@pulumi/aws-native 1.1.0 → 1.2.0-alpha.1728935629

package/types/output.d.ts

@@ -19567,7 +19567,6 @@ export declare namespace ec2 {
          *
          * - To include instance types with GPU hardware, specify `gpu` .
          * - To include instance types with FPGA hardware, specify `fpga` .
-         * - To include instance types with inference hardware, specify `inference` .
          *
          * Default: Any accelerator type
          */
@@ -22439,7 +22438,6 @@ export declare namespace ec2 {
          *
          * - To include instance types with GPU hardware, specify `gpu` .
          * - To include instance types with FPGA hardware, specify `fpga` .
-         * - To include instance types with inference hardware, specify `inference` .
          *
          * Default: Any accelerator type
          */
@@ -23286,15 +23284,61 @@ export declare namespace ec2 {
          */
         userInfoEndpoint?: string;
     }
+    interface VpnConnectionCloudwatchLogOptionsSpecification {
+        logEnabled?: boolean;
+        logGroupArn?: string;
+        logOutputFormat?: enums.ec2.VpnConnectionCloudwatchLogOptionsSpecificationLogOutputFormat;
+    }
+    interface VpnConnectionIkeVersionsRequestListValue {
+        value?: enums.ec2.VpnConnectionIkeVersionsRequestListValueValue;
+    }
+    interface VpnConnectionPhase1EncryptionAlgorithmsRequestListValue {
+        value?: enums.ec2.VpnConnectionPhase1EncryptionAlgorithmsRequestListValueValue;
+    }
+    interface VpnConnectionPhase1IntegrityAlgorithmsRequestListValue {
+        value?: enums.ec2.VpnConnectionPhase1IntegrityAlgorithmsRequestListValueValue;
+    }
+    interface VpnConnectionPhase1dhGroupNumbersRequestListValue {
+        value?: number;
+    }
+    interface VpnConnectionPhase2EncryptionAlgorithmsRequestListValue {
+        value?: enums.ec2.VpnConnectionPhase2EncryptionAlgorithmsRequestListValueValue;
+    }
+    interface VpnConnectionPhase2IntegrityAlgorithmsRequestListValue {
+        value?: enums.ec2.VpnConnectionPhase2IntegrityAlgorithmsRequestListValueValue;
+    }
+    interface VpnConnectionPhase2dhGroupNumbersRequestListValue {
+        value?: number;
+    }
+    interface VpnConnectionVpnTunnelLogOptionsSpecification {
+        cloudwatchLogOptions?: outputs.ec2.VpnConnectionCloudwatchLogOptionsSpecification;
+    }
     /**
      * The tunnel options for a single VPN tunnel.
      */
     interface VpnConnectionVpnTunnelOptionsSpecification {
+        dpdTimeoutAction?: enums.ec2.VpnConnectionVpnTunnelOptionsSpecificationDpdTimeoutAction;
+        dpdTimeoutSeconds?: number;
+        enableTunnelLifecycleControl?: boolean;
+        ikeVersions?: outputs.ec2.VpnConnectionIkeVersionsRequestListValue[];
+        logOptions?: outputs.ec2.VpnConnectionVpnTunnelLogOptionsSpecification;
+        phase1EncryptionAlgorithms?: outputs.ec2.VpnConnectionPhase1EncryptionAlgorithmsRequestListValue[];
+        phase1IntegrityAlgorithms?: outputs.ec2.VpnConnectionPhase1IntegrityAlgorithmsRequestListValue[];
+        phase1LifetimeSeconds?: number;
+        phase1dhGroupNumbers?: outputs.ec2.VpnConnectionPhase1dhGroupNumbersRequestListValue[];
+        phase2EncryptionAlgorithms?: outputs.ec2.VpnConnectionPhase2EncryptionAlgorithmsRequestListValue[];
+        phase2IntegrityAlgorithms?: outputs.ec2.VpnConnectionPhase2IntegrityAlgorithmsRequestListValue[];
+        phase2LifetimeSeconds?: number;
+        phase2dhGroupNumbers?: outputs.ec2.VpnConnectionPhase2dhGroupNumbersRequestListValue[];
         /**
          * The pre-shared key (PSK) to establish initial authentication between the virtual private gateway and customer gateway.
