@pulumi/aws-native 1.38.0-alpha.1761716526 → 1.38.0-alpha.1761739268

package/types/output.d.ts

@@ -714,7 +714,7 @@ export declare namespace aiops {
 export declare namespace amazonmq {
     interface BrokerConfigurationId {
         /**
-         * The unique ID that Amazon MQ generates for the configuration.
+         * Required. The unique ID that Amazon MQ generates for the configuration.
          */
         id: string;
         /**
@@ -736,49 +736,16 @@ export declare namespace amazonmq {
         useAwsOwnedKey: boolean;
     }
     interface BrokerLdapServerMetadata {
-        /**
-         * Specifies the location of the LDAP server such as AWS Directory Service for Microsoft Active Directory . Optional failover server.
-         */
         hosts: string[];
-        /**
-         * The distinguished name of the node in the directory information tree (DIT) to search for roles or groups. For example, `ou=group` , `ou=corp` , `dc=corp` , `dc=example` , `dc=com` .
-         */
         roleBase: string;
-        /**
-         * The group name attribute in a role entry whose value is the name of that role. For example, you can specify `cn` for a group entry's common name. If authentication succeeds, then the user is assigned the the value of the `cn` attribute for each role entry that they are a member of.
-         */
         roleName?: string;
-        /**
-         * The LDAP search filter used to find roles within the roleBase. The distinguished name of the user matched by userSearchMatching is substituted into the `{0}` placeholder in the search filter. The client's username is substituted into the `{1}` placeholder. For example, if you set this option to `(member=uid={1})` for the user janedoe, the search filter becomes `(member=uid=janedoe)` after string substitution. It matches all role entries that have a member attribute equal to `uid=janedoe` under the subtree selected by the `RoleBases` .
-         */
         roleSearchMatching: string;
-        /**
-         * The directory search scope for the role. If set to true, scope is to search the entire subtree.
-         */
         roleSearchSubtree?: boolean;
-        /**
-         * Service account password. A service account is an account in your LDAP server that has access to initiate a connection. For example, `cn=admin` , `dc=corp` , `dc=example` , `dc=com` .
-         */
         serviceAccountPassword?: string;
-        /**
-         * Service account username. A service account is an account in your LDAP server that has access to initiate a connection. For example, `cn=admin` , `ou=corp` , `dc=corp` , `dc=example` , `dc=com` .
-         */
         serviceAccountUsername: string;
-        /**
-         * Select a particular subtree of the directory information tree (DIT) to search for user entries. The subtree is specified by a DN, which specifies the base node of the subtree. For example, by setting this option to `ou=Users` , `ou=corp` , `dc=corp` , `dc=example` , `dc=com` , the search for user entries is restricted to the subtree beneath `ou=Users` , `ou=corp` , `dc=corp` , `dc=example` , `dc=com` .
-         */
         userBase: string;
-        /**
-         * The name of the LDAP attribute in the user's directory entry for the user's group membership. In some cases, user roles may be identified by the value of an attribute in the user's directory entry. The `UserRoleName` option allows you to provide the name of this attribute.
-         */
         userRoleName?: string;
-        /**
-         * The LDAP search filter used to find users within the `userBase` . The client's username is substituted into the `{0}` placeholder in the search filter. For example, if this option is set to `(uid={0})` and the received username is `janedoe` , the search filter becomes `(uid=janedoe)` after string substitution. It will result in matching an entry like `uid=janedoe` , `ou=Users` , `ou=corp` , `dc=corp` , `dc=example` , `dc=com` .
-         */
         userSearchMatching: string;
-        /**
-         * The directory search scope for the user. If set to true, scope is to search the entire subtree.
-         */
         userSearchSubtree?: boolean;
     }
     interface BrokerLogList {
@@ -808,7 +775,7 @@ export declare namespace amazonmq {
     }
     interface BrokerUser {
         /**
-         * Enables access to the ActiveMQ web console for the ActiveMQ user. Does not apply to RabbitMQ brokers.
