@pulumi/aws-native 0.60.0 → 0.61.0

package/types/output.d.ts

@@ -1944,15 +1944,33 @@ export declare namespace appflow {
     }
 }
 export declare namespace appintegrations {
+    /**
+     * The configuration for what files should be pulled from the source.
+     */
+    interface DataIntegrationFileConfiguration {
+        /**
+         * Restrictions for what files should be pulled from the source.
+         */
+        filters?: any;
+        /**
+         * Identifiers for the source folders to pull all files from recursively.
+         */
+        folders: string[];
+    }
+    /**
+     * The configuration for what data should be pulled from the source.
+     */
+    interface DataIntegrationObjectConfiguration {
+    }
     interface DataIntegrationScheduleConfig {
         /**
          * The start date for objects to import in the first flow run. Epoch or ISO timestamp format is supported.
          */
-        firstExecutionFrom: string;
+        firstExecutionFrom?: string;
         /**
          * The name of the object to pull from the data source.
          */
-        object: string;
+        object?: string;
         /**
          * How often the data should be pulled from data source.
          */
@@ -4104,6 +4122,12 @@ export declare namespace backup {
         reportTemplate: string;
     }
 }
+export declare namespace backupgateway {
+    interface HypervisorTag {
+        key: string;
+        value: string;
+    }
+}
 export declare namespace batch {
     interface ComputeEnvironmentComputeResources {
         allocationStrategy?: string;
@@ -8850,6 +8874,23 @@ export declare namespace devicefarm {
         key: string;
         value: string;
     }
+    /**
+     * The VPC security groups and subnets that are attached to a project
+     */
+    interface ProjectVpcConfig {
+        /**
+         * An array of security group Ids in your Amazon VPC
+         */
+        securityGroupIds: string[];
+        /**
+         * A array of subnet IDs in your Amazon VPC.
+         */
+        subnetIds: string[];
+        /**
+         * The ID of the Amazon VPC
+         */
+        vpcId: string;
+    }
     interface TestGridProjectTag {
         key: string;
         value: string;
@@ -9949,6 +9990,7 @@ export declare namespace ec2 {
         capacityReservationResourceGroupArn?: string;
     }
     interface LaunchTemplateCpuOptions {
+        amdSevSnp?: string;
         coreCount?: number;
         threadsPerCore?: number;
     }
@@ -10359,6 +10401,16 @@ export declare namespace ec2 {
         routeOrigin?: string;
         state?: string;
     }
+    interface NetworkInsightsPathFilterPortRange {
+        fromPort?: number;
+        toPort?: number;
+    }
+    interface NetworkInsightsPathPathFilter {
+        destinationAddress?: string;
+        destinationPortRange?: outputs.ec2.NetworkInsightsPathFilterPortRange;
+        sourceAddress?: string;
+        sourcePortRange?: outputs.ec2.NetworkInsightsPathFilterPortRange;
+    }
     interface NetworkInsightsPathTag {
         key: string;
         value?: string;
@@ -10761,6 +10813,227 @@ export declare namespace ec2 {
         key: string;
         value: string;
     }
+    /**
+     * The load balancer details if creating the AWS Verified Access endpoint as load-balancertype.
+     */
+    interface VerifiedAccessEndpointLoadBalancerOptions {
+        /**
+         * The ARN of the load balancer.
+         */
+        loadBalancerArn?: string;
+        /**
+         * The IP port number.
+         */
+        port?: number;
+        /**
+         * The IP protocol.
+         */
+        protocol?: string;
+        /**
+         * The IDs of the subnets.
+         */
+        subnetIds?: string[];
+    }
+    /**
+     * The options for network-interface type endpoint.
+     */
+    interface VerifiedAccessEndpointNetworkInterfaceOptions {
+        /**
+         * The ID of the network interface.
+         */
+        networkInterfaceId?: string;
+        /**
+         * The IP port number.
+         */
+        port?: number;
+        /**
+         * The IP protocol.
+         */
+        protocol?: string;
+    }
+    /**
+     * A key-value pair to associate with a resource.
+     */
+    interface VerifiedAccessEndpointTag {
+        /**
+         * The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        key: string;
+        /**
+         * The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        value: string;
+    }
+    /**
+     * A key-value pair to associate with a resource.
+     */
+    interface VerifiedAccessGroupTag {
+        /**
+         * The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        key: string;
+        /**
+         * The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        value: string;
+    }
+    /**
+     * A key-value pair to associate with a resource.
+     */
+    interface VerifiedAccessInstanceTag {
+        /**
+         * The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        key: string;
+        /**
+         * The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        value: string;
+    }
+    /**
+     * The configuration options for AWS Verified Access instances.
