@pulumi/aws 4.31.0 → 4.33.0

package/types/output.d.ts

@@ -36,7 +36,7 @@ export interface GetAmiProductCode {
 }
 export interface GetAutoscalingGroupsFilter {
     /**
-     * The name of the filter. The valid values are: `auto-scaling-group`, `key`, `value`, and `propagate-at-launch`.
+     * The name of the DescribeAutoScalingGroup filter. The recommended values are: `tag-key`, `tag-value`, and `tag:<tag name>`
      */
     name: string;
     /**
@@ -4215,9 +4215,13 @@ export declare namespace appsync {
     }
     interface GraphQLApiAdditionalAuthenticationProvider {
         /**
-         * The authentication type. Valid values: `API_KEY`, `AWS_IAM`, `AMAZON_COGNITO_USER_POOLS`, `OPENID_CONNECT`
+         * The authentication type. Valid values: `API_KEY`, `AWS_IAM`, `AMAZON_COGNITO_USER_POOLS`, `OPENID_CONNECT`, `AWS_LAMBDA`
          */
         authenticationType: string;
+        /**
+         * Nested argument containing Lambda authorizer configuration. Defined below.
+         */
+        lambdaAuthorizerConfig?: outputs.appsync.GraphQLApiAdditionalAuthenticationProviderLambdaAuthorizerConfig;
         /**
          * Nested argument containing OpenID Connect configuration. Defined below.
          */
@@ -4227,6 +4231,20 @@ export declare namespace appsync {
          */
         userPoolConfig?: outputs.appsync.GraphQLApiAdditionalAuthenticationProviderUserPoolConfig;
     }
+    interface GraphQLApiAdditionalAuthenticationProviderLambdaAuthorizerConfig {
+        /**
+         * The number of seconds a response should be cached for. The default is 5 minutes (300 seconds). The Lambda function can override this by returning a `ttlOverride` key in its response. A value of 0 disables caching of responses. Minimum value of 0. Maximum value of 3600.
+         */
+        authorizerResultTtlInSeconds?: number;
+        /**
+         * The ARN of the Lambda function to be called for authorization. Note: This Lambda function must have a resource-based policy assigned to it, to allow `lambda:InvokeFunction` from service principal `appsync.amazonaws.com`.
+         */
+        authorizerUri: string;
+        /**
+         * A regular expression for validation of tokens before the Lambda function is called.
+         */
+        identityValidationExpression?: string;
+    }
     interface GraphQLApiAdditionalAuthenticationProviderOpenidConnectConfig {
         /**
          * Number of milliseconds a token is valid after being authenticated.
@@ -4259,6 +4277,20 @@ export declare namespace appsync {
          */
         userPoolId: string;
     }
+    interface GraphQLApiLambdaAuthorizerConfig {
+        /**
+         * The number of seconds a response should be cached for. The default is 5 minutes (300 seconds). The Lambda function can override this by returning a `ttlOverride` key in its response. A value of 0 disables caching of responses. Minimum value of 0. Maximum value of 3600.
+         */
+        authorizerResultTtlInSeconds?: number;
+        /**
+         * The ARN of the Lambda function to be called for authorization. Note: This Lambda function must have a resource-based policy assigned to it, to allow `lambda:InvokeFunction` from service principal `appsync.amazonaws.com`.
+         */
+        authorizerUri: string;
+        /**
+         * A regular expression for validation of tokens before the Lambda function is called.
+         */
+        identityValidationExpression?: string;
+    }
     interface GraphQLApiLogConfig {
         /**
          * Amazon Resource Name of the service role that AWS AppSync will assume to publish to Amazon CloudWatch logs in your account.
@@ -4397,7 +4429,7 @@ export declare namespace athena {
 export declare namespace autoscaling {
     interface GetAmiIdsFilter {
         /**
-         * The name of the filter. The valid values are: `auto-scaling-group`, `key`, `value`, and `propagate-at-launch`.
