@pulumi/aws 5.27.0 → 5.28.0

package/iam/getPolicyDocument.d.ts

@@ -343,7 +343,7 @@ export declare function getPolicyDocument(args?: GetPolicyDocumentArgs, opts?: p
  */
 export interface GetPolicyDocumentArgs {
     /**
-     * - IAM policy document whose statements with non-blank `sid`s will override statements with the same `sid` from documents assigned to the `sourceJson`, `sourcePolicyDocuments`, and `overridePolicyDocuments` arguments. Non-overriding statements will be added to the exported document.
+     * IAM policy document whose statements with non-blank `sid`s will override statements with the same `sid` from documents assigned to the `sourceJson`, `sourcePolicyDocuments`, and `overridePolicyDocuments` arguments. Non-overriding statements will be added to the exported document.
      *
      * @deprecated Use the attribute "override_policy_documents" instead.
      */
@@ -357,7 +357,7 @@ export interface GetPolicyDocumentArgs {
      */
     policyId?: string;
     /**
-     * - IAM policy document used as a base for the exported policy document. Statements with the same `sid` from documents assigned to the `overrideJson` and `overridePolicyDocuments` arguments will override source statements.
+     * IAM policy document used as a base for the exported policy document. Statements with the same `sid` from documents assigned to the `overrideJson` and `overridePolicyDocuments` arguments will override source statements.
      *
      * @deprecated Use the attribute "source_policy_documents" instead.
      */
@@ -743,7 +743,7 @@ export declare function getPolicyDocumentOutput(args?: GetPolicyDocumentOutputAr
  */
 export interface GetPolicyDocumentOutputArgs {
     /**
-     * - IAM policy document whose statements with non-blank `sid`s will override statements with the same `sid` from documents assigned to the `sourceJson`, `sourcePolicyDocuments`, and `overridePolicyDocuments` arguments. Non-overriding statements will be added to the exported document.
+     * IAM policy document whose statements with non-blank `sid`s will override statements with the same `sid` from documents assigned to the `sourceJson`, `sourcePolicyDocuments`, and `overridePolicyDocuments` arguments. Non-overriding statements will be added to the exported document.
      *
      * @deprecated Use the attribute "override_policy_documents" instead.
      */
@@ -757,7 +757,7 @@ export interface GetPolicyDocumentOutputArgs {
      */
     policyId?: pulumi.Input<string>;
     /**
-     * - IAM policy document used as a base for the exported policy document. Statements with the same `sid` from documents assigned to the `overrideJson` and `overridePolicyDocuments` arguments will override source statements.
+     * IAM policy document used as a base for the exported policy document. Statements with the same `sid` from documents assigned to the `overrideJson` and `overridePolicyDocuments` arguments will override source statements.
      *
      * @deprecated Use the attribute "source_policy_documents" instead.
      */

package/iam/getServerCertificate.d.ts

@@ -47,9 +47,21 @@ export interface GetServerCertificateArgs {
  * A collection of values returned by getServerCertificate.
  */
 export interface GetServerCertificateResult {
+    /**
+     * is set to the ARN of the IAM Server Certificate
+     */
     readonly arn: string;
+    /**
+     * is the public key certificate (PEM-encoded). This is useful when [configuring back-end instance authentication](http://docs.aws.amazon.com/elasticloadbalancing/latest/classic/elb-create-https-ssl-load-balancer.html) policy for load balancer
+     */
     readonly certificateBody: string;
+    /**
+     * is the public key certificate chain (PEM-encoded) if exists, empty otherwise
+     */
     readonly certificateChain: string;
+    /**
+     * is set to the expiration date of the IAM Server Certificate
+     */
     readonly expirationDate: string;
     /**
      * The provider-assigned unique ID for this managed resource.
@@ -58,8 +70,14 @@ export interface GetServerCertificateResult {
     readonly latest?: boolean;
     readonly name: string;
     readonly namePrefix?: string;
+    /**
+     * is set to the path of the IAM Server Certificate
+     */
     readonly path: string;
     readonly pathPrefix?: string;
+    /**
+     * is the date when the server certificate was uploaded
+     */
     readonly uploadDate: string;
 }
 /**

package/iam/getServerCertificate.js.map

@@ -1 +1 @@
-{"version":3,"file":"getServerCertificate.js","sourceRoot":"","sources":["../../iam/getServerCertificate.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,SAAgB,oBAAoB,CAAC,IAA+B,EAAE,IAA2B;IAC7F,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;IAElB,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,mDAAmD,EAAE;QAC9E,QAAQ,EAAE,IAAI,CAAC,MAAM;QACrB,MAAM,EAAE,IAAI,CAAC,IAAI;QACjB,YAAY,EAAE,IAAI,CAAC,UAAU;QAC7B,YAAY,EAAE,IAAI,CAAC,UAAU;KAChC,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAVD,oDAUC;AA2CD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,SAAgB,0BAA0B,CAAC,IAAqC,EAAE,IAA2B;IACzG,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;AAC/E,CAAC;AAFD,gEAEC"}
+{"version":3,"file":"getServerCertificate.js","sourceRoot":"","sources":["../../iam/getServerCertificate.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,SAAgB,oBAAoB,CAAC,IAA+B,EAAE,IAA2B;IAC7F,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;IAElB,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,mDAAmD,EAAE;QAC9E,QAAQ,EAAE,IAAI,CAAC,MAAM;QACrB,MAAM,EAAE,IAAI,CAAC,IAAI;QACjB,YAAY,EAAE,IAAI,CAAC,UAAU;QAC7B,YAAY,EAAE,IAAI,CAAC,UAAU;KAChC,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAVD,oDAUC;AA6DD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,SAAgB,0BAA0B,CAAC,IAAqC,EAAE,IAA2B;IACzG,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;AAC/E,CAAC;AAFD,gEAEC"}

