@propulsionworks/cloudformation 0.1.36 → 0.1.38

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (83) hide show
  1. package/out/exports/resources.generated/aws-athena-workgroup.d.ts +14 -5
  2. package/out/exports/resources.generated/aws-bedrock-guardrail.d.ts +2 -2
  3. package/out/exports/resources.generated/aws-bedrock-knowledgebase.d.ts +7 -0
  4. package/out/exports/resources.generated/aws-cassandra-table.d.ts +1 -0
  5. package/out/exports/resources.generated/aws-cloudfront-connectionfunction.d.ts +20 -2
  6. package/out/exports/resources.generated/aws-cloudfront-distribution.d.ts +63 -0
  7. package/out/exports/resources.generated/aws-cloudfront-truststore.d.ts +101 -0
  8. package/out/exports/resources.generated/aws-cloudtrail-eventdatastore.d.ts +1 -1
  9. package/out/exports/resources.generated/aws-cloudtrail-trail.d.ts +8 -5
  10. package/out/exports/resources.generated/aws-cognito-terms.d.ts +33 -2
  11. package/out/exports/resources.generated/aws-connect-datatable.d.ts +82 -0
  12. package/out/exports/resources.generated/aws-connect-datatableattribute.d.ts +84 -0
  13. package/out/exports/resources.generated/aws-connect-datatablerecord.d.ts +55 -0
  14. package/out/exports/resources.generated/aws-connect-evaluationform.d.ts +120 -1
  15. package/out/exports/resources.generated/aws-customerprofiles-segmentdefinition.d.ts +14 -2
  16. package/out/exports/resources.generated/aws-deadline-fleet.d.ts +12 -16
  17. package/out/exports/resources.generated/aws-deadline-monitor.d.ts +3 -3
  18. package/out/exports/resources.generated/aws-devopsagent-agentspace.d.ts +56 -0
  19. package/out/exports/resources.generated/aws-devopsagent-association.d.ts +444 -0
  20. package/out/exports/resources.generated/aws-directoryservice-microsoftad.d.ts +2 -2
  21. package/out/exports/resources.generated/aws-directoryservice-simplead.d.ts +2 -2
  22. package/out/exports/resources.generated/aws-ec2-capacityreservation.d.ts +1 -1
  23. package/out/exports/resources.generated/aws-ec2-ipamscope.d.ts +1 -1
  24. package/out/exports/resources.generated/aws-ec2-natgateway.d.ts +31 -0
  25. package/out/exports/resources.generated/aws-ec2-transitgatewaymeteringpolicy.d.ts +8 -5
  26. package/out/exports/resources.generated/aws-ec2-transitgatewaymeteringpolicyentry.d.ts +10 -8
  27. package/out/exports/resources.generated/aws-ec2-volume.d.ts +136 -67
  28. package/out/exports/resources.generated/aws-ec2-vpcencryptioncontrol.d.ts +36 -14
  29. package/out/exports/resources.generated/aws-ec2-vpnconnection.d.ts +7 -0
  30. package/out/exports/resources.generated/aws-ecr-pulltimeupdateexclusion.d.ts +3 -0
  31. package/out/exports/resources.generated/aws-ecr-signingconfiguration.d.ts +16 -5
  32. package/out/exports/resources.generated/aws-ecs-capacityprovider.d.ts +1 -1
  33. package/out/exports/resources.generated/aws-ecs-expressgatewayservice.d.ts +67 -0
  34. package/out/exports/resources.generated/aws-ecs-service.d.ts +2 -0
  35. package/out/exports/resources.generated/aws-eks-capability.d.ts +189 -0
  36. package/out/exports/resources.generated/aws-eks-cluster.d.ts +4 -3
  37. package/out/exports/resources.generated/aws-elasticloadbalancingv2-listener.d.ts +6 -1
  38. package/out/exports/resources.generated/aws-elasticloadbalancingv2-listenerrule.d.ts +5 -0
  39. package/out/exports/resources.generated/aws-elasticloadbalancingv2-loadbalancer.d.ts +3 -0
  40. package/out/exports/resources.generated/aws-elasticloadbalancingv2-targetgroup.d.ts +10 -8
  41. package/out/exports/resources.generated/aws-events-rule.d.ts +1 -1
  42. package/out/exports/resources.generated/aws-fsx-filesystem.d.ts +8 -0
  43. package/out/exports/resources.generated/aws-fsx-storagevirtualmachine.d.ts +8 -0
  44. package/out/exports/resources.generated/aws-gamelift-containergroupdefinition.d.ts +1 -1
  45. package/out/exports/resources.generated/aws-gamelift-fleet.d.ts +3 -3
  46. package/out/exports/resources.generated/aws-gamelift-script.d.ts +1 -1
  47. package/out/exports/resources.generated/aws-glue-connection.d.ts +0 -30
  48. package/out/exports/resources.generated/aws-glue-identitycenterconfiguration.d.ts +49 -0
  49. package/out/exports/resources.generated/aws-iam-samlprovider.d.ts +4 -4
  50. package/out/exports/resources.generated/aws-iam-user.d.ts +3 -3
  51. package/out/exports/resources.generated/aws-iotfleethub-application.d.ts +0 -15
  52. package/out/exports/resources.generated/aws-kinesisvideo-stream.d.ts +8 -3
  53. package/out/exports/resources.generated/aws-lambda-capacityprovider.d.ts +183 -0
  54. package/out/exports/resources.generated/aws-lambda-eventinvokeconfig.d.ts +3 -3
  55. package/out/exports/resources.generated/aws-lambda-eventsourcemapping.d.ts +6 -5
  56. package/out/exports/resources.generated/aws-lambda-function.d.ts +95 -2
  57. package/out/exports/resources.generated/aws-lambda-version.d.ts +23 -0