+         * Enables access to the ActiveMQ Web Console for the ActiveMQ user. Does not apply to RabbitMQ brokers.
          */
         consoleAccess?: boolean;
         /**
@@ -816,7 +783,7 @@ export declare namespace amazonmq {
          */
         groups?: string[];
         /**
-         * The password of the user. This value must be at least 12 characters long, must contain at least 4 unique characters, and must not contain commas, colons, or equal signs (,:=).
+         * Required. The password of the user. This value must be at least 12 characters long, must contain at least 4 unique characters, and must not contain commas, colons, or equal signs (,:=).
          */
         password: string;
         /**
@@ -824,7 +791,10 @@ export declare namespace amazonmq {
          */
         replicationUser?: boolean;
         /**
-         * The username of the broker user. For Amazon MQ for ActiveMQ brokers, this value can contain only alphanumeric characters, dashes, periods, underscores, and tildes (- . _ ~). For Amazon MQ for RabbitMQ brokers, this value can contain only alphanumeric characters, dashes, periods, underscores (- . _). This value must not contain a tilde (~) character. Amazon MQ prohibts using guest as a valid usename. This value must be 2-100 characters long.
+         * The username of the broker user. The following restrictions apply to broker usernames:
+         *
+         * - For Amazon MQ for ActiveMQ brokers, this value can contain only alphanumeric characters, dashes, periods, underscores, and tildes (- . _ ~). This value must be 2-100 characters long.
+         * - For Amazon MQ for RabbitMQ brokers, this value can contain only alphanumeric characters, dashes, periods, underscores (- . _). This value must not contain a tilde (~) character. Amazon MQ prohibts using `guest` as a valid usename. This value must be 2-100 characters long.
          *
          * > Do not add personally identifiable information (PII) or other confidential or sensitive information in broker usernames. Broker usernames are accessible to other AWS services, including CloudWatch Logs . Broker usernames are not intended to be used for private or sensitive data.
          */
@@ -10133,6 +10103,9 @@ export declare namespace batch {
          */
         value?: string;
     }
+    interface JobDefinitionResourceRetentionPolicy {
+        skipDeregisterOnUpdate?: boolean;
+    }
     interface JobDefinitionRetryStrategy {
         /**
          * The number of times to move a job to the `RUNNABLE` status. You can specify between 1 and 10 attempts. If the value of `attempts` is greater than one, the job is retried on failure the same number of attempts as the value.
@@ -24304,6 +24277,9 @@ export declare namespace datazone {
     interface ConnectionPropertiesInput6Properties {
         sparkGlueProperties: outputs.datazone.ConnectionSparkGluePropertiesInput;
     }
+    interface ConnectionPropertiesInput7Properties {
+        s3Properties: outputs.datazone.ConnectionS3PropertiesInput;
+    }
     interface ConnectionRedshiftCredentials0Properties {
         secretArn: string;
     }
@@ -24334,6 +24310,19 @@ export declare namespace datazone {
     interface ConnectionRedshiftStorageProperties1Properties {
         workgroupName: string;
     }
+    /**
+     * S3 Properties Input
+     */
+    interface ConnectionS3PropertiesInput {
+        /**
+         * The Amazon S3 Access Grant location ID that's part of the Amazon S3 properties of a connection.
+         */
+        s3AccessGrantLocationId?: string;
+        /**
+         * The Amazon S3 URI that's part of the Amazon S3 properties of a connection.
+         */
+        s3Uri: string;
+    }
     /**
      * Spark EMR Properties Input.
      */
@@ -27824,7 +27813,7 @@ export declare namespace ec2 {
         /**
          * The number of I/O operations per second (IOPS). For ``gp3``, ``io1``, and ``io2`` volumes, this represents the number of IOPS that are provisioned for the volume. For ``gp2`` volumes, this represents the baseline performance of the volume and the rate at which the volume accumulates I/O credits for bursting.
