@propulsionworks/cloudformation 0.1.26 → 0.1.27
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/out/exports/resources.generated/aws-acmpca-permission.d.ts +2 -2
- package/out/exports/resources.generated/aws-amplify-domain.d.ts +2 -2
- package/out/exports/resources.generated/aws-apigateway-domainname.d.ts +2 -2
- package/out/exports/resources.generated/aws-apigatewayv2-domainname.d.ts +1 -1
- package/out/exports/resources.generated/aws-appmesh-virtualgateway.d.ts +4 -4
- package/out/exports/resources.generated/aws-appmesh-virtualnode.d.ts +4 -4
- package/out/exports/resources.generated/aws-appstream-fleet.d.ts +5 -0
- package/out/exports/resources.generated/aws-appstream-imagebuilder.d.ts +5 -0
- package/out/exports/resources.generated/aws-appsync-domainname.d.ts +1 -1
- package/out/exports/resources.generated/aws-aps-scraper.d.ts +9 -1
- package/out/exports/resources.generated/aws-batch-computeenvironment.d.ts +2 -1
- package/out/exports/resources.generated/aws-bedrock-guardrail.d.ts +4 -4
- package/out/exports/resources.generated/aws-bedrockagentcore-browsercustom.d.ts +124 -0
- package/out/exports/resources.generated/aws-bedrockagentcore-codeinterpretercustom.d.ts +88 -0
- package/out/exports/resources.generated/aws-bedrockagentcore-runtime.d.ts +158 -0
- package/out/exports/resources.generated/aws-bedrockagentcore-runtimeendpoint.d.ts +89 -0
- package/out/exports/resources.generated/aws-certificatemanager-certificate.d.ts +3 -3
- package/out/exports/resources.generated/aws-cleanrooms-analysistemplate.d.ts +18 -0
- package/out/exports/resources.generated/aws-cleanrooms-collaboration.d.ts +9 -0
- package/out/exports/resources.generated/aws-cloudfront-distribution.d.ts +2 -2
- package/out/exports/resources.generated/aws-cloudfront-distributiontenant.d.ts +3 -3
- package/out/exports/resources.generated/aws-cognito-userpooldomain.d.ts +1 -1
- package/out/exports/resources.generated/aws-connect-routingprofile.d.ts +16 -0
- package/out/exports/resources.generated/aws-datazone-connection.d.ts +2 -2
- package/out/exports/resources.generated/aws-datazone-policygrant.d.ts +6 -2
- package/out/exports/resources.generated/aws-datazone-projectprofile.d.ts +2 -2
- package/out/exports/resources.generated/aws-dynamodb-globaltable.d.ts +8 -0
- package/out/exports/resources.generated/aws-dynamodb-table.d.ts +4 -0
- package/out/exports/resources.generated/aws-ec2-clientvpnendpoint.d.ts +2 -2
- package/out/exports/resources.generated/aws-ec2-enclavecertificateiamroleassociation.d.ts +2 -2
- package/out/exports/resources.generated/aws-ecs-service.d.ts +9 -0
- package/out/exports/resources.generated/aws-elasticsearch-domain.d.ts +1 -1
- package/out/exports/resources.generated/aws-evs-environment.d.ts +2 -0
- package/out/exports/resources.generated/aws-gamelift-fleet.d.ts +2 -2
- package/out/exports/resources.generated/aws-iam-servercertificate.d.ts +2 -2
- package/out/exports/resources.generated/aws-medialive-channel.d.ts +21 -0
- package/out/exports/resources.generated/aws-mediapackage-originendpoint.d.ts +1 -1
- package/out/exports/resources.generated/aws-networkfirewall-tlsinspectionconfiguration.d.ts +6 -6
- package/out/exports/resources.generated/aws-odb-cloudexadatainfrastructure.d.ts +60 -0
- package/out/exports/resources.generated/aws-odb-cloudvmcluster.d.ts +20 -0
- package/out/exports/resources.generated/aws-odb-odbnetwork.d.ts +22 -0
- package/out/exports/resources.generated/aws-odb-odbpeeringconnection.d.ts +71 -0
- package/out/exports/resources.generated/aws-opensearchserverless-securityconfig.d.ts +4 -3
- package/out/exports/resources.generated/aws-opensearchservice-domain.d.ts +1 -1
- package/out/exports/resources.generated/aws-pcs-cluster.d.ts +1 -1