+     */
+    interface VerifiedAccessInstanceVerifiedAccessLogs {
+        /**
+         * Sends Verified Access logs to CloudWatch Logs.
+         */
+        cloudWatchLogs?: outputs.ec2.VerifiedAccessInstanceVerifiedAccessLogsCloudWatchLogsProperties;
+        /**
+         * Sends Verified Access logs to Kinesis.
+         */
+        kinesisDataFirehose?: outputs.ec2.VerifiedAccessInstanceVerifiedAccessLogsKinesisDataFirehoseProperties;
+        /**
+         * Sends Verified Access logs to Amazon S3.
+         */
+        s3?: outputs.ec2.VerifiedAccessInstanceVerifiedAccessLogsS3Properties;
+    }
+    /**
+     * Sends Verified Access logs to CloudWatch Logs.
+     */
+    interface VerifiedAccessInstanceVerifiedAccessLogsCloudWatchLogsProperties {
+        /**
+         * Indicates whether logging is enabled.
+         */
+        enabled?: boolean;
+        /**
+         * The ID of the CloudWatch Logs log group.
+         */
+        logGroup?: string;
+    }
+    /**
+     * Sends Verified Access logs to Kinesis.
+     */
+    interface VerifiedAccessInstanceVerifiedAccessLogsKinesisDataFirehoseProperties {
+        /**
+         * The ID of the delivery stream.
+         */
+        deliveryStream?: string;
+        /**
+         * Indicates whether logging is enabled.
+         */
+        enabled?: boolean;
+    }
+    /**
+     * Sends Verified Access logs to Amazon S3.
+     */
+    interface VerifiedAccessInstanceVerifiedAccessLogsS3Properties {
+        /**
+         * The bucket name.
+         */
+        bucketName?: string;
+        /**
+         * The ID of the AWS account that owns the Amazon S3 bucket.
+         */
+        bucketOwner?: string;
+        /**
+         * Indicates whether logging is enabled.
+         */
+        enabled?: boolean;
+        /**
+         * The bucket prefix.
+         */
+        prefix?: string;
+    }
+    /**
+     * A Verified Access Trust Provider.
+     */
+    interface VerifiedAccessInstanceVerifiedAccessTrustProvider {
+        /**
+         * The description of trust provider.
+         */
+        description?: string;
+        /**
+         * The type of device-based trust provider.
+         */
+        deviceTrustProviderType?: string;
+        /**
+         * The type of trust provider (user- or device-based).
+         */
+        trustProviderType?: string;
+        /**
+         * The type of user-based trust provider.
+         */
+        userTrustProviderType?: string;
+        /**
+         * The ID of the trust provider.
+         */
+        verifiedAccessTrustProviderId?: string;
+    }
+    /**
+     * The options for device identity based trust providers.
+     */
+    interface VerifiedAccessTrustProviderDeviceOptions {
+        /**
+         * The ID of the tenant application with the device-identity provider.
+         */
+        tenantId?: string;
+    }
+    /**
+     * The OpenID Connect details for an oidc -type, user-identity based trust provider.
+     */
+    interface VerifiedAccessTrustProviderOidcOptions {
+        /**
+         * The OIDC authorization endpoint.
+         */
+        authorizationEndpoint?: string;
+        /**
+         * The client identifier.
+         */
+        clientId?: string;
+        /**
+         * The client secret.
+         */
+        clientSecret?: string;
+        /**
+         * The OIDC issuer.
+         */
+        issuer?: string;
+        /**
+         * OpenID Connect (OIDC) scopes are used by an application during authentication to authorize access to details of a user. Each scope returns a specific set of user attributes.
+         */
+        scope?: string;
+        /**
+         * The OIDC token endpoint.
+         */
+        tokenEndpoint?: string;
+        /**
+         * The OIDC user info endpoint.
+         */
+        userInfoEndpoint?: string;
+    }
+    /**
+     * A key-value pair to associate with a resource.
+     */
+    interface VerifiedAccessTrustProviderTag {
+        /**
+         * The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        key: string;
+        /**
+         * The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        value: string;
+    }
     interface VolumeTag {
         /**
          * The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
@@ -15919,6 +16192,22 @@ export declare namespace iot {
         key: string;
         value: string;
     }
+    interface BillingGroupPropertiesProperties {
+        billingGroupDescription?: string;
+    }
+    /**
+     * A key-value pair to associate with a resource.
