@pulumi/aws 6.5.0-alpha.1696862389 → 6.5.0

package/types/output.d.ts

@@ -12954,7 +12954,7 @@ export declare namespace codedeploy {
          */
         enabled?: boolean;
         /**
-         * The event type or types that trigger a rollback. Supported types are `DEPLOYMENT_FAILURE` and `DEPLOYMENT_STOP_ON_ALARM`.
+         * The event type or types that trigger a rollback. Supported types are `DEPLOYMENT_FAILURE`, `DEPLOYMENT_STOP_ON_ALARM` and `DEPLOYMENT_STOP_ON_REQUEST`.
          *
          * _Only one `autoRollbackConfiguration` is allowed_.
          */
@@ -23515,7 +23515,7 @@ export declare namespace ec2 {
         /**
          * The DNS records created for the endpoint. Valid values are `ipv4`, `dualstack`, `service-defined`, and `ipv6`.
          */
-        dnsRecordIpType?: string;
+        dnsRecordIpType: string;
         /**
          * Indicates whether to enable private DNS only for inbound endpoints. This option is available only for services that support both gateway and interface endpoints. It routes traffic that originates from the VPC to the gateway endpoint and traffic that originates from on-premises to the interface endpoint. Default is `false`. Can only be specified if privateDnsEnabled is `true`.
          */
@@ -29844,6 +29844,8 @@ export declare namespace guardduty {
         /**
          * Configures [Malware Protection](https://docs.aws.amazon.com/guardduty/latest/ug/malware-protection.html).
          * See Malware Protection, Scan EC2 instance with findings and EBS volumes below for more details.
+         *
+         * The `datasources` block is deprecated since March 2023. Use the `features` block instead and [map each `datasources` block to the corresponding `features` block](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty-feature-object-api-changes-march2023.html#guardduty-feature-enablement-datasource-relation).
          */
         malwareProtection: outputs.guardduty.DetectorDatasourcesMalwareProtection;
         /**
@@ -29893,6 +29895,16 @@ export declare namespace guardduty {
          */
         enable: boolean;
     }
+    interface DetectorFeatureAdditionalConfiguration {
+        /**
+         * The name of the additional configuration. Valid values: `EKS_ADDON_MANAGEMENT`.
+         */
+        name: string;
+        /**
+         * The status of the additional configuration. Valid values: `ENABLED`, `DISABLED`.
+         */
+        status: string;
+    }
     interface FilterFindingCriteria {
         criterions: outputs.guardduty.FilterFindingCriteriaCriterion[];
     }
@@ -29926,6 +29938,30 @@ export declare namespace guardduty {
          */
         notEquals?: string[];
     }
+    interface GetDetectorFeature {
+        /**
+         * Additional feature configuration.
+         */
+        additionalConfigurations: outputs.guardduty.GetDetectorFeatureAdditionalConfiguration[];
+        /**
+         * The name of the detector feature.
+         */
+        name: string;
+        /**
+         * Current status of the detector.
+         */
+        status: string;
+    }
+    interface GetDetectorFeatureAdditionalConfiguration {
+        /**
+         * The name of the detector feature.
+         */
+        name: string;
+        /**
+         * Current status of the detector.
+         */
+        status: string;
+    }
     interface OrganizationConfigurationDatasources {
         /**
          * Enable Kubernetes Audit Logs Monitoring automatically for new member accounts.
@@ -34340,6 +34376,30 @@ export declare namespace kinesis {
          */
         roleArn: string;
     }
+    interface FirehoseDeliveryStreamMskSourceConfiguration {
+        /**
+         * The authentication configuration of the Amazon MSK cluster. More details are given below.
+         */
+        authenticationConfiguration: outputs.kinesis.FirehoseDeliveryStreamMskSourceConfigurationAuthenticationConfiguration;
+        /**
+         * The ARN of the Amazon MSK cluster.
+         */
+        mskClusterArn: string;
+        /**
+         * The topic name within the Amazon MSK cluster.