package/iam/role.d.ts

@@ -205,7 +205,7 @@ export declare class Role extends pulumi.CustomResource {
      */
     readonly maxSessionDuration: pulumi.Output<number | undefined>;
     /**
-     * Name of the role policy.
+     * Friendly name of the role. If omitted, this provider will assign a random, unique name. See [IAM Identifiers](https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html) for more information.
      */
     readonly name: pulumi.Output<string>;
     /**
@@ -279,7 +279,7 @@ export interface RoleState {
      */
     maxSessionDuration?: pulumi.Input<number>;
     /**
-     * Name of the role policy.
+     * Friendly name of the role. If omitted, this provider will assign a random, unique name. See [IAM Identifiers](https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html) for more information.
      */
     name?: pulumi.Input<string>;
     /**
@@ -337,7 +337,7 @@ export interface RoleArgs {
      */
     maxSessionDuration?: pulumi.Input<number>;
     /**
-     * Name of the role policy.
+     * Friendly name of the role. If omitted, this provider will assign a random, unique name. See [IAM Identifiers](https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html) for more information.
      */
     name?: pulumi.Input<string>;
     /**

package/imagebuilder/containerRecipe.d.ts

@@ -99,11 +99,11 @@ export declare class ContainerRecipe extends pulumi.CustomResource {
      */
     readonly instanceConfiguration: pulumi.Output<outputs.imagebuilder.ContainerRecipeInstanceConfiguration | undefined>;
     /**
-     * Amazon Resource Name (ARN) of the Key Management Service (KMS) Key for encryption.
+     * The KMS key used to encrypt the container image.
      */
     readonly kmsKeyId: pulumi.Output<string | undefined>;
     /**
-     * The name of the component parameter.
+     * The name of the container recipe.
      */
     readonly name: pulumi.Output<string>;
     /**
@@ -192,11 +192,11 @@ export interface ContainerRecipeState {
      */
     instanceConfiguration?: pulumi.Input<inputs.imagebuilder.ContainerRecipeInstanceConfiguration>;
     /**
-     * Amazon Resource Name (ARN) of the Key Management Service (KMS) Key for encryption.
+     * The KMS key used to encrypt the container image.
      */
     kmsKeyId?: pulumi.Input<string>;
     /**
-     * The name of the component parameter.
+     * The name of the container recipe.
      */
     name?: pulumi.Input<string>;
     /**
@@ -265,11 +265,11 @@ export interface ContainerRecipeArgs {
      */
     instanceConfiguration?: pulumi.Input<inputs.imagebuilder.ContainerRecipeInstanceConfiguration>;
     /**
-     * Amazon Resource Name (ARN) of the Key Management Service (KMS) Key for encryption.
+     * The KMS key used to encrypt the container image.
      */
     kmsKeyId?: pulumi.Input<string>;
     /**
-     * The name of the component parameter.
+     * The name of the container recipe.
      */
     name?: pulumi.Input<string>;
     /**

package/imagebuilder/distributionConfiguration.d.ts

@@ -64,7 +64,7 @@ export declare class DistributionConfiguration extends pulumi.CustomResource {
      */
     readonly dateUpdated: pulumi.Output<string>;
     /**
-     * Description of the container distribution configuration.
+     * Description of the distribution configuration.
      */
     readonly description: pulumi.Output<string | undefined>;
     /**
@@ -72,7 +72,7 @@ export declare class DistributionConfiguration extends pulumi.CustomResource {
      */
     readonly distributions: pulumi.Output<outputs.imagebuilder.DistributionConfigurationDistribution[]>;
     /**
-     * Name to apply to the distributed AMI.
+     * Name of the distribution configuration.
      */
     readonly name: pulumi.Output<string>;
     /**
@@ -113,7 +113,7 @@ export interface DistributionConfigurationState {
      */
     dateUpdated?: pulumi.Input<string>;
     /**
-     * Description of the container distribution configuration.
+     * Description of the distribution configuration.
      */
     description?: pulumi.Input<string>;
     /**
@@ -121,7 +121,7 @@ export interface DistributionConfigurationState {
      */
     distributions?: pulumi.Input<pulumi.Input<inputs.imagebuilder.DistributionConfigurationDistribution>[]>;
     /**
-     * Name to apply to the distributed AMI.
+     * Name of the distribution configuration.
      */
     name?: pulumi.Input<string>;
     /**
@@ -142,7 +142,7 @@ export interface DistributionConfigurationState {
  */
 export interface DistributionConfigurationArgs {
     /**
-     * Description of the container distribution configuration.
+     * Description of the distribution configuration.
      */
     description?: pulumi.Input<string>;
     /**
@@ -150,7 +150,7 @@ export interface DistributionConfigurationArgs {
      */
     distributions: pulumi.Input<pulumi.Input<inputs.imagebuilder.DistributionConfigurationDistribution>[]>;
     /**
-     * Name to apply to the distributed AMI.
+     * Name of the distribution configuration.
      */
     name?: pulumi.Input<string>;
     /**

