@propulsionworks/cloudformation 0.1.22 → 0.1.24

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (79) hide show
  1. package/out/exports/resources.generated/aws-appintegrations-application.d.ts +1 -1
  2. package/out/exports/resources.generated/aws-apprunner-service.d.ts +1 -3
  3. package/out/exports/resources.generated/aws-apprunner-vpcconnector.d.ts +1 -1
  4. package/out/exports/resources.generated/aws-aps-resourcepolicy.d.ts +15 -1
  5. package/out/exports/resources.generated/aws-aps-workspace.d.ts +2 -4
  6. package/out/exports/resources.generated/aws-b2bi-capability.d.ts +3 -0
  7. package/out/exports/resources.generated/aws-b2bi-partnership.d.ts +60 -1
  8. package/out/exports/resources.generated/aws-b2bi-profile.d.ts +1 -0
  9. package/out/exports/resources.generated/aws-b2bi-transformer.d.ts +127 -0
  10. package/out/exports/resources.generated/aws-batch-computeenvironment.d.ts +19 -4
  11. package/out/exports/resources.generated/aws-batch-jobdefinition.d.ts +1 -1
  12. package/out/exports/resources.generated/aws-batch-schedulingpolicy.d.ts +1 -1
  13. package/out/exports/resources.generated/aws-bedrock-automatedreasoningpolicy.d.ts +181 -0
  14. package/out/exports/resources.generated/aws-bedrock-automatedreasoningpolicyversion.d.ts +56 -0
  15. package/out/exports/resources.generated/aws-budgets-budget.d.ts +4 -0
  16. package/out/exports/resources.generated/aws-cloudformation-lambdahook.d.ts +1 -1
  17. package/out/exports/resources.generated/aws-codepipeline-webhook.d.ts +19 -2
  18. package/out/exports/resources.generated/aws-cognito-userpoolclient.d.ts +2 -2
  19. package/out/exports/resources.generated/aws-cognito-userpoolriskconfigurationattachment.d.ts +1 -1
  20. package/out/exports/resources.generated/aws-connect-predefinedattribute.d.ts +22 -3
  21. package/out/exports/resources.generated/aws-datazone-policygrant.d.ts +342 -0
  22. package/out/exports/resources.generated/aws-deadline-fleet.d.ts +7 -2
  23. package/out/exports/resources.generated/aws-deadline-licenseendpoint.d.ts +1 -1
  24. package/out/exports/resources.generated/aws-dynamodb-globaltable.d.ts +1 -0
  25. package/out/exports/resources.generated/aws-dynamodb-table.d.ts +7 -4
  26. package/out/exports/resources.generated/aws-ec2-clientvpnendpoint.d.ts +1 -1
  27. package/out/exports/resources.generated/aws-ec2-ippoolroutetableassociation.d.ts +5 -5
  28. package/out/exports/resources.generated/aws-ec2-vpcblockpublicaccessoptions.d.ts +5 -0
  29. package/out/exports/resources.generated/aws-ec2-vpnconnection.d.ts +5 -0
  30. package/out/exports/resources.generated/aws-ecs-cluster.d.ts +26 -2
  31. package/out/exports/resources.generated/aws-ecs-clustercapacityproviderassociations.d.ts +26 -2
  32. package/out/exports/resources.generated/aws-ecs-service.d.ts +47 -3
  33. package/out/exports/resources.generated/aws-ecs-taskdefinition.d.ts +1 -1
  34. package/out/exports/resources.generated/aws-ecs-taskset.d.ts +26 -2
  35. package/out/exports/resources.generated/aws-eks-addon.d.ts +1 -1
  36. package/out/exports/resources.generated/aws-elasticloadbalancingv2-truststore.d.ts +3 -3
  37. package/out/exports/resources.generated/aws-entityresolution-idmappingworkflow.d.ts +13 -0
  38. package/out/exports/resources.generated/aws-events-rule.d.ts +5 -0
  39. package/out/exports/resources.generated/aws-fsx-filesystem.d.ts +2 -0
  40. package/out/exports/resources.generated/aws-glue-connection.d.ts +30 -0
  41. package/out/exports/resources.generated/aws-glue-crawler.d.ts +14 -0
  42. package/out/exports/resources.generated/aws-guardduty-ipset.d.ts +10 -6
  43. package/out/exports/resources.generated/aws-guardduty-threatentityset.d.ts +27 -2
  44. package/out/exports/resources.generated/aws-guardduty-threatintelset.d.ts +13 -7
  45. package/out/exports/resources.generated/aws-guardduty-trustedentityset.d.ts +26 -2
  46. package/out/exports/resources.generated/aws-inspectorv2-codesecurityintegration.d.ts +28 -12
  47. package/out/exports/resources.generated/aws-inspectorv2-codesecurityscanconfiguration.d.ts +21 -7
  48. package/out/exports/resources.generated/aws-iot-encryptionconfiguration.d.ts +47 -0
  49. package/out/exports/resources.generated/aws-iotsitewise-assetmodel.d.ts +8 -7
  50. package/out/exports/resources.generated/aws-iotsitewise-computationmodel.d.ts +23 -16
  51. package/out/exports/resources.generated/aws-iotsitewise-dataset.d.ts +11 -6
  52. package/out/exports/resources.generated/aws-ivs-stage.d.ts +4 -3
  53. package/out/exports/resources.generated/aws-kinesisanalyticsv2-application.d.ts +26 -2
  54. package/out/exports/resources.generated/aws-lambda-codesigningconfig.d.ts +1 -1
  55. package/out/exports/resources.generated/aws-lambda-eventinvokeconfig.d.ts +3 -3
  56. package/out/exports/resources.generated/aws-lambda-eventsourcemapping.d.ts +5 -5
  57. package/out/exports/resources.generated/aws-lambda-version.d.ts +3 -3
  58. package/out/exports/resources.generated/aws-logs-loggroup.d.ts +2 -3
  59. package/out/exports/resources.generated/aws-mediapackagev2-channel.d.ts +1 -1
  60. package/out/exports/resources.generated/aws-networkfirewall-tlsinspectionconfiguration.d.ts +4 -4
  61. package/out/exports/resources.generated/aws-omics-workflow.d.ts +82 -0
  62. package/out/exports/resources.generated/aws-qbusiness-datasource.d.ts +1 -1
  63. package/out/exports/resources.generated/aws-quicksight-analysis.d.ts +1 -1
  64. package/out/exports/resources.generated/aws-s3-bucket.d.ts +1 -1
  65. package/out/exports/resources.generated/aws-s3-bucketpolicy.d.ts +2 -2
  66. package/out/exports/resources.generated/aws-sagemaker-cluster.d.ts +8 -2
  67. package/out/exports/resources.generated/aws-sagemaker-endpointconfig.d.ts +17 -0
  68. package/out/exports/resources.generated/aws-servicediscovery-httpnamespace.d.ts +4 -4
  69. package/out/exports/resources.generated/aws-servicediscovery-instance.d.ts +1 -1
  70. package/out/exports/resources.generated/aws-servicediscovery-service.d.ts +6 -31
  71. package/out/exports/resources.generated/aws-ssm-patchbaseline.d.ts +6 -1
  72. package/out/exports/resources.generated/aws-ssmquicksetup-configurationmanager.d.ts +1 -1
  73. package/out/exports/resources.generated/aws-synthetics-canary.d.ts +30 -2
  74. package/out/exports/resources.generated/aws-transfer-certificate.d.ts +24 -2
  75. package/out/exports/resources.generated/aws-transfer-server.d.ts +2 -0
  76. package/out/exports/resources.generated/aws-vpclattice-resourcegateway.d.ts +5 -0
  77. package/out/exports/resources.generated/aws-workspacesweb-portal.d.ts +1 -0
  78. package/out/exports/resources.generated/aws-workspacesweb-sessionlogger.d.ts +19 -2
  79. package/package.json +1 -1
@@ -1,11 +1,11 @@
1
1
  import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
2
2
  /**
3
- * Resource schema for AWS::IoTSiteWise::ComputationModel.
