@pulumi/aws 5.2.0 → 5.3.0

package/types/output.d.ts

@@ -6094,7 +6094,7 @@ export declare namespace cfg {
          */
         sourceDetails?: outputs.cfg.RuleSourceSourceDetail[];
         /**
-         * For AWS Config managed rules, a predefined identifier, e.g `IAM_PASSWORD_POLICY`. For custom Lambda rules, the identifier is the ARN of the Lambda Function, such as `arn:aws:lambda:us-east-1:123456789012:function:custom_rule_name` or the `arn` attribute of the `aws.lambda.Function` resource.
+         * For AWS Config managed rules, a predefined identifier, e.g `IAM_PASSWORD_POLICY`. For custom Lambda rules, the identifier is the ARN of the Lambda Function, such as `arn:aws:lambda:us-east-1:123456789012:function:custom_rule_name` or the [`arn` attribute of the `aws.lambda.Function` resource](https://www.terraform.io/docs/providers/aws/r/lambda_function.html#arn).
          */
         sourceIdentifier?: string;
     }
@@ -10879,7 +10879,7 @@ export declare namespace dms {
          */
         includeTransactionDetails?: boolean;
         /**
-         * Output format for the records created. Default is `json`. Valid values are `json` and `jsonUnformatted` (a single line with no tab).
+         * Output format for the records created. Default is `json`. Valid values are `json` and `json-unformatted` (a single line with no tab).
          */
         messageFormat?: string;
         /**
@@ -10949,7 +10949,7 @@ export declare namespace dms {
          */
         includeTransactionDetails?: boolean;
         /**
-         * Output format for the records created. Default is `json`. Valid values are `json` and `jsonUnformatted` (a single line with no tab).
+         * Output format for the records created. Default is `json`. Valid values are `json` and `json-unformatted` (a single line with no tab).
          */
         messageFormat?: string;
         /**
@@ -12920,6 +12920,10 @@ export declare namespace ec2 {
          * The ID of the Capacity Reservation in which to run the instance.
          */
         capacityReservationId?: string;
+        /**
+         * The ARN of the Capacity Reservation resource group in which to run the instance.
+         */
+        capacityReservationResourceGroupArn?: string;
     }
     interface InstanceCreditSpecification {
         /**
@@ -13036,6 +13040,10 @@ export declare namespace ec2 {
          * Integer index of the network interface attachment. Limited by instance type.
          */
         deviceIndex: number;
+        /**
+         * Integer index of the network card. Limited by instance type. The default index is `0`.
+         */
+        networkCardIndex?: number;
         /**
          * ID of the network interface to attach.
          */
@@ -13875,6 +13883,10 @@ export declare namespace ec2 {
          * The ID of the Capacity Reservation in which to run the instance.
          */
         capacityReservationId?: string;
+        /**
+         * The ARN of the Capacity Reservation resource group in which to run the instance.
+         */
+        capacityReservationResourceGroupArn?: string;
     }
     interface SpotInstanceRequestCreditSpecification {
         /**
@@ -13988,6 +14000,10 @@ export declare namespace ec2 {
          * Integer index of the network interface attachment. Limited by instance type.
          */
         deviceIndex: number;
+        /**
+         * Integer index of the network card. Limited by instance type. The default index is `0`.
+         */
+        networkCardIndex?: number;
         /**
          * ID of the network interface to attach.
          */
@@ -16329,7 +16345,7 @@ export declare namespace elasticloadbalancingv2 {
 export declare namespace elasticsearch {
     interface DomainAdvancedSecurityOptions {
         /**
-         * Whether to enable node-to-node encryption. If the `nodeToNodeEncryption` block is not provided then this defaults to `false`.
+         * Whether to enable node-to-node encryption. If the `nodeToNodeEncryption` block is not provided then this defaults to `false`. Enabling node-to-node encryption of a new domain requires an `elasticsearchVersion` of `6.0` or greater.
          */
         enabled: boolean;
         /**
@@ -16441,7 +16457,7 @@ export declare namespace elasticsearch {
     }
     interface DomainClusterConfigColdStorageOptions {
         /**
-         * Whether to enable node-to-node encryption. If the `nodeToNodeEncryption` block is not provided then this defaults to `false`.