package/imagebuilder/image.d.ts

@@ -46,7 +46,7 @@ export declare class Image extends pulumi.CustomResource {
      */
     readonly arn: pulumi.Output<string>;
     /**
-     * - Amazon Resource Name (ARN) of the container recipe.
+     * Amazon Resource Name (ARN) of the container recipe.
      */
     readonly containerRecipeArn: pulumi.Output<string | undefined>;
     /**
@@ -123,7 +123,7 @@ export interface ImageState {
      */
     arn?: pulumi.Input<string>;
     /**
-     * - Amazon Resource Name (ARN) of the container recipe.
+     * Amazon Resource Name (ARN) of the container recipe.
      */
     containerRecipeArn?: pulumi.Input<string>;
     /**
@@ -188,7 +188,7 @@ export interface ImageState {
  */
 export interface ImageArgs {
     /**
-     * - Amazon Resource Name (ARN) of the container recipe.
+     * Amazon Resource Name (ARN) of the container recipe.
      */
     containerRecipeArn?: pulumi.Input<string>;
     /**

package/imagebuilder/imageRecipe.d.ts

@@ -82,7 +82,7 @@ export declare class ImageRecipe extends pulumi.CustomResource {
      */
     readonly description: pulumi.Output<string | undefined>;
     /**
-     * The name of the component parameter.
+     * Name of the image recipe.
      */
     readonly name: pulumi.Output<string>;
     /**
@@ -159,7 +159,7 @@ export interface ImageRecipeState {
      */
     description?: pulumi.Input<string>;
     /**
-     * The name of the component parameter.
+     * Name of the image recipe.
      */
     name?: pulumi.Input<string>;
     /**
@@ -220,7 +220,7 @@ export interface ImageRecipeArgs {
      */
     description?: pulumi.Input<string>;
     /**
-     * The name of the component parameter.
+     * Name of the image recipe.
      */
     name?: pulumi.Input<string>;
     /**

package/kms/getKey.d.ts

@@ -48,13 +48,37 @@ export interface GetKeyArgs {
  * A collection of values returned by getKey.
  */
 export interface GetKeyResult {
+    /**
+     * The key ARN of a primary or replica key of a multi-Region key.
+     */
     readonly arn: string;
+    /**
+     * The twelve-digit account ID of the AWS account that owns the key
+     */
     readonly awsAccountId: string;
+    /**
+     * The date and time when the key was created
+     */
     readonly creationDate: string;
+    /**
+     * Specifies whether the key contains a symmetric key or an asymmetric key pair and the encryption algorithms or signing algorithms that the key supports
+     */
     readonly customerMasterKeySpec: string;
+    /**
+     * The date and time after which AWS KMS deletes the key. This value is present only when `keyState` is `PendingDeletion`, otherwise this value is 0
+     */
     readonly deletionDate: string;
+    /**
+     * The description of the key.
+     */
     readonly description: string;
+    /**
+     * Specifies whether the key is enabled. When `keyState` is `Enabled` this value is true, otherwise it is false
+     */
     readonly enabled: boolean;
+    /**
+     * Specifies whether the Key's key material expires. This value is present only when `origin` is `EXTERNAL`, otherwise this value is empty
+     */
     readonly expirationModel: string;
     readonly grantTokens?: string[];
     /**
@@ -62,12 +86,33 @@ export interface GetKeyResult {
      */
     readonly id: string;
     readonly keyId: string;
+    /**
+     * The key's manager
+     */
     readonly keyManager: string;
+    /**
+     * The state of the key
+     */
     readonly keyState: string;
+    /**
+     * Specifies the intended use of the key
+     */
     readonly keyUsage: string;
+    /**
+     * Indicates whether the KMS key is a multi-Region (`true`) or regional (`false`) key.
+     */
     readonly multiRegion: boolean;
+    /**
+     * Lists the primary and replica keys in same multi-Region key. Present only when the value of `multiRegion` is `true`.
+     */
     readonly multiRegionConfigurations: outputs.kms.GetKeyMultiRegionConfiguration[];
+    /**
+     * When this value is `AWS_KMS`, AWS KMS created the key material. When this value is `EXTERNAL`, the key material was imported from your existing key management infrastructure or the CMK lacks key material
+     */
     readonly origin: string;
+    /**
+     * The time at which the imported key material expires. This value is present only when `origin` is `EXTERNAL` and whose `expirationModel` is `KEY_MATERIAL_EXPIRES`, otherwise this value is 0
+     */
     readonly validTo: string;
 }
 /**