  58. package/out/exports/resources.generated/aws-medialive-channel.d.ts +12 -0
  59. package/out/exports/resources.generated/aws-medialive-input.d.ts +30 -0
  60. package/out/exports/resources.generated/aws-observabilityadmin-s3tableintegration.d.ts +88 -0
  61. package/out/exports/resources.generated/aws-observabilityadmin-telemetrypipelines.d.ts +66 -0
  62. package/out/exports/resources.generated/aws-organizations-policy.d.ts +5 -1
  63. package/out/exports/resources.generated/aws-pcs-cluster.d.ts +7 -6
  64. package/out/exports/resources.generated/aws-rbin-rule.d.ts +10 -3
  65. package/out/exports/resources.generated/aws-route53-recordset.d.ts +4 -4
  66. package/out/exports/resources.generated/aws-route53-recordsetgroup.d.ts +4 -4
  67. package/out/exports/resources.generated/aws-rtbfabric-outboundexternallink.d.ts +128 -0
  68. package/out/exports/resources.generated/aws-s3-accessgrantslocation.d.ts +2 -2
  69. package/out/exports/resources.generated/aws-s3-accesspoint.d.ts +1 -1
  70. package/out/exports/resources.generated/aws-s3-bucket.d.ts +19 -2
  71. package/out/exports/resources.generated/aws-s3-storagelens.d.ts +68 -0
  72. package/out/exports/resources.generated/aws-s3objectlambda-accesspoint.d.ts +0 -6
  73. package/out/exports/resources.generated/aws-s3objectlambda-accesspointpolicy.d.ts +0 -2
  74. package/out/exports/resources.generated/aws-s3tables-table.d.ts +16 -0
  75. package/out/exports/resources.generated/aws-s3tables-tablebucket.d.ts +16 -0
  76. package/out/exports/resources.generated/aws-sagemaker-cluster.d.ts +10 -4
  77. package/out/exports/resources.generated/aws-secretsmanager-rotationschedule.d.ts +3 -3
  78. package/out/exports/resources.generated/aws-secretsmanager-secret.d.ts +1 -0
  79. package/out/exports/resources.generated/aws-securityhub-automationrulev2.d.ts +2 -2
  80. package/out/exports/resources.generated/aws-securityhub-connectorv2.d.ts +137 -0
  81. package/out/exports/resources.generated/aws-sso-application.d.ts +2 -2
  82. package/out/exports/resources.generated/aws-transfer-webapp.d.ts +6 -2
  83. package/package.json +1 -1
@@ -1,64 +1,70 @@
1
1
  import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
2
2
  /**
3
+ * Describes the configuration and state of VPC encryption controls.
4
+ *
5
+ * For more information, see [Enforce VPC encryption in transit](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-encryption-controls.html) in the *Amazon VPC User Guide* .
3
6
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcencryptioncontrol.html}
4
7
  */
5
8
  export type EC2VPCEncryptionControl = ResourceDefinitionWithAttributes<"AWS::EC2::VPCEncryptionControl", EC2VPCEncryptionControlProps, EC2VPCEncryptionControlAttribs>;
6
9
  /**
10
+ * Describes the configuration and state of VPC encryption controls.
11
+ *
12
+ * For more information, see [Enforce VPC encryption in transit](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-encryption-controls.html) in the *Amazon VPC User Guide* .
7
13
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcencryptioncontrol.html}
8
14
  */
9
15
  export type EC2VPCEncryptionControlProps = {
10
16
  /**
11
- * Used to enable or disable EIGW exclusion
17
+ * Specifies whether to exclude egress-only internet gateway traffic from encryption enforcement.
12
18
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcencryptioncontrol.html#cfn-ec2-vpcencryptioncontrol-egressonlyinternetgatewayexclusioninput}
13
19
  */
14
20
  EgressOnlyInternetGatewayExclusionInput?: "enable" | "disable" | undefined;
15
21
  /**
16
- * Used to enable or disable EFS exclusion
22
+ * Specifies whether to exclude Elastic File System traffic from encryption enforcement.
17
23
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcencryptioncontrol.html#cfn-ec2-vpcencryptioncontrol-elasticfilesystemexclusioninput}
18
24
  */
19
25
  ElasticFileSystemExclusionInput?: "enable" | "disable" | undefined;
20
26
  /**
21
- * Used to enable or disable IGW exclusion
27
+ * Specifies whether to exclude internet gateway traffic from encryption enforcement.
22
28
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcencryptioncontrol.html#cfn-ec2-vpcencryptioncontrol-internetgatewayexclusioninput}
23
29
  */
24
30
  InternetGatewayExclusionInput?: "enable" | "disable" | undefined;
25
31
  /**
26
- * Used to enable or disable Lambda exclusion
32
+ * Specifies whether to exclude Lambda function traffic from encryption enforcement.
27
33
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcencryptioncontrol.html#cfn-ec2-vpcencryptioncontrol-lambdaexclusioninput}
28
34
  */
29
35
  LambdaExclusionInput?: "enable" | "disable" | undefined;
30
36
  /**
31
- * The VPC encryption control mode, either monitor or enforce.
37
+ * The encryption mode for the VPC Encryption Control configuration.
