@propulsionworks/cloudformation 0.1.34 → 0.1.36

package/out/exports/resources.generated/aws-lex-botalias.d.ts

@@ -1,6 +1,6 @@
 import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
 /**
- * > Amazon Lex V2 is the only supported version in AWS CloudFormation .
+ * > Amazon Lex V2 is the only supported version in CloudFormation .
  *
  * Specifies an alias for the specified version of a bot. Use an alias to enable you to change the version of a bot without updating applications that use the bot.
  *
@@ -9,7 +9,7 @@ import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
  */
 export type LexBotAlias = ResourceDefinitionWithAttributes<"AWS::Lex::BotAlias", LexBotAliasProps, LexBotAliasAttribs>;
 /**
- * > Amazon Lex V2 is the only supported version in AWS CloudFormation .
+ * > Amazon Lex V2 is the only supported version in CloudFormation .
  *
  * Specifies an alias for the specified version of a bot. Use an alias to enable you to change the version of a bot without updating applications that use the bot.
  *

package/out/exports/resources.generated/aws-lex-botversion.d.ts

@@ -1,6 +1,6 @@
 import type { ResourceDefinitionWithAttributes } from "../main.ts";
 /**
- * > Amazon Lex V2 is the only supported version in AWS CloudFormation .
+ * > Amazon Lex V2 is the only supported version in CloudFormation .
  *
  * Specifies a new version of the bot based on the `DRAFT` version. If the `DRAFT` version of this resource hasn't changed since you created the last version, Amazon Lex doesn't create a new version, it returns the last created version.
  *
@@ -9,7 +9,7 @@ import type { ResourceDefinitionWithAttributes } from "../main.ts";
  */
 export type LexBotVersion = ResourceDefinitionWithAttributes<"AWS::Lex::BotVersion", LexBotVersionProps, LexBotVersionAttribs>;
 /**
- * > Amazon Lex V2 is the only supported version in AWS CloudFormation .
+ * > Amazon Lex V2 is the only supported version in CloudFormation .
  *
  * Specifies a new version of the bot based on the `DRAFT` version. If the `DRAFT` version of this resource hasn't changed since you created the last version, Amazon Lex doesn't create a new version, it returns the last created version.
  *

package/out/exports/resources.generated/aws-lex-resourcepolicy.d.ts

@@ -1,13 +1,13 @@
 import type { ResourceDefinitionWithAttributes, PolicyDocument } from "../main.ts";
 /**
- * > Amazon Lex V2 is the only supported version in AWS CloudFormation .
+ * > Amazon Lex V2 is the only supported version in CloudFormation .
  *
  * Specifies a new resource policy with the specified policy statements.
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lex-resourcepolicy.html}
  */
 export type LexResourcePolicy = ResourceDefinitionWithAttributes<"AWS::Lex::ResourcePolicy", LexResourcePolicyProps, LexResourcePolicyAttribs>;
 /**
- * > Amazon Lex V2 is the only supported version in AWS CloudFormation .
+ * > Amazon Lex V2 is the only supported version in CloudFormation .
  *
  * Specifies a new resource policy with the specified policy statements.
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lex-resourcepolicy.html}

package/out/exports/resources.generated/aws-licensemanager-grant.d.ts

@@ -2,14 +2,14 @@ import type { ResourceDefinitionWithAttributes } from "../main.ts";
 /**
  * Specifies a grant.
  *
- * A grant shares the use of license entitlements with specific AWS accounts . For more information, see [Granted licenses](https://docs.aws.amazon.com/license-manager/latest/userguide/granted-licenses.html) in the *AWS License Manager User Guide* .
+ * A grant shares the use of license entitlements with specific AWS accounts . For more information, see [Granted licenses](https://docs.aws.amazon.com/license-manager/latest/userguide/granted-licenses.html) in the *License Manager User Guide* .
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-licensemanager-grant.html}
  */
 export type LicenseManagerGrant = ResourceDefinitionWithAttributes<"AWS::LicenseManager::Grant", LicenseManagerGrantProps, LicenseManagerGrantAttribs>;
 /**
  * Specifies a grant.
  *
- * A grant shares the use of license entitlements with specific AWS accounts . For more information, see [Granted licenses](https://docs.aws.amazon.com/license-manager/latest/userguide/granted-licenses.html) in the *AWS License Manager User Guide* .
+ * A grant shares the use of license entitlements with specific AWS accounts . For more information, see [Granted licenses](https://docs.aws.amazon.com/license-manager/latest/userguide/granted-licenses.html) in the *License Manager User Guide* .
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-licensemanager-grant.html}
  */
 export type LicenseManagerGrantProps = {