+         */
+        topicName: string;
+    }
+    interface FirehoseDeliveryStreamMskSourceConfigurationAuthenticationConfiguration {
+        /**
+         * The type of connectivity used to access the Amazon MSK cluster. Valid values: `PUBLIC`, `PRIVATE`.
+         */
+        connectivity: string;
+        /**
+         * The ARN of the role used to access the Amazon MSK cluster.
+         */
+        roleArn: string;
+    }
     interface FirehoseDeliveryStreamOpensearchConfiguration {
         /**
          * Buffer incoming data for the specified period of time, in seconds between 60 to 900, before delivering it to the destination.  The default value is 300s.
@@ -34362,11 +34422,11 @@ export declare namespace kinesis {
          */
         domainArn?: string;
         /**
-         * The Opensearch index name.
+         * The OpenSearch index name.
          */
         indexName: string;
         /**
-         * The Opensearch index rotation period.  Index rotation appends a timestamp to the IndexName to facilitate expiration of old data.  Valid values are `NoRotation`, `OneHour`, `OneDay`, `OneWeek`, and `OneMonth`.  The default value is `OneDay`.
+         * The OpenSearch index rotation period.  Index rotation appends a timestamp to the IndexName to facilitate expiration of old data.  Valid values are `NoRotation`, `OneHour`, `OneDay`, `OneWeek`, and `OneMonth`.  The default value is `OneDay`.
          */
         indexRotationPeriod?: string;
         /**
@@ -34513,6 +34573,167 @@ export declare namespace kinesis {
         subnetIds: string[];
         vpcId: string;
     }
+    interface FirehoseDeliveryStreamOpensearchserverlessConfiguration {
+        /**
+         * Buffer incoming data for the specified period of time, in seconds between 60 to 900, before delivering it to the destination.  The default value is 300s.
+         */
+        bufferingInterval?: number;
+        /**
+         * Buffer incoming data to the specified size, in MBs between 1 to 100, before delivering it to the destination.  The default value is 5MB.
+         */
+        bufferingSize?: number;
+        /**
+         * The CloudWatch Logging Options for the delivery stream. More details are given below
+         */
+        cloudwatchLoggingOptions: outputs.kinesis.FirehoseDeliveryStreamOpensearchserverlessConfigurationCloudwatchLoggingOptions;
+        /**
+         * The endpoint to use when communicating with the collection in the Serverless offering for Amazon OpenSearch Service.
+         */
+        collectionEndpoint: string;
+        /**
+         * The Serverless offering for Amazon OpenSearch Service index name.
+         */
+        indexName: string;
+        /**
+         * The data processing configuration.  More details are given below.
+         */
+        processingConfiguration?: outputs.kinesis.FirehoseDeliveryStreamOpensearchserverlessConfigurationProcessingConfiguration;
+        /**
+         * After an initial failure to deliver to the Serverless offering for Amazon OpenSearch Service, the total amount of time, in seconds between 0 to 7200, during which Kinesis Data Firehose retries delivery (including the first attempt).  After this time has elapsed, the failed documents are written to Amazon S3.  The default value is 300s.  There will be no retry if the value is 0.
+         */
+        retryDuration?: number;
+        /**
+         * The Amazon Resource Name (ARN) of the IAM role to be assumed by Kinesis Data Firehose for calling the Serverless offering for Amazon OpenSearch Service Configuration API and for indexing documents.  The pattern needs to be `arn:.*`.
+         */
+        roleArn: string;
+        /**
+         * Defines how documents should be delivered to Amazon S3.  Valid values are `FailedDocumentsOnly` and `AllDocuments`.  Default value is `FailedDocumentsOnly`.
+         */
+        s3BackupMode?: string;
+        /**
+         * The S3 Configuration. See s3Configuration for more details.