          *  Constraints: Allowed characters are alphanumeric characters, periods (.), and underscores (_). Must be between 8 and 64 characters in length and cannot start with zero (0).
          */
         preSharedKey?: string;
+        rekeyFuzzPercentage?: number;
+        rekeyMarginTimeSeconds?: number;
+        replayWindowSize?: number;
+        startupAction?: enums.ec2.VpnConnectionVpnTunnelOptionsSpecificationStartupAction;
         /**
          * The range of inside IP addresses for the tunnel. Any specified CIDR blocks must be unique across all VPN connections that use the same virtual private gateway.
          *  Constraints: A size /30 CIDR block from the ``169.254.0.0/16`` range. The following CIDR blocks are reserved and cannot be used:
@@ -23307,6 +23351,7 @@ export declare namespace ec2 {
          *   +   ``169.254.169.252/30``
          */
         tunnelInsideCidr?: string;
+        tunnelInsideIpv6Cidr?: string;
     }
 }
 export declare namespace ecr {
@@ -29465,9 +29510,12 @@ export declare namespace globalaccelerator {
     }
 }
 export declare namespace glue {
+    /**
+     * Specifies an AWS Glue Data Catalog target.
+     */
     interface CrawlerCatalogTarget {
         /**
-         * The name of the connection for an Amazon S3-backed Data Catalog table to be a target of the crawl when using a `Catalog` connection type paired with a `NETWORK` Connection type.
+         * The name of the connection for an Amazon S3-backed Data Catalog table to be a target of the crawl when using a Catalog connection type paired with a NETWORK Connection type.
          */
         connectionName?: string;
         /**
@@ -29475,11 +29523,11 @@ export declare namespace glue {
          */
         databaseName?: string;
         /**
-         * A valid Amazon dead-letter SQS ARN. For example, `arn:aws:sqs:region:account:deadLetterQueue` .
+         * A valid Amazon dead-letter SQS ARN. For example, arn:aws:sqs:region:account:deadLetterQueue.
          */
         dlqEventQueueArn?: string;
         /**
-         * A valid Amazon SQS ARN. For example, `arn:aws:sqs:region:account:sqs` .
+         * A valid Amazon SQS ARN. For example, arn:aws:sqs:region:account:sqs.
          */
         eventQueueArn?: string;
         /**
@@ -29487,6 +29535,9 @@ export declare namespace glue {
          */
         tables?: string[];
     }
+    /**
+     * Specifies a Delta data store to crawl one or more Delta tables.
+     */
     interface CrawlerDeltaTarget {
         /**
          * The name of the connection to use to connect to the Delta table target.
@@ -29505,12 +29556,18 @@ export declare namespace glue {
          */
         writeManifest?: boolean;
     }
+    /**
+     * Specifies an Amazon DynamoDB table to crawl.
+     */
     interface CrawlerDynamoDbTarget {
         /**
          * The name of the DynamoDB table to crawl.
          */
         path?: string;
     }
+    /**
+     * Specifies Apache Iceberg data store targets.
+     */
     interface CrawlerIcebergTarget {
         /**
          * The name of the connection to use to connect to the Iceberg target.
@@ -29529,19 +29586,22 @@ export declare namespace glue {
          */
         paths?: string[];
     }
+    /**
+     * Specifies a JDBC data store to crawl.
+     */
     interface CrawlerJdbcTarget {
         /**
          * The name of the connection to use to connect to the JDBC target.
          */
         connectionName?: string;
         /**
-         * Specify a value of `RAWTYPES` or `COMMENTS` to enable additional metadata in table responses. `RAWTYPES` provides the native-level datatype. `COMMENTS` provides comments associated with a column or table in the database.
+         * Specify a value of RAWTYPES or COMMENTS to enable additional metadata in table responses. RAWTYPES provides the native-level datatype. COMMENTS provides comments associated with a column or table in the database.
          *
          * If you do not need additional metadata, keep the field empty.
          */
         enableAdditionalMetadata?: string[];
         /**
-         * A list of glob patterns used to exclude from the crawl. For more information, see [Catalog Tables with a Crawler](https://docs.aws.amazon.com/glue/latest/dg/add-crawler.html) .
+         * A list of glob patterns used to exclude from the crawl. For more information, see Catalog Tables with a Crawler.