          *  The following are the supported values for each volume type:
-         *   +  ``gp3``: 3,000 - 16,000 IOPS
+         *   +  ``gp3``: 3,000 - 80,000 IOPS
          *   +  ``io1``: 100 - 64,000 IOPS
          *   +  ``io2``: 100 - 256,000 IOPS
          *
@@ -27841,8 +27830,8 @@ export declare namespace ec2 {
          */
         snapshotId?: string;
         /**
-         * The throughput to provision for a ``gp3`` volume, with a maximum of 1,000 MiB/s.
-         *  Valid Range: Minimum value of 125. Maximum value of 1000.
+         * The throughput to provision for a ``gp3`` volume, with a maximum of 2,000 MiB/s.
+         *  Valid Range: Minimum value of 125. Maximum value of 2,000.
          */
         throughput?: number;
         /**
@@ -27858,7 +27847,8 @@ export declare namespace ec2 {
         volumeInitializationRate?: number;
         /**
          * The size of the volume, in GiBs. You must specify either a snapshot ID or a volume size. The following are the supported volumes sizes for each volume type:
-         *   +  ``gp2`` and ``gp3``: 1 - 16,384 GiB
+         *   +  ``gp2``: 1 - 16,384 GiB
+         *   +  ``gp3``: 1 - 65,536 GiB
          *   +  ``io1``: 4 - 16,384 GiB
          *   +  ``io2``: 4 - 65,536 GiB
          *   +  ``st1`` and ``sc1``: 125 - 16,384 GiB
@@ -31632,6 +31622,10 @@ export declare namespace ecs {
          */
         subnets?: string[];
     }
+    interface ServiceCanaryConfiguration {
+        canaryBakeTimeInMinutes?: number;
+        canaryPercent?: number;
+    }
     /**
      * The details of a capacity provider strategy. A capacity provider strategy can be set when using the ``RunTask`` or ``CreateService`` APIs or as the default capacity provider strategy for a cluster with the ``CreateCluster`` API.
      *  Only capacity providers that are already associated with a cluster and have an ``ACTIVE`` or ``UPDATING`` status can be used in a capacity provider strategy. The ``PutClusterCapacityProviders`` API is used to associate a capacity provider with a cluster.
@@ -31672,6 +31666,10 @@ export declare namespace ecs {
          */
         weight?: number;
     }
+    interface ServiceConnectAccessLogConfiguration {
+        format: enums.ecs.ServiceConnectAccessLogConfigurationFormat;
+        includeQueryParameters?: enums.ecs.ServiceConnectAccessLogConfigurationIncludeQueryParameters;
+    }
     /**
      * Each alias ("endpoint") is a fully-qualified name and port number that other tasks ("clients") can use to connect to this service.
      *  Each name and port mapping must be unique within the namespace.
@@ -31699,6 +31697,7 @@ export declare namespace ecs {
      *  Tasks that run in a namespace can use short names to connect to services in the namespace. Tasks can connect to services across all of the clusters in the namespace. Tasks connect through a managed proxy container that collects logs and metrics for increased visibility. Only the tasks that Amazon ECS services create are supported with Service Connect. For more information, see [Service Connect](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/service-connect.html) in the *Amazon Elastic Container Service Developer Guide*.
      */
     interface ServiceConnectConfiguration {
+        accessLogConfiguration?: outputs.ecs.ServiceConnectAccessLogConfiguration;
         /**
          * Specifies whether to use Service Connect with this service.
          */
@@ -31855,7 +31854,7 @@ export declare namespace ecs {
          *   +  For all other cases, the value is set to 36 hours (2160 minutes).
          */
         bakeTimeInMinutes?: number;
-        canaryConfiguration?: any;
+        canaryConfiguration?: outputs.ecs.ServiceCanaryConfiguration;
         /**
          * The deployment circuit breaker can only be used for services using the rolling update (``ECS``) deployment type.