+         */
+        s3Configuration: outputs.kinesis.FirehoseDeliveryStreamOpensearchserverlessConfigurationS3Configuration;
+        /**
+         * The VPC configuration for the delivery stream to connect to OpenSearch Serverless associated with the VPC. More details are given below
+         */
+        vpcConfig?: outputs.kinesis.FirehoseDeliveryStreamOpensearchserverlessConfigurationVpcConfig;
+    }
+    interface FirehoseDeliveryStreamOpensearchserverlessConfigurationCloudwatchLoggingOptions {
+        /**
+         * Enables or disables the logging. Defaults to `false`.
+         */
+        enabled?: boolean;
+        /**
+         * The CloudWatch group name for logging. This value is required if `enabled` is true.
+         */
+        logGroupName?: string;
+        /**
+         * The CloudWatch log stream name for logging. This value is required if `enabled` is true.
+         */
+        logStreamName?: string;
+    }
+    interface FirehoseDeliveryStreamOpensearchserverlessConfigurationProcessingConfiguration {
+        /**
+         * Enables or disables data processing.
+         */
+        enabled?: boolean;
+        /**
+         * Array of data processors. More details are given below
+         */
+        processors?: outputs.kinesis.FirehoseDeliveryStreamOpensearchserverlessConfigurationProcessingConfigurationProcessor[];
+    }
+    interface FirehoseDeliveryStreamOpensearchserverlessConfigurationProcessingConfigurationProcessor {
+        /**
+         * Array of processor parameters. More details are given below
+         */
+        parameters?: outputs.kinesis.FirehoseDeliveryStreamOpensearchserverlessConfigurationProcessingConfigurationProcessorParameter[];
+        /**
+         * The type of processor. Valid Values: `RecordDeAggregation`, `Lambda`, `MetadataExtraction`, `AppendDelimiterToRecord`. Validation is done against [AWS SDK constants](https://docs.aws.amazon.com/sdk-for-go/api/service/firehose/#pkg-constants); so that values not explicitly listed may also work.
+         */
+        type: string;
+    }
+    interface FirehoseDeliveryStreamOpensearchserverlessConfigurationProcessingConfigurationProcessorParameter {
+        /**
+         * Parameter name. Valid Values: `LambdaArn`, `NumberOfRetries`, `MetadataExtractionQuery`, `JsonParsingEngine`, `RoleArn`, `BufferSizeInMBs`, `BufferIntervalInSeconds`, `SubRecordType`, `Delimiter`. Validation is done against [AWS SDK constants](https://docs.aws.amazon.com/sdk-for-go/api/service/firehose/#pkg-constants); so that values not explicitly listed may also work.
+         */
+        parameterName: string;
+        /**
+         * Parameter value. Must be between 1 and 512 length (inclusive). When providing a Lambda ARN, you should specify the resource version as well.
+         *
+         * > **NOTE:** Parameters with default values, including `NumberOfRetries`(default: 3), `RoleArn`(default: firehose role ARN), `BufferSizeInMBs`(default: 3), and `BufferIntervalInSeconds`(default: 60), are not stored in state. To prevent perpetual differences, it is therefore recommended to only include parameters with non-default values.
+         */
+        parameterValue: string;
+    }
+    interface FirehoseDeliveryStreamOpensearchserverlessConfigurationS3Configuration {
+        /**
+         * The ARN of the S3 bucket
+         */
+        bucketArn: string;
+        /**
+         * Buffer incoming data for the specified period of time, in seconds between 60 to 900, before delivering it to the destination.  The default value is 300s.
+         */
+        bufferingInterval?: number;
+        /**
+         * Buffer incoming data to the specified size, in MBs between 1 to 100, before delivering it to the destination.  The default value is 5MB.
+         * We recommend setting SizeInMBs to a value greater than the amount of data you typically ingest into the delivery stream in 10 seconds. For example, if you typically ingest data at 1 MB/sec set SizeInMBs to be 10 MB or higher.