+         * The name of the DescribeAutoScalingGroup filter. The recommended values are: `tag-key`, `tag-value`, and `tag:<tag name>`
          */
         name: string;
         /**
@@ -5568,7 +5600,7 @@ export declare namespace cloudfront {
          */
         headersConfig: outputs.cloudfront.CachePolicyParametersInCacheKeyAndForwardedToOriginHeadersConfig;
         /**
-         * Object that determines whether any URL query strings in viewer requests (and if so, which query strings) are included in the cache key and automatically included in requests that CloudFront sends to the origin. See Query Strings Config for more information.
+         * Object that determines whether any URL query strings in viewer requests (and if so, which query strings) are included in the cache key and automatically included in requests that CloudFront sends to the origin. See Query String Config for more information.
          */
         queryStringsConfig: outputs.cloudfront.CachePolicyParametersInCacheKeyAndForwardedToOriginQueryStringsConfig;
     }
@@ -6313,7 +6345,7 @@ export declare namespace cloudfront {
          */
         headersConfigs: outputs.cloudfront.GetCachePolicyParametersInCacheKeyAndForwardedToOriginHeadersConfig[];
         /**
-         * Object that determines whether any URL query strings in viewer requests (and if so, which query strings) are included in the cache key and automatically included in requests that CloudFront sends to the origin. See Query Strings Config for more information.
+         * Object that determines whether any URL query strings in viewer requests (and if so, which query strings) are included in the cache key and automatically included in requests that CloudFront sends to the origin. See Query String Config for more information.
          */
         queryStringsConfigs: outputs.cloudfront.GetCachePolicyParametersInCacheKeyAndForwardedToOriginQueryStringsConfig[];
     }
@@ -8916,6 +8948,96 @@ export declare namespace config {
         keys?: string[];
     }
 }
+export declare namespace connect {
+    interface BotAssociationLexBot {
+        /**
+         * The Region that the Amazon Lex (V1) bot was created in. Defaults to current region.
+         */
+        lexRegion: string;
+        /**
+         * The name of the Amazon Lex (V1) bot.
+         */
+        name: string;
+    }
+    interface GetBotAssociationLexBot {
+        /**
+         * The Region that the Amazon Lex (V1) bot was created in.
+         */
+        lexRegion: string;
+        /**
+         * The name of the Amazon Lex (V1) bot.
+         */
+        name: string;
+    }
+    interface GetHoursOfOperationConfig {
+        /**
+         * Specifies the day that the hours of operation applies to.
+         */
+        day: string;
+        /**
+         * A end time block specifies the time that your contact center closes. The `endTime` is documented below.
+         */
+        endTimes: outputs.connect.GetHoursOfOperationConfigEndTime[];
+        /**
+         * A start time block specifies the time that your contact center opens. The `startTime` is documented below.
+         */
+        startTimes: outputs.connect.GetHoursOfOperationConfigStartTime[];
+    }
+    interface GetHoursOfOperationConfigEndTime {
+        /**
+         * Specifies the hour of opening.
+         */
+        hours: number;
+        /**
+         * Specifies the minute of opening.
+         */
+        minutes: number;
+    }
+    interface GetHoursOfOperationConfigStartTime {
+        /**
+         * Specifies the hour of opening.
+         */
+        hours: number;
+        /**
+         * Specifies the minute of opening.
+         */
+        minutes: number;
+    }
+    interface HoursOfOperationConfig {
+        /**
+         * Specifies the day that the hours of operation applies to.
+         */
+        day: string;
+        /**
+         * A end time block specifies the time that your contact center closes. The `endTime` is documented below.
+         */
+        endTime: outputs.connect.HoursOfOperationConfigEndTime;
+        /**
+         * A start time block specifies the time that your contact center opens. The `startTime` is documented below.
+         */
+        startTime: outputs.connect.HoursOfOperationConfigStartTime;
+    }
+    interface HoursOfOperationConfigEndTime {
+        /**
+         * Specifies the hour of closing.
+         */
+        hours: number;
+        /**
+         * Specifies the minute of closing.
+         */
+        minutes: number;
+    }
+    interface HoursOfOperationConfigStartTime {
+        /**
+         * Specifies the hour of opening.