+         * Whether to enable node-to-node encryption. If the `nodeToNodeEncryption` block is not provided then this defaults to `false`. Enabling node-to-node encryption of a new domain requires an `elasticsearchVersion` of `6.0` or greater.
          */
         enabled: boolean;
     }
@@ -16453,7 +16469,7 @@ export declare namespace elasticsearch {
     }
     interface DomainCognitoOptions {
         /**
-         * Whether to enable node-to-node encryption. If the `nodeToNodeEncryption` block is not provided then this defaults to `false`.
+         * Whether to enable node-to-node encryption. If the `nodeToNodeEncryption` block is not provided then this defaults to `false`. Enabling node-to-node encryption of a new domain requires an `elasticsearchVersion` of `6.0` or greater.
          */
         enabled?: boolean;
         /**
@@ -16508,12 +16524,9 @@ export declare namespace elasticsearch {
     }
     interface DomainEncryptAtRest {
         /**
-         * Whether to enable node-to-node encryption. If the `nodeToNodeEncryption` block is not provided then this defaults to `false`.
+         * Whether to enable node-to-node encryption. If the `nodeToNodeEncryption` block is not provided then this defaults to `false`. Enabling node-to-node encryption of a new domain requires an `elasticsearchVersion` of `6.0` or greater.
          */
         enabled: boolean;
-        /**
-         * KMS key id to encrypt the Elasticsearch domain with. If not specified then it defaults to using the `aws/es` service KMS key.
-         */
         kmsKeyId: string;
     }
     interface DomainLogPublishingOption {
@@ -16522,7 +16535,7 @@ export declare namespace elasticsearch {
          */
         cloudwatchLogGroupArn: string;
         /**
-         * Whether to enable node-to-node encryption. If the `nodeToNodeEncryption` block is not provided then this defaults to `false`.
+         * Whether to enable node-to-node encryption. If the `nodeToNodeEncryption` block is not provided then this defaults to `false`. Enabling node-to-node encryption of a new domain requires an `elasticsearchVersion` of `6.0` or greater.
          */
         enabled?: boolean;
         /**
@@ -16532,7 +16545,7 @@ export declare namespace elasticsearch {
     }
     interface DomainNodeToNodeEncryption {
         /**
-         * Whether to enable node-to-node encryption. If the `nodeToNodeEncryption` block is not provided then this defaults to `false`.
+         * Whether to enable node-to-node encryption. If the `nodeToNodeEncryption` block is not provided then this defaults to `false`. Enabling node-to-node encryption of a new domain requires an `elasticsearchVersion` of `6.0` or greater.
          */
         enabled: boolean;
     }
@@ -19881,6 +19894,16 @@ export declare namespace imagebuilder {
          */
         values: string[];
     }
+    interface GetInfrastructureConfigurationInstanceMetadataOption {
+        /**
+         * Number of hops that an instance can traverse to reach its destonation.
+         */
+        httpPutResponseHopLimit: number;
+        /**
+         * Whether a signed token is required for instance metadata retrieval requests.
+         */
+        httpTokens: string;
+    }
     interface GetInfrastructureConfigurationLogging {
         /**
          * Nested list of S3 logs settings.
@@ -20043,6 +20066,16 @@ export declare namespace imagebuilder {
          */
         uninstallAfterBuild: boolean;
     }
+    interface InfrastructureConfigurationInstanceMetadataOptions {
+        /**
+         * The number of hops that an instance can traverse to reach its destonation.
+         */
+        httpPutResponseHopLimit?: number;
+        /**
+         * Whether a signed token is required for instance metadata retrieval requests. Valid values: `required`, `optional`.
+         */
+        httpTokens?: string;
+    }
     interface InfrastructureConfigurationLogging {
         /**
          * Configuration block with S3 logging settings. Detailed below.
@@ -25613,7 +25646,7 @@ export declare namespace networkmanager {
 export declare namespace opensearch {
     interface DomainAdvancedSecurityOptions {
         /**
-         * Whether to enable node-to-node encryption. If the `nodeToNodeEncryption` block is not provided then this defaults to `false`.
