@pulumi/aws-native 0.62.0 → 0.62.1-alpha.1685012573

package/shield/getProtection.d.ts

@@ -0,0 +1,41 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as outputs from "../types/output";
+/**
+ * Enables AWS Shield Advanced for a specific AWS resource. The resource can be an Amazon CloudFront distribution, Amazon Route 53 hosted zone, AWS Global Accelerator standard accelerator, Elastic IP Address, Application Load Balancer, or a Classic Load Balancer. You can protect Amazon EC2 instances and Network Load Balancers by association with protected Amazon EC2 Elastic IP addresses.
+ */
+export declare function getProtection(args: GetProtectionArgs, opts?: pulumi.InvokeOptions): Promise<GetProtectionResult>;
+export interface GetProtectionArgs {
+    /**
+     * The ARN (Amazon Resource Name) of the protection.
+     */
+    protectionArn: string;
+}
+export interface GetProtectionResult {
+    readonly applicationLayerAutomaticResponseConfiguration?: outputs.shield.ProtectionApplicationLayerAutomaticResponseConfiguration;
+    /**
+     * The Amazon Resource Names (ARNs) of the health check to associate with the protection.
+     */
+    readonly healthCheckArns?: string[];
+    /**
+     * The ARN (Amazon Resource Name) of the protection.
+     */
+    readonly protectionArn?: string;
+    /**
+     * The unique identifier (ID) of the protection.
+     */
+    readonly protectionId?: string;
+    /**
+     * One or more tag key-value pairs for the Protection object.
+     */
+    readonly tags?: outputs.shield.ProtectionTag[];
+}
+/**
+ * Enables AWS Shield Advanced for a specific AWS resource. The resource can be an Amazon CloudFront distribution, Amazon Route 53 hosted zone, AWS Global Accelerator standard accelerator, Elastic IP Address, Application Load Balancer, or a Classic Load Balancer. You can protect Amazon EC2 instances and Network Load Balancers by association with protected Amazon EC2 Elastic IP addresses.
+ */
+export declare function getProtectionOutput(args: GetProtectionOutputArgs, opts?: pulumi.InvokeOptions): pulumi.Output<GetProtectionResult>;
+export interface GetProtectionOutputArgs {
+    /**
+     * The ARN (Amazon Resource Name) of the protection.
+     */
+    protectionArn: pulumi.Input<string>;
+}

package/shield/getProtection.js

@@ -0,0 +1,25 @@
+"use strict";
+// *** WARNING: this file was generated by the Pulumi SDK Generator. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getProtectionOutput = exports.getProtection = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("../utilities");
+/**
+ * Enables AWS Shield Advanced for a specific AWS resource. The resource can be an Amazon CloudFront distribution, Amazon Route 53 hosted zone, AWS Global Accelerator standard accelerator, Elastic IP Address, Application Load Balancer, or a Classic Load Balancer. You can protect Amazon EC2 instances and Network Load Balancers by association with protected Amazon EC2 Elastic IP addresses.
+ */
+function getProtection(args, opts) {
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invoke("aws-native:shield:getProtection", {
+        "protectionArn": args.protectionArn,
+    }, opts);
+}
+exports.getProtection = getProtection;
+/**
+ * Enables AWS Shield Advanced for a specific AWS resource. The resource can be an Amazon CloudFront distribution, Amazon Route 53 hosted zone, AWS Global Accelerator standard accelerator, Elastic IP Address, Application Load Balancer, or a Classic Load Balancer. You can protect Amazon EC2 instances and Network Load Balancers by association with protected Amazon EC2 Elastic IP addresses.
+ */
+function getProtectionOutput(args, opts) {
+    return pulumi.output(args).apply((a) => getProtection(a, opts));
+}
+exports.getProtectionOutput = getProtectionOutput;
+//# sourceMappingURL=getProtection.js.map

package/shield/getProtection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getProtection.js","sourceRoot":"","sources":["../../shield/getProtection.ts"],"names":[],"mappings":";AAAA,wEAAwE;AACxE,iFAAiF;;;AAEjF,yCAAyC;AAIzC,0CAA0C;AAE1C;;GAEG;AACH,SAAgB,aAAa,CAAC,IAAuB,EAAE,IAA2B;IAE9E,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,iCAAiC,EAAE;QAC5D,eAAe,EAAE,IAAI,CAAC,aAAa;KACtC,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAND,sCAMC;AA4BD;;GAEG;AACH,SAAgB,mBAAmB,CAAC,IAA6B,EAAE,IAA2B;IAC1F,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;AACxE,CAAC;AAFD,kDAEC"}

