@propulsionworks/cloudformation 0.1.35 → 0.1.37

package/out/exports/resources.generated/aws-ec2-vpcencryptioncontrol.d.ts

@@ -0,0 +1,172 @@
+import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
+/**
+ * Describes the configuration and state of VPC encryption controls.
+ *
+ * For more information, see [Enforce VPC encryption in transit](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-encryption-controls.html) in the *Amazon VPC User Guide* .
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcencryptioncontrol.html}
+ */
+export type EC2VPCEncryptionControl = ResourceDefinitionWithAttributes<"AWS::EC2::VPCEncryptionControl", EC2VPCEncryptionControlProps, EC2VPCEncryptionControlAttribs>;
+/**
+ * Describes the configuration and state of VPC encryption controls.
+ *
+ * For more information, see [Enforce VPC encryption in transit](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-encryption-controls.html) in the *Amazon VPC User Guide* .
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcencryptioncontrol.html}
+ */
+export type EC2VPCEncryptionControlProps = {
+    /**
+     * Specifies whether to exclude egress-only internet gateway traffic from encryption enforcement.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcencryptioncontrol.html#cfn-ec2-vpcencryptioncontrol-egressonlyinternetgatewayexclusioninput}
+     */
+    EgressOnlyInternetGatewayExclusionInput?: "enable" | "disable" | undefined;
+    /**
+     * Specifies whether to exclude Elastic File System traffic from encryption enforcement.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcencryptioncontrol.html#cfn-ec2-vpcencryptioncontrol-elasticfilesystemexclusioninput}
+     */
+    ElasticFileSystemExclusionInput?: "enable" | "disable" | undefined;
+    /**
+     * Specifies whether to exclude internet gateway traffic from encryption enforcement.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcencryptioncontrol.html#cfn-ec2-vpcencryptioncontrol-internetgatewayexclusioninput}
+     */
+    InternetGatewayExclusionInput?: "enable" | "disable" | undefined;
+    /**
+     * Specifies whether to exclude Lambda function traffic from encryption enforcement.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcencryptioncontrol.html#cfn-ec2-vpcencryptioncontrol-lambdaexclusioninput}
+     */
+    LambdaExclusionInput?: "enable" | "disable" | undefined;
+    /**
+     * The encryption mode for the VPC Encryption Control configuration.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcencryptioncontrol.html#cfn-ec2-vpcencryptioncontrol-mode}
+     */
+    Mode?: "monitor" | "enforce" | undefined;
+    /**
+     * Specifies whether to exclude NAT gateway traffic from encryption enforcement.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcencryptioncontrol.html#cfn-ec2-vpcencryptioncontrol-natgatewayexclusioninput}
+     */
+    NatGatewayExclusionInput?: "enable" | "disable" | undefined;
+    /**
+     * The tags assigned to the VPC Encryption Control configuration.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcencryptioncontrol.html#cfn-ec2-vpcencryptioncontrol-tags}
+     */
+    Tags?: Tag[] | undefined;
+    /**
+     * Specifies whether to exclude virtual private gateway traffic from encryption enforcement.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcencryptioncontrol.html#cfn-ec2-vpcencryptioncontrol-virtualprivategatewayexclusioninput}
+     */
+    VirtualPrivateGatewayExclusionInput?: "enable" | "disable" | undefined;
+    /**
+     * The ID of the VPC for which to create the encryption control configuration.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcencryptioncontrol.html#cfn-ec2-vpcencryptioncontrol-vpcid}
+     */
+    VpcId?: string | undefined;
+    /**
+     * Specifies whether to exclude VPC Lattice traffic from encryption enforcement.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcencryptioncontrol.html#cfn-ec2-vpcencryptioncontrol-vpclatticeexclusioninput}
+     */
+    VpcLatticeExclusionInput?: "enable" | "disable" | undefined;
+    /**
+     * Specifies whether to exclude VPC peering connection traffic from encryption enforcement.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcencryptioncontrol.html#cfn-ec2-vpcencryptioncontrol-vpcpeeringexclusioninput}
+     */
+    VpcPeeringExclusionInput?: "enable" | "disable" | undefined;
+};
+/**
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcencryptioncontrol.html#aws-resource-ec2-vpcencryptioncontrol-return-values}
+ */
+export type EC2VPCEncryptionControlAttribs = {
+    /**
+     * The current state of the exclusion configuration.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion.html#cfn-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion-state}
+     */
+    "ResourceExclusions.EgressOnlyInternetGateway.State": string;
+    /**
+     * A message providing additional information about the exclusion state.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion.html#cfn-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion-statemessage}