3
+ * Create a computation model with a configuration and data binding.
4
4
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotsitewise-computationmodel.html}
5
5
  */
6
6
  export type IoTSiteWiseComputationModel = ResourceDefinitionWithAttributes<"AWS::IoTSiteWise::ComputationModel", IoTSiteWiseComputationModelProps, IoTSiteWiseComputationModelAttribs>;
7
7
  /**
8
- * Resource schema for AWS::IoTSiteWise::ComputationModel.
8
+ * Create a computation model with a configuration and data binding.
9
9
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotsitewise-computationmodel.html}
10
10
  */
11
11
  export type IoTSiteWiseComputationModelProps = {
@@ -15,12 +15,12 @@ export type IoTSiteWiseComputationModelProps = {
15
15
  */
16
16
  ComputationModelConfiguration: ComputationModelConfiguration;
17
17
  /**
18
- * The data binding for the computation model.
18
+ * The data binding for the computation model. Key is a variable name defined in configuration. Value is a `ComputationModelDataBindingValue` referenced by the variable.
19
19
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotsitewise-computationmodel.html#cfn-iotsitewise-computationmodel-computationmodeldatabinding}
20
20
  */
21
21
  ComputationModelDataBinding: Record<string, ComputationModelDataBindingValue>;
22
22
  /**
23
- * A description about the computation model.
23
+ * The description of the computation model.
24
24
  * @minLength 1
25
25
  * @maxLength 2048
26
26
  * @pattern ^[a-zA-Z0-9 _\-#$*!@]+$
@@ -36,7 +36,7 @@ export type IoTSiteWiseComputationModelProps = {
36
36
  */
37
37
  ComputationModelName: string;
38
38
  /**
39
- * An array of key-value pairs to apply to this resource.
39
+ * A list of key-value pairs that contain metadata for the asset. For more information, see [Tagging your AWS IoT SiteWise resources](https://docs.aws.amazon.com/iot-sitewise/latest/userguide/tag-resources.html) in the *AWS IoT SiteWise User Guide* .
40
40
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotsitewise-computationmodel.html#cfn-iotsitewise-computationmodel-tags}
41
41
  */
42
42
  Tags?: Tag[] | undefined;
@@ -46,7 +46,9 @@ export type IoTSiteWiseComputationModelProps = {
46
46
  */
47
47
  export type IoTSiteWiseComputationModelAttribs = {
48
48
  /**
49
- * The ARN of the computation model.
49
+ * The ARN of the computation model, which has the following format.
50
+ *
51
+ * `arn:${Partition}:iotsitewise:${Region}:${Account}:computation-model/${ComputationModelId}`
50
52
  * @minLength 1
51
53
  * @maxLength 1600
52
54
  * @pattern ^arn:aws(-cn|-us-gov)?:[a-zA-Z0-9-:/_\.]+$
@@ -63,11 +65,12 @@ export type IoTSiteWiseComputationModelAttribs = {
63
65
  ComputationModelId: string;
64
66
  };
65
67
  /**
68
+ * Contains the configuration for anomaly detection computation models.
66
69
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iotsitewise-computationmodel-anomalydetectioncomputationmodelconfiguration.html}
67
70
  */
68
71
  export type AnomalyDetectionComputationModelConfiguration = {
69
72
  /**
70
- * Input properties for anomaly detection.
73
+ * The list of input properties for the anomaly detection model.
71
74
  * @minLength 4
72
75
  * @maxLength 67
73
76
  * @pattern ^\$\{[a-z][a-z0-9_]*\}$
@@ -75,7 +78,7 @@ export type AnomalyDetectionComputationModelConfiguration = {
75
78
  */
76
79
  InputProperties: string;
77
80
  /**
78
- * Result property for anomaly detection.
81
+ * The property where the anomaly detection results will be stored.
79
82
  * @minLength 4
80
83
  * @maxLength 67
81
84
  * @pattern ^\$\{[a-z][a-z0-9_]*\}$
@@ -84,11 +87,12 @@ export type AnomalyDetectionComputationModelConfiguration = {
84
87
  ResultProperty: string;
85
88
  };
86
89
  /**
90
+ * Contains information about an `assetModelProperty` binding value.
87
91
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iotsitewise-computationmodel-assetmodelpropertybindingvalue.html}
88
92
  */
89
93
  export type AssetModelPropertyBindingValue = {
90
94
  /**
91
- * The ID of the asset model.
95
+ * The ID of the asset model, in UUID format.
92
96
  * @minLength 36
93
97
  * @maxLength 36
94
98
  * @pattern ^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$
@@ -96,7 +100,7 @@ export type AssetModelPropertyBindingValue = {
96
100
  */
97
101
  AssetModelId: string;
98
102
  /**
99
- * The ID of the asset model property.
103
+ * The ID of the asset model property used in data binding value.