          *   The *deployment circuit breaker* determines whether a service deployment will fail if the service can't reach a steady state. If you use the deployment circuit breaker, a service deployment will transition to a failed state and stop launching new tasks. If you use the rollback option, when a service deployment fails, the service is rolled back to the last deployment that completed successfully. For more information, see [Rolling update](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/deployment-type-ecs.html) in the *Amazon Elastic Container Service Developer Guide*
@@ -31865,7 +31864,7 @@ export declare namespace ecs {
          * An array of deployment lifecycle hook objects to run custom logic at specific stages of the deployment lifecycle.
          */
         lifecycleHooks?: outputs.ecs.ServiceDeploymentLifecycleHook[];
-        linearConfiguration?: any;
+        linearConfiguration?: outputs.ecs.ServiceLinearConfiguration;
         /**
          * If a service is using the rolling update (``ECS``) deployment type, the ``maximumPercent`` parameter represents an upper limit on the number of your service's tasks that are allowed in the ``RUNNING`` or ``PENDING`` state during a deployment, as a percentage of the ``desiredCount`` (rounded down to the nearest integer). This parameter enables you to define the deployment batch size. For example, if your service is using the ``REPLICA`` service scheduler and has a ``desiredCount`` of four tasks and a ``maximumPercent`` value of 200%, the scheduler may start four new tasks before stopping the four older tasks (provided that the cluster resources required to do this are available). The default ``maximumPercent`` value for a service using the ``REPLICA`` service scheduler is 200%.
          *  The Amazon ECS scheduler uses this parameter to replace unhealthy tasks by starting replacement tasks first and then stopping the unhealthy tasks, as long as cluster resources for starting replacement tasks are available. For more information about how the scheduler replaces unhealthy tasks, see [Amazon ECS services](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs_services.html).
@@ -32023,6 +32022,10 @@ export declare namespace ecs {
          */
         forceNewDeploymentNonce?: string;
     }
+    interface ServiceLinearConfiguration {
+        stepBakeTimeInMinutes?: number;
+        stepPercent?: number;
+    }
     /**
      * The ``LoadBalancer`` property specifies details on a load balancer that is used with a service.
      *  If the service is using the ``CODE_DEPLOY`` deployment controller, the service is required to use either an Application Load Balancer or Network Load Balancer. When you are creating an ACDlong deployment group, you specify two target groups (referred to as a ``targetGroupPair``). Each target group binds to a separate task set in the deployment. The load balancer can also have up to two listeners, a required listener for production traffic and an optional listener that allows you to test new revisions of the service before routing production traffic to it.
@@ -34654,7 +34657,7 @@ export declare namespace elasticloadbalancingv2 {
     interface ListenerRuleHostHeaderConfig {
         regexValues?: string[];
         /**
-         * The host names. The maximum size of each name is 128 characters. The comparison is case insensitive. The following wildcard characters are supported: * (matches 0 or more characters) and ? (matches exactly 1 character). You must include at least one "." character. You can include only alphabetical characters after the final "." character.
+         * The host names. The maximum length of each string is 128 characters. The comparison is case insensitive. The following wildcard characters are supported: * (matches 0 or more characters) and ? (matches exactly 1 character). You must include at least one "." character. You can include only alphabetical characters after the final "." character.
          *  If you specify multiple strings, the condition is satisfied if one of the strings matches the host name.
          */
         values?: string[];
@@ -34670,7 +34673,7 @@ export declare namespace elasticloadbalancingv2 {
         httpHeaderName?: string;
         regexValues?: string[];
         /**
-         * The strings to compare against the value of the HTTP header. The maximum size of each string is 128 characters. The comparison strings are case insensitive. The following wildcard characters are supported: * (matches 0 or more characters) and ? (matches exactly 1 character).
+         * The strings to compare against the value of the HTTP header. The maximum length of each string is 128 characters. The comparison strings are case insensitive. The following wildcard characters are supported: * (matches 0 or more characters) and ? (matches exactly 1 character).