package/kms/getKey.js.map

@@ -1 +1 @@
-{"version":3,"file":"getKey.js","sourceRoot":"","sources":["../../kms/getKey.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAIzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,SAAgB,MAAM,CAAC,IAAgB,EAAE,IAA2B;IAEhE,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,uBAAuB,EAAE;QAClD,aAAa,EAAE,IAAI,CAAC,WAAW;QAC/B,OAAO,EAAE,IAAI,CAAC,KAAK;KACtB,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAPD,wBAOC;AA8CD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,SAAgB,YAAY,CAAC,IAAsB,EAAE,IAA2B;IAC5E,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;AACjE,CAAC;AAFD,oCAEC"}
+{"version":3,"file":"getKey.js","sourceRoot":"","sources":["../../kms/getKey.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAIzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,SAAgB,MAAM,CAAC,IAAgB,EAAE,IAA2B;IAEhE,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,uBAAuB,EAAE;QAClD,aAAa,EAAE,IAAI,CAAC,WAAW;QAC/B,OAAO,EAAE,IAAI,CAAC,KAAK;KACtB,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAPD,wBAOC;AA2FD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,SAAgB,YAAY,CAAC,IAAsB,EAAE,IAA2B;IAC5E,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;AACjE,CAAC;AAFD,oCAEC"}

package/kms/grant.d.ts

@@ -98,7 +98,7 @@ export declare class Grant extends pulumi.CustomResource {
      */
     readonly operations: pulumi.Output<string[]>;
     /**
-     * -(Defaults to false, Forces new resources) If set to false (the default) the grants will be revoked upon deletion, and if set to true the grants will try to be retired upon deletion. Note that retiring grants requires special permissions, hence why we default to revoking grants.
+     * If set to false (the default) the grants will be revoked upon deletion, and if set to true the grants will try to be retired upon deletion. Note that retiring grants requires special permissions, hence why we default to revoking grants.
      * See [RetireGrant](https://docs.aws.amazon.com/kms/latest/APIReference/API_RetireGrant.html) for more information.
      */
     readonly retireOnDelete: pulumi.Output<boolean | undefined>;
@@ -152,7 +152,7 @@ export interface GrantState {
      */
     operations?: pulumi.Input<pulumi.Input<string>[]>;
     /**
-     * -(Defaults to false, Forces new resources) If set to false (the default) the grants will be revoked upon deletion, and if set to true the grants will try to be retired upon deletion. Note that retiring grants requires special permissions, hence why we default to revoking grants.
+     * If set to false (the default) the grants will be revoked upon deletion, and if set to true the grants will try to be retired upon deletion. Note that retiring grants requires special permissions, hence why we default to revoking grants.
      * See [RetireGrant](https://docs.aws.amazon.com/kms/latest/APIReference/API_RetireGrant.html) for more information.
      */
     retireOnDelete?: pulumi.Input<boolean>;
@@ -190,7 +190,7 @@ export interface GrantArgs {
      */
     operations: pulumi.Input<pulumi.Input<string>[]>;
     /**
-     * -(Defaults to false, Forces new resources) If set to false (the default) the grants will be revoked upon deletion, and if set to true the grants will try to be retired upon deletion. Note that retiring grants requires special permissions, hence why we default to revoking grants.
+     * If set to false (the default) the grants will be revoked upon deletion, and if set to true the grants will try to be retired upon deletion. Note that retiring grants requires special permissions, hence why we default to revoking grants.
      * See [RetireGrant](https://docs.aws.amazon.com/kms/latest/APIReference/API_RetireGrant.html) for more information.
      */
     retireOnDelete?: pulumi.Input<boolean>;

package/lakeformation/getPermissions.d.ts

@@ -67,7 +67,7 @@ export declare function getPermissions(args: GetPermissionsArgs, opts?: pulumi.I
  */
 export interface GetPermissionsArgs {
     /**
-     * Identifier for the Data Catalog. By default, it is the account ID of the caller.
+     * Identifier for the Data Catalog. By default, the account ID. The Data Catalog is the persistent metadata store. It contains database definitions, table definitions, and other control information to manage your Lake Formation environment.
      */
     catalogId?: string;
     /**
@@ -195,7 +195,7 @@ export declare function getPermissionsOutput(args: GetPermissionsOutputArgs, opt
  */
 export interface GetPermissionsOutputArgs {
     /**
-     * Identifier for the Data Catalog. By default, it is the account ID of the caller.
+     * Identifier for the Data Catalog. By default, the account ID. The Data Catalog is the persistent metadata store. It contains database definitions, table definitions, and other control information to manage your Lake Formation environment.
      */
     catalogId?: pulumi.Input<string>;
     /**

package/lakeformation/permissions.d.ts

@@ -168,7 +168,7 @@ export declare class Permissions extends pulumi.CustomResource {
      */
     static isInstance(obj: any): obj is Permissions;
     /**
-     * Identifier for the Data Catalog. By default, it is the account ID of the caller.
+     * Identifier for the Data Catalog. By default, the account ID. The Data Catalog is the persistent metadata store. It contains database definitions, table definitions, and other control information to manage your Lake Formation environment.
      */
     readonly catalogId: pulumi.Output<string | undefined>;
     /**
@@ -225,7 +225,7 @@ export declare class Permissions extends pulumi.CustomResource {
  */
 export interface PermissionsState {
     /**
-     * Identifier for the Data Catalog. By default, it is the account ID of the caller.
+     * Identifier for the Data Catalog. By default, the account ID. The Data Catalog is the persistent metadata store. It contains database definitions, table definitions, and other control information to manage your Lake Formation environment.
      */
     catalogId?: pulumi.Input<string>;
     /**
@@ -274,7 +274,7 @@ export interface PermissionsState {
  */
 export interface PermissionsArgs {
     /**
-     * Identifier for the Data Catalog. By default, it is the account ID of the caller.
+     * Identifier for the Data Catalog. By default, the account ID. The Data Catalog is the persistent metadata store. It contains database definitions, table definitions, and other control information to manage your Lake Formation environment.
      */
     catalogId?: pulumi.Input<string>;
     /**

package/lakeformation/resourceLfTags.d.ts

@@ -99,7 +99,7 @@ export declare class ResourceLfTags extends pulumi.CustomResource {
      */
     static isInstance(obj: any): obj is ResourceLfTags;
     /**
-     * Identifier for the Data Catalog. By default, it is the account ID of the caller.
+     * Identifier for the Data Catalog. By default, the account ID. The Data Catalog is the persistent metadata store. It contains database definitions, table definitions, and other control information to manage your Lake Formation environment.
      */
     readonly catalogId: pulumi.Output<string>;
     /**
@@ -132,7 +132,7 @@ export declare class ResourceLfTags extends pulumi.CustomResource {
  */
 export interface ResourceLfTagsState {
     /**
-     * Identifier for the Data Catalog. By default, it is the account ID of the caller.
+     * Identifier for the Data Catalog. By default, the account ID. The Data Catalog is the persistent metadata store. It contains database definitions, table definitions, and other control information to manage your Lake Formation environment.
      */
     catalogId?: pulumi.Input<string>;
     /**
@@ -157,7 +157,7 @@ export interface ResourceLfTagsState {
  */
 export interface ResourceLfTagsArgs {
     /**
-     * Identifier for the Data Catalog. By default, it is the account ID of the caller.
+     * Identifier for the Data Catalog. By default, the account ID. The Data Catalog is the persistent metadata store. It contains database definitions, table definitions, and other control information to manage your Lake Formation environment.
      */
     catalogId?: pulumi.Input<string>;
     /**