+         * Whether to enable node-to-node encryption. If the `nodeToNodeEncryption` block is not provided then this defaults to `false`. Enabling node-to-node encryption of a new domain requires an `engineVersion` of `OpenSearch_X.Y` or `Elasticsearch_6.0` or greater.
          */
         enabled: boolean;
         /**
@@ -25678,6 +25711,10 @@ export declare namespace opensearch {
         value: number;
     }
     interface DomainClusterConfig {
+        /**
+         * Configuration block containing cold storage configuration. Detailed below.
+         */
+        coldStorageOptions: outputs.opensearch.DomainClusterConfigColdStorageOptions;
         /**
          * Number of dedicated main nodes in the cluster.
          */
@@ -25719,6 +25756,12 @@ export declare namespace opensearch {
          */
         zoneAwarenessEnabled?: boolean;
     }
+    interface DomainClusterConfigColdStorageOptions {
+        /**
+         * Whether to enable node-to-node encryption. If the `nodeToNodeEncryption` block is not provided then this defaults to `false`. Enabling node-to-node encryption of a new domain requires an `engineVersion` of `OpenSearch_X.Y` or `Elasticsearch_6.0` or greater.
+         */
+        enabled: boolean;
+    }
     interface DomainClusterConfigZoneAwarenessConfig {
         /**
          * Number of Availability Zones for the domain to use with `zoneAwarenessEnabled`. Defaults to `2`. Valid values: `2` or `3`.
@@ -25727,7 +25770,7 @@ export declare namespace opensearch {
     }
     interface DomainCognitoOptions {
         /**
-         * Whether to enable node-to-node encryption. If the `nodeToNodeEncryption` block is not provided then this defaults to `false`.
+         * Whether to enable node-to-node encryption. If the `nodeToNodeEncryption` block is not provided then this defaults to `false`. Enabling node-to-node encryption of a new domain requires an `engineVersion` of `OpenSearch_X.Y` or `Elasticsearch_6.0` or greater.
          */
         enabled?: boolean;
         /**
@@ -25782,12 +25825,9 @@ export declare namespace opensearch {
     }
     interface DomainEncryptAtRest {
         /**
-         * Whether to enable node-to-node encryption. If the `nodeToNodeEncryption` block is not provided then this defaults to `false`.
+         * Whether to enable node-to-node encryption. If the `nodeToNodeEncryption` block is not provided then this defaults to `false`. Enabling node-to-node encryption of a new domain requires an `engineVersion` of `OpenSearch_X.Y` or `Elasticsearch_6.0` or greater.
          */
         enabled: boolean;
-        /**
-         * KMS key id to encrypt the OpenSearch domain with. If not specified then it defaults to using the `aws/es` service KMS key.
-         */
         kmsKeyId: string;
     }
     interface DomainLogPublishingOption {
@@ -25796,7 +25836,7 @@ export declare namespace opensearch {
          */
         cloudwatchLogGroupArn: string;
         /**
-         * Whether to enable node-to-node encryption. If the `nodeToNodeEncryption` block is not provided then this defaults to `false`.
+         * Whether to enable node-to-node encryption. If the `nodeToNodeEncryption` block is not provided then this defaults to `false`. Enabling node-to-node encryption of a new domain requires an `engineVersion` of `OpenSearch_X.Y` or `Elasticsearch_6.0` or greater.
          */
         enabled?: boolean;
         /**
@@ -25806,7 +25846,7 @@ export declare namespace opensearch {
     }
     interface DomainNodeToNodeEncryption {
         /**
-         * Whether to enable node-to-node encryption. If the `nodeToNodeEncryption` block is not provided then this defaults to `false`.
+         * Whether to enable node-to-node encryption. If the `nodeToNodeEncryption` block is not provided then this defaults to `false`. Enabling node-to-node encryption of a new domain requires an `engineVersion` of `OpenSearch_X.Y` or `Elasticsearch_6.0` or greater.
          */
         enabled: boolean;
     }
@@ -25917,6 +25957,10 @@ export declare namespace opensearch {
         value: number;
     }
     interface GetDomainClusterConfig {
+        /**
+         * Configuration block containing cold storage configuration.
+         */
+        coldStorageOptions: outputs.opensearch.GetDomainClusterConfigColdStorageOption[];
         /**
          * Number of dedicated master nodes in the cluster.