package/out/exports/resources.generated/aws-licensemanager-license.d.ts

@@ -2,14 +2,14 @@ import type { ResourceDefinitionWithAttributes } from "../main.ts";
 /**
  * Specifies a granted license.
  *
- * Granted licenses are licenses for products that your organization purchased from AWS Marketplace or directly from a seller who integrated their software with managed entitlements. For more information, see [Granted licenses](https://docs.aws.amazon.com/license-manager/latest/userguide/granted-licenses.html) in the *AWS License Manager User Guide* .
+ * Granted licenses are licenses for products that your organization purchased from AWS Marketplace or directly from a seller who integrated their software with managed entitlements. For more information, see [Granted licenses](https://docs.aws.amazon.com/license-manager/latest/userguide/granted-licenses.html) in the *License Manager User Guide* .
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-licensemanager-license.html}
  */
 export type LicenseManagerLicense = ResourceDefinitionWithAttributes<"AWS::LicenseManager::License", LicenseManagerLicenseProps, LicenseManagerLicenseAttribs>;
 /**
  * Specifies a granted license.
  *
- * Granted licenses are licenses for products that your organization purchased from AWS Marketplace or directly from a seller who integrated their software with managed entitlements. For more information, see [Granted licenses](https://docs.aws.amazon.com/license-manager/latest/userguide/granted-licenses.html) in the *AWS License Manager User Guide* .
+ * Granted licenses are licenses for products that your organization purchased from AWS Marketplace or directly from a seller who integrated their software with managed entitlements. For more information, see [Granted licenses](https://docs.aws.amazon.com/license-manager/latest/userguide/granted-licenses.html) in the *License Manager User Guide* .
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-licensemanager-license.html}
  */
 export type LicenseManagerLicenseProps = {

package/out/exports/resources.generated/aws-lightsail-container.d.ts

@@ -31,7 +31,7 @@ export type LightsailContainerProps = {
      */
     Power: string;
     /**
-     * An object that describes the configuration for the container service to access private container image repositories, such as Amazon Elastic Container Registry ( Amazon ECR ) private repositories.
+     * An object that describes the configuration for the container service to access private container image repositories, such as  ( Amazon ECR ) private repositories.
      *
      * For more information, see [Configuring access to an Amazon ECR private repository for an Amazon Lightsail container service](https://docs.aws.amazon.com/lightsail/latest/userguide/amazon-lightsail-container-service-ecr-private-repo-access) in the *Amazon Lightsail Developer Guide* .
      * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lightsail-container.html#cfn-lightsail-container-privateregistryaccess}
@@ -225,7 +225,7 @@ export type PortInfo = {
     Protocol?: string | undefined;
 };
 /**
- * Describes the configuration for an Amazon Lightsail container service to access private container image repositories, such as Amazon Elastic Container Registry ( Amazon ECR ) private repositories.
+ * Describes the configuration for an Amazon Lightsail container service to access private container image repositories, such as  ( Amazon ECR ) private repositories.
  *
  * For more information, see [Configuring access to an Amazon ECR private repository for an Amazon Lightsail container service](https://docs.aws.amazon.com/lightsail/latest/userguide/amazon-lightsail-container-service-ecr-private-repo-access) in the *Amazon Lightsail Developer Guide* .
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lightsail-container-privateregistryaccess.html}

package/out/exports/resources.generated/aws-logs-integration.d.ts

@@ -71,7 +71,7 @@ export type OpenSearchResourceConfig = {
      */
     DataSourceRoleArn: string;
     /**
-     * To have the vended dashboard data encrypted with AWS KMS instead of the CloudWatch Logs default encryption method, specify the ARN of the AWS KMS key that you want to use.
+     * To have the vended dashboard data encrypted with AWS  instead of the CloudWatch Logs default encryption method, specify the ARN of the AWS  key that you want to use.
      * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-logs-integration-opensearchresourceconfig.html#cfn-logs-integration-opensearchresourceconfig-kmskeyarn}
      */
     KmsKeyArn?: string | undefined;

