@propulsionworks/cloudformation 0.1.43 → 0.1.44
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/out/exports/resources.generated/aws-cloudfront-keyvaluestore.d.ts +5 -1
- package/out/exports/resources.generated/aws-connect-evaluationform.d.ts +46 -0
- package/out/exports/resources.generated/aws-ecs-capacityprovider.d.ts +5 -1
- package/out/exports/resources.generated/aws-emr-studio.d.ts +1 -1
- package/out/exports/resources.generated/aws-emr-studiosessionmapping.d.ts +1 -1
- package/out/exports/resources.generated/aws-evs-environment.d.ts +1 -1
- package/out/exports/resources.generated/aws-gamelift-script.d.ts +6 -0
- package/out/exports/resources.generated/aws-grafana-workspace.d.ts +1 -1
- package/out/exports/resources.generated/aws-iotsitewise-portal.d.ts +2 -2
- package/out/exports/resources.generated/aws-kafkaconnect-connector.d.ts +1 -1
- package/out/exports/resources.generated/aws-mpa-identitysource.d.ts +2 -2
- package/out/exports/resources.generated/aws-qbusiness-application.d.ts +1 -1
- package/out/exports/resources.generated/aws-quicksight-actionconnector.d.ts +2 -0
- package/out/exports/resources.generated/aws-rds-dbinstance.d.ts +1 -0
- package/out/exports/resources.generated/aws-rtbfabric-inboundexternallink.d.ts +4 -0
- package/out/exports/resources.generated/aws-sagemaker-domain.d.ts +1 -1
- package/out/exports/resources.generated/aws-sagemaker-userprofile.d.ts +6 -6
- package/out/exports/resources.generated/aws-sso-assignment.d.ts +3 -3
- package/out/exports/resources.generated/aws-sso-instanceaccesscontrolattributeconfiguration.d.ts +7 -7
- package/out/exports/resources.generated/aws-sso-permissionset.d.ts +3 -3
- package/out/exports/resources.generated/aws-transfer-webapp.d.ts +1 -1
- package/out/exports/resources.generated/aws-workspacesweb-portal.d.ts +1 -1
- package/package.json +1 -1
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
import type { ResourceDefinitionWithAttributes } from "../main.ts";
|
|
1
|
+
import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
|
|
2
2
|
/**
|
|
3
3
|
* The key value store. Use this to separate data from function code, allowing you to update data without having to publish a new version of a function. The key value store holds keys and their corresponding values.
|
|
4
4
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-keyvaluestore.html}
|
|
@@ -24,6 +24,10 @@ export type CloudFrontKeyValueStoreProps = {
|
|
|
24
24
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-keyvaluestore.html#cfn-cloudfront-keyvaluestore-name}
|
|
25
25
|
*/
|
|
26
26
|
Name: string;
|
|
27
|
+
/**
|
|
28
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-keyvaluestore.html#cfn-cloudfront-keyvaluestore-tags}
|
|
29
|
+
*/
|
|
30
|
+
Tags?: Tag[] | undefined;
|
|
27
31
|
};
|
|
28
32
|
/**
|
|
29
33
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-keyvaluestore.html#aws-resource-cloudfront-keyvaluestore-return-values}
|
|
@@ -42,6 +42,10 @@ export type ConnectEvaluationFormProps = {
|
|
|
42
42
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-connect-evaluationform.html#cfn-connect-evaluationform-languageconfiguration}
|
|
43
43
|
*/
|
|
44
44
|
LanguageConfiguration?: EvaluationFormLanguageConfiguration | undefined;
|
|
45
|
+
/**
|
|
46
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-connect-evaluationform.html#cfn-connect-evaluationform-reviewconfiguration}
|
|
47
|
+
*/
|
|
48
|
+
ReviewConfiguration?: EvaluationReviewConfiguration | undefined;
|
|
45
49
|
/**
|
|
46
50
|
* A scoring strategy of the evaluation form.
|
|
47
51
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-connect-evaluationform.html#cfn-connect-evaluationform-scoringstrategy}
|
|
@@ -674,6 +678,48 @@ export type EvaluationFormTextQuestionProperties = {
|
|
|
674
678
|
*/
|
|
675
679
|
Automation?: EvaluationFormTextQuestionAutomation | undefined;
|
|
676
680
|
};
|
|
681
|
+
/**
|
|
682
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-connect-evaluationform-evaluationreviewconfiguration.html}
|
|
683
|
+
*/
|
|
684
|
+
export type EvaluationReviewConfiguration = {
|
|
685
|
+
/**
|
|
686
|
+
* Number of days during which a request for review can be submitted for evaluations created from this form.
