@pulumi/aws-native 0.116.0 → 0.117.0

package/types/output.d.ts

@@ -8389,6 +8389,16 @@ export declare namespace bedrock {
          */
         s3ObjectKey?: string;
     }
+    /**
+     * Settings for a foundation model used to parse documents for a data source.
+     */
+    interface DataSourceBedrockFoundationModelConfiguration {
+        /**
+         * The model's ARN.
+         */
+        modelArn: string;
+        parsingPrompt?: outputs.bedrock.DataSourceParsingPrompt;
+    }
     /**
      * Details about how to chunk the documents in the data source. A chunk refers to an excerpt from a data source that is returned when the knowledge base that it belongs to is queried.
      */
@@ -8406,19 +8416,79 @@ export declare namespace bedrock {
          * Configurations for when you choose fixed-size chunking. If you set the `chunkingStrategy` as `NONE` , exclude this field.
          */
         fixedSizeChunkingConfiguration?: outputs.bedrock.DataSourceFixedSizeChunkingConfiguration;
+        hierarchicalChunkingConfiguration?: outputs.bedrock.DataSourceHierarchicalChunkingConfiguration;
+        semanticChunkingConfiguration?: outputs.bedrock.DataSourceSemanticChunkingConfiguration;
     }
     /**
      * Specifies a raw data source location to ingest.
      */
     interface DataSourceConfiguration {
+        confluenceConfiguration?: outputs.bedrock.DataSourceConfluenceDataSourceConfiguration;
         /**
          * The configuration information to connect to Amazon S3 as your data source.
          */
-        s3Configuration: outputs.bedrock.DataSourceS3DataSourceConfiguration;
+        s3Configuration?: outputs.bedrock.DataSourceS3DataSourceConfiguration;
+        salesforceConfiguration?: outputs.bedrock.DataSourceSalesforceDataSourceConfiguration;
+        sharePointConfiguration?: outputs.bedrock.DataSourceSharePointDataSourceConfiguration;
         /**
          * The type of data source.
          */
         type: enums.bedrock.DataSourceType;
+        webConfiguration?: outputs.bedrock.DataSourceWebDataSourceConfiguration;
+    }
+    /**
+     * The configuration of the Confluence content. For example, configuring specific types of Confluence content.
+     */
+    interface DataSourceConfluenceCrawlerConfiguration {
+        filterConfiguration?: outputs.bedrock.DataSourceCrawlFilterConfiguration;
+    }
+    /**
+     * The configuration information to connect to Confluence as your data source.
+     */
+    interface DataSourceConfluenceDataSourceConfiguration {
+        crawlerConfiguration?: outputs.bedrock.DataSourceConfluenceCrawlerConfiguration;
+        sourceConfiguration: outputs.bedrock.DataSourceConfluenceSourceConfiguration;
+    }
+    /**
+     * The endpoint information to connect to your Confluence data source.
+     */
+    interface DataSourceConfluenceSourceConfiguration {
+        /**
+         * The supported authentication type to authenticate and connect to your Confluence instance.
+         */
+        authType: enums.bedrock.DataSourceConfluenceSourceConfigurationAuthType;
+        /**
+         * The Amazon Resource Name of an AWS Secrets Manager secret that stores your authentication credentials for your Confluence instance URL. For more information on the key-value pairs that must be included in your secret, depending on your authentication type, see Confluence connection configuration.
+         */
+        credentialsSecretArn: string;
+        /**
+         * The supported host type, whether online/cloud or server/on-premises.
+         */
+        hostType: enums.bedrock.DataSourceConfluenceSourceConfigurationHostType;
+        /**
+         * The Confluence host URL or instance URL.
+         */
+        hostUrl: string;
+    }
+    /**
+     * The type of filtering that you want to apply to certain objects or content of the data source. For example, the PATTERN type is regular expression patterns you can apply to filter your content.
+     */
+    interface DataSourceCrawlFilterConfiguration {
+        patternObjectFilter?: outputs.bedrock.DataSourcePatternObjectFilterConfiguration;
+        /**
+         * The crawl filter type.
+         */
+        type: enums.bedrock.DataSourceCrawlFilterConfigurationType;
+    }
+    /**
+     * Settings for customizing steps in the data source content ingestion pipeline.