package/out/exports/resources.generated/aws-logs-loganomalydetector.d.ts

@@ -52,9 +52,9 @@ export type LogsLogAnomalyDetectorProps = {
      */
     FilterPattern?: string | undefined;
     /**
-     * Optionally assigns a AWS KMS key to secure this anomaly detector and its findings. If a key is assigned, the anomalies found and the model used by this detector are encrypted at rest with the key. If a key is assigned to an anomaly detector, a user must have permissions for both this key and for the anomaly detector to retrieve information about the anomalies that it finds.
+     * Optionally assigns a AWS  key to secure this anomaly detector and its findings. If a key is assigned, the anomalies found and the model used by this detector are encrypted at rest with the key. If a key is assigned to an anomaly detector, a user must have permissions for both this key and for the anomaly detector to retrieve information about the anomalies that it finds.
      *
-     * For more information about using a AWS KMS key and to see the required IAM policy, see [Use a AWS KMS key with an anomaly detector](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/LogsAnomalyDetection-KMS.html) .
+     * For more information about using a AWS  key and to see the required IAM policy, see [Use a AWS  key with an anomaly detector](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/LogsAnomalyDetection-KMS.html) .
      * @maxLength 256
      * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-logs-loganomalydetector.html#cfn-logs-loganomalydetector-kmskeyid}
      */

package/out/exports/resources.generated/aws-logs-loggroup.d.ts

@@ -36,13 +36,13 @@ export type LogsLogGroupProps = {
      */
     FieldIndexPolicies?: Record<string, unknown>[] | undefined;
     /**
-     * The Amazon Resource Name (ARN) of the AWS KMS key to use when encrypting log data.
+     * The Amazon Resource Name (ARN) of the AWS  key to use when encrypting log data.
      *
-     * To associate an AWS KMS key with the log group, specify the ARN of that KMS key here. If you do so, ingested data is encrypted using this key. This association is stored as long as the data encrypted with the KMS key is still within CloudWatch Logs . This enables CloudWatch Logs to decrypt this data whenever it is requested.
+     * To associate an AWS  key with the log group, specify the ARN of that KMS key here. If you do so, ingested data is encrypted using this key. This association is stored as long as the data encrypted with the KMS key is still within CloudWatch Logs . This enables CloudWatch Logs to decrypt this data whenever it is requested.
      *
      * If you attempt to associate a KMS key with the log group but the KMS key doesn't exist or is deactivated, you will receive an `InvalidParameterException` error.
      *
-     * Log group data is always encrypted in CloudWatch Logs . If you omit this key, the encryption does not use AWS KMS . For more information, see [Encrypt log data in CloudWatch Logs using AWS Key Management Service](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/encrypt-log-data-kms.html)
+     * Log group data is always encrypted in CloudWatch Logs . If you omit this key, the encryption does not use AWS  . For more information, see [Encrypt log data in CloudWatch Logs using AWS Key Management Service](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/encrypt-log-data-kms.html)
      * @maxLength 256
      * @pattern ^arn:[a-z0-9-]+:kms:[a-z0-9-]+:\d{12}:(key|alias)/.+\Z
      * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-logs-loggroup.html#cfn-logs-loggroup-kmskeyid}

package/out/exports/resources.generated/aws-logs-transformer.d.ts

@@ -166,7 +166,7 @@ export type ParseRoute53 = {
 /**
  * This processor converts logs into [Open Cybersecurity Schema Framework (OCSF)](https://docs.aws.amazon.com/https://ocsf.io) events.
  *
- * For more information about this processor including examples, see [parseToOSCF](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation.html#CloudWatch-Logs-Transformation-parseToOCSF) in the *CloudWatch Logs User Guide* .
+ * For more information about this processor including examples, see [parseToOCSF](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation.html#CloudWatch-Logs-Transformation-parseToOCSF) in the *CloudWatch Logs User Guide* .
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-logs-transformer-parsetoocsf.html}
  */
 export type ParseToOCSF = {

package/out/exports/resources.generated/aws-lookoutequipment-inferencescheduler.d.ts