|
|
687
|
+
* @min 1
|
|
688
|
+
* @max 90
|
|
689
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-connect-evaluationform-evaluationreviewconfiguration.html#cfn-connect-evaluationform-evaluationreviewconfiguration-eligibilitydays}
|
|
690
|
+
*/
|
|
691
|
+
EligibilityDays?: number | undefined;
|
|
692
|
+
/**
|
|
693
|
+
* List of recipients who should be notified when a review is requested.
|
|
694
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-connect-evaluationform-evaluationreviewconfiguration.html#cfn-connect-evaluationform-evaluationreviewconfiguration-reviewnotificationrecipients}
|
|
695
|
+
*/
|
|
696
|
+
ReviewNotificationRecipients: EvaluationReviewNotificationRecipient[];
|
|
697
|
+
};
|
|
698
|
+
/**
|
|
699
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-connect-evaluationform-evaluationreviewnotificationrecipient.html}
|
|
700
|
+
*/
|
|
701
|
+
export type EvaluationReviewNotificationRecipient = {
|
|
702
|
+
/**
|
|
703
|
+
* The type of notification recipient.
|
|
704
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-connect-evaluationform-evaluationreviewnotificationrecipient.html#cfn-connect-evaluationform-evaluationreviewnotificationrecipient-type}
|
|
705
|
+
*/
|
|
706
|
+
Type: "USER_ID";
|
|
707
|
+
/**
|
|
708
|
+
* The value associated with the notification recipient type.
|
|
709
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-connect-evaluationform-evaluationreviewnotificationrecipient.html#cfn-connect-evaluationform-evaluationreviewnotificationrecipient-value}
|
|
710
|
+
*/
|
|
711
|
+
Value: EvaluationReviewNotificationRecipientValue;
|
|
712
|
+
};
|
|
713
|
+
/**
|
|
714
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-connect-evaluationform-evaluationreviewnotificationrecipientvalue.html}
|
|
715
|
+
*/
|
|
716
|
+
export type EvaluationReviewNotificationRecipientValue = {
|
|
717
|
+
/**
|
|
718
|
+
* The user identifier for the notification recipient.
|
|
719
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-connect-evaluationform-evaluationreviewnotificationrecipientvalue.html#cfn-connect-evaluationform-evaluationreviewnotificationrecipientvalue-userid}
|
|
720
|
+
*/
|
|
721
|
+
UserId?: string | undefined;
|
|
722
|
+
};
|
|
677
723
|
/**
|
|
678
724
|
* Automation rule for multi-select questions based on rule categories.
|
|
679
725
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-connect-evaluationform-multiselectquestionrulecategoryautomation.html}
|
|
@@ -153,6 +153,10 @@ export type InstanceLaunchTemplate = {
|
|
|
153
153
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-capacityprovider-instancelaunchtemplate.html#cfn-ecs-capacityprovider-instancelaunchtemplate-ec2instanceprofilearn}
|
|
154
154
|
*/
|
|
155
155
|
Ec2InstanceProfileArn: string;
|
|
156
|
+
/**
|
|
157
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-capacityprovider-instancelaunchtemplate.html#cfn-ecs-capacityprovider-instancelaunchtemplate-fipsenabled}
|
|
158
|
+
*/
|
|
159
|
+
FipsEnabled?: boolean | undefined;
|
|
156
160
|
/**
|
|
157
161
|
* The instance requirements. You can specify:
|
|
158
162
|
*
|
|
@@ -318,7 +322,7 @@ export type ManagedInstancesNetworkConfiguration = {
|
|
|
318
322
|
* The list of security group IDs to apply to Amazon ECS Managed Instances. These security groups control the network traffic allowed to and from the instances.
|
|
319
323
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-capacityprovider-managedinstancesnetworkconfiguration.html#cfn-ecs-capacityprovider-managedinstancesnetworkconfiguration-securitygroups}
|
|
320
324
|
*/
|
|
321
|
-
SecurityGroups
|
|
325
|
+
SecurityGroups: string[];
|
|
322
326
|
/**
|
|
323
327
|
* The list of subnet IDs where Amazon ECS can launch Amazon ECS Managed Instances. Instances are distributed across the specified subnets for high availability. All subnets must be in the same VPC.
