@propulsionworks/cloudformation 0.1.35 → 0.1.36
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/out/exports/resources.generated/alexa-ask-skill.d.ts +1 -1
- package/out/exports/resources.generated/aws-aiops-investigationgroup.d.ts +4 -4
- package/out/exports/resources.generated/aws-amazonmq-broker.d.ts +2 -2
- package/out/exports/resources.generated/aws-amplify-branch.d.ts +2 -2
- package/out/exports/resources.generated/aws-apigateway-apikey.d.ts +1 -1
- package/out/exports/resources.generated/aws-apigateway-domainname.d.ts +6 -1
- package/out/exports/resources.generated/aws-apigateway-domainnamev2.d.ts +6 -1
- package/out/exports/resources.generated/aws-apigateway-method.d.ts +11 -0
- package/out/exports/resources.generated/aws-apigateway-model.d.ts +1 -1
- package/out/exports/resources.generated/aws-apigateway-restapi.d.ts +10 -0
- package/out/exports/resources.generated/aws-appconfig-configurationprofile.d.ts +1 -1
- package/out/exports/resources.generated/aws-appflow-connectorprofile.d.ts +2 -2
- package/out/exports/resources.generated/aws-appflow-flow.d.ts +2 -2
- package/out/exports/resources.generated/aws-apprunner-observabilityconfiguration.d.ts +1 -1
- package/out/exports/resources.generated/aws-apprunner-service.d.ts +1 -1
- package/out/exports/resources.generated/aws-apprunner-vpcconnector.d.ts +1 -1
- package/out/exports/resources.generated/aws-appsync-functionconfiguration.d.ts +2 -2
- package/out/exports/resources.generated/aws-aps-resourcepolicy.d.ts +2 -2
- package/out/exports/resources.generated/aws-aps-workspace.d.ts +1 -1
- package/out/exports/resources.generated/aws-athena-workgroup.d.ts +149 -0
- package/out/exports/resources.generated/aws-backup-backupplan.d.ts +6 -2
- package/out/exports/resources.generated/aws-backup-backupselection.d.ts +2 -2
- package/out/exports/resources.generated/aws-backup-backupvault.d.ts +2 -2
- package/out/exports/resources.generated/aws-backup-framework.d.ts +2 -2
- package/out/exports/resources.generated/aws-backup-logicallyairgappedbackupvault.d.ts +5 -5
- package/out/exports/resources.generated/aws-backup-reportplan.d.ts +2 -2
- package/out/exports/resources.generated/aws-batch-computeenvironment.d.ts +1 -1
- package/out/exports/resources.generated/aws-bedrock-agent.d.ts +1 -1
- package/out/exports/resources.generated/aws-bedrock-blueprint.d.ts +1 -1
- package/out/exports/resources.generated/aws-bedrock-dataautomationproject.d.ts +36 -2
- package/out/exports/resources.generated/aws-bedrock-datasource.d.ts +1 -1
- package/out/exports/resources.generated/aws-bedrock-guardrail.d.ts +1 -1
- package/out/exports/resources.generated/aws-bedrock-knowledgebase.d.ts +108 -3
- package/out/exports/resources.generated/aws-billingconductor-billinggroup.d.ts +3 -101
- package/out/exports/resources.generated/aws-billingconductor-customlineitem.d.ts +1 -1
- package/out/exports/resources.generated/aws-cassandra-table.d.ts +20 -0
- package/out/exports/resources.generated/aws-ce-anomalymonitor.d.ts +10 -2
- package/out/exports/resources.generated/aws-chatbot-microsoftteamschannelconfiguration.d.ts +2 -2
- package/out/exports/resources.generated/aws-chatbot-slackchannelconfiguration.d.ts +2 -2
- package/out/exports/resources.generated/aws-cloudformation-customresource.d.ts +5 -5
- package/out/exports/resources.generated/aws-cloudformation-guardhook.d.ts +3 -3
- package/out/exports/resources.generated/aws-cloudformation-hookdefaultversion.d.ts +2 -2
- package/out/exports/resources.generated/aws-cloudformation-hooktypeconfig.d.ts +2 -2
- package/out/exports/resources.generated/aws-cloudformation-hookversion.d.ts +3 -3
- package/out/exports/resources.generated/aws-cloudformation-lambdahook.d.ts +3 -3
- package/out/exports/resources.generated/aws-cloudformation-macro.d.ts +2 -2
- package/out/exports/resources.generated/aws-cloudformation-moduledefaultversion.d.ts +4 -4
- package/out/exports/resources.generated/aws-cloudformation-moduleversion.d.ts +3 -3
- package/out/exports/resources.generated/aws-cloudformation-publictypeversion.d.ts +4 -4
- package/out/exports/resources.generated/aws-cloudformation-publisher.d.ts +2 -2
- package/out/exports/resources.generated/aws-cloudformation-resourcedefaultversion.d.ts +2 -2
- package/out/exports/resources.generated/aws-cloudformation-resourceversion.d.ts +3 -3
- package/out/exports/resources.generated/aws-cloudformation-stack.d.ts +4 -4
- package/out/exports/resources.generated/aws-cloudformation-stackset.d.ts +19 -14
- package/out/exports/resources.generated/aws-cloudformation-typeactivation.d.ts +2 -2
- package/out/exports/resources.generated/aws-cloudformation-waitcondition.d.ts +4 -4
- package/out/exports/resources.generated/aws-cloudformation-waitconditionhandle.d.ts +2 -2
- package/out/exports/resources.generated/aws-cloudfront-connectionfunction.d.ts +95 -0
- package/out/exports/resources.generated/aws-cloudtrail-eventdatastore.d.ts +3 -3
- package/out/exports/resources.generated/aws-cloudtrail-trail.d.ts +41 -5
- package/out/exports/resources.generated/aws-cloudwatch-alarm.d.ts +1 -1
- package/out/exports/resources.generated/aws-codebuild-sourcecredential.d.ts +2 -2
- package/out/exports/resources.generated/aws-codecommit-repository.d.ts +1 -1
- package/out/exports/resources.generated/aws-codeconnections-connection.d.ts +2 -2
- package/out/exports/resources.generated/aws-codedeploy-application.d.ts +1 -1
- package/out/exports/resources.generated/aws-codedeploy-deploymentconfig.d.ts +1 -1
- package/out/exports/resources.generated/aws-codedeploy-deploymentgroup.d.ts +15 -15
- package/out/exports/resources.generated/aws-codepipeline-pipeline.d.ts +1 -1
- package/out/exports/resources.generated/aws-codestar-githubrepository.d.ts +4 -4
- package/out/exports/resources.generated/aws-codestarconnections-connection.d.ts +2 -2
- package/out/exports/resources.generated/aws-codestarnotifications-notificationrule.d.ts +2 -2
- package/out/exports/resources.generated/aws-cognito-identitypool.d.ts +2 -2
- package/out/exports/resources.generated/aws-cognito-terms.d.ts +54 -0
- package/out/exports/resources.generated/aws-comprehend-documentclassifier.d.ts +1 -1
- package/out/exports/resources.generated/aws-comprehend-flywheel.d.ts +3 -3
- package/out/exports/resources.generated/aws-config-configrule.d.ts +1 -1
- package/out/exports/resources.generated/aws-config-configurationrecorder.d.ts +2 -2
- package/out/exports/resources.generated/aws-config-deliverychannel.d.ts +8 -8
- package/out/exports/resources.generated/aws-connect-evaluationform.d.ts +3 -3
- package/out/exports/resources.generated/aws-customerprofiles-domain.d.ts +16 -0
- package/out/exports/resources.generated/aws-databrew-job.d.ts +1 -1
- package/out/exports/resources.generated/aws-directoryservice-microsoftad.d.ts +6 -6
- package/out/exports/resources.generated/aws-directoryservice-simplead.d.ts +6 -6
- package/out/exports/resources.generated/aws-dms-dataprovider.d.ts +1 -1
- package/out/exports/resources.generated/aws-dms-endpoint.d.ts +4 -4
- package/out/exports/resources.generated/aws-dms-eventsubscription.d.ts +1 -1
- package/out/exports/resources.generated/aws-dms-instanceprofile.d.ts +1 -1
- package/out/exports/resources.generated/aws-dms-replicationconfig.d.ts +2 -2
- package/out/exports/resources.generated/aws-dms-replicationinstance.d.ts +2 -2
- package/out/exports/resources.generated/aws-dms-replicationsubnetgroup.d.ts +1 -1
- package/out/exports/resources.generated/aws-docdb-dbcluster.d.ts +3 -3
- package/out/exports/resources.generated/aws-dsql-cluster.d.ts +6 -1
- package/out/exports/resources.generated/aws-dynamodb-globaltable.d.ts +3 -3
- package/out/exports/resources.generated/aws-dynamodb-table.d.ts +3 -3
- package/out/exports/resources.generated/aws-ec2-ec2fleet.d.ts +8 -0
- package/out/exports/resources.generated/aws-ec2-instanceconnectendpoint.d.ts +2 -2
- package/out/exports/resources.generated/aws-ec2-keypair.d.ts +4 -4
- package/out/exports/resources.generated/aws-ec2-launchtemplate.d.ts +10 -2
- package/out/exports/resources.generated/aws-ec2-natgateway.d.ts +37 -0
- package/out/exports/resources.generated/aws-ec2-securitygroup.d.ts +2 -2
- package/out/exports/resources.generated/aws-ec2-spotfleet.d.ts +8 -0
- package/out/exports/resources.generated/aws-ec2-transitgateway.d.ts +6 -0
- package/out/exports/resources.generated/aws-ec2-transitgatewaymeteringpolicy.d.ts +45 -0
- package/out/exports/resources.generated/aws-ec2-transitgatewaymeteringpolicyentry.d.ts +94 -0
- package/out/exports/resources.generated/aws-ec2-vpcencryptioncontrol.d.ts +150 -0