+         */
+        bufferingSize?: number;
+        /**
+         * The CloudWatch Logging Options for the delivery stream. More details are given below
+         */
+        cloudwatchLoggingOptions: outputs.kinesis.FirehoseDeliveryStreamOpensearchserverlessConfigurationS3ConfigurationCloudwatchLoggingOptions;
+        /**
+         * The compression format. If no value is specified, the default is `UNCOMPRESSED`. Other supported values are `GZIP`, `ZIP`, `Snappy`, & `HADOOP_SNAPPY`.
+         */
+        compressionFormat?: string;
+        /**
+         * Prefix added to failed records before writing them to S3. Not currently supported for `redshift` destination. This prefix appears immediately following the bucket name. For information about how to specify this prefix, see [Custom Prefixes for Amazon S3 Objects](https://docs.aws.amazon.com/firehose/latest/dev/s3-prefixes.html).
+         */
+        errorOutputPrefix?: string;
+        /**
+         * Specifies the KMS key ARN the stream will use to encrypt data. If not set, no encryption will
+         * be used.
+         */
+        kmsKeyArn?: string;
+        /**
+         * The "YYYY/MM/DD/HH" time format prefix is automatically used for delivered S3 files. You can specify an extra prefix to be added in front of the time format prefix. Note that if the prefix ends with a slash, it appears as a folder in the S3 bucket
+         */
+        prefix?: string;
+        /**
+         * The ARN of the role that provides access to the source Kinesis stream.
+         */
+        roleArn: string;
+    }
+    interface FirehoseDeliveryStreamOpensearchserverlessConfigurationS3ConfigurationCloudwatchLoggingOptions {
+        /**
+         * Enables or disables the logging. Defaults to `false`.
+         */
+        enabled?: boolean;
+        /**
+         * The CloudWatch group name for logging. This value is required if `enabled` is true.
+         */
+        logGroupName?: string;
+        /**
+         * The CloudWatch log stream name for logging. This value is required if `enabled` is true.
+         */
+        logStreamName?: string;
+    }
+    interface FirehoseDeliveryStreamOpensearchserverlessConfigurationVpcConfig {
+        /**
+         * The ARN of the IAM role to be assumed by Firehose for calling the Amazon EC2 configuration API and for creating network interfaces. Make sure role has necessary [IAM permissions](https://docs.aws.amazon.com/firehose/latest/dev/controlling-access.html#using-iam-es-vpc)
+         */
+        roleArn: string;
+        /**
+         * A list of security group IDs to associate with Kinesis Firehose.
+         */
+        securityGroupIds: string[];
+        /**
+         * A list of subnet IDs to associate with Kinesis Firehose.
+         */
+        subnetIds: string[];
+        vpcId: string;
+    }
     interface FirehoseDeliveryStreamRedshiftConfiguration {
         /**
          * The CloudWatch Logging Options for the delivery stream. More details are given below
@@ -38401,7 +38622,7 @@ export declare namespace medialive {
     }
     interface ChannelEncoderSettingsCaptionDescriptionDestinationSettings {
         /**
-         * Arib Destination Settings.
+         * ARIB Destination Settings.
          */
         aribDestinationSettings?: outputs.medialive.ChannelEncoderSettingsCaptionDescriptionDestinationSettingsAribDestinationSettings;
         /**
@@ -39164,7 +39385,7 @@ export declare namespace medialive {
     }
     interface ChannelEncoderSettingsOutputGroupOutputOutputSettingsArchiveOutputSettingsContainerSettings {
         /**
-         * M2ts Settings. See [M2ts Settings](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-medialive-channel-m2tssettings.html) for more details.
+         * M2TS Settings. See [M2TS Settings](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-medialive-channel-m2tssettings.html) for more details.
          */
         m2tsSettings?: outputs.medialive.ChannelEncoderSettingsOutputGroupOutputOutputSettingsArchiveOutputSettingsContainerSettingsM2tsSettings;
         /**
@@ -39379,7 +39600,7 @@ export declare namespace medialive {
     }
     interface ChannelEncoderSettingsOutputGroupOutputOutputSettingsUdpOutputSettingsContainerSettings {
         /**
-         * M2ts Settings. See [M2ts Settings](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-medialive-channel-m2tssettings.html) for more details.