+     */
+    "ResourceExclusions.EgressOnlyInternetGateway.StateMessage": string;
+    /**
+     * The current state of the exclusion configuration.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion.html#cfn-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion-state}
+     */
+    "ResourceExclusions.ElasticFileSystem.State": string;
+    /**
+     * A message providing additional information about the exclusion state.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion.html#cfn-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion-statemessage}
+     */
+    "ResourceExclusions.ElasticFileSystem.StateMessage": string;
+    /**
+     * The current state of the exclusion configuration.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion.html#cfn-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion-state}
+     */
+    "ResourceExclusions.InternetGateway.State": string;
+    /**
+     * A message providing additional information about the exclusion state.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion.html#cfn-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion-statemessage}
+     */
+    "ResourceExclusions.InternetGateway.StateMessage": string;
+    /**
+     * The current state of the exclusion configuration.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion.html#cfn-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion-state}
+     */
+    "ResourceExclusions.Lambda.State": string;
+    /**
+     * A message providing additional information about the exclusion state.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion.html#cfn-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion-statemessage}
+     */
+    "ResourceExclusions.Lambda.StateMessage": string;
+    /**
+     * The current state of the exclusion configuration.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion.html#cfn-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion-state}
+     */
+    "ResourceExclusions.NatGateway.State": string;
+    /**
+     * A message providing additional information about the exclusion state.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion.html#cfn-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion-statemessage}
+     */
+    "ResourceExclusions.NatGateway.StateMessage": string;
+    /**
+     * The current state of the exclusion configuration.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion.html#cfn-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion-state}
+     */
+    "ResourceExclusions.VirtualPrivateGateway.State": string;
+    /**
+     * A message providing additional information about the exclusion state.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion.html#cfn-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion-statemessage}
+     */
+    "ResourceExclusions.VirtualPrivateGateway.StateMessage": string;
+    /**
+     * The current state of the exclusion configuration.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion.html#cfn-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion-state}
+     */
+    "ResourceExclusions.VpcLattice.State": string;
+    /**
+     * A message providing additional information about the exclusion state.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion.html#cfn-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion-statemessage}
+     */
+    "ResourceExclusions.VpcLattice.StateMessage": string;
+    /**
+     * The current state of the exclusion configuration.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion.html#cfn-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion-state}
+     */
+    "ResourceExclusions.VpcPeering.State": string;
+    /**
+     * A message providing additional information about the exclusion state.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion.html#cfn-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion-statemessage}
+     */
+    "ResourceExclusions.VpcPeering.StateMessage": string;
+    /**
+     * The current state of the VPC Encryption Control configuration.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcencryptioncontrol.html#cfn-ec2-vpcencryptioncontrol-state}
+     */
+    State: "creating" | "available" | "monitor-in-progress" | "enforce-in-progress" | "monitor-failed" | "enforce-failed" | "deleting" | "deleted" | "delete-failed";
+    /**
+     * A message providing additional information about the encryption control state.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcencryptioncontrol.html#cfn-ec2-vpcencryptioncontrol-statemessage}
+     */
+    StateMessage: string;
+    /**
+     * The ID of the VPC Encryption Control configuration.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcencryptioncontrol.html#cfn-ec2-vpcencryptioncontrol-vpcencryptioncontrolid}
+     */
+    VpcEncryptionControlId: string;
+};
+//# sourceMappingURL=aws-ec2-vpcencryptioncontrol.d.ts.map