- package/out/exports/resources.generated/aws-ec2-vpcendpoint.d.ts +10 -0
- package/out/exports/resources.generated/aws-ec2-vpnconcentrator.d.ts +43 -0
- package/out/exports/resources.generated/aws-ec2-vpnconnection.d.ts +21 -0
- package/out/exports/resources.generated/aws-ecr-pulltimeupdateexclusion.d.ts +15 -0
- package/out/exports/resources.generated/aws-ecr-repository.d.ts +4 -4
- package/out/exports/resources.generated/aws-ecr-repositorycreationtemplate.d.ts +4 -4
- package/out/exports/resources.generated/aws-ecr-signingconfiguration.d.ts +63 -0
- package/out/exports/resources.generated/aws-ecs-capacityprovider.d.ts +12 -0
- package/out/exports/resources.generated/aws-ecs-expressgatewayservice.d.ts +207 -0
- package/out/exports/resources.generated/aws-ecs-service.d.ts +18 -18
- package/out/exports/resources.generated/aws-ecs-taskdefinition.d.ts +1 -1
- package/out/exports/resources.generated/aws-eks-cluster.d.ts +21 -6
- package/out/exports/resources.generated/aws-eks-nodegroup.d.ts +3 -3
- package/out/exports/resources.generated/aws-elasticache-cachecluster.d.ts +1 -1
- package/out/exports/resources.generated/aws-elasticloadbalancingv2-targetgroup.d.ts +5 -0
- package/out/exports/resources.generated/aws-elasticsearch-domain.d.ts +1 -1
- package/out/exports/resources.generated/aws-emr-studio.d.ts +1 -1
- package/out/exports/resources.generated/aws-entityresolution-idmappingworkflow.d.ts +1 -1
- package/out/exports/resources.generated/aws-events-archive.d.ts +1 -1
- package/out/exports/resources.generated/aws-events-connection.d.ts +1 -1
- package/out/exports/resources.generated/aws-events-eventbus.d.ts +1 -1
- package/out/exports/resources.generated/aws-events-rule.d.ts +1 -1
- package/out/exports/resources.generated/aws-evidently-experiment.d.ts +6 -6
- package/out/exports/resources.generated/aws-evidently-launch.d.ts +2 -2
- package/out/exports/resources.generated/aws-fms-notificationchannel.d.ts +1 -1
- package/out/exports/resources.generated/aws-fsx-filesystem.d.ts +7 -3
- package/out/exports/resources.generated/aws-fsx-storagevirtualmachine.d.ts +4 -0
- package/out/exports/resources.generated/aws-gamelift-fleet.d.ts +3 -3
- package/out/exports/resources.generated/aws-glue-datacatalogencryptionsettings.d.ts +5 -5
- package/out/exports/resources.generated/aws-glue-integration.d.ts +119 -0
- package/out/exports/resources.generated/aws-glue-integrationresourceproperty.d.ts +3 -3
- package/out/exports/resources.generated/aws-greengrass-connectordefinition.d.ts +3 -3
- package/out/exports/resources.generated/aws-greengrass-connectordefinitionversion.d.ts +1 -1
- package/out/exports/resources.generated/aws-greengrass-coredefinition.d.ts +3 -3
- package/out/exports/resources.generated/aws-greengrass-coredefinitionversion.d.ts +1 -1
- package/out/exports/resources.generated/aws-greengrass-devicedefinition.d.ts +3 -3
- package/out/exports/resources.generated/aws-greengrass-devicedefinitionversion.d.ts +1 -1
- package/out/exports/resources.generated/aws-greengrass-functiondefinition.d.ts +9 -9
- package/out/exports/resources.generated/aws-greengrass-functiondefinitionversion.d.ts +7 -7
- package/out/exports/resources.generated/aws-greengrass-group.d.ts +6 -6
- package/out/exports/resources.generated/aws-greengrass-loggerdefinition.d.ts +3 -3
- package/out/exports/resources.generated/aws-greengrass-loggerdefinitionversion.d.ts +1 -1
- package/out/exports/resources.generated/aws-greengrass-resourcedefinition.d.ts +14 -14
- package/out/exports/resources.generated/aws-greengrass-resourcedefinitionversion.d.ts +11 -11
- package/out/exports/resources.generated/aws-greengrass-subscriptiondefinition.d.ts +3 -3
- package/out/exports/resources.generated/aws-greengrass-subscriptiondefinitionversion.d.ts +1 -1
- package/out/exports/resources.generated/aws-greengrassv2-componentversion.d.ts +1 -1
- package/out/exports/resources.generated/aws-greengrassv2-deployment.d.ts +1 -1
- package/out/exports/resources.generated/aws-iam-group.d.ts +2 -2
- package/out/exports/resources.generated/aws-iam-grouppolicy.d.ts +1 -1
- package/out/exports/resources.generated/aws-iam-managedpolicy.d.ts +3 -3
- package/out/exports/resources.generated/aws-iam-policy.d.ts +2 -2
- package/out/exports/resources.generated/aws-iam-role.d.ts +3 -3
- package/out/exports/resources.generated/aws-iam-rolepolicy.d.ts +1 -1
- package/out/exports/resources.generated/aws-iam-samlprovider.d.ts +4 -4
- package/out/exports/resources.generated/aws-iam-user.d.ts +5 -5
- package/out/exports/resources.generated/aws-iam-userpolicy.d.ts +1 -1
- package/out/exports/resources.generated/aws-imagebuilder-containerrecipe.d.ts +7 -1
- package/out/exports/resources.generated/aws-imagebuilder-image.d.ts +0 -66
- package/out/exports/resources.generated/aws-imagebuilder-imagerecipe.d.ts +1 -1
- package/out/exports/resources.generated/aws-iot-encryptionconfiguration.d.ts +1 -1
- package/out/exports/resources.generated/aws-iot-logging.d.ts +2 -2
- package/out/exports/resources.generated/aws-iotevents-detectormodel.d.ts +8 -8
- package/out/exports/resources.generated/aws-kendra-datasource.d.ts +1 -1
- package/out/exports/resources.generated/aws-kinesisvideo-stream.d.ts +18 -1
- package/out/exports/resources.generated/aws-kms-alias.d.ts +6 -6
- package/out/exports/resources.generated/aws-kms-key.d.ts +32 -32
- package/out/exports/resources.generated/aws-kms-replicakey.d.ts +15 -15
- package/out/exports/resources.generated/aws-lakeformation-datalakesettings.d.ts +4 -0
- package/out/exports/resources.generated/aws-lambda-codesigningconfig.d.ts +1 -1
- package/out/exports/resources.generated/aws-lambda-eventsourcemapping.d.ts +10 -8
- package/out/exports/resources.generated/aws-lambda-function.d.ts +25 -9
- package/out/exports/resources.generated/aws-lex-bot.d.ts +3 -3
- package/out/exports/resources.generated/aws-lex-botalias.d.ts +2 -2
- package/out/exports/resources.generated/aws-lex-botversion.d.ts +2 -2
- package/out/exports/resources.generated/aws-lex-resourcepolicy.d.ts +2 -2
- package/out/exports/resources.generated/aws-licensemanager-grant.d.ts +2 -2
- package/out/exports/resources.generated/aws-licensemanager-license.d.ts +2 -2
- package/out/exports/resources.generated/aws-lightsail-container.d.ts +2 -2
- package/out/exports/resources.generated/aws-logs-integration.d.ts +1 -1
- package/out/exports/resources.generated/aws-logs-loganomalydetector.d.ts +2 -2
- package/out/exports/resources.generated/aws-logs-loggroup.d.ts +3 -3
- package/out/exports/resources.generated/aws-logs-transformer.d.ts +1 -1
- package/out/exports/resources.generated/aws-lookoutequipment-inferencescheduler.d.ts +3 -3
- package/out/exports/resources.generated/aws-macie-allowlist.d.ts +2 -2
- package/out/exports/resources.generated/aws-mediaconnect-flow.d.ts +3 -2
- package/out/exports/resources.generated/aws-mediaconnect-flowentitlement.d.ts +2 -2
- package/out/exports/resources.generated/aws-mediaconnect-flowoutput.d.ts +2 -2
- package/out/exports/resources.generated/aws-mediaconnect-flowsource.d.ts +1 -1
- package/out/exports/resources.generated/aws-mediaconnect-routerinput.d.ts +20 -2
- package/out/exports/resources.generated/aws-mediaconnect-routernetworkinterface.d.ts +4 -1
- package/out/exports/resources.generated/aws-mediaconnect-routeroutput.d.ts +22 -3
- package/out/exports/resources.generated/aws-mediaconvert-jobtemplate.d.ts +2 -2
- package/out/exports/resources.generated/aws-mediaconvert-preset.d.ts +2 -2
- package/out/exports/resources.generated/aws-mediaconvert-queue.d.ts +1 -1
- package/out/exports/resources.generated/aws-mediapackagev2-originendpointpolicy.d.ts +1 -1
- package/out/exports/resources.generated/aws-mediastore-container.d.ts +2 -2
- package/out/exports/resources.generated/aws-msk-cluster.d.ts +18 -5
- package/out/exports/resources.generated/aws-msk-configuration.d.ts +1 -1
- package/out/exports/resources.generated/aws-neptune-dbcluster.d.ts +2 -2
- package/out/exports/resources.generated/aws-neptune-dbinstance.d.ts +12 -12
- package/out/exports/resources.generated/aws-neptune-dbparametergroup.d.ts +1 -1
- package/out/exports/resources.generated/aws-networkfirewall-tlsinspectionconfiguration.d.ts +1 -1
- package/out/exports/resources.generated/aws-notifications-eventrule.d.ts +1 -1
- package/out/exports/resources.generated/aws-oam-link.d.ts +1 -1
- package/out/exports/resources.generated/aws-opensearchservice-domain.d.ts +27 -2
- package/out/exports/resources.generated/aws-opsworks-stack.d.ts +4 -4
- package/out/exports/resources.generated/aws-opsworkscm-server.d.ts +3 -3