+         */
+        hours: number;
+        /**
+         * Specifies the minute of opening.
+         */
+        minutes: number;
+    }
+}
 export declare namespace datasync {
     interface EfsLocationEc2Config {
         /**
@@ -12508,6 +12630,20 @@ export declare namespace ecr {
          */
         scanOnPush: boolean;
     }
+    interface RegistryScanningConfigurationRule {
+        /**
+         * One or more repository filter blocks, containing a `filter` (required string filtering repositories, see pattern regex [here](https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_ScanningRepositoryFilter.html)) and a `filterType` (required string, currently only `WILDCARD` is supported).
+         */
+        repositoryFilters: outputs.ecr.RegistryScanningConfigurationRuleRepositoryFilter[];
+        /**
+         * The frequency that scans are performed at for a private registry. Can be `SCAN_ON_PUSH`, `CONTINUOUS_SCAN`, or `MANUAL`.
+         */
+        scanFrequency: string;
+    }
+    interface RegistryScanningConfigurationRuleRepositoryFilter {
+        filter: string;
+        filterType: string;
+    }
     interface ReplicationConfigurationReplicationConfiguration {
         /**
          * The replication rules for a replication configuration. See Rule.
@@ -12827,6 +12963,16 @@ export declare namespace ecs {
          */
         type?: string;
     }
+    interface TaskDefinitionRuntimePlatform {
+        /**
+         * Must be set to either `X86_64` or `ARM64`; see [cpu architecture](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html#runtime-platform)
+         */
+        cpuArchitecture?: string;
+        /**
+         * If the `requiresCompatibilities` is `FARGATE` this field is required; must be set to a valid option from the [operating system family in the runtime platform](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html#runtime-platform) setting
+         */
+        operatingSystemFamily?: string;
+    }
     interface TaskDefinitionVolume {
         /**
          * Configuration block to configure a docker volume. Detailed below.
@@ -12932,6 +13078,80 @@ export declare namespace ecs {
          */
         domain: string;
     }
+    interface TaskSetCapacityProviderStrategy {
+        /**
+         * The number of tasks, at a minimum, to run on the specified capacity provider. Only one capacity provider in a capacity provider strategy can have a base defined.
+         */
+        base?: number;
+        /**
+         * The short name or full Amazon Resource Name (ARN) of the capacity provider.
+         */
+        capacityProvider: string;
+        /**
+         * The relative percentage of the total number of launched tasks that should use the specified capacity provider.
+         */
+        weight: number;
+    }
+    interface TaskSetLoadBalancer {
+        /**
+         * The name of the container to associate with the load balancer (as it appears in a container definition).
+         */
+        containerName: string;
+        /**
+         * The port on the container to associate with the load balancer. Defaults to `0` if not specified.
+         */
+        containerPort?: number;
+        /**
+         * The name of the ELB (Classic) to associate with the service.
+         */
+        loadBalancerName?: string;
+        /**
+         * The ARN of the Load Balancer target group to associate with the service.
+         */
+        targetGroupArn?: string;
+    }
+    interface TaskSetNetworkConfiguration {
+        /**
+         * Whether to assign a public IP address to the ENI (`FARGATE` launch type only). Valid values are `true` or `false`. Default `false`.
+         */
+        assignPublicIp?: boolean;
+        /**
+         * The security groups associated with the task or service. If you do not specify a security group, the default security group for the VPC is used. Maximum of 5.
+         */
+        securityGroups?: string[];
+        /**
+         * The subnets associated with the task or service. Maximum of 16.
+         */
+        subnets: string[];
+    }
+    interface TaskSetScale {
+        /**
+         * The unit of measure for the scale value. Default: `PERCENT`.
+         */
+        unit?: string;
+        /**
+         * The value, specified as a percent total of a service's `desiredCount`, to scale the task set. Defaults to `0` if not specified. Accepted values are numbers between 0.0 and 100.0.
+         */
+        value?: number;
+    }
+    interface TaskSetServiceRegistries {
+        /**
+         * The container name value, already specified in the task definition, to be used for your service discovery service.