+     */
+    interface DataSourceCustomTransformationConfiguration {
+        intermediateStorage: outputs.bedrock.DataSourceIntermediateStorage;
+        /**
+         * A list of Lambda functions that process documents.
+         */
+        transformations: outputs.bedrock.DataSourceTransformation[];
     }
     /**
      * Configurations for when you choose fixed-size chunking. If you set the chunkingStrategy as NONE, exclude this field.
@@ -8434,7 +8504,68 @@ export declare namespace bedrock {
         overlapPercentage: number;
     }
     /**
-     * Contains information about the S3 configuration of the data source.
+     * Configurations for when you choose hierarchical chunking. If you set the chunkingStrategy as NONE, exclude this field.
+     */
+    interface DataSourceHierarchicalChunkingConfiguration {
+        /**
+         * Token settings for each layer.
+         */
+        levelConfigurations: outputs.bedrock.DataSourceHierarchicalChunkingLevelConfiguration[];
+        /**
+         * The number of tokens to repeat across chunks in the same layer.
+         */
+        overlapTokens: number;
+    }
+    /**
+     * Token settings for a layer in a hierarchical chunking configuration.
+     */
+    interface DataSourceHierarchicalChunkingLevelConfiguration {
+        /**
+         * The maximum number of tokens that a chunk can contain in this layer.
+         */
+        maxTokens: number;
+    }
+    /**
+     * A location for storing content from data sources temporarily as it is processed by custom components in the ingestion pipeline.
+     */
+    interface DataSourceIntermediateStorage {
+        s3Location: outputs.bedrock.DataSourceS3Location;
+    }
+    /**
+     * Settings for parsing document contents
+     */
+    interface DataSourceParsingConfiguration {
+        bedrockFoundationModelConfiguration?: outputs.bedrock.DataSourceBedrockFoundationModelConfiguration;
+        parsingStrategy: enums.bedrock.DataSourceParsingStrategy;
+    }
+    /**
+     * Instructions for interpreting the contents of a document.
+     */
+    interface DataSourceParsingPrompt {
+        /**
+         * Instructions for interpreting the contents of a document.
+         */
+        parsingPromptText: string;
+    }
+    /**
+     * The specific filters applied to your data source content. You can filter out or include certain content.
+     */
+    interface DataSourcePatternObjectFilter {
+        exclusionFilters?: string[];
+        inclusionFilters?: string[];
+        /**
+         * The supported object type or content type of the data source.
+         */
+        objectType: string;
+    }
+    /**
+     * The configuration of specific filters applied to your data source content. You can filter out or include certain content.
+     */
+    interface DataSourcePatternObjectFilterConfiguration {
+        filters: outputs.bedrock.DataSourcePatternObjectFilter[];
+    }
+    /**
+     * The configuration information to connect to Amazon S3 as your data source.
      */
     interface DataSourceS3DataSourceConfiguration {
         /**
@@ -8450,6 +8581,71 @@ export declare namespace bedrock {
          */
         inclusionPrefixes?: string[];
     }
+    /**
+     * An Amazon S3 location.
+     */
+    interface DataSourceS3Location {
+        /**
+         * The location's URI
+         */
+        uri: string;
+    }
+    /**
+     * The configuration of filtering the Salesforce content. For example, configuring regular expression patterns to include or exclude certain content.
+     */
+    interface DataSourceSalesforceCrawlerConfiguration {
+        filterConfiguration?: outputs.bedrock.DataSourceCrawlFilterConfiguration;
+    }
+    /**
+     * The configuration information to connect to Salesforce as your data source.
+     */
+    interface DataSourceSalesforceDataSourceConfiguration {
+        crawlerConfiguration?: outputs.bedrock.DataSourceSalesforceCrawlerConfiguration;
+        sourceConfiguration: outputs.bedrock.DataSourceSalesforceSourceConfiguration;
+    }
+    /**
+     * The endpoint information to connect to your Salesforce data source.
+     */
+    interface DataSourceSalesforceSourceConfiguration {
+        /**
+         * The supported authentication type to authenticate and connect to your Salesforce instance.
+         */
+        authType: enums.bedrock.DataSourceSalesforceSourceConfigurationAuthType;
+        /**
+         * The Amazon Resource Name of an AWS Secrets Manager secret that stores your authentication credentials for your Salesforce instance URL. For more information on the key-value pairs that must be included in your secret, depending on your authentication type, see Salesforce connection configuration.
