
|
114
121
|
/**
|
|
122
|
+
* Details specific to updating an integration with GitHub.
|
|
115
123
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityintegration-updatedetails.html#cfn-inspectorv2-codesecurityintegration-updatedetails-github}
|
|
116
124
|
*/
|
|
117
125
|
github?: UpdateGitHubIntegrationDetail | undefined;
|
|
118
126
|
/**
|
|
127
|
+
* Details specific to updating an integration with a self-managed GitLab instance.
|
|
119
128
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityintegration-updatedetails.html#cfn-inspectorv2-codesecurityintegration-updatedetails-gitlabselfmanaged}
|
|
120
129
|
*/
|
|
121
130
|
gitlabSelfManaged: UpdateGitLabSelfManagedIntegrationDetail;
|
|
122
131
|
} | {
|
|
123
132
|
/**
|
|
133
|
+
* Details specific to updating an integration with GitHub.
|
|
124
134
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityintegration-updatedetails.html#cfn-inspectorv2-codesecurityintegration-updatedetails-github}
|
|
125
135
|
*/
|
|
126
136
|
github: UpdateGitHubIntegrationDetail;
|
|
127
137
|
/**
|
|
138
|
+
* Details specific to updating an integration with a self-managed GitLab instance.
|
|
128
139
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityintegration-updatedetails.html#cfn-inspectorv2-codesecurityintegration-updatedetails-gitlabselfmanaged}
|
|
129
140
|
*/
|
|
130
141
|
gitlabSelfManaged?: UpdateGitLabSelfManagedIntegrationDetail | undefined;
|
|
131
142
|
};
|
|
132
143
|
/**
|
|
144
|
+
* Contains details required to update an integration with GitHub.
|
|
133
145
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityintegration-updategithubintegrationdetail.html}
|
|
134
146
|
*/
|
|
135
147
|
export type UpdateGitHubIntegrationDetail = {
|
|
136
148
|
/**
|
|
149
|
+
* The authorization code received from GitHub to update the integration.
|
|
137
150
|
* @minLength 1
|
|
138
151
|
* @maxLength 1024
|
|
139
152
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityintegration-updategithubintegrationdetail.html#cfn-inspectorv2-codesecurityintegration-updategithubintegrationdetail-code}
|
|
140
153
|
*/
|
|
141
154
|
code: string;
|
|
142
155
|
/**
|
|
156
|
+
* The installation ID of the GitHub App associated with the integration.
|
|
143
157
|
* @minLength 1
|
|
144
158
|
* @maxLength 1024
|
|
145
159
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityintegration-updategithubintegrationdetail.html#cfn-inspectorv2-codesecurityintegration-updategithubintegrationdetail-installationid}
|
|
@@ -147,10 +161,12 @@ export type UpdateGitHubIntegrationDetail = {
|
|
|
147
161
|
installationId: string;
|
|
148
162
|
};
|
|
149
163
|
/**
|
|
164
|
+
* Contains details required to update an integration with a self-managed GitLab instance.
|
|
150
165
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityintegration-updategitlabselfmanagedintegrationdetail.html}
|
|
151
166
|
*/
|
|
152
167
|
export type UpdateGitLabSelfManagedIntegrationDetail = {
|
|
153
168
|
/**
|
|
169
|
+
* The authorization code received from the self-managed GitLab instance to update the integration.
|
|
154
170
|
* @minLength 1
|
|
155
171
|
* @maxLength 1024
|
|
156
172
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityintegration-updategitlabselfmanagedintegrationdetail.html#cfn-inspectorv2-codesecurityintegration-updategitlabselfmanagedintegrationdetail-authcode}
|
|
@@ -1,26 +1,26 @@
|
|
|
1
1
|
import type { ResourceDefinitionWithAttributes } from "../main.ts";
|
|
2
2
|
/**
|
|
3
|
-
*
|
|
3
|
+
* Creates a scan configuration for code security scanning.