package/shield/getProtectionGroup.d.ts

@@ -0,0 +1,52 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as outputs from "../types/output";
+import * as enums from "../types/enums";
+/**
+ * A grouping of protected resources so they can be handled as a collective. This resource grouping improves the accuracy of detection and reduces false positives.
+ */
+export declare function getProtectionGroup(args: GetProtectionGroupArgs, opts?: pulumi.InvokeOptions): Promise<GetProtectionGroupResult>;
+export interface GetProtectionGroupArgs {
+    /**
+     * The ARN (Amazon Resource Name) of the protection group.
+     */
+    protectionGroupArn: string;
+}
+export interface GetProtectionGroupResult {
+    /**
+     * Defines how AWS Shield combines resource data for the group in order to detect, mitigate, and report events.
+     * * Sum - Use the total traffic across the group. This is a good choice for most cases. Examples include Elastic IP addresses for EC2 instances that scale manually or automatically.
+     * * Mean - Use the average of the traffic across the group. This is a good choice for resources that share traffic uniformly. Examples include accelerators and load balancers.
+     * * Max - Use the highest traffic from each resource. This is useful for resources that don't share traffic and for resources that share that traffic in a non-uniform way. Examples include Amazon CloudFront and origin resources for CloudFront distributions.
+     */
+    readonly aggregation?: enums.shield.ProtectionGroupAggregation;
+    /**
+     * The Amazon Resource Names (ARNs) of the resources to include in the protection group. You must set this when you set `Pattern` to `ARBITRARY` and you must not set it for any other `Pattern` setting.
+     */
+    readonly members?: string[];
+    /**
+     * The criteria to use to choose the protected resources for inclusion in the group. You can include all resources that have protections, provide a list of resource Amazon Resource Names (ARNs), or include all resources of a specified resource type.
+     */
+    readonly pattern?: enums.shield.ProtectionGroupPattern;
+    /**
+     * The ARN (Amazon Resource Name) of the protection group.
+     */
+    readonly protectionGroupArn?: string;
+    /**
+     * The resource type to include in the protection group. All protected resources of this type are included in the protection group. Newly protected resources of this type are automatically added to the group. You must set this when you set `Pattern` to `BY_RESOURCE_TYPE` and you must not set it for any other `Pattern` setting.
+     */
+    readonly resourceType?: enums.shield.ProtectionGroupResourceType;
+    /**
+     * One or more tag key-value pairs for the Protection object.
+     */
+    readonly tags?: outputs.shield.ProtectionGroupTag[];
+}
+/**
+ * A grouping of protected resources so they can be handled as a collective. This resource grouping improves the accuracy of detection and reduces false positives.
+ */
+export declare function getProtectionGroupOutput(args: GetProtectionGroupOutputArgs, opts?: pulumi.InvokeOptions): pulumi.Output<GetProtectionGroupResult>;
+export interface GetProtectionGroupOutputArgs {
+    /**
+     * The ARN (Amazon Resource Name) of the protection group.
+     */
+    protectionGroupArn: pulumi.Input<string>;
+}

package/shield/getProtectionGroup.js

@@ -0,0 +1,25 @@
+"use strict";
+// *** WARNING: this file was generated by the Pulumi SDK Generator. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getProtectionGroupOutput = exports.getProtectionGroup = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("../utilities");
+/**
+ * A grouping of protected resources so they can be handled as a collective. This resource grouping improves the accuracy of detection and reduces false positives.
+ */
+function getProtectionGroup(args, opts) {
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invoke("aws-native:shield:getProtectionGroup", {
+        "protectionGroupArn": args.protectionGroupArn,
+    }, opts);
+}
+exports.getProtectionGroup = getProtectionGroup;
+/**
+ * A grouping of protected resources so they can be handled as a collective. This resource grouping improves the accuracy of detection and reduces false positives.
+ */
+function getProtectionGroupOutput(args, opts) {
+    return pulumi.output(args).apply((a) => getProtectionGroup(a, opts));
+}
+exports.getProtectionGroupOutput = getProtectionGroupOutput;
+//# sourceMappingURL=getProtectionGroup.js.map

