@propulsionworks/cloudformation 0.1.34 → 0.1.35

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (66) hide show
  1. package/out/exports/resources.generated/aws-appstream-fleet.d.ts +1 -1
  2. package/out/exports/resources.generated/aws-appstream-imagebuilder.d.ts +2 -2
  3. package/out/exports/resources.generated/aws-appstream-stack.d.ts +3 -3
  4. package/out/exports/resources.generated/aws-aps-scraper.d.ts +48 -0
  5. package/out/exports/resources.generated/aws-backup-logicallyairgappedbackupvault.d.ts +4 -0
  6. package/out/exports/resources.generated/aws-backup-restoretestingselection.d.ts +2 -0
  7. package/out/exports/resources.generated/aws-batch-computeenvironment.d.ts +6 -6
  8. package/out/exports/resources.generated/aws-bedrockagentcore-browsercustom.d.ts +1 -1
  9. package/out/exports/resources.generated/aws-bedrockagentcore-gatewaytarget.d.ts +18 -1
  10. package/out/exports/resources.generated/aws-bedrockagentcore-runtime.d.ts +7 -1
  11. package/out/exports/resources.generated/aws-config-configurationrecorder.d.ts +1 -1
  12. package/out/exports/resources.generated/aws-connect-evaluationform.d.ts +35 -12
  13. package/out/exports/resources.generated/aws-connect-securityprofile.d.ts +52 -0
  14. package/out/exports/resources.generated/aws-connectcampaignsv2-campaign.d.ts +4 -4
  15. package/out/exports/resources.generated/aws-controltower-landingzone.d.ts +5 -0
  16. package/out/exports/resources.generated/aws-dsql-cluster.d.ts +10 -0
  17. package/out/exports/resources.generated/aws-dynamodb-globaltable.d.ts +0 -10
  18. package/out/exports/resources.generated/aws-ec2-ec2fleet.d.ts +2 -2
  19. package/out/exports/resources.generated/aws-ec2-flowlog.d.ts +1 -1
  20. package/out/exports/resources.generated/aws-ec2-ipamscope.d.ts +25 -0
  21. package/out/exports/resources.generated/aws-ec2-spotfleet.d.ts +2 -2
  22. package/out/exports/resources.generated/aws-ec2-transitgateway.d.ts +8 -0
  23. package/out/exports/resources.generated/aws-ec2-volume.d.ts +10 -0
  24. package/out/exports/resources.generated/aws-elasticloadbalancingv2-listener.d.ts +38 -0
  25. package/out/exports/resources.generated/aws-elasticloadbalancingv2-listenerrule.d.ts +38 -0
  26. package/out/exports/resources.generated/aws-elasticloadbalancingv2-targetgroup.d.ts +5 -0
  27. package/out/exports/resources.generated/aws-imagebuilder-containerrecipe.d.ts +20 -0
  28. package/out/exports/resources.generated/aws-imagebuilder-imagerecipe.d.ts +20 -0
  29. package/out/exports/resources.generated/aws-kinesis-stream.d.ts +6 -1
  30. package/out/exports/resources.generated/aws-kms-key.d.ts +3 -0
  31. package/out/exports/resources.generated/aws-lambda-eventsourcemapping.d.ts +22 -2
  32. package/out/exports/resources.generated/aws-macie-session.d.ts +1 -1
  33. package/out/exports/resources.generated/aws-mediaconnect-flow.d.ts +55 -0
  34. package/out/exports/resources.generated/aws-mediaconnect-flowoutput.d.ts +56 -1
  35. package/out/exports/resources.generated/aws-mediaconnect-routerinput.d.ts +484 -0
  36. package/out/exports/resources.generated/aws-mediaconnect-routernetworkinterface.d.ts +135 -0
  37. package/out/exports/resources.generated/aws-mediaconnect-routeroutput.d.ts +432 -0
  38. package/out/exports/resources.generated/aws-omics-annotationstore.d.ts +2 -2
  39. package/out/exports/resources.generated/aws-organizations-policy.d.ts +1 -1
  40. package/out/exports/resources.generated/aws-quicksight-dataset.d.ts +179 -0
  41. package/out/exports/resources.generated/aws-refactorspaces-application.d.ts +2 -2
  42. package/out/exports/resources.generated/aws-refactorspaces-environment.d.ts +2 -2
  43. package/out/exports/resources.generated/aws-refactorspaces-service.d.ts +2 -2
  44. package/out/exports/resources.generated/aws-rekognition-project.d.ts +6 -1
  45. package/out/exports/resources.generated/aws-route53resolver-firewallrulegroup.d.ts +1 -1
  46. package/out/exports/resources.generated/aws-rtbfabric-inboundexternallink.d.ts +124 -0
  47. package/out/exports/resources.generated/aws-rtbfabric-link.d.ts +1 -1
  48. package/out/exports/resources.generated/aws-s3tables-table.d.ts +6 -1
  49. package/out/exports/resources.generated/aws-s3tables-tablebucket.d.ts +6 -1
  50. package/out/exports/resources.generated/aws-securityhub-automationrule.d.ts +19 -19
  51. package/out/exports/resources.generated/aws-securityhub-automationrulev2.d.ts +6 -6
  52. package/out/exports/resources.generated/aws-securityhub-configurationpolicy.d.ts +8 -8
  53. package/out/exports/resources.generated/aws-securityhub-delegatedadmin.d.ts +2 -2
  54. package/out/exports/resources.generated/aws-securityhub-findingaggregator.d.ts +2 -2
  55. package/out/exports/resources.generated/aws-securityhub-hub.d.ts +2 -2
  56. package/out/exports/resources.generated/aws-securityhub-insight.d.ts +17 -17
  57. package/out/exports/resources.generated/aws-securityhub-organizationconfiguration.d.ts +2 -2
  58. package/out/exports/resources.generated/aws-securityhub-policyassociation.d.ts +3 -3
  59. package/out/exports/resources.generated/aws-securityhub-productsubscription.d.ts +2 -2
  60. package/out/exports/resources.generated/aws-securityhub-securitycontrol.d.ts +0 -0
  61. package/out/exports/resources.generated/aws-securityhub-standard.d.ts +3 -3
  62. package/out/exports/resources.generated/aws-servicecatalog-cloudformationproduct.d.ts +35 -15
  63. package/out/exports/resources.generated/aws-workspacesthinclient-environment.d.ts +2 -2
  64. package/out/exports/resources.generated/aws-workspacesweb-browsersettings.d.ts +26 -1
  65. package/out/exports/resources.generated/dev-fsx-storagevirtualmachine.d.ts +29 -0
  66. package/package.json +1 -1
@@ -84,6 +84,11 @@ export type DSQLClusterProps = {
84
84
  */
85
85
  WitnessRegion?: string | undefined;
86
86
  } | undefined;
87
+ /**
88
+ * The IAM policy applied to the cluster resource.