- package/out/exports/resources.generated/aws-pcs-computenodegroup.d.ts +1 -1
- package/out/exports/resources.generated/aws-quicksight-dashboard.d.ts +7 -0
- package/out/exports/resources.generated/aws-servicecatalog-launchtemplateconstraint.d.ts +1 -0
- package/out/exports/resources.generated/aws-servicecatalog-portfolioprincipalassociation.d.ts +2 -2
- package/out/exports/resources.generated/aws-smsvoice-configurationset.d.ts +50 -28
- package/out/exports/resources.generated/aws-smsvoice-optoutlist.d.ts +13 -5
- package/out/exports/resources.generated/aws-smsvoice-phonenumber.d.ts +24 -11
- package/out/exports/resources.generated/aws-smsvoice-pool.d.ts +31 -13
- package/out/exports/resources.generated/aws-smsvoice-protectconfiguration.d.ts +23 -6
- package/out/exports/resources.generated/aws-smsvoice-resourcepolicy.d.ts +3 -3
- package/out/exports/resources.generated/aws-smsvoice-senderid.d.ts +5 -5
- package/out/exports/resources.generated/aws-transfer-server.d.ts +5 -5
- package/out/exports/resources.generated/aws-verifiedpermissions-identitysource.d.ts +2 -2
- package/out/exports/resources.generated/aws-vpclattice-resourcegateway.d.ts +0 -5
- package/package.json +1 -1
|
@@ -1,26 +1,26 @@
|
|
|
1
1
|
import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
|
|
2
2
|
/**
|
|
3
|
-
*
|
|
3
|
+
* Create a new protect configuration. By default all country rule sets for each capability are set to `ALLOW` . A protect configurations name is stored as a Tag with the key set to `Name` and value as the name of the protect configuration.
|
|
4
4
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-smsvoice-protectconfiguration.html}
|
|
5
5
|
*/
|
|
6
6
|
export type SMSVOICEProtectConfiguration = ResourceDefinitionWithAttributes<"AWS::SMSVOICE::ProtectConfiguration", SMSVOICEProtectConfigurationProps, SMSVOICEProtectConfigurationAttribs>;
|
|
7
7
|
/**
|
|
8
|
-
*
|
|
8
|
+
* Create a new protect configuration. By default all country rule sets for each capability are set to `ALLOW` . A protect configurations name is stored as a Tag with the key set to `Name` and value as the name of the protect configuration.
|
|
9
9
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-smsvoice-protectconfiguration.html}
|
|
10
10
|
*/
|
|
11
11
|
export type SMSVOICEProtectConfigurationProps = {
|
|
12
12
|
/**
|
|
13
|
-
*
|
|
13
|
+
* The set of `CountryRules` you specify to control which countries End User Messaging can send your messages to.
|
|
14
14
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-smsvoice-protectconfiguration.html#cfn-smsvoice-protectconfiguration-countryruleset}
|
|
15
15
|
*/
|
|
16
16
|
CountryRuleSet?: CountryRuleSet | undefined;
|
|
17
17
|
/**
|
|
18
|
-
* When set to true deletion protection is enabled
|
|
18
|
+
* The status of deletion protection for the protect configuration. When set to true deletion protection is enabled. By default this is set to false.
|
|
19
19
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-smsvoice-protectconfiguration.html#cfn-smsvoice-protectconfiguration-deletionprotectionenabled}
|
|
20
20
|
*/
|
|
21
21
|
DeletionProtectionEnabled?: boolean | undefined;
|
|
22
22
|
/**
|
|
23
|
-
* An array of key
|
|
23
|
+
* An array of key and value pair tags that are associated with the resource.
|
|
24
24
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-smsvoice-protectconfiguration.html#cfn-smsvoice-protectconfiguration-tags}
|
|
25
25
|
*/
|
|
26
26
|
Tags?: Tag[] | undefined;
|
|
@@ -41,11 +41,16 @@ export type SMSVOICEProtectConfigurationAttribs = {
|
|
|
41
41
|
ProtectConfigurationId: string;
|
|
42
42
|
};
|
|
43
43
|
/**
|
|
44
|
+
* Specifies the type of protection to use for a country.