package/shield/getProtectionGroup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getProtectionGroup.js","sourceRoot":"","sources":["../../shield/getProtectionGroup.ts"],"names":[],"mappings":";AAAA,wEAAwE;AACxE,iFAAiF;;;AAEjF,yCAAyC;AAIzC,0CAA0C;AAE1C;;GAEG;AACH,SAAgB,kBAAkB,CAAC,IAA4B,EAAE,IAA2B;IAExF,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,sCAAsC,EAAE;QACjE,oBAAoB,EAAE,IAAI,CAAC,kBAAkB;KAChD,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAND,gDAMC;AAsCD;;GAEG;AACH,SAAgB,wBAAwB,CAAC,IAAkC,EAAE,IAA2B;IACpG,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;AAC7E,CAAC;AAFD,4DAEC"}

package/shield/index.d.ts

@@ -0,0 +1,25 @@
+export { DRTAccessArgs } from "./drtaccess";
+export type DRTAccess = import("./drtaccess").DRTAccess;
+export declare const DRTAccess: typeof import("./drtaccess").DRTAccess;
+export { GetDRTAccessArgs, GetDRTAccessResult, GetDRTAccessOutputArgs } from "./getDRTAccess";
+export declare const getDRTAccess: typeof import("./getDRTAccess").getDRTAccess;
+export declare const getDRTAccessOutput: typeof import("./getDRTAccess").getDRTAccessOutput;
+export { GetProactiveEngagementArgs, GetProactiveEngagementResult, GetProactiveEngagementOutputArgs } from "./getProactiveEngagement";
+export declare const getProactiveEngagement: typeof import("./getProactiveEngagement").getProactiveEngagement;
+export declare const getProactiveEngagementOutput: typeof import("./getProactiveEngagement").getProactiveEngagementOutput;
+export { GetProtectionArgs, GetProtectionResult, GetProtectionOutputArgs } from "./getProtection";
+export declare const getProtection: typeof import("./getProtection").getProtection;
+export declare const getProtectionOutput: typeof import("./getProtection").getProtectionOutput;
+export { GetProtectionGroupArgs, GetProtectionGroupResult, GetProtectionGroupOutputArgs } from "./getProtectionGroup";
+export declare const getProtectionGroup: typeof import("./getProtectionGroup").getProtectionGroup;
+export declare const getProtectionGroupOutput: typeof import("./getProtectionGroup").getProtectionGroupOutput;
+export { ProactiveEngagementArgs } from "./proactiveEngagement";
+export type ProactiveEngagement = import("./proactiveEngagement").ProactiveEngagement;
+export declare const ProactiveEngagement: typeof import("./proactiveEngagement").ProactiveEngagement;
+export { ProtectionArgs } from "./protection";
+export type Protection = import("./protection").Protection;
+export declare const Protection: typeof import("./protection").Protection;
+export { ProtectionGroupArgs } from "./protectionGroup";
+export type ProtectionGroup = import("./protectionGroup").ProtectionGroup;
+export declare const ProtectionGroup: typeof import("./protectionGroup").ProtectionGroup;
+export * from "../types/enums/shield";