|
|
324
328
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-capacityprovider-managedinstancesnetworkconfiguration.html#cfn-ecs-capacityprovider-managedinstancesnetworkconfiguration-subnets}
|
|
@@ -10,7 +10,7 @@ export type EMRStudio = ResourceDefinitionWithAttributes<"AWS::EMR::Studio", EMR
|
|
|
10
10
|
*/
|
|
11
11
|
export type EMRStudioProps = {
|
|
12
12
|
/**
|
|
13
|
-
* Specifies whether the Studio authenticates users using
|
|
13
|
+
* Specifies whether the Studio authenticates users using SSO or IAM.
|
|
14
14
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-emr-studio.html#cfn-emr-studio-authmode}
|
|
15
15
|
*/
|
|
16
16
|
AuthMode: "SSO" | "IAM";
|
|
@@ -10,7 +10,7 @@ export type EMRStudioSessionMapping = ResourceDefinition<"AWS::EMR::StudioSessio
|
|
|
10
10
|
*/
|
|
11
11
|
export type EMRStudioSessionMappingProps = {
|
|
12
12
|
/**
|
|
13
|
-
* The name of the user or group. For more information, see [UserName](https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_User.html#singlesignon-Type-User-UserName) and [DisplayName](https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_Group.html#singlesignon-Type-Group-DisplayName) in the *
|
|
13
|
+
* The name of the user or group. For more information, see [UserName](https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_User.html#singlesignon-Type-User-UserName) and [DisplayName](https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_Group.html#singlesignon-Type-Group-DisplayName) in the *Identity Store API Reference* .
|
|
14
14
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-emr-studiosessionmapping.html#cfn-emr-studiosessionmapping-identityname}
|
|
15
15
|
*/
|
|
16
16
|
IdentityName: string;
|
|
@@ -133,7 +133,7 @@ export type EVSEnvironmentProps = {
|
|
|
133
133
|
* The VCF version of the environment.
|
|
134
134
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-evs-environment.html#cfn-evs-environment-vcfversion}
|
|
135
135
|
*/
|
|
136
|
-
VcfVersion: "VCF-5.2.1";
|
|
136
|
+
VcfVersion: "VCF-5.2.1" | "VCF-5.2.2";
|
|
137
137
|
/**
|
|
138
138
|
* The VPC associated with the environment.
|
|
139
139
|
* @minLength 12
|
|
@@ -16,6 +16,12 @@ export type GameLiftScriptProps = {
|
|
|
16
16
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-gamelift-script.html#cfn-gamelift-script-name}
|
|
17
17
|
*/
|
|
18
18
|
Name?: string | undefined;
|
|
19
|
+
/**
|
|
20
|
+
* The Node.js version used for execution of the Realtime script.
|
|
21
|
+
* @pattern ^\d+\.[x0-9]+$
|
|
22
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-gamelift-script.html#cfn-gamelift-script-nodejsversion}
|
|
23
|
+
*/
|
|
24
|
+
NodeJsVersion?: string | undefined;
|
|
19
25
|
/**
|
|
20
26
|
* The location of the Amazon S3 bucket where a zipped file containing your Realtime scripts is stored. The storage location must specify the Amazon S3 bucket name, the zip file name (the "key"), and a role ARN that allows Amazon GameLift Servers to access the Amazon S3 storage location. The S3 bucket must be in the same Region where you want to create a new script. By default, Amazon GameLift Servers uploads the latest version of the zip file; if you have S3 object versioning turned on, you can use the `ObjectVersion` parameter to specify an earlier version.
|
|
21
27
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-gamelift-script.html#cfn-gamelift-script-storagelocation}
|
|
@@ -15,7 +15,7 @@ export type GrafanaWorkspaceProps = {
|
|
|
15
15
|
*/
|
|
16
16
|
AccountAccessType: AccountAccessType;
|
|
17
17
|
/**
|
|
18
|
-
* Specifies whether this workspace uses SAML 2.0,
|
|
18
|
+
* Specifies whether this workspace uses SAML 2.0, SSOlong , or both to authenticate users for using the Grafana console within a workspace. For more information, see [User authentication in Amazon Managed Grafana](https://docs.aws.amazon.com/grafana/latest/userguide/authentication-in-AMG.html) .