89
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-dsql-cluster.html#cfn-dsql-cluster-policydocument}
90
+ */
91
+ PolicyDocument?: string | undefined;
87
92
  /**
88
93
  * A map of key and value pairs this cluster is tagged with.
89
94
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-dsql-cluster.html#cfn-dsql-cluster-tags}
@@ -104,6 +109,11 @@ export type DSQLClusterAttribs = {
104
109
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-dsql-cluster.html#cfn-dsql-cluster-identifier}
105
110
  */
106
111
  Identifier: string;
112
+ /**
113
+ * The version number of the cluster's resource based policy
114
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-dsql-cluster.html#cfn-dsql-cluster-policyversion}
115
+ */
116
+ PolicyVersion: string;
107
117
  /**
108
118
  * The Amazon Resource Name (ARN) of the cluster. Used for IAM permissions and resource identification.
109
119
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-dsql-cluster.html#cfn-dsql-cluster-resourcearn}
@@ -640,16 +640,6 @@ export type ReplicaStreamSpecification = {
640
640
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-dynamodb-globaltable-replicastreamspecification.html#cfn-dynamodb-globaltable-replicastreamspecification-resourcepolicy}
641
641
  */
642
642
  ResourcePolicy: ResourcePolicy;
643
- } | {
644
- /**
645
- * A resource-based policy document that contains the permissions for the specified stream of a DynamoDB global table replica. Resource-based policies let you define access permissions by specifying who has access to each resource, and the actions they are allowed to perform on each resource.
646
- *
647
- * In a CloudFormation template, you can provide the policy in JSON or YAML format because CloudFormation converts YAML to JSON before submitting it to DynamoDB . For more information about resource-based policies, see [Using resource-based policies for DynamoDB](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/access-control-resource-based.html) and [Resource-based policy examples](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/rbac-examples.html) .
648
- *
649
- * You can update the `ResourcePolicy` property if you've specified more than one table using the [AWS ::DynamoDB::GlobalTable](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-dynamodb-globaltable.html) resource.
650
- * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-dynamodb-globaltable-replicastreamspecification.html#cfn-dynamodb-globaltable-replicastreamspecification-resourcepolicy}
651
- */
652
- ResourcePolicy?: ResourcePolicy | undefined;
653
643
  };
654
644
  /**
655
645
  * Creates or updates a resource-based policy document that contains the permissions for DynamoDB resources, such as a table, its indexes, and stream. Resource-based policies let you define access permissions by specifying who has access to each resource, and the actions they are allowed to perform on each resource.
@@ -513,7 +513,7 @@ export type InstanceRequirementsRequest = {
513
513
  * Default: Any accelerator
514
514
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-ec2fleet-instancerequirementsrequest.html#cfn-ec2-ec2fleet-instancerequirementsrequest-acceleratornames}
515
515
  */
516
- AcceleratorNames?: ("a10g" | "a100" | "h100" | "inferentia" | "k520" | "k80" | "m60" | "radeon-pro-v520" | "t4" | "t4g" | "vu9p" | "v100")[] | undefined;
516
+ AcceleratorNames?: ("a10g" | "a100" | "h100" | "inferentia" | "k520" | "k80" | "m60" | "radeon-pro-v520" | "t4" | "t4g" | "vu9p" | "v100" | "l40s" | "l4" | "gaudi-hl-205" | "inferentia2" | "trainium" | "trainium2" | "u30")[] | undefined;
517
517
  /**
518
518
  * The minimum and maximum amount of total accelerator memory, in MiB.