100
104
  * @minLength 36
101
105
  * @maxLength 36
102
106
  * @pattern ^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$
@@ -105,11 +109,12 @@ export type AssetModelPropertyBindingValue = {
105
109
  PropertyId: string;
106
110
  };
107
111
  /**
112
+ * Represents a data binding value referencing a specific asset property. It's used to bind computation model variables to actual asset property values for processing.
108
113
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iotsitewise-computationmodel-assetpropertybindingvalue.html}
109
114
  */
110
115
  export type AssetPropertyBindingValue = {
111
116
  /**
112
- * The ID of the asset.
117
+ * The ID of the asset containing the property. This identifies the specific asset instance's property value used in the computation model.
113
118
  * @minLength 36
114
119
  * @maxLength 36
115
120
  * @pattern ^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$
@@ -117,7 +122,7 @@ export type AssetPropertyBindingValue = {
117
122
  */
118
123
  AssetId: string;
119
124
  /**
120
- * The ID of the asset property.
125
+ * The ID of the property within the asset. This identifies the specific property's value used in the computation model.
121
126
  * @minLength 36
122
127
  * @maxLength 36
123
128
  * @pattern ^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$
@@ -126,31 +131,33 @@ export type AssetPropertyBindingValue = {
126
131
  PropertyId: string;
127
132
  };
128
133
  /**
134
+ * The configuration for the computation model.
129
135
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iotsitewise-computationmodel-computationmodelconfiguration.html}
130
136
  */
131
137
  export type ComputationModelConfiguration = {
132
138
  /**
133
- * Contains configuration for anomaly detection computation model.
139
+ * The configuration for the anomaly detection type of computation model.
134
140
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iotsitewise-computationmodel-computationmodelconfiguration.html#cfn-iotsitewise-computationmodel-computationmodelconfiguration-anomalydetection}
135
141
  */
136
142
  AnomalyDetection?: AnomalyDetectionComputationModelConfiguration | undefined;
137
143
  };
138
144
  /**
145
+ * Contains computation model data binding value information, which can be one of `assetModelProperty` , `list` .
139
146
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iotsitewise-computationmodel-computationmodeldatabindingvalue.html}
140
147
  */
141
148
  export type ComputationModelDataBindingValue = {
142
149
  /**
143
- * Defines an asset model property binding.
150
+ * Specifies an asset model property data binding value.
144
151
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iotsitewise-computationmodel-computationmodeldatabindingvalue.html#cfn-iotsitewise-computationmodel-computationmodeldatabindingvalue-assetmodelproperty}
145
152
  */
146
153
  AssetModelProperty?: AssetModelPropertyBindingValue | undefined;
147
154
  /**
148
- * Defines an asset property binding.
155
+ * The asset property value used for computation model data binding.
149
156
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iotsitewise-computationmodel-computationmodeldatabindingvalue.html#cfn-iotsitewise-computationmodel-computationmodeldatabindingvalue-assetproperty}
150
157
  */
151
158
  AssetProperty?: AssetPropertyBindingValue | undefined;
152
159
  /**
153
- * Defines a list of computation model binding values.
160
+ * Specifies a list of data binding value.
154
161
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iotsitewise-computationmodel-computationmodeldatabindingvalue.html#cfn-iotsitewise-computationmodel-computationmodeldatabindingvalue-list}
155
162
  */
156
163
  List?: ComputationModelDataBindingValue[] | undefined;
@@ -1,11 +1,11 @@
1
1
  import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
2
2
  /**
3
- * Resource schema for AWS::IoTSiteWise::Dataset.
3
+ * Creates a dataset to connect an external datasource.
4
4
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotsitewise-dataset.html}
5
5
  */
6
6
  export type IoTSiteWiseDataset = ResourceDefinitionWithAttributes<"AWS::IoTSiteWise::Dataset", IoTSiteWiseDatasetProps, IoTSiteWiseDatasetAttribs>;
7
7
  /**
8
- * Resource schema for AWS::IoTSiteWise::Dataset.
8
+ * Creates a dataset to connect an external datasource.
9
9
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotsitewise-dataset.html}
10
10
  */
11
11
  export type IoTSiteWiseDatasetProps = {
@@ -25,7 +25,7 @@ export type IoTSiteWiseDatasetProps = {
25
25
  */
26
26
  DatasetSource: DatasetSource;
27
27
  /**
28
- * An array of key-value pairs to apply to this resource.
28
+ * A list of key-value pairs that contain metadata for the access policy. For more information, see [Tagging your AWS IoT SiteWise resources](https://docs.aws.amazon.com/iot-sitewise/latest/userguide/tag-resources.html) in the *AWS IoT SiteWise User Guide* .
29
29
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotsitewise-dataset.html#cfn-iotsitewise-dataset-tags}
30
30
  */
31
31
  Tags?: Tag[] | undefined;
@@ -35,7 +35,9 @@ export type IoTSiteWiseDatasetProps = {
35
35
  */
36
36
  export type IoTSiteWiseDatasetAttribs = {
37
37
  /**
38
- * The ARN of the dataset.
38
+ * The ARN of the dataset, which has the following format.
39
+ *
40
+ * `arn:${Partition}:iotsitewise:${Region}:${Account}:dataset/${DatasetId}`
39
41
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotsitewise-dataset.html#cfn-iotsitewise-dataset-datasetarn}
40
42
  */
41
43
  DatasetArn: string;
@@ -49,6 +51,7 @@ export type IoTSiteWiseDatasetAttribs = {
49
51
  DatasetId: string;
50
52
  };
51
53
  /**
54
+ * The data source for the dataset.
52
55
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iotsitewise-dataset-datasetsource.html}
53
56
  */
54
57
  export type DatasetSource = {
@@ -69,21 +72,23 @@ export type DatasetSource = {
69
72
  SourceType: "KENDRA";
70
73
  };
71
74
  /**
75
+ * The source details for the Kendra dataset source.
72
76
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iotsitewise-dataset-kendrasourcedetail.html}
73
77
  */
74
78
  export type KendraSourceDetail = {
75
79
  /**
76
- * The knowledgeBaseArn details for the Kendra dataset source.
80
+ * The `knowledgeBaseArn` details for the Kendra dataset source.
77
81
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iotsitewise-dataset-kendrasourcedetail.html#cfn-iotsitewise-dataset-kendrasourcedetail-knowledgebasearn}
78
82
  */
79
83
  KnowledgeBaseArn: string;
80
84
  /**
81
- * The roleARN details for the Kendra dataset source.
85
+ * The `roleARN` details for the Kendra dataset source.