|
|
19
19
|
*
|
|
20
20
|
* *Allowed Values* : `AWS_SSO | SAML`
|
|
21
21
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-grafana-workspace.html#cfn-grafana-workspace-authenticationproviders}
|
|
@@ -41,7 +41,7 @@ export type IoTSiteWisePortalProps = {
|
|
|
41
41
|
/**
|
|
42
42
|
* The service to use to authenticate users to the portal. Choose from the following options:
|
|
43
43
|
*
|
|
44
|
-
* - `SSO` – The portal uses
|
|
44
|
+
* - `SSO` – The portal uses SSOlong to authenticate users and manage user permissions. Before you can create a portal that uses IAM Identity Center, you must enable IAM Identity Center. For more information, see [Enabling IAM Identity Center](https://docs.aws.amazon.com/iot-sitewise/latest/userguide/monitor-get-started.html#mon-gs-sso) in the *AWS IoT SiteWise User Guide* . This option is only available in AWS Regions other than the China Regions.
|
|
45
45
|
* - `IAM` – The portal uses AWS Identity and Access Management to authenticate users and manage user permissions.
|
|
46
46
|
*
|
|
47
47
|
* You can't change this value after you create a portal.
|
|
@@ -98,7 +98,7 @@ export type IoTSiteWisePortalAttribs = {
|
|
|
98
98
|
*/
|
|
99
99
|
PortalArn: string;
|
|
100
100
|
/**
|
|
101
|
-
* The
|
|
101
|
+
* The SSO application generated client ID (used with SSO APIs).
|
|
102
102
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotsitewise-portal.html#cfn-iotsitewise-portal-portalclientid}
|
|
103
103
|
*/
|
|
104
104
|
PortalClientId: string;
|
|
@@ -296,7 +296,7 @@ export type ProvisionedCapacity = {
|
|
|
296
296
|
* The number of microcontroller units (MCUs) allocated to each connector worker. The valid values are 1,2,4,8.
|
|
297
297
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kafkaconnect-connector-provisionedcapacity.html#cfn-kafkaconnect-connector-provisionedcapacity-mcucount}
|
|
298
298
|
*/
|
|
299
|
-
McuCount
|
|
299
|
+
McuCount: 1 | 2 | 4 | 8;
|
|
300
300
|
/**
|
|
301
301
|
* The number of workers that are allocated to the connector.
|
|
302
302
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kafkaconnect-connector-provisionedcapacity.html#cfn-kafkaconnect-connector-provisionedcapacity-workercount}
|
|
@@ -62,7 +62,7 @@ export type MPAIdentitySourceAttribs = {
|
|
|
62
62
|
StatusMessage: string;
|
|
63
63
|
};
|
|
64
64
|
/**
|
|
65
|
-
*
|
|
65
|
+
* SSOlong credentials. For more information see, [SSOlong](https://docs.aws.amazon.com/identity-center/) .
|
|
66
66
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mpa-identitysource-iamidentitycenter.html}
|
|
67
67
|
*/
|
|
68
68
|
export type IamIdentityCenter = {
|
|
@@ -84,7 +84,7 @@ export type IamIdentityCenter = {
|
|
|
84
84
|
*/
|
|
85
85
|
export type IdentitySourceParameters = {
|
|
86
86
|
/**
|
|
87
|
-
*
|
|
87
|
+
* SSOlong credentials.
|
|
88
88
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mpa-identitysource-identitysourceparameters.html#cfn-mpa-identitysource-identitysourceparameters-iamidentitycenter}
|
|
89
89
|
*/
|
|
90
90
|
IamIdentityCenter: IamIdentityCenter;
|
|
@@ -136,7 +136,7 @@ export type QBusinessApplicationAttribs = {
|
|
|
136
136
|
*/
|
|
137
137
|
CreatedAt: string;
|
|
138
138
|
/**
|
|
139
|
-
* The Amazon Resource Name (ARN) of the AWS
|
|
139
|
+
* The Amazon Resource Name (ARN) of the AWS SSO instance attached to your Amazon Q Business application.
|
|
140
140
|
* @minLength 10
|
|
141
141
|
* @maxLength 1224
|
|
142
142
|
* @pattern ^arn:(aws|aws-us-gov|aws-cn|aws-iso|aws-iso-b):sso::\d{12}:application/(sso)?ins-[a-zA-Z0-9-.]{16}/apl-[a-zA-Z0-9]{16}$
|
|
@@ -1,9 +1,11 @@
|
|
|
1
1
|
import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
|
|
2
2
|
/**
|
|
3
|
+
* Definition of the AWS::QuickSight::ActionConnector Resource Type.