          */
@@ -25958,6 +26002,12 @@ export declare namespace opensearch {
          */
         zoneAwarenessEnabled: boolean;
     }
+    interface GetDomainClusterConfigColdStorageOption {
+        /**
+         * Whether node to node encryption is enabled.
+         */
+        enabled: boolean;
+    }
     interface GetDomainClusterConfigZoneAwarenessConfig {
         /**
          * Number of availability zones used.
@@ -27420,6 +27470,7 @@ export declare namespace rds {
         description: string;
         iamAuth: string;
         secretArn: string;
+        username: string;
     }
     interface GlobalClusterGlobalClusterMember {
         /**
@@ -27544,6 +27595,10 @@ export declare namespace rds {
          * The Amazon Resource Name (ARN) representing the secret that the proxy uses to authenticate to the RDS DB instance or Aurora DB cluster. These secrets are stored within Amazon Secrets Manager.
          */
         secretArn?: string;
+        /**
+         * The name of the database user to which the proxy connects.
+         */
+        username?: string;
     }
     interface ProxyDefaultTargetGroupConnectionPoolConfig {
         /**
@@ -33406,6 +33461,22 @@ export declare namespace transfer {
          */
         vpcId?: string;
     }
+    interface ServerWorkflowDetails {
+        /**
+         * A trigger that starts a workflow: the workflow begins to execute after a file is uploaded. See Workflow Detail below.
+         */
+        onUpload?: outputs.transfer.ServerWorkflowDetailsOnUpload;
+    }
+    interface ServerWorkflowDetailsOnUpload {
+        /**
+         * Includes the necessary permissions for S3, EFS, and Lambda operations that Transfer can assume, so that all workflow steps can operate on the required resources.
+         */
+        executionRole: string;
+        /**
+         * A unique identifier for the workflow.
+         */
+        workflowId: string;
+    }
     interface UserHomeDirectoryMapping {
         /**
          * Represents an entry and a target.
@@ -33430,6 +33501,250 @@ export declare namespace transfer {
          */
         uid: number;
     }
+    interface WorkflowOnExceptionStep {
+        /**
+         * Details for a step that performs a file copy. See Copy Step Details below.
+         */
+        copyStepDetails?: outputs.transfer.WorkflowOnExceptionStepCopyStepDetails;
+        /**
+         * Details for a step that invokes a lambda function.
+         */
+        customStepDetails?: outputs.transfer.WorkflowOnExceptionStepCustomStepDetails;
+        /**
+         * Details for a step that deletes the file.
+         */
+        deleteStepDetails?: outputs.transfer.WorkflowOnExceptionStepDeleteStepDetails;
+        /**
+         * Details for a step that creates one or more tags.
+         */
+        tagStepDetails?: outputs.transfer.WorkflowOnExceptionStepTagStepDetails;
+        /**
+         * One of the following step types are supported. `COPY`, `CUSTOM`, `DELETE`, and `TAG`.
+         */
+        type: string;
+    }
+    interface WorkflowOnExceptionStepCopyStepDetails {
+        /**
+         * Specifies the location for the file being copied. Use ${Transfer:username} in this field to parametrize the destination prefix by username.
+         */
+        destinationFileLocation?: outputs.transfer.WorkflowOnExceptionStepCopyStepDetailsDestinationFileLocation;
+        /**
+         * The name of the step, used as an identifier.
+         */
+        name?: string;
+        /**
+         * A flag that indicates whether or not to overwrite an existing file of the same name. The default is `FALSE`. Valid values are `TRUE` and `FALSE`.
+         */
+        overwriteExisting?: string;
+        /**
+         * Specifies which file to use as input to the workflow step: either the output from the previous step, or the originally uploaded file for the workflow. Enter ${previous.file} to use the previous file as the input. In this case, this workflow step uses the output file from the previous workflow step as input. This is the default value. Enter ${original.file} to use the originally-uploaded file location as input for this step.
+         */
+        sourceFileLocation?: string;
+    }
+    interface WorkflowOnExceptionStepCopyStepDetailsDestinationFileLocation {
+        /**
+         * Specifies the details for the EFS file being copied.