          *  If the same header appears multiple times in the request, we search them in order until a match is found.
          *  If you specify multiple strings, the condition is satisfied if one of the strings matches the value of the HTTP header. To require that all of the strings are a match, create one condition per string.
          */
@@ -34682,7 +34685,7 @@ export declare namespace elasticloadbalancingv2 {
      */
     interface ListenerRuleHttpRequestMethodConfig {
         /**
-         * The name of the request method. The maximum size is 40 characters. The allowed characters are A-Z, hyphen (-), and underscore (_). The comparison is case sensitive. Wildcards are not supported; therefore, the method name must be an exact match.
+         * The name of the request method. The maximum length is 40 characters. The allowed characters are A-Z, hyphen (-), and underscore (_). The comparison is case sensitive. Wildcards are not supported; therefore, the method name must be an exact match.
          *  If you specify multiple strings, the condition is satisfied if one of the strings matches the HTTP request method. We recommend that you route GET and HEAD requests in the same way, because the response to a HEAD request may be cached.
          */
         values?: string[];
@@ -34704,7 +34707,7 @@ export declare namespace elasticloadbalancingv2 {
      */
     interface ListenerRuleQueryStringConfig {
         /**
-         * The key/value pairs or values to find in the query string. The maximum size of each string is 128 characters. The comparison is case insensitive. The following wildcard characters are supported: * (matches 0 or more characters) and ? (matches exactly 1 character). To search for a literal '*' or '?' character in a query string, you must escape these characters in ``Values`` using a '\' character.
+         * The key/value pairs or values to find in the query string. The maximum length of each string is 128 characters. The comparison is case insensitive. The following wildcard characters are supported: * (matches 0 or more characters) and ? (matches exactly 1 character). To search for a literal '*' or '?' character in a query string, you must escape these characters in ``Values`` using a '\' character.
          *  If you specify multiple key/value pairs or values, the condition is satisfied if one of them is found in the query string.
          */
         values?: outputs.elasticloadbalancingv2.ListenerRuleQueryStringKeyValue[];
@@ -40565,6 +40568,15 @@ export declare namespace imagebuilder {
          */
         service?: enums.imagebuilder.DistributionConfigurationTargetContainerRepositoryService;
     }
+    /**
+     * The deletion settings of the image, indicating whether to delete the underlying resources in addition to the image.
+     */
+    interface ImageDeletionSettings {
+        /**
+         * The execution role to use for deleting the image, as well as underlying resources.
+         */
+        executionRole: string;
+    }
     /**
      * Settings for Image Builder to configure the ECR repository and output container images that are scanned.
      */
@@ -54955,6 +54967,9 @@ export declare namespace mediapackagev2 {
          * The encryption method to use.
          */
         cmafEncryptionMethod?: enums.mediapackagev2.OriginEndpointCmafEncryptionMethod;
+        /**
+         * The encryption method used for Microsoft Smooth Streaming (MSS) content. This specifies how the MSS segments are encrypted to protect the content during delivery to client players.
+         */
         ismEncryptionMethod?: enums.mediapackagev2.OriginEndpointIsmEncryptionMethod;
         /**
          * The encryption method to use.
@@ -56146,6 +56161,7 @@ export declare namespace networkfirewall {
         availabilityZone: string;
     }
     interface FirewallPolicy {
+        enableTlsSessionHolding?: boolean;
         /**
          * Contains variables that you can use to override default Suricata settings in your firewall policy.