- package/out/exports/resources.generated/aws-organizations-account.d.ts +10 -10
- package/out/exports/resources.generated/aws-organizations-organizationalunit.d.ts +2 -2
- package/out/exports/resources.generated/aws-pcs-cluster.d.ts +40 -0
- package/out/exports/resources.generated/aws-pipes-pipe.d.ts +1 -1
- package/out/exports/resources.generated/aws-qbusiness-application.d.ts +3 -3
- package/out/exports/resources.generated/aws-qbusiness-datasource.d.ts +1 -1
- package/out/exports/resources.generated/aws-qbusiness-webexperience.d.ts +1 -1
- package/out/exports/resources.generated/aws-qldb-ledger.d.ts +2 -2
- package/out/exports/resources.generated/aws-rbin-rule.d.ts +1 -1
- package/out/exports/resources.generated/aws-refactorspaces-application.d.ts +4 -4
- package/out/exports/resources.generated/aws-refactorspaces-route.d.ts +9 -9
- package/out/exports/resources.generated/aws-resiliencehub-app.d.ts +1 -1
- package/out/exports/resources.generated/aws-route53-keysigningkey.d.ts +1 -1
- package/out/exports/resources.generated/aws-route53-recordset.d.ts +4 -4
- package/out/exports/resources.generated/aws-route53-recordsetgroup.d.ts +4 -4
- package/out/exports/resources.generated/aws-rum-appmonitor.d.ts +3 -65
- package/out/exports/resources.generated/aws-s3-bucket.d.ts +25 -7
- package/out/exports/resources.generated/aws-s3-storagelens.d.ts +1 -1
- package/out/exports/resources.generated/aws-s3tables-tablebucket.d.ts +17 -0
- package/out/exports/resources.generated/aws-sagemaker-cluster.d.ts +57 -0
- package/out/exports/resources.generated/aws-sagemaker-dataqualityjobdefinition.d.ts +1 -1
- package/out/exports/resources.generated/aws-sagemaker-domain.d.ts +1 -1
- package/out/exports/resources.generated/aws-sagemaker-modelbiasjobdefinition.d.ts +1 -1
- package/out/exports/resources.generated/aws-sagemaker-modelexplainabilityjobdefinition.d.ts +1 -1
- package/out/exports/resources.generated/aws-sagemaker-modelqualityjobdefinition.d.ts +1 -1
- package/out/exports/resources.generated/aws-sagemaker-monitoringschedule.d.ts +1 -1
- package/out/exports/resources.generated/aws-sagemaker-partnerapp.d.ts +17 -0
- package/out/exports/resources.generated/aws-sagemaker-space.d.ts +1 -1
- package/out/exports/resources.generated/aws-sagemaker-userprofile.d.ts +1 -1
- package/out/exports/resources.generated/aws-secretsmanager-rotationschedule.d.ts +28 -2
- package/out/exports/resources.generated/aws-secretsmanager-secret.d.ts +9 -5
- package/out/exports/resources.generated/aws-securityhub-findingaggregator.d.ts +1 -1
- package/out/exports/resources.generated/aws-securityhub-hub.d.ts +2 -2
- package/out/exports/resources.generated/aws-servicecatalog-cloudformationproduct.d.ts +1 -22
- package/out/exports/resources.generated/aws-shield-drtaccess.d.ts +4 -4
- package/out/exports/resources.generated/aws-shield-proactiveengagement.d.ts +4 -4
- package/out/exports/resources.generated/aws-shield-protection.d.ts +6 -6
- package/out/exports/resources.generated/aws-shield-protectiongroup.d.ts +2 -2
- package/out/exports/resources.generated/aws-simspaceweaver-simulation.d.ts +2 -2
- package/out/exports/resources.generated/aws-smsvoice-protectconfiguration.d.ts +1 -1
- package/out/exports/resources.generated/aws-sns-subscription.d.ts +11 -11
- package/out/exports/resources.generated/aws-sns-topic.d.ts +14 -14
- package/out/exports/resources.generated/aws-sns-topicinlinepolicy.d.ts +3 -3
- package/out/exports/resources.generated/aws-sns-topicpolicy.d.ts +2 -2
- package/out/exports/resources.generated/aws-sqs-queue.d.ts +6 -6
- package/out/exports/resources.generated/aws-sqs-queuepolicy.d.ts +2 -2
- package/out/exports/resources.generated/aws-ssm-association.d.ts +1 -1
- package/out/exports/resources.generated/aws-ssm-document.d.ts +2 -2
- package/out/exports/resources.generated/aws-ssmincidents-replicationset.d.ts +2 -2
- package/out/exports/resources.generated/aws-ssmincidents-responseplan.d.ts +4 -4
- package/out/exports/resources.generated/aws-ssmquicksetup-configurationmanager.d.ts +1 -1
- package/out/exports/resources.generated/aws-ssmquicksetup-lifecycleautomation.d.ts +3 -3
- package/out/exports/resources.generated/aws-sso-application.d.ts +2 -2
- package/out/exports/resources.generated/aws-stepfunctions-activity.d.ts +3 -3
- package/out/exports/resources.generated/aws-stepfunctions-statemachine.d.ts +3 -3
- package/out/exports/resources.generated/aws-synthetics-canary.d.ts +3 -3
- package/out/exports/resources.generated/aws-timestream-database.d.ts +3 -3
- package/out/exports/resources.generated/aws-verifiedpermissions-identitysource.d.ts +2 -2
- package/out/exports/resources.generated/aws-vpclattice-domainverification.d.ts +51 -0
- package/out/exports/resources.generated/aws-vpclattice-resourceconfiguration.d.ts +22 -0
- package/out/exports/resources.generated/aws-vpclattice-servicenetworkresourceassociation.d.ts +5 -0
- package/out/exports/resources.generated/aws-vpclattice-servicenetworkvpcassociation.d.ts +26 -0
- package/out/exports/resources.generated/aws-wafregional-ratebasedrule.d.ts +2 -2
- package/out/exports/resources.generated/aws-wafregional-regexpatternset.d.ts +2 -2
- package/out/exports/resources.generated/aws-wafv2-ipset.d.ts +1 -1
- package/out/exports/resources.generated/aws-wafv2-regexpatternset.d.ts +1 -1
- package/out/exports/resources.generated/aws-wafv2-rulegroup.d.ts +1 -1
- package/out/exports/resources.generated/aws-wafv2-webacl.d.ts +5 -5
- package/out/exports/resources.generated/aws-wafv2-webaclassociation.d.ts +2 -2
- package/out/exports/resources.generated/aws-wisdom-aiagent.d.ts +70 -1
- package/out/exports/resources.generated/aws-workspaces-workspace.d.ts +2 -2
- package/out/exports/resources.generated/aws-workspacesweb-browsersettings.d.ts +5 -0
- package/out/exports/resources.generated/aws-workspacesweb-portal.d.ts +1 -1
- package/out/exports/resources.generated/aws-workspacesweb-sessionlogger.d.ts +1 -0
- package/package.json +1 -1
|
@@ -11,7 +11,7 @@ import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
|
|
|
11
11
|
* - If you delete a queue, you must wait at least 60 seconds before creating a queue with the same name.
|
|
12
12
|
* - To successfully create a new queue, you must provide a queue name that adheres to the [limits related to queues](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/limits-queues.html) and is unique within the scope of your queues.
|
|
13
13
|
*
|
|
14
|
-
* For more information about creating FIFO (first-in-first-out) queues, see [Creating an Amazon SQS queue (
|
|
14
|
+
* For more information about creating FIFO (first-in-first-out) queues, see [Creating an Amazon SQS queue ( CloudFormation )](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/create-queue-cloudformation.html) in the *Amazon SQS Developer Guide* .
|
|
15
15
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sqs-queue.html}
|
|
16
16
|
*/
|
|
17
17
|
export type SQSQueue = ResourceDefinitionWithAttributes<"AWS::SQS::Queue", SQSQueueProps, SQSQueueAttribs>;
|
|
@@ -27,7 +27,7 @@ export type SQSQueue = ResourceDefinitionWithAttributes<"AWS::SQS::Queue", SQSQu
|
|
|
27
27
|
* - If you delete a queue, you must wait at least 60 seconds before creating a queue with the same name.
|
|
28
28
|
* - To successfully create a new queue, you must provide a queue name that adheres to the [limits related to queues](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/limits-queues.html) and is unique within the scope of your queues.
|
|
29
29
|
*
|
|
30
|
-
* For more information about creating FIFO (first-in-first-out) queues, see [Creating an Amazon SQS queue (
|
|
30
|
+
* For more information about creating FIFO (first-in-first-out) queues, see [Creating an Amazon SQS queue ( CloudFormation )](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/create-queue-cloudformation.html) in the *Amazon SQS Developer Guide* .
|
|
31
31
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sqs-queue.html}
|
|
32
32
|
*/
|
|
33
33
|
export type SQSQueueProps = {
|
|
@@ -61,9 +61,9 @@ export type SQSQueueProps = {
|
|
|
61
61
|
*/
|
|
62
62
|
FifoThroughputLimit?: string | undefined;
|
|
63
63
|
/**
|
|
64
|
-
* The length of time in seconds for which Amazon SQS can reuse a data key to encrypt or decrypt messages before calling AWS
|
|
64
|
+
* The length of time in seconds for which Amazon SQS can reuse a data key to encrypt or decrypt messages before calling AWS again. The value must be an integer between 60 (1 minute) and 86,400 (24 hours). The default is 300 (5 minutes).