|
|
45
|
+
*
|
|
46
|
+
* For example, to set Canada as allowed, the `CountryRule` would be formatted as follows:
|
|
47
|
+
*
|
|
48
|
+
* `{ "CountryCode": "CA", "ProtectStatus": "ALLOW" }`
|
|
44
49
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-smsvoice-protectconfiguration-countryrule.html}
|
|
45
50
|
*/
|
|
46
51
|
export type CountryRule = {
|
|
47
52
|
/**
|
|
48
|
-
* The two-
|
|
53
|
+
* The two-character code, in ISO 3166-1 alpha-2 format, for the country or region.
|
|
49
54
|
* @pattern ^[A-Z]{2}$
|
|
50
55
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-smsvoice-protectconfiguration-countryrule.html#cfn-smsvoice-protectconfiguration-countryrule-countrycode}
|
|
51
56
|
*/
|
|
@@ -57,44 +62,56 @@ export type CountryRule = {
|
|
|
57
62
|
ProtectStatus: "ALLOW" | "BLOCK" | "MONITOR" | "FILTER";
|
|
58
63
|
};
|
|
59
64
|
/**
|
|
65
|
+
* The set of `CountryRules` you specify to control which countries End User Messaging can send your messages to.
|
|
66
|
+
*
|
|
67
|
+
* > If you don't specify all available ISO country codes in the `CountryRuleSet` for each number capability, the AWS CloudFormation drift detection feature will detect drift. This is because End User Messaging always returns all country codes.
|
|
60
68
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-smsvoice-protectconfiguration-countryruleset.html}
|
|
61
69
|
*/
|
|
62
70
|
export type CountryRuleSet = {
|
|
63
71
|
/**
|
|
72
|
+
* The set of `CountryRule` s to control which destination countries End User Messaging can send your MMS messages to.
|
|
64
73
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-smsvoice-protectconfiguration-countryruleset.html#cfn-smsvoice-protectconfiguration-countryruleset-mms}
|
|
65
74
|
*/
|
|
66
75
|
MMS?: CountryRule[] | undefined;
|
|
67
76
|
/**
|
|
77
|
+
* The set of `CountryRule` s to control which destination countries End User Messaging can send your SMS messages to.
|
|
68
78
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-smsvoice-protectconfiguration-countryruleset.html#cfn-smsvoice-protectconfiguration-countryruleset-sms}
|
|
69
79
|
*/
|
|
70
80
|
SMS: CountryRule[];
|
|
71
81
|
/**
|
|
82
|
+
* The set of `CountryRule` s to control which destination countries End User Messaging can send your VOICE messages to.
|
|
72
83
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-smsvoice-protectconfiguration-countryruleset.html#cfn-smsvoice-protectconfiguration-countryruleset-voice}
|
|
73
84
|
*/
|
|
74
85
|
VOICE?: CountryRule[] | undefined;
|
|
75
86
|
} | {
|
|
76
87
|
/**
|
|
88
|
+
* The set of `CountryRule` s to control which destination countries End User Messaging can send your MMS messages to.
|
|
77
89
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-smsvoice-protectconfiguration-countryruleset.html#cfn-smsvoice-protectconfiguration-countryruleset-mms}
|
|
78
90
|
*/
|
|
79
91
|
MMS?: CountryRule[] | undefined;
|
|
80
92
|
/**
|
|
93
|
+
* The set of `CountryRule` s to control which destination countries End User Messaging can send your SMS messages to.
|
|
81
94
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-smsvoice-protectconfiguration-countryruleset.html#cfn-smsvoice-protectconfiguration-countryruleset-sms}
|
|
82
95
|
*/
|
|
83
96
|
SMS?: CountryRule[] | undefined;
|
|
84
97
|
/**
|
|
98
|
+
* The set of `CountryRule` s to control which destination countries End User Messaging can send your VOICE messages to.
|
|
85
99
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-smsvoice-protectconfiguration-countryruleset.html#cfn-smsvoice-protectconfiguration-countryruleset-voice}
|
|
86
100
|
*/
|
|
87
101
|
VOICE: CountryRule[];
|
|
88
102
|
} | {
|
|
89
103
|
/**
|
|
104
|
+
* The set of `CountryRule` s to control which destination countries End User Messaging can send your MMS messages to.