+     */
+    interface BillingGroupTag {
+        /**
+         * The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        key: string;
+        /**
+         * The value for the tag. You can specify a value that is 1 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        value: string;
+    }
     interface CACertificateRegistrationConfig {
         roleArn?: string;
         templateBody?: string;
@@ -16337,6 +16626,43 @@ export declare namespace iot {
     interface ThingAttributePayload {
         attributes?: any;
     }
+    interface ThingGroupAttributePayload {
+        attributes?: any;
+    }
+    interface ThingGroupPropertiesProperties {
+        attributePayload?: outputs.iot.ThingGroupAttributePayload;
+        thingGroupDescription?: string;
+    }
+    /**
+     * A key-value pair to associate with a resource.
+     */
+    interface ThingGroupTag {
+        /**
+         * The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        key: string;
+        /**
+         * The value for the tag. You can specify a value that is 1 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        value: string;
+    }
+    interface ThingTypePropertiesProperties {
+        searchableAttributes?: string[];
+        thingTypeDescription?: string;
+    }
+    /**
+     * A key-value pair to associate with a resource.
+     */
+    interface ThingTypeTag {
+        /**
+         * The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        key: string;
+        /**
+         * The value for the tag. You can specify a value that is 1 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        value: string;
+    }
     /**
      * Specifies the amount of time each device has to finish its execution of the job.
      */
@@ -19719,7 +20045,6 @@ export declare namespace kinesisfirehose {
     }
     interface DeliveryStreamAmazonOpenSearchServerlessDestinationConfiguration {
         bufferingHints?: outputs.kinesisfirehose.DeliveryStreamAmazonOpenSearchServerlessBufferingHints;
-        bulkRequestCustomizationConfiguration?: outputs.kinesisfirehose.DeliveryStreamBulkRequestCustomizationConfiguration;
         cloudWatchLoggingOptions?: outputs.kinesisfirehose.DeliveryStreamCloudWatchLoggingOptions;
         collectionEndpoint?: string;
         indexName: string;
@@ -19739,7 +20064,6 @@ export declare namespace kinesisfirehose {
     }
     interface DeliveryStreamAmazonopensearchserviceDestinationConfiguration {
         bufferingHints?: outputs.kinesisfirehose.DeliveryStreamAmazonopensearchserviceBufferingHints;
-        bulkRequestCustomizationConfiguration?: outputs.kinesisfirehose.DeliveryStreamBulkRequestCustomizationConfiguration;
         cloudWatchLoggingOptions?: outputs.kinesisfirehose.DeliveryStreamCloudWatchLoggingOptions;
         clusterEndpoint?: string;
         documentIdOptions?: outputs.kinesisfirehose.DeliveryStreamDocumentIdOptions;
@@ -19761,11 +20085,6 @@ export declare namespace kinesisfirehose {
         intervalInSeconds?: number;
         sizeInMBs?: number;
     }
-    interface DeliveryStreamBulkRequestCustomizationConfiguration {
-        enabled?: boolean;
-        jqExpression?: string;
-        jqVersion?: enums.kinesisfirehose.DeliveryStreamBulkRequestCustomizationConfigurationJqVersion;
-    }
     interface DeliveryStreamCloudWatchLoggingOptions {
         enabled?: boolean;
         logGroupName?: string;
@@ -19799,7 +20118,6 @@ export declare namespace kinesisfirehose {
     }
     interface DeliveryStreamElasticsearchDestinationConfiguration {
         bufferingHints?: outputs.kinesisfirehose.DeliveryStreamElasticsearchBufferingHints;
-        bulkRequestCustomizationConfiguration?: outputs.kinesisfirehose.DeliveryStreamBulkRequestCustomizationConfiguration;
         cloudWatchLoggingOptions?: outputs.kinesisfirehose.DeliveryStreamCloudWatchLoggingOptions;
         clusterEndpoint?: string;
         documentIdOptions?: outputs.kinesisfirehose.DeliveryStreamDocumentIdOptions;
@@ -24938,6 +25256,7 @@ export declare namespace neptune {
 }
 export declare namespace networkfirewall {
     interface FirewallPolicy {
+        policyVariables?: outputs.networkfirewall.FirewallPolicyPolicyVariablesProperties;
         statefulDefaultActions?: string[];
         statefulEngineOptions?: outputs.networkfirewall.FirewallPolicyStatefulEngineOptions;
         statefulRuleGroupReferences?: outputs.networkfirewall.FirewallPolicyStatefulRuleGroupReference[];
@@ -24956,9 +25275,14 @@ export declare namespace networkfirewall {
     interface FirewallPolicyDimension {
         value: string;
     }
+    interface FirewallPolicyPolicyVariablesProperties {
+        ruleVariables?: outputs.networkfirewall.FirewallPolicyRuleVariables;
+    }
     interface FirewallPolicyPublishMetricAction {
         dimensions: outputs.networkfirewall.FirewallPolicyDimension[];
     }
+    interface FirewallPolicyRuleVariables {
+    }
     interface FirewallPolicyStatefulEngineOptions {
         ruleOrder?: enums.networkfirewall.FirewallPolicyRuleOrder;
         streamExceptionPolicy?: enums.networkfirewall.FirewallPolicyStreamExceptionPolicy;
@@ -25952,6 +26276,67 @@ export declare namespace organizations {
         value: string;
     }
 }
+export declare namespace osis {
+    /**
+     * Key-value pairs to configure log publishing.
