@pulumi/aws 5.31.0 → 5.32.0

package/types/output.d.ts

@@ -5952,7 +5952,7 @@ export declare namespace apprunner {
          */
         runtime: string;
         /**
-         * Secrets and parameters available to your service as environment variables. A map of key/value pairs.
+         * Secrets and parameters available to your service as environment variables. A map of key/value pairs, where the key is the desired name of the Secret in the environment (i.e. it does not have to match the name of the secret in Secrets Manager or SSM Parameter Store), and the value is the ARN of the secret from AWS Secrets Manager or the ARN of the parameter in AWS SSM Parameter Store.
          */
         runtimeEnvironmentSecrets?: {
             [key: string]: string;
@@ -5999,7 +5999,7 @@ export declare namespace apprunner {
          */
         port?: string;
         /**
-         * Secrets and parameters available to your service as environment variables. A map of key/value pairs.
+         * Secrets and parameters available to your service as environment variables. A map of key/value pairs, where the key is the desired name of the Secret in the environment (i.e. it does not have to match the name of the secret in Secrets Manager or SSM Parameter Store), and the value is the ARN of the secret from AWS Secrets Manager or the ARN of the parameter in AWS SSM Parameter Store.
          */
         runtimeEnvironmentSecrets?: {
             [key: string]: string;
@@ -10659,7 +10659,7 @@ export declare namespace codebuild {
          */
         artifactIdentifier: string;
         /**
-         * Specifies the bucket owner's access for objects that another account uploads to their Amazon S3 bucket. By default, only the account that uploads the objects to the bucket has access to these objects. This property allows you to give the bucket owner access to these objects. Valid values are `NONE`, `READ_ONLY`, and `FULL`. your CodeBuild service role must have the `s3:PutBucketAcl` permission. This permission allows CodeBuild to modify the access control list for the bucket.
+         * Specifies the bucket owner's access for objects that another account uploads to their Amazon S3 bucket. By default, only the account that uploads the objects to the bucket has access to these objects. This property allows you to give the bucket owner access to these objects. Valid values are `NONE`, `READ_ONLY`, and `FULL`. The CodeBuild service role must have the `s3:PutBucketAcl` permission. This permission allows CodeBuild to modify the access control list for the bucket.
          */
         bucketOwnerAccess?: string;
         /**
@@ -10667,15 +10667,15 @@ export declare namespace codebuild {
          */
         encryptionDisabled?: boolean;
         /**
-         * Information about the build output artifact location. If `type` is set to `CODEPIPELINE` or `NO_ARTIFACTS`, this value is ignored. If `type` is set to `S3`, this is the name of the output bucket. If `path` is not also specified, then `location` can also specify the path of the output artifact in the output bucket.
+         * Information about the build output artifact location. If `type` is set to `CODEPIPELINE` or `NO_ARTIFACTS`, this value is ignored if specified. If `type` is set to `S3`, this is the name of the output bucket. If `path` is not specified, `location` can specify the path of the output artifact in the output bucket.
          */
         location?: string;
         /**
-         * Name of the project. If `type` is set to `S3`, this is the name of the output artifact object
+         * Name of the project. If `type` is set to `CODEPIPELINE` or `NO_ARTIFACTS`, this value is ignored if specified. If `type` is set to `S3`, this is the name of the output artifact object.
          */
         name?: string;
         /**
-         * Namespace to use in storing build artifacts. If `type` is set to `S3`, then valid values are `BUILD_ID` or `NONE`.
+         * Namespace to use in storing build artifacts. If `type` is set to `CODEPIPELINE` or `NO_ARTIFACTS`, this value is ignored if specified. If `type` is set to `S3`, valid values are `BUILD_ID` or `NONE`.
          */
         namespaceType?: string;
         /**
@@ -10683,15 +10683,15 @@ export declare namespace codebuild {
          */
         overrideArtifactName?: boolean;
         /**
-         * Type of build output artifact to create. If `type` is set to `S3`, valid values are `NONE`, `ZIP`
+         * Type of build output artifact to create. If `type` is set to `CODEPIPELINE` or `NO_ARTIFACTS`, this value is ignored if specified. If `type` is set to `S3`, valid values are `NONE` or `ZIP`.