package/lambda/eventSourceMapping.d.ts

@@ -188,11 +188,15 @@ export declare class EventSourceMapping extends pulumi.CustomResource {
     readonly amazonManagedKafkaEventSourceConfig: pulumi.Output<outputs.lambda.EventSourceMappingAmazonManagedKafkaEventSourceConfig>;
     /**
      * The largest number of records that Lambda will retrieve from your event source at the time of invocation. Defaults to `100` for DynamoDB, Kinesis, MQ and MSK, `10` for SQS.
-     * * `bisectBatchOnFunctionError`: - (Optional) If the function returns an error, split the batch in two and retry. Only available for stream sources (DynamoDB and Kinesis). Defaults to `false`.
-     * * `destinationConfig`: - (Optional) An Amazon SQS queue or Amazon SNS topic destination for failed records. Only available for stream sources (DynamoDB and Kinesis). Detailed below.
      */
     readonly batchSize: pulumi.Output<number | undefined>;
+    /**
+     * - (Optional) If the function returns an error, split the batch in two and retry. Only available for stream sources (DynamoDB and Kinesis). Defaults to `false`.
+     */
     readonly bisectBatchOnFunctionError: pulumi.Output<boolean | undefined>;
+    /**
+     * - (Optional) An Amazon SQS queue or Amazon SNS topic destination for failed records. Only available for stream sources (DynamoDB and Kinesis). Detailed below.
+     */
     readonly destinationConfig: pulumi.Output<outputs.lambda.EventSourceMappingDestinationConfig | undefined>;
     /**
      * Determines if the mapping will be enabled on creation. Defaults to `true`.
@@ -228,25 +232,35 @@ export declare class EventSourceMapping extends pulumi.CustomResource {
     readonly lastProcessingResult: pulumi.Output<string>;
     /**
      * The maximum amount of time to gather records before invoking the function, in seconds (between 0 and 300). Records will continue to buffer (or accumulate in the case of an SQS queue event source) until either `maximumBatchingWindowInSeconds` expires or `batchSize` has been met. For streaming event sources, defaults to as soon as records are available in the stream. If the batch it reads from the stream/queue only has one record in it, Lambda only sends one record to the function. Only available for stream sources (DynamoDB and Kinesis) and SQS standard queues.
-     * * `maximumRecordAgeInSeconds`: - (Optional) The maximum age of a record that Lambda sends to a function for processing. Only available for stream sources (DynamoDB and Kinesis). Must be either -1 (forever, and the default value) or between 60 and 604800 (inclusive).
-     * * `maximumRetryAttempts`: - (Optional) The maximum number of times to retry when the function returns an error. Only available for stream sources (DynamoDB and Kinesis). Minimum and default of -1 (forever), maximum of 10000.
-     * * `parallelizationFactor`: - (Optional) The number of batches to process from each shard concurrently. Only available for stream sources (DynamoDB and Kinesis). Minimum and default of 1, maximum of 10.
      */
     readonly maximumBatchingWindowInSeconds: pulumi.Output<number | undefined>;
+    /**
+     * - (Optional) The maximum age of a record that Lambda sends to a function for processing. Only available for stream sources (DynamoDB and Kinesis). Must be either -1 (forever, and the default value) or between 60 and 604800 (inclusive).
+     */
     readonly maximumRecordAgeInSeconds: pulumi.Output<number>;
+    /**
+     * - (Optional) The maximum number of times to retry when the function returns an error. Only available for stream sources (DynamoDB and Kinesis). Minimum and default of -1 (forever), maximum of 10000.
+     */
     readonly maximumRetryAttempts: pulumi.Output<number>;
+    /**
+     * - (Optional) The number of batches to process from each shard concurrently. Only available for stream sources (DynamoDB and Kinesis). Minimum and default of 1, maximum of 10.
+     */
     readonly parallelizationFactor: pulumi.Output<number>;
     /**
      * The name of the Amazon MQ broker destination queue to consume. Only available for MQ sources. A single queue name must be specified.
-     * * `selfManagedEventSource`: - (Optional) For Self Managed Kafka sources, the location of the self managed cluster. If set, configuration must also include `sourceAccessConfiguration`. Detailed below.
      */
     readonly queues: pulumi.Output<string[] | undefined>;
+    /**
+     * - (Optional) For Self Managed Kafka sources, the location of the self managed cluster. If set, configuration must also include `sourceAccessConfiguration`. Detailed below.
+     */
     readonly selfManagedEventSource: pulumi.Output<outputs.lambda.EventSourceMappingSelfManagedEventSource | undefined>;
     /**
      * Additional configuration block for Self Managed Kafka sources. Incompatible with "eventSourceArn" and "amazonManagedKafkaEventSourceConfig". Detailed below.
-     * * `sourceAccessConfiguration`: (Optional) For Self Managed Kafka sources, the access configuration for the source. If set, configuration must also include `selfManagedEventSource`. Detailed below.
      */
     readonly selfManagedKafkaEventSourceConfig: pulumi.Output<outputs.lambda.EventSourceMappingSelfManagedKafkaEventSourceConfig>;
+    /**
+     * For Self Managed Kafka sources, the access configuration for the source. If set, configuration must also include `selfManagedEventSource`. Detailed below.
+     */
     readonly sourceAccessConfigurations: pulumi.Output<outputs.lambda.EventSourceMappingSourceAccessConfiguration[] | undefined>;
     /**
      * The position in the stream where AWS Lambda should start reading. Must be one of `AT_TIMESTAMP` (Kinesis only), `LATEST` or `TRIM_HORIZON` if getting events from Kinesis, DynamoDB or MSK. Must not be provided if getting events from SQS. More information about these positions can be found in the [AWS DynamoDB Streams API Reference](https://docs.aws.amazon.com/amazondynamodb/latest/APIReference/API_streams_GetShardIterator.html) and [AWS Kinesis API Reference](https://docs.aws.amazon.com/kinesis/latest/APIReference/API_GetShardIterator.html#Kinesis-GetShardIterator-request-ShardIteratorType).