          */
         exclusions?: string[];
         /**
@@ -29549,6 +29609,9 @@ export declare namespace glue {
          */
         path?: string;
     }
+    /**
+     * Specifies AWS Lake Formation configuration settings for the crawler
+     */
     interface CrawlerLakeFormationConfiguration {
         /**
          * Required for cross account crawls. For same account crawls as the target data, this can be left as null.
@@ -29559,6 +29622,9 @@ export declare namespace glue {
          */
         useLakeFormationCredentials?: boolean;
     }
+    /**
+     * Specifies an Amazon DocumentDB or MongoDB data store to crawl.
+     */
     interface CrawlerMongoDbTarget {
         /**
          * The name of the connection to use to connect to the Amazon DocumentDB or MongoDB target.
@@ -29569,33 +29635,33 @@ export declare namespace glue {
          */
         path?: string;
     }
+    /**
+     * When crawling an Amazon S3 data source after the first crawl is complete, specifies whether to crawl the entire dataset again or to crawl only folders that were added since the last crawler run. For more information, see Incremental Crawls in AWS Glue in the developer guide.
+     */
     interface CrawlerRecrawlPolicy {
         /**
-         * Specifies whether to crawl the entire dataset again or to crawl only folders that were added since the last crawler run.
-         *
-         * A value of `CRAWL_EVERYTHING` specifies crawling the entire dataset again.
-         *
-         * A value of `CRAWL_NEW_FOLDERS_ONLY` specifies crawling only folders that were added since the last crawler run.
-         *
-         * A value of `CRAWL_EVENT_MODE` specifies crawling only the changes identified by Amazon S3 events.
+         * Specifies whether to crawl the entire dataset again or to crawl only folders that were added since the last crawler run. A value of CRAWL_EVERYTHING specifies crawling the entire dataset again. A value of CRAWL_NEW_FOLDERS_ONLY specifies crawling only folders that were added since the last crawler run. A value of CRAWL_EVENT_MODE specifies crawling only the changes identified by Amazon S3 events.
          */
         recrawlBehavior?: string;
     }
+    /**
+     * Specifies a data store in Amazon Simple Storage Service (Amazon S3).
+     */
     interface CrawlerS3Target {
         /**
          * The name of a connection which allows a job or crawler to access data in Amazon S3 within an Amazon Virtual Private Cloud environment (Amazon VPC).
          */
         connectionName?: string;
         /**
-         * A valid Amazon dead-letter SQS ARN. For example, `arn:aws:sqs:region:account:deadLetterQueue` .
+         * A valid Amazon dead-letter SQS ARN. For example, arn:aws:sqs:region:account:deadLetterQueue.
          */
         dlqEventQueueArn?: string;
         /**
-         * A valid Amazon SQS ARN. For example, `arn:aws:sqs:region:account:sqs` .
+         * A valid Amazon SQS ARN. For example, arn:aws:sqs:region:account:sqs.
          */
         eventQueueArn?: string;
         /**
-         * A list of glob patterns used to exclude from the crawl. For more information, see [Catalog Tables with a Crawler](https://docs.aws.amazon.com/glue/latest/dg/add-crawler.html) .
+         * A list of glob patterns used to exclude from the crawl.
          */
         exclusions?: string[];
         /**
@@ -29607,32 +29673,31 @@ export declare namespace glue {
          */
         sampleSize?: number;
     }
+    /**
+     * A scheduling object using a cron statement to schedule an event.
+     */
     interface CrawlerSchedule {
         /**
-         * A `cron` expression used to specify the schedule. For more information, see [Time-Based Schedules for Jobs and Crawlers](https://docs.aws.amazon.com/glue/latest/dg/monitor-data-warehouse-schedule.html) . For example, to run something every day at 12:15 UTC, specify `cron(15 12 * * ? *)` .
+         * A cron expression used to specify the schedule. For more information, see Time-Based Schedules for Jobs and Crawlers. For example, to run something every day at 12:15 UTC, specify cron(15 12 * * ? *).
          */
         scheduleExpression?: string;
     }
+    /**
+     * The policy that specifies update and delete behaviors for the crawler. The policy tells the crawler what to do in the event that it detects a change in a table that already exists in the customer's database at the time of the crawl. The SchemaChangePolicy does not affect whether or how new tables and partitions are added. New tables and partitions are always created regardless of the SchemaChangePolicy on a crawler. The SchemaChangePolicy consists of two components, UpdateBehavior and DeleteBehavior.