package/out/exports/resources.generated/aws-ec2-vpcendpoint.d.ts

@@ -150,5 +150,15 @@ export type DnsOptionsSpecification = {
      * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpcendpoint-dnsoptionsspecification.html#cfn-ec2-vpcendpoint-dnsoptionsspecification-privatednsonlyforinboundresolverendpoint}
      */
     PrivateDnsOnlyForInboundResolverEndpoint?: "OnlyInboundResolver" | "AllResolvers" | "NotSpecified" | undefined;
+    /**
+     * The preference for which private domains have a private hosted zone created for and associated with the specified VPC. Only supported when private DNS is enabled and when the VPC endpoint type is ServiceNetwork or Resource.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpcendpoint-dnsoptionsspecification.html#cfn-ec2-vpcendpoint-dnsoptionsspecification-privatednspreference}
+     */
+    PrivateDnsPreference?: "VERIFIED_DOMAINS_ONLY" | "ALL_DOMAINS" | "VERIFIED_DOMAINS_AND_SPECIFIED_DOMAINS" | "SPECIFIED_DOMAINS_ONLY" | undefined;
+    /**
+     * Indicates which of the private domains to create private hosted zones for and associate with the specified VPC. Only supported when private DNS is enabled and the private DNS preference is `VERIFIED_DOMAINS_AND_SPECIFIED_DOMAINS` or `SPECIFIED_DOMAINS_ONLY` .
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpcendpoint-dnsoptionsspecification.html#cfn-ec2-vpcendpoint-dnsoptionsspecification-privatednsspecifieddomains}
+     */
+    PrivateDnsSpecifiedDomains?: string[] | undefined;
 };
 //# sourceMappingURL=aws-ec2-vpcendpoint.d.ts.map

package/out/exports/resources.generated/aws-ec2-vpnconcentrator.d.ts

@@ -0,0 +1,43 @@
+import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
+/**
+ * Resource Type definition for AWS::EC2::VPNConcentrator
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpnconcentrator.html}
+ */
+export type EC2VPNConcentrator = ResourceDefinitionWithAttributes<"AWS::EC2::VPNConcentrator", EC2VPNConcentratorProps, EC2VPNConcentratorAttribs>;
+/**
+ * Resource Type definition for AWS::EC2::VPNConcentrator
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpnconcentrator.html}
+ */
+export type EC2VPNConcentratorProps = {
+    /**
+     * Any tags assigned to the VPN concentrator.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpnconcentrator.html#cfn-ec2-vpnconcentrator-tags}
+     */
+    Tags?: Tag[] | undefined;
+    /**
+     * The ID of the transit gateway
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpnconcentrator.html#cfn-ec2-vpnconcentrator-transitgatewayid}
+     */
+    TransitGatewayId: string;
+    /**
+     * The type of VPN concentrator
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpnconcentrator.html#cfn-ec2-vpnconcentrator-type}
+     */
+    Type: string;
+};
+/**
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpnconcentrator.html#aws-resource-ec2-vpnconcentrator-return-values}
+ */
+export type EC2VPNConcentratorAttribs = {
+    /**
+     * The ID of the transit gateway attachment
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpnconcentrator.html#cfn-ec2-vpnconcentrator-transitgatewayattachmentid}
+     */
+    TransitGatewayAttachmentId: string;
+    /**
+     * The provider-assigned unique ID for this managed resource
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpnconcentrator.html#cfn-ec2-vpnconcentrator-vpnconcentratorid}
+     */
+    VpnConcentratorId: string;
+};
+//# sourceMappingURL=aws-ec2-vpnconcentrator.d.ts.map