+         */
+        efsFileLocation?: outputs.transfer.WorkflowOnExceptionStepCopyStepDetailsDestinationFileLocationEfsFileLocation;
+        /**
+         * Specifies the details for the S3 file being copied.
+         */
+        s3FileLocation?: outputs.transfer.WorkflowOnExceptionStepCopyStepDetailsDestinationFileLocationS3FileLocation;
+    }
+    interface WorkflowOnExceptionStepCopyStepDetailsDestinationFileLocationEfsFileLocation {
+        /**
+         * The ID of the file system, assigned by Amazon EFS.
+         */
+        fileSystemId?: string;
+        /**
+         * The pathname for the folder being used by a workflow.
+         */
+        path?: string;
+    }
+    interface WorkflowOnExceptionStepCopyStepDetailsDestinationFileLocationS3FileLocation {
+        /**
+         * Specifies the S3 bucket for the customer input file.
+         */
+        bucket?: string;
+        /**
+         * The name assigned to the tag that you create.
+         */
+        key?: string;
+    }
+    interface WorkflowOnExceptionStepCustomStepDetails {
+        /**
+         * The name of the step, used as an identifier.
+         */
+        name?: string;
+        /**
+         * Specifies which file to use as input to the workflow step: either the output from the previous step, or the originally uploaded file for the workflow. Enter ${previous.file} to use the previous file as the input. In this case, this workflow step uses the output file from the previous workflow step as input. This is the default value. Enter ${original.file} to use the originally-uploaded file location as input for this step.
+         */
+        sourceFileLocation?: string;
+        /**
+         * The ARN for the lambda function that is being called.
+         */
+        target?: string;
+        /**
+         * Timeout, in seconds, for the step.
+         */
+        timeoutSeconds?: number;
+    }
+    interface WorkflowOnExceptionStepDeleteStepDetails {
+        /**
+         * The name of the step, used as an identifier.
+         */
+        name?: string;
+        /**
+         * Specifies which file to use as input to the workflow step: either the output from the previous step, or the originally uploaded file for the workflow. Enter ${previous.file} to use the previous file as the input. In this case, this workflow step uses the output file from the previous workflow step as input. This is the default value. Enter ${original.file} to use the originally-uploaded file location as input for this step.
+         */
+        sourceFileLocation?: string;
+    }
+    interface WorkflowOnExceptionStepTagStepDetails {
+        /**
+         * The name of the step, used as an identifier.
+         */
+        name?: string;
+        /**
+         * Specifies which file to use as input to the workflow step: either the output from the previous step, or the originally uploaded file for the workflow. Enter ${previous.file} to use the previous file as the input. In this case, this workflow step uses the output file from the previous workflow step as input. This is the default value. Enter ${original.file} to use the originally-uploaded file location as input for this step.
+         */
+        sourceFileLocation?: string;
+        /**
+         * Array that contains from 1 to 10 key/value pairs. See S3 Tags below.
+         */
+        tags?: outputs.transfer.WorkflowOnExceptionStepTagStepDetailsTag[];
+    }
+    interface WorkflowOnExceptionStepTagStepDetailsTag {
+        /**
+         * The name assigned to the tag that you create.
+         */
+        key: string;
+        /**
+         * The value that corresponds to the key.
+         */
+        value: string;
+    }
+    interface WorkflowStep {
+        /**
+         * Details for a step that performs a file copy. See Copy Step Details below.
+         */
+        copyStepDetails?: outputs.transfer.WorkflowStepCopyStepDetails;
+        /**
+         * Details for a step that invokes a lambda function.
+         */
+        customStepDetails?: outputs.transfer.WorkflowStepCustomStepDetails;
+        /**
+         * Details for a step that deletes the file.
+         */
+        deleteStepDetails?: outputs.transfer.WorkflowStepDeleteStepDetails;
+        /**
+         * Details for a step that creates one or more tags.
+         */
+        tagStepDetails?: outputs.transfer.WorkflowStepTagStepDetails;
+        /**
+         * One of the following step types are supported. `COPY`, `CUSTOM`, `DELETE`, and `TAG`.
+         */
+        type: string;
+    }
+    interface WorkflowStepCopyStepDetails {
+        /**
+         * Specifies the location for the file being copied. Use ${Transfer:username} in this field to parametrize the destination prefix by username.