|
|
4
4
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-inspectorv2-codesecurityscanconfiguration.html}
|
|
5
5
|
*/
|
|
6
6
|
export type InspectorV2CodeSecurityScanConfiguration = ResourceDefinitionWithAttributes<"AWS::InspectorV2::CodeSecurityScanConfiguration", InspectorV2CodeSecurityScanConfigurationProps, InspectorV2CodeSecurityScanConfigurationAttribs>;
|
|
7
7
|
/**
|
|
8
|
-
*
|
|
8
|
+
* Creates a scan configuration for code security scanning.
|
|
9
9
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-inspectorv2-codesecurityscanconfiguration.html}
|
|
10
10
|
*/
|
|
11
11
|
export type InspectorV2CodeSecurityScanConfigurationProps = {
|
|
12
12
|
/**
|
|
13
|
-
*
|
|
13
|
+
* The configuration settings for the code security scan.
|
|
14
14
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-inspectorv2-codesecurityscanconfiguration.html#cfn-inspectorv2-codesecurityscanconfiguration-configuration}
|
|
15
15
|
*/
|
|
16
16
|
Configuration?: CodeSecurityScanConfiguration | undefined;
|
|
17
17
|
/**
|
|
18
|
-
*
|
|
18
|
+
* The security level for the scan configuration.
|
|
19
19
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-inspectorv2-codesecurityscanconfiguration.html#cfn-inspectorv2-codesecurityscanconfiguration-level}
|
|
20
20
|
*/
|
|
21
21
|
Level?: ConfigurationLevel | undefined;
|
|
22
22
|
/**
|
|
23
|
-
*
|
|
23
|
+
* The name of the scan configuration.
|
|
24
24
|
* @minLength 1
|
|
25
25
|
* @maxLength 60
|
|
26
26
|
* @pattern ^[a-zA-Z0-9-_$:.]*$
|
|
@@ -28,11 +28,12 @@ export type InspectorV2CodeSecurityScanConfigurationProps = {
|
|
|
28
28
|
*/
|
|
29
29
|
Name?: string | undefined;
|
|
30
30
|
/**
|
|
31
|
-
*
|
|
31
|
+
* The scope settings that define which repositories will be scanned.
|
|
32
32
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-inspectorv2-codesecurityscanconfiguration.html#cfn-inspectorv2-codesecurityscanconfiguration-scopesettings}
|
|
33
33
|
*/
|
|
34
34
|
ScopeSettings?: ScopeSettings | undefined;
|
|
35
35
|
/**
|
|
36
|
+
* The tags to apply to the scan configuration.
|
|
36
37
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-inspectorv2-codesecurityscanconfiguration.html#cfn-inspectorv2-codesecurityscanconfiguration-tags}
|
|
37
38
|
*/
|
|
38
39
|
Tags?: Record<string, string> | undefined;
|
|
@@ -42,25 +43,29 @@ export type InspectorV2CodeSecurityScanConfigurationProps = {
|
|
|
42
43
|
*/
|
|
43
44
|
export type InspectorV2CodeSecurityScanConfigurationAttribs = {
|
|
44
45
|
/**
|
|
45
|
-
*
|
|
46
|
+
* The Amazon Resource Name (ARN) of the scan configuration.
|
|
46
47
|
* @pattern ^arn:(aws[a-zA-Z-]*)?:inspector2:[a-z]{2}(-gov)?-[a-z]+-\d{1}:\d{12}:owner/(\d{12}|o-[a-z0-9]{10,32})/codesecurity-configuration/[a-f0-9-]{36}$
|
|
47
48
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-inspectorv2-codesecurityscanconfiguration.html#cfn-inspectorv2-codesecurityscanconfiguration-arn}
|
|
48
49
|
*/
|
|
49
50
|
Arn: string;
|
|
50
51
|
};
|
|
51
52
|
/**
|
|
53
|
+
* Contains the configuration settings for code security scans.