519
519
  *
@@ -531,7 +531,7 @@ export type InstanceRequirementsRequest = {
531
531
  * Default: Any accelerator type
532
532
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-ec2fleet-instancerequirementsrequest.html#cfn-ec2-ec2fleet-instancerequirementsrequest-acceleratortypes}
533
533
  */
534
- AcceleratorTypes?: ("gpu" | "fpga" | "inference")[] | undefined;
534
+ AcceleratorTypes?: ("gpu" | "fpga" | "inference" | "media")[] | undefined;
535
535
  /**
536
536
  * The instance types to apply your specified attributes against. All other instance types are ignored, even if they match your specified attributes.
537
537
  *
@@ -88,7 +88,7 @@ export type EC2FlowLogProps = {
88
88
  * The type of resource to monitor.
89
89
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-flowlog.html#cfn-ec2-flowlog-resourcetype}
90
90
  */
91
- ResourceType: "NetworkInterface" | "Subnet" | "VPC" | "TransitGateway" | "TransitGatewayAttachment";
91
+ ResourceType: "NetworkInterface" | "Subnet" | "VPC" | "TransitGateway" | "TransitGatewayAttachment" | "RegionalNatGateway";
92
92
  /**
93
93
  * The tags to apply to the flow logs.
94
94
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-flowlog.html#cfn-ec2-flowlog-tags}
@@ -18,6 +18,13 @@ export type EC2IPAMScopeProps = {
18
18
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-ipamscope.html#cfn-ec2-ipamscope-description}
19
19
  */
20
20
  Description?: string | undefined;
21
+ /**
22
+ * The configuration that links an Amazon VPC IPAM scope to an external authority system. It specifies the type of external system and the external resource identifier that identifies your account or instance in that system.
23
+ *
24
+ * For more information, see [Integrate VPC IPAM with Infoblox infrastructure](https://docs.aws.amazon.com/vpc/latest/ipam/integrate-infoblox-ipam.html) in the *Amazon VPC IPAM User Guide* ..
25
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-ipamscope.html#cfn-ec2-ipamscope-externalauthorityconfiguration}
26
+ */
27
+ ExternalAuthorityConfiguration?: IpamScopeExternalAuthorityConfiguration | undefined;
21
28
  /**
22
29
  * The ID of the IPAM for which you're creating this scope.
23
30
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-ipamscope.html#cfn-ec2-ipamscope-ipamid}
@@ -64,4 +71,22 @@ export type EC2IPAMScopeAttribs = {
64
71
  */
65
72
  PoolCount: number;
66
73
  };
74
+ /**
75
+ * The configuration that links an Amazon VPC IPAM scope to an external authority system. It specifies the type of external system and the external resource identifier that identifies your account or instance in that system.
76
+ *
77
+ * In IPAM, an external authority is a third-party IP address management system that provides CIDR blocks when you provision address space for top-level IPAM pools. This allows you to use your existing IP management system to control which address ranges are allocated to AWS while using Amazon VPC IPAM to manage subnets within those ranges.
78
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-ipamscope-ipamscopeexternalauthorityconfiguration.html}
79
+ */
80
+ export type IpamScopeExternalAuthorityConfiguration = {
81
+ /**
82
+ * The identifier for the external resource managing this scope. For Infoblox integrations, this is the Infoblox resource identifier in the format `<version>.identity.account.<entity_realm>.<entity_id>` .
83
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-ipamscope-ipamscopeexternalauthorityconfiguration.html#cfn-ec2-ipamscope-ipamscopeexternalauthorityconfiguration-externalresourceidentifier}
84
+ */
85
+ ExternalResourceIdentifier: string;
86
+ /**
87
+ * The type of external authority managing this scope. Currently supports `Infoblox` for integration with Infoblox Universal DDI.
88
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-ipamscope-ipamscopeexternalauthorityconfiguration.html#cfn-ec2-ipamscope-ipamscopeexternalauthorityconfiguration-ipamscopeexternalauthoritytype}
89
+ */
90
+ IpamScopeExternalAuthorityType: "infoblox";
91
+ };
67
92
  //# sourceMappingURL=aws-ec2-ipamscope.d.ts.map
@@ -440,7 +440,7 @@ export type InstanceRequirementsRequest = {
440
440
  * Default: Any accelerator
441
441
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-spotfleet-instancerequirementsrequest.html#cfn-ec2-spotfleet-instancerequirementsrequest-acceleratornames}
442
442
  */
443
- AcceleratorNames?: ("a10g" | "a100" | "h100" | "inferentia" | "k520" | "k80" | "m60" | "radeon-pro-v520" | "t4" | "t4g" | "vu9p" | "v100")[] | undefined;
443
+ AcceleratorNames?: ("a10g" | "a100" | "h100" | "inferentia" | "k520" | "k80" | "m60" | "radeon-pro-v520" | "t4" | "t4g" | "vu9p" | "v100" | "l40s" | "l4" | "gaudi-hl-205" | "inferentia2" | "trainium" | "trainium2" | "u30")[] | undefined;
444
444
  /**
445
445
  * The minimum and maximum amount of total accelerator memory, in MiB.
446
446
  *
@@ -458,7 +458,7 @@ export type InstanceRequirementsRequest = {
458
458
  * Default: Any accelerator type
459
459
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-spotfleet-instancerequirementsrequest.html#cfn-ec2-spotfleet-instancerequirementsrequest-acceleratortypes}
460
460
  */
461
- AcceleratorTypes?: ("gpu" | "fpga" | "inference")[] | undefined;
461
+ AcceleratorTypes?: ("gpu" | "fpga" | "inference" | "media")[] | undefined;
462
462
  /**
463
463
  * The instance types to apply your specified attributes against. All other instance types are ignored, even if they match your specified attributes.