82
86
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iotsitewise-dataset-kendrasourcedetail.html#cfn-iotsitewise-dataset-kendrasourcedetail-rolearn}
83
87
  */
84
88
  RoleArn: string;
85
89
  };
86
90
  /**
91
+ * The details of the dataset source associated with the dataset.
87
92
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iotsitewise-dataset-sourcedetail.html}
88
93
  */
89
94
  export type SourceDetail = {
@@ -10,7 +10,7 @@ export type IVSStage = ResourceDefinitionWithAttributes<"AWS::IVS::Stage", IVSSt
10
10
  */
11
11
  export type IVSStageProps = {
12
12
  /**
13
- * Configuration object for individual participant recording, to attach to the new stage.
13
+ * Configuration object for individual participant recording.
14
14
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ivs-stage.html#cfn-ivs-stage-autoparticipantrecordingconfiguration}
15
15
  */
16
16
  AutoParticipantRecordingConfiguration?: AutoParticipantRecordingConfiguration | undefined;
@@ -38,7 +38,6 @@ export type IVSStageAttribs = {
38
38
  * ID of the active session within the stage. For example: `st-a1b2c3d4e5f6g`
39
39
  * @minLength 0
40
40
  * @maxLength 128
41
- * @default ""
42
41
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ivs-stage.html#cfn-ivs-stage-activesessionid}
43
42
  */
44
43
  ActiveSessionId: string;
@@ -81,7 +80,9 @@ export type AutoParticipantRecordingConfiguration = {
81
80
  */
82
81
  MediaTypes?: ("AUDIO_VIDEO" | "AUDIO_ONLY")[] | undefined;
83
82
  /**
84
- * If a stage publisher disconnects and then reconnects within the specified interval, the multiple recordings will be considered a single recording and merged together. The default value is 0, which disables merging.
83
+ * If a stage publisher disconnects and then reconnects within the specified interval, the multiple recordings will be considered a single recording and merged together.
84
+ *
85
+ * The default value is 0, which disables merging.
85
86
  * @min 0
86
87
  * @max 300
87
88
  * @default 0
@@ -87,6 +87,11 @@ export type ApplicationConfiguration = {
87
87
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kinesisanalyticsv2-application-applicationconfiguration.html#cfn-kinesisanalyticsv2-application-applicationconfiguration-applicationcodeconfiguration}
88
88
  */
89
89
  ApplicationCodeConfiguration?: ApplicationCodeConfiguration | undefined;
90
+ /**
91
+ * The configuration to manage encryption at rest.
92
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kinesisanalyticsv2-application-applicationconfiguration.html#cfn-kinesisanalyticsv2-application-applicationconfiguration-applicationencryptionconfiguration}
93
+ */
94
+ ApplicationEncryptionConfiguration?: ApplicationEncryptionConfiguration | undefined;
90
95
  /**
91
96
  * Describes whether snapshots are enabled for a Managed Service for Apache Flink application.
92
97
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kinesisanalyticsv2-application-applicationconfiguration.html#cfn-kinesisanalyticsv2-application-applicationconfiguration-applicationsnapshotconfiguration}
@@ -124,12 +129,31 @@ export type ApplicationConfiguration = {
124
129
  ZeppelinApplicationConfiguration?: ZeppelinApplicationConfiguration | undefined;
125
130
  };
126
131
  /**
127
- * Describes the maintenance configuration for the application.
132
+ * Specifies the configuration to manage encryption at rest.
133
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kinesisanalyticsv2-application-applicationencryptionconfiguration.html}
134
+ */
135
+ export type ApplicationEncryptionConfiguration = {
136
+ /**
137
+ * The key ARN, key ID, alias ARN, or alias name of the KMS key used for encryption at rest.
138
+ * @minLength 1
139
+ * @maxLength 2048
140
+ * @pattern ^(?:arn:.*:kms:.*:.*:(?:key\/.*|alias\/.*)|alias\/.*|(?i)[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})$
141
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kinesisanalyticsv2-application-applicationencryptionconfiguration.html#cfn-kinesisanalyticsv2-application-applicationencryptionconfiguration-keyid}
142
+ */
143
+ KeyId?: string | undefined;
144
+ /**
145
+ * Specifies the type of key used for encryption at rest.
146
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kinesisanalyticsv2-application-applicationencryptionconfiguration.html#cfn-kinesisanalyticsv2-application-applicationencryptionconfiguration-keytype}
147
+ */
148
+ KeyType: "AWS_OWNED_KEY" | "CUSTOMER_MANAGED_KEY";
149
+ };
150
+ /**
151
+ * Specifies the maintenance configuration for a AKAlong .
128
152
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kinesisanalyticsv2-application-applicationmaintenanceconfiguration.html}
129
153
  */
130
154
  export type ApplicationMaintenanceConfiguration = {
131
155
  /**
132
- * The start time for the maintenance window.
156
+ * The UTC timestamp of a day from which the eight-hour maintenance window will begin every day of the week. Maintenance of the application happens only during this eight-hour window.
133
157
  * @pattern ^([01][0-9]|2[0-3]):[0-5][0-9]$
134
158
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kinesisanalyticsv2-application-applicationmaintenanceconfiguration.html#cfn-kinesisanalyticsv2-application-applicationmaintenanceconfiguration-applicationmaintenancewindowstarttime}
135
159
  */
@@ -68,7 +68,7 @@ export type AllowedPublishers = {
68
68
  */
69
69
  export type CodeSigningPolicies = {
70
70
  /**
71
- * Code signing configuration policy for deployment validation failure. If you set the policy to `Enforce` , Lambda blocks the deployment request if signature validation checks fail. If you set the policy to `Warn` , Lambda allows the deployment and creates a CloudWatch log.
71
+ * Code signing configuration policy for deployment validation failure. If you set the policy to `Enforce` , Lambda blocks the deployment request if signature validation checks fail. If you set the policy to `Warn` , Lambda allows the deployment and issues a new Amazon CloudWatch metric ( `SignatureValidationErrors` ) and also stores the warning in the CloudTrail log.