32
38
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcencryptioncontrol.html#cfn-ec2-vpcencryptioncontrol-mode}
33
39
  */
34
40
  Mode?: "monitor" | "enforce" | undefined;
35
41
  /**
36
- * Used to enable or disable Nat gateway exclusion
42
+ * Specifies whether to exclude NAT gateway traffic from encryption enforcement.
37
43
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcencryptioncontrol.html#cfn-ec2-vpcencryptioncontrol-natgatewayexclusioninput}
38
44
  */
39
45
  NatGatewayExclusionInput?: "enable" | "disable" | undefined;
40
46
  /**
41
- * The tags to assign to the VPC encryption control.
47
+ * The tags assigned to the VPC Encryption Control configuration.
42
48
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcencryptioncontrol.html#cfn-ec2-vpcencryptioncontrol-tags}
43
49
  */
44
50
  Tags?: Tag[] | undefined;
45
51
  /**
46
- * Used to enable or disable VGW exclusion
52
+ * Specifies whether to exclude virtual private gateway traffic from encryption enforcement.
47
53
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcencryptioncontrol.html#cfn-ec2-vpcencryptioncontrol-virtualprivategatewayexclusioninput}
48
54
  */
49
55
  VirtualPrivateGatewayExclusionInput?: "enable" | "disable" | undefined;
50
56
  /**
51
- * The VPC on which this VPC encryption control is applied.
57
+ * The ID of the VPC for which to create the encryption control configuration.
52
58
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcencryptioncontrol.html#cfn-ec2-vpcencryptioncontrol-vpcid}
53
59
  */
54
60
  VpcId?: string | undefined;
55
61
  /**
56
- * Used to enable or disable Vpc Lattice exclusion
62
+ * Specifies whether to exclude VPC Lattice traffic from encryption enforcement.
57
63
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcencryptioncontrol.html#cfn-ec2-vpcencryptioncontrol-vpclatticeexclusioninput}
58
64
  */
59
65
  VpcLatticeExclusionInput?: "enable" | "disable" | undefined;
60
66
  /**
61
- * Used to enable or disable VPC peering exclusion
67
+ * Specifies whether to exclude VPC peering connection traffic from encryption enforcement.
62
68
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcencryptioncontrol.html#cfn-ec2-vpcencryptioncontrol-vpcpeeringexclusioninput}
63
69
  */
64
70
  VpcPeeringExclusionInput?: "enable" | "disable" | undefined;
@@ -68,81 +74,97 @@ export type EC2VPCEncryptionControlProps = {
68
74
  */
69
75
  export type EC2VPCEncryptionControlAttribs = {
70
76
  /**
77
+ * The current state of the exclusion configuration.
71
78
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion.html#cfn-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion-state}
72
79
  */
73
80
  "ResourceExclusions.EgressOnlyInternetGateway.State": string;
74
81
  /**
82
+ * A message providing additional information about the exclusion state.
75
83
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion.html#cfn-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion-statemessage}
76
84
  */
77
85
  "ResourceExclusions.EgressOnlyInternetGateway.StateMessage": string;
78
86
  /**
87
+ * The current state of the exclusion configuration.
79
88
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion.html#cfn-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion-state}
80
89
  */
81
90
  "ResourceExclusions.ElasticFileSystem.State": string;
82
91
  /**
92
+ * A message providing additional information about the exclusion state.
83
93
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion.html#cfn-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion-statemessage}
84
94
  */
85
95
  "ResourceExclusions.ElasticFileSystem.StateMessage": string;
86
96
  /**
97
+ * The current state of the exclusion configuration.
87
98
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion.html#cfn-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion-state}
88
99
  */
89
100
  "ResourceExclusions.InternetGateway.State": string;
90
101
  /**
102
+ * A message providing additional information about the exclusion state.
91
103
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion.html#cfn-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion-statemessage}
92
104
  */
93
105
  "ResourceExclusions.InternetGateway.StateMessage": string;
94
106
  /**
107
+ * The current state of the exclusion configuration.
95
108
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion.html#cfn-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion-state}
96
109
  */
97
110
  "ResourceExclusions.Lambda.State": string;
98
111
  /**
112
+ * A message providing additional information about the exclusion state.
99
113
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion.html#cfn-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion-statemessage}
100
114
  */
101
115
  "ResourceExclusions.Lambda.StateMessage": string;
102
116
  /**
117
+ * The current state of the exclusion configuration.
103
118
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion.html#cfn-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion-state}
104
119
  */
105
120
  "ResourceExclusions.NatGateway.State": string;
106
121
  /**
122
+ * A message providing additional information about the exclusion state.
107
123
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion.html#cfn-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion-statemessage}
108
124
  */
109
125
  "ResourceExclusions.NatGateway.StateMessage": string;
110
126
  /**
127
+ * The current state of the exclusion configuration.
111
128
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion.html#cfn-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion-state}
112
129
  */
113
130
  "ResourceExclusions.VirtualPrivateGateway.State": string;
114
131
  /**
132
+ * A message providing additional information about the exclusion state.
115
133
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion.html#cfn-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion-statemessage}
116
134
  */
117
135
  "ResourceExclusions.VirtualPrivateGateway.StateMessage": string;
118
136
  /**
137
+ * The current state of the exclusion configuration.
119
138
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion.html#cfn-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion-state}
120
139
  */
121
140
  "ResourceExclusions.VpcLattice.State": string;
122
141
  /**
142
+ * A message providing additional information about the exclusion state.