|
|
52
54
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityscanconfiguration-codesecurityscanconfiguration.html}
|
|
53
55
|
*/
|
|
54
56
|
export type CodeSecurityScanConfiguration = {
|
|
55
57
|
/**
|
|
58
|
+
* Configuration settings for continuous integration scans that run automatically when code changes are made.
|
|
56
59
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityscanconfiguration-codesecurityscanconfiguration.html#cfn-inspectorv2-codesecurityscanconfiguration-codesecurityscanconfiguration-continuousintegrationscanconfiguration}
|
|
57
60
|
*/
|
|
58
61
|
continuousIntegrationScanConfiguration?: ContinuousIntegrationScanConfiguration | undefined;
|
|
59
62
|
/**
|
|
63
|
+
* Configuration settings for periodic scans that run on a scheduled basis.
|
|
60
64
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityscanconfiguration-codesecurityscanconfiguration.html#cfn-inspectorv2-codesecurityscanconfiguration-codesecurityscanconfiguration-periodicscanconfiguration}
|
|
61
65
|
*/
|
|
62
66
|
periodicScanConfiguration?: PeriodicScanConfiguration | undefined;
|
|
63
67
|
/**
|
|
68
|
+
* The categories of security rules to be applied during the scan.
|
|
64
69
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityscanconfiguration-codesecurityscanconfiguration.html#cfn-inspectorv2-codesecurityscanconfiguration-codesecurityscanconfiguration-rulesetcategories}
|
|
65
70
|
*/
|
|
66
71
|
ruleSetCategories: RuleSetCategory[];
|
|
@@ -70,10 +75,12 @@ export type CodeSecurityScanConfiguration = {
|
|
|
70
75
|
*/
|
|
71
76
|
export type ConfigurationLevel = "ORGANIZATION" | "ACCOUNT";
|
|
72
77
|
/**
|
|
78
|
+
* Configuration settings for continuous integration scans that run automatically when code changes are made.
|
|
73
79
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityscanconfiguration-continuousintegrationscanconfiguration.html}
|
|
74
80
|
*/
|
|
75
81
|
export type ContinuousIntegrationScanConfiguration = {
|
|
76
82
|
/**
|
|
83
|
+
* The repository events that trigger continuous integration scans, such as pull requests or commits.
|
|
77
84
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityscanconfiguration-continuousintegrationscanconfiguration.html#cfn-inspectorv2-codesecurityscanconfiguration-continuousintegrationscanconfiguration-supportedevents}
|
|
78
85
|
*/
|
|
79
86
|
supportedEvents: ContinuousIntegrationScanEvent[];
|
|
@@ -83,14 +90,19 @@ export type ContinuousIntegrationScanConfiguration = {
|
|
|
83
90
|
*/
|
|
84
91
|
export type ContinuousIntegrationScanEvent = "PULL_REQUEST" | "PUSH";
|
|
85
92
|
/**
|
|
93
|
+
* Configuration settings for periodic scans that run on a scheduled basis.
|
|
86
94
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityscanconfiguration-periodicscanconfiguration.html}
|
|
87
95
|
*/
|
|
88
96
|
export type PeriodicScanConfiguration = {
|
|
89
97
|
/**
|
|
98
|
+
* The frequency at which periodic scans are performed (such as weekly or monthly).
|
|
99
|
+
*
|
|
100
|
+
* If you don't provide the `frequencyExpression` Amazon Inspector chooses day for the scan to run. If you provide the `frequencyExpression` , the schedule must match the specified `frequency` .
|
|
90
101
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityscanconfiguration-periodicscanconfiguration.html#cfn-inspectorv2-codesecurityscanconfiguration-periodicscanconfiguration-frequency}
|
|
91
102
|
*/
|
|
92
103
|
frequency?: PeriodicScanFrequency | undefined;
|
|
93
104
|
/**
|
|
105
|
+
* The schedule expression for periodic scans, in cron format.