package/out/exports/resources.generated/aws-ec2-vpnconnection.d.ts

@@ -101,6 +101,11 @@ export type EC2VPNConnectionProps = {
      * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpnconnection.html#cfn-ec2-vpnconnection-transporttransitgatewayattachmentid}
      */
     TransportTransitGatewayAttachmentId?: string | undefined;
+    /**
+     * @default "standard"
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpnconnection.html#cfn-ec2-vpnconnection-tunnelbandwidth}
+     */
+    TunnelBandwidth?: "standard" | "large" | undefined;
     /**
      * Indicate whether the VPN tunnels process IPv4 or IPv6 traffic.
      *
@@ -113,6 +118,10 @@ export type EC2VPNConnectionProps = {
      * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpnconnection.html#cfn-ec2-vpnconnection-type}
      */
     Type: string;
+    /**
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpnconnection.html#cfn-ec2-vpnconnection-vpnconcentratorid}
+     */
+    VpnConcentratorId?: string | undefined;
     /**
      * The ID of the virtual private gateway at the AWS side of the VPN connection.
      *
@@ -141,6 +150,25 @@ export type EC2VPNConnectionAttribs = {
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpnconnection-cloudwatchlogoptionsspecification.html}
  */
 export type CloudwatchLogOptionsSpecification = {
+    /**
+     * Specifies whether to enable BGP logging for the VPN connection. Default value is `False` .
+     *
+     * Valid values: `True` | `False`
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpnconnection-cloudwatchlogoptionsspecification.html#cfn-ec2-vpnconnection-cloudwatchlogoptionsspecification-bgplogenabled}
+     */
+    BgpLogEnabled?: boolean | undefined;
+    /**
+     * The Amazon Resource Name (ARN) of the CloudWatch log group where BGP logs will be sent.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpnconnection-cloudwatchlogoptionsspecification.html#cfn-ec2-vpnconnection-cloudwatchlogoptionsspecification-bgploggrouparn}
+     */
+    BgpLogGroupArn?: string | undefined;
+    /**
+     * The desired output format for BGP logs to be sent to CloudWatch. Default format is `json` .
+     *
+     * Valid values: `json` | `text`
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpnconnection-cloudwatchlogoptionsspecification.html#cfn-ec2-vpnconnection-cloudwatchlogoptionsspecification-bgplogoutputformat}
+     */
+    BgpLogOutputFormat?: "json" | "text" | undefined;
     /**
      * Enable or disable VPN tunnel logging feature. Default value is `False` .
      *

package/out/exports/resources.generated/aws-ecr-pulltimeupdateexclusion.d.ts

@@ -0,0 +1,18 @@
+import type { ResourceDefinition } from "../main.ts";
+/**
+ * Resource Type definition for AWS::ECR::PullTimeUpdateExclusion controls the exclusion configuration for ecr image pull time update.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-pulltimeupdateexclusion.html}
+ */
+export type ECRPullTimeUpdateExclusion = ResourceDefinition<"AWS::ECR::PullTimeUpdateExclusion", ECRPullTimeUpdateExclusionProps>;
+/**
+ * Resource Type definition for AWS::ECR::PullTimeUpdateExclusion controls the exclusion configuration for ecr image pull time update.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-pulltimeupdateexclusion.html}
+ */
+export type ECRPullTimeUpdateExclusionProps = {
+    /**
+     * The ARN of the IAM principal to remove from the pull time update exclusion list.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-pulltimeupdateexclusion.html#cfn-ecr-pulltimeupdateexclusion-principalarn}
+     */
+    PrincipalArn: string;
+};
+//# sourceMappingURL=aws-ecr-pulltimeupdateexclusion.d.ts.map