+         */
+        credentialsSecretArn: string;
+        /**
+         * The Salesforce host URL or instance URL.
+         */
+        hostUrl: string;
+    }
+    /**
+     * A seed url object.
+     */
+    interface DataSourceSeedUrl {
+        /**
+         * A web url.
+         */
+        url: string;
+    }
+    /**
+     * Configurations for when you choose semantic chunking. If you set the chunkingStrategy as NONE, exclude this field.
+     */
+    interface DataSourceSemanticChunkingConfiguration {
+        /**
+         * The dissimilarity threshold for splitting chunks.
+         */
+        breakpointPercentileThreshold: number;
+        /**
+         * The buffer size.
+         */
+        bufferSize: number;
+        /**
+         * The maximum number of tokens that a chunk can contain.
+         */
+        maxTokens: number;
+    }
     /**
      * Contains details about the server-side encryption for the data source.
      */
@@ -8459,6 +8655,79 @@ export declare namespace bedrock {
          */
         kmsKeyArn?: string;
     }
+    /**
+     * The configuration of the SharePoint content. For example, configuring specific types of SharePoint content.
+     */
+    interface DataSourceSharePointCrawlerConfiguration {
+        filterConfiguration?: outputs.bedrock.DataSourceCrawlFilterConfiguration;
+    }
+    /**
+     * The configuration information to connect to SharePoint as your data source.
+     */
+    interface DataSourceSharePointDataSourceConfiguration {
+        crawlerConfiguration?: outputs.bedrock.DataSourceSharePointCrawlerConfiguration;
+        sourceConfiguration: outputs.bedrock.DataSourceSharePointSourceConfiguration;
+    }
+    /**
+     * The endpoint information to connect to your SharePoint data source.
+     */
+    interface DataSourceSharePointSourceConfiguration {
+        /**
+         * The supported authentication type to authenticate and connect to your SharePoint site/sites.
+         */
+        authType: enums.bedrock.DataSourceSharePointSourceConfigurationAuthType;
+        /**
+         * The Amazon Resource Name of an AWS Secrets Manager secret that stores your authentication credentials for your SharePoint site/sites. For more information on the key-value pairs that must be included in your secret, depending on your authentication type, see SharePoint connection configuration.
+         */
+        credentialsSecretArn: string;
+        /**
+         * The domain of your SharePoint instance or site URL/URLs.
+         */
+        domain: string;
+        /**
+         * The supported host type, whether online/cloud or server/on-premises.
+         */
+        hostType: enums.bedrock.DataSourceSharePointSourceConfigurationHostType;
+        /**
+         * A list of one or more SharePoint site URLs.
+         */
+        siteUrls: string[];
+        /**
+         * The identifier of your Microsoft 365 tenant.
+         */
+        tenantId?: string;
+    }
+    /**
+     * A Lambda function that processes documents.
+     */
+    interface DataSourceTransformation {
+        /**
+         * When the service applies the transformation.
+         */
+        stepToApply: enums.bedrock.DataSourceTransformationStepToApply;
+        transformationFunction: outputs.bedrock.DataSourceTransformationFunction;
+    }
+    /**
+     * A Lambda function that processes documents.
+     */
+    interface DataSourceTransformationFunction {
+        transformationLambdaConfiguration: outputs.bedrock.DataSourceTransformationLambdaConfiguration;
+    }
+    /**
+     * A Lambda function that processes documents.
+     */
+    interface DataSourceTransformationLambdaConfiguration {
+        /**
+         * The function's ARN identifier.
+         */
+        lambdaArn: string;
+    }
+    /**
+     * A url configuration.
+     */
+    interface DataSourceUrlConfiguration {
+        seedUrls: outputs.bedrock.DataSourceSeedUrl[];
+    }
     /**
      * Details about how to chunk the documents in the data source. A chunk refers to an excerpt from a data source that is returned when the knowledge base that it belongs to is queried.
      */
@@ -8467,6 +8736,39 @@ export declare namespace bedrock {
          * Details about how to chunk the documents in the data source. A *chunk* refers to an excerpt from a data source that is returned when the knowledge base that it belongs to is queried.
          */
         chunkingConfiguration?: outputs.bedrock.DataSourceChunkingConfiguration;
+        customTransformationConfiguration?: outputs.bedrock.DataSourceCustomTransformationConfiguration;
+        parsingConfiguration?: outputs.bedrock.DataSourceParsingConfiguration;
+    }
+    /**
+     * Configuration for the web crawler.