464
464
  *
@@ -61,6 +61,10 @@ export type EC2TransitGatewayProps = {
61
61
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-transitgateway.html#cfn-ec2-transitgateway-dnssupport}
62
62
  */
63
63
  DnsSupport?: string | undefined;
64
+ /**
65
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-transitgateway.html#cfn-ec2-transitgateway-encryptionsupport}
66
+ */
67
+ EncryptionSupport?: "disable" | "enable" | undefined;
64
68
  /**
65
69
  * Indicates whether multicast is enabled on the transit gateway
66
70
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-transitgateway.html#cfn-ec2-transitgateway-multicastsupport}
@@ -98,6 +102,10 @@ export type EC2TransitGatewayProps = {
98
102
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-transitgateway.html#aws-resource-ec2-transitgateway-return-values}
99
103
  */
100
104
  export type EC2TransitGatewayAttribs = {
105
+ /**
106
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-transitgateway.html#cfn-ec2-transitgateway-encryptionsupportstate}
107
+ */
108
+ EncryptionSupportState: string;
101
109
  /**
102
110
  * The ID of the transit gateway.
103
111
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-transitgateway.html#cfn-ec2-transitgateway-id}
@@ -56,6 +56,7 @@ export type EC2VolumeProps = {
56
56
  */
57
57
  AvailabilityZone: string;
58
58
  /**
59
+ * The ID of the Availability Zone for the volume.
59
60
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-volume.html#cfn-ec2-volume-availabilityzoneid}
60
61
  */
61
62
  AvailabilityZoneId?: string | undefined;
@@ -125,6 +126,7 @@ export type EC2VolumeProps = {
125
126
  */
126
127
  SnapshotId?: string | undefined;
127
128
  /**
129
+ * The ID of the source volume from which the volume copy was created. Only for volume copies.
128
130
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-volume.html#cfn-ec2-volume-sourcevolumeid}
129
131
  */
130
132
  SourceVolumeId?: string | undefined;
@@ -187,6 +189,7 @@ export type EC2VolumeProps = {
187
189
  */
188
190
  AvailabilityZone: string;
189
191
  /**
192
+ * The ID of the Availability Zone for the volume.
190
193
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-volume.html#cfn-ec2-volume-availabilityzoneid}
191
194
  */
192
195
  AvailabilityZoneId?: string | undefined;
@@ -256,6 +259,7 @@ export type EC2VolumeProps = {
256
259
  */
257
260
  SnapshotId: string;
258
261
  /**
262
+ * The ID of the source volume from which the volume copy was created. Only for volume copies.
259
263
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-volume.html#cfn-ec2-volume-sourcevolumeid}
260
264
  */
261
265
  SourceVolumeId?: string | undefined;
@@ -318,6 +322,7 @@ export type EC2VolumeProps = {
318
322
  */
319
323
  AvailabilityZone?: string | undefined;
320
324
  /**
325
+ * The ID of the Availability Zone for the volume.
321
326
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-volume.html#cfn-ec2-volume-availabilityzoneid}
322
327
  */
323
328
  AvailabilityZoneId: string;
@@ -387,6 +392,7 @@ export type EC2VolumeProps = {
387
392
  */
388
393
  SnapshotId?: string | undefined;
389
394
  /**
395
+ * The ID of the source volume from which the volume copy was created. Only for volume copies.
390
396
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-volume.html#cfn-ec2-volume-sourcevolumeid}
391
397
  */
392
398
  SourceVolumeId?: string | undefined;
@@ -449,6 +455,7 @@ export type EC2VolumeProps = {
449
455
  */
450
456
  AvailabilityZone?: string | undefined;
451
457
  /**
458
+ * The ID of the Availability Zone for the volume.
452
459
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-volume.html#cfn-ec2-volume-availabilityzoneid}
453
460
  */
454
461
  AvailabilityZoneId: string;
@@ -518,6 +525,7 @@ export type EC2VolumeProps = {
518
525
  */
519
526
  SnapshotId: string;
520
527
  /**
528
+ * The ID of the source volume from which the volume copy was created. Only for volume copies.
521
529
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-volume.html#cfn-ec2-volume-sourcevolumeid}
522
530
  */
523
531
  SourceVolumeId?: string | undefined;
@@ -580,6 +588,7 @@ export type EC2VolumeProps = {
580
588
  */
581
589
  AvailabilityZone?: string | undefined;
582
590
  /**
591
+ * The ID of the Availability Zone for the volume.
583
592
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-volume.html#cfn-ec2-volume-availabilityzoneid}
584
593
  */
585
594
  AvailabilityZoneId?: string | undefined;
@@ -649,6 +658,7 @@ export type EC2VolumeProps = {
649
658
  */
650
659
  SnapshotId?: string | undefined;
651
660
  /**
661
+ * The ID of the source volume from which the volume copy was created. Only for volume copies.