123
143
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion.html#cfn-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion-statemessage}
124
144
  */
125
145
  "ResourceExclusions.VpcLattice.StateMessage": string;
126
146
  /**
147
+ * The current state of the exclusion configuration.
127
148
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion.html#cfn-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion-state}
128
149
  */
129
150
  "ResourceExclusions.VpcPeering.State": string;
130
151
  /**
152
+ * A message providing additional information about the exclusion state.
131
153
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion.html#cfn-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion-statemessage}
132
154
  */
133
155
  "ResourceExclusions.VpcPeering.StateMessage": string;
134
156
  /**
135
- * The current state of the VPC encryption control.
157
+ * The current state of the VPC Encryption Control configuration.
136
158
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcencryptioncontrol.html#cfn-ec2-vpcencryptioncontrol-state}
137
159
  */
138
160
  State: "creating" | "available" | "monitor-in-progress" | "enforce-in-progress" | "monitor-failed" | "enforce-failed" | "deleting" | "deleted" | "delete-failed";
139
161
  /**
140
- * Provides additional context on the state of the VPC encryption control.
162
+ * A message providing additional information about the encryption control state.
141
163
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcencryptioncontrol.html#cfn-ec2-vpcencryptioncontrol-statemessage}
142
164
  */
143
165
  StateMessage: string;
144
166
  /**
145
- * The VPC encryption control resource id.
167
+ * The ID of the VPC Encryption Control configuration.
146
168
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcencryptioncontrol.html#cfn-ec2-vpcencryptioncontrol-vpcencryptioncontrolid}
147
169
  */
148
170
  VpcEncryptionControlId: string;
@@ -151,14 +151,21 @@ export type EC2VPNConnectionAttribs = {
151
151
  */
152
152
  export type CloudwatchLogOptionsSpecification = {
153
153
  /**
154
+ * Specifies whether to enable BGP logging for the VPN connection. Default value is `False` .
155
+ *
156
+ * Valid values: `True` | `False`
154
157
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpnconnection-cloudwatchlogoptionsspecification.html#cfn-ec2-vpnconnection-cloudwatchlogoptionsspecification-bgplogenabled}
155
158
  */
156
159
  BgpLogEnabled?: boolean | undefined;
157
160
  /**
161
+ * The Amazon Resource Name (ARN) of the CloudWatch log group where BGP logs will be sent.
158
162
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpnconnection-cloudwatchlogoptionsspecification.html#cfn-ec2-vpnconnection-cloudwatchlogoptionsspecification-bgploggrouparn}
159
163
  */
160
164
  BgpLogGroupArn?: string | undefined;
161
165
  /**
166
+ * The desired output format for BGP logs to be sent to CloudWatch. Default format is `json` .
167
+ *
168
+ * Valid values: `json` | `text`
162
169
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpnconnection-cloudwatchlogoptionsspecification.html#cfn-ec2-vpnconnection-cloudwatchlogoptionsspecification-bgplogoutputformat}
163
170
  */
164
171
  BgpLogOutputFormat?: "json" | "text" | undefined;
@@ -1,13 +1,16 @@
1
1
  import type { ResourceDefinition } from "../main.ts";
2
2
  /**
3
+ * Resource Type definition for AWS::ECR::PullTimeUpdateExclusion controls the exclusion configuration for ecr image pull time update.
3
4
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-pulltimeupdateexclusion.html}
4
5
  */
5
6
  export type ECRPullTimeUpdateExclusion = ResourceDefinition<"AWS::ECR::PullTimeUpdateExclusion", ECRPullTimeUpdateExclusionProps>;
6
7
  /**
8
+ * Resource Type definition for AWS::ECR::PullTimeUpdateExclusion controls the exclusion configuration for ecr image pull time update.
7
9
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-pulltimeupdateexclusion.html}
8
10
  */
9
11
  export type ECRPullTimeUpdateExclusionProps = {
10
12
  /**
13
+ * The ARN of the IAM principal to remove from the pull time update exclusion list.
11
14
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-pulltimeupdateexclusion.html#cfn-ecr-pulltimeupdateexclusion-principalarn}
12
15
  */
13
16
  PrincipalArn: string;
@@ -1,14 +1,16 @@
1
1
  import type { ResourceDefinitionWithAttributes } from "../main.ts";
2
2
  /**
3
+ * The signing configuration for a registry, which specifies rules for automatically signing images when pushed.
3
4
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-signingconfiguration.html}
4
5
  */
5
6
  export type ECRSigningConfiguration = ResourceDefinitionWithAttributes<"AWS::ECR::SigningConfiguration", ECRSigningConfigurationProps, ECRSigningConfigurationAttribs>;
6
7
  /**
8
+ * The signing configuration for a registry, which specifies rules for automatically signing images when pushed.
7
9
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-signingconfiguration.html}
8
10
  */
9
11
  export type ECRSigningConfigurationProps = {
10
12
  /**
11
- * Array of signing rules that define which repositories should be signed and with which signing profiles.
13
+ * A list of signing rules. Each rule defines a signing profile and optional repository filters that determine which images are automatically signed.
12
14
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-signingconfiguration.html#cfn-ecr-signingconfiguration-rules}
13
15
  */
14
16
  Rules: Rule[];
@@ -18,7 +20,7 @@ export type ECRSigningConfigurationProps = {
18
20
  */
19
21
  export type ECRSigningConfigurationAttribs = {
20
22
  /**
21
- * 12-digit AWS account ID of the ECR registry.