+     */
+    interface PipelineLogPublishingOptions {
+        /**
+         * The destination for OpenSearch Ingestion Service logs sent to Amazon CloudWatch.
+         */
+        cloudWatchLogDestination?: outputs.osis.PipelineLogPublishingOptionsCloudWatchLogDestinationProperties;
+        /**
+         * Whether logs should be published.
+         */
+        isLoggingEnabled?: boolean;
+    }
+    /**
+     * The destination for OpenSearch Ingestion Service logs sent to Amazon CloudWatch.
+     */
+    interface PipelineLogPublishingOptionsCloudWatchLogDestinationProperties {
+        logGroup?: string;
+    }
+    /**
+     * A key-value pair to associate with a resource.
+     */
+    interface PipelineTag {
+        /**
+         * The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        key: string;
+        /**
+         * The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        value: string;
+    }
+    /**
+     * An OpenSearch Ingestion Service-managed VPC endpoint that will access one or more pipelines.
+     */
+    interface PipelineVpcEndpoint {
+        /**
+         * The unique identifier of the endpoint.
+         */
+        vpcEndpointId?: string;
+        /**
+         * The ID for your VPC. AWS Privatelink generates this value when you create a VPC.
+         */
+        vpcId?: string;
+        vpcOptions?: outputs.osis.PipelineVpcOptions;
+    }
+    /**
+     * Container for the values required to configure VPC access for the pipeline. If you don't specify these values, OpenSearch Ingestion Service creates the pipeline with a public endpoint.
+     */
+    interface PipelineVpcOptions {
+        /**
+         * A list of security groups associated with the VPC endpoint.
+         */
+        securityGroupIds?: string[];
+        /**
+         * A list of subnet IDs associated with the VPC endpoint.
+         */
+        subnetIds?: string[];
+    }
+}
 export declare namespace panorama {
     interface ApplicationInstanceManifestOverridesPayload {
         payloadData?: string;
@@ -26787,6 +27172,47 @@ export declare namespace pipes {
         invocationType?: enums.pipes.PipeTargetInvocationType;
     }
 }
+export declare namespace proton {
+    /**
+     * <p>A description of a resource tag.</p>
+     */
+    interface EnvironmentAccountConnectionTag {
+        /**
+         * <p>The key of the resource tag.</p>
+         */
+        key: string;
+        /**
+         * <p>The value of the resource tag.</p>
+         */
+        value: string;
+    }
+    /**
+     * <p>A description of a resource tag.</p>
+     */
+    interface EnvironmentTemplateTag {
+        /**
+         * <p>The key of the resource tag.</p>
+         */
+        key: string;
+        /**
+         * <p>The value of the resource tag.</p>
+         */
+        value: string;
+    }
+    /**
+     * <p>A description of a resource tag.</p>
+     */
+    interface ServiceTemplateTag {
+        /**
+         * <p>The key of the resource tag.</p>
+         */
+        key: string;
+        /**
+         * <p>The value of the resource tag.</p>
+         */
+        value: string;
+    }
+}
 export declare namespace qldb {
     interface LedgerTag {
         key: string;
@@ -37429,6 +37855,16 @@ export declare namespace s3 {
     }
 }
 export declare namespace s3objectlambda {
+    interface AccessPointAlias {
+        /**
+         * The status of the Object Lambda alias.
+         */
+        status: string;
+        /**
+         * The value of the Object Lambda alias.
+         */
+        value: string;
+    }
     interface AccessPointAwsLambda {
         functionArn: string;
         functionPayload?: string;
@@ -37442,6 +37878,12 @@ export declare namespace s3objectlambda {
         supportingAccessPoint: string;
         transformationConfigurations: outputs.s3objectlambda.AccessPointTransformationConfiguration[];
     }
+    interface AccessPointPolicyStatus {
+        /**
+         * Specifies whether the Object lambda Access Point Policy is Public or not. Object lambda Access Points are private by default.