+         */
+        containerName?: string;
+        /**
+         * The port value, already specified in the task definition, to be used for your service discovery service.
+         */
+        containerPort?: number;
+        /**
+         * The port value used if your Service Discovery service specified an SRV record.
+         */
+        port?: number;
+        /**
+         * The ARN of the Service Registry. The currently supported service registry is Amazon Route 53 Auto Naming Service(`aws.servicediscovery.Service` resource). For more information, see [Service](https://docs.aws.amazon.com/Route53/latest/APIReference/API_autonaming_Service.html).
+         */
+        registryArn: string;
+    }
 }
 export declare namespace efs {
     interface AccessPointPosixUser {
@@ -14216,6 +14436,44 @@ export declare namespace elasticsearch {
          */
         masterUserPassword?: string;
     }
+    interface DomainAutoTuneOptions {
+        /**
+         * The Auto-Tune desired state for the domain. Valid values: `ENABLED` or `DISABLED`.
+         */
+        desiredState: string;
+        /**
+         * Configuration block for Auto-Tune maintenance windows. Can be specified multiple times for each maintenance window. Detailed below.
+         */
+        maintenanceSchedules: outputs.elasticsearch.DomainAutoTuneOptionsMaintenanceSchedule[];
+        /**
+         * Whether to roll back to default Auto-Tune settings when disabling Auto-Tune. Valid values: `DEFAULT_ROLLBACK` or `NO_ROLLBACK`.
+         */
+        rollbackOnDisable: string;
+    }
+    interface DomainAutoTuneOptionsMaintenanceSchedule {
+        /**
+         * A cron expression specifying the recurrence pattern for an Auto-Tune maintenance schedule.
+         */
+        cronExpressionForRecurrence: string;
+        /**
+         * Configuration block for the duration of the Auto-Tune maintenance window. Detailed below.
+         */
+        duration: outputs.elasticsearch.DomainAutoTuneOptionsMaintenanceScheduleDuration;
+        /**
+         * Date and time at which to start the Auto-Tune maintenance schedule in [RFC3339 format](https://tools.ietf.org/html/rfc3339#section-5.8).
+         */
+        startAt: string;
+    }
+    interface DomainAutoTuneOptionsMaintenanceScheduleDuration {
+        /**
+         * The unit of time specifying the duration of an Auto-Tune maintenance window. Valid values: `HOURS`.
+         */
+        unit: string;
+        /**
+         * An integer specifying the value of the duration of an Auto-Tune maintenance window.
+         */
+        value: number;
+    }
     interface DomainClusterConfig {
         /**
          * Number of dedicated main nodes in the cluster.
@@ -14417,6 +14675,44 @@ export declare namespace elasticsearch {
          */
         internalUserDatabaseEnabled: boolean;
     }
+    interface GetDomainAutoTuneOption {
+        /**
+         * The Auto-Tune desired state for the domain.
+         */
+        desiredState: string;
+        /**
+         * A list of the nested configurations for the Auto-Tune maintenance windows of the domain.
+         */
+        maintenanceSchedules: outputs.elasticsearch.GetDomainAutoTuneOptionMaintenanceSchedule[];
+        /**
+         * Whether the domain is set to roll back to default Auto-Tune settings when disabling Auto-Tune.
+         */
+        rollbackOnDisable: string;
+    }
+    interface GetDomainAutoTuneOptionMaintenanceSchedule {
+        /**
+         * A cron expression specifying the recurrence pattern for an Auto-Tune maintenance schedule.
+         */
+        cronExpressionForRecurrence: string;
+        /**
+         * Configuration block for the duration of the Auto-Tune maintenance window.
+         */
+        durations: outputs.elasticsearch.GetDomainAutoTuneOptionMaintenanceScheduleDuration[];
+        /**
+         * Date and time at which the Auto-Tune maintenance schedule starts in [RFC3339 format](https://tools.ietf.org/html/rfc3339#section-5.8).