|
|
65
65
|
*
|
|
66
|
-
* > A shorter time period provides better security, but results in more calls to AWS
|
|
66
|
+
* > A shorter time period provides better security, but results in more calls to AWS , which might incur charges after Free Tier. For more information, see [Encryption at rest](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-server-side-encryption.html#sqs-how-does-the-data-key-reuse-period-work) in the *Amazon SQS Developer Guide* .
|
|
67
67
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sqs-queue.html#cfn-sqs-queue-kmsdatakeyreuseperiodseconds}
|
|
68
68
|
*/
|
|
69
69
|
KmsDataKeyReusePeriodSeconds?: number | undefined;
|
|
@@ -91,7 +91,7 @@ export type SQSQueueProps = {
|
|
|
91
91
|
/**
|
|
92
92
|
* A name for the queue. To create a FIFO queue, the name of your FIFO queue must end with the `.fifo` suffix. For more information, see [Amazon SQS FIFO queues](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-fifo-queues.html) in the *Amazon SQS Developer Guide* .
|
|
93
93
|
*
|
|
94
|
-
* If you don't specify a name,
|
|
94
|
+
* If you don't specify a name, CloudFormation generates a unique physical ID and uses that ID for the queue name. For more information, see [Name type](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-name.html) in the *CloudFormation User Guide* .
|
|
95
95
|
*
|
|
96
96
|
* > If you specify a name, you can't perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name.
|
|
97
97
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sqs-queue.html#cfn-sqs-queue-queuename}
|
|
@@ -140,7 +140,7 @@ export type SQSQueueProps = {
|
|
|
140
140
|
*/
|
|
141
141
|
SqsManagedSseEnabled?: boolean | undefined;
|
|
142
142
|
/**
|
|
143
|
-
* The tags that you attach to this queue. For more information, see [Resource tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) in the *
|
|
143
|
+
* The tags that you attach to this queue. For more information, see [Resource tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) in the *CloudFormation User Guide* .
|
|
144
144
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sqs-queue.html#cfn-sqs-queue-tags}
|
|
145
145
|
*/
|
|
146
146
|
Tags?: Tag[] | undefined;
|
|
@@ -1,11 +1,11 @@
|
|
|
1
1
|
import type { ResourceDefinitionWithAttributes, PolicyDocument } from "../main.ts";
|
|
2
2
|
/**
|
|
3
|
-
* The `AWS::SQS::QueuePolicy` type applies a policy to Amazon SQS queues. For an example snippet, see [Declaring an Amazon SQS policy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/quickref-iam.html#scenario-sqs-policy) in the *
|
|
3
|
+
* The `AWS::SQS::QueuePolicy` type applies a policy to Amazon SQS queues. For an example snippet, see [Declaring an Amazon SQS policy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/quickref-iam.html#scenario-sqs-policy) in the *CloudFormation User Guide* .
|
|
4
4
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sqs-queuepolicy.html}
|
|
5
5
|
*/
|
|
6
6
|
export type SQSQueuePolicy = ResourceDefinitionWithAttributes<"AWS::SQS::QueuePolicy", SQSQueuePolicyProps, SQSQueuePolicyAttribs>;
|
|
7
7
|
/**
|
|
8
|
-
* The `AWS::SQS::QueuePolicy` type applies a policy to Amazon SQS queues. For an example snippet, see [Declaring an Amazon SQS policy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/quickref-iam.html#scenario-sqs-policy) in the *
|
|
8
|
+
* The `AWS::SQS::QueuePolicy` type applies a policy to Amazon SQS queues. For an example snippet, see [Declaring an Amazon SQS policy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/quickref-iam.html#scenario-sqs-policy) in the *CloudFormation User Guide* .
|
|
9
9
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sqs-queuepolicy.html}
|
|
10
10
|
*/
|
|
11
11
|
export type SQSQueuePolicyProps = {
|
|
@@ -152,7 +152,7 @@ export type SSMAssociationProps = {
|
|
|
152
152
|
/**
|
|
153
153
|
* The number of seconds the service should wait for the association status to show "Success" before proceeding with the stack execution. If the association status doesn't show "Success" after the specified number of seconds, then stack creation fails.
|
|
154
154
|
*
|
|
155
|
-
* > When you specify a value for the `WaitForSuccessTimeoutSeconds` , [drift detection](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-stack-drift.html) for your
|
|
155
|
+
* > When you specify a value for the `WaitForSuccessTimeoutSeconds` , [drift detection](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-stack-drift.html) for your CloudFormation stack’s configuration might yield inaccurate results. If drift detection is important in your scenario, we recommend that you don’t include `WaitForSuccessTimeoutSeconds` in your template.
|
|
156
156
|
* @min 15
|
|
157
157
|
* @max 172800
|
|
158
158
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-association.html#cfn-ssm-association-waitforsuccesstimeoutseconds}
|
|
@@ -2,14 +2,14 @@ import type { ResourceDefinition, Tag } from "../main.ts";
|
|
|
2
2
|
/**
|
|
3
3
|
* The `AWS::SSM::Document` resource creates a Systems Manager (SSM) document in AWS Systems Manager . This document defines the actions that Systems Manager performs on your AWS resources.
|
|
4
4
|
*
|
|
5
|
-
* > This resource does not support
|
|
5
|
+
* > This resource does not support CloudFormation drift detection.
|
|
6
6
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-document.html}
|
|
7
7
|
*/
|
|
8
8
|
export type SSMDocument = ResourceDefinition<"AWS::SSM::Document", SSMDocumentProps>;
|
|
9
9
|
/**
|
|
10
10
|
* The `AWS::SSM::Document` resource creates a Systems Manager (SSM) document in AWS Systems Manager . This document defines the actions that Systems Manager performs on your AWS resources.
|
|
11
11
|
*
|
|
12
|
-
* > This resource does not support
|
|
12
|
+
* > This resource does not support CloudFormation drift detection.
|
|
13
13
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-document.html}
|
|
14
14
|
*/
|
|
15
15
|
export type SSMDocumentProps = {
|
|
@@ -1,11 +1,11 @@
|
|
|
1
1
|
import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
|
|
2
2
|
/**
|
|
3
|
-
* The `AWS::SSMIncidents::ReplicationSet` resource specifies a set of AWS Regions that Incident Manager data is replicated to and the AWS Key Management Service ( AWS
|
|
3
|
+
* The `AWS::SSMIncidents::ReplicationSet` resource specifies a set of AWS Regions that Incident Manager data is replicated to and the AWS Key Management Service ( AWS key used to encrypt the data.
|
|
4
4
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssmincidents-replicationset.html}
|
|
5
5
|
*/
|
|
6
6
|
export type SSMIncidentsReplicationSet = ResourceDefinitionWithAttributes<"AWS::SSMIncidents::ReplicationSet", SSMIncidentsReplicationSetProps, SSMIncidentsReplicationSetAttribs>;
|
|
7
7
|
/**
|
|
8
|
-
* The `AWS::SSMIncidents::ReplicationSet` resource specifies a set of AWS Regions that Incident Manager data is replicated to and the AWS Key Management Service ( AWS
|
|
8
|
+
* The `AWS::SSMIncidents::ReplicationSet` resource specifies a set of AWS Regions that Incident Manager data is replicated to and the AWS Key Management Service ( AWS key used to encrypt the data.
|
|
9
9
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssmincidents-replicationset.html}
|
|
10
10
|
*/
|
|
11
11
|
export type SSMIncidentsReplicationSetProps = {
|
|
@@ -90,7 +90,7 @@ export type Action = {
|
|
|
90
90
|
*/
|
|
91
91
|
export type ChatChannel = {
|
|
92
92
|
/**
|
|
93
|
-
* The Amazon
|
|
93
|
+
* The Amazon targets that uses to notify the chat channel of updates to an incident. You can also make updates to the incident through the chat channel by using the Amazon topics
|
|
94
94
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ssmincidents-responseplan-chatchannel.html#cfn-ssmincidents-responseplan-chatchannel-chatbotsns}
|
|
95
95
|
*/
|
|
96
96
|
ChatbotSns?: string[] | undefined;
|
|
@@ -168,7 +168,7 @@ export type IncidentTemplate = {
|
|
|
168
168
|
*/
|
|
169
169
|
IncidentTags?: Tag[] | undefined;
|
|
170
170
|
/**
|
|
171
|
-
* The Amazon Simple Notification Service ( Amazon
|
|
171
|
+
* The Amazon Simple Notification Service ( Amazon ) targets that uses to notify the chat channel of updates to an incident. You can also make updates to the incident through the chat channel using the Amazon topics.
|
|
172
172
|
* @default []
|
|
173
173
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ssmincidents-responseplan-incidenttemplate.html#cfn-ssmincidents-responseplan-incidenttemplate-notificationtargets}
|
|
174
174
|
*/
|
|
@@ -199,12 +199,12 @@ export type Integration = {
|
|
|
199
199
|
PagerDutyConfiguration: PagerDutyConfiguration;
|
|
200
200
|
};
|
|
201
201
|
/**
|
|
202
|
-
* The Amazon
|
|
202
|
+
* The Amazon topic that's used by to notify the incidents chat channel.
|
|
203
203
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ssmincidents-responseplan-notificationtargetitem.html}
|
|
204
204
|
*/
|
|
205
205
|
export type NotificationTargetItem = {
|
|
206
206
|
/**
|
|
207
|
-
* The Amazon Resource Name (ARN) of the Amazon
|
|
207
|
+
* The Amazon Resource Name (ARN) of the Amazon topic.
|
|
208
208
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ssmincidents-responseplan-notificationtargetitem.html#cfn-ssmincidents-responseplan-notificationtargetitem-snstopicarn}
|
|
209
209
|
*/
|
|
210
210
|
SnsTopicArn?: string | undefined;
|
|
@@ -165,7 +165,7 @@ export type ConfigurationDefinition = {
|
|
|
165
165
|
* - Description: (Required) A comma separated list of AWS Regions you want to deploy the configuration to.