@@ -295,11 +309,15 @@ export interface EventSourceMappingState {
     amazonManagedKafkaEventSourceConfig?: pulumi.Input<inputs.lambda.EventSourceMappingAmazonManagedKafkaEventSourceConfig>;
     /**
      * The largest number of records that Lambda will retrieve from your event source at the time of invocation. Defaults to `100` for DynamoDB, Kinesis, MQ and MSK, `10` for SQS.
-     * * `bisectBatchOnFunctionError`: - (Optional) If the function returns an error, split the batch in two and retry. Only available for stream sources (DynamoDB and Kinesis). Defaults to `false`.
-     * * `destinationConfig`: - (Optional) An Amazon SQS queue or Amazon SNS topic destination for failed records. Only available for stream sources (DynamoDB and Kinesis). Detailed below.
      */
     batchSize?: pulumi.Input<number>;
+    /**
+     * - (Optional) If the function returns an error, split the batch in two and retry. Only available for stream sources (DynamoDB and Kinesis). Defaults to `false`.
+     */
     bisectBatchOnFunctionError?: pulumi.Input<boolean>;
+    /**
+     * - (Optional) An Amazon SQS queue or Amazon SNS topic destination for failed records. Only available for stream sources (DynamoDB and Kinesis). Detailed below.
+     */
     destinationConfig?: pulumi.Input<inputs.lambda.EventSourceMappingDestinationConfig>;
     /**
      * Determines if the mapping will be enabled on creation. Defaults to `true`.
@@ -335,25 +353,35 @@ export interface EventSourceMappingState {
     lastProcessingResult?: pulumi.Input<string>;
     /**
      * The maximum amount of time to gather records before invoking the function, in seconds (between 0 and 300). Records will continue to buffer (or accumulate in the case of an SQS queue event source) until either `maximumBatchingWindowInSeconds` expires or `batchSize` has been met. For streaming event sources, defaults to as soon as records are available in the stream. If the batch it reads from the stream/queue only has one record in it, Lambda only sends one record to the function. Only available for stream sources (DynamoDB and Kinesis) and SQS standard queues.
-     * * `maximumRecordAgeInSeconds`: - (Optional) The maximum age of a record that Lambda sends to a function for processing. Only available for stream sources (DynamoDB and Kinesis). Must be either -1 (forever, and the default value) or between 60 and 604800 (inclusive).
-     * * `maximumRetryAttempts`: - (Optional) The maximum number of times to retry when the function returns an error. Only available for stream sources (DynamoDB and Kinesis). Minimum and default of -1 (forever), maximum of 10000.
-     * * `parallelizationFactor`: - (Optional) The number of batches to process from each shard concurrently. Only available for stream sources (DynamoDB and Kinesis). Minimum and default of 1, maximum of 10.
      */
     maximumBatchingWindowInSeconds?: pulumi.Input<number>;
+    /**
+     * - (Optional) The maximum age of a record that Lambda sends to a function for processing. Only available for stream sources (DynamoDB and Kinesis). Must be either -1 (forever, and the default value) or between 60 and 604800 (inclusive).
+     */
     maximumRecordAgeInSeconds?: pulumi.Input<number>;
+    /**
+     * - (Optional) The maximum number of times to retry when the function returns an error. Only available for stream sources (DynamoDB and Kinesis). Minimum and default of -1 (forever), maximum of 10000.
+     */
     maximumRetryAttempts?: pulumi.Input<number>;
+    /**
+     * - (Optional) The number of batches to process from each shard concurrently. Only available for stream sources (DynamoDB and Kinesis). Minimum and default of 1, maximum of 10.
+     */
     parallelizationFactor?: pulumi.Input<number>;
     /**
      * The name of the Amazon MQ broker destination queue to consume. Only available for MQ sources. A single queue name must be specified.
-     * * `selfManagedEventSource`: - (Optional) For Self Managed Kafka sources, the location of the self managed cluster. If set, configuration must also include `sourceAccessConfiguration`. Detailed below.
      */
     queues?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * - (Optional) For Self Managed Kafka sources, the location of the self managed cluster. If set, configuration must also include `sourceAccessConfiguration`. Detailed below.
+     */
     selfManagedEventSource?: pulumi.Input<inputs.lambda.EventSourceMappingSelfManagedEventSource>;
     /**
      * Additional configuration block for Self Managed Kafka sources. Incompatible with "eventSourceArn" and "amazonManagedKafkaEventSourceConfig". Detailed below.
-     * * `sourceAccessConfiguration`: (Optional) For Self Managed Kafka sources, the access configuration for the source. If set, configuration must also include `selfManagedEventSource`. Detailed below.
      */
     selfManagedKafkaEventSourceConfig?: pulumi.Input<inputs.lambda.EventSourceMappingSelfManagedKafkaEventSourceConfig>;
+    /**
+     * For Self Managed Kafka sources, the access configuration for the source. If set, configuration must also include `selfManagedEventSource`. Detailed below.
+     */
     sourceAccessConfigurations?: pulumi.Input<pulumi.Input<inputs.lambda.EventSourceMappingSourceAccessConfiguration>[]>;
     /**
      * The position in the stream where AWS Lambda should start reading. Must be one of `AT_TIMESTAMP` (Kinesis only), `LATEST` or `TRIM_HORIZON` if getting events from Kinesis, DynamoDB or MSK. Must not be provided if getting events from SQS. More information about these positions can be found in the [AWS DynamoDB Streams API Reference](https://docs.aws.amazon.com/amazondynamodb/latest/APIReference/API_streams_GetShardIterator.html) and [AWS Kinesis API Reference](https://docs.aws.amazon.com/kinesis/latest/APIReference/API_GetShardIterator.html#Kinesis-GetShardIterator-request-ShardIteratorType).