|
|
90
105
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-smsvoice-protectconfiguration-countryruleset.html#cfn-smsvoice-protectconfiguration-countryruleset-mms}
|
|
91
106
|
*/
|
|
92
107
|
MMS: CountryRule[];
|
|
93
108
|
/**
|
|
109
|
+
* The set of `CountryRule` s to control which destination countries End User Messaging can send your SMS messages to.
|
|
94
110
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-smsvoice-protectconfiguration-countryruleset.html#cfn-smsvoice-protectconfiguration-countryruleset-sms}
|
|
95
111
|
*/
|
|
96
112
|
SMS?: CountryRule[] | undefined;
|
|
97
113
|
/**
|
|
114
|
+
* The set of `CountryRule` s to control which destination countries End User Messaging can send your VOICE messages to.
|
|
98
115
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-smsvoice-protectconfiguration-countryruleset.html#cfn-smsvoice-protectconfiguration-countryruleset-voice}
|
|
99
116
|
*/
|
|
100
117
|
VOICE?: CountryRule[] | undefined;
|
|
@@ -1,11 +1,11 @@
|
|
|
1
1
|
import type { ResourceDefinition } from "../main.ts";
|
|
2
2
|
/**
|
|
3
|
-
*
|
|
3
|
+
* Attaches a resource-based policy to a End User Messaging resource(phone number, sender Id, phone poll, or opt-out list) that is used for sharing the resource. A shared resource can be a Pool, Opt-out list, Sender Id, or Phone number. For more information about resource-based policies, see [Working with shared resources](https://docs.aws.amazon.com/sms-voice/latest/userguide/shared-resources.html) in the *End User Messaging User Guide* .
|
|
4
4
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-smsvoice-resourcepolicy.html}
|
|
5
5
|
*/
|
|
6
6
|
export type SMSVOICEResourcePolicy = ResourceDefinition<"AWS::SMSVOICE::ResourcePolicy", SMSVOICEResourcePolicyProps>;
|
|
7
7
|
/**
|
|
8
|
-
*
|
|
8
|
+
* Attaches a resource-based policy to a End User Messaging resource(phone number, sender Id, phone poll, or opt-out list) that is used for sharing the resource. A shared resource can be a Pool, Opt-out list, Sender Id, or Phone number. For more information about resource-based policies, see [Working with shared resources](https://docs.aws.amazon.com/sms-voice/latest/userguide/shared-resources.html) in the *End User Messaging User Guide* .
|
|
9
9
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-smsvoice-resourcepolicy.html}
|
|
10
10
|
*/
|
|
11
11
|
export type SMSVOICEResourcePolicyProps = {
|
|
@@ -15,7 +15,7 @@ export type SMSVOICEResourcePolicyProps = {
|
|
|
15
15
|
*/
|
|
16
16
|
PolicyDocument: Record<string, unknown>;
|
|
17
17
|
/**
|
|
18
|
-
* The Amazon Resource Name (ARN) of the
|
|
18
|
+
* The Amazon Resource Name (ARN) of the End User Messaging resource attached to the resource-based policy.
|
|
19
19
|
* @pattern ^arn:\S+$
|
|
20
20
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-smsvoice-resourcepolicy.html#cfn-smsvoice-resourcepolicy-resourcearn}
|
|
21
21
|
*/
|
|
@@ -1,16 +1,16 @@
|
|
|
1
1
|
import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
|
|
2
2
|
/**
|
|
3
|
-
*
|
|
3
|
+
* Request a new sender ID that doesn't require registration.
|
|
4
4
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-smsvoice-senderid.html}
|
|
5
5
|
*/
|
|
6
6
|
export type SMSVOICESenderId = ResourceDefinitionWithAttributes<"AWS::SMSVOICE::SenderId", SMSVOICESenderIdProps, SMSVOICESenderIdAttribs>;
|
|
7
7
|
/**
|
|
8
|
-
*
|
|
8
|
+
* Request a new sender ID that doesn't require registration.
|
|
9
9
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-smsvoice-senderid.html}
|
|
10
10
|
*/
|
|
11
11
|
export type SMSVOICESenderIdProps = {
|
|
12
12
|
/**
|
|
13
|
-
* When set to true the sender ID can't be deleted.