package/shield/index.js

@@ -0,0 +1,62 @@
+"use strict";
+// *** WARNING: this file was generated by the Pulumi SDK Generator. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ProtectionGroup = exports.Protection = exports.ProactiveEngagement = exports.getProtectionGroupOutput = exports.getProtectionGroup = exports.getProtectionOutput = exports.getProtection = exports.getProactiveEngagementOutput = exports.getProactiveEngagement = exports.getDRTAccessOutput = exports.getDRTAccess = exports.DRTAccess = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("../utilities");
+exports.DRTAccess = null;
+utilities.lazyLoad(exports, ["DRTAccess"], () => require("./drtaccess"));
+exports.getDRTAccess = null;
+exports.getDRTAccessOutput = null;
+utilities.lazyLoad(exports, ["getDRTAccess", "getDRTAccessOutput"], () => require("./getDRTAccess"));
+exports.getProactiveEngagement = null;
+exports.getProactiveEngagementOutput = null;
+utilities.lazyLoad(exports, ["getProactiveEngagement", "getProactiveEngagementOutput"], () => require("./getProactiveEngagement"));
+exports.getProtection = null;
+exports.getProtectionOutput = null;
+utilities.lazyLoad(exports, ["getProtection", "getProtectionOutput"], () => require("./getProtection"));
+exports.getProtectionGroup = null;
+exports.getProtectionGroupOutput = null;
+utilities.lazyLoad(exports, ["getProtectionGroup", "getProtectionGroupOutput"], () => require("./getProtectionGroup"));
+exports.ProactiveEngagement = null;
+utilities.lazyLoad(exports, ["ProactiveEngagement"], () => require("./proactiveEngagement"));
+exports.Protection = null;
+utilities.lazyLoad(exports, ["Protection"], () => require("./protection"));
+exports.ProtectionGroup = null;
+utilities.lazyLoad(exports, ["ProtectionGroup"], () => require("./protectionGroup"));
+// Export enums:
+__exportStar(require("../types/enums/shield"), exports);
+const _module = {
+    version: utilities.getVersion(),
+    construct: (name, type, urn) => {
+        switch (type) {
+            case "aws-native:shield:DRTAccess":
+                return new exports.DRTAccess(name, undefined, { urn });
+            case "aws-native:shield:ProactiveEngagement":
+                return new exports.ProactiveEngagement(name, undefined, { urn });
+            case "aws-native:shield:Protection":
+                return new exports.Protection(name, undefined, { urn });
+            case "aws-native:shield:ProtectionGroup":
+                return new exports.ProtectionGroup(name, undefined, { urn });
+            default:
+                throw new Error(`unknown resource type ${type}`);
+        }
+    },
+};
+pulumi.runtime.registerResourceModule("aws-native", "shield", _module);
+//# sourceMappingURL=index.js.map

package/shield/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../shield/index.ts"],"names":[],"mappings":";AAAA,wEAAwE;AACxE,iFAAiF;;;;;;;;;;;;;;;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAK7B,QAAA,SAAS,GAA2C,IAAW,CAAC;AAC7E,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;AAG5D,QAAA,YAAY,GAAiD,IAAW,CAAC;AACzE,QAAA,kBAAkB,GAAuD,IAAW,CAAC;AAClG,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,cAAc,EAAC,oBAAoB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;AAGvF,QAAA,sBAAsB,GAAqE,IAAW,CAAC;AACvG,QAAA,4BAA4B,GAA2E,IAAW,CAAC;AAChI,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,wBAAwB,EAAC,8BAA8B,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,CAAC;AAGrH,QAAA,aAAa,GAAmD,IAAW,CAAC;AAC5E,QAAA,mBAAmB,GAAyD,IAAW,CAAC;AACrG,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,eAAe,EAAC,qBAAqB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAG1F,QAAA,kBAAkB,GAA6D,IAAW,CAAC;AAC3F,QAAA,wBAAwB,GAAmE,IAAW,CAAC;AACpH,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,oBAAoB,EAAC,0BAA0B,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC,CAAC;AAIzG,QAAA,mBAAmB,GAA+D,IAAW,CAAC;AAC3G,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,qBAAqB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC,CAAC;AAIhF,QAAA,UAAU,GAA6C,IAAW,CAAC;AAChF,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;AAI9D,QAAA,eAAe,GAAuD,IAAW,CAAC;AAC/F,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,iBAAiB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC;AAGrF,gBAAgB;AAChB,wDAAsC;AAEtC,MAAM,OAAO,GAAG;IACZ,OAAO,EAAE,SAAS,CAAC,UAAU,EAAE;IAC/B,SAAS,EAAE,CAAC,IAAY,EAAE,IAAY,EAAE,GAAW,EAAmB,EAAE;QACpE,QAAQ,IAAI,EAAE;YACV,KAAK,6BAA6B;gBAC9B,OAAO,IAAI,iBAAS,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACvD,KAAK,uCAAuC;gBACxC,OAAO,IAAI,2BAAmB,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACjE,KAAK,8BAA8B;gBAC/B,OAAO,IAAI,kBAAU,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACxD,KAAK,mCAAmC;gBACpC,OAAO,IAAI,uBAAe,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAC7D;gBACI,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;SACxD;IACL,CAAC;CACJ,CAAC;AACF,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,YAAY,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAA"}