+         */
+        destinationFileLocation?: outputs.transfer.WorkflowStepCopyStepDetailsDestinationFileLocation;
+        /**
+         * The name of the step, used as an identifier.
+         */
+        name?: string;
+        /**
+         * A flag that indicates whether or not to overwrite an existing file of the same name. The default is `FALSE`. Valid values are `TRUE` and `FALSE`.
+         */
+        overwriteExisting?: string;
+        /**
+         * Specifies which file to use as input to the workflow step: either the output from the previous step, or the originally uploaded file for the workflow. Enter ${previous.file} to use the previous file as the input. In this case, this workflow step uses the output file from the previous workflow step as input. This is the default value. Enter ${original.file} to use the originally-uploaded file location as input for this step.
+         */
+        sourceFileLocation?: string;
+    }
+    interface WorkflowStepCopyStepDetailsDestinationFileLocation {
+        /**
+         * Specifies the details for the EFS file being copied.
+         */
+        efsFileLocation?: outputs.transfer.WorkflowStepCopyStepDetailsDestinationFileLocationEfsFileLocation;
+        /**
+         * Specifies the details for the S3 file being copied.
+         */
+        s3FileLocation?: outputs.transfer.WorkflowStepCopyStepDetailsDestinationFileLocationS3FileLocation;
+    }
+    interface WorkflowStepCopyStepDetailsDestinationFileLocationEfsFileLocation {
+        /**
+         * The ID of the file system, assigned by Amazon EFS.
+         */
+        fileSystemId?: string;
+        /**
+         * The pathname for the folder being used by a workflow.
+         */
+        path?: string;
+    }
+    interface WorkflowStepCopyStepDetailsDestinationFileLocationS3FileLocation {
+        /**
+         * Specifies the S3 bucket for the customer input file.
+         */
+        bucket?: string;
+        /**
+         * The name assigned to the tag that you create.
+         */
+        key?: string;
+    }
+    interface WorkflowStepCustomStepDetails {
+        /**
+         * The name of the step, used as an identifier.
+         */
+        name?: string;
+        /**
+         * Specifies which file to use as input to the workflow step: either the output from the previous step, or the originally uploaded file for the workflow. Enter ${previous.file} to use the previous file as the input. In this case, this workflow step uses the output file from the previous workflow step as input. This is the default value. Enter ${original.file} to use the originally-uploaded file location as input for this step.
+         */
+        sourceFileLocation?: string;
+        /**
+         * The ARN for the lambda function that is being called.
+         */
+        target?: string;
+        /**
+         * Timeout, in seconds, for the step.
+         */
+        timeoutSeconds?: number;
+    }
+    interface WorkflowStepDeleteStepDetails {
+        /**
+         * The name of the step, used as an identifier.
+         */
+        name?: string;
+        /**
+         * Specifies which file to use as input to the workflow step: either the output from the previous step, or the originally uploaded file for the workflow. Enter ${previous.file} to use the previous file as the input. In this case, this workflow step uses the output file from the previous workflow step as input. This is the default value. Enter ${original.file} to use the originally-uploaded file location as input for this step.
+         */
+        sourceFileLocation?: string;
+    }
+    interface WorkflowStepTagStepDetails {
+        /**
+         * The name of the step, used as an identifier.
+         */
+        name?: string;
+        /**
+         * Specifies which file to use as input to the workflow step: either the output from the previous step, or the originally uploaded file for the workflow. Enter ${previous.file} to use the previous file as the input. In this case, this workflow step uses the output file from the previous workflow step as input. This is the default value. Enter ${original.file} to use the originally-uploaded file location as input for this step.
+         */
+        sourceFileLocation?: string;
+        /**
+         * Array that contains from 1 to 10 key/value pairs. See S3 Tags below.
+         */
+        tags?: outputs.transfer.WorkflowStepTagStepDetailsTag[];
+    }
+    interface WorkflowStepTagStepDetailsTag {
+        /**
+         * The name assigned to the tag that you create.
+         */
+        key: string;
+        /**
+         * The value that corresponds to the key.
+         */
+        value: string;
+    }
 }
 export declare namespace waf {
     interface ByteMatchSetByteMatchTuple {