|
|
3
4
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-quicksight-actionconnector.html}
|
|
4
5
|
*/
|
|
5
6
|
export type QuickSightActionConnector = ResourceDefinitionWithAttributes<"AWS::QuickSight::ActionConnector", QuickSightActionConnectorProps, QuickSightActionConnectorAttribs>;
|
|
6
7
|
/**
|
|
8
|
+
* Definition of the AWS::QuickSight::ActionConnector Resource Type.
|
|
7
9
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-quicksight-actionconnector.html}
|
|
8
10
|
*/
|
|
9
11
|
export type QuickSightActionConnectorProps = {
|
|
@@ -1348,6 +1348,7 @@ export type RDSDBInstanceAttribs = {
|
|
|
1348
1348
|
SecondaryAvailabilityZone: string;
|
|
1349
1349
|
};
|
|
1350
1350
|
/**
|
|
1351
|
+
* Contains details about an additional storage volume for a DB instance. RDS support additional storage volumes for RDS for Oracle and RDS for SQL Server.
|
|
1351
1352
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-dbinstance-additionalstoragevolume.html}
|
|
1352
1353
|
*/
|
|
1353
1354
|
export type AdditionalStorageVolume = {
|
|
@@ -39,6 +39,10 @@ export type RTBFabricInboundExternalLinkAttribs = {
|
|
|
39
39
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rtbfabric-inboundexternallink.html#cfn-rtbfabric-inboundexternallink-createdtimestamp}
|
|
40
40
|
*/
|
|
41
41
|
CreatedTimestamp: string;
|
|
42
|
+
/**
|
|
43
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rtbfabric-inboundexternallink.html#cfn-rtbfabric-inboundexternallink-domainname}
|
|
44
|
+
*/
|
|
45
|
+
DomainName: string;
|
|
42
46
|
/**
|
|
43
47
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rtbfabric-inboundexternallink.html#cfn-rtbfabric-inboundexternallink-linkid}
|
|
44
48
|
*/
|
|
@@ -181,7 +181,7 @@ export type SageMakerDomainAttribs = {
|
|
|
181
181
|
*/
|
|
182
182
|
SingleSignOnApplicationArn: string;
|
|
183
183
|
/**
|
|
184
|
-
* The
|
|
184
|
+
* The SSO managed application instance ID.
|
|
185
185
|
* @maxLength 256
|
|
186
186
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sagemaker-domain.html#cfn-sagemaker-domain-singlesignonmanagedapplicationinstanceid}
|
|
187
187
|
*/
|
|
@@ -1,15 +1,15 @@
|
|
|
1
1
|
import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
|
|
2
2
|
/**
|
|
3
|
-
* Creates a user profile. A user profile represents a single user within a domain, and is the main way to reference a "person" for the purposes of sharing, reporting, and other user-oriented features. This entity is created when a user onboards to Amazon SageMaker Studio. If an administrator invites a person by email or imports them from
|
|
3
|
+
* Creates a user profile. A user profile represents a single user within a domain, and is the main way to reference a "person" for the purposes of sharing, reporting, and other user-oriented features. This entity is created when a user onboards to Amazon SageMaker Studio. If an administrator invites a person by email or imports them from SSO , a user profile is automatically created. A user profile is the primary holder of settings for an individual user and has a reference to the user's private Amazon Elastic File System (EFS) home directory.
|
|
4
4
|
*
|
|
5
|
-
* > If you're using
|
|
5
|
+
* > If you're using SSO authentication, a user in SSO , or a group in SSO containing that user, must be assigned to the Amazon SageMaker Studio application from the SSO Console to create a user profile. For more information about application assignment, see [Assign user access](https://docs.aws.amazon.com/singlesignon/latest/userguide/assignuserstoapp.html) . After assignment is complete, a user profile can be created for that user in SSO with AWS CloudFormation.