652
662
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-volume.html#cfn-ec2-volume-sourcevolumeid}
653
663
  */
654
664
  SourceVolumeId: string;
@@ -100,6 +100,10 @@ export type Action = {
100
100
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticloadbalancingv2-listener-action.html#cfn-elasticloadbalancingv2-listener-action-forwardconfig}
101
101
  */
102
102
  ForwardConfig?: ForwardConfig | undefined;
103
+ /**
104
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticloadbalancingv2-listener-action.html#cfn-elasticloadbalancingv2-listener-action-jwtvalidationconfig}
105
+ */
106
+ JwtValidationConfig?: JwtValidationConfig | undefined;
103
107
  /**
104
108
  * The order for the action. This value is required for rules with multiple actions. The action with the lowest value for order is performed first.
105
109
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticloadbalancingv2-listener-action.html#cfn-elasticloadbalancingv2-listener-action-order}
@@ -364,6 +368,40 @@ export type ForwardConfig = {
364
368
  */
365
369
  TargetGroups?: TargetGroupTuple[] | undefined;
366
370
  };
371
+ /**
372
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticloadbalancingv2-listener-jwtvalidationactionadditionalclaim.html}
373
+ */
374
+ export type JwtValidationActionAdditionalClaim = {
375
+ /**
376
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticloadbalancingv2-listener-jwtvalidationactionadditionalclaim.html#cfn-elasticloadbalancingv2-listener-jwtvalidationactionadditionalclaim-format}
377
+ */
378
+ Format: string;
379
+ /**
380
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticloadbalancingv2-listener-jwtvalidationactionadditionalclaim.html#cfn-elasticloadbalancingv2-listener-jwtvalidationactionadditionalclaim-name}
381
+ */
382
+ Name: string;
383
+ /**
384
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticloadbalancingv2-listener-jwtvalidationactionadditionalclaim.html#cfn-elasticloadbalancingv2-listener-jwtvalidationactionadditionalclaim-values}
385
+ */
386
+ Values: string[];
387
+ };
388
+ /**
389
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticloadbalancingv2-listener-jwtvalidationconfig.html}
390
+ */
391
+ export type JwtValidationConfig = {
392
+ /**
393
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticloadbalancingv2-listener-jwtvalidationconfig.html#cfn-elasticloadbalancingv2-listener-jwtvalidationconfig-additionalclaims}
394
+ */
395
+ AdditionalClaims?: JwtValidationActionAdditionalClaim[] | undefined;
396
+ /**
397
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticloadbalancingv2-listener-jwtvalidationconfig.html#cfn-elasticloadbalancingv2-listener-jwtvalidationconfig-issuer}
398
+ */
399
+ Issuer: string;
400
+ /**
401
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticloadbalancingv2-listener-jwtvalidationconfig.html#cfn-elasticloadbalancingv2-listener-jwtvalidationconfig-jwksendpoint}
402
+ */
403
+ JwksEndpoint: string;
404
+ };
367
405
  /**
368
406
  * Information about a listener attribute.
369
407
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticloadbalancingv2-listener-listenerattribute.html}
@@ -86,6 +86,10 @@ export type Action = {
86
86
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticloadbalancingv2-listenerrule-action.html#cfn-elasticloadbalancingv2-listenerrule-action-forwardconfig}
87
87
  */
88
88
  ForwardConfig?: ForwardConfig | undefined;
89
+ /**
90
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticloadbalancingv2-listenerrule-action.html#cfn-elasticloadbalancingv2-listenerrule-action-jwtvalidationconfig}
91
+ */
92
+ JwtValidationConfig?: JwtValidationConfig | undefined;
89
93
  /**
90
94
  * The order for the action. This value is required for rules with multiple actions. The action with the lowest value for order is performed first.
91
95
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticloadbalancingv2-listenerrule-action.html#cfn-elasticloadbalancingv2-listenerrule-action-order}
@@ -397,6 +401,40 @@ export type HttpRequestMethodConfig = {
397
401
  */
398
402
  Values?: string[] | undefined;
399
403
  };
404
+ /**
405
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticloadbalancingv2-listenerrule-jwtvalidationactionadditionalclaim.html}
406
+ */
407
+ export type JwtValidationActionAdditionalClaim = {
408
+ /**
409
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticloadbalancingv2-listenerrule-jwtvalidationactionadditionalclaim.html#cfn-elasticloadbalancingv2-listenerrule-jwtvalidationactionadditionalclaim-format}
410
+ */
411
+ Format: string;
412
+ /**
413
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticloadbalancingv2-listenerrule-jwtvalidationactionadditionalclaim.html#cfn-elasticloadbalancingv2-listenerrule-jwtvalidationactionadditionalclaim-name}
414
+ */
415
+ Name: string;
416
+ /**
417
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticloadbalancingv2-listenerrule-jwtvalidationactionadditionalclaim.html#cfn-elasticloadbalancingv2-listenerrule-jwtvalidationactionadditionalclaim-values}
418
+ */
419
+ Values: string[];
420
+ };
421
+ /**
422
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticloadbalancingv2-listenerrule-jwtvalidationconfig.html}
423
+ */
424
+ export type JwtValidationConfig = {
425
+ /**
426
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticloadbalancingv2-listenerrule-jwtvalidationconfig.html#cfn-elasticloadbalancingv2-listenerrule-jwtvalidationconfig-additionalclaims}
427
+ */
428
+ AdditionalClaims?: JwtValidationActionAdditionalClaim[] | undefined;
429
+ /**
430
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticloadbalancingv2-listenerrule-jwtvalidationconfig.html#cfn-elasticloadbalancingv2-listenerrule-jwtvalidationconfig-issuer}
431
+ */
432
+ Issuer: string;
433
+ /**
434
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticloadbalancingv2-listenerrule-jwtvalidationconfig.html#cfn-elasticloadbalancingv2-listenerrule-jwtvalidationconfig-jwksendpoint}
435
+ */
436
+ JwksEndpoint: string;
437
+ };
400
438
  /**
401
439
  * Information about a path pattern condition.