package/out/exports/resources.generated/aws-ecr-repository.d.ts

@@ -84,16 +84,16 @@ export type ECRRepositoryAttribs = {
  *
  * By default, when no encryption configuration is set or the `AES256` encryption type is used, Amazon ECR uses server-side encryption with Amazon S3-managed encryption keys which encrypts your data at rest using an AES256 encryption algorithm. This does not require any action on your part.
  *
- * For more control over the encryption of the contents of your repository, you can use server-side encryption with AWS Key Management Service key stored in AWS Key Management Service ( AWS KMS ) to encrypt your images. For more information, see [Amazon ECR encryption at rest](https://docs.aws.amazon.com/AmazonECR/latest/userguide/encryption-at-rest.html) in the *Amazon Elastic Container Registry User Guide* .
+ * For more control over the encryption of the contents of your repository, you can use server-side encryption with AWS Key Management Service key stored in AWS Key Management Service ( AWS  ) to encrypt your images. For more information, see [Amazon ECR encryption at rest](https://docs.aws.amazon.com/AmazonECR/latest/userguide/encryption-at-rest.html) in the *Amazon Elastic Container Registry User Guide* .
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-repository-encryptionconfiguration.html}
  */
 export type EncryptionConfiguration = {
     /**
      * The encryption type to use.
      *
-     * If you use the `KMS` encryption type, the contents of the repository will be encrypted using server-side encryption with AWS Key Management Service key stored in AWS KMS . When you use AWS KMS to encrypt your data, you can either use the default AWS managed AWS KMS key for Amazon ECR, or specify your own AWS KMS key, which you already created.
+     * If you use the `KMS` encryption type, the contents of the repository will be encrypted using server-side encryption with AWS Key Management Service key stored in AWS  . When you use AWS  to encrypt your data, you can either use the default AWS managed AWS  key for Amazon ECR, or specify your own AWS  key, which you already created.
      *
-     * If you use the `KMS_DSSE` encryption type, the contents of the repository will be encrypted with two layers of encryption using server-side encryption with the AWS KMS Management Service key stored in AWS KMS . Similar to the `KMS` encryption type, you can either use the default AWS managed AWS KMS key for Amazon ECR, or specify your own AWS KMS key, which you've already created.
+     * If you use the `KMS_DSSE` encryption type, the contents of the repository will be encrypted with two layers of encryption using server-side encryption with the AWS  Management Service key stored in AWS  . Similar to the `KMS` encryption type, you can either use the default AWS managed AWS  key for Amazon ECR, or specify your own AWS  key, which you've already created.
      *
      * If you use the `AES256` encryption type, Amazon ECR uses server-side encryption with Amazon S3-managed encryption keys which encrypts the images in the repository using an AES256 encryption algorithm.
      *
@@ -102,7 +102,7 @@ export type EncryptionConfiguration = {
      */
     EncryptionType: EncryptionType;
     /**
-     * If you use the `KMS` encryption type, specify the AWS KMS key to use for encryption. The alias, key ID, or full ARN of the AWS KMS key can be specified. The key must exist in the same Region as the repository. If no key is specified, the default AWS managed AWS KMS key for Amazon ECR will be used.
+     * If you use the `KMS` encryption type, specify the AWS  key to use for encryption. The alias, key ID, or full ARN of the AWS  key can be specified. The key must exist in the same Region as the repository. If no key is specified, the default AWS managed AWS  key for Amazon ECR will be used.
      * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-repository-encryptionconfiguration.html#cfn-ecr-repository-encryptionconfiguration-kmskey}
      */
     KmsKey?: string | undefined;