72
72
  *
73
73
  * Default value: `Warn`
74
74
  * @default "Warn"
@@ -34,7 +34,7 @@ export type LambdaEventInvokeConfigProps = {
34
34
  * *Maximum* : `64`
35
35
  *
36
36
  * *Pattern* : `([a-zA-Z0-9-_]+)`
37
- * @pattern ^(arn:(aws[a-zA-Z-]*)?:lambda:)?([a-z]{2}(-gov)?(-iso([a-z])?)?-[a-z]+-\d{1}:)?(\d{12}:)?(function:)?([a-zA-Z0-9-_]+)(:(\$LATEST|[a-zA-Z0-9-_]+))?$
37
+ * @pattern ^(arn:(aws[a-zA-Z-]*)?:lambda:)?([a-z]+(-[a-z]+)+-\d{1}:)?(\d{12}:)?(function:)?([a-zA-Z0-9-_]+)(:(\$LATEST|[a-zA-Z0-9-_]+))?$
38
38
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-eventinvokeconfig.html#cfn-lambda-eventinvokeconfig-functionname}
39
39
  */
40
40
  FunctionName: string;
@@ -96,7 +96,7 @@ export type OnFailure = {
96
96
  * To retain records of failed invocations from [Kinesis](https://docs.aws.amazon.com/lambda/latest/dg/with-kinesis.html) , [DynamoDB](https://docs.aws.amazon.com/lambda/latest/dg/with-ddb.html) , [self-managed Kafka](https://docs.aws.amazon.com/lambda/latest/dg/with-kafka.html#services-smaa-onfailure-destination) or [Amazon MSK](https://docs.aws.amazon.com/lambda/latest/dg/with-msk.html#services-msk-onfailure-destination) , you can configure an Amazon SNS topic, Amazon SQS queue, or Amazon S3 bucket as the destination.
97
97
  * @minLength 0
98
98
  * @maxLength 350
99
- * @pattern ^$|arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:([a-z]{2}(-gov)?(-iso([a-z])?)?-[a-z]+-\d{1})?:(\d{12})?:(.*)
99
+ * @pattern ^$|arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:([a-z]+(-[a-z]+)+-\d{1})?:(\d{12})?:(.*)
100
100
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-eventinvokeconfig-onfailure.html#cfn-lambda-eventinvokeconfig-onfailure-destination}
101
101
  */
102
102
  Destination: string;
@@ -114,7 +114,7 @@ export type OnSuccess = {
114
114
  * The Amazon Resource Name (ARN) of the destination resource.
115
115
  * @minLength 0
116
116
  * @maxLength 350
117
- * @pattern ^$|arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:([a-z]{2}(-gov)?(-iso([a-z])?)?-[a-z]+-\d{1})?:(\d{12})?:(.*)
117
+ * @pattern ^$|arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:([a-z]+(-[a-z]+)+-\d{1})?:(\d{12})?:(.*)
118
118
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-eventinvokeconfig-onsuccess.html#cfn-lambda-eventinvokeconfig-onsuccess-destination}
119
119
  */
120
120
  Destination: string;
@@ -84,7 +84,7 @@ export type LambdaEventSourceMappingProps = {
84
84
  * - *Amazon DocumentDB* – The ARN of the DocumentDB change stream.
85
85
  * @minLength 12
86
86
  * @maxLength 1024
87
- * @pattern arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:([a-z]{2}(-gov)?(-iso([a-z])?)?-[a-z]+-\d{1})?:(\d{12})?:(.*)
87
+ * @pattern arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1})?:(\d{12})?:(.*)
88
88
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-eventsourcemapping.html#cfn-lambda-eventsourcemapping-eventsourcearn}
89
89
  */
90
90
  EventSourceArn?: string | undefined;
@@ -104,7 +104,7 @@ export type LambdaEventSourceMappingProps = {
104
104
  * The length constraint applies only to the full ARN. If you specify only the function name, it's limited to 64 characters in length.
105
105
  * @minLength 1
106
106
  * @maxLength 140
107
- * @pattern (arn:(aws[a-zA-Z-]*)?:lambda:)?([a-z]{2}(-gov)?(-iso([a-z])?)?-[a-z]+-\d{1}:)?(\d{12}:)?(function:)?([a-zA-Z0-9-_]+)(:(\$LATEST|[a-zA-Z0-9-_]+))?
107
+ * @pattern (arn:(aws[a-zA-Z-]*)?:lambda:)?((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:)?(\d{12}:)?(function:)?([a-zA-Z0-9-_]+)(:(\$LATEST|[a-zA-Z0-9-_]+))?
108
108
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-eventsourcemapping.html#cfn-lambda-eventsourcemapping-functionname}
109
109
  */
110
110
  FunctionName: string;
@@ -241,7 +241,7 @@ export type LambdaEventSourceMappingAttribs = {
241
241
  * The Amazon Resource Name (ARN) of the event source mapping.
242
242
  * @minLength 85
243
243
  * @maxLength 120
244
- * @pattern arn:(aws[a-zA-Z-]*)?:lambda:[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:event-source-mapping:[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}
244
+ * @pattern arn:(aws[a-zA-Z-]*)?:lambda:(eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:event-source-mapping:[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}
245
245
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-eventsourcemapping.html#cfn-lambda-eventsourcemapping-eventsourcemappingarn}
246
246
  */
247
247
  EventSourceMappingArn: string;
@@ -366,7 +366,7 @@ export type OnFailure = {
366
366
  * To retain records of failed invocations from [Kinesis](https://docs.aws.amazon.com/lambda/latest/dg/with-kinesis.html) , [DynamoDB](https://docs.aws.amazon.com/lambda/latest/dg/with-ddb.html) , [self-managed Kafka](https://docs.aws.amazon.com/lambda/latest/dg/with-kafka.html#services-smaa-onfailure-destination) or [Amazon MSK](https://docs.aws.amazon.com/lambda/latest/dg/with-msk.html#services-msk-onfailure-destination) , you can configure an Amazon SNS topic, Amazon SQS queue, or Amazon S3 bucket as the destination.
367
367
  * @minLength 12
368
368
  * @maxLength 1024
369
- * @pattern arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:([a-z]{2}(-gov)?(-iso([a-z])?)?-[a-z]+-\d{1})?:(\d{12})?:(.*)
369
+ * @pattern arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1})?:(\d{12})?:(.*)
370
370
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-eventsourcemapping-onfailure.html#cfn-lambda-eventsourcemapping-onfailure-destination}
371
371
  */
372
372
  Destination?: string | undefined;
@@ -420,7 +420,7 @@ export type SchemaRegistryAccessConfig = {
420
420
  * The URI of the secret (Secrets Manager secret ARN) to authenticate with your schema registry.
421
421
  * @minLength 1
422
422
  * @maxLength 10000
423
- * @pattern arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:([a-z]{2}(-gov)?(-iso([a-z])?)?-[a-z]+-\d{1})?:(\d{12})?:(.*)
423
+ * @pattern arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1})?:(\d{12})?:(.*)
424
424
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-eventsourcemapping-schemaregistryaccessconfig.html#cfn-lambda-eventsourcemapping-schemaregistryaccessconfig-uri}
425
425
  */
426
426
  URI?: string | undefined;
@@ -31,7 +31,7 @@ export type LambdaVersionProps = {
31
31
  * The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
32
32
  * @minLength 1
33
33
  * @maxLength 140
34
- * @pattern ^(arn:(aws[a-zA-Z-]*)?:lambda:)?([a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:)?(\d{12}:)?(function:)?([a-zA-Z0-9-_]+)(:(\$LATEST|[a-zA-Z0-9-_]+))?$
34
+ * @pattern ^(arn:(aws[a-zA-Z-]*)?:lambda:)?((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:)?(\d{12}:)?(function:)?([a-zA-Z0-9-_]+)(:(\$LATEST|[a-zA-Z0-9-_]+))?$
35
35
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-version.html#cfn-lambda-version-functionname}
36
36
  */
37
37
  FunctionName: string;
@@ -52,7 +52,7 @@ export type LambdaVersionProps = {
52
52
  export type LambdaVersionAttribs = {
53
53
  /**
54
54
  * The ARN of the function.
55
- * @pattern ^(arn:(aws[a-zA-Z-]*)?:lambda:)?([a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:)?(\d{12}:)?(function:)?([a-zA-Z0-9-_]+)(:(\$LATEST|[a-zA-Z0-9-_]+))?$
55
+ * @pattern ^(arn:(aws[a-zA-Z-]*)?:lambda:)?((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:)?(\d{12}:)?(function:)?([a-zA-Z0-9-_]+)(:(\$LATEST|[a-zA-Z0-9-_]+))?$
56
56
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-version.html#cfn-lambda-version-functionarn}
57
57
  */
58
58
  FunctionArn: string;
@@ -84,7 +84,7 @@ export type RuntimePolicy = {
84
84
  * > This is only required if you're using the *Manual* runtime update mode.
85
85
  * @minLength 26
86
86
  * @maxLength 2048
87
- * @pattern ^arn:(aws[a-zA-Z-]*):lambda:[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}::runtime:.+$
87
+ * @pattern ^arn:(aws[a-zA-Z-]*):lambda:(eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}::runtime:.+$
88
88
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-version-runtimepolicy.html#cfn-lambda-version-runtimepolicy-runtimeversionarn}
89
89
  */
90
90
  RuntimeVersionArn?: string | undefined;
@@ -23,8 +23,6 @@ export type LogsLogGroup = ResourceDefinitionWithAttributes<"AWS::Logs::LogGroup
23
23
  export type LogsLogGroupProps = {
24
24
  /**
25
25
  * Creates a data protection policy and assigns it to the log group. A data protection policy can help safeguard sensitive data that's ingested by the log group by auditing and masking the sensitive log data. When a user who does not have permission to view masked data views a log event that includes masked data, the sensitive data is replaced by asterisks.
26
- *
27
- * For more information, including a list of types of data that can be audited and masked, see [Protect sensitive log data with masking](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/mask-sensitive-log-data.html) .
28
26
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-logs-loggroup.html#cfn-logs-loggroup-dataprotectionpolicy}
29
27
  */
30
28
  DataProtectionPolicy?: Record<string, unknown> | undefined;
@@ -70,13 +68,14 @@ export type LogsLogGroupProps = {
70
68
  */
71
69
  LogGroupName?: string | undefined;
72
70
  /**
71
+ * Creates or updates a resource policy for the specified log group that allows other services to put log events to this account. A LogGroup can have 1 resource policy.
73
72
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-logs-loggroup.html#cfn-logs-loggroup-resourcepolicydocument}
74
73
  */
75
74
  ResourcePolicyDocument?: Record<string, unknown> | undefined;
76
75
  /**
77
76
  * The number of days to retain the log events in the specified log group. Possible values are: 1, 3, 5, 7, 14, 30, 60, 90, 120, 150, 180, 365, 400, 545, 731, 1096, 1827, 2192, 2557, 2922, 3288, and 3653.
78
77
  *
79
- * To set a log group so that its log events do not expire, use [DeleteRetentionPolicy](https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_DeleteRetentionPolicy.html) .
78
+ * To set a log group so that its log events do not expire, do not specify this property.
80
79
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-logs-loggroup.html#cfn-logs-loggroup-retentionindays}
81
80
  */
82
81
  RetentionInDays?: 1 | 3 | 5 | 7 | 14 | 30 | 60 | 90 | 120 | 150 | 180 | 365 | 400 | 545 | 731 | 1096 | 1827 | 2192 | 2557 | 2922 | 3288 | 3653 | undefined;
@@ -94,7 +94,7 @@ export type MediaPackageV2ChannelAttribs = {
94
94
  */
95
95
  export type InputSwitchConfiguration = {
96
96
  /**
97
- * When true, AWS Elemental MediaPackage performs input switching based on the MQCS. Default is true. This setting is valid only when `InputType` is `CMAF` .
97
+ * When true, AWS Elemental MediaPackage performs input switching based on the MQCS. Default is false. This setting is valid only when `InputType` is `CMAF` .
98
98
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediapackagev2-channel-inputswitchconfiguration.html#cfn-mediapackagev2-channel-inputswitchconfiguration-mqcsinputswitching}
99
99
  */
100
100
  MQCSInputSwitching?: boolean | undefined;
@@ -106,7 +106,7 @@ export type PortRange = {
106
106
  */
107
107
  export type RevokedStatusAction = "PASS" | "DROP" | "REJECT";
108
108
  /**
109
- * Any AWS Certificate Manager (ACM) Secure Sockets Layer/Transport Layer Security (SSL/TLS) server certificate that's associated with a [ServerCertificateConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-tlsinspectionconfiguration-servercertificateconfiguration.html) . Used in a [TLSInspectionConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-tlsinspectionconfiguration.html) for inspection of inbound traffic to your firewall. You must request or import a SSL/TLS certificate into ACM for each domain Network Firewall needs to decrypt and inspect. AWS Network Firewall uses the SSL/TLS certificates to decrypt specified inbound SSL/TLS traffic going to your firewall. For information about working with certificates in AWS Certificate Manager , see [Request a public certificate](https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-request-public.html) or [Importing certificates](https://docs.aws.amazon.com/acm/latest/userguide/import-certificate.html) in the *AWS Certificate Manager User Guide* .