package/shield/proactiveEngagement.d.ts

@@ -0,0 +1,57 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as inputs from "../types/input";
+import * as outputs from "../types/output";
+import * as enums from "../types/enums";
+/**
+ * Authorizes the Shield Response Team (SRT) to use email and phone to notify contacts about escalations to the SRT and to initiate proactive customer support.
+ */
+export declare class ProactiveEngagement extends pulumi.CustomResource {
+    /**
+     * Get an existing ProactiveEngagement resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, opts?: pulumi.CustomResourceOptions): ProactiveEngagement;
+    /**
+     * Returns true if the given object is an instance of ProactiveEngagement.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is ProactiveEngagement;
+    readonly accountId: pulumi.Output<string>;
+    /**
+     * A list of email addresses and phone numbers that the Shield Response Team (SRT) can use to contact you for escalations to the SRT and to initiate proactive customer support.
+     * To enable proactive engagement, the contact list must include at least one phone number.
+     */
+    readonly emergencyContactList: pulumi.Output<outputs.shield.ProactiveEngagementEmergencyContact[]>;
+    /**
+     * If `ENABLED`, the Shield Response Team (SRT) will use email and phone to notify contacts about escalations to the SRT and to initiate proactive customer support.
+     * If `DISABLED`, the SRT will not proactively notify contacts about escalations or to initiate proactive customer support.
+     */
+    readonly proactiveEngagementStatus: pulumi.Output<enums.shield.ProactiveEngagementStatus>;
+    /**
+     * Create a ProactiveEngagement resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: ProactiveEngagementArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * The set of arguments for constructing a ProactiveEngagement resource.
+ */
+export interface ProactiveEngagementArgs {
+    /**
+     * A list of email addresses and phone numbers that the Shield Response Team (SRT) can use to contact you for escalations to the SRT and to initiate proactive customer support.
+     * To enable proactive engagement, the contact list must include at least one phone number.
+     */
+    emergencyContactList: pulumi.Input<pulumi.Input<inputs.shield.ProactiveEngagementEmergencyContactArgs>[]>;
+    /**
+     * If `ENABLED`, the Shield Response Team (SRT) will use email and phone to notify contacts about escalations to the SRT and to initiate proactive customer support.
+     * If `DISABLED`, the SRT will not proactively notify contacts about escalations or to initiate proactive customer support.
+     */
+    proactiveEngagementStatus: pulumi.Input<enums.shield.ProactiveEngagementStatus>;
+}

package/shield/proactiveEngagement.js

@@ -0,0 +1,66 @@
+"use strict";
+// *** WARNING: this file was generated by the Pulumi SDK Generator. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ProactiveEngagement = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("../utilities");
+/**
+ * Authorizes the Shield Response Team (SRT) to use email and phone to notify contacts about escalations to the SRT and to initiate proactive customer support.
+ */
+class ProactiveEngagement extends pulumi.CustomResource {
+    /**
+     * Get an existing ProactiveEngagement resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, opts) {
+        return new ProactiveEngagement(name, undefined, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of ProactiveEngagement.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === ProactiveEngagement.__pulumiType;
+    }
+    /**
+     * Create a ProactiveEngagement resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (!opts.id) {
+            if ((!args || args.emergencyContactList === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'emergencyContactList'");
+            }
+            if ((!args || args.proactiveEngagementStatus === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'proactiveEngagementStatus'");
+            }
+            resourceInputs["emergencyContactList"] = args ? args.emergencyContactList : undefined;
+            resourceInputs["proactiveEngagementStatus"] = args ? args.proactiveEngagementStatus : undefined;
+            resourceInputs["accountId"] = undefined /*out*/;
+        }
+        else {
+            resourceInputs["accountId"] = undefined /*out*/;
+            resourceInputs["emergencyContactList"] = undefined /*out*/;
+            resourceInputs["proactiveEngagementStatus"] = undefined /*out*/;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(ProactiveEngagement.__pulumiType, name, resourceInputs, opts);
+    }
+}
+exports.ProactiveEngagement = ProactiveEngagement;
+/** @internal */
+ProactiveEngagement.__pulumiType = 'aws-native:shield:ProactiveEngagement';
+//# sourceMappingURL=proactiveEngagement.js.map