+     */
     interface CrawlerSchemaChangePolicy {
         /**
-         * The deletion behavior when the crawler finds a deleted object.
-         *
-         * A value of `LOG` specifies that if a table or partition is found to no longer exist, do not delete it, only log that it was found to no longer exist.
-         *
-         * A value of `DELETE_FROM_DATABASE` specifies that if a table or partition is found to have been removed, delete it from the database.
-         *
-         * A value of `DEPRECATE_IN_DATABASE` specifies that if a table has been found to no longer exist, to add a property to the table that says "DEPRECATED" and includes a timestamp with the time of deprecation.
+         * The deletion behavior when the crawler finds a deleted object. A value of LOG specifies that if a table or partition is found to no longer exist, do not delete it, only log that it was found to no longer exist. A value of DELETE_FROM_DATABASE specifies that if a table or partition is found to have been removed, delete it from the database. A value of DEPRECATE_IN_DATABASE specifies that if a table has been found to no longer exist, to add a property to the table that says 'DEPRECATED' and includes a timestamp with the time of deprecation.
          */
         deleteBehavior?: string;
         /**
-         * The update behavior when the crawler finds a changed schema.
-         *
-         * A value of `LOG` specifies that if a table or a partition already exists, and a change is detected, do not update it, only log that a change was detected. Add new tables and new partitions (including on existing tables).
-         *
-         * A value of `UPDATE_IN_DATABASE` specifies that if a table or partition already exists, and a change is detected, update it. Add new tables and partitions.
+         * The update behavior when the crawler finds a changed schema. A value of LOG specifies that if a table or a partition already exists, and a change is detected, do not update it, only log that a change was detected. Add new tables and new partitions (including on existing tables). A value of UPDATE_IN_DATABASE specifies that if a table or partition already exists, and a change is detected, update it. Add new tables and partitions.
          */
         updateBehavior?: string;
     }
+    /**
+     * Specifies data stores to crawl.
+     */
     interface CrawlerTargets {
         /**
          * Specifies AWS Glue Data Catalog targets.
@@ -45451,6 +45516,7 @@ export declare namespace networkfirewall {
         dimensions: outputs.networkfirewall.FirewallPolicyDimension[];
     }
     interface FirewallPolicyStatefulEngineOptions {
+        flowTimeouts?: outputs.networkfirewall.FirewallPolicyStatefulEngineOptionsFlowTimeoutsProperties;
         /**
          * Indicates how to manage the order of stateful rule evaluation for the policy. `DEFAULT_ACTION_ORDER` is the default behavior. Stateful rules are provided to the rule engine as Suricata compatible strings, and Suricata evaluates them based on certain settings. For more information, see [Evaluation order for stateful rules](https://docs.aws.amazon.com/network-firewall/latest/developerguide/suricata-rule-evaluation-order.html) in the *AWS Network Firewall Developer Guide* .
          */
@@ -45464,6 +45530,9 @@ export declare namespace networkfirewall {
          */
         streamExceptionPolicy?: enums.networkfirewall.FirewallPolicyStreamExceptionPolicy;
     }
+    interface FirewallPolicyStatefulEngineOptionsFlowTimeoutsProperties {
+        tcpIdleTimeoutSeconds?: number;
+    }
     interface FirewallPolicyStatefulRuleGroupOverride {
         /**
          * The action that changes the rule group from `DROP` to `ALERT` . This only applies to managed rule groups.
@@ -75502,16 +75571,7 @@ export declare namespace redshift {
         /**
          * The prefix applied to the log file names.
          *
-         * Constraints:
-         *
-         * - Cannot exceed 512 characters
-         * - Cannot contain spaces( ), double quotes ("), single quotes ('), a backslash (\), or control characters. The hexadecimal codes for invalid characters are:
-         *
-         * - x00 to x20
-         * - x22
-         * - x27
-         * - x5c
-         * - x7f or larger
+         * Valid characters are any letter from any language, any whitespace character, any numeric character, and the following characters: underscore ( `_` ), period ( `.` ), colon ( `:` ), slash ( `/` ), equal ( `=` ), plus ( `+` ), backslash ( `\` ), hyphen ( `-` ), at symbol ( `@` ).