109
+ * Any AWS Certificate Manager (ACM) Secure Sockets Layer/Transport Layer Security (SSL/TLS) server certificate that's associated with a [ServerCertificateConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-tlsinspectionconfiguration-servercertificateconfiguration.html) . Used in a [TLSInspectionConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-networkfirewall-tlsinspectionconfiguration.html) for inspection of inbound traffic to your firewall. You must request or import a SSL/TLS certificate into ACM for each domain Network Firewall needs to decrypt and inspect. AWS Network Firewall uses the SSL/TLS certificates to decrypt specified inbound SSL/TLS traffic going to your firewall. For information about working with certificates in AWS Certificate Manager , see [Request a public certificate](https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-request-public.html) or [Importing certificates](https://docs.aws.amazon.com/acm/latest/userguide/import-certificate.html) in the *AWS Certificate Manager User Guide* .
110
110
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-tlsinspectionconfiguration-servercertificate.html}
111
111
  */
112
112
  export type ServerCertificate = {
@@ -117,9 +117,9 @@ export type ServerCertificate = {
117
117
  ResourceArn?: string | undefined;
118
118
  };
119
119
  /**
120
- * Configures the AWS Certificate Manager certificates and scope that Network Firewall uses to decrypt and re-encrypt traffic using a [TLSInspectionConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-tlsinspectionconfiguration.html) . You can configure `ServerCertificates` for inbound SSL/TLS inspection, a `CertificateAuthorityArn` for outbound SSL/TLS inspection, or both. For information about working with certificates for TLS inspection, see [Using SSL/TLS server certficiates with TLS inspection configurations](https://docs.aws.amazon.com/network-firewall/latest/developerguide/tls-inspection-certificate-requirements.html) in the *AWS Network Firewall Developer Guide* .
120
+ * Configures the AWS Certificate Manager certificates and scope that Network Firewall uses to decrypt and re-encrypt traffic using a [TLSInspectionConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-networkfirewall-tlsinspectionconfiguration.html) . You can configure `ServerCertificates` for inbound SSL/TLS inspection, a `CertificateAuthorityArn` for outbound SSL/TLS inspection, or both. For information about working with certificates for TLS inspection, see [Using SSL/TLS server certficiates with TLS inspection configurations](https://docs.aws.amazon.com/network-firewall/latest/developerguide/tls-inspection-certificate-requirements.html) in the *AWS Network Firewall Developer Guide* .
121
121
  *
122
- * > If a server certificate that's associated with your [TLSInspectionConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-tlsinspectionconfiguration.html) is revoked, deleted, or expired it can result in client-side TLS errors.
122
+ * > If a server certificate that's associated with your [TLSInspectionConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-networkfirewall-tlsinspectionconfiguration.html) is revoked, deleted, or expired it can result in client-side TLS errors.
123
123
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-tlsinspectionconfiguration-servercertificateconfiguration.html}
124
124
  */
125
125
  export type ServerCertificateConfiguration = {
@@ -138,7 +138,7 @@ export type ServerCertificateConfiguration = {
138
138
  */
139
139
  CertificateAuthorityArn?: string | undefined;
140
140
  /**
141
- * When enabled, Network Firewall checks if the server certificate presented by the server in the SSL/TLS connection has a revoked or unkown status. If the certificate has an unknown or revoked status, you must specify the actions that Network Firewall takes on outbound traffic. To check the certificate revocation status, you must also specify a `CertificateAuthorityArn` in [ServerCertificateConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-servercertificateconfiguration.html) .
141
+ * When enabled, Network Firewall checks if the server certificate presented by the server in the SSL/TLS connection has a revoked or unkown status. If the certificate has an unknown or revoked status, you must specify the actions that Network Firewall takes on outbound traffic. To check the certificate revocation status, you must also specify a `CertificateAuthorityArn` in [ServerCertificateConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-networkfirewall-servercertificateconfiguration.html) .
142
142
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-tlsinspectionconfiguration-servercertificateconfiguration.html#cfn-networkfirewall-tlsinspectionconfiguration-servercertificateconfiguration-checkcertificaterevocationstatus}
143
143
  */
144
144
  CheckCertificateRevocationStatus?: {
@@ -27,6 +27,11 @@ export type OmicsWorkflowProps = {
27
27
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-omics-workflow.html#cfn-omics-workflow-accelerators}
28
28
  */
29
29
  Accelerators?: Accelerators | undefined;
30
+ /**
31
+ * Contains information about a source code repository that hosts the workflow definition files.
32
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-omics-workflow.html#cfn-omics-workflow-definitionrepository}
33
+ */
34
+ DefinitionRepository?: DefinitionRepository | undefined;
30
35
  /**
31
36
  * The URI of a definition for the workflow.
32
37
  * @minLength 1
@@ -69,6 +74,12 @@ export type OmicsWorkflowProps = {
69
74
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-omics-workflow.html#cfn-omics-workflow-parametertemplate}
70
75
  */
71
76
  ParameterTemplate?: Record<string, WorkflowParameter> | undefined;
77
+ /**
78
+ * Path to the primary workflow parameter template JSON file inside the repository
79
+ * @pattern ^[\S]+$
80
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-omics-workflow.html#cfn-omics-workflow-parametertemplatepath}
81
+ */
82
+ ParameterTemplatePath?: string | undefined;
72
83
  /**
73
84
  * The default static storage capacity (in gibibytes) for runs that use this workflow or workflow version. The `storageCapacity` can be overwritten at run time. The storage capacity is not required for runs with a `DYNAMIC` storage type.
74
85
  * @min 0
@@ -85,6 +96,31 @@ export type OmicsWorkflowProps = {
85
96
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-omics-workflow.html#cfn-omics-workflow-tags}
86
97
  */
87
98
  Tags?: Record<string, string> | undefined;
99
+ /**
100
+ * Optional workflow bucket owner ID to verify the workflow bucket
101
+ * @pattern ^[0-9]{12}$
102
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-omics-workflow.html#cfn-omics-workflow-workflowbucketownerid}
103
+ */
104
+ WorkflowBucketOwnerId?: string | undefined;
105
+ /**
106
+ * The markdown content for the workflow's README file. This provides documentation and usage information for users of the workflow.