|
|
6
6
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sagemaker-userprofile.html}
|
|
7
7
|
*/
|
|
8
8
|
export type SageMakerUserProfile = ResourceDefinitionWithAttributes<"AWS::SageMaker::UserProfile", SageMakerUserProfileProps, SageMakerUserProfileAttribs>;
|
|
9
9
|
/**
|
|
10
|
-
* Creates a user profile. A user profile represents a single user within a domain, and is the main way to reference a "person" for the purposes of sharing, reporting, and other user-oriented features. This entity is created when a user onboards to Amazon SageMaker Studio. If an administrator invites a person by email or imports them from
|
|
10
|
+
* Creates a user profile. A user profile represents a single user within a domain, and is the main way to reference a "person" for the purposes of sharing, reporting, and other user-oriented features. This entity is created when a user onboards to Amazon SageMaker Studio. If an administrator invites a person by email or imports them from SSO , a user profile is automatically created. A user profile is the primary holder of settings for an individual user and has a reference to the user's private Amazon Elastic File System (EFS) home directory.
|
|
11
11
|
*
|
|
12
|
-
* > If you're using
|
|
12
|
+
* > If you're using SSO authentication, a user in SSO , or a group in SSO containing that user, must be assigned to the Amazon SageMaker Studio application from the SSO Console to create a user profile. For more information about application assignment, see [Assign user access](https://docs.aws.amazon.com/singlesignon/latest/userguide/assignuserstoapp.html) . After assignment is complete, a user profile can be created for that user in SSO with AWS CloudFormation.
|
|
13
13
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sagemaker-userprofile.html}
|
|
14
14
|
*/
|
|
15
15
|
export type SageMakerUserProfileProps = {
|
|
@@ -21,13 +21,13 @@ export type SageMakerUserProfileProps = {
|
|
|
21
21
|
*/
|
|
22
22
|
DomainId: string;
|
|
23
23
|
/**
|
|
24
|
-
* A specifier for the type of value specified in SingleSignOnUserValue. Currently, the only supported value is "UserName". If the Domain's AuthMode is
|
|
24
|
+
* A specifier for the type of value specified in SingleSignOnUserValue. Currently, the only supported value is "UserName". If the Domain's AuthMode is SSO , this field is required. If the Domain's AuthMode is not SSO , this field cannot be specified.
|
|
25
25
|
* @pattern UserName
|
|
26
26
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sagemaker-userprofile.html#cfn-sagemaker-userprofile-singlesignonuseridentifier}
|
|
27
27
|
*/
|
|
28
28
|
SingleSignOnUserIdentifier?: string | undefined;
|
|
29
29
|
/**
|
|
30
|
-
* The username of the associated AWS Single Sign-On User for this UserProfile. If the Domain's AuthMode is
|
|
30
|
+
* The username of the associated AWS Single Sign-On User for this UserProfile. If the Domain's AuthMode is SSO , this field is required, and must match a valid username of a user in your directory. If the Domain's AuthMode is not SSO , this field cannot be specified.
|
|
31
31
|
* @minLength 1
|
|
32
32
|
* @maxLength 256
|
|
33
33
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sagemaker-userprofile.html#cfn-sagemaker-userprofile-singlesignonuservalue}
|
|
@@ -2,19 +2,19 @@ import type { ResourceDefinition } from "../main.ts";
|
|
|
2
2
|
/**
|
|
3
3
|
* Assigns access to a Principal for a specified AWS account using a specified permission set.
|
|
4
4
|
*
|
|
5
|
-
* > The term *principal* here refers to a user or group that is defined in
|
|
5
|
+
* > The term *principal* here refers to a user or group that is defined in .
|
|
6
6
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-assignment.html}
|
|
7
7
|
*/
|
|
8
8
|
export type SSOAssignment = ResourceDefinition<"AWS::SSO::Assignment", SSOAssignmentProps>;
|
|
9
9
|
/**
|
|
10
10
|
* Assigns access to a Principal for a specified AWS account using a specified permission set.
|
|
11
11
|
*
|
|
12
|
-
* > The term *principal* here refers to a user or group that is defined in
|
|
12
|
+
* > The term *principal* here refers to a user or group that is defined in .
|
|
13
13
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-assignment.html}
|
|
14
14
|
*/
|
|
15
15
|
export type SSOAssignmentProps = {
|
|
16
16
|
/**
|
|
17
|
-
* The ARN of the
|
|
17
|
+
* The ARN of the instance under which the operation will be executed. For more information about ARNs, see [Amazon Resource Names (ARNs) and AWS Service Namespaces](https://docs.aws.amazon.com//general/latest/gr/aws-arns-and-namespaces.html) in the *AWS General Reference* .