+         */
+        startAt: string;
+    }
+    interface GetDomainAutoTuneOptionMaintenanceScheduleDuration {
+        /**
+         * The unit of time specifying the duration of an Auto-Tune maintenance window.
+         */
+        unit: string;
+        /**
+         * An integer specifying the value of the duration of an Auto-Tune maintenance window.
+         */
+        value: number;
+    }
     interface GetDomainClusterConfig {
         /**
          * Number of dedicated master nodes in the cluster.
@@ -15575,7 +15871,14 @@ export declare namespace fsx {
          * The name of the domain group whose members are granted administrative privileges for the SVM. The group that you specify must already exist in your domain. Defaults to `Domain Admins`.
          */
         fileSystemAdministratorsGroup?: string;
+        /**
+         * @deprecated use 'organizational_unit_distinguished_name' instead
+         */
         organizationalUnitDistinguidshedName?: string;
+        /**
+         * The fully qualified distinguished name of the organizational unit within your self-managed AD directory that the Windows File Server instance will join. For example, `OU=FSx,DC=yourdomain,DC=corp,DC=com`. Only accepts OU as the direct parent of the SVM. If none is provided, the SVM is created in the default location of your self-managed AD directory. To learn more, see [RFC 2253](https://tools.ietf.org/html/rfc2253).
+         */
+        organizationalUnitDistinguishedName?: string;
         /**
          * The password for the service account on your self-managed AD domain that Amazon FSx will use to join to your AD domain.
          */
@@ -16762,7 +17065,7 @@ export declare namespace iam {
          */
         notPrincipals?: outputs.iam.GetPolicyDocumentStatementNotPrincipal[];
         /**
-         * List of resource ARNs that this statement does *not* apply to. Use to apply a policy statement to all resources *except* those listed.
+         * List of resource ARNs that this statement does *not* apply to. Use to apply a policy statement to all resources *except* those listed. Conflicts with `resources`.
          */
         notResources?: string[];
         /**
@@ -16770,7 +17073,7 @@ export declare namespace iam {
          */
         principals?: outputs.iam.GetPolicyDocumentStatementPrincipal[];
         /**
-         * List of resource ARNs that this statement applies to. This is required by AWS if used for an IAM policy.
+         * List of resource ARNs that this statement applies to. This is required by AWS if used for an IAM policy. Conflicts with `notResources`.
          */
         resources?: string[];
         /**
@@ -18963,6 +19266,18 @@ export declare namespace kinesis {
          */
         parameterValue: string;
     }
+    interface GetStreamStreamModeDetail {
+        /**
+         * The capacity mode of the stream. Either `ON_DEMAND` or `PROVISIONED`.
+         */
+        streamMode: string;
+    }
+    interface StreamStreamModeDetails {
+        /**
+         * Specifies the capacity mode of the stream. Must be either `PROVISIONED` or `ON_DEMAND`.
+         */
+        streamMode: string;
+    }
 }
 export declare namespace kinesisanalyticsv2 {
     interface ApplicationApplicationConfiguration {
@@ -19700,6 +20015,18 @@ export declare namespace lambda {
          */
         destinationArn: string;
     }
+    interface EventSourceMappingFilterCriteria {
+        /**
+         * A set of up to 5 filter. If an event satisfies at least one, Lambda sends the event to the function or adds it to the next batch. Detailed below.
+         */
+        filters?: outputs.lambda.EventSourceMappingFilterCriteriaFilter[];
+    }
+    interface EventSourceMappingFilterCriteriaFilter {
+        /**
+         * A filter pattern up to 4096 characters. See [Filter Rule Syntax](https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventfiltering.html#filtering-syntax).
+         */
+        pattern?: string;
+    }
     interface EventSourceMappingSelfManagedEventSource {
         /**
          * A map of endpoints for the self managed source.  For Kafka self-managed sources, the key should be `KAFKA_BOOTSTRAP_SERVERS` and the value should be a string with a comma separated list of broker endpoints.