|
|
94
106
|
* @minLength 1
|
|
95
107
|
* @maxLength 256
|
|
96
108
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityscanconfiguration-periodicscanconfiguration.html#cfn-inspectorv2-codesecurityscanconfiguration-periodicscanconfiguration-frequencyexpression}
|
|
@@ -110,10 +122,12 @@ export type ProjectSelectionScope = "ALL";
|
|
|
110
122
|
*/
|
|
111
123
|
export type RuleSetCategory = "SAST" | "IAC" | "SCA";
|
|
112
124
|
/**
|
|
125
|
+
* The scope settings that define which repositories will be scanned. If the `ScopeSetting` parameter is `ALL` the scan configuration applies to all existing and future projects imported into Amazon Inspector .
|
|
113
126
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityscanconfiguration-scopesettings.html}
|
|
114
127
|
*/
|
|
115
128
|
export type ScopeSettings = {
|
|
116
129
|
/**
|
|
130
|
+
* The scope of projects to be selected for scanning within the integrated repositories.
|
|
117
131
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-codesecurityscanconfiguration-scopesettings.html#cfn-inspectorv2-codesecurityscanconfiguration-scopesettings-projectselectionscope}
|
|
118
132
|
*/
|
|
119
133
|
projectSelectionScope?: ProjectSelectionScope | undefined;
|
|
@@ -0,0 +1,42 @@
|
|
|
1
|
+
import type { ResourceDefinitionWithAttributes } from "../main.ts";
|
|
2
|
+
/**
|
|
3
|
+
* Resource Type definition for AWS::IoT::EncryptionConfiguration
|
|
4
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-encryptionconfiguration.html}
|
|
5
|
+
*/
|
|
6
|
+
export type IoTEncryptionConfiguration = ResourceDefinitionWithAttributes<"AWS::IoT::EncryptionConfiguration", IoTEncryptionConfigurationProps, IoTEncryptionConfigurationAttribs>;
|
|
7
|
+
/**
|
|
8
|
+
* Resource Type definition for AWS::IoT::EncryptionConfiguration
|
|
9
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-encryptionconfiguration.html}
|
|
10
|
+
*/
|
|
11
|
+
export type IoTEncryptionConfigurationProps = {
|
|
12
|
+
/**
|
|
13
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-encryptionconfiguration.html#cfn-iot-encryptionconfiguration-encryptiontype}
|
|
14
|
+
*/
|
|
15
|
+
EncryptionType: "CUSTOMER_MANAGED_KMS_KEY" | "AWS_OWNED_KMS_KEY";
|
|
16
|
+
/**
|
|
17
|
+
* @minLength 20
|
|
18
|
+
* @maxLength 2048
|
|
19
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-encryptionconfiguration.html#cfn-iot-encryptionconfiguration-kmsaccessrolearn}
|
|
20
|
+
*/
|
|
21
|
+
KmsAccessRoleArn?: string | undefined;
|
|
22
|
+
/**
|
|
23
|
+
* @minLength 20
|
|
24
|
+
* @maxLength 2048
|
|
25
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-encryptionconfiguration.html#cfn-iot-encryptionconfiguration-kmskeyarn}
|
|
26
|
+
*/
|
|
27
|
+
KmsKeyArn?: string | undefined;
|
|
28
|
+
};
|
|
29
|
+
/**
|
|
30
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-encryptionconfiguration.html#aws-resource-iot-encryptionconfiguration-return-values}
|
|
31
|
+
*/
|
|
32
|
+
export type IoTEncryptionConfigurationAttribs = {
|
|
33
|
+
/**
|
|
34
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-encryptionconfiguration.html#cfn-iot-encryptionconfiguration-accountid}
|
|
35
|
+
*/
|
|
36
|
+
AccountId: string;
|
|
37
|
+
/**
|
|
38
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-encryptionconfiguration.html#cfn-iot-encryptionconfiguration-lastmodifieddate}
|
|
39
|
+
*/
|
|
40
|
+
LastModifiedDate: string;
|
|
41
|
+
};
|
|
42
|
+
//# sourceMappingURL=aws-iot-encryptionconfiguration.d.ts.map
|