|
|
18
18
|
* @minLength 10
|
|
19
19
|
* @maxLength 1224
|
|
20
20
|
* @pattern arn:(aws|aws-us-gov|aws-cn|aws-iso|aws-iso-b):sso:::instance/(sso)?ins-[a-zA-Z0-9-.]{16}
|
package/out/exports/resources.generated/aws-sso-instanceaccesscontrolattributeconfiguration.d.ts
CHANGED
|
@@ -1,20 +1,20 @@
|
|
|
1
1
|
import type { ResourceDefinition } from "../main.ts";
|
|
2
2
|
/**
|
|
3
|
-
* Enables the attribute-based access control (ABAC) feature for the specified
|
|
3
|
+
* Enables the attribute-based access control (ABAC) feature for the specified instance. You can also specify new attributes to add to your ABAC configuration during the enabling process. For more information about ABAC, see [Attribute-Based Access Control](https://docs.aws.amazon.com//singlesignon/latest/userguide/abac.html) in the *User Guide* .
|
|
4
4
|
*
|
|
5
5
|
* > The `InstanceAccessControlAttributeConfiguration` property has been deprecated but is still supported for backwards compatibility purposes. We recommend that you use the `AccessControlAttributes` property instead.
|
|
6
6
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-instanceaccesscontrolattributeconfiguration.html}
|
|
7
7
|
*/
|
|
8
8
|
export type SSOInstanceAccessControlAttributeConfiguration = ResourceDefinition<"AWS::SSO::InstanceAccessControlAttributeConfiguration", SSOInstanceAccessControlAttributeConfigurationProps>;
|
|
9
9
|
/**
|
|
10
|
-
* Enables the attribute-based access control (ABAC) feature for the specified
|
|
10
|
+
* Enables the attribute-based access control (ABAC) feature for the specified instance. You can also specify new attributes to add to your ABAC configuration during the enabling process. For more information about ABAC, see [Attribute-Based Access Control](https://docs.aws.amazon.com//singlesignon/latest/userguide/abac.html) in the *User Guide* .
|
|
11
11
|
*
|
|
12
12
|
* > The `InstanceAccessControlAttributeConfiguration` property has been deprecated but is still supported for backwards compatibility purposes. We recommend that you use the `AccessControlAttributes` property instead.
|
|
13
13
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-instanceaccesscontrolattributeconfiguration.html}
|
|
14
14
|
*/
|
|
15
15
|
export type SSOInstanceAccessControlAttributeConfigurationProps = {
|
|
16
16
|
/**
|
|
17
|
-
* Lists the attributes that are configured for ABAC in the specified
|
|
17
|
+
* Lists the attributes that are configured for ABAC in the specified instance.
|
|
18
18
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-instanceaccesscontrolattributeconfiguration.html#cfn-sso-instanceaccesscontrolattributeconfiguration-accesscontrolattributes}
|
|
19
19
|
*/
|
|
20
20
|
AccessControlAttributes?: AccessControlAttribute[] | undefined;
|
|
@@ -26,7 +26,7 @@ export type SSOInstanceAccessControlAttributeConfigurationProps = {
|
|
|
26
26
|
AccessControlAttributes: AccessControlAttribute[];
|
|
27
27
|
} | undefined;
|
|
28
28
|
/**
|
|
29
|
-
* The ARN of the
|
|
29
|
+
* The ARN of the instance under which the operation will be executed.
|
|
30
30
|
* @minLength 10
|
|
31
31
|
* @maxLength 1224
|
|
32
32
|
* @pattern arn:(aws|aws-us-gov|aws-cn|aws-iso|aws-iso-b):sso:::instance/(sso)?ins-[a-zA-Z0-9-.]{16}
|
|
@@ -35,12 +35,12 @@ export type SSOInstanceAccessControlAttributeConfigurationProps = {
|
|
|
35
35
|
InstanceArn: string;
|
|
36
36
|
};
|
|
37
37
|
/**
|
|
38
|
-
* These are
|
|
38
|
+
* These are identity store attributes that you can configure for use in attributes-based access control (ABAC). You can create permissions policies that determine who can access your AWS resources based upon the configured attribute values. When you enable ABAC and specify `AccessControlAttributes` , passes the attribute values of the authenticated user into IAM for use in policy evaluation.