          */
         packaging?: string;
         /**
-         * If `type` is set to `S3`, this is the path to the output artifact.
+         * Along with `namespaceType` and `name`, the pattern that AWS CodeBuild uses to name and store the output artifact. If `type` is set to `CODEPIPELINE` or `NO_ARTIFACTS`, this value is ignored if specified. If `type` is set to `S3`, this is the path to the output artifact.
          */
         path?: string;
         /**
-         * Build output artifact's type. The only valid value is `S3`.
+         * Build output artifact's type. Valid values `CODEPIPELINE`, `NO_ARTIFACTS`, and `S3`.
          */
         type: string;
     }
@@ -21705,6 +21705,140 @@ export declare namespace ecs {
         name: string;
         value: string;
     }
+    interface GetTaskExecutionCapacityProviderStrategy {
+        /**
+         * The number of tasks, at a minimum, to run on the specified capacity provider. Only one capacity provider in a capacity provider strategy can have a base defined. Defaults to `0`.
+         */
+        base?: number;
+        /**
+         * Name of the capacity provider.
+         */
+        capacityProvider: string;
+        /**
+         * The relative percentage of the total number of launched tasks that should use the specified capacity provider. The `weight` value is taken into consideration after the `base` count of tasks has been satisfied. Defaults to `0`.
+         */
+        weight?: number;
+    }
+    interface GetTaskExecutionNetworkConfiguration {
+        /**
+         * Assign a public IP address to the ENI (Fargate launch type only). Valid values are `true` or `false`. Default `false`.
+         */
+        assignPublicIp?: boolean;
+        /**
+         * Security groups associated with the task or service. If you do not specify a security group, the default security group for the VPC is used.
+         */
+        securityGroups?: string[];
+        /**
+         * Subnets associated with the task or service.
+         */
+        subnets: string[];
+    }
+    interface GetTaskExecutionOverrides {
+        /**
+         * One or more container overrides that are sent to a task. See below.
+         */
+        containerOverrides?: outputs.ecs.GetTaskExecutionOverridesContainerOverride[];
+        /**
+         * The CPU override for the task.
+         */
+        cpu?: string;
+        /**
+         * Amazon Resource Name (ARN) of the task execution role override for the task.
+         */
+        executionRoleArn?: string;
+        /**
+         * Elastic Inference accelerator override for the task. See below.
+         */
+        inferenceAcceleratorOverrides?: outputs.ecs.GetTaskExecutionOverridesInferenceAcceleratorOverride[];
+        /**
+         * The memory override for the task.
+         */
+        memory?: string;
+        /**
+         * Amazon Resource Name (ARN) of the role that containers in this task can assume.
+         */
+        taskRoleArn?: string;
+    }
+    interface GetTaskExecutionOverridesContainerOverride {
+        /**
+         * The command to send to the container that overrides the default command from the Docker image or the task definition.
+         */
+        commands?: string[];
+        /**
+         * The number of cpu units reserved for the container, instead of the default value from the task definition.
+         */
+        cpu?: number;
+        /**
+         * The environment variables to send to the container. You can add new environment variables, which are added to the container at launch, or you can override the existing environment variables from the Docker image or the task definition. See below.
+         */
+        environments?: outputs.ecs.GetTaskExecutionOverridesContainerOverrideEnvironment[];
+        /**
+         * The hard limit (in MiB) of memory to present to the container, instead of the default value from the task definition. If your container attempts to exceed the memory specified here, the container is killed.
+         */
+        memory?: number;
+        /**
+         * The soft limit (in MiB) of memory to reserve for the container, instead of the default value from the task definition.
+         */
+        memoryReservation?: number;
+        /**
+         * The name of the container that receives the override. This parameter is required if any override is specified.
+         */
+        name: string;
+        /**
+         * The type and amount of a resource to assign to a container, instead of the default value from the task definition. The only supported resource is a GPU. See below.
+         */
+        resourceRequirements?: outputs.ecs.GetTaskExecutionOverridesContainerOverrideResourceRequirement[];
+    }
+    interface GetTaskExecutionOverridesContainerOverrideEnvironment {
+        /**
+         * The name of the key-value pair. For environment variables, this is the name of the environment variable.