package/out/exports/resources.generated/aws-ecr-repositorycreationtemplate.d.ts

@@ -94,16 +94,16 @@ export type AppliedForItem = "REPLICATION" | "PULL_THROUGH_CACHE";
  *
  * By default, when no encryption configuration is set or the `AES256` encryption type is used, Amazon ECR uses server-side encryption with Amazon S3-managed encryption keys which encrypts your data at rest using an AES256 encryption algorithm. This does not require any action on your part.
  *
- * For more control over the encryption of the contents of your repository, you can use server-side encryption with AWS Key Management Service key stored in AWS Key Management Service ( AWS KMS ) to encrypt your images. For more information, see [Amazon ECR encryption at rest](https://docs.aws.amazon.com/AmazonECR/latest/userguide/encryption-at-rest.html) in the *Amazon Elastic Container Registry User Guide* .
+ * For more control over the encryption of the contents of your repository, you can use server-side encryption with AWS Key Management Service key stored in AWS Key Management Service ( AWS  ) to encrypt your images. For more information, see [Amazon ECR encryption at rest](https://docs.aws.amazon.com/AmazonECR/latest/userguide/encryption-at-rest.html) in the *Amazon Elastic Container Registry User Guide* .
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-repositorycreationtemplate-encryptionconfiguration.html}
  */
 export type EncryptionConfiguration = {
     /**
      * The encryption type to use.
      *
-     * If you use the `KMS` encryption type, the contents of the repository will be encrypted using server-side encryption with AWS Key Management Service key stored in AWS KMS . When you use AWS KMS to encrypt your data, you can either use the default AWS managed AWS KMS key for Amazon ECR, or specify your own AWS KMS key, which you already created.
+     * If you use the `KMS` encryption type, the contents of the repository will be encrypted using server-side encryption with AWS Key Management Service key stored in AWS  . When you use AWS  to encrypt your data, you can either use the default AWS managed AWS  key for Amazon ECR, or specify your own AWS  key, which you already created.
      *
-     * If you use the `KMS_DSSE` encryption type, the contents of the repository will be encrypted with two layers of encryption using server-side encryption with the AWS KMS Management Service key stored in AWS KMS . Similar to the `KMS` encryption type, you can either use the default AWS managed AWS KMS key for Amazon ECR, or specify your own AWS KMS key, which you've already created.
+     * If you use the `KMS_DSSE` encryption type, the contents of the repository will be encrypted with two layers of encryption using server-side encryption with the AWS  Management Service key stored in AWS  . Similar to the `KMS` encryption type, you can either use the default AWS managed AWS  key for Amazon ECR, or specify your own AWS  key, which you've already created.
      *
      * If you use the `AES256` encryption type, Amazon ECR uses server-side encryption with Amazon S3-managed encryption keys which encrypts the images in the repository using an AES256 encryption algorithm.
      *
@@ -112,7 +112,7 @@ export type EncryptionConfiguration = {
      */
     EncryptionType: EncryptionType;
     /**
-     * If you use the `KMS` encryption type, specify the AWS KMS key to use for encryption. The alias, key ID, or full ARN of the AWS KMS key can be specified. The key must exist in the same Region as the repository. If no key is specified, the default AWS managed AWS KMS key for Amazon ECR will be used.
+     * If you use the `KMS` encryption type, specify the AWS  key to use for encryption. The alias, key ID, or full ARN of the AWS  key can be specified. The key must exist in the same Region as the repository. If no key is specified, the default AWS managed AWS  key for Amazon ECR will be used.
      * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-repositorycreationtemplate-encryptionconfiguration.html#cfn-ecr-repositorycreationtemplate-encryptionconfiguration-kmskey}
      */
     KmsKey?: string | undefined;