@@ -394,11 +422,15 @@ export interface EventSourceMappingArgs {
     amazonManagedKafkaEventSourceConfig?: pulumi.Input<inputs.lambda.EventSourceMappingAmazonManagedKafkaEventSourceConfig>;
     /**
      * The largest number of records that Lambda will retrieve from your event source at the time of invocation. Defaults to `100` for DynamoDB, Kinesis, MQ and MSK, `10` for SQS.
-     * * `bisectBatchOnFunctionError`: - (Optional) If the function returns an error, split the batch in two and retry. Only available for stream sources (DynamoDB and Kinesis). Defaults to `false`.
-     * * `destinationConfig`: - (Optional) An Amazon SQS queue or Amazon SNS topic destination for failed records. Only available for stream sources (DynamoDB and Kinesis). Detailed below.
      */
     batchSize?: pulumi.Input<number>;
+    /**
+     * - (Optional) If the function returns an error, split the batch in two and retry. Only available for stream sources (DynamoDB and Kinesis). Defaults to `false`.
+     */
     bisectBatchOnFunctionError?: pulumi.Input<boolean>;
+    /**
+     * - (Optional) An Amazon SQS queue or Amazon SNS topic destination for failed records. Only available for stream sources (DynamoDB and Kinesis). Detailed below.
+     */
     destinationConfig?: pulumi.Input<inputs.lambda.EventSourceMappingDestinationConfig>;
     /**
      * Determines if the mapping will be enabled on creation. Defaults to `true`.
@@ -422,25 +454,35 @@ export interface EventSourceMappingArgs {
     functionResponseTypes?: pulumi.Input<pulumi.Input<string>[]>;
     /**
      * The maximum amount of time to gather records before invoking the function, in seconds (between 0 and 300). Records will continue to buffer (or accumulate in the case of an SQS queue event source) until either `maximumBatchingWindowInSeconds` expires or `batchSize` has been met. For streaming event sources, defaults to as soon as records are available in the stream. If the batch it reads from the stream/queue only has one record in it, Lambda only sends one record to the function. Only available for stream sources (DynamoDB and Kinesis) and SQS standard queues.
-     * * `maximumRecordAgeInSeconds`: - (Optional) The maximum age of a record that Lambda sends to a function for processing. Only available for stream sources (DynamoDB and Kinesis). Must be either -1 (forever, and the default value) or between 60 and 604800 (inclusive).
-     * * `maximumRetryAttempts`: - (Optional) The maximum number of times to retry when the function returns an error. Only available for stream sources (DynamoDB and Kinesis). Minimum and default of -1 (forever), maximum of 10000.
-     * * `parallelizationFactor`: - (Optional) The number of batches to process from each shard concurrently. Only available for stream sources (DynamoDB and Kinesis). Minimum and default of 1, maximum of 10.
      */
     maximumBatchingWindowInSeconds?: pulumi.Input<number>;
+    /**
+     * - (Optional) The maximum age of a record that Lambda sends to a function for processing. Only available for stream sources (DynamoDB and Kinesis). Must be either -1 (forever, and the default value) or between 60 and 604800 (inclusive).
+     */
     maximumRecordAgeInSeconds?: pulumi.Input<number>;
+    /**
+     * - (Optional) The maximum number of times to retry when the function returns an error. Only available for stream sources (DynamoDB and Kinesis). Minimum and default of -1 (forever), maximum of 10000.
+     */
     maximumRetryAttempts?: pulumi.Input<number>;
+    /**
+     * - (Optional) The number of batches to process from each shard concurrently. Only available for stream sources (DynamoDB and Kinesis). Minimum and default of 1, maximum of 10.
+     */
     parallelizationFactor?: pulumi.Input<number>;
     /**
      * The name of the Amazon MQ broker destination queue to consume. Only available for MQ sources. A single queue name must be specified.
-     * * `selfManagedEventSource`: - (Optional) For Self Managed Kafka sources, the location of the self managed cluster. If set, configuration must also include `sourceAccessConfiguration`. Detailed below.
      */
     queues?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * - (Optional) For Self Managed Kafka sources, the location of the self managed cluster. If set, configuration must also include `sourceAccessConfiguration`. Detailed below.
+     */
     selfManagedEventSource?: pulumi.Input<inputs.lambda.EventSourceMappingSelfManagedEventSource>;
     /**
      * Additional configuration block for Self Managed Kafka sources. Incompatible with "eventSourceArn" and "amazonManagedKafkaEventSourceConfig". Detailed below.
-     * * `sourceAccessConfiguration`: (Optional) For Self Managed Kafka sources, the access configuration for the source. If set, configuration must also include `selfManagedEventSource`. Detailed below.
      */
     selfManagedKafkaEventSourceConfig?: pulumi.Input<inputs.lambda.EventSourceMappingSelfManagedKafkaEventSourceConfig>;
+    /**
+     * For Self Managed Kafka sources, the access configuration for the source. If set, configuration must also include `selfManagedEventSource`. Detailed below.
+     */
     sourceAccessConfigurations?: pulumi.Input<pulumi.Input<inputs.lambda.EventSourceMappingSourceAccessConfiguration>[]>;
     /**
      * The position in the stream where AWS Lambda should start reading. Must be one of `AT_TIMESTAMP` (Kinesis only), `LATEST` or `TRIM_HORIZON` if getting events from Kinesis, DynamoDB or MSK. Must not be provided if getting events from SQS. More information about these positions can be found in the [AWS DynamoDB Streams API Reference](https://docs.aws.amazon.com/amazondynamodb/latest/APIReference/API_streams_GetShardIterator.html) and [AWS Kinesis API Reference](https://docs.aws.amazon.com/kinesis/latest/APIReference/API_GetShardIterator.html#Kinesis-GetShardIterator-request-ShardIteratorType).