@@ -2,14 +2,14 @@ import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
 /**
  * Creates a scheduled inference. Scheduling an inference is setting up a continuous real-time inference plan to analyze new measurement data. When setting up the schedule, you provide an Amazon S3 bucket location for the input data, assign it a delimiter between separate entries in the data, set an offset delay if desired, and set the frequency of inferencing. You must also provide an Amazon S3 bucket location for the output data.
  *
- * > Updating some properties below (for example, InferenceSchedulerName and ServerSideKmsKeyId) triggers a resource replacement, which requires a new model. To replace such a property using AWS CloudFormation , but without creating a completely new stack, you must replace ModelName. If you need to replace the property, but want to use the same model, delete the current stack and create a new one with the updated properties.
+ * > Updating some properties below (for example, InferenceSchedulerName and ServerSideKmsKeyId) triggers a resource replacement, which requires a new model. To replace such a property using CloudFormation , but without creating a completely new stack, you must replace ModelName. If you need to replace the property, but want to use the same model, delete the current stack and create a new one with the updated properties.
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lookoutequipment-inferencescheduler.html}
  */
 export type LookoutEquipmentInferenceScheduler = ResourceDefinitionWithAttributes<"AWS::LookoutEquipment::InferenceScheduler", LookoutEquipmentInferenceSchedulerProps, LookoutEquipmentInferenceSchedulerAttribs>;
 /**
  * Creates a scheduled inference. Scheduling an inference is setting up a continuous real-time inference plan to analyze new measurement data. When setting up the schedule, you provide an Amazon S3 bucket location for the input data, assign it a delimiter between separate entries in the data, set an offset delay if desired, and set the frequency of inferencing. You must also provide an Amazon S3 bucket location for the output data.
  *
- * > Updating some properties below (for example, InferenceSchedulerName and ServerSideKmsKeyId) triggers a resource replacement, which requires a new model. To replace such a property using AWS CloudFormation , but without creating a completely new stack, you must replace ModelName. If you need to replace the property, but want to use the same model, delete the current stack and create a new one with the updated properties.
+ * > Updating some properties below (for example, InferenceSchedulerName and ServerSideKmsKeyId) triggers a resource replacement, which requires a new model. To replace such a property using CloudFormation , but without creating a completely new stack, you must replace ModelName. If you need to replace the property, but want to use the same model, delete the current stack and create a new one with the updated properties.
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lookoutequipment-inferencescheduler.html}
  */
 export type LookoutEquipmentInferenceSchedulerProps = {
@@ -77,7 +77,7 @@ export type LookoutEquipmentInferenceSchedulerProps = {
      */
     RoleArn: string;
     /**
-     * Provides the identifier of the AWS KMS key used to encrypt inference scheduler data by Amazon Lookout for Equipment .
+     * Provides the identifier of the AWS KMS key used to encrypt inference scheduler data by  .
      * @minLength 1
      * @maxLength 2048
      * @pattern ^[A-Za-z0-9][A-Za-z0-9:_/+=,@.-]{0,2048}$

package/out/exports/resources.generated/aws-macie-allowlist.d.ts

@@ -76,12 +76,12 @@ export type MacieAllowListAttribs = {
      * The current status of the allow list, which indicates whether Amazon Macie can access and use the list's criteria. If the list's criteria specify a regular expression ( `Regex` ), this value is typically `OK` . Macie can compile the expression. If the list's criteria specify an Amazon S3 object ( `S3WordsList` ), possible values are:
      *
      * - `OK` - Macie can retrieve and parse the contents of the object.
-     * - `S3_OBJECT_ACCESS_DENIED` - Macie isn't allowed to access the object or the object is encrypted with a customer managed AWS KMS key that Macie isn't allowed to use. Check the bucket policy and other permissions settings for the bucket and the object. If the object is encrypted, also ensure that it's encrypted with a key that Macie is allowed to use.
+     * - `S3_OBJECT_ACCESS_DENIED` - Macie isn't allowed to access the object or the object is encrypted with a customer managed AWS  key that Macie isn't allowed to use. Check the bucket policy and other permissions settings for the bucket and the object. If the object is encrypted, also ensure that it's encrypted with a key that Macie is allowed to use.
      * - `S3_OBJECT_EMPTY` - Macie can retrieve the object but the object doesn't contain any content. Ensure that the object contains the correct entries. Also ensure that the list's criteria specify the correct bucket and object names.
      * - `S3_OBJECT_NOT_FOUND` - The object doesn't exist in Amazon S3 . Ensure that the list's criteria specify the correct bucket and object names.
      * - `S3_OBJECT_OVERSIZE` - Macie can retrieve the object. However, the object contains too many entries or its storage size exceeds the quota for an allow list. Try breaking the list into multiple files and ensure that each file doesn't exceed any quotas. Then configure list settings in Macie for each file.
      * - `S3_THROTTLED` - Amazon S3 throttled the request to retrieve the object. Wait a few minutes and then try again.
-     * - `S3_USER_ACCESS_DENIED` - Amazon S3 denied the request to retrieve the object. If the specified object exists, you're not allowed to access it or it's encrypted with an AWS KMS key that you're not allowed to use. Work with your AWS administrator to ensure that the list's criteria specify the correct bucket and object names, and you have read access to the bucket and the object. If the object is encrypted, also ensure that it's encrypted with a key that you're allowed to use.
+     * - `S3_USER_ACCESS_DENIED` - Amazon S3 denied the request to retrieve the object. If the specified object exists, you're not allowed to access it or it's encrypted with an AWS  key that you're not allowed to use. Work with your AWS administrator to ensure that the list's criteria specify the correct bucket and object names, and you have read access to the bucket and the object. If the object is encrypted, also ensure that it's encrypted with a key that you're allowed to use.
      * - `UNKNOWN_ERROR` - A transient or internal error occurred when Macie attempted to retrieve or parse the object. Wait a few minutes and then try again. A list can also have this status if it's encrypted with a key that Amazon S3 and Macie can't access or use.
      *
      * For more information, see [Allow list options and requirements](https://docs.aws.amazon.com/macie/latest/user/allow-lists-options.html) in the *Amazon Macie User Guide* .

package/out/exports/resources.generated/aws-macie-session.d.ts

@@ -14,7 +14,7 @@ export type MacieSession = ResourceDefinitionWithAttributes<"AWS::Macie::Session
  */
 export type MacieSessionProps = {
     /**
-     * Specifies how often Amazon Macie publishes updates to policy findings for the account. This includes publishing updates to AWS Security Hub and Amazon EventBridge (formerly Amazon CloudWatch Events ). Valid values are:
+     * Specifies how often Amazon Macie publishes updates to policy findings for the account. This includes publishing updates to Security Hub and Amazon EventBridge (formerly Amazon CloudWatch Events ). Valid values are:
      *
      * - FIFTEEN_MINUTES
      * - ONE_HOUR

package/out/exports/resources.generated/aws-mediaconnect-flow.d.ts

@@ -128,7 +128,7 @@ export type BlackFrames = {
     ThresholdSeconds?: number | undefined;
 };
 /**
- * Information about the encryption of the flow.
+ * Encryption information.
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flow-encryption.html}
  */
 export type Encryption = {
@@ -210,6 +210,34 @@ export type FailoverConfig = {
      */
     State?: "ENABLED" | "DISABLED" | undefined;
 };
+/**
+ * The configuration that defines how content is encrypted during transit between the MediaConnect router and a MediaConnect flow.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flow-flowtransitencryption.html}
+ */
+export type FlowTransitEncryption = {
+    /**
+     * Configuration settings for flow transit encryption keys.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flow-flowtransitencryption.html#cfn-mediaconnect-flow-flowtransitencryption-encryptionkeyconfiguration}
+     */
+    EncryptionKeyConfiguration: FlowTransitEncryptionKeyConfiguration;
+    /**
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flow-flowtransitencryption.html#cfn-mediaconnect-flow-flowtransitencryption-encryptionkeytype}
+     */
+    EncryptionKeyType?: FlowTransitEncryptionKeyType | undefined;
+};
+/**
+ * Configuration settings for flow transit encryption keys.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flow-flowtransitencryptionkeyconfiguration.html}
+ */
+export type FlowTransitEncryptionKeyConfiguration = {
+    SecretsManager: SecretsManagerEncryptionKeyConfiguration;
+} | {
+    Automatic: Record<string, unknown>;
+};
+/**
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flow-flowtransitencryptionkeytype.html}
+ */
+export type FlowTransitEncryptionKeyType = "SECRETS_MANAGER" | "AUTOMATIC";
 /**
  * A set of parameters that define the media stream.
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flow-fmtp.html}
@@ -447,6 +475,24 @@ export type NdiDiscoveryServerConfig = {
      */
     VpcInterfaceAdapter: string;
 };
+/**
+ * The configuration settings for transit encryption of a flow source using AWS Secrets Manager, including the secret ARN and role ARN.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flow-secretsmanagerencryptionkeyconfiguration.html}
+ */
+export type SecretsManagerEncryptionKeyConfiguration = {
+    /**
+     * The ARN of the IAM role used for transit encryption from the router output using AWS Secrets Manager.
+     * @pattern ^arn:(aws[a-zA-Z-]*):iam::[0-9]{12}:role/[a-zA-Z0-9_+=,.@-]+$
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flow-secretsmanagerencryptionkeyconfiguration.html#cfn-mediaconnect-flow-secretsmanagerencryptionkeyconfiguration-rolearn}
+     */
+    RoleArn: string;
+    /**
+     * The ARN of the AWS Secrets Manager secret used for transit encryption from the router output.
+     * @pattern ^arn:(aws[a-zA-Z-]*):secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+$
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flow-secretsmanagerencryptionkeyconfiguration.html#cfn-mediaconnect-flow-secretsmanagerencryptionkeyconfiguration-secretarn}
+     */
+    SecretArn: string;
+};
 /**
  * Configures settings for the `SilentAudio` metric.
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flow-silentaudio.html}
@@ -536,6 +582,16 @@ export type Source = {
      * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flow-source.html#cfn-mediaconnect-flow-source-protocol}
      */
     Protocol?: "zixi-push" | "rtp-fec" | "rtp" | "rist" | "fujitsu-qos" | "srt-listener" | "srt-caller" | "st2110-jpegxs" | "cdi" | undefined;
+    /**
+     * Indicates if router integration is enabled or disabled on the flow source.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flow-source.html#cfn-mediaconnect-flow-source-routerintegrationstate}
+     */
+    RouterIntegrationState?: "ENABLED" | "DISABLED" | undefined;
+    /**
+     * The decryption configuration for the flow source when router integration is enabled.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flow-source.html#cfn-mediaconnect-flow-source-routerintegrationtransitdecryption}
+     */
+    RouterIntegrationTransitDecryption?: FlowTransitEncryption | undefined;
     /**
      * The port that the flow uses to send outbound requests to initiate connection with the sender.
      * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flow-source.html#cfn-mediaconnect-flow-source-sendercontrolport}

package/out/exports/resources.generated/aws-mediaconnect-flowentitlement.d.ts

@@ -21,7 +21,7 @@ export type MediaConnectFlowEntitlementProps = {
      */
     Description: string;
     /**
-     * Information about the encryption of the flow.
+     * Encryption information.
      * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediaconnect-flowentitlement.html#cfn-mediaconnect-flowentitlement-encryption}
      */
     Encryption?: Encryption | undefined;
@@ -57,7 +57,7 @@ export type MediaConnectFlowEntitlementAttribs = {
     EntitlementArn: string;
 };
 /**
- * Information about the encryption of the flow.
+ * Encryption information.
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flowentitlement-encryption.html}
  */
 export type Encryption = {

package/out/exports/resources.generated/aws-mediaconnect-flowoutput.d.ts

@@ -80,12 +80,21 @@ export type MediaConnectFlowOutputProps = {
      * > AWS Elemental MediaConnect no longer supports the Fujitsu QoS protocol. This reference is maintained for legacy purposes only.
      * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediaconnect-flowoutput.html#cfn-mediaconnect-flowoutput-protocol}
      */
-    Protocol: "zixi-push" | "rtp-fec" | "rtp" | "zixi-pull" | "rist" | "fujitsu-qos" | "srt-listener" | "srt-caller" | "st2110-jpegxs" | "cdi" | "ndi-speed-hq";
+    Protocol?: "zixi-push" | "rtp-fec" | "rtp" | "zixi-pull" | "rist" | "fujitsu-qos" | "srt-listener" | "srt-caller" | "st2110-jpegxs" | "cdi" | "ndi-speed-hq" | undefined;
     /**
      * The remote ID for the Zixi-pull stream.
      * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediaconnect-flowoutput.html#cfn-mediaconnect-flowoutput-remoteid}
      */
     RemoteId?: string | undefined;
+    /**
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediaconnect-flowoutput.html#cfn-mediaconnect-flowoutput-routerintegrationstate}
+     */
+    RouterIntegrationState?: "ENABLED" | "DISABLED" | undefined;
+    /**
+     * Encryption information.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediaconnect-flowoutput.html#cfn-mediaconnect-flowoutput-routerintegrationtransitencryption}
+     */
+    RouterIntegrationTransitEncryption?: FlowTransitEncryption | undefined;
     /**
      * The smoothing latency in milliseconds for RIST, RTP, and RTP-FEC streams.
      * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediaconnect-flowoutput.html#cfn-mediaconnect-flowoutput-smoothinglatency}
@@ -150,7 +159,7 @@ export type EncodingParameters = {
     EncoderProfile?: "main" | "high" | undefined;
 };
 /**
- * Information about the encryption of the flow.
+ * Encryption information.
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flowoutput-encryption.html}
  */
 export type Encryption = {
@@ -176,6 +185,34 @@ export type Encryption = {
      */
     SecretArn: string;
 };
+/**
+ * The configuration that defines how content is encrypted during transit between the MediaConnect router and a MediaConnect flow.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flowoutput-flowtransitencryption.html}
+ */
+export type FlowTransitEncryption = {
+    /**
+     * Configuration settings for flow transit encryption keys.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flowoutput-flowtransitencryption.html#cfn-mediaconnect-flowoutput-flowtransitencryption-encryptionkeyconfiguration}
+     */
+    EncryptionKeyConfiguration: FlowTransitEncryptionKeyConfiguration;
+    /**
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flowoutput-flowtransitencryption.html#cfn-mediaconnect-flowoutput-flowtransitencryption-encryptionkeytype}
+     */
+    EncryptionKeyType?: FlowTransitEncryptionKeyType | undefined;
+};
+/**
+ * Configuration settings for flow transit encryption keys.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flowoutput-flowtransitencryptionkeyconfiguration.html}
+ */
+export type FlowTransitEncryptionKeyConfiguration = {
+    SecretsManager: SecretsManagerEncryptionKeyConfiguration;
+} | {
+    Automatic: Record<string, unknown>;
+};
+/**
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flowoutput-flowtransitencryptionkeytype.html}
+ */
+export type FlowTransitEncryptionKeyType = "SECRETS_MANAGER" | "AUTOMATIC";
 /**
  * The VPC interface that is used for the media stream associated with the source or output.
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flowoutput-interface.html}
@@ -213,6 +250,24 @@ export type MediaStreamOutputConfiguration = {
      */
     MediaStreamName: string;
 };
+/**
+ * The configuration settings for transit encryption of a flow output using AWS Secrets Manager, including the secret ARN and role ARN.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flowoutput-secretsmanagerencryptionkeyconfiguration.html}
+ */
+export type SecretsManagerEncryptionKeyConfiguration = {
+    /**
+     * The ARN of the IAM role used for transit encryption to the router input using AWS Secrets Manager.
+     * @pattern ^arn:(aws[a-zA-Z-]*):iam::[0-9]{12}:role/[a-zA-Z0-9_+=,.@-]+$
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flowoutput-secretsmanagerencryptionkeyconfiguration.html#cfn-mediaconnect-flowoutput-secretsmanagerencryptionkeyconfiguration-rolearn}
+     */
+    RoleArn: string;
+    /**
+     * The ARN of the AWS Secrets Manager secret used for transit encryption to the router input.
+     * @pattern ^arn:(aws[a-zA-Z-]*):secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+$
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flowoutput-secretsmanagerencryptionkeyconfiguration.html#cfn-mediaconnect-flowoutput-secretsmanagerencryptionkeyconfiguration-secretarn}
+     */
+    SecretArn: string;
+};
 /**
  * The settings for attaching a VPC interface to an resource.
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flowoutput-vpcinterfaceattachment.html}

package/out/exports/resources.generated/aws-mediaconnect-flowsource.d.ts

@@ -123,7 +123,7 @@ export type MediaConnectFlowSourceAttribs = {
     SourceIngestPort: string;
 };
 /**
- * Information about the encryption of the flow.
+ * Encryption information.
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flowsource-encryption.html}
  */
 export type Encryption = {