+         * M2TS Settings. See [M2TS Settings](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-medialive-channel-m2tssettings.html) for more details.
          */
         m2tsSettings?: outputs.medialive.ChannelEncoderSettingsOutputGroupOutputOutputSettingsUdpOutputSettingsContainerSettingsM2tsSettings;
     }
@@ -40104,7 +40325,7 @@ export declare namespace medialive {
          */
         ancillarySourceSettings?: outputs.medialive.ChannelInputAttachmentInputSettingsCaptionSelectorSelectorSettingsAncillarySourceSettings;
         /**
-         * Arib Source Settings.
+         * ARIB Source Settings.
          */
         aribSourceSettings?: outputs.medialive.ChannelInputAttachmentInputSettingsCaptionSelectorSelectorSettingsAribSourceSettings;
         /**
@@ -40258,8 +40479,18 @@ export declare namespace medialive {
     }
     interface ChannelVpc {
         availabilityZones: string[];
+        networkInterfaceIds: string[];
+        /**
+         * List of public address allocation ids to associate with ENIs that will be created in Output VPC. Must specify one for SINGLE_PIPELINE, two for STANDARD channels.
+         */
         publicAddressAllocationIds: string[];
+        /**
+         * A list of up to 5 EC2 VPC security group IDs to attach to the Output VPC network interfaces. If none are specified then the VPC default security group will be used.
+         */
         securityGroupIds: string[];
+        /**
+         * A list of VPC subnet IDs from the same VPC. If STANDARD channel, subnet IDs must be mapped to two unique availability zones (AZ).
+         */
         subnetIds: string[];
     }
     interface InputDestination {
@@ -54348,6 +54579,18 @@ export declare namespace ses {
     }
 }
 export declare namespace sesv2 {
+    interface AccountVdmAttributesDashboardAttributes {
+        /**
+         * Specifies the status of your VDM engagement metrics collection. Valid values: `ENABLED`, `DISABLED`.
+         */
+        engagementMetrics?: string;
+    }
+    interface AccountVdmAttributesGuardianAttributes {
+        /**
+         * Specifies the status of your VDM optimized shared delivery. Valid values: `ENABLED`, `DISABLED`.
+         */
+        optimizedSharedDelivery?: string;
+    }
     interface ConfigurationSetDeliveryOptions {
         /**
          * The name of the dedicated IP pool to associate with the configuration set.

package/verifiedaccess/index.d.ts

@@ -1,6 +1,9 @@
 export { InstanceArgs, InstanceState } from "./instance";
 export type Instance = import("./instance").Instance;
 export declare const Instance: typeof import("./instance").Instance;
+export { InstanceTrustProviderAttachmentArgs, InstanceTrustProviderAttachmentState } from "./instanceTrustProviderAttachment";
+export type InstanceTrustProviderAttachment = import("./instanceTrustProviderAttachment").InstanceTrustProviderAttachment;
+export declare const InstanceTrustProviderAttachment: typeof import("./instanceTrustProviderAttachment").InstanceTrustProviderAttachment;
 export { TrustProviderArgs, TrustProviderState } from "./trustProvider";
 export type TrustProvider = import("./trustProvider").TrustProvider;
 export declare const TrustProvider: typeof import("./trustProvider").TrustProvider;

package/verifiedaccess/index.js

@@ -2,11 +2,13 @@
 // *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
 // *** Do not edit by hand unless you're certain you know what you are doing! ***
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.TrustProvider = exports.Instance = void 0;
+exports.TrustProvider = exports.InstanceTrustProviderAttachment = exports.Instance = void 0;