+         */
+        key: string;
+        /**
+         * The value of the key-value pair. For environment variables, this is the value of the environment variable.
+         */
+        value: string;
+    }
+    interface GetTaskExecutionOverridesContainerOverrideResourceRequirement {
+        /**
+         * The type of resource to assign to a container. Valid values are `GPU` or `InferenceAccelerator`.
+         */
+        type: string;
+        /**
+         * The value for the specified resource type. If the `GPU` type is used, the value is the number of physical GPUs the Amazon ECS container agent reserves for the container. The number of GPUs that's reserved for all containers in a task can't exceed the number of available GPUs on the container instance that the task is launched on. If the `InferenceAccelerator` type is used, the value matches the `deviceName` for an InferenceAccelerator specified in a task definition.
+         */
+        value: string;
+    }
+    interface GetTaskExecutionOverridesInferenceAcceleratorOverride {
+        /**
+         * The Elastic Inference accelerator device name to override for the task. This parameter must match a deviceName specified in the task definition.
+         */
+        deviceName?: string;
+        /**
+         * The Elastic Inference accelerator type to use.
+         */
+        deviceType?: string;
+    }
+    interface GetTaskExecutionPlacementConstraint {
+        /**
+         * A cluster query language expression to apply to the constraint. The expression can have a maximum length of 2000 characters. You can't specify an expression if the constraint type is `distinctInstance`.
+         */
+        expression?: string;
+        /**
+         * The type of constraint. Valid values are `distinctInstance` or `memberOf`. Use `distinctInstance` to ensure that each task in a particular group is running on a different container instance. Use `memberOf` to restrict the selection to a group of valid candidates.
+         */
+        type: string;
+    }
+    interface GetTaskExecutionPlacementStrategy {
+        /**
+         * The field to apply the placement strategy against.
+         */
+        field?: string;
+        /**
+         * The type of placement strategy. Valid values are `random`, `spread`, and `binpack`.
+         */
+        type: string;
+    }
     interface ServiceAlarms {
         alarmNames: string[];
         /**
@@ -27067,6 +27201,16 @@ export declare namespace glue {
     }
 }
 export declare namespace grafana {
+    interface WorkspaceNetworkAccessControl {
+        /**
+         * An array of prefix list IDs.
+         */
+        prefixListIds: string[];
+        /**
+         * An array of Amazon VPC endpoint IDs for the workspace. The only VPC endpoints that can be specified here are interface VPC endpoints for Grafana workspaces (using the com.amazonaws.[region].grafana-workspace service endpoint). Other VPC endpoints will be ignored.
+         */
+        vpceIds: string[];
+    }
     interface WorkspaceVpcConfiguration {
         /**
          * The list of Amazon EC2 security group IDs attached to the Amazon VPC for your Grafana workspace to connect.
@@ -33721,6 +33865,129 @@ export declare namespace lex {
         value: string;
     }
 }
+export declare namespace licensemanager {
+    interface GetLicenseGrantsFilter {
+        /**
+         * Name of the field to filter by, as defined by
+         * [the underlying AWS API](https://docs.aws.amazon.com/license-manager/latest/APIReference/API_ListReceivedGrants.html#API_ListReceivedGrants_RequestSyntax).
+         * For example, if filtering using `ProductSKU`, use:
+         */
+        name: string;
+        /**
+         * Set of values that are accepted for the given field.
+         */
+        values: string[];
+    }
+    interface GetReceivedLicenseConsumptionConfiguration {
+        /**
+         * Details about a borrow configuration. Detailed below
+         */
+        borrowConfigurations: outputs.licensemanager.GetReceivedLicenseConsumptionConfigurationBorrowConfiguration[];
+        /**
+         * Details about a provisional configuration. Detailed below
+         */
+        provisionalConfigurations: outputs.licensemanager.GetReceivedLicenseConsumptionConfigurationProvisionalConfiguration[];
+        renewType: string;
+    }
+    interface GetReceivedLicenseConsumptionConfigurationBorrowConfiguration {
+        /**
+         * Indicates whether early check-ins are allowed.
+         */
+        allowEarlyCheckIn: boolean;
+        /**
+         * Maximum time for the provisional configuration, in minutes.