package/shield/proactiveEngagement.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proactiveEngagement.js","sourceRoot":"","sources":["../../shield/proactiveEngagement.ts"],"names":[],"mappings":";AAAA,wEAAwE;AACxE,iFAAiF;;;AAEjF,yCAAyC;AAIzC,0CAA0C;AAE1C;;GAEG;AACH,MAAa,mBAAoB,SAAQ,MAAM,CAAC,cAAc;IAC1D;;;;;;;OAOG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,IAAmC;QAC5F,OAAO,IAAI,mBAAmB,CAAC,IAAI,EAAE,SAAgB,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAChF,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,mBAAmB,CAAC,YAAY,CAAC;IACpE,CAAC;IAcD;;;;;;OAMG;IACH,YAAY,IAAY,EAAE,IAA6B,EAAE,IAAmC;QACxF,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE;YACV,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,oBAAoB,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;aACvE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,yBAAyB,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACtE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;aAC5E;YACD,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,2BAA2B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACnD;aAAM;YACH,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChD,cAAc,CAAC,sBAAsB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC3D,cAAc,CAAC,2BAA2B,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACnE;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,mBAAmB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACxE,CAAC;;AAlEL,kDAmEC;AAtDG,gBAAgB;AACO,gCAAY,GAAG,uCAAuC,CAAC"}

package/shield/protection.d.ts

@@ -0,0 +1,77 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as inputs from "../types/input";
+import * as outputs from "../types/output";
+/**
+ * Enables AWS Shield Advanced for a specific AWS resource. The resource can be an Amazon CloudFront distribution, Amazon Route 53 hosted zone, AWS Global Accelerator standard accelerator, Elastic IP Address, Application Load Balancer, or a Classic Load Balancer. You can protect Amazon EC2 instances and Network Load Balancers by association with protected Amazon EC2 Elastic IP addresses.
+ */
+export declare class Protection extends pulumi.CustomResource {
+    /**
+     * Get an existing Protection resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, opts?: pulumi.CustomResourceOptions): Protection;
+    /**
+     * Returns true if the given object is an instance of Protection.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is Protection;
+    readonly applicationLayerAutomaticResponseConfiguration: pulumi.Output<outputs.shield.ProtectionApplicationLayerAutomaticResponseConfiguration | undefined>;
+    /**
+     * The Amazon Resource Names (ARNs) of the health check to associate with the protection.
+     */
+    readonly healthCheckArns: pulumi.Output<string[] | undefined>;
+    /**
+     * Friendly name for the Protection.
+     */
+    readonly name: pulumi.Output<string>;
+    /**
+     * The ARN (Amazon Resource Name) of the protection.
+     */
+    readonly protectionArn: pulumi.Output<string>;
+    /**
+     * The unique identifier (ID) of the protection.
+     */
+    readonly protectionId: pulumi.Output<string>;
+    /**
+     * The ARN (Amazon Resource Name) of the resource to be protected.
+     */
+    readonly resourceArn: pulumi.Output<string>;
+    /**
+     * One or more tag key-value pairs for the Protection object.
+     */
+    readonly tags: pulumi.Output<outputs.shield.ProtectionTag[] | undefined>;
+    /**
+     * Create a Protection resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: ProtectionArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * The set of arguments for constructing a Protection resource.
+ */
+export interface ProtectionArgs {
+    applicationLayerAutomaticResponseConfiguration?: pulumi.Input<inputs.shield.ProtectionApplicationLayerAutomaticResponseConfigurationArgs>;
+    /**
+     * The Amazon Resource Names (ARNs) of the health check to associate with the protection.
+     */
+    healthCheckArns?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Friendly name for the Protection.
+     */
+    name?: pulumi.Input<string>;
+    /**
+     * The ARN (Amazon Resource Name) of the resource to be protected.
+     */
+    resourceArn: pulumi.Input<string>;
+    /**
+     * One or more tag key-value pairs for the Protection object.
+     */
+    tags?: pulumi.Input<pulumi.Input<inputs.shield.ProtectionTagArgs>[]>;
+}