          */
         s3KeyPrefix?: string;
     }
@@ -76735,6 +76795,10 @@ export declare namespace route53resolver {
          * The protocol that you want to use to forward DNS queries.
          */
         protocol?: enums.route53resolver.ResolverRuleTargetAddressProtocol;
+        /**
+         * The SNI of the target name servers for DoH/DoH-FIPS outbound endpoints
+         */
+        serverNameIndication?: string;
     }
 }
 export declare namespace rum {
@@ -77231,14 +77295,6 @@ export declare namespace s3 {
          * A lifecycle rule for individual objects in an Amazon S3 bucket.
          */
         rules: outputs.s3.BucketRule[];
-        /**
-         * Indicates which default minimum object size behavior is applied to the lifecycle configuration.
-         *
-         * - `all_storage_classes_128K` - Objects smaller than 128 KB will not transition to any storage class by default.
-         * - `varies_by_storage_class` - Objects smaller than 128 KB will transition to Glacier Flexible Retrieval or Glacier Deep Archive storage classes. By default, all other storage classes will prevent transitions smaller than 128 KB.
-         *
-         * To customize the minimum object size for any transition you can add a filter that specifies a custom `ObjectSizeGreaterThan` or `ObjectSizeLessThan` in the body of your transition rule. Custom filters always take precedence over the default transition behavior.
-         */
         transitionDefaultMinimumObjectSize?: enums.s3.BucketLifecycleConfigurationTransitionDefaultMinimumObjectSize;
     }
     /**
@@ -77978,7 +78034,7 @@ export declare namespace s3 {
          */
         advancedDataProtectionMetrics?: outputs.s3.StorageLensAdvancedDataProtectionMetrics;
         /**
-         * This property contains the details of the account-level bucket-level configurations for Amazon S3 Storage Lens.
+         * This property contains the details of the account-level bucket-level configurations for Amazon S3 Storage Lens. To enable bucket-level configurations, make sure to also set the same metrics at the account level.
          */
         bucketLevel: outputs.s3.StorageLensBucketLevel;
         /**
@@ -83019,7 +83075,7 @@ export declare namespace securityhub {
         label?: enums.securityhub.AutomationRuleSeverityUpdateLabel;
         /**
          * The normalized severity for the finding. This attribute is to be deprecated in favor of ``Label``.
-         *  If you provide ``Normalized`` and do not provide ``Label``, ``Label`` is set automatically as follows.
+         *  If you provide ``Normalized`` and don't provide ``Label``, ``Label`` is set automatically as follows.
          *   +  0 - ``INFORMATIONAL``
          *   +  1–39 - ``LOW``
          *   +  40–69 - ``MEDIUM``
@@ -83080,12 +83136,12 @@ export declare namespace securityhub {
          *
          *   +   ``NOTIFIED`` - Indicates that you notified the resource owner about the security issue. Used when the initial reviewer is not the resource owner, and needs intervention from the resource owner.
          *   +   ``RESOLVED`` - The finding was reviewed and remediated and is now considered resolved.
-         *   +   ``SUPPRESSED`` - Indicates that you reviewed the finding and do not believe that any action is needed. The finding is no longer updated.
+         *   +   ``SUPPRESSED`` - Indicates that you reviewed the finding and don't believe that any action is needed. The finding is no longer updated.
          */
         status: enums.securityhub.AutomationRuleWorkflowUpdateStatus;
     }
     /**
-     * One or more actions to update finding fields if a finding matches the defined criteria of the rule.
+     * One or more actions that ASHlong takes when a finding matches the defined criteria of a rule.
      */
     interface AutomationRulesAction {
         /**
@@ -83093,7 +83149,7 @@ export declare namespace securityhub {
          */
         findingFieldsUpdate: outputs.securityhub.AutomationRulesFindingFieldsUpdate;
         /**
-         * Specifies that the rule action should update the ``Types`` finding field. The ``Types`` finding field classifies findings in the format of namespace/category/classifier. For more information, see [Types taxonomy for ASFF](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-findings-format-type-taxonomy.html) in the *User Guide*.
+         * Specifies the type of action that Security Hub takes when a finding matches the defined criteria of a rule.
          */
         type: enums.securityhub.AutomationRulesActionType;
     }