 const pulumi = require("@pulumi/pulumi");
 const utilities = require("../utilities");
 exports.Instance = null;
 utilities.lazyLoad(exports, ["Instance"], () => require("./instance"));
+exports.InstanceTrustProviderAttachment = null;
+utilities.lazyLoad(exports, ["InstanceTrustProviderAttachment"], () => require("./instanceTrustProviderAttachment"));
 exports.TrustProvider = null;
 utilities.lazyLoad(exports, ["TrustProvider"], () => require("./trustProvider"));
 const _module = {
@@ -15,6 +17,8 @@ const _module = {
         switch (type) {
             case "aws:verifiedaccess/instance:Instance":
                 return new exports.Instance(name, undefined, { urn });
+            case "aws:verifiedaccess/instanceTrustProviderAttachment:InstanceTrustProviderAttachment":
+                return new exports.InstanceTrustProviderAttachment(name, undefined, { urn });
             case "aws:verifiedaccess/trustProvider:TrustProvider":
                 return new exports.TrustProvider(name, undefined, { urn });
             default:
@@ -23,5 +27,6 @@ const _module = {
     },
 };
 pulumi.runtime.registerResourceModule("aws", "verifiedaccess/instance", _module);
+pulumi.runtime.registerResourceModule("aws", "verifiedaccess/instanceTrustProviderAttachment", _module);
 pulumi.runtime.registerResourceModule("aws", "verifiedaccess/trustProvider", _module);
 //# sourceMappingURL=index.js.map

package/verifiedaccess/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../verifiedaccess/index.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAK7B,QAAA,QAAQ,GAAyC,IAAW,CAAC;AAC1E,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;AAI1D,QAAA,aAAa,GAAmD,IAAW,CAAC;AACzF,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,eAAe,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAGjF,MAAM,OAAO,GAAG;IACZ,OAAO,EAAE,SAAS,CAAC,UAAU,EAAE;IAC/B,SAAS,EAAE,CAAC,IAAY,EAAE,IAAY,EAAE,GAAW,EAAmB,EAAE;QACpE,QAAQ,IAAI,EAAE;YACV,KAAK,sCAAsC;gBACvC,OAAO,IAAI,gBAAQ,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACtD,KAAK,gDAAgD;gBACjD,OAAO,IAAI,qBAAa,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAC3D;gBACI,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;SACxD;IACL,CAAC;CACJ,CAAC;AACF,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,EAAE,yBAAyB,EAAE,OAAO,CAAC,CAAA;AAChF,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,EAAE,8BAA8B,EAAE,OAAO,CAAC,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../verifiedaccess/index.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAK7B,QAAA,QAAQ,GAAyC,IAAW,CAAC;AAC1E,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;AAI1D,QAAA,+BAA+B,GAAuF,IAAW,CAAC;AAC/I,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,iCAAiC,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,mCAAmC,CAAC,CAAC,CAAC;AAIxG,QAAA,aAAa,GAAmD,IAAW,CAAC;AACzF,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,eAAe,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAGjF,MAAM,OAAO,GAAG;IACZ,OAAO,EAAE,SAAS,CAAC,UAAU,EAAE;IAC/B,SAAS,EAAE,CAAC,IAAY,EAAE,IAAY,EAAE,GAAW,EAAmB,EAAE;QACpE,QAAQ,IAAI,EAAE;YACV,KAAK,sCAAsC;gBACvC,OAAO,IAAI,gBAAQ,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACtD,KAAK,oFAAoF;gBACrF,OAAO,IAAI,uCAA+B,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAC7E,KAAK,gDAAgD;gBACjD,OAAO,IAAI,qBAAa,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAC3D;gBACI,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;SACxD;IACL,CAAC;CACJ,CAAC;AACF,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,EAAE,yBAAyB,EAAE,OAAO,CAAC,CAAA;AAChF,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,EAAE,gDAAgD,EAAE,OAAO,CAAC,CAAA;AACvG,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,EAAE,8BAA8B,EAAE,OAAO,CAAC,CAAA"}