+     */
+    interface DataSourceWebCrawlerConfiguration {
+        crawlerLimits?: outputs.bedrock.DataSourceWebCrawlerLimits;
+        exclusionFilters?: string[];
+        inclusionFilters?: string[];
+        scope?: enums.bedrock.DataSourceWebScopeType;
+    }
+    /**
+     * Limit settings for the web crawler.
+     */
+    interface DataSourceWebCrawlerLimits {
+        /**
+         * Rate of web URLs retrieved per minute.
+         */
+        rateLimit?: number;
+    }
+    /**
+     * Configures a web data source location.
+     */
+    interface DataSourceWebDataSourceConfiguration {
+        crawlerConfiguration?: outputs.bedrock.DataSourceWebCrawlerConfiguration;
+        sourceConfiguration: outputs.bedrock.DataSourceWebSourceConfiguration;
+    }
+    /**
+     * A web source configuration.
+     */
+    interface DataSourceWebSourceConfiguration {
+        urlConfiguration: outputs.bedrock.DataSourceUrlConfiguration;
     }
     /**
      * Details about the routing configuration for a Flow alias.
@@ -13283,7 +13585,7 @@ export declare namespace cognito {
     interface UserPoolAddOns {
         advancedSecurityAdditionalFlows?: outputs.cognito.UserPoolAdvancedSecurityAdditionalFlows;
         /**
-         * The operating mode of advanced security features in your user pool.
+         * The operating mode of advanced security features for standard authentication types in your user pool, including username-password and secure remote password (SRP) authentication.
          */
         advancedSecurityMode?: string;
     }
@@ -13516,6 +13818,11 @@ export declare namespace cognito {
          * The minimum length of the password in the policy that you have set. This value can't be less than 6.
          */
         minimumLength?: number;
+        /**
+         * The number of previous passwords that you want Amazon Cognito to restrict each user from reusing. Users can't set a password that matches any of `n` previous passwords, where `n` is the value of `PasswordHistorySize` .
+         *
+         * Password history isn't enforced and isn't displayed in [DescribeUserPool](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeUserPool.html) responses when you set this value to `0` or don't provide it. To activate this setting, [advanced security features](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-advanced-security.html) must be active in your user pool.
+         */
         passwordHistorySize?: number;
         /**
          * In the password policy that you have set, refers to whether you have required users to use at least one lowercase letter in their password.
@@ -18441,15 +18748,11 @@ export declare namespace ec2 {
     }
     interface CapacityReservationTag {
         /**
-         * The key of the tag.
-         *
-         * Constraints: Tag keys are case-sensitive and accept a maximum of 127 Unicode characters. May not begin with `aws:` .
+         * The tag key.
          */
         key: string;
         /**
-         * The value of the tag.
-         *
-         * Constraints: Tag values are case-sensitive and accept a maximum of 256 Unicode characters.
+         * The tag value.
          */
         value: string;
     }
@@ -44477,6 +44780,23 @@ export declare namespace networkmanager {
          */
         protocol?: string;
     }
+    /**
+     * The attachment to move from one network function group to another.
+     */
+    interface ConnectAttachmentProposedNetworkFunctionGroupChange {
+        /**
+         * The rule number in the policy document that applies to this change.
+         */
+        attachmentPolicyRuleNumber?: number;
+        /**
+         * The name of the network function group to change.
+         */
+        networkFunctionGroupName?: string;
+        /**
+         * The key-value tags that changed for the network function group.
+         */
+        tags?: outputs.networkmanager.ConnectAttachmentTag[];
+    }
     /**
      * The attachment to move from one segment to another.
      */
@@ -44573,6 +44893,27 @@ export declare namespace networkmanager {
          */
         insideCidrBlocks?: string[];
     }
+    interface CoreNetworkNetworkFunctionGroup {
+        /**
+         * The core network edge locations.
+         */
+        edgeLocations?: string[];
+        /**
+         * Name of network function group
+         */
+        name?: string;
+        /**
+         * The segments associated with the network function group.
+         */
+        segments?: outputs.networkmanager.CoreNetworkNetworkFunctionGroupSegmentsProperties;
+    }
+    /**
+     * The segments associated with the network function group.