|
|
13
|
+
* By default this is set to false. When set to true the sender ID can't be deleted.
|
|
14
14
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-smsvoice-senderid.html#cfn-smsvoice-senderid-deletionprotectionenabled}
|
|
15
15
|
*/
|
|
16
16
|
DeletionProtectionEnabled?: boolean | undefined;
|
|
@@ -27,7 +27,7 @@ export type SMSVOICESenderIdProps = {
|
|
|
27
27
|
*/
|
|
28
28
|
SenderId: string;
|
|
29
29
|
/**
|
|
30
|
-
* An array of key
|
|
30
|
+
* An array of tags (key and value pairs) to associate with the sender ID.
|
|
31
31
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-smsvoice-senderid.html#cfn-smsvoice-senderid-tags}
|
|
32
32
|
*/
|
|
33
33
|
Tags?: Tag[] | undefined;
|
|
@@ -37,7 +37,7 @@ export type SMSVOICESenderIdProps = {
|
|
|
37
37
|
*/
|
|
38
38
|
export type SMSVOICESenderIdAttribs = {
|
|
39
39
|
/**
|
|
40
|
-
* The Amazon Resource Name
|
|
40
|
+
* The Amazon Resource Name of the `SenderId` .
|
|
41
41
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-smsvoice-senderid.html#cfn-smsvoice-senderid-arn}
|
|
42
42
|
*/
|
|
43
43
|
Arn: string;
|
|
@@ -10,13 +10,13 @@ export type TransferServer = ResourceDefinitionWithAttributes<"AWS::Transfer::Se
|
|
|
10
10
|
*/
|
|
11
11
|
export type TransferServerProps = {
|
|
12
12
|
/**
|
|
13
|
-
* The Amazon Resource Name (ARN) of the
|
|
13
|
+
* The Amazon Resource Name (ARN) of the Certificate Manager (ACM) certificate. Required when `Protocols` is set to `FTPS` .
|
|
14
14
|
*
|
|
15
|
-
* To request a new public certificate, see [Request a public certificate](https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-request-public.html) in the *
|
|
15
|
+
* To request a new public certificate, see [Request a public certificate](https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-request-public.html) in the *Certificate Manager User Guide* .
|
|
16
16
|
*
|
|
17
|
-
* To import an existing certificate into ACM, see [Importing certificates into ACM](https://docs.aws.amazon.com/acm/latest/userguide/import-certificate.html) in the *
|
|
17
|
+
* To import an existing certificate into ACM, see [Importing certificates into ACM](https://docs.aws.amazon.com/acm/latest/userguide/import-certificate.html) in the *Certificate Manager User Guide* .
|
|
18
18
|
*
|
|
19
|
-
* To request a private certificate to use FTPS through private IP addresses, see [Request a private certificate](https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-request-private.html) in the *
|
|
19
|
+
* To request a private certificate to use FTPS through private IP addresses, see [Request a private certificate](https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-request-private.html) in the *Certificate Manager User Guide* .
|
|
20
20
|
*
|
|
21
21
|
* Certificates with the following cryptographic algorithms and key sizes are supported:
|
|
22
22
|
*
|
|
@@ -129,7 +129,7 @@ export type TransferServerProps = {
|
|
|
129
129
|
* - `FTP` (File Transfer Protocol): Unencrypted file transfer
|
|
130
130
|
* - `AS2` (Applicability Statement 2): used for transporting structured business-to-business data
|
|
131
131
|
*
|
|
132
|
-
* > - If you select `FTPS` , you must choose a certificate stored in
|
|
132
|
+
* > - If you select `FTPS` , you must choose a certificate stored in Certificate Manager (ACM) which is used to identify your server when clients connect to it over FTPS.
|
|
133
133
|
* > - If `Protocol` includes either `FTP` or `FTPS` , then the `EndpointType` must be `VPC` and the `IdentityProviderType` must be either `AWS_DIRECTORY_SERVICE` , `AWS_LAMBDA` , or `API_GATEWAY` .
|
|
134
134
|
* > - If `Protocol` includes `FTP` , then `AddressAllocationIds` cannot be associated.