+         */
+        maxTimeToLiveInMinutes: number;
+    }
+    interface GetReceivedLicenseConsumptionConfigurationProvisionalConfiguration {
+        /**
+         * Maximum time for the provisional configuration, in minutes.
+         */
+        maxTimeToLiveInMinutes: number;
+    }
+    interface GetReceivedLicenseEntitlement {
+        /**
+         * Indicates whether check-ins are allowed.
+         */
+        allowCheckIn: boolean;
+        /**
+         * Maximum entitlement count. Use if the unit is not None.
+         */
+        maxCount: number;
+        /**
+         * The key name.
+         */
+        name: string;
+        /**
+         * Entitlement unit.
+         */
+        unit: string;
+        /**
+         * The value.
+         */
+        value: string;
+    }
+    interface GetReceivedLicenseIssuer {
+        /**
+         * Issuer key fingerprint.
+         */
+        keyFingerprint: string;
+        /**
+         * The key name.
+         */
+        name: string;
+        /**
+         * Asymmetric KMS key from AWS Key Management Service. The KMS key must have a key usage of sign and verify, and support the RSASSA-PSS SHA-256 signing algorithm.
+         */
+        signKey: string;
+    }
+    interface GetReceivedLicenseLicenseMetadata {
+        /**
+         * The key name.
+         */
+        name: string;
+        /**
+         * The value.
+         */
+        value: string;
+    }
+    interface GetReceivedLicenseReceivedMetadata {
+        /**
+         * A list of allowed operations.
+         */
+        allowedOperations: string[];
+        /**
+         * Received status.
+         */
+        receivedStatus: string;
+        /**
+         * Received status reason.
+         */
+        receivedStatusReason: string;
+    }
+    interface GetReceivedLicenseValidity {
+        /**
+         * Start of the validity time range.
+         */
+        begin: string;
+        /**
+         * End of the validity time range.
+         */
+        end: string;
+    }
+    interface GetReceivedLicensesFilter {
+        /**
+         * Name of the field to filter by, as defined by
+         * [the underlying AWS API](https://docs.aws.amazon.com/license-manager/latest/APIReference/API_ListReceivedLicenses.html#API_ListReceivedLicenses_RequestSyntax).
+         * For example, if filtering using `ProductSKU`, use:
+         */
+        name: string;
+        /**
+         * Set of values that are accepted for the given field.
+         */
+        values: string[];
+    }
+}
 export declare namespace lightsail {
     interface CertificateDomainValidationOption {
         /**
@@ -40173,6 +40440,20 @@ export declare namespace rds {
          */
         enabled?: boolean;
     }
+    interface InstanceListenerEndpoint {
+        /**
+         * Specifies the DNS address of the DB instance.
+         */
+        address: string;
+        /**
+         * Specifies the ID that Amazon Route 53 assigns when you create a hosted zone.
+         */
+        hostedZoneId: string;
+        /**
+         * The port on which the DB accepts connections.
+         */
+        port: number;
+    }
     interface InstanceRestoreToPointInTime {
         /**
          * The date and time to restore from. Value must be a time in Universal Coordinated Time (UTC) format and must be before the latest restorable time for the DB instance. Cannot be specified with `useLatestRestorableTime`.
@@ -46902,6 +47183,28 @@ export declare namespace sesv2 {
          */
         customRedirectDomain: string;
     }
+    interface ConfigurationSetVdmOptions {
+        /**
+         * Specifies additional settings for your VDM configuration as applicable to the Dashboard.
+         */
+        dashboardOptions?: outputs.sesv2.ConfigurationSetVdmOptionsDashboardOptions;
+        /**
+         * Specifies additional settings for your VDM configuration as applicable to the Guardian.
+         */
+        guardianOptions?: outputs.sesv2.ConfigurationSetVdmOptionsGuardianOptions;
+    }
+    interface ConfigurationSetVdmOptionsDashboardOptions {
+        /**
+         * Specifies the status of your VDM engagement metrics collection. Valid values: `ENABLED`, `DISABLED`.
+         */
+        engagementMetrics?: string;
+    }
+    interface ConfigurationSetVdmOptionsGuardianOptions {
+        /**
+         * Specifies the status of your VDM optimized shared delivery. Valid values: `ENABLED`, `DISABLED`.