+         */
+        isPublic?: boolean;
+    }
     /**
      * The Public Access Block Configuration is used to block policies that would allow public access to this Object lambda Access Point. All public access to Object lambda Access Points are blocked by default, and any policy that would give public access to them will be also blocked. This behavior cannot be changed for Object lambda Access Points.
      */
@@ -37478,22 +37920,6 @@ export declare namespace s3objectlambda {
     interface AccessPointTransformationConfigurationContentTransformationProperties {
         awsLambda: outputs.s3objectlambda.AccessPointAwsLambda;
     }
-    interface AliasProperties {
-        /**
-         * The status of the Object Lambda alias.
-         */
-        status?: string;
-        /**
-         * The value of the Object Lambda alias.
-         */
-        value?: string;
-    }
-    interface PolicyStatusProperties {
-        /**
-         * Specifies whether the Object lambda Access Point Policy is Public or not. Object lambda Access Points are private by default.
-         */
-        isPublic?: boolean;
-    }
 }
 export declare namespace s3outposts {
     interface AccessPointVpcConfiguration {
@@ -40796,23 +41222,71 @@ export declare namespace secretsmanager {
         scheduleExpression?: string;
     }
     interface SecretGenerateSecretString {
+        /**
+         * A string that excludes characters in the generated password. By default, all characters from the included sets can be used. The string can be a minimum length of 0 characters and a maximum length of 7168 characters.
+         */
         excludeCharacters?: string;
+        /**
+         * Specifies the generated password should not include lowercase letters. By default, ecrets Manager disables this parameter, and the generated password can include lowercase False, and the generated password can include lowercase letters.
+         */
         excludeLowercase?: boolean;
+        /**
+         * Specifies that the generated password should exclude digits. By default, Secrets Manager does not enable the parameter, False, and the generated password can include digits.
+         */
         excludeNumbers?: boolean;
+        /**
+         * Specifies that the generated password should not include punctuation characters. The default if you do not include this switch parameter is that punctuation characters can be included.
+         */
         excludePunctuation?: boolean;
+        /**
+         * Specifies that the generated password should not include uppercase letters. The default behavior is False, and the generated password can include uppercase letters.
+         */
         excludeUppercase?: boolean;
+        /**
+         * The JSON key name used to add the generated password to the JSON structure specified by the SecretStringTemplate parameter. If you specify this parameter, then you must also specify SecretStringTemplate.
+         */
         generateStringKey?: string;
+        /**
+         * Specifies that the generated password can include the space character. By default, Secrets Manager disables this parameter, and the generated password doesn't include space
+         */
         includeSpace?: boolean;
+        /**
+         * The desired length of the generated password. The default value if you do not include this parameter is 32 characters.
+         */
         passwordLength?: number;
+        /**
+         * Specifies whether the generated password must include at least one of every allowed character type. By default, Secrets Manager enables this parameter, and the generated password includes at least one of every character type.
+         */
         requireEachIncludedType?: boolean;
+        /**
+         * A properly structured JSON string that the generated password can be added to. If you specify this parameter, then you must also specify GenerateStringKey.
+         */
         secretStringTemplate?: string;
     }
+    /**
+     * A custom type that specifies a Region and the KmsKeyId for a replica secret.
+     */
     interface SecretReplicaRegion {
+        /**
+         * The ARN, key ID, or alias of the KMS key to encrypt the secret. If you don't include this field, Secrets Manager uses aws/secretsmanager.
+         */
         kmsKeyId?: string;
+        /**
+         * (Optional) A string that represents a Region, for example "us-east-1".
+         */
         region: string;
     }
+    /**
+     * A list of tags to attach to the secret. Each tag is a key and value pair of strings in a JSON text string.
+     */
     interface SecretTag {
+        /**
+         * The value for the tag. You can specify a value that's 1 to 256 characters in length.
+         */
         key: string;
+        /**
+         * The key name of the tag. You can specify a value that's 1 to 128 Unicode characters in length and can't be prefixed with aws.
+         */
         value: string;
     }
 }

package/xray/group.d.ts

@@ -30,7 +30,7 @@ export declare class Group extends pulumi.CustomResource {
     /**
      * The case-sensitive name of the new group. Names must be unique.
      */
-    readonly groupName: pulumi.Output<string | undefined>;
+    readonly groupName: pulumi.Output<string>;
     readonly insightsConfiguration: pulumi.Output<outputs.xray.GroupInsightsConfiguration | undefined>;
     readonly tags: pulumi.Output<outputs.xray.GroupTag[] | undefined>;
     /**