23
+ * The account ID of the destination registry.
22
24
  * @pattern ^[0-9]{12}$
23
25
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-signingconfiguration.html#cfn-ecr-signingconfiguration-registryid}
24
26
  */
@@ -30,30 +32,39 @@ export type ECRSigningConfigurationAttribs = {
30
32
  */
31
33
  export type FilterType = "WILDCARD_MATCH";
32
34
  /**
33
- * An array of objects representing the details of a repository filter.
35
+ * A repository filter used to determine which repositories have their images automatically signed on push. Each filter consists of a filter type and filter value.
34
36
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-signingconfiguration-repositoryfilter.html}
35
37
  */
36
38
  export type RepositoryFilter = {
37
39
  /**
40
+ * The filter value used to match repository names. When using `WILDCARD_MATCH` , the `*` character matches any sequence of characters.
41
+ *
42
+ * Examples:
43
+ *
44
+ * - `myapp/*` - Matches all repositories starting with `myapp/`
45
+ * - `*‍/production` - Matches all repositories ending with `/production`
46
+ * - `*prod*` - Matches all repositories containing `prod`
38
47
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-signingconfiguration-repositoryfilter.html#cfn-ecr-signingconfiguration-repositoryfilter-filter}
39
48
  */
40
49
  Filter: string;
41
50
  /**
51
+ * The type of filter to apply. Currently, only `WILDCARD_MATCH` is supported, which uses wildcard patterns to match repository names.
42
52
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-signingconfiguration-repositoryfilter.html#cfn-ecr-signingconfiguration-repositoryfilter-filtertype}
43
53
  */
44
54
  FilterType: FilterType;
45
55
  };
46
56
  /**
57
+ * A signing rule that specifies a signing profile and optional repository filters. When an image is pushed to a matching repository, a signing job is created using the specified profile.
47
58
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-signingconfiguration-rule.html}
48
59
  */
49
60
  export type Rule = {
50
61
  /**
51
- * Optional array of repository filters. If omitted, the rule matches all repositories. If provided, must contain at least one filter. Empty arrays are not allowed.
62
+ * A list of repository filters that determine which repositories have their images signed on push. If no filters are specified, all images pushed to the registry are signed using the rule's signing profile. Maximum of 100 filters per rule.
52
63
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-signingconfiguration-rule.html#cfn-ecr-signingconfiguration-rule-repositoryfilters}
53
64
  */
54
65
  RepositoryFilters?: RepositoryFilter[] | undefined;
55
66
  /**
56
- * AWS Signer signing profile ARN to use for matched repositories.
67
+ * The ARN of the AWS Signer signing profile to use for signing images that match this rule. For more information about signing profiles, see [Signing profiles](https://docs.aws.amazon.com/signer/latest/developerguide/signing-profiles.html) in the *AWS Signer Developer Guide* .
57
68
  * @maxLength 200
58
69
  * @pattern ^arn:aws(-[a-z]+)*:signer:[a-z0-9-]+:[0-9]{12}:\/signing-profiles\/[a-zA-Z0-9_]{2,}$
59
70
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-signingconfiguration-rule.html#cfn-ecr-signingconfiguration-rule-signingprofilearn}
@@ -317,7 +317,7 @@ export type ManagedInstancesNetworkConfiguration = {
317
317
  */
318
318
  export type ManagedInstancesProvider = {
319
319
  /**
320
- * Defines how Amazon ECS Managed Instances optimizes the infrastructure in your capacity provider. Configure it to turn on or off the infrastructure optimization in your capacity provider, and to control the idle EC2 instances optimization delay.
320
+ * Defines how Amazon ECS Managed Instances optimizes the infrastastructure in your capacity provider. Configure it to turn on or off the infrastructure optimization in your capacity provider, and to control the idle or underutilized EC2 instances optimization delay.
321
321
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-capacityprovider-managedinstancesprovider.html#cfn-ecs-capacityprovider-managedinstancesprovider-infrastructureoptimization}
322
322
  */
323
323
  InfrastructureOptimization?: {
@@ -1,61 +1,83 @@
1
1
  import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
2
2
  /**
3
+ * Creates an Express service that simplifies deploying containerized web applications on Amazon ECS with managed AWS infrastructure. This operation provisions and configures Application Load Balancers, target groups, security groups, and auto-scaling policies automatically.
4
+ *
5
+ * Specify a primary container configuration with your application image and basic settings. Amazon ECS creates the necessary AWS resources for traffic distribution, health monitoring, network access control, and capacity management.
6
+ *
7
+ * Provide an execution role for task operations and an infrastructure role for managing AWS resources on your behalf.
3
8
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecs-expressgatewayservice.html}
4
9
  */
5
10
  export type ECSExpressGatewayService = ResourceDefinitionWithAttributes<"AWS::ECS::ExpressGatewayService", ECSExpressGatewayServiceProps, ECSExpressGatewayServiceAttribs>;
6
11
  /**
12
+ * Creates an Express service that simplifies deploying containerized web applications on Amazon ECS with managed AWS infrastructure. This operation provisions and configures Application Load Balancers, target groups, security groups, and auto-scaling policies automatically.
13
+ *
14
+ * Specify a primary container configuration with your application image and basic settings. Amazon ECS creates the necessary AWS resources for traffic distribution, health monitoring, network access control, and capacity management.
15
+ *
16
+ * Provide an execution role for task operations and an infrastructure role for managing AWS resources on your behalf.