package/verifiedaccess/instanceTrustProviderAttachment.d.ts

@@ -0,0 +1,92 @@
+import * as pulumi from "@pulumi/pulumi";
+/**
+ * Resource for managing a Verified Access Instance Trust Provider Attachment.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const exampleInstance = new aws.verifiedaccess.Instance("exampleInstance", {});
+ * const exampleTrustProvider = new aws.verifiedaccess.TrustProvider("exampleTrustProvider", {
+ *     deviceTrustProviderType: "jamf",
+ *     policyReferenceName: "example",
+ *     trustProviderType: "device",
+ *     deviceOptions: {
+ *         tenantId: "example",
+ *     },
+ * });
+ * const exampleInstanceTrustProviderAttachment = new aws.verifiedaccess.InstanceTrustProviderAttachment("exampleInstanceTrustProviderAttachment", {
+ *     verifiedaccessInstanceId: exampleInstance.id,
+ *     verifiedaccessTrustProviderId: exampleTrustProvider.id,
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * In TODO v1.5.0 and later, use an `import` block to import Verified Access Instance Trust Provider Attachments using the `verifiedaccess_instance_id` and `verifiedaccess_trust_provider_id` separated by a forward slash (`/`). For exampleterraform import {
+ *
+ *  to = aws_verifiedaccess_instance_trust_provider_attachment.example
+ *
+ *  id = "vai-1234567890abcdef0/vatp-8012925589" } Using `TODO import`, import Verified Access Instance Trust Provider Attachments using the `verifiedaccess_instance_id` and `verifiedaccess_trust_provider_id` separated by a forward slash (`/`). For exampleconsole % TODO import aws_verifiedaccess_instance_trust_provider_attachment.example vai-1234567890abcdef0/vatp-8012925589
+ */
+export declare class InstanceTrustProviderAttachment extends pulumi.CustomResource {
+    /**
+     * Get an existing InstanceTrustProviderAttachment resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: InstanceTrustProviderAttachmentState, opts?: pulumi.CustomResourceOptions): InstanceTrustProviderAttachment;
+    /**
+     * Returns true if the given object is an instance of InstanceTrustProviderAttachment.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is InstanceTrustProviderAttachment;
+    /**
+     * The ID of the Verified Access instance to attach the Trust Provider to.
+     */
+    readonly verifiedaccessInstanceId: pulumi.Output<string>;
+    /**
+     * The ID of the Verified Access trust provider.
+     */
+    readonly verifiedaccessTrustProviderId: pulumi.Output<string>;
+    /**
+     * Create a InstanceTrustProviderAttachment resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: InstanceTrustProviderAttachmentArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering InstanceTrustProviderAttachment resources.
+ */
+export interface InstanceTrustProviderAttachmentState {
+    /**
+     * The ID of the Verified Access instance to attach the Trust Provider to.
+     */
+    verifiedaccessInstanceId?: pulumi.Input<string>;
+    /**
+     * The ID of the Verified Access trust provider.
+     */
+    verifiedaccessTrustProviderId?: pulumi.Input<string>;
+}
+/**
+ * The set of arguments for constructing a InstanceTrustProviderAttachment resource.
+ */
+export interface InstanceTrustProviderAttachmentArgs {
+    /**
+     * The ID of the Verified Access instance to attach the Trust Provider to.
+     */
+    verifiedaccessInstanceId: pulumi.Input<string>;
+    /**
+     * The ID of the Verified Access trust provider.