|
|
166
166
|
* - **DevOps Guru (Type: AWS QuickSetupType-DevOpsGuru)** - - `AnalyseAllResources`
|
|
167
167
|
*
|
|
168
|
-
* - Description: (Optional) A boolean value that determines whether DevOps Guru analyzes all
|
|
168
|
+
* - Description: (Optional) A boolean value that determines whether DevOps Guru analyzes all CloudFormation stacks in the account. The default value is " `false` ".
|
|
169
169
|
* - `EnableSnsNotifications`
|
|
170
170
|
*
|
|
171
171
|
* - Description: (Optional) A boolean value that determines whether DevOps Guru sends notifications when an insight is created. The default value is " `true` ".
|
|
@@ -1,16 +1,16 @@
|
|
|
1
1
|
import type { ResourceDefinitionWithAttributes } from "../main.ts";
|
|
2
2
|
/**
|
|
3
|
-
* Creates a lifecycle automation resource that executes SSM Automation documents during
|
|
3
|
+
* Creates a lifecycle automation resource that executes SSM Automation documents during CloudFormation stack operations. This resource replaces inline AWS Lambda custom resources and provides a managed way to handle lifecycle events in Quick Setup configurations.
|
|
4
4
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssmquicksetup-lifecycleautomation.html}
|
|
5
5
|
*/
|
|
6
6
|
export type SSMQuickSetupLifecycleAutomation = ResourceDefinitionWithAttributes<"AWS::SSMQuickSetup::LifecycleAutomation", SSMQuickSetupLifecycleAutomationProps, SSMQuickSetupLifecycleAutomationAttribs>;
|
|
7
7
|
/**
|
|
8
|
-
* Creates a lifecycle automation resource that executes SSM Automation documents during
|
|
8
|
+
* Creates a lifecycle automation resource that executes SSM Automation documents during CloudFormation stack operations. This resource replaces inline AWS Lambda custom resources and provides a managed way to handle lifecycle events in Quick Setup configurations.
|
|
9
9
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssmquicksetup-lifecycleautomation.html}
|
|
10
10
|
*/
|
|
11
11
|
export type SSMQuickSetupLifecycleAutomationProps = {
|
|
12
12
|
/**
|
|
13
|
-
* The name of the SSM Automation document to execute in response to
|
|
13
|
+
* The name of the SSM Automation document to execute in response to CloudFormation lifecycle events (CREATE, UPDATE, DELETE).
|
|
14
14
|
* @minLength 1
|
|
15
15
|
* @maxLength 500
|
|
16
16
|
* @pattern ^\S+$
|
|
@@ -2,14 +2,14 @@ import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
|
|
|
2
2
|
/**
|
|
3
3
|
* Creates an OAuth 2.0 customer managed application in IAM Identity Center for the given application provider.
|
|
4
4
|
*
|
|
5
|
-
* > This API does not support creating SAML 2.0 customer managed applications or AWS managed applications. To learn how to create an AWS managed application, see the application user guide. You can create a SAML 2.0 customer managed application in the
|
|
5
|
+
* > This API does not support creating SAML 2.0 customer managed applications or AWS managed applications. To learn how to create an AWS managed application, see the application user guide. You can create a SAML 2.0 customer managed application in the the console only. See [Setting up customer managed SAML 2.0 applications](https://docs.aws.amazon.com/singlesignon/latest/userguide/customermanagedapps-saml2-setup.html) . For more information on these application types, see [AWS managed applications](https://docs.aws.amazon.com/singlesignon/latest/userguide/awsapps.html) .
|
|
6
6
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-application.html}
|
|
7
7
|
*/
|
|
8
8
|
export type SSOApplication = ResourceDefinitionWithAttributes<"AWS::SSO::Application", SSOApplicationProps, SSOApplicationAttribs>;
|
|
9
9
|
/**
|
|
10
10
|
* Creates an OAuth 2.0 customer managed application in IAM Identity Center for the given application provider.
|
|
11
11
|
*
|
|
12
|
-
* > This API does not support creating SAML 2.0 customer managed applications or AWS managed applications. To learn how to create an AWS managed application, see the application user guide. You can create a SAML 2.0 customer managed application in the
|
|
12
|
+
* > This API does not support creating SAML 2.0 customer managed applications or AWS managed applications. To learn how to create an AWS managed application, see the application user guide. You can create a SAML 2.0 customer managed application in the the console only. See [Setting up customer managed SAML 2.0 applications](https://docs.aws.amazon.com/singlesignon/latest/userguide/customermanagedapps-saml2-setup.html) . For more information on these application types, see [AWS managed applications](https://docs.aws.amazon.com/singlesignon/latest/userguide/awsapps.html) .
|
|
13
13
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-application.html}
|
|
14
14
|
*/
|
|
15
15
|
export type SSOApplicationProps = {
|
|
@@ -18,7 +18,7 @@ export type StepFunctionsActivityProps = {
|
|
|
18
18
|
*
|
|
19
19
|
* Activity configuration is immutable, and resource names must be unique. To set customer managed keys for encryption, you must create a *new Activity* . If you attempt to change the configuration in your CFN template for an existing activity, you will receive an `ActivityAlreadyExists` exception.
|
|
20
20
|
*
|
|
21
|
-
* To update your activity to include customer managed keys, set a new activity name within your
|
|
21
|
+
* To update your activity to include customer managed keys, set a new activity name within your CloudFormation template.
|
|
22
22
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-stepfunctions-activity.html#cfn-stepfunctions-activity-encryptionconfiguration}
|
|
23
23
|
*/
|
|
24
24
|
EncryptionConfiguration?: EncryptionConfiguration | undefined;
|
|
@@ -77,7 +77,7 @@ export type StepFunctionsActivityAttribs = {
|
|
|
77
77
|
Name: string;
|
|
78
78
|
};
|
|
79
79
|
/**
|
|
80
|
-
* Settings to configure server-side encryption for an activity. By default, Step Functions provides transparent server-side encryption. With this configuration, you can specify a customer managed AWS
|
|
80
|
+
* Settings to configure server-side encryption for an activity. By default, Step Functions provides transparent server-side encryption. With this configuration, you can specify a customer managed AWS key for encryption.
|
|
81
81
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-stepfunctions-activity-encryptionconfiguration.html}
|
|
82
82
|
*/
|
|
83
83
|
export type EncryptionConfiguration = {
|
|
@@ -89,7 +89,7 @@ export type EncryptionConfiguration = {
|
|
|
89
89
|
*/
|
|
90
90
|
KmsDataKeyReusePeriodSeconds?: number | undefined;
|
|
91
91
|
/**
|
|
92
|
-
* An alias, alias ARN, key ID, or key ARN of a symmetric encryption AWS
|
|
92
|
+
* An alias, alias ARN, key ID, or key ARN of a symmetric encryption AWS key to encrypt data. To specify a AWS key in a different AWS account, you must use the key ARN or alias ARN.
|
|
93
93
|
* @minLength 1
|
|
94
94
|
* @maxLength 2048
|
|
95
95
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-stepfunctions-activity-encryptionconfiguration.html#cfn-stepfunctions-activity-encryptionconfiguration-kmskeyid}
|
|
@@ -141,7 +141,7 @@ export type CloudWatchLogsLogGroup = {
|
|
|
141
141
|
LogGroupArn?: string | undefined;
|
|
142
142
|
};
|
|
143
143
|
/**
|
|
144
|
-
* Settings to configure server-side encryption for a state machine. By default, Step Functions provides transparent server-side encryption. With this configuration, you can specify a customer managed AWS
|
|
144
|
+
* Settings to configure server-side encryption for a state machine. By default, Step Functions provides transparent server-side encryption. With this configuration, you can specify a customer managed AWS key for encryption.
|
|
145
145
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-stepfunctions-statemachine-encryptionconfiguration.html}
|
|
146
146
|
*/
|
|
147
147
|
export type EncryptionConfiguration = {
|
|
@@ -153,7 +153,7 @@ export type EncryptionConfiguration = {
|
|
|
153
153
|
*/
|
|
154
154
|
KmsDataKeyReusePeriodSeconds?: number | undefined;
|
|
155
155
|
/**
|
|
156
|
-
* An alias, alias ARN, key ID, or key ARN of a symmetric encryption AWS
|
|
156
|
+
* An alias, alias ARN, key ID, or key ARN of a symmetric encryption AWS key to encrypt data. To specify a AWS key in a different AWS account, you must use the key ARN or alias ARN.
|
|
157
157
|
* @minLength 1
|
|
158
158
|
* @maxLength 2048
|
|
159
159
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-stepfunctions-statemachine-encryptionconfiguration.html#cfn-stepfunctions-statemachine-encryptionconfiguration-kmskeyid}
|
|
@@ -173,7 +173,7 @@ export type EncryptionConfiguration = {
|
|
|
173
173
|
*/
|
|
174
174
|
export type LogDestination = {
|
|
175
175
|
/**
|
|
176
|
-
* An object describing a CloudWatch log group. For more information, see [AWS::Logs::LogGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-logs-loggroup.html) in the
|
|
176
|
+
* An object describing a CloudWatch log group. For more information, see [AWS::Logs::LogGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-logs-loggroup.html) in the CloudFormation User Guide.
|
|
177
177
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-stepfunctions-statemachine-logdestination.html#cfn-stepfunctions-statemachine-logdestination-cloudwatchlogsloggroup}
|
|
178
178
|
*/
|
|
179
179
|
CloudWatchLogsLogGroup?: CloudWatchLogsLogGroup | undefined;
|
|
@@ -459,14 +459,14 @@ export type RunConfig = {
|
|
|
459
459
|
*/
|
|
460
460
|
export type S3Encryption = {
|
|
461
461
|
/**
|
|
462
|
-
* The encryption method to use for artifacts created by this canary. Specify `SSE_S3` to use server-side encryption (SSE) with an Amazon S3-managed key. Specify `SSE-KMS` to use server-side encryption with a customer-managed AWS
|
|
462
|
+
* The encryption method to use for artifacts created by this canary. Specify `SSE_S3` to use server-side encryption (SSE) with an Amazon S3-managed key. Specify `SSE-KMS` to use server-side encryption with a customer-managed AWS key.
|
|
463
463
|
*
|
|
464
|
-
* If you omit this parameter, an AWS -managed AWS
|
|
464
|
+
* If you omit this parameter, an AWS -managed AWS key is used.
|
|
465
465
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-synthetics-canary-s3encryption.html#cfn-synthetics-canary-s3encryption-encryptionmode}
|
|
466
466
|
*/
|
|
467
467
|
EncryptionMode?: string | undefined;
|
|
468
468
|
/**
|
|
469
|
-
* The ARN of the customer-managed AWS
|
|
469
|
+
* The ARN of the customer-managed AWS key to use, if you specify `SSE-KMS` for `EncryptionMode`
|
|
470
470
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-synthetics-canary-s3encryption.html#cfn-synthetics-canary-s3encryption-kmskeyarn}
|
|
471
471
|
*/
|
|
472
472
|
KmsKeyArn?: string | undefined;
|
|
@@ -1,11 +1,11 @@
|
|
|
1
1
|
import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
|
|
2
2
|
/**
|
|
3
|
-
* Creates a new Timestream database. If the AWS
|
|
3
|
+
* Creates a new Timestream database. If the AWS key is not specified, the database will be encrypted with a Timestream managed AWS key located in your account. Refer to [AWS managed AWS keys](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-managed-cmk) for more info. [Service quotas apply](https://docs.aws.amazon.com/timestream/latest/developerguide/ts-limits.html) . See [code sample](https://docs.aws.amazon.com/timestream/latest/developerguide/code-samples.create-db.html) for details.
|
|
4
4
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-timestream-database.html}
|
|
5
5
|
*/
|
|
6
6
|
export type TimestreamDatabase = ResourceDefinitionWithAttributes<"AWS::Timestream::Database", TimestreamDatabaseProps, TimestreamDatabaseAttribs>;
|
|
7
7
|
/**
|
|
8
|
-
* Creates a new Timestream database. If the AWS
|
|
8
|
+
* Creates a new Timestream database. If the AWS key is not specified, the database will be encrypted with a Timestream managed AWS key located in your account. Refer to [AWS managed AWS keys](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-managed-cmk) for more info. [Service quotas apply](https://docs.aws.amazon.com/timestream/latest/developerguide/ts-limits.html) . See [code sample](https://docs.aws.amazon.com/timestream/latest/developerguide/code-samples.create-db.html) for details.
|
|
9
9
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-timestream-database.html}
|
|
10
10
|
*/
|
|
11
11
|
export type TimestreamDatabaseProps = {
|
|
@@ -18,7 +18,7 @@ export type TimestreamDatabaseProps = {
|
|
|
18
18
|
*/
|
|
19
19
|
DatabaseName?: string | undefined;
|
|
20
20
|
/**
|
|
21
|
-
* The identifier of the AWS
|
|
21
|
+
* The identifier of the AWS key used to encrypt the data stored in the database.
|
|
22
22
|
* @minLength 1
|
|
23
23
|
* @maxLength 2048
|
|
24
24
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-timestream-database.html#cfn-timestream-database-kmskeyid}
|
|
@@ -6,7 +6,7 @@ import type { ResourceDefinitionWithAttributes } from "../main.ts";
|
|
|
6
6
|
*
|
|
7
7
|
* After you create an identity source, you can use the identities provided by the IdP as proxies for the principal in authorization queries that use the [IsAuthorizedWithToken](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html) operation. These identities take the form of tokens that contain claims about the user, such as IDs, attributes and group memberships. Amazon Cognito provides both identity tokens and access tokens, and Verified Permissions can use either or both. Any combination of identity and access tokens results in the same Cedar principal. Verified Permissions automatically translates the information about the identities into the standard Cedar attributes that can be evaluated by your policies. Because the Amazon Cognito identity and access tokens can contain different information, the tokens you choose to use determine the attributes that are available to access in the Cedar principal from your policies.
|
|
8
8
|
*
|
|
9
|
-
* Amazon Cognito Identity is not available in all of the same AWS Regions as . Because of this, the `AWS::VerifiedPermissions::IdentitySource` type is not available to create from
|
|
9
|
+
* Amazon Cognito Identity is not available in all of the same AWS Regions as . Because of this, the `AWS::VerifiedPermissions::IdentitySource` type is not available to create from CloudFormation in Regions where Amazon Cognito Identity is not currently available. Users can still create `AWS::VerifiedPermissions::IdentitySource` in those Regions, but only from the AWS CLI , SDK, or from the AWS console.
|
|
10
10
|
*
|
|
11
11
|
* > To reference a user from this identity source in your Cedar policies, use the following syntax.
|
|
12
12
|
* >
|
|
@@ -23,7 +23,7 @@ export type VerifiedPermissionsIdentitySource = ResourceDefinitionWithAttributes
|
|
|
23
23
|
*
|
|
24
24
|
* After you create an identity source, you can use the identities provided by the IdP as proxies for the principal in authorization queries that use the [IsAuthorizedWithToken](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html) operation. These identities take the form of tokens that contain claims about the user, such as IDs, attributes and group memberships. Amazon Cognito provides both identity tokens and access tokens, and Verified Permissions can use either or both. Any combination of identity and access tokens results in the same Cedar principal. Verified Permissions automatically translates the information about the identities into the standard Cedar attributes that can be evaluated by your policies. Because the Amazon Cognito identity and access tokens can contain different information, the tokens you choose to use determine the attributes that are available to access in the Cedar principal from your policies.
|
|
25
25
|
*
|
|
26
|
-
* Amazon Cognito Identity is not available in all of the same AWS Regions as . Because of this, the `AWS::VerifiedPermissions::IdentitySource` type is not available to create from
|
|
26
|
+
* Amazon Cognito Identity is not available in all of the same AWS Regions as . Because of this, the `AWS::VerifiedPermissions::IdentitySource` type is not available to create from CloudFormation in Regions where Amazon Cognito Identity is not currently available. Users can still create `AWS::VerifiedPermissions::IdentitySource` in those Regions, but only from the AWS CLI , SDK, or from the AWS console.
|
|
27
27
|
*
|
|
28
28
|
* > To reference a user from this identity source in your Cedar policies, use the following syntax.
|
|
29
29
|
* >
|
|
@@ -0,0 +1,51 @@
|
|
|
1
|
+
import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
|
|
2
|
+
/**
|
|
3
|
+
* A domain name verification is an entity that allows you to prove your ownership of a given domain. When you create a domain verification using CloudFormation, use a waiter to make sure the domain verification is complete before you create a service network resource association, a VPC endpoint, or a service network VPC association with this domain.
|
|
4
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-vpclattice-domainverification.html}
|
|
5
|
+
*/
|
|
6
|
+
export type VpcLatticeDomainVerification = ResourceDefinitionWithAttributes<"AWS::VpcLattice::DomainVerification", VpcLatticeDomainVerificationProps, VpcLatticeDomainVerificationAttribs>;
|
|
7
|
+
/**
|
|
8
|
+
* A domain name verification is an entity that allows you to prove your ownership of a given domain. When you create a domain verification using CloudFormation, use a waiter to make sure the domain verification is complete before you create a service network resource association, a VPC endpoint, or a service network VPC association with this domain.
|
|
9
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-vpclattice-domainverification.html}
|
|
10
|
+
*/
|
|
11
|
+
export type VpcLatticeDomainVerificationProps = {
|
|
12
|
+
/**
|
|
13
|
+
* The domain name being verified.
|
|
14
|
+
* @minLength 3
|
|
15
|
+
* @maxLength 255
|
|
16
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-vpclattice-domainverification.html#cfn-vpclattice-domainverification-domainname}
|
|
17
|
+
*/
|
|
18
|
+
DomainName: string;
|
|
19
|
+
/**
|
|
20
|
+
* The tags associated with the domain verification.
|
|
21
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-vpclattice-domainverification.html#cfn-vpclattice-domainverification-tags}
|
|
22
|
+
*/
|
|
23
|
+
Tags?: Tag[] | undefined;
|
|
24
|
+
};
|
|
25
|
+
/**
|
|
26
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-vpclattice-domainverification.html#aws-resource-vpclattice-domainverification-return-values}
|
|
27
|
+
*/
|
|
28
|
+
export type VpcLatticeDomainVerificationAttribs = {
|
|
29
|
+
/**
|
|
30
|
+
* The Amazon Resource Name (ARN) of the domain verification.
|
|
31
|
+
* @minLength 20
|
|
32
|
+
* @maxLength 2048
|
|
33
|
+
* @pattern ^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:domainverification/dv-[0-9a-z]{17}$
|
|
34
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-vpclattice-domainverification.html#cfn-vpclattice-domainverification-arn}
|
|
35
|
+
*/
|
|
36
|
+
Arn: string;
|
|
37
|
+
/**
|
|
38
|
+
* The ID of the domain verification.
|
|
39
|
+
* @minLength 20
|
|
40
|
+
* @maxLength 2048
|
|
41
|
+
* @pattern ^((dv-[0-9a-z]{17})|(arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:domainverification/dv-[0-9a-z]{17}))$
|
|
42
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-vpclattice-domainverification.html#cfn-vpclattice-domainverification-id}
|
|
43
|
+
*/
|
|
44
|
+
Id: string;
|
|
45
|
+
/**
|
|
46
|
+
* The current status of the domain verification process.
|
|
47
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-vpclattice-domainverification.html#cfn-vpclattice-domainverification-status}
|
|
48
|
+
*/
|
|
49
|
+
Status: "VERIFIED" | "PENDING" | "VERIFICATION_TIMED_OUT";
|
|
50
|
+
};
|
|
51
|
+
//# sourceMappingURL=aws-vpclattice-domainverification.d.ts.map
|
|
@@ -14,6 +14,28 @@ export type VpcLatticeResourceConfigurationProps = {
|
|
|
14
14
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-vpclattice-resourceconfiguration.html#cfn-vpclattice-resourceconfiguration-allowassociationtosharableservicenetwork}
|
|
15
15
|
*/
|
|
16
16
|
AllowAssociationToSharableServiceNetwork?: boolean | undefined;
|
|
17
|
+
/**
|
|
18
|
+
* The custom domain name.
|
|
19
|
+
* @minLength 3
|
|
20
|
+
* @maxLength 255
|
|
21
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-vpclattice-resourceconfiguration.html#cfn-vpclattice-resourceconfiguration-customdomainname}
|
|
22
|
+
*/
|
|
23
|
+
CustomDomainName?: string | undefined;
|
|
24
|
+
/**
|
|
25
|
+
* The domain verification ID.
|
|
26
|
+
* @minLength 20
|
|
27
|
+
* @maxLength 20
|
|
28
|
+
* @pattern ^dv-[a-fA-F0-9]{17}$
|
|
29
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-vpclattice-resourceconfiguration.html#cfn-vpclattice-resourceconfiguration-domainverificationid}
|
|
30
|
+
*/
|
|
31
|
+
DomainVerificationId?: string | undefined;
|
|
32
|
+
/**
|
|
33
|
+
* (GROUP) The group domain for a group resource configuration. Any domains that you create for the child resource are subdomains of the group domain. Child resources inherit the verification status of the domain.
|
|
34
|
+
* @minLength 3
|
|
35
|
+
* @maxLength 255
|
|
36
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-vpclattice-resourceconfiguration.html#cfn-vpclattice-resourceconfiguration-groupdomain}
|
|
37
|
+
*/
|
|
38
|
+
GroupDomain?: string | undefined;
|
|
17
39
|
/**
|
|
18
40
|
* The name of the resource configuration.
|
|
19
41
|
* @minLength 3
|
package/out/exports/resources.generated/aws-vpclattice-servicenetworkresourceassociation.d.ts
CHANGED
|
@@ -9,6 +9,11 @@ export type VpcLatticeServiceNetworkResourceAssociation = ResourceDefinitionWith
|
|
|
9
9
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-vpclattice-servicenetworkresourceassociation.html}
|
|
10
10
|
*/
|
|
11
11
|
export type VpcLatticeServiceNetworkResourceAssociationProps = {
|
|
12
|
+
/**
|
|
13
|
+
* Indicates if private DNS is enabled for the service network resource association.
|
|
14
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-vpclattice-servicenetworkresourceassociation.html#cfn-vpclattice-servicenetworkresourceassociation-privatednsenabled}
|
|
15
|
+
*/
|
|
16
|
+
PrivateDnsEnabled?: boolean | undefined;
|
|
12
17
|
/**
|
|
13
18
|
* The ID of the resource configuration associated with the service network.
|
|
14
19
|
* @minLength 17
|
|
@@ -21,6 +21,16 @@ export type VpcLatticeServiceNetworkVpcAssociation = ResourceDefinitionWithAttri
|
|
|
21
21
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-vpclattice-servicenetworkvpcassociation.html}
|
|
22
22
|
*/
|
|
23
23
|
export type VpcLatticeServiceNetworkVpcAssociationProps = {
|
|
24
|
+
/**
|
|
25
|
+
* The DNS options for the service network VPC association.
|
|
26
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-vpclattice-servicenetworkvpcassociation.html#cfn-vpclattice-servicenetworkvpcassociation-dnsoptions}
|
|
27
|
+
*/
|
|
28
|
+
DnsOptions?: DnsOptions | undefined;
|
|
29
|
+
/**
|
|
30
|
+
* Indicates if private DNS is enabled for the service network VPC association.
|
|
31
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-vpclattice-servicenetworkvpcassociation.html#cfn-vpclattice-servicenetworkvpcassociation-privatednsenabled}
|
|
32
|
+
*/
|
|
33
|
+
PrivateDnsEnabled?: boolean | undefined;
|
|
24
34
|
/**
|
|
25
35
|
* The IDs of the security groups. Security groups aren't added by default. You can add a security group to apply network level controls to control which resources in a VPC are allowed to access the service network and its services. For more information, see [Control traffic to resources using security groups](https://docs.aws.amazon.com//vpc/latest/userguide/VPC_SecurityGroups.html) in the *Amazon VPC User Guide* .
|
|
26
36
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-vpclattice-servicenetworkvpcassociation.html#cfn-vpclattice-servicenetworkvpcassociation-securitygroupids}
|
|
@@ -111,4 +121,20 @@ export type VpcLatticeServiceNetworkVpcAssociationAttribs = {
|
|
|
111
121
|
*/
|
|
112
122
|
VpcId: string;
|
|
113
123
|
};
|
|
124
|
+
/**
|
|
125
|
+
* The DNS configuration options.
|
|
126
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-vpclattice-servicenetworkvpcassociation-dnsoptions.html}
|
|
127
|
+
*/
|
|
128
|
+
export type DnsOptions = {
|
|
129
|
+
/**
|
|
130
|
+
* The preference for which private domains have a private hosted zone created for and associated with the specified VPC. Only supported when private DNS is enabled and when the VPC endpoint type is ServiceNetwork or Resource.
|
|
131
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-vpclattice-servicenetworkvpcassociation-dnsoptions.html#cfn-vpclattice-servicenetworkvpcassociation-dnsoptions-privatednspreference}
|
|
132
|
+
*/
|
|
133
|
+
PrivateDnsPreference?: "VERIFIED_DOMAINS_ONLY" | "ALL_DOMAINS" | "VERIFIED_DOMAINS_AND_SPECIFIED_DOMAINS" | "SPECIFIED_DOMAINS_ONLY" | undefined;
|
|
134
|
+
/**
|
|
135
|
+
* Indicates which of the private domains to create private hosted zones for and associate with the specified VPC. Only supported when private DNS is enabled and the private DNS preference is `VERIFIED_DOMAINS_AND_SPECIFIED_DOMAINS` or `SPECIFIED_DOMAINS_ONLY` .
|
|
136
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-vpclattice-servicenetworkvpcassociation-dnsoptions.html#cfn-vpclattice-servicenetworkvpcassociation-dnsoptions-privatednsspecifieddomains}
|
|
137
|
+
*/
|
|
138
|
+
PrivateDnsSpecifiedDomains?: string[] | undefined;
|
|
139
|
+
};
|
|
114
140
|
//# sourceMappingURL=aws-vpclattice-servicenetworkvpcassociation.d.ts.map
|
|
@@ -13,7 +13,7 @@ import type { ResourceDefinitionWithAttributes } from "../main.ts";
|
|
|
13
13
|
*
|
|
14
14
|
* Requests that meet both of these conditions and exceed 15,000 requests every five minutes trigger the rule's action (block or count), which is defined in the web ACL.
|
|
15
15
|
*
|
|
16
|
-
* Note you can only create rate-based rules using an
|
|
16
|
+
* Note you can only create rate-based rules using an CloudFormation template. To add the rate-based rules created through CloudFormation to a web ACL, use the AWS WAF console, API, or command line interface (CLI). For more information, see [UpdateWebACL](https://docs.aws.amazon.com/waf/latest/APIReference/API_regional_UpdateWebACL.html) .
|
|
17
17
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafregional-ratebasedrule.html}
|
|
18
18
|
*/
|
|
19
19
|
export type WAFRegionalRateBasedRule = ResourceDefinitionWithAttributes<"AWS::WAFRegional::RateBasedRule", WAFRegionalRateBasedRuleProps, WAFRegionalRateBasedRuleAttribs>;
|
|
@@ -31,7 +31,7 @@ export type WAFRegionalRateBasedRule = ResourceDefinitionWithAttributes<"AWS::WA
|
|
|
31
31
|
*
|
|
32
32
|
* Requests that meet both of these conditions and exceed 15,000 requests every five minutes trigger the rule's action (block or count), which is defined in the web ACL.
|
|
33
33
|
*
|
|
34
|
-
* Note you can only create rate-based rules using an
|
|
34
|
+
* Note you can only create rate-based rules using an CloudFormation template. To add the rate-based rules created through CloudFormation to a web ACL, use the AWS WAF console, API, or command line interface (CLI). For more information, see [UpdateWebACL](https://docs.aws.amazon.com/waf/latest/APIReference/API_regional_UpdateWebACL.html) .
|
|
35
35
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafregional-ratebasedrule.html}
|
|
36
36
|
*/
|
|
37
37
|
export type WAFRegionalRateBasedRuleProps = {
|
|
@@ -2,14 +2,14 @@ import type { ResourceDefinitionWithAttributes } from "../main.ts";
|
|
|
2
2
|
/**
|
|
3
3
|
* The `RegexPatternSet` specifies the regular expression (regex) pattern that you want AWS WAF to search for, such as `B[a@]dB[o0]t` . You can then configure AWS WAF to reject those requests.
|
|
4
4
|
*
|
|
5
|
-
* Note that you can only create regex pattern sets using a
|
|
5
|
+
* Note that you can only create regex pattern sets using a CloudFormation template. To add the regex pattern sets created through CloudFormation to a RegexMatchSet, use the AWS WAF console, API, or command line interface (CLI). For more information, see [UpdateRegexMatchSet](https://docs.aws.amazon.com/waf/latest/APIReference/API_regional_UpdateRegexMatchSet.html) .
|
|
6
6
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafregional-regexpatternset.html}
|
|
7
7
|
*/
|
|
8
8
|
export type WAFRegionalRegexPatternSet = ResourceDefinitionWithAttributes<"AWS::WAFRegional::RegexPatternSet", WAFRegionalRegexPatternSetProps, WAFRegionalRegexPatternSetAttribs>;
|
|
9
9
|
/**
|
|
10
10
|
* The `RegexPatternSet` specifies the regular expression (regex) pattern that you want AWS WAF to search for, such as `B[a@]dB[o0]t` . You can then configure AWS WAF to reject those requests.
|
|
11
11
|
*
|
|
12
|
-
* Note that you can only create regex pattern sets using a
|
|
12
|
+
* Note that you can only create regex pattern sets using a CloudFormation template. To add the regex pattern sets created through CloudFormation to a RegexMatchSet, use the AWS WAF console, API, or command line interface (CLI). For more information, see [UpdateRegexMatchSet](https://docs.aws.amazon.com/waf/latest/APIReference/API_regional_UpdateRegexMatchSet.html) .
|
|
13
13
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafregional-regexpatternset.html}
|
|
14
14
|
*/
|
|
15
15
|
export type WAFRegionalRegexPatternSetProps = {
|
|
@@ -54,7 +54,7 @@ export type WAFv2IPSetProps = {
|
|
|
54
54
|
*/
|
|
55
55
|
Name?: string | undefined;
|
|
56
56
|
/**
|
|
57
|
-
* Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an
|
|
57
|
+
* Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an REST API, an AWS AppSync GraphQL API, an Amazon Cognito user pool, an AWS App Runner service, or an AWS Verified Access instance. Valid Values are `CLOUDFRONT` and `REGIONAL` .
|
|
58
58
|
*
|
|
59
59
|
* > For `CLOUDFRONT` , you must create your WAFv2 resources in the US East (N. Virginia) Region, `us-east-1` .
|
|
60
60
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-ipset.html#cfn-wafv2-ipset-scope}
|
|
@@ -35,7 +35,7 @@ export type WAFv2RegexPatternSetProps = {
|
|
|
35
35
|
*/
|
|
36
36
|
RegularExpressionList: string[];
|
|
37
37
|
/**
|
|
38
|
-
* Specifies whether this is for an Amazon CloudFront distribution or for a regional application. For an AWS Amplify application, use `CLOUDFRONT` . A regional application can be an Application Load Balancer (ALB), an
|
|
38
|
+
* Specifies whether this is for an Amazon CloudFront distribution or for a regional application. For an AWS Amplify application, use `CLOUDFRONT` . A regional application can be an Application Load Balancer (ALB), an REST API, an AWS AppSync GraphQL API, an Amazon Cognito user pool, an AWS App Runner service, or an AWS Verified Access instance. Valid Values are `CLOUDFRONT` and `REGIONAL` .
|
|
39
39
|
*
|
|
40
40
|
* > For `CLOUDFRONT` , you must create your WAFv2 resources in the US East (N. Virginia) Region, `us-east-1` .
|
|
41
41
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-regexpatternset.html#cfn-wafv2-regexpatternset-scope}
|
|
@@ -57,7 +57,7 @@ export type WAFv2RuleGroupProps = {
|
|
|
57
57
|
*/
|
|
58
58
|
Rules?: Rule[] | undefined;
|
|
59
59
|
/**
|
|
60
|
-
* Specifies whether this is for an Amazon CloudFront distribution or for a regional application. For an AWS Amplify application, use `CLOUDFRONT` . A regional application can be an Application Load Balancer (ALB), an
|
|
60
|
+
* Specifies whether this is for an Amazon CloudFront distribution or for a regional application. For an AWS Amplify application, use `CLOUDFRONT` . A regional application can be an Application Load Balancer (ALB), an REST API, an AWS AppSync GraphQL API, an Amazon Cognito user pool, an AWS App Runner service, or an AWS Verified Access instance. Valid Values are `CLOUDFRONT` and `REGIONAL` .
|
|
61
61
|
*
|
|
62
62
|
* > For `CLOUDFRONT` , you must create your WAFv2 resources in the US East (N. Virginia) Region, `us-east-1` .
|
|
63
63
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-rulegroup.html#cfn-wafv2-rulegroup-scope}
|
|
@@ -6,7 +6,7 @@ import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
|
|
|
6
6
|
*
|
|
7
7
|
* The rules in a web ACL can be a combination of explicitly defined rules and rule groups that you reference from the web ACL. The rule groups can be rule groups that you manage or rule groups that are managed by others.
|
|
8
8
|
*
|
|
9
|
-
* You can associate a web ACL with one or more AWS resources to protect. The resources can be an Amazon CloudFront distribution, an
|
|
9
|
+
* You can associate a web ACL with one or more AWS resources to protect. The resources can be an Amazon CloudFront distribution, an REST API, an Application Load Balancer , an AWS AppSync GraphQL API , an Amazon Cognito user pool, an AWS App Runner service, an AWS Amplify application, or an AWS Verified Access instance.
|
|
10
10
|
*
|
|
11
11
|
* For more information, see [Web access control lists (web ACLs)](https://docs.aws.amazon.com/waf/latest/developerguide/web-acl.html) in the *AWS WAF developer guide* .
|
|
12
12
|
*
|
|
@@ -14,7 +14,7 @@ import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
|
|
|
14
14
|
*
|
|
15
15
|
* If you use Shield Advanced automatic application layer DDoS mitigation, the web ACLs that you use with automatic mitigation have a rule group rule whose name starts with `ShieldMitigationRuleGroup` . This rule is used for automatic mitigations and it's managed for you in the web ACL by Shield Advanced and AWS WAF . You'll see the rule listed among the web ACL rules when you view the web ACL through the AWS WAF interfaces.
|
|
16
16
|
*
|
|
17
|
-
* When you manage the web ACL through
|
|
17
|
+
* When you manage the web ACL through CloudFormation interfaces, you won't see the Shield Advanced rule. CloudFormation doesn't include this type of rule in the stack drift status between the actual configuration of the web ACL and your web ACL template.
|
|
18
18
|
*
|
|
19
19
|
* Don't add the Shield Advanced rule group rule to your web ACL template. The rule shouldn't be in your template. When you update the web ACL template in a stack, the Shield Advanced rule is maintained for you by AWS WAF in the resulting web ACL.
|
|
20
20
|
*
|
|
@@ -29,7 +29,7 @@ export type WAFv2WebACL = ResourceDefinitionWithAttributes<"AWS::WAFv2::WebACL",
|
|
|
29
29
|
*
|
|
30
30
|
* The rules in a web ACL can be a combination of explicitly defined rules and rule groups that you reference from the web ACL. The rule groups can be rule groups that you manage or rule groups that are managed by others.
|
|
31
31
|
*
|
|
32
|
-
* You can associate a web ACL with one or more AWS resources to protect. The resources can be an Amazon CloudFront distribution, an
|
|
32
|
+
* You can associate a web ACL with one or more AWS resources to protect. The resources can be an Amazon CloudFront distribution, an REST API, an Application Load Balancer , an AWS AppSync GraphQL API , an Amazon Cognito user pool, an AWS App Runner service, an AWS Amplify application, or an AWS Verified Access instance.
|
|
33
33
|
*
|
|
34
34
|
* For more information, see [Web access control lists (web ACLs)](https://docs.aws.amazon.com/waf/latest/developerguide/web-acl.html) in the *AWS WAF developer guide* .
|
|
35
35
|
*
|
|
@@ -37,7 +37,7 @@ export type WAFv2WebACL = ResourceDefinitionWithAttributes<"AWS::WAFv2::WebACL",
|
|
|
37
37
|
*
|
|
38
38
|
* If you use Shield Advanced automatic application layer DDoS mitigation, the web ACLs that you use with automatic mitigation have a rule group rule whose name starts with `ShieldMitigationRuleGroup` . This rule is used for automatic mitigations and it's managed for you in the web ACL by Shield Advanced and AWS WAF . You'll see the rule listed among the web ACL rules when you view the web ACL through the AWS WAF interfaces.
|
|
39
39
|
*
|
|
40
|
-
* When you manage the web ACL through
|
|
40
|
+
* When you manage the web ACL through CloudFormation interfaces, you won't see the Shield Advanced rule. CloudFormation doesn't include this type of rule in the stack drift status between the actual configuration of the web ACL and your web ACL template.
|
|
41
41
|
*
|
|
42
42
|
* Don't add the Shield Advanced rule group rule to your web ACL template. The rule shouldn't be in your template. When you update the web ACL template in a stack, the Shield Advanced rule is maintained for you by AWS WAF in the resulting web ACL.
|
|
43
43
|
*
|
|
@@ -113,7 +113,7 @@ export type WAFv2WebACLProps = {
|
|
|
113
113
|
*/
|
|
114
114
|
Rules?: Rule[] | undefined;
|
|
115
115
|
/**
|
|
116
|
-
* Specifies whether this is for an Amazon CloudFront distribution or for a regional application. For an AWS Amplify application, use `CLOUDFRONT` . A regional application can be an Application Load Balancer (ALB), an
|
|
116
|
+
* Specifies whether this is for an Amazon CloudFront distribution or for a regional application. For an AWS Amplify application, use `CLOUDFRONT` . A regional application can be an Application Load Balancer (ALB), an REST API, an AWS AppSync GraphQL API, an Amazon Cognito user pool, an AWS App Runner service, or an AWS Verified Access instance. Valid Values are `CLOUDFRONT` and `REGIONAL` .
|
|
117
117
|
*
|
|
118
118
|
* > For `CLOUDFRONT` , you must create your WAFv2 resources in the US East (N. Virginia) Region, `us-east-1` .
|
|
119
119
|
*
|