@@ -21633,6 +21960,14 @@ export declare namespace networkfirewall {
         subnetId: string;
     }
     interface FirewallPolicyFirewallPolicy {
+        /**
+         * Set of actions to take on a packet if it does not match any stateful rules in the policy. This can only be specified if the policy has a `statefulEngineOptions` block with a `ruleOrder` value of `STRICT_ORDER`. You can specify one of either or neither values of `aws:drop_strict` or `aws:drop_established`, as well as any combination of `aws:alert_strict` and `aws:alert_established`.
+         */
+        statefulDefaultActions?: string[];
+        /**
+         * A configuration block that defines options on how the policy handles stateful rules. See Stateful Engine Options below for details.
+         */
+        statefulEngineOptions?: outputs.networkfirewall.FirewallPolicyFirewallPolicyStatefulEngineOptions;
         /**
          * Set of configuration blocks containing references to the stateful rule groups that are used in the policy. See Stateful Rule Group Reference below for details.
          */
@@ -21656,7 +21991,17 @@ export declare namespace networkfirewall {
          */
         statelessRuleGroupReferences?: outputs.networkfirewall.FirewallPolicyFirewallPolicyStatelessRuleGroupReference[];
     }
+    interface FirewallPolicyFirewallPolicyStatefulEngineOptions {
+        /**
+         * Indicates how to manage the order of stateful rule evaluation for the policy. Default value: `DEFAULT_ACTION_ORDER`. Valid values: `DEFAULT_ACTION_ORDER`, `STRICT_ORDER`.
+         */
+        ruleOrder: string;
+    }
     interface FirewallPolicyFirewallPolicyStatefulRuleGroupReference {
+        /**
+         * An integer setting that indicates the order in which to apply the stateful rule groups in a single policy. This argument must be specified if the policy has a `statefulEngineOptions` block with a `ruleOrder` value of `STRICT_ORDER`. AWS Network Firewall applies each stateful rule group to a packet starting with the group that has the lowest priority setting.
+         */
+        priority?: number;
         /**
          * The Amazon Resource Name (ARN) of the stateful rule group.
          */
@@ -21740,6 +22085,10 @@ export declare namespace networkfirewall {
          * A configuration block that defines the stateful or stateless rules for the rule group. See Rules Source below for details.
          */
         rulesSource: outputs.networkfirewall.RuleGroupRuleGroupRulesSource;
+        /**
+         * A configuration block that defines stateful rule options for the rule group. See Stateful Rule Options below for details.
+         */
+        statefulRuleOptions?: outputs.networkfirewall.RuleGroupRuleGroupStatefulRuleOptions;
     }
     interface RuleGroupRuleGroupRuleVariables {
         /**
@@ -21994,6 +22343,12 @@ export declare namespace networkfirewall {
          */
         masks?: string[];
     }
+    interface RuleGroupRuleGroupStatefulRuleOptions {
+        /**
+         * Indicates how to manage the order of the rule evaluation for the rule group. Default value: `DEFAULT_ACTION_ORDER`. Valid values: `DEFAULT_ACTION_ORDER`, `STRICT_ORDER`.
+         */
+        ruleOrder: string;
+    }
 }
 export declare namespace opsworks {
     interface ApplicationAppSource {
@@ -23814,7 +24169,7 @@ export declare namespace s3 {
          */
         days?: number;
         /**
-         * Specifies the Amazon S3 storage class to which you want the noncurrent object versions to transition. Can be `ONEZONE_IA`, `STANDARD_IA`, `INTELLIGENT_TIERING`, `GLACIER`, or `DEEP_ARCHIVE`.
+         * Specifies the Amazon S3 [storage class](https://docs.aws.amazon.com/AmazonS3/latest/API/API_Transition.html#AmazonS3-Type-Transition-StorageClass) to which you want the object to transition.
          */
         storageClass: string;
     }
@@ -23828,7 +24183,7 @@ export declare namespace s3 {
          */
         days?: number;
         /**
-         * Specifies the Amazon S3 storage class to which you want the object to transition. Can be `ONEZONE_IA`, `STANDARD_IA`, `INTELLIGENT_TIERING`, `GLACIER`, or `DEEP_ARCHIVE`.