+     */
+    interface CoreNetworkNetworkFunctionGroupSegmentsProperties {
+        sendTo?: string[];
+        sendVia?: string[];
+    }
     interface CoreNetworkSegment {
         /**
          * The Regions where the edges are located.
@@ -44647,6 +44988,23 @@ export declare namespace networkmanager {
          */
         longitude?: string;
     }
+    /**
+     * The attachment to move from one network function group to another.
+     */
+    interface SiteToSiteVpnAttachmentProposedNetworkFunctionGroupChange {
+        /**
+         * The rule number in the policy document that applies to this change.
+         */
+        attachmentPolicyRuleNumber?: number;
+        /**
+         * The name of the network function group to change.
+         */
+        networkFunctionGroupName?: string;
+        /**
+         * The key-value tags that changed for the network function group.
+         */
+        tags?: outputs.networkmanager.SiteToSiteVpnAttachmentTag[];
+    }
     /**
      * The attachment to move from one segment to another.
      */
@@ -44677,6 +45035,23 @@ export declare namespace networkmanager {
          */
         value: string;
     }
+    /**
+     * The attachment to move from one network function group to another.
+     */
+    interface TransitGatewayRouteTableAttachmentProposedNetworkFunctionGroupChange {
+        /**
+         * The rule number in the policy document that applies to this change.
+         */
+        attachmentPolicyRuleNumber?: number;
+        /**
+         * The name of the network function group to change.
+         */
+        networkFunctionGroupName?: string;
+        /**
+         * The key-value tags that changed for the network function group.
+         */
+        tags?: outputs.networkmanager.TransitGatewayRouteTableAttachmentTag[];
+    }
     /**
      * The attachment to move from one segment to another.
      */
@@ -44707,6 +45082,23 @@ export declare namespace networkmanager {
          */
         value: string;
     }
+    /**
+     * The attachment to move from one network function group to another.
+     */
+    interface VpcAttachmentProposedNetworkFunctionGroupChange {
+        /**
+         * The rule number in the policy document that applies to this change.
+         */
+        attachmentPolicyRuleNumber?: number;
+        /**
+         * The name of the network function group to change.
+         */
+        networkFunctionGroupName?: string;
+        /**
+         * The key-value tags that changed for the network function group.
+         */
+        tags?: outputs.networkmanager.VpcAttachmentTag[];
+    }
     /**
      * The attachment to move from one segment to another.
      */
@@ -74577,25 +74969,6 @@ export declare namespace route53 {
          */
         cloudWatchLogsLogGroupArn: string;
     }
-    /**
-     * A complex type that contains information about a tag that you want to add or edit for the specified health check or hosted zone.
-     */
-    interface HostedZoneTag {
-        /**
-         * The value of ``Key`` depends on the operation that you want to perform:
-         *   +   *Add a tag to a health check or hosted zone*: ``Key`` is the name that you want to give the new tag.
-         *   +   *Edit a tag*: ``Key`` is the name of the tag that you want to change the ``Value`` for.
-         *   +   *Delete a key*: ``Key`` is the name of the tag you want to remove.
-         *   +   *Give a name to a health check*: Edit the default ``Name`` tag. In the Amazon Route 53 console, the list of your health checks includes a *Name* column that lets you see the name that you've given to each health check.
-         */
-        key: string;
-        /**
-         * The value of ``Value`` depends on the operation that you want to perform:
-         *   +   *Add a tag to a health check or hosted zone*: ``Value`` is the value that you want to give the new tag.
-         *   +   *Edit a tag*: ``Value`` is the new value that you want to assign the tag.
-         */
-        value: string;
-    }
     /**
      * *Private hosted zones only:* A complex type that contains information about an Amazon VPC. Route 53 Resolver uses the records in the private hosted zone to route traffic in that VPC.
      *   For public hosted zones, omit ``VPCs``, ``VPCId``, and ``VPCRegion``.
@@ -81363,6 +81736,8 @@ export declare namespace securityhub {
         enabledStandardIdentifiers?: string[];
         /**
          * An object that defines which security controls are enabled in the configuration policy. The enablement status of a control is aligned across all of the enabled standards in an account.
+         *
+         * This property is required only if `ServiceEnabled` is set to true in your configuration policy.
          */
         securityControlsConfiguration?: outputs.securityhub.ConfigurationPolicySecurityControlsConfiguration;
         /**