          */
@@ -91454,6 +91470,34 @@ export declare namespace route53resolver {
     }
 }
 export declare namespace rtbfabric {
+    interface LinkAttributes {
+        customerProvidedId?: string;
+        responderErrorMasking?: outputs.rtbfabric.LinkResponderErrorMaskingForHttpCode[];
+    }
+    interface LinkLogSettings {
+        applicationLogs: outputs.rtbfabric.LinkLogSettingsApplicationLogsProperties;
+    }
+    interface LinkLogSettingsApplicationLogsProperties {
+        linkApplicationLogSampling: outputs.rtbfabric.LinkLogSettingsApplicationLogsPropertiesLinkApplicationLogSamplingProperties;
+    }
+    interface LinkLogSettingsApplicationLogsPropertiesLinkApplicationLogSamplingProperties {
+        errorLog: number;
+        filterLog: number;
+    }
+    interface LinkModuleConfiguration {
+        dependsOn?: string[];
+        moduleParameters?: outputs.rtbfabric.LinkModuleParameters;
+        name: string;
+        version?: string;
+    }
+    interface LinkModuleParameters {
+    }
+    interface LinkResponderErrorMaskingForHttpCode {
+        action: enums.rtbfabric.LinkResponderErrorMaskingForHttpCodeAction;
+        httpCode: string;
+        loggingTypes: enums.rtbfabric.LinkResponderErrorMaskingLoggingType[];
+        responseLoggingPercentage?: number;
+    }
     interface ResponderGatewayManagedEndpointConfiguration {
     }
     interface ResponderGatewayTrustStoreConfiguration {
@@ -98408,8 +98452,12 @@ export declare namespace sagemaker {
     interface UserProfileResourceSpec {
         /**
          * The instance type that the image version runs on.
+         *
+         * > *JupyterServer apps* only support the `system` value.
+         * >
+         * > For *KernelGateway apps* , the `system` value is translated to `ml.t3.medium` . KernelGateway apps also support all other values for available instance types.
          */
-        instanceType?: enums.sagemaker.UserProfileResourceSpecInstanceType;
+        instanceType?: enums.sagemaker.UserProfileAppInstanceType;
         /**
          * The Amazon Resource Name (ARN) of the Lifecycle Configuration to attach to the Resource.
          */
@@ -103066,6 +103114,19 @@ export declare namespace transfer {
          */
         signingAlgorithm?: enums.transfer.ConnectorAs2ConfigPropertiesSigningAlgorithm;
     }
+    interface ConnectorEgressConfig {
+        vpcLattice: outputs.transfer.ConnectorVpcLatticeEgressConfig;
+    }
+    interface ConnectorVpcLatticeEgressConfig {
+        /**
+         * Port to connect to on the target VPC Lattice resource
+         */
+        portNumber?: number;
+        /**
+         * ARN of the VPC Lattice resource configuration
+         */
+        resourceConfigurationArn: string;
+    }
     /**
      * Specifies a separate directory for each type of file to store for an AS2 message.
      */

package/types/output.js.map

@@ -1 +1 @@
-{"version":3,"file":"output.js","sourceRoot":"","sources":["../../types/output.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAm6pBjF,IAAiB,MAAM,CAgHtB;AAhHD,WAAiB,MAAM;IAoDnB;;OAEG;IACH,SAAgB,yBAAyB,CAAC,GAAe;QACrD,OAAO;YACH,GAAG,GAAG;YACN,qBAAqB,EAAE,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,CAAC;SAC1D,CAAC;IACN,CAAC;IALe,gCAAyB,4BAKxC,CAAA;AAoDL,CAAC,EAhHgB,MAAM,GAAN,cAAM,KAAN,cAAM,QAgHtB"}
+{"version":3,"file":"output.js","sourceRoot":"","sources":["../../types/output.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAy4pBjF,IAAiB,MAAM,CAgHtB;AAhHD,WAAiB,MAAM;IAoDnB;;OAEG;IACH,SAAgB,yBAAyB,CAAC,GAAe;QACrD,OAAO;YACH,GAAG,GAAG;YACN,qBAAqB,EAAE,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,CAAC;SAC1D,CAAC;IACN,CAAC;IALe,gCAAyB,4BAKxC,CAAA;AAoDL,CAAC,EAhHgB,MAAM,GAAN,cAAM,KAAN,cAAM,QAgHtB"}