+         * Specifies the Amazon S3 [storage class](https://docs.aws.amazon.com/AmazonS3/latest/API/API_Transition.html#AmazonS3-Type-Transition-StorageClass) to which you want the object to transition.
          */
         storageClass: string;
     }
@@ -23952,7 +24307,7 @@ export declare namespace s3 {
     }
     interface BucketOwnershipControlsRule {
         /**
-         * Object ownership. Valid values: `BucketOwnerPreferred` or `ObjectWriter`
+         * Object ownership. Valid values: `BucketOwnerPreferred`, `ObjectWriter` or `BucketOwnerEnforced`
          */
         objectOwnership: string;
     }
@@ -24026,7 +24381,7 @@ export declare namespace s3 {
          */
         replicationTime?: outputs.s3.BucketReplicationConfigRuleDestinationReplicationTime;
         /**
-         * The class of storage used to store the object. Can be `STANDARD`, `REDUCED_REDUNDANCY`, `STANDARD_IA`, `ONEZONE_IA`, `INTELLIGENT_TIERING`, `GLACIER`, or `DEEP_ARCHIVE`. By default, Amazon S3 uses the storage class of the source object to create the object replica.
+         * The [storage class](https://docs.aws.amazon.com/AmazonS3/latest/API/API_Destination.html#AmazonS3-Type-Destination-StorageClass) used to store the object. By default, Amazon S3 uses the storage class of the source object to create the object replica.
          */
         storageClass?: string;
     }
@@ -24209,7 +24564,7 @@ export declare namespace s3 {
          */
         replicationTime?: outputs.s3.BucketReplicationConfigurationRuleDestinationReplicationTime;
         /**
-         * The class of storage used to store the object. Can be `STANDARD`, `REDUCED_REDUNDANCY`, `STANDARD_IA`, `ONEZONE_IA`, `INTELLIGENT_TIERING`, `GLACIER`, or `DEEP_ARCHIVE`.
+         * The [storage class](https://docs.aws.amazon.com/AmazonS3/latest/API/API_Destination.html#AmazonS3-Type-Destination-StorageClass) used to store the object. By default, Amazon S3 uses the storage class of the source object to create the object replica.
          */
         storageClass?: string;
     }
@@ -28329,7 +28684,7 @@ export declare namespace wafregional {
     }
     interface WebAclDefaultAction {
         /**
-         * Specifies how you want AWS WAF Regional to respond to requests that match the settings in a ruleE.g., `ALLOW`, `BLOCK` or `COUNT`
+         * Specifies how you want AWS WAF Regional to respond to requests that match the settings in a rule. Valid values for `action` are `ALLOW`, `BLOCK` or `COUNT`. Valid values for `overrideAction` are `COUNT` and `NONE`.
          */
         type: string;
     }
@@ -28355,7 +28710,7 @@ export declare namespace wafregional {
          */
         data?: string;
         /**
-         * Specifies how you want AWS WAF Regional to respond to requests that match the settings in a ruleE.g., `ALLOW`, `BLOCK` or `COUNT`
+         * Specifies how you want AWS WAF Regional to respond to requests that match the settings in a rule. Valid values for `action` are `ALLOW`, `BLOCK` or `COUNT`. Valid values for `overrideAction` are `COUNT` and `NONE`.
          */
         type: string;
     }
@@ -28378,19 +28733,19 @@ export declare namespace wafregional {
          */
         ruleId: string;
         /**
-         * Specifies how you want AWS WAF Regional to respond to requests that match the settings in a ruleE.g., `ALLOW`, `BLOCK` or `COUNT`
+         * Specifies how you want AWS WAF Regional to respond to requests that match the settings in a rule. Valid values for `action` are `ALLOW`, `BLOCK` or `COUNT`. Valid values for `overrideAction` are `COUNT` and `NONE`.
          */
         type?: string;
     }
     interface WebAclRuleAction {
         /**
-         * Specifies how you want AWS WAF Regional to respond to requests that match the settings in a ruleE.g., `ALLOW`, `BLOCK` or `COUNT`
+         * Specifies how you want AWS WAF Regional to respond to requests that match the settings in a rule. Valid values for `action` are `ALLOW`, `BLOCK` or `COUNT`. Valid values for `overrideAction` are `COUNT` and `NONE`.
          */
         type: string;
     }
     interface WebAclRuleOverrideAction {
         /**
-         * Specifies how you want AWS WAF Regional to respond to requests that match the settings in a ruleE.g., `ALLOW`, `BLOCK` or `COUNT`
+         * Specifies how you want AWS WAF Regional to respond to requests that match the settings in a rule. Valid values for `action` are `ALLOW`, `BLOCK` or `COUNT`. Valid values for `overrideAction` are `COUNT` and `NONE`.
          */
         type: string;
     }

package/xray/group.d.ts

@@ -50,6 +50,9 @@ export declare class Group extends pulumi.CustomResource {
      * The name of the group.
      */
     readonly groupName: pulumi.Output<string>;
+    /**
+     * Key-value mapping of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
+     */
     readonly tags: pulumi.Output<{
         [key: string]: string;
     } | undefined>;
@@ -84,6 +87,9 @@ export interface GroupState {
      * The name of the group.
      */
     groupName?: pulumi.Input<string>;
+    /**
+     * Key-value mapping of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
+     */
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
@@ -106,6 +112,9 @@ export interface GroupArgs {
      * The name of the group.
      */
     groupName: pulumi.Input<string>;
+    /**
+     * Key-value mapping of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
+     */
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;

package/xray/group.js.map

@@ -1 +1 @@
-{"version":3,"file":"group.js","sourceRoot":"","sources":["../../xray/group.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAa,KAAM,SAAQ,MAAM,CAAC,cAAc;IAsD5C,YAAY,IAAY,EAAE,WAAoC,EAAE,IAAmC;QAC/F,IAAI,MAAM,GAAkB,EAAE,CAAC;QAC/B,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAqC,CAAC;YACpD,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9C,MAAM,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,MAAM,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YAChD,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SACzD;aAAM;YACH,MAAM,IAAI,GAAG,WAAoC,CAAC;YAClD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC7D,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;aACnE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACtD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;aAC5D;YACD,MAAM,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,MAAM,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9C,MAAM,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAClC,MAAM,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACzC;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;YACf,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,UAAU,EAAE,EAAC,CAAC,CAAC;SACxE;QACD,KAAK,CAAC,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAClD,CAAC;IAjFD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAkB,EAAE,IAAmC;QAChH,OAAO,IAAI,KAAK,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC5D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,KAAK,CAAC,YAAY,CAAC;IACtD,CAAC;;AA1BL,sBAmFC;AArEG,gBAAgB;AACO,kBAAY,GAAG,sBAAsB,CAAC"}
+{"version":3,"file":"group.js","sourceRoot":"","sources":["../../xray/group.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAa,KAAM,SAAQ,MAAM,CAAC,cAAc;IAyD5C,YAAY,IAAY,EAAE,WAAoC,EAAE,IAAmC;QAC/F,IAAI,MAAM,GAAkB,EAAE,CAAC;QAC/B,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAqC,CAAC;YACpD,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9C,MAAM,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,MAAM,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YAChD,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SACzD;aAAM;YACH,MAAM,IAAI,GAAG,WAAoC,CAAC;YAClD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC7D,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;aACnE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACtD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;aAC5D;YACD,MAAM,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,MAAM,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9C,MAAM,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAClC,MAAM,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACzC;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;YACf,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,UAAU,EAAE,EAAC,CAAC,CAAC;SACxE;QACD,KAAK,CAAC,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAClD,CAAC;IApFD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAkB,EAAE,IAAmC;QAChH,OAAO,IAAI,KAAK,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC5D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,KAAK,CAAC,YAAY,CAAC;IACtD,CAAC;;AA1BL,sBAsFC;AAxEG,gBAAgB;AACO,kBAAY,GAAG,sBAAsB,CAAC"}