7
17
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecs-expressgatewayservice.html}
8
18
  */
9
19
  export type ECSExpressGatewayServiceProps = {
10
20
  /**
21
+ * The short name or full ARN of the cluster that hosts the Express service.
11
22
  * @default "default"
12
23
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecs-expressgatewayservice.html#cfn-ecs-expressgatewayservice-cluster}
13
24
  */
14
25
  Cluster?: string | undefined;
15
26
  /**
27
+ * The CPU allocation for tasks in this service revision.
16
28
  * @default "256"
17
29
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecs-expressgatewayservice.html#cfn-ecs-expressgatewayservice-cpu}
18
30
  */
19
31
  Cpu?: string | undefined;
20
32
  /**
33
+ * The ARN of the task execution role for the service revision.
21
34
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecs-expressgatewayservice.html#cfn-ecs-expressgatewayservice-executionrolearn}
22
35
  */
23
36
  ExecutionRoleArn: string;
24
37
  /**
38
+ * The health check path for this service revision.
25
39
  * @default "HTTP:80/ping"
26
40
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecs-expressgatewayservice.html#cfn-ecs-expressgatewayservice-healthcheckpath}
27
41
  */
28
42
  HealthCheckPath?: string | undefined;
29
43
  /**
44
+ * The ARN of the infrastructure role that manages AWS resources for the Express service.
30
45
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecs-expressgatewayservice.html#cfn-ecs-expressgatewayservice-infrastructurerolearn}
31
46
  */
32
47
  InfrastructureRoleArn: string;
33
48
  /**
49
+ * The memory allocation for tasks in this service revision.
34
50
  * @default "512"
35
51
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecs-expressgatewayservice.html#cfn-ecs-expressgatewayservice-memory}
36
52
  */
37
53
  Memory?: string | undefined;
38
54
  /**
55
+ * The network configuration for tasks in this service revision.
39
56
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecs-expressgatewayservice.html#cfn-ecs-expressgatewayservice-networkconfiguration}
40
57
  */
41
58
  NetworkConfiguration?: ExpressGatewayServiceNetworkConfiguration | undefined;
42
59
  /**
60
+ * The primary container configuration for this service revision.
43
61
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecs-expressgatewayservice.html#cfn-ecs-expressgatewayservice-primarycontainer}
44
62
  */
45
63
  PrimaryContainer: ExpressGatewayContainer;
46
64
  /**
65
+ * The auto-scaling configuration for this service revision.
47
66
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecs-expressgatewayservice.html#cfn-ecs-expressgatewayservice-scalingtarget}
48
67
  */
49
68
  ScalingTarget?: ExpressGatewayScalingTarget | undefined;
50
69
  /**
70
+ * The name of the Express service.
51
71
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecs-expressgatewayservice.html#cfn-ecs-expressgatewayservice-servicename}
52
72
  */
53
73
  ServiceName?: string | undefined;
54
74
  /**
75
+ * The metadata applied to the Express service.
55
76
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecs-expressgatewayservice.html#cfn-ecs-expressgatewayservice-tags}
56
77
  */
57
78
  Tags?: Tag[] | undefined;
58
79
  /**
80
+ * The ARN of the task role for the service revision.
59
81
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecs-expressgatewayservice.html#cfn-ecs-expressgatewayservice-taskrolearn}
60
82
  */
61
83
  TaskRoleArn?: string | undefined;
@@ -65,110 +87,140 @@ export type ECSExpressGatewayServiceProps = {
65
87
  */
66
88
  export type ECSExpressGatewayServiceAttribs = {
67
89
  /**
90
+ * The Unix timestamp for when the Express service was created.
68
91
  * @format date-time
69
92
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecs-expressgatewayservice.html#cfn-ecs-expressgatewayservice-createdat}
70
93
  */
71
94
  CreatedAt: string;
72
95
  /**
96
+ * The ARN that identifies the Express service.
73
97
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecs-expressgatewayservice.html#cfn-ecs-expressgatewayservice-servicearn}
74
98
  */
75
99
  ServiceArn: string;
76
100
  /**
101
+ * The Unix timestamp for when the Express service was last updated.
77
102
  * @format date-time
78
103
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecs-expressgatewayservice.html#cfn-ecs-expressgatewayservice-updatedat}
79
104
  */
80
105
  UpdatedAt: string;
81
106
  };
82
107
  /**
108
+ * Defines the configuration for the primary container in an Express service. This container receives traffic from the Application Load Balancer and runs your application code.
109
+ *
110
+ * The container configuration includes the container image, port mapping, logging settings, environment variables, and secrets. The container image is the only required parameter, with sensible defaults provided for other settings.
83
111
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-expressgatewayservice-expressgatewaycontainer.html}
84
112
  */
85
113
  export type ExpressGatewayContainer = {
86
114
  /**
115
+ * The log configuration for the container.
87
116
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-expressgatewayservice-expressgatewaycontainer.html#cfn-ecs-expressgatewayservice-expressgatewaycontainer-awslogsconfiguration}
88
117
  */
89
118
  AwsLogsConfiguration?: ExpressGatewayServiceAwsLogsConfiguration | undefined;
90
119
  /**
120
+ * The command that is passed to the container.
91
121
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-expressgatewayservice-expressgatewaycontainer.html#cfn-ecs-expressgatewayservice-expressgatewaycontainer-command}
92
122
  */
93
123
  Command?: string[] | undefined;
94
124
  /**
125
+ * The port number on the container that receives traffic from the load balancer. Default is 80.
95
126
  * @default 80
96
127
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-expressgatewayservice-expressgatewaycontainer.html#cfn-ecs-expressgatewayservice-expressgatewaycontainer-containerport}
97
128
  */
98
129
  ContainerPort?: number | undefined;
99
130
  /**
131
+ * The environment variables to pass to the container.
100
132
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-expressgatewayservice-expressgatewaycontainer.html#cfn-ecs-expressgatewayservice-expressgatewaycontainer-environment}
101
133
  */
102
134
  Environment?: KeyValuePair[] | undefined;
103
135
  /**
136
+ * The image used to start a container. This string is passed directly to the Docker daemon. Images in the Docker Hub registry are available by default. Other repositories are specified with either `repository-url/image:tag` or `repository-url/image@digest` .
137
+ *
138
+ * For Express services, the image typically contains a web application that listens on the specified container port. The image can be stored in Amazon ECR, Docker Hub, or any other container registry accessible to your execution role.
104
139
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-expressgatewayservice-expressgatewaycontainer.html#cfn-ecs-expressgatewayservice-expressgatewaycontainer-image}
105
140
  */
106
141
  Image: string;
107
142
  /**
143
+ * The configuration for repository credentials for private registry authentication.
108
144
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-expressgatewayservice-expressgatewaycontainer.html#cfn-ecs-expressgatewayservice-expressgatewaycontainer-repositorycredentials}
109
145
  */
110
146
  RepositoryCredentials?: ExpressGatewayRepositoryCredentials | undefined;
111
147
  /**
148
+ * The secrets to pass to the container.
112
149
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-expressgatewayservice-expressgatewaycontainer.html#cfn-ecs-expressgatewayservice-expressgatewaycontainer-secrets}
113
150
  */
114
151
  Secrets?: Secret[] | undefined;
115
152
  };
116
153
  /**
154
+ * The repository credentials for private registry authentication to pass to the container.
117
155
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-expressgatewayservice-expressgatewayrepositorycredentials.html}
118
156
  */
119
157
  export type ExpressGatewayRepositoryCredentials = {
120
158
  /**
159
+ * The Amazon Resource Name (ARN) of the secret containing the private repository credentials.
121
160
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-expressgatewayservice-expressgatewayrepositorycredentials.html#cfn-ecs-expressgatewayservice-expressgatewayrepositorycredentials-credentialsparameter}
122
161
  */
123
162
  CredentialsParameter: string;
124
163
  };
125
164
  /**
165
+ * Defines the auto-scaling configuration for an Express service. This determines how the service automatically adjusts the number of running tasks based on demand metrics such as CPU utilization, memory utilization, or request count per target.
166
+ *
167
+ * Auto-scaling helps ensure your application can handle varying levels of traffic while optimizing costs by scaling down during low-demand periods. You can specify the minimum and maximum number of tasks, the scaling metric, and the target value for that metric.
126
168
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-expressgatewayservice-expressgatewayscalingtarget.html}
127
169
  */
128
170
  export type ExpressGatewayScalingTarget = {
129
171
  /**
172
+ * The metric used for auto-scaling decisions. The default metric used for an Express service is `CPUUtilization` .
130
173
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-expressgatewayservice-expressgatewayscalingtarget.html#cfn-ecs-expressgatewayservice-expressgatewayscalingtarget-autoscalingmetric}
131
174
  */
132
175
  AutoScalingMetric?: ExpressGatewayServiceScalingMetric | undefined;
133
176
  /**
177
+ * The target value for the auto-scaling metric. The default value for an Express service is 60.
134
178
  * @default 60
135
179
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-expressgatewayservice-expressgatewayscalingtarget.html#cfn-ecs-expressgatewayservice-expressgatewayscalingtarget-autoscalingtargetvalue}
136
180
  */
137
181
  AutoScalingTargetValue?: number | undefined;
138
182
  /**
183
+ * The maximum number of tasks to run in the Express service.
139
184
  * @default 1
140
185
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-expressgatewayservice-expressgatewayscalingtarget.html#cfn-ecs-expressgatewayservice-expressgatewayscalingtarget-maxtaskcount}
141
186
  */
142
187
  MaxTaskCount?: number | undefined;
143
188
  /**
189
+ * The minimum number of tasks to run in the Express service.
144
190
  * @default 1
145
191
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-expressgatewayservice-expressgatewayscalingtarget.html#cfn-ecs-expressgatewayservice-expressgatewayscalingtarget-mintaskcount}
146
192
  */
147
193
  MinTaskCount?: number | undefined;
148
194
  };
149
195
  /**
196
+ * Specifies the Amazon CloudWatch Logs configuration for the Express service container.
150
197
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-expressgatewayservice-expressgatewayserviceawslogsconfiguration.html}
151
198
  */
152
199
  export type ExpressGatewayServiceAwsLogsConfiguration = {
153
200
  /**
201
+ * The name of the CloudWatch Logs log group to send container logs to.
154
202
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-expressgatewayservice-expressgatewayserviceawslogsconfiguration.html#cfn-ecs-expressgatewayservice-expressgatewayserviceawslogsconfiguration-loggroup}
155
203
  */
156
204
  LogGroup: string;
157
205
  /**
206
+ * The prefix for the CloudWatch Logs log stream names. The default for an Express service is `ecs` .
158
207
  * @default "ecs"
159
208
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-expressgatewayservice-expressgatewayserviceawslogsconfiguration.html#cfn-ecs-expressgatewayservice-expressgatewayserviceawslogsconfiguration-logstreamprefix}
160
209
  */
161
210
  LogStreamPrefix: string;
162
211
  };
163
212
  /**
213
+ * The network configuration for an Express service. By default, an Express service utilizes subnets and security groups associated with the default VPC.
164
214
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-expressgatewayservice-expressgatewayservicenetworkconfiguration.html}
165
215
  */
166
216
  export type ExpressGatewayServiceNetworkConfiguration = {
167
217
  /**
218
+ * The IDs of the security groups associated with the Express service.
168
219
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-expressgatewayservice-expressgatewayservicenetworkconfiguration.html#cfn-ecs-expressgatewayservice-expressgatewayservicenetworkconfiguration-securitygroups}
169
220
  */
170
221
  SecurityGroups?: string[] | undefined;
171
222
  /**
223
+ * The IDs of the subnets associated with the Express service.
172
224
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-expressgatewayservice-expressgatewayservicenetworkconfiguration.html#cfn-ecs-expressgatewayservice-expressgatewayservicenetworkconfiguration-subnets}
173
225
  */
174
226
  Subnets?: string[] | undefined;
@@ -179,27 +231,42 @@ export type ExpressGatewayServiceNetworkConfiguration = {
179
231
  */
180
232
  export type ExpressGatewayServiceScalingMetric = "AVERAGE_CPU" | "AVERAGE_MEMORY" | "REQUEST_COUNT_PER_TARGET";
181
233
  /**
234
+ * A key-value pair object.
182
235
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-expressgatewayservice-keyvaluepair.html}
183
236
  */
184
237
  export type KeyValuePair = {
185
238
  /**
239
+ * The name of the key-value pair. For environment variables, this is the name of the environment variable.
186
240
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-expressgatewayservice-keyvaluepair.html#cfn-ecs-expressgatewayservice-keyvaluepair-name}
187
241
  */
188
242
  Name: string;
189
243
  /**
244
+ * The value of the key-value pair. For environment variables, this is the value of the environment variable.
190
245
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-expressgatewayservice-keyvaluepair.html#cfn-ecs-expressgatewayservice-keyvaluepair-value}
191
246
  */
192
247
  Value: string;
193
248
  };
194
249
  /**
250
+ * An object representing the secret to expose to your container. Secrets can be exposed to a container in the following ways:
251
+ *
252
+ * - To inject sensitive data into your containers as environment variables, use the `secrets` container definition parameter.
253
+ * - To reference sensitive information in the log configuration of a container, use the `secretOptions` container definition parameter.
254
+ *
255
+ * For more information, see [Specifying sensitive data](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/specifying-sensitive-data.html) in the *Amazon Elastic Container Service Developer Guide* .
195
256
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-expressgatewayservice-secret.html}
196
257
  */
197
258
  export type Secret = {
198
259
  /**
260
+ * The name of the secret.
199
261
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-expressgatewayservice-secret.html#cfn-ecs-expressgatewayservice-secret-name}
200
262
  */
201
263
  Name: string;
202
264
  /**
265
+ * The secret to expose to the container. The supported values are either the full ARN of the AWS Secrets Manager secret or the full ARN of the parameter in the SSM Parameter Store.
266
+ *
267
+ * For information about the require AWS Identity and Access Management permissions, see [Required IAM permissions for Amazon ECS secrets](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/specifying-sensitive-data-secrets.html#secrets-iam) (for Secrets Manager) or [Required IAM permissions for Amazon ECS secrets](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/specifying-sensitive-data-parameters.html) (for Systems Manager Parameter store) in the *Amazon Elastic Container Service Developer Guide* .
268
+ *
269
+ * > If the SSM Parameter Store parameter exists in the same Region as the task you're launching, then you can use either the full ARN or name of the parameter. If the parameter exists in a different Region, then the full ARN must be specified.
203
270
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-expressgatewayservice-secret.html#cfn-ecs-expressgatewayservice-secret-valuefrom}
204
271
  */
205
272
  ValueFrom: string;
@@ -560,6 +560,8 @@ export type DeploymentConfiguration = {
560
560
  *
561
561
  * - `ROLLING` - When you create a service which uses the rolling update ( `ROLLING` ) deployment strategy, the Amazon ECS service scheduler replaces the currently running tasks with new tasks. The number of tasks that Amazon ECS adds or removes from the service during a rolling update is controlled by the service deployment configuration.
562
562
  * - `BLUE_GREEN` - A blue/green deployment strategy ( `BLUE_GREEN` ) is a release methodology that reduces downtime and risk by running two identical production environments called blue and green. With Amazon ECS blue/green deployments, you can validate new service revisions before directing production traffic to them. This approach provides a safer way to deploy changes with the ability to quickly roll back if needed.
563
+ * - `LINEAR` - A *linear* deployment strategy ( `LINEAR` ) gradually shifts traffic from the current production environment to a new environment in equal percentages over time. With Amazon ECS linear deployments, you can control the pace of traffic shifting and validate new service revisions with increasing amounts of production traffic.
564
+ * - `CANARY` - A *canary* deployment strategy ( `CANARY` ) shifts a small percentage of traffic to the new service revision first, then shifts the remaining traffic all at once after a specified time period. This allows you to test the new version with a subset of users before full deployment.
563
565
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-service-deploymentconfiguration.html#cfn-ecs-service-deploymentconfiguration-strategy}
564
566
  */
565
567
  Strategy?: "ROLLING" | "BLUE_GREEN" | "LINEAR" | "CANARY" | undefined;