107
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-omics-workflow.html#cfn-omics-workflow-readmemarkdown}
108
+ */
109
+ readmeMarkdown?: string | undefined;
110
+ /**
111
+ * The path to the workflow README markdown file within the repository. This file provides documentation and usage information for the workflow. If not specified, the README.md file from the root directory of the repository will be used.
112
+ * @minLength 1
113
+ * @maxLength 128
114
+ * @pattern ^[\p{L}||\p{M}||\p{Z}||\p{S}||\p{N}||\p{P}]+$
115
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-omics-workflow.html#cfn-omics-workflow-readmepath}
116
+ */
117
+ readmePath?: string | undefined;
118
+ /**
119
+ * The S3 URI of the README file for the workflow. This file provides documentation and usage information for the workflow. The S3 URI must begin with s3://USER-OWNED-BUCKET/. The requester must have access to the S3 bucket and object. The max README content length is 500 KiB.
120
+ * @pattern ^s3://([a-z0-9][a-z0-9-.]{1,61}[a-z0-9])/((.{1,1024}))$
121
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-omics-workflow.html#cfn-omics-workflow-readmeuri}
122
+ */
123
+ readmeUri?: string | undefined;
88
124
  };
89
125
  /**
90
126
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-omics-workflow.html#aws-resource-omics-workflow-return-values}
@@ -133,6 +169,52 @@ export type OmicsWorkflowAttribs = {
133
169
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-omics-workflow-accelerators.html}
134
170
  */
135
171
  export type Accelerators = "GPU";
172
+ /**
173
+ * Contains information about a source code repository that hosts the workflow definition files.
174
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-omics-workflow-definitionrepository.html}
175
+ */
176
+ export type DefinitionRepository = {
177
+ /**
178
+ * The Amazon Resource Name (ARN) of the connection to the source code repository.
179
+ * @minLength 1
180
+ * @maxLength 256
181
+ * @pattern ^arn:aws(-[\\w]+)*:.+:.+:[0-9]{12}:.+$
182
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-omics-workflow-definitionrepository.html#cfn-omics-workflow-definitionrepository-connectionarn}
183
+ */
184
+ connectionArn?: string | undefined;
185
+ /**
186
+ * A list of file patterns to exclude when retrieving the workflow definition from the repository.
187
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-omics-workflow-definitionrepository.html#cfn-omics-workflow-definitionrepository-excludefilepatterns}
188
+ */
189
+ excludeFilePatterns?: string[] | undefined;
190
+ /**
191
+ * The full repository identifier, including the repository owner and name. For example, 'repository-owner/repository-name'.
192
+ * @pattern .+/.+
193
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-omics-workflow-definitionrepository.html#cfn-omics-workflow-definitionrepository-fullrepositoryid}
194
+ */
195
+ fullRepositoryId?: string | undefined;
196
+ /**
197
+ * The source reference for the repository, such as a branch name, tag, or commit ID.
198
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-omics-workflow-definitionrepository.html#cfn-omics-workflow-definitionrepository-sourcereference}
199
+ */
200
+ sourceReference?: SourceReference | undefined;
201
+ };
202
+ /**
203
+ * Contains information about the source reference in a code repository, such as a branch, tag, or commit.
204
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-omics-workflow-sourcereference.html}
205
+ */
206
+ export type SourceReference = {
207
+ /**
208
+ * The type of source reference, such as branch, tag, or commit.
209
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-omics-workflow-sourcereference.html#cfn-omics-workflow-sourcereference-type}
210
+ */
211
+ type?: "BRANCH" | "TAG" | "COMMIT" | undefined;
212
+ /**
213
+ * The value of the source reference, such as the branch name, tag name, or commit ID.
214
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-omics-workflow-sourcereference.html#cfn-omics-workflow-sourcereference-value}
215
+ */
216
+ value?: string | undefined;
217
+ };
136
218
  /**
137
219
  * @minLength 1
138
220
  * @maxLength 64
@@ -73,7 +73,7 @@ export type QBusinessDataSourceProps = {
73
73
  */
74
74
  MediaExtractionConfiguration?: MediaExtractionConfiguration | undefined;
75
75
  /**
76
- * The Amazon Resource Name (ARN) of an IAM role with permission to access the data source and required resources.
76
+ * The Amazon Resource Name (ARN) of an IAM role with permission to access the data source and required resources. This field is required for all connector types except custom connectors, where it is optional.
77
77
  * @minLength 0
78
78
  * @maxLength 1284
79
79
  * @pattern ^arn:[a-z0-9-\.]{1,63}:[a-z0-9-\.]{0,63}:[a-z0-9-\.]{0,63}:[a-z0-9-\.]{0,63}:[^/].{0,1023}$
@@ -10753,7 +10753,7 @@ export type ResourcePermission = {
10753
10753
  /**
10754
10754
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-quicksight-analysis-resourcestatus.html}
10755
10755
  */
10756
- export type ResourceStatus = "CREATION_IN_PROGRESS" | "CREATION_SUCCESSFUL" | "CREATION_FAILED" | "UPDATE_IN_PROGRESS" | "UPDATE_SUCCESSFUL" | "UPDATE_FAILED" | "DELETED";
10756
+ export type ResourceStatus = "CREATION_IN_PROGRESS" | "CREATION_SUCCESSFUL" | "CREATION_FAILED" | "UPDATE_IN_PROGRESS" | "UPDATE_SUCCESSFUL" | "UPDATE_FAILED" | "PENDING_UPDATE" | "DELETED";
10757
10757
  /**
10758
10758
  * The rolling date configuration of a date time filter.
10759
10759
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-quicksight-analysis-rollingdateconfiguration.html}
@@ -102,7 +102,7 @@ export type S3BucketProps = {
102
102
  *
103
103
  * > - The `DefaultRetention` settings require both a mode and a period.
104
104
  * > - The `DefaultRetention` period can be either `Days` or `Years` but you must select one. You cannot specify `Days` and `Years` at the same time.
105
- * > - You can enable Object Lock for new or existing buckets. For more information, see [Configuring Object Lock](https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lock-configure.html) .
105
+ * > - You can enable Object Lock for new or existing buckets. For more information, see [Configuring Object Lock](https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lock-configure.html) . > You must URL encode any signed header values that contain spaces. For example, if your header value is `my file.txt` , containing two spaces after `my` , you must URL encode this value to `my%20%20file.txt` .
106
106
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-s3-bucket.html#cfn-s3-bucket-objectlockconfiguration}
107
107
  */
108
108
  ObjectLockConfiguration?: ObjectLockConfiguration | undefined;