|
|
39
39
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sso-instanceaccesscontrolattributeconfiguration-accesscontrolattribute.html}
|
|
40
40
|
*/
|
|
41
41
|
export type AccessControlAttribute = {
|
|
42
42
|
/**
|
|
43
|
-
* The name of the attribute associated with your identities in your identity source. This is used to map a specified attribute in your identity source with an attribute in
|
|
43
|
+
* The name of the attribute associated with your identities in your identity source. This is used to map a specified attribute in your identity source with an attribute in .
|
|
44
44
|
* @minLength 1
|
|
45
45
|
* @maxLength 128
|
|
46
46
|
* @pattern [\p{L}\p{Z}\p{N}_.:\/=+\-@]+
|
|
@@ -59,7 +59,7 @@ export type AccessControlAttribute = {
|
|
|
59
59
|
*/
|
|
60
60
|
export type AccessControlAttributeValue = {
|
|
61
61
|
/**
|
|
62
|
-
* The identity source to use when mapping a specified attribute to
|
|
62
|
+
* The identity source to use when mapping a specified attribute to .
|
|
63
63
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sso-instanceaccesscontrolattributeconfiguration-accesscontrolattributevalue.html#cfn-sso-instanceaccesscontrolattributeconfiguration-accesscontrolattributevalue-source}
|
|
64
64
|
*/
|
|
65
65
|
Source: string[];
|
|
@@ -1,11 +1,11 @@
|
|
|
1
1
|
import type { ResourceDefinitionWithAttributes, PolicyDocument, Tag } from "../main.ts";
|
|
2
2
|
/**
|
|
3
|
-
* Specifies a permission set within a specified
|
|
3
|
+
* Specifies a permission set within a specified instance.
|
|
4
4
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-permissionset.html}
|
|
5
5
|
*/
|
|
6
6
|
export type SSOPermissionSet = ResourceDefinitionWithAttributes<"AWS::SSO::PermissionSet", SSOPermissionSetProps, SSOPermissionSetAttribs>;
|
|
7
7
|
/**
|
|
8
|
-
* Specifies a permission set within a specified
|
|
8
|
+
* Specifies a permission set within a specified instance.
|
|
9
9
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-permissionset.html}
|
|
10
10
|
*/
|
|
11
11
|
export type SSOPermissionSetProps = {
|
|
@@ -31,7 +31,7 @@ export type SSOPermissionSetProps = {
|
|
|
31
31
|
*/
|
|
32
32
|
InlinePolicy?: PolicyDocument | undefined;
|
|
33
33
|
/**
|
|
34
|
-
* The ARN of the
|
|
34
|
+
* The ARN of the instance under which the operation will be executed. For more information about ARNs, see [Amazon Resource Names (ARNs) and AWS Service Namespaces](https://docs.aws.amazon.com//general/latest/gr/aws-arns-and-namespaces.html) in the *AWS General Reference* .
|
|
35
35
|
* @minLength 10
|
|
36
36
|
* @maxLength 1224
|
|
37
37
|
* @pattern arn:(aws|aws-us-gov|aws-cn|aws-iso|aws-iso-b):sso:::instance/(sso)?ins-[a-zA-Z0-9-.]{16}
|
|
@@ -82,7 +82,7 @@ export type TransferWebAppAttribs = {
|
|
|
82
82
|
WebAppId: string;
|
|
83
83
|
};
|
|
84
84
|
/**
|
|
85
|
-
* A structure that describes the values to use for the
|
|
85
|
+
* A structure that describes the values to use for the SSO settings when you create or update a web app.
|
|
86
86
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-transfer-webapp-identityproviderdetails.html}
|
|
87
87
|
*/
|
|
88
88
|
export type IdentityProviderDetails = {
|
|
@@ -31,7 +31,7 @@ export type WorkSpacesWebPortalProps = {
|
|
|
31
31
|
*
|
|
32
32
|
* 4. Add an `IdentityProvider` resource to your CloudFormation template.
|
|
33
33
|
*
|
|
34
|
-
* `
|
|
34
|
+
* `SSO` web portals are authenticated through SSOlong . They provide additional features, such as IdP-initiated authentication. Identity sources (including external identity provider integration) and other identity provider information must be configured in SSO . User and group assignment must be done through the WorkSpaces Secure Browser console. These cannot be configured in CloudFormation.
|
|
35
35
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-portal.html#cfn-workspacesweb-portal-authenticationtype}
|
|
36
36
|
*/
|
|
37
37
|
AuthenticationType?: AuthenticationType | undefined;
|