package/out/exports/resources.generated/aws-ecr-signingconfiguration.d.ts

@@ -0,0 +1,74 @@
+import type { ResourceDefinitionWithAttributes } from "../main.ts";
+/**
+ * The signing configuration for a registry, which specifies rules for automatically signing images when pushed.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-signingconfiguration.html}
+ */
+export type ECRSigningConfiguration = ResourceDefinitionWithAttributes<"AWS::ECR::SigningConfiguration", ECRSigningConfigurationProps, ECRSigningConfigurationAttribs>;
+/**
+ * The signing configuration for a registry, which specifies rules for automatically signing images when pushed.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-signingconfiguration.html}
+ */
+export type ECRSigningConfigurationProps = {
+    /**
+     * A list of signing rules. Each rule defines a signing profile and optional repository filters that determine which images are automatically signed.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-signingconfiguration.html#cfn-ecr-signingconfiguration-rules}
+     */
+    Rules: Rule[];
+};
+/**
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-signingconfiguration.html#aws-resource-ecr-signingconfiguration-return-values}
+ */
+export type ECRSigningConfigurationAttribs = {
+    /**
+     * The account ID of the destination registry.
+     * @pattern ^[0-9]{12}$
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-signingconfiguration.html#cfn-ecr-signingconfiguration-registryid}
+     */
+    RegistryId: string;
+};
+/**
+ * Type of repository filter
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-signingconfiguration-filtertype.html}
+ */
+export type FilterType = "WILDCARD_MATCH";
+/**
+ * A repository filter used to determine which repositories have their images automatically signed on push. Each filter consists of a filter type and filter value.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-signingconfiguration-repositoryfilter.html}
+ */
+export type RepositoryFilter = {
+    /**
+     * The filter value used to match repository names. When using `WILDCARD_MATCH` , the `*` character matches any sequence of characters.
+     *
+     * Examples:
+     *
+     * - `myapp/*` - Matches all repositories starting with `myapp/`
+     * - `*‍/production` - Matches all repositories ending with `/production`
+     * - `*prod*` - Matches all repositories containing `prod`
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-signingconfiguration-repositoryfilter.html#cfn-ecr-signingconfiguration-repositoryfilter-filter}
+     */
+    Filter: string;
+    /**
+     * The type of filter to apply. Currently, only `WILDCARD_MATCH` is supported, which uses wildcard patterns to match repository names.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-signingconfiguration-repositoryfilter.html#cfn-ecr-signingconfiguration-repositoryfilter-filtertype}
+     */
+    FilterType: FilterType;
+};
+/**
+ * A signing rule that specifies a signing profile and optional repository filters. When an image is pushed to a matching repository, a signing job is created using the specified profile.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-signingconfiguration-rule.html}
+ */
+export type Rule = {
+    /**
+     * A list of repository filters that determine which repositories have their images signed on push. If no filters are specified, all images pushed to the registry are signed using the rule's signing profile. Maximum of 100 filters per rule.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-signingconfiguration-rule.html#cfn-ecr-signingconfiguration-rule-repositoryfilters}
+     */
+    RepositoryFilters?: RepositoryFilter[] | undefined;
+    /**
+     * The ARN of the AWS Signer signing profile to use for signing images that match this rule. For more information about signing profiles, see [Signing profiles](https://docs.aws.amazon.com/signer/latest/developerguide/signing-profiles.html) in the *AWS Signer Developer Guide* .
+     * @maxLength 200
+     * @pattern ^arn:aws(-[a-z]+)*:signer:[a-z0-9-]+:[0-9]{12}:\/signing-profiles\/[a-zA-Z0-9_]{2,}$
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-signingconfiguration-rule.html#cfn-ecr-signingconfiguration-rule-signingprofilearn}
+     */
+    SigningProfileArn: string;
+};
+//# sourceMappingURL=aws-ecr-signingconfiguration.d.ts.map

package/out/exports/resources.generated/aws-ecs-capacityprovider.d.ts

@@ -316,6 +316,18 @@ export type ManagedInstancesNetworkConfiguration = {
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-capacityprovider-managedinstancesprovider.html}
  */
 export type ManagedInstancesProvider = {
+    /**
+     * Defines how Amazon ECS Managed Instances optimizes the infrastastructure in your capacity provider. Configure it to turn on or off the infrastructure optimization in your capacity provider, and to control the idle or underutilized EC2 instances optimization delay.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-capacityprovider-managedinstancesprovider.html#cfn-ecs-capacityprovider-managedinstancesprovider-infrastructureoptimization}
+     */
+    InfrastructureOptimization?: {
+        /**
+         * This parameter defines the number of seconds Amazon ECS Managed Instances waits before optimizing EC2 instances that have become idle or underutilized. A longer delay increases the likelihood of placing new tasks on idle instances, reducing startup time. A shorter delay helps reduce infrastructure costs by optimizing idle instances more quickly. Valid values are: Not set (null) - Uses the default optimization behavior, `-1` - Disables automatic infrastructure optimization, `0` to `3600` (inclusive) - Specifies the number of seconds to wait before optimizing instances.
+         * @min -1
+         * @max 3600
+         */
+        ScaleInAfter?: number | undefined;
+    } | undefined;
     /**
      * The Amazon Resource Name (ARN) of the infrastructure role that Amazon ECS assumes to manage instances. This role must include permissions for Amazon EC2 instance lifecycle management, networking, and any additional AWS services required for your workloads.
      *