package/shield/protection.js

@@ -0,0 +1,71 @@
+"use strict";
+// *** WARNING: this file was generated by the Pulumi SDK Generator. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Protection = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("../utilities");
+/**
+ * Enables AWS Shield Advanced for a specific AWS resource. The resource can be an Amazon CloudFront distribution, Amazon Route 53 hosted zone, AWS Global Accelerator standard accelerator, Elastic IP Address, Application Load Balancer, or a Classic Load Balancer. You can protect Amazon EC2 instances and Network Load Balancers by association with protected Amazon EC2 Elastic IP addresses.
+ */
+class Protection extends pulumi.CustomResource {
+    /**
+     * Get an existing Protection resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, opts) {
+        return new Protection(name, undefined, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of Protection.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === Protection.__pulumiType;
+    }
+    /**
+     * Create a Protection resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (!opts.id) {
+            if ((!args || args.resourceArn === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'resourceArn'");
+            }
+            resourceInputs["applicationLayerAutomaticResponseConfiguration"] = args ? args.applicationLayerAutomaticResponseConfiguration : undefined;
+            resourceInputs["healthCheckArns"] = args ? args.healthCheckArns : undefined;
+            resourceInputs["name"] = args ? args.name : undefined;
+            resourceInputs["resourceArn"] = args ? args.resourceArn : undefined;
+            resourceInputs["tags"] = args ? args.tags : undefined;
+            resourceInputs["protectionArn"] = undefined /*out*/;
+            resourceInputs["protectionId"] = undefined /*out*/;
+        }
+        else {
+            resourceInputs["applicationLayerAutomaticResponseConfiguration"] = undefined /*out*/;
+            resourceInputs["healthCheckArns"] = undefined /*out*/;
+            resourceInputs["name"] = undefined /*out*/;
+            resourceInputs["protectionArn"] = undefined /*out*/;
+            resourceInputs["protectionId"] = undefined /*out*/;
+            resourceInputs["resourceArn"] = undefined /*out*/;
+            resourceInputs["tags"] = undefined /*out*/;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(Protection.__pulumiType, name, resourceInputs, opts);
+    }
+}
+exports.Protection = Protection;
+/** @internal */
+Protection.__pulumiType = 'aws-native:shield:Protection';
+//# sourceMappingURL=protection.js.map

package/shield/protection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protection.js","sourceRoot":"","sources":["../../shield/protection.ts"],"names":[],"mappings":";AAAA,wEAAwE;AACxE,iFAAiF;;;AAEjF,yCAAyC;AAIzC,0CAA0C;AAE1C;;GAEG;AACH,MAAa,UAAW,SAAQ,MAAM,CAAC,cAAc;IACjD;;;;;;;OAOG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,IAAmC;QAC5F,OAAO,IAAI,UAAU,CAAC,IAAI,EAAE,SAAgB,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACvE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,UAAU,CAAC,YAAY,CAAC;IAC3D,CAAC;IA4BD;;;;;;OAMG;IACH,YAAY,IAAY,EAAE,IAAoB,EAAE,IAAmC;QAC/E,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE;YACV,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACxD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;aAC9D;YACD,cAAc,CAAC,gDAAgD,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1I,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,eAAe,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACpD,cAAc,CAAC,cAAc,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACtD;aAAM;YACH,cAAc,CAAC,gDAAgD,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACrF,cAAc,CAAC,iBAAiB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACtD,cAAc,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC3C,cAAc,CAAC,eAAe,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACpD,cAAc,CAAC,cAAc,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACnD,cAAc,CAAC,aAAa,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAClD,cAAc,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAC9C;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,UAAU,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC/D,CAAC;;AArFL,gCAsFC;AAzEG,gBAAgB;AACO,uBAAY,GAAG,8BAA8B,CAAC"}