402
440
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticloadbalancingv2-listenerrule-pathpatternconfig.html}
@@ -197,6 +197,11 @@ export type TargetDescription = {
197
197
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticloadbalancingv2-targetgroup-targetdescription.html#cfn-elasticloadbalancingv2-targetgroup-targetdescription-port}
198
198
  */
199
199
  Port?: number | undefined;
200
+ /**
201
+ * The Server ID used by targets when using QUIC or TCP_QUIC protocols.
202
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticloadbalancingv2-targetgroup-targetdescription.html#cfn-elasticloadbalancingv2-targetgroup-targetdescription-quicserverid}
203
+ */
204
+ QuicServerId?: string | undefined;
200
205
  };
201
206
  /**
202
207
  * Specifies a target group attribute.
@@ -102,6 +102,26 @@ export type ImageBuilderContainerRecipeAttribs = {
102
102
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-containerrecipe.html#cfn-imagebuilder-containerrecipe-arn}
103
103
  */
104
104
  Arn: string;
105
+ /**
106
+ * The latest version ARN of the created container recipe.
107
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-imagebuilder-containerrecipe-latestversion.html#cfn-imagebuilder-containerrecipe-latestversion-arn}
108
+ */
109
+ "LatestVersion.Arn": string;
110
+ /**
111
+ * The latest version ARN of the created container recipe, with the same major version.
112
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-imagebuilder-containerrecipe-latestversion.html#cfn-imagebuilder-containerrecipe-latestversion-major}
113
+ */
114
+ "LatestVersion.Major": string;
115
+ /**
116
+ * The latest version ARN of the created container recipe, with the same minor version.
117
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-imagebuilder-containerrecipe-latestversion.html#cfn-imagebuilder-containerrecipe-latestversion-minor}
118
+ */
119
+ "LatestVersion.Minor": string;
120
+ /**
121
+ * The latest version ARN of the created container recipe, with the same patch version.
122
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-imagebuilder-containerrecipe-latestversion.html#cfn-imagebuilder-containerrecipe-latestversion-patch}
123
+ */
124
+ "LatestVersion.Patch": string;
105
125
  /**
106
126
  * Returns the name of the container recipe.
107
127
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-containerrecipe.html#cfn-imagebuilder-containerrecipe-name}
@@ -74,6 +74,26 @@ export type ImageBuilderImageRecipeAttribs = {
74
74
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-imagerecipe.html#cfn-imagebuilder-imagerecipe-arn}
75
75
  */
76
76
  Arn: string;
77
+ /**
78
+ * The latest version ARN of the created image recipe.
79
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-imagebuilder-imagerecipe-latestversion.html#cfn-imagebuilder-imagerecipe-latestversion-arn}
80
+ */
81
+ "LatestVersion.Arn": string;
82
+ /**
83
+ * The latest version ARN of the created image recipe, with the same major version.
84
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-imagebuilder-imagerecipe-latestversion.html#cfn-imagebuilder-imagerecipe-latestversion-major}
85
+ */
86
+ "LatestVersion.Major": string;
87
+ /**
88
+ * The latest version ARN of the created image recipe, with the same minor version.
89
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-imagebuilder-imagerecipe-latestversion.html#cfn-imagebuilder-imagerecipe-latestversion-minor}
90
+ */
91
+ "LatestVersion.Minor": string;
92
+ /**
93
+ * The latest version ARN of the created image recipe, with the same patch version.
94
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-imagebuilder-imagerecipe-latestversion.html#cfn-imagebuilder-imagerecipe-latestversion-patch}
95
+ */
96
+ "LatestVersion.Patch": string;
77
97
  /**
78
98
  * The name of the image recipe.
79
99
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-imagerecipe.html#cfn-imagebuilder-imagerecipe-name}
@@ -15,7 +15,7 @@ export type KinesisStreamProps = {
15
15
  */
16
16
  DesiredShardLevelMetrics?: EnhancedMetric[] | undefined;
17
17
  /**
18
- * Maximum size of a data record in KiB allowed to be put into Kinesis stream.
18
+ * The maximum record size of a single record in kibibyte (KiB) that you can write to, and read from a stream.
19
19
  * @min 1024
20
20
  * @max 10240
21
21
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kinesis-stream.html#cfn-kinesis-stream-maxrecordsizeinkib}
@@ -59,6 +59,11 @@ export type KinesisStreamProps = {
59
59
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kinesis-stream.html#cfn-kinesis-stream-tags}
60
60
  */
61
61
  Tags?: Tag[] | undefined;
62
+ /**
63
+ * The target warm throughput in MB/s that the stream should be scaled to handle. This represents the throughput capacity that will be immediately available for write operations.
64
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kinesis-stream.html#cfn-kinesis-stream-warmthroughputmibps}
65
+ */
66
+ WarmThroughputMiBps?: number | undefined;
62
67
  };
63
68
  /**
64
69
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kinesis-stream.html#aws-resource-kinesis-stream-return-values}
@@ -133,6 +133,9 @@ export type KMSKeyProps = {
133
133
  * - `ECC_NIST_P256` (secp256r1)
134
134
  * - `ECC_NIST_P384` (secp384r1)
135
135
  * - `ECC_NIST_P521` (secp521r1)
136
+ * - `ECC_NIST_EDWARDS25519` (ed25519) - signing and verification only
137
+ *
138
+ * - *Note:* For ECC_NIST_EDWARDS25519 KMS keys, the ED25519_SHA_512 signing algorithm requires [`MessageType:RAW`](https://docs.aws.amazon.com/kms/latest/APIReference/API_Sign.html#KMS-Sign-request-MessageType) , while ED25519_PH_SHA_512 requires [`MessageType:DIGEST`](https://docs.aws.amazon.com/kms/latest/APIReference/API_Sign.html#KMS-Sign-request-MessageType) . These message types cannot be used interchangeably.
136
139
  * - Other asymmetric elliptic curve key pairs (signing and verification)
137
140
  *
138
141
  * - `ECC_SECG_P256K1` (secp256k1), commonly used for cryptocurrencies.
@@ -123,6 +123,10 @@ export type LambdaEventSourceMappingProps = {
123
123
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-eventsourcemapping.html#cfn-lambda-eventsourcemapping-kmskeyarn}
124
124
  */
125
125
  KmsKeyArn?: string | undefined;
126
+ /**
127
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-eventsourcemapping.html#cfn-lambda-eventsourcemapping-loggingconfig}
128
+ */
129
+ LoggingConfig?: LoggingConfig | undefined;
126
130
  /**
127
131
  * The maximum amount of time, in seconds, that Lambda spends gathering records before invoking the function.
128
132
  *
@@ -342,6 +346,16 @@ export type FilterCriteria = {
342
346
  */
343
347
  Filters?: Filter[] | undefined;
344
348
  };
349
+ /**
350
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-eventsourcemapping-loggingconfig.html}
351
+ */
352
+ export type LoggingConfig = {
353
+ /**
354
+ * Event source mapping log granularity level override
355
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-eventsourcemapping-loggingconfig.html#cfn-lambda-eventsourcemapping-loggingconfig-systemloglevel}
356
+ */
357
+ SystemLogLevel?: "DEBUG" | "INFO" | "WARN" | undefined;
358
+ };
345
359
  /**
346
360
  * The metrics configuration for your event source. Use this configuration object to define which metrics you want your event source mapping to produce.
347
361
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-eventsourcemapping-metricsconfig.html}
@@ -351,7 +365,7 @@ export type MetricsConfig = {
351
365
  * The metrics you want your event source mapping to produce. Include `EventCount` to receive event source mapping metrics related to the number of events processed by your event source mapping. For more information about these metrics, see [Event source mapping metrics](https://docs.aws.amazon.com/lambda/latest/dg/monitoring-metrics-types.html#event-source-mapping-metrics) .
352
366
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-eventsourcemapping-metricsconfig.html#cfn-lambda-eventsourcemapping-metricsconfig-metrics}
353
367
  */
354
- Metrics?: "EventCount"[] | undefined;
368
+ Metrics?: ("EventCount" | "ErrorCount" | "KafkaMetrics")[] | undefined;
355
369
  };
356
370
  /**
357
371
  * A destination for events that failed processing. For more information, see [Adding a destination](https://docs.aws.amazon.com/lambda/latest/dg/invocation-async-retain-records.html#invocation-async-destinations) .
@@ -368,7 +382,7 @@ export type OnFailure = {
368
382
  * To retain records of failed invocations from [Kinesis](https://docs.aws.amazon.com/lambda/latest/dg/with-kinesis.html) , [DynamoDB](https://docs.aws.amazon.com/lambda/latest/dg/with-ddb.html) , [self-managed Kafka](https://docs.aws.amazon.com/lambda/latest/dg/with-kafka.html#services-smaa-onfailure-destination) or [Amazon MSK](https://docs.aws.amazon.com/lambda/latest/dg/with-msk.html#services-msk-onfailure-destination) , you can configure an Amazon SNS topic, Amazon SQS queue, or Amazon S3 bucket as the destination.
369
383
  * @minLength 12
370
384
  * @maxLength 1024
371
- * @pattern arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1})?:(\d{12})?:(.*)
385
+ * @pattern ^$|kafka://([^.]([a-zA-Z0-9\-_.]{0,248}))|arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1})?:(\d{12})?:(.*)
372
386
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-eventsourcemapping-onfailure.html#cfn-lambda-eventsourcemapping-onfailure-destination}
373
387
  */
374
388
  Destination?: string | undefined;
@@ -392,6 +406,12 @@ export type ProvisionedPollerConfig = {
392
406
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-eventsourcemapping-provisionedpollerconfig.html#cfn-lambda-eventsourcemapping-provisionedpollerconfig-minimumpollers}
393
407
  */
394
408
  MinimumPollers?: number | undefined;
409
+ /**
410
+ * @minLength 0
411
+ * @maxLength 128
412
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-eventsourcemapping-provisionedpollerconfig.html#cfn-lambda-eventsourcemapping-provisionedpollerconfig-pollergroupname}
413
+ */
414
+ PollerGroupName?: string | undefined;
395
415
  };
396
416
  /**
397
417
  * (Amazon SQS only) The scaling configuration for the event source. To remove the configuration, pass an empty value.
@@ -14,7 +14,7 @@ export type MacieSession = ResourceDefinitionWithAttributes<"AWS::Macie::Session
14
14
  */
15
15
  export type MacieSessionProps = {
16
16
  /**
17
- * Specifies how often Amazon Macie publishes updates to policy findings for the account. This includes publishing updates to AWS Security Hub and Amazon EventBridge (formerly Amazon CloudWatch Events ). Valid values are:
17
+ * Specifies how often Amazon Macie publishes updates to policy findings for the account. This includes publishing updates to Security Hub and Amazon EventBridge (formerly Amazon CloudWatch Events ). Valid values are:
18
18
  *
19
19
  * - FIFTEEN_MINUTES
20
20
  * - ONE_HOUR
@@ -210,6 +210,34 @@ export type FailoverConfig = {
210
210
  */
211
211
  State?: "ENABLED" | "DISABLED" | undefined;
212
212
  };
213
+ /**
214
+ * The configuration that defines how content is encrypted during transit between the MediaConnect router and a MediaConnect flow.
215
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flow-flowtransitencryption.html}
216
+ */
217
+ export type FlowTransitEncryption = {
218
+ /**
219
+ * Configuration settings for flow transit encryption keys.
220
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flow-flowtransitencryption.html#cfn-mediaconnect-flow-flowtransitencryption-encryptionkeyconfiguration}
221
+ */
222
+ EncryptionKeyConfiguration: FlowTransitEncryptionKeyConfiguration;
223
+ /**
224
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flow-flowtransitencryption.html#cfn-mediaconnect-flow-flowtransitencryption-encryptionkeytype}
225
+ */
226
+ EncryptionKeyType?: FlowTransitEncryptionKeyType | undefined;
227
+ };
228
+ /**
229
+ * Configuration settings for flow transit encryption keys.
230
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flow-flowtransitencryptionkeyconfiguration.html}
231
+ */
232
+ export type FlowTransitEncryptionKeyConfiguration = {
233
+ SecretsManager: SecretsManagerEncryptionKeyConfiguration;
234
+ } | {
235
+ Automatic: Record<string, unknown>;
236
+ };
237
+ /**
238
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flow-flowtransitencryptionkeytype.html}
239
+ */
240
+ export type FlowTransitEncryptionKeyType = "SECRETS_MANAGER" | "AUTOMATIC";
213
241
  /**
214
242
  * A set of parameters that define the media stream.
215
243
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flow-fmtp.html}
@@ -447,6 +475,24 @@ export type NdiDiscoveryServerConfig = {
447
475
  */
448
476
  VpcInterfaceAdapter: string;
449
477
  };
478
+ /**
479
+ * The configuration settings for transit encryption of a flow source using AWS Secrets Manager, including the secret ARN and role ARN.
480
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flow-secretsmanagerencryptionkeyconfiguration.html}
481
+ */
482
+ export type SecretsManagerEncryptionKeyConfiguration = {
483
+ /**
484
+ * The ARN of the IAM role used for transit encryption from the router output using AWS Secrets Manager.
485
+ * @pattern ^arn:(aws[a-zA-Z-]*):iam::[0-9]{12}:role/[a-zA-Z0-9_+=,.@-]+$
486
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flow-secretsmanagerencryptionkeyconfiguration.html#cfn-mediaconnect-flow-secretsmanagerencryptionkeyconfiguration-rolearn}
487
+ */
488
+ RoleArn: string;
489
+ /**
490
+ * The ARN of the AWS Secrets Manager secret used for transit encryption from the router output.
491
+ * @pattern ^arn:(aws[a-zA-Z-]*):secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+$
492
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flow-secretsmanagerencryptionkeyconfiguration.html#cfn-mediaconnect-flow-secretsmanagerencryptionkeyconfiguration-secretarn}
493
+ */
494
+ SecretArn: string;
495
+ };
450
496
  /**
451
497
  * Configures settings for the `SilentAudio` metric.
452
498
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flow-silentaudio.html}
@@ -536,6 +582,15 @@ export type Source = {
536
582
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flow-source.html#cfn-mediaconnect-flow-source-protocol}
537
583
  */
538
584
  Protocol?: "zixi-push" | "rtp-fec" | "rtp" | "rist" | "fujitsu-qos" | "srt-listener" | "srt-caller" | "st2110-jpegxs" | "cdi" | undefined;
585
+ /**
586
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flow-source.html#cfn-mediaconnect-flow-source-routerintegrationstate}
587
+ */
588
+ RouterIntegrationState?: "ENABLED" | "DISABLED" | undefined;
589
+ /**
590
+ * The configuration that defines how content is encrypted during transit between the MediaConnect router and a MediaConnect flow.
591
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flow-source.html#cfn-mediaconnect-flow-source-routerintegrationtransitdecryption}
592
+ */
593
+ RouterIntegrationTransitDecryption?: FlowTransitEncryption | undefined;
539
594
  /**
540
595
  * The port that the flow uses to send outbound requests to initiate connection with the sender.
541
596
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flow-source.html#cfn-mediaconnect-flow-source-sendercontrolport}