+         */
+        optimizedSharedDelivery?: string;
+    }
     interface EmailIdentityDkimSigningAttributes {
         /**
          * [Easy DKIM] The key length of the DKIM key pair in use.
@@ -47765,6 +48068,24 @@ export declare namespace transfer {
          */
         vpcId?: string;
     }
+    interface ServerProtocolDetails {
+        /**
+         * Indicates the transport method for the AS2 messages. Currently, only `HTTP` is supported.
+         */
+        as2Transports: string[];
+        /**
+         * Indicates passive mode, for FTP and FTPS protocols. Enter a single IPv4 address, such as the public IP address of a firewall, router, or load balancer.
+         */
+        passiveIp: string;
+        /**
+         * Use to ignore the error that is generated when the client attempts to use `SETSTAT` on a file you are uploading to an S3 bucket. Valid values: `DEFAULT`, `ENABLE_NO_OP`.
+         */
+        setStatOption: string;
+        /**
+         * A property used with Transfer Family servers that use the FTPS protocol. Provides a mechanism to resume or share a negotiated secret key between the control and data connection for an FTPS session. Valid values: `DISABLED`, `ENABLED`, `ENFORCED`.
+         */
+        tlsSessionResumptionMode: string;
+    }
     interface ServerWorkflowDetails {
         /**
          * A trigger that starts a workflow if a file is only partially uploaded. See Workflow Detail below.
@@ -47828,6 +48149,10 @@ export declare namespace transfer {
          * Details for a step that invokes a lambda function.
          */
         customStepDetails?: outputs.transfer.WorkflowOnExceptionStepCustomStepDetails;
+        /**
+         * Details for a step that decrypts the file.
+         */
+        decryptStepDetails?: outputs.transfer.WorkflowOnExceptionStepDecryptStepDetails;
         /**
          * Details for a step that deletes the file.
          */
@@ -47837,7 +48162,7 @@ export declare namespace transfer {
          */
         tagStepDetails?: outputs.transfer.WorkflowOnExceptionStepTagStepDetails;
         /**
-         * One of the following step types are supported. `COPY`, `CUSTOM`, `DELETE`, and `TAG`.
+         * One of the following step types are supported. `COPY`, `CUSTOM`, `DECRYPT`, `DELETE`, and `TAG`.
          */
         type: string;
     }
@@ -47907,6 +48232,58 @@ export declare namespace transfer {
          */
         timeoutSeconds?: number;
     }
+    interface WorkflowOnExceptionStepDecryptStepDetails {
+        /**
+         * Specifies the location for the file being copied. Use ${Transfer:username} in this field to parametrize the destination prefix by username.
+         */
+        destinationFileLocation?: outputs.transfer.WorkflowOnExceptionStepDecryptStepDetailsDestinationFileLocation;
+        /**
+         * The name of the step, used as an identifier.
+         */
+        name?: string;
+        /**
+         * A flag that indicates whether or not to overwrite an existing file of the same name. The default is `FALSE`. Valid values are `TRUE` and `FALSE`.
+         */
+        overwriteExisting?: string;
+        /**
+         * Specifies which file to use as input to the workflow step: either the output from the previous step, or the originally uploaded file for the workflow. Enter ${previous.file} to use the previous file as the input. In this case, this workflow step uses the output file from the previous workflow step as input. This is the default value. Enter ${original.file} to use the originally-uploaded file location as input for this step.
+         */
+        sourceFileLocation?: string;
+        /**
+         * The type of encryption used. Currently, this value must be `"PGP"`.
+         */
+        type: string;
+    }
+    interface WorkflowOnExceptionStepDecryptStepDetailsDestinationFileLocation {
+        /**
+         * Specifies the details for the EFS file being copied.
+         */
+        efsFileLocation?: outputs.transfer.WorkflowOnExceptionStepDecryptStepDetailsDestinationFileLocationEfsFileLocation;
+        /**
+         * Specifies the details for the S3 file being copied.