package/shield/protectionGroup.d.ts

@@ -0,0 +1,94 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as inputs from "../types/input";
+import * as outputs from "../types/output";
+import * as enums from "../types/enums";
+/**
+ * A grouping of protected resources so they can be handled as a collective. This resource grouping improves the accuracy of detection and reduces false positives.
+ */
+export declare class ProtectionGroup extends pulumi.CustomResource {
+    /**
+     * Get an existing ProtectionGroup resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, opts?: pulumi.CustomResourceOptions): ProtectionGroup;
+    /**
+     * Returns true if the given object is an instance of ProtectionGroup.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is ProtectionGroup;
+    /**
+     * Defines how AWS Shield combines resource data for the group in order to detect, mitigate, and report events.
+     * * Sum - Use the total traffic across the group. This is a good choice for most cases. Examples include Elastic IP addresses for EC2 instances that scale manually or automatically.
+     * * Mean - Use the average of the traffic across the group. This is a good choice for resources that share traffic uniformly. Examples include accelerators and load balancers.
+     * * Max - Use the highest traffic from each resource. This is useful for resources that don't share traffic and for resources that share that traffic in a non-uniform way. Examples include Amazon CloudFront and origin resources for CloudFront distributions.
+     */
+    readonly aggregation: pulumi.Output<enums.shield.ProtectionGroupAggregation>;
+    /**
+     * The Amazon Resource Names (ARNs) of the resources to include in the protection group. You must set this when you set `Pattern` to `ARBITRARY` and you must not set it for any other `Pattern` setting.
+     */
+    readonly members: pulumi.Output<string[] | undefined>;
+    /**
+     * The criteria to use to choose the protected resources for inclusion in the group. You can include all resources that have protections, provide a list of resource Amazon Resource Names (ARNs), or include all resources of a specified resource type.
+     */
+    readonly pattern: pulumi.Output<enums.shield.ProtectionGroupPattern>;
+    /**
+     * The ARN (Amazon Resource Name) of the protection group.
+     */
+    readonly protectionGroupArn: pulumi.Output<string>;
+    /**
+     * The name of the protection group. You use this to identify the protection group in lists and to manage the protection group, for example to update, delete, or describe it.
+     */
+    readonly protectionGroupId: pulumi.Output<string>;
+    /**
+     * The resource type to include in the protection group. All protected resources of this type are included in the protection group. Newly protected resources of this type are automatically added to the group. You must set this when you set `Pattern` to `BY_RESOURCE_TYPE` and you must not set it for any other `Pattern` setting.
+     */
+    readonly resourceType: pulumi.Output<enums.shield.ProtectionGroupResourceType | undefined>;
+    /**
+     * One or more tag key-value pairs for the Protection object.
+     */
+    readonly tags: pulumi.Output<outputs.shield.ProtectionGroupTag[] | undefined>;
+    /**
+     * Create a ProtectionGroup resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: ProtectionGroupArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * The set of arguments for constructing a ProtectionGroup resource.
+ */
+export interface ProtectionGroupArgs {
+    /**
+     * Defines how AWS Shield combines resource data for the group in order to detect, mitigate, and report events.
+     * * Sum - Use the total traffic across the group. This is a good choice for most cases. Examples include Elastic IP addresses for EC2 instances that scale manually or automatically.
+     * * Mean - Use the average of the traffic across the group. This is a good choice for resources that share traffic uniformly. Examples include accelerators and load balancers.
+     * * Max - Use the highest traffic from each resource. This is useful for resources that don't share traffic and for resources that share that traffic in a non-uniform way. Examples include Amazon CloudFront and origin resources for CloudFront distributions.
+     */
+    aggregation: pulumi.Input<enums.shield.ProtectionGroupAggregation>;
+    /**
+     * The Amazon Resource Names (ARNs) of the resources to include in the protection group. You must set this when you set `Pattern` to `ARBITRARY` and you must not set it for any other `Pattern` setting.
+     */
+    members?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * The criteria to use to choose the protected resources for inclusion in the group. You can include all resources that have protections, provide a list of resource Amazon Resource Names (ARNs), or include all resources of a specified resource type.
+     */
+    pattern: pulumi.Input<enums.shield.ProtectionGroupPattern>;
+    /**
+     * The name of the protection group. You use this to identify the protection group in lists and to manage the protection group, for example to update, delete, or describe it.
+     */
+    protectionGroupId: pulumi.Input<string>;
+    /**
+     * The resource type to include in the protection group. All protected resources of this type are included in the protection group. Newly protected resources of this type are automatically added to the group. You must set this when you set `Pattern` to `BY_RESOURCE_TYPE` and you must not set it for any other `Pattern` setting.
+     */
+    resourceType?: pulumi.Input<enums.shield.ProtectionGroupResourceType>;
+    /**
+     * One or more tag key-value pairs for the Protection object.
+     */
+    tags?: pulumi.Input<pulumi.Input<inputs.shield.ProtectionGroupTagArgs>[]>;
+}