|
|
135
135
|
* > - If `Protocol` is set only to `SFTP` , the `EndpointType` can be set to `PUBLIC` and the `IdentityProviderType` can be set any of the supported identity types: `SERVICE_MANAGED` , `AWS_DIRECTORY_SERVICE` , `AWS_LAMBDA` , or `API_GATEWAY` .
|
|
@@ -6,7 +6,7 @@ import type { ResourceDefinitionWithAttributes } from "../main.ts";
|
|
|
6
6
|
*
|
|
7
7
|
* After you create an identity source, you can use the identities provided by the IdP as proxies for the principal in authorization queries that use the [IsAuthorizedWithToken](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html) operation. These identities take the form of tokens that contain claims about the user, such as IDs, attributes and group memberships. Amazon Cognito provides both identity tokens and access tokens, and Verified Permissions can use either or both. Any combination of identity and access tokens results in the same Cedar principal. Verified Permissions automatically translates the information about the identities into the standard Cedar attributes that can be evaluated by your policies. Because the Amazon Cognito identity and access tokens can contain different information, the tokens you choose to use determine the attributes that are available to access in the Cedar principal from your policies.
|
|
8
8
|
*
|
|
9
|
-
* Amazon Cognito Identity is not available in all of the same AWS Regions as
|
|
9
|
+
* Amazon Cognito Identity is not available in all of the same AWS Regions as . Because of this, the `AWS::VerifiedPermissions::IdentitySource` type is not available to create from AWS CloudFormation in Regions where Amazon Cognito Identity is not currently available. Users can still create `AWS::VerifiedPermissions::IdentitySource` in those Regions, but only from the AWS CLI , SDK, or from the AWS console.
|
|
10
10
|
*
|
|
11
11
|
* > To reference a user from this identity source in your Cedar policies, use the following syntax.
|
|
12
12
|
* >
|
|
@@ -23,7 +23,7 @@ export type VerifiedPermissionsIdentitySource = ResourceDefinitionWithAttributes
|
|
|
23
23
|
*
|
|
24
24
|
* After you create an identity source, you can use the identities provided by the IdP as proxies for the principal in authorization queries that use the [IsAuthorizedWithToken](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html) operation. These identities take the form of tokens that contain claims about the user, such as IDs, attributes and group memberships. Amazon Cognito provides both identity tokens and access tokens, and Verified Permissions can use either or both. Any combination of identity and access tokens results in the same Cedar principal. Verified Permissions automatically translates the information about the identities into the standard Cedar attributes that can be evaluated by your policies. Because the Amazon Cognito identity and access tokens can contain different information, the tokens you choose to use determine the attributes that are available to access in the Cedar principal from your policies.
|
|
25
25
|
*
|
|
26
|
-
* Amazon Cognito Identity is not available in all of the same AWS Regions as
|
|
26
|
+
* Amazon Cognito Identity is not available in all of the same AWS Regions as . Because of this, the `AWS::VerifiedPermissions::IdentitySource` type is not available to create from AWS CloudFormation in Regions where Amazon Cognito Identity is not currently available. Users can still create `AWS::VerifiedPermissions::IdentitySource` in those Regions, but only from the AWS CLI , SDK, or from the AWS console.
|
|
27
27
|
*
|
|
28
28
|
* > To reference a user from this identity source in your Cedar policies, use the following syntax.
|
|
29
29
|
* >
|
|
@@ -14,11 +14,6 @@ export type VpcLatticeResourceGatewayProps = {
|
|
|
14
14
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-vpclattice-resourcegateway.html#cfn-vpclattice-resourcegateway-ipaddresstype}
|
|
15
15
|
*/
|
|
16
16
|
IpAddressType?: "IPV4" | "IPV6" | "DUALSTACK" | undefined;
|
|
17
|
-
/**
|
|
18
|
-
* The number of IPv4 addresses to allocate per ENI for the resource gateway
|
|
19
|
-
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-vpclattice-resourcegateway.html#cfn-vpclattice-resourcegateway-ipv4addressespereni}
|
|
20
|
-
*/
|
|
21
|
-
Ipv4AddressesPerEni?: number | undefined;
|
|
22
17
|
/**
|
|
23
18
|
* The name of the resource gateway.
|
|
24
19
|
* @minLength 3
|