+         */
+        s3FileLocation?: outputs.transfer.WorkflowOnExceptionStepDecryptStepDetailsDestinationFileLocationS3FileLocation;
+    }
+    interface WorkflowOnExceptionStepDecryptStepDetailsDestinationFileLocationEfsFileLocation {
+        /**
+         * The ID of the file system, assigned by Amazon EFS.
+         */
+        fileSystemId?: string;
+        /**
+         * The pathname for the folder being used by a workflow.
+         */
+        path?: string;
+    }
+    interface WorkflowOnExceptionStepDecryptStepDetailsDestinationFileLocationS3FileLocation {
+        /**
+         * Specifies the S3 bucket for the customer input file.
+         */
+        bucket?: string;
+        /**
+         * The name assigned to the file when it was created in S3. You use the object key to retrieve the object.
+         */
+        key?: string;
+    }
     interface WorkflowOnExceptionStepDeleteStepDetails {
         /**
          * The name of the step, used as an identifier.
@@ -47950,6 +48327,10 @@ export declare namespace transfer {
          * Details for a step that invokes a lambda function.
          */
         customStepDetails?: outputs.transfer.WorkflowStepCustomStepDetails;
+        /**
+         * Details for a step that decrypts the file.
+         */
+        decryptStepDetails?: outputs.transfer.WorkflowStepDecryptStepDetails;
         /**
          * Details for a step that deletes the file.
          */
@@ -47959,7 +48340,7 @@ export declare namespace transfer {
          */
         tagStepDetails?: outputs.transfer.WorkflowStepTagStepDetails;
         /**
-         * One of the following step types are supported. `COPY`, `CUSTOM`, `DELETE`, and `TAG`.
+         * One of the following step types are supported. `COPY`, `CUSTOM`, `DECRYPT`, `DELETE`, and `TAG`.
          */
         type: string;
     }
@@ -48029,6 +48410,58 @@ export declare namespace transfer {
          */
         timeoutSeconds?: number;
     }
+    interface WorkflowStepDecryptStepDetails {
+        /**
+         * Specifies the location for the file being copied. Use ${Transfer:username} in this field to parametrize the destination prefix by username.
+         */
+        destinationFileLocation?: outputs.transfer.WorkflowStepDecryptStepDetailsDestinationFileLocation;
+        /**
+         * The name of the step, used as an identifier.
+         */
+        name?: string;
+        /**
+         * A flag that indicates whether or not to overwrite an existing file of the same name. The default is `FALSE`. Valid values are `TRUE` and `FALSE`.
+         */
+        overwriteExisting?: string;
+        /**
+         * Specifies which file to use as input to the workflow step: either the output from the previous step, or the originally uploaded file for the workflow. Enter ${previous.file} to use the previous file as the input. In this case, this workflow step uses the output file from the previous workflow step as input. This is the default value. Enter ${original.file} to use the originally-uploaded file location as input for this step.
+         */
+        sourceFileLocation?: string;
+        /**
+         * The type of encryption used. Currently, this value must be `"PGP"`.
+         */
+        type: string;
+    }
+    interface WorkflowStepDecryptStepDetailsDestinationFileLocation {
+        /**
+         * Specifies the details for the EFS file being copied.
+         */
+        efsFileLocation?: outputs.transfer.WorkflowStepDecryptStepDetailsDestinationFileLocationEfsFileLocation;
+        /**
+         * Specifies the details for the S3 file being copied.
+         */
+        s3FileLocation?: outputs.transfer.WorkflowStepDecryptStepDetailsDestinationFileLocationS3FileLocation;
+    }
+    interface WorkflowStepDecryptStepDetailsDestinationFileLocationEfsFileLocation {
+        /**
+         * The ID of the file system, assigned by Amazon EFS.
+         */
+        fileSystemId?: string;
+        /**
+         * The pathname for the folder being used by a workflow.
+         */
+        path?: string;
+    }
+    interface WorkflowStepDecryptStepDetailsDestinationFileLocationS3FileLocation {
+        /**
+         * Specifies the S3 bucket for the customer input file.
+         */
+        bucket?: string;
+        /**
+         * The name assigned to the file when it was created in S3. You use the object key to retrieve the object.
+         */
+        key?: string;
+    }
     interface WorkflowStepDeleteStepDetails {
         /**
          * The name of the step, used as an identifier.