+     */
+    verifiedaccessTrustProviderId: pulumi.Input<string>;
+}

package/verifiedaccess/instanceTrustProviderAttachment.js

@@ -0,0 +1,89 @@
+"use strict";
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InstanceTrustProviderAttachment = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("../utilities");
+/**
+ * Resource for managing a Verified Access Instance Trust Provider Attachment.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const exampleInstance = new aws.verifiedaccess.Instance("exampleInstance", {});
+ * const exampleTrustProvider = new aws.verifiedaccess.TrustProvider("exampleTrustProvider", {
+ *     deviceTrustProviderType: "jamf",
+ *     policyReferenceName: "example",
+ *     trustProviderType: "device",
+ *     deviceOptions: {
+ *         tenantId: "example",
+ *     },
+ * });
+ * const exampleInstanceTrustProviderAttachment = new aws.verifiedaccess.InstanceTrustProviderAttachment("exampleInstanceTrustProviderAttachment", {
+ *     verifiedaccessInstanceId: exampleInstance.id,
+ *     verifiedaccessTrustProviderId: exampleTrustProvider.id,
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * In TODO v1.5.0 and later, use an `import` block to import Verified Access Instance Trust Provider Attachments using the `verifiedaccess_instance_id` and `verifiedaccess_trust_provider_id` separated by a forward slash (`/`). For exampleterraform import {
+ *
+ *  to = aws_verifiedaccess_instance_trust_provider_attachment.example
+ *
+ *  id = "vai-1234567890abcdef0/vatp-8012925589" } Using `TODO import`, import Verified Access Instance Trust Provider Attachments using the `verifiedaccess_instance_id` and `verifiedaccess_trust_provider_id` separated by a forward slash (`/`). For exampleconsole % TODO import aws_verifiedaccess_instance_trust_provider_attachment.example vai-1234567890abcdef0/vatp-8012925589
+ */
+class InstanceTrustProviderAttachment extends pulumi.CustomResource {
+    /**
+     * Get an existing InstanceTrustProviderAttachment resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new InstanceTrustProviderAttachment(name, state, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of InstanceTrustProviderAttachment.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === InstanceTrustProviderAttachment.__pulumiType;
+    }
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["verifiedaccessInstanceId"] = state ? state.verifiedaccessInstanceId : undefined;
+            resourceInputs["verifiedaccessTrustProviderId"] = state ? state.verifiedaccessTrustProviderId : undefined;
+        }
+        else {
+            const args = argsOrState;
+            if ((!args || args.verifiedaccessInstanceId === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'verifiedaccessInstanceId'");
+            }
+            if ((!args || args.verifiedaccessTrustProviderId === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'verifiedaccessTrustProviderId'");
+            }
+            resourceInputs["verifiedaccessInstanceId"] = args ? args.verifiedaccessInstanceId : undefined;
+            resourceInputs["verifiedaccessTrustProviderId"] = args ? args.verifiedaccessTrustProviderId : undefined;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(InstanceTrustProviderAttachment.__pulumiType, name, resourceInputs, opts);
+    }
+}
+exports.InstanceTrustProviderAttachment = InstanceTrustProviderAttachment;
+/** @internal */
+InstanceTrustProviderAttachment.__pulumiType = 'aws:verifiedaccess/instanceTrustProviderAttachment:InstanceTrustProviderAttachment';
+//# sourceMappingURL=instanceTrustProviderAttachment.js.map

package/verifiedaccess/instanceTrustProviderAttachment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"instanceTrustProviderAttachment.js","sourceRoot":"","sources":["../../verifiedaccess/instanceTrustProviderAttachment.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAa,+BAAgC,SAAQ,MAAM,CAAC,cAAc;IACtE;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA4C,EAAE,IAAmC;QAC1I,OAAO,IAAI,+BAA+B,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACtF,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,+BAA+B,CAAC,YAAY,CAAC;IAChF,CAAC;IAmBD,YAAY,IAAY,EAAE,WAAwF,EAAE,IAAmC;QACnJ,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA+D,CAAC;YAC9E,cAAc,CAAC,0BAA0B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,+BAA+B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAC,SAAS,CAAC;SAC7G;aAAM;YACH,MAAM,IAAI,GAAG,WAA8D,CAAC;YAC5E,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,wBAAwB,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;aAC3E;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,6BAA6B,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC1E,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;aAChF;YACD,cAAc,CAAC,0BAA0B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,+BAA+B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC,CAAC,SAAS,CAAC;SAC3G;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,+BAA+B,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACpF,CAAC;;AAjEL,0EAkEC;AApDG,gBAAgB;AACO,4CAAY,GAAG,oFAAoF,CAAC"}