@pulumi/aws 7.0.0-alpha.2 → 7.0.0-alpha.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/accessanalyzer/analyzer.d.ts +54 -7
- package/accessanalyzer/analyzer.js +48 -1
- package/accessanalyzer/analyzer.js.map +1 -1
- package/amplify/app.d.ts +26 -0
- package/amplify/app.js +16 -0
- package/amplify/app.js.map +1 -1
- package/bedrock/agentAgent.d.ts +2 -2
- package/bedrock/agentAgent.js +2 -2
- package/bedrock/agentAgentCollaborator.d.ts +4 -4
- package/bedrock/agentAgentCollaborator.js +4 -4
- package/cloudtrail/trail.d.ts +2 -2
- package/cloudtrail/trail.js +2 -2
- package/cloudwatch/eventArchive.d.ts +91 -15
- package/cloudwatch/eventArchive.js +67 -1
- package/cloudwatch/eventArchive.js.map +1 -1
- package/cloudwatch/logGroup.d.ts +6 -6
- package/codeartifact/domainPermissions.d.ts +1 -1
- package/codeartifact/domainPermissions.js +0 -3
- package/codeartifact/domainPermissions.js.map +1 -1
- package/connect/botAssociation.d.ts +1 -1
- package/connect/botAssociation.js +1 -1
- package/controltower/controlTowerControl.d.ts +1 -1
- package/controltower/controlTowerControl.js +1 -1
- package/cur/reportDefinition.d.ts +3 -3
- package/datasync/agent.d.ts +1 -1
- package/datasync/agent.js +1 -1
- package/dynamodb/table.d.ts +1 -1
- package/dynamodb/table.js +1 -1
- package/dynamodb/tag.d.ts +1 -1
- package/dynamodb/tag.js +1 -1
- package/ec2/getManagedPrefixList.d.ts +2 -2
- package/ec2/getManagedPrefixList.js +2 -2
- package/ec2/securityGroupRule.d.ts +1 -1
- package/ec2/securityGroupRule.js +1 -1
- package/ec2/vpc.d.ts +2 -2
- package/ec2/vpc.js +2 -2
- package/ec2/vpcIpam.d.ts +1 -1
- package/ec2/vpcIpam.js +1 -1
- package/ec2/vpcIpamPool.d.ts +4 -4
- package/ec2/vpcIpamPool.js +4 -4
- package/ec2/vpcIpamPoolCidr.d.ts +3 -3
- package/ec2/vpcIpamPoolCidr.js +3 -3
- package/ec2/vpcIpamPoolCidrAllocation.d.ts +4 -4
- package/ec2/vpcIpamPoolCidrAllocation.js +4 -4
- package/ec2/vpcIpamPreviewNextCidr.d.ts +2 -2
- package/ec2/vpcIpamPreviewNextCidr.js +2 -2
- package/ec2/vpcIpamResourceDiscovery.d.ts +1 -1
- package/ec2/vpcIpamResourceDiscovery.js +1 -1
- package/ec2/vpcIpamScope.d.ts +1 -1
- package/ec2/vpcIpamScope.js +1 -1
- package/ecr/registryPolicy.d.ts +1 -1
- package/ecr/registryPolicy.js +1 -1
- package/eks/podIdentityAssociation.d.ts +32 -0
- package/eks/podIdentityAssociation.js +6 -0
- package/eks/podIdentityAssociation.js.map +1 -1
- package/elasticsearch/domain.d.ts +2 -2
- package/elasticsearch/domain.js +2 -2
- package/emr/cluster.d.ts +12 -0
- package/emr/cluster.js +2 -0
- package/emr/cluster.js.map +1 -1
- package/fms/policy.d.ts +12 -0
- package/fms/policy.js +2 -0
- package/fms/policy.js.map +1 -1
- package/getRegion.d.ts +2 -2
- package/getService.d.ts +2 -2
- package/getService.js +2 -2
- package/glue/job.d.ts +12 -0
- package/glue/job.js +2 -0
- package/glue/job.js.map +1 -1
- package/glue/resourcePolicy.d.ts +1 -1
- package/glue/resourcePolicy.js +1 -1
- package/guardduty/detectorFeature.d.ts +21 -0
- package/guardduty/detectorFeature.js +21 -0
- package/guardduty/detectorFeature.js.map +1 -1
- package/guardduty/memberDetectorFeature.d.ts +1 -11
- package/guardduty/memberDetectorFeature.js +1 -11
- package/guardduty/memberDetectorFeature.js.map +1 -1
- package/guardduty/publishingDestination.d.ts +2 -2
- package/guardduty/publishingDestination.js +2 -2
- package/imagebuilder/imageRecipe.d.ts +1 -1
- package/imagebuilder/imageRecipe.js +1 -1
- package/kinesis/firehoseDeliveryStream.d.ts +1 -1
- package/kinesis/firehoseDeliveryStream.js +1 -1
- package/kms/getKey.d.ts +1 -1
- package/kms/key.d.ts +3 -3
- package/lightsail/instancePublicPorts.d.ts +6 -6
- package/macie/findingsFilter.d.ts +1 -1
- package/macie/findingsFilter.js +1 -1
- package/mediastore/containerPolicy.d.ts +1 -1
- package/mediastore/containerPolicy.js +1 -1
- package/networkfirewall/firewallPolicy.d.ts +51 -2
- package/networkfirewall/firewallPolicy.js +51 -2
- package/networkfirewall/firewallPolicy.js.map +1 -1
- package/networkmanager/dxGatewayAttachment.d.ts +1 -1
- package/networkmanager/dxGatewayAttachment.js +1 -1
- package/opensearch/domain.d.ts +2 -2
- package/opensearch/domain.js +2 -2
- package/opensearch/inboundConnectionAccepter.d.ts +2 -2
- package/opensearch/inboundConnectionAccepter.js +2 -2
- package/opensearch/outboundConnection.d.ts +2 -2
- package/opensearch/outboundConnection.js +2 -2
- package/opensearchingest/pipeline.d.ts +1 -1
- package/opensearchingest/pipeline.js +1 -1
- package/package.json +2 -2
- package/quicksight/dataSource.d.ts +1 -1
- package/quicksight/dataSource.js +1 -1
- package/route53/getTrafficPolicyDocument.d.ts +4 -4
- package/route53/getTrafficPolicyDocument.js +4 -4
- package/s3/bucket.d.ts +5 -4
- package/s3/bucketPolicy.d.ts +2 -0
- package/s3/bucketPolicy.js +2 -0
- package/s3/bucketPolicy.js.map +1 -1
- package/s3tables/table.d.ts +62 -0
- package/s3tables/table.js +49 -0
- package/s3tables/table.js.map +1 -1
- package/sagemaker/flowDefinition.d.ts +1 -1
- package/sagemaker/flowDefinition.js +1 -1
- package/securityhub/productSubscription.d.ts +1 -1
- package/securityhub/productSubscription.js +1 -1
- package/securityhub/standardsSubscription.d.ts +1 -1
- package/securityhub/standardsSubscription.js +1 -1
- package/serverlessrepository/cloudFormationStack.d.ts +1 -1
- package/serverlessrepository/cloudFormationStack.js +1 -1
- package/shield/drtAccessLogBucketAssociation.d.ts +1 -1
- package/shield/drtAccessLogBucketAssociation.js +1 -1
- package/shield/protection.d.ts +1 -1
- package/shield/protection.js +1 -1
- package/shield/protectionGroup.d.ts +2 -2
- package/shield/protectionGroup.js +2 -2
- package/shield/protectionHealthCheckAssociation.d.ts +1 -1
- package/shield/protectionHealthCheckAssociation.js +1 -1
- package/ssm/parameter.d.ts +1 -1
- package/ssm/quicksetupConfigurationManager.d.ts +2 -2
- package/ssm/quicksetupConfigurationManager.js +2 -2
- package/types/input.d.ts +137 -20
- package/types/input.js.map +1 -1
- package/types/output.d.ts +137 -19
- package/types/output.js.map +1 -1
|
@@ -30,7 +30,7 @@ import * as outputs from "../types/output";
|
|
|
30
30
|
* });
|
|
31
31
|
* ```
|
|
32
32
|
*
|
|
33
|
-
* ### Organization Unused Access Analyzer
|
|
33
|
+
* ### Organization Unused Access Analyzer With Analysis Rule
|
|
34
34
|
*
|
|
35
35
|
* ```typescript
|
|
36
36
|
* import * as pulumi from "@pulumi/pulumi";
|
|
@@ -67,6 +67,53 @@ import * as outputs from "../types/output";
|
|
|
67
67
|
* });
|
|
68
68
|
* ```
|
|
69
69
|
*
|
|
70
|
+
* ### Account Internal Access Analyzer by Resource Types
|
|
71
|
+
*
|
|
72
|
+
* ```typescript
|
|
73
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
74
|
+
* import * as aws from "@pulumi/aws";
|
|
75
|
+
*
|
|
76
|
+
* const test = new aws.accessanalyzer.Analyzer("test", {
|
|
77
|
+
* analyzerName: "example",
|
|
78
|
+
* type: "ORGANIZATION_INTERNAL_ACCESS",
|
|
79
|
+
* configuration: {
|
|
80
|
+
* internalAccess: {
|
|
81
|
+
* analysisRule: {
|
|
82
|
+
* inclusions: [{
|
|
83
|
+
* resourceTypes: [
|
|
84
|
+
* "AWS::S3::Bucket",
|
|
85
|
+
* "AWS::RDS::DBSnapshot",
|
|
86
|
+
* "AWS::DynamoDB::Table",
|
|
87
|
+
* ],
|
|
88
|
+
* }],
|
|
89
|
+
* },
|
|
90
|
+
* },
|
|
91
|
+
* },
|
|
92
|
+
* });
|
|
93
|
+
* ```
|
|
94
|
+
*
|
|
95
|
+
* ### Organization Internal Access Analyzer by Account ID and Resource ARN
|
|
96
|
+
*
|
|
97
|
+
* ```typescript
|
|
98
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
99
|
+
* import * as aws from "@pulumi/aws";
|
|
100
|
+
*
|
|
101
|
+
* const test = new aws.accessanalyzer.Analyzer("test", {
|
|
102
|
+
* analyzerName: "example",
|
|
103
|
+
* type: "ORGANIZATION_INTERNAL_ACCESS",
|
|
104
|
+
* configuration: {
|
|
105
|
+
* internalAccess: {
|
|
106
|
+
* analysisRule: {
|
|
107
|
+
* inclusions: [{
|
|
108
|
+
* accountIds: ["123456789012"],
|
|
109
|
+
* resourceArns: ["arn:aws:s3:::my-example-bucket"],
|
|
110
|
+
* }],
|
|
111
|
+
* },
|
|
112
|
+
* },
|
|
113
|
+
* },
|
|
114
|
+
* });
|
|
115
|
+
* ```
|
|
116
|
+
*
|
|
70
117
|
* ## Import
|
|
71
118
|
*
|
|
72
119
|
* Using `pulumi import`, import Access Analyzer Analyzers using the `analyzer_name`. For example:
|
|
@@ -102,7 +149,7 @@ export declare class Analyzer extends pulumi.CustomResource {
|
|
|
102
149
|
*/
|
|
103
150
|
readonly arn: pulumi.Output<string>;
|
|
104
151
|
/**
|
|
105
|
-
* A block that specifies the configuration of the analyzer.
|
|
152
|
+
* A block that specifies the configuration of the analyzer. See `configuration` Block for details.
|
|
106
153
|
*/
|
|
107
154
|
readonly configuration: pulumi.Output<outputs.accessanalyzer.AnalyzerConfiguration | undefined>;
|
|
108
155
|
/**
|
|
@@ -122,7 +169,7 @@ export declare class Analyzer extends pulumi.CustomResource {
|
|
|
122
169
|
[key: string]: string;
|
|
123
170
|
}>;
|
|
124
171
|
/**
|
|
125
|
-
* Type of
|
|
172
|
+
* Type that represents the zone of trust or scope for the analyzer. Valid values are `ACCOUNT`, `ACCOUNT_INTERNAL_ACCESS`, `ACCOUNT_UNUSED_ACCESS`, `ORGANIZATION`, `ORGANIZATION_INTERNAL_ACCESS`, `ORGANIZATION_UNUSED_ACCESS`. Defaults to `ACCOUNT`.
|
|
126
173
|
*/
|
|
127
174
|
readonly type: pulumi.Output<string | undefined>;
|
|
128
175
|
/**
|
|
@@ -149,7 +196,7 @@ export interface AnalyzerState {
|
|
|
149
196
|
*/
|
|
150
197
|
arn?: pulumi.Input<string>;
|
|
151
198
|
/**
|
|
152
|
-
* A block that specifies the configuration of the analyzer.
|
|
199
|
+
* A block that specifies the configuration of the analyzer. See `configuration` Block for details.
|
|
153
200
|
*/
|
|
154
201
|
configuration?: pulumi.Input<inputs.accessanalyzer.AnalyzerConfiguration>;
|
|
155
202
|
/**
|
|
@@ -169,7 +216,7 @@ export interface AnalyzerState {
|
|
|
169
216
|
[key: string]: pulumi.Input<string>;
|
|
170
217
|
}>;
|
|
171
218
|
/**
|
|
172
|
-
* Type of
|
|
219
|
+
* Type that represents the zone of trust or scope for the analyzer. Valid values are `ACCOUNT`, `ACCOUNT_INTERNAL_ACCESS`, `ACCOUNT_UNUSED_ACCESS`, `ORGANIZATION`, `ORGANIZATION_INTERNAL_ACCESS`, `ORGANIZATION_UNUSED_ACCESS`. Defaults to `ACCOUNT`.
|
|
173
220
|
*/
|
|
174
221
|
type?: pulumi.Input<string>;
|
|
175
222
|
}
|
|
@@ -184,7 +231,7 @@ export interface AnalyzerArgs {
|
|
|
184
231
|
*/
|
|
185
232
|
analyzerName: pulumi.Input<string>;
|
|
186
233
|
/**
|
|
187
|
-
* A block that specifies the configuration of the analyzer.
|
|
234
|
+
* A block that specifies the configuration of the analyzer. See `configuration` Block for details.
|
|
188
235
|
*/
|
|
189
236
|
configuration?: pulumi.Input<inputs.accessanalyzer.AnalyzerConfiguration>;
|
|
190
237
|
/**
|
|
@@ -198,7 +245,7 @@ export interface AnalyzerArgs {
|
|
|
198
245
|
[key: string]: pulumi.Input<string>;
|
|
199
246
|
}>;
|
|
200
247
|
/**
|
|
201
|
-
* Type of
|
|
248
|
+
* Type that represents the zone of trust or scope for the analyzer. Valid values are `ACCOUNT`, `ACCOUNT_INTERNAL_ACCESS`, `ACCOUNT_UNUSED_ACCESS`, `ORGANIZATION`, `ORGANIZATION_INTERNAL_ACCESS`, `ORGANIZATION_UNUSED_ACCESS`. Defaults to `ACCOUNT`.
|
|
202
249
|
*/
|
|
203
250
|
type?: pulumi.Input<string>;
|
|
204
251
|
}
|
|
@@ -34,7 +34,7 @@ const utilities = require("../utilities");
|
|
|
34
34
|
* });
|
|
35
35
|
* ```
|
|
36
36
|
*
|
|
37
|
-
* ### Organization Unused Access Analyzer
|
|
37
|
+
* ### Organization Unused Access Analyzer With Analysis Rule
|
|
38
38
|
*
|
|
39
39
|
* ```typescript
|
|
40
40
|
* import * as pulumi from "@pulumi/pulumi";
|
|
@@ -71,6 +71,53 @@ const utilities = require("../utilities");
|
|
|
71
71
|
* });
|
|
72
72
|
* ```
|
|
73
73
|
*
|
|
74
|
+
* ### Account Internal Access Analyzer by Resource Types
|
|
75
|
+
*
|
|
76
|
+
* ```typescript
|
|
77
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
78
|
+
* import * as aws from "@pulumi/aws";
|
|
79
|
+
*
|
|
80
|
+
* const test = new aws.accessanalyzer.Analyzer("test", {
|
|
81
|
+
* analyzerName: "example",
|
|
82
|
+
* type: "ORGANIZATION_INTERNAL_ACCESS",
|
|
83
|
+
* configuration: {
|
|
84
|
+
* internalAccess: {
|
|
85
|
+
* analysisRule: {
|
|
86
|
+
* inclusions: [{
|
|
87
|
+
* resourceTypes: [
|
|
88
|
+
* "AWS::S3::Bucket",
|
|
89
|
+
* "AWS::RDS::DBSnapshot",
|
|
90
|
+
* "AWS::DynamoDB::Table",
|
|
91
|
+
* ],
|
|
92
|
+
* }],
|
|
93
|
+
* },
|
|
94
|
+
* },
|
|
95
|
+
* },
|
|
96
|
+
* });
|
|
97
|
+
* ```
|
|
98
|
+
*
|
|
99
|
+
* ### Organization Internal Access Analyzer by Account ID and Resource ARN
|
|
100
|
+
*
|
|
101
|
+
* ```typescript
|
|
102
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
103
|
+
* import * as aws from "@pulumi/aws";
|
|
104
|
+
*
|
|
105
|
+
* const test = new aws.accessanalyzer.Analyzer("test", {
|
|
106
|
+
* analyzerName: "example",
|
|
107
|
+
* type: "ORGANIZATION_INTERNAL_ACCESS",
|
|
108
|
+
* configuration: {
|
|
109
|
+
* internalAccess: {
|
|
110
|
+
* analysisRule: {
|
|
111
|
+
* inclusions: [{
|
|
112
|
+
* accountIds: ["123456789012"],
|
|
113
|
+
* resourceArns: ["arn:aws:s3:::my-example-bucket"],
|
|
114
|
+
* }],
|
|
115
|
+
* },
|
|
116
|
+
* },
|
|
117
|
+
* },
|
|
118
|
+
* });
|
|
119
|
+
* ```
|
|
120
|
+
*
|
|
74
121
|
* ## Import
|
|
75
122
|
*
|
|
76
123
|
* Using `pulumi import`, import Access Analyzer Analyzers using the `analyzer_name`. For example:
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"analyzer.js","sourceRoot":"","sources":["../../accessanalyzer/analyzer.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAIzC,0CAA0C;AAE1C
|
|
1
|
+
{"version":3,"file":"analyzer.js","sourceRoot":"","sources":["../../accessanalyzer/analyzer.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAIzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwHG;AACH,MAAa,QAAS,SAAQ,MAAM,CAAC,cAAc;IAC/C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAqB,EAAE,IAAmC;QACnH,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC/D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,QAAQ,CAAC,YAAY,CAAC;IACzD,CAAC;IAyCD,YAAY,IAAY,EAAE,WAA0C,EAAE,IAAmC;QACrG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAwC,CAAC;YACvD,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;SAC3D;aAAM;YACH,MAAM,IAAI,GAAG,WAAuC,CAAC;YACrD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACzD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;aAC/D;YACD,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC1C,cAAc,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACjD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,QAAQ,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC7D,CAAC;;AA9FL,4BA+FC;AAjFG,gBAAgB;AACO,qBAAY,GAAG,sCAAsC,CAAC"}
|
package/amplify/app.d.ts
CHANGED
|
@@ -157,6 +157,20 @@ import * as outputs from "../types/output";
|
|
|
157
157
|
* });
|
|
158
158
|
* ```
|
|
159
159
|
*
|
|
160
|
+
* ### Job Config
|
|
161
|
+
*
|
|
162
|
+
* ```typescript
|
|
163
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
164
|
+
* import * as aws from "@pulumi/aws";
|
|
165
|
+
*
|
|
166
|
+
* const example = new aws.amplify.App("example", {
|
|
167
|
+
* name: "example",
|
|
168
|
+
* jobConfig: {
|
|
169
|
+
* buildComputeType: "STANDARD_8GB",
|
|
170
|
+
* },
|
|
171
|
+
* });
|
|
172
|
+
* ```
|
|
173
|
+
*
|
|
160
174
|
* ## Import
|
|
161
175
|
*
|
|
162
176
|
* Using `pulumi import`, import Amplify App using Amplify App ID (appId). For example:
|
|
@@ -256,6 +270,10 @@ export declare class App extends pulumi.CustomResource {
|
|
|
256
270
|
* AWS Identity and Access Management (IAM) service role for an Amplify app.
|
|
257
271
|
*/
|
|
258
272
|
readonly iamServiceRoleArn: pulumi.Output<string | undefined>;
|
|
273
|
+
/**
|
|
274
|
+
* Used to configure the [Amplify Application build settings](https://docs.aws.amazon.com/amplify/latest/userguide/build-settings.html). See `jobConfig` Block for details.
|
|
275
|
+
*/
|
|
276
|
+
readonly jobConfig: pulumi.Output<outputs.amplify.AppJobConfig>;
|
|
259
277
|
/**
|
|
260
278
|
* Name for an Amplify app.
|
|
261
279
|
*/
|
|
@@ -379,6 +397,10 @@ export interface AppState {
|
|
|
379
397
|
* AWS Identity and Access Management (IAM) service role for an Amplify app.
|
|
380
398
|
*/
|
|
381
399
|
iamServiceRoleArn?: pulumi.Input<string>;
|
|
400
|
+
/**
|
|
401
|
+
* Used to configure the [Amplify Application build settings](https://docs.aws.amazon.com/amplify/latest/userguide/build-settings.html). See `jobConfig` Block for details.
|
|
402
|
+
*/
|
|
403
|
+
jobConfig?: pulumi.Input<inputs.amplify.AppJobConfig>;
|
|
382
404
|
/**
|
|
383
405
|
* Name for an Amplify app.
|
|
384
406
|
*/
|
|
@@ -486,6 +508,10 @@ export interface AppArgs {
|
|
|
486
508
|
* AWS Identity and Access Management (IAM) service role for an Amplify app.
|
|
487
509
|
*/
|
|
488
510
|
iamServiceRoleArn?: pulumi.Input<string>;
|
|
511
|
+
/**
|
|
512
|
+
* Used to configure the [Amplify Application build settings](https://docs.aws.amazon.com/amplify/latest/userguide/build-settings.html). See `jobConfig` Block for details.
|
|
513
|
+
*/
|
|
514
|
+
jobConfig?: pulumi.Input<inputs.amplify.AppJobConfig>;
|
|
489
515
|
/**
|
|
490
516
|
* Name for an Amplify app.
|
|
491
517
|
*/
|
package/amplify/app.js
CHANGED
|
@@ -161,6 +161,20 @@ const utilities = require("../utilities");
|
|
|
161
161
|
* });
|
|
162
162
|
* ```
|
|
163
163
|
*
|
|
164
|
+
* ### Job Config
|
|
165
|
+
*
|
|
166
|
+
* ```typescript
|
|
167
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
168
|
+
* import * as aws from "@pulumi/aws";
|
|
169
|
+
*
|
|
170
|
+
* const example = new aws.amplify.App("example", {
|
|
171
|
+
* name: "example",
|
|
172
|
+
* jobConfig: {
|
|
173
|
+
* buildComputeType: "STANDARD_8GB",
|
|
174
|
+
* },
|
|
175
|
+
* });
|
|
176
|
+
* ```
|
|
177
|
+
*
|
|
164
178
|
* ## Import
|
|
165
179
|
*
|
|
166
180
|
* Using `pulumi import`, import Amplify App using Amplify App ID (appId). For example:
|
|
@@ -216,6 +230,7 @@ class App extends pulumi.CustomResource {
|
|
|
216
230
|
resourceInputs["enableBranchAutoDeletion"] = state ? state.enableBranchAutoDeletion : undefined;
|
|
217
231
|
resourceInputs["environmentVariables"] = state ? state.environmentVariables : undefined;
|
|
218
232
|
resourceInputs["iamServiceRoleArn"] = state ? state.iamServiceRoleArn : undefined;
|
|
233
|
+
resourceInputs["jobConfig"] = state ? state.jobConfig : undefined;
|
|
219
234
|
resourceInputs["name"] = state ? state.name : undefined;
|
|
220
235
|
resourceInputs["oauthToken"] = state ? state.oauthToken : undefined;
|
|
221
236
|
resourceInputs["platform"] = state ? state.platform : undefined;
|
|
@@ -243,6 +258,7 @@ class App extends pulumi.CustomResource {
|
|
|
243
258
|
resourceInputs["enableBranchAutoDeletion"] = args ? args.enableBranchAutoDeletion : undefined;
|
|
244
259
|
resourceInputs["environmentVariables"] = args ? args.environmentVariables : undefined;
|
|
245
260
|
resourceInputs["iamServiceRoleArn"] = args ? args.iamServiceRoleArn : undefined;
|
|
261
|
+
resourceInputs["jobConfig"] = args ? args.jobConfig : undefined;
|
|
246
262
|
resourceInputs["name"] = args ? args.name : undefined;
|
|
247
263
|
resourceInputs["oauthToken"] = (args === null || args === void 0 ? void 0 : args.oauthToken) ? pulumi.secret(args.oauthToken) : undefined;
|
|
248
264
|
resourceInputs["platform"] = args ? args.platform : undefined;
|
package/amplify/app.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"app.js","sourceRoot":"","sources":["../../amplify/app.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAIzC,0CAA0C;AAE1C
|
|
1
|
+
{"version":3,"file":"app.js","sourceRoot":"","sources":["../../amplify/app.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAIzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkLG;AACH,MAAa,GAAI,SAAQ,MAAM,CAAC,cAAc;IAC1C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAgB,EAAE,IAAmC;QAC9G,OAAO,IAAI,GAAG,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC1D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,GAAG,CAAC,YAAY,CAAC;IACpD,CAAC;IAuHD,YAAY,IAAY,EAAE,WAAgC,EAAE,IAAmC;QAC3F,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAmC,CAAC;YAClD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,0BAA0B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,4BAA4B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC,SAAS,CAAC;YACpG,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,0BAA0B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,uBAAuB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,0BAA0B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SACjE;aAAM;YACH,MAAM,IAAI,GAAG,WAAkC,CAAC;YAChD,cAAc,CAAC,aAAa,CAAC,GAAG,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,WAAW,EAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,0BAA0B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,4BAA4B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC,SAAS,CAAC;YAClG,cAAc,CAAC,sBAAsB,CAAC,GAAG,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,oBAAoB,EAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC3H,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,0BAA0B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,uBAAuB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,0BAA0B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,YAAY,CAAC,GAAG,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,UAAU,EAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC7F,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC1C,cAAc,CAAC,eAAe,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACpD,cAAc,CAAC,oBAAoB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACzD,cAAc,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACjD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,EAAE,uBAAuB,EAAE,CAAC,aAAa,EAAE,sBAAsB,EAAE,YAAY,CAAC,EAAE,CAAC;QACtG,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7C,KAAK,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACxD,CAAC;;AAnNL,kBAoNC;AAtMG,gBAAgB;AACO,gBAAY,GAAG,qBAAqB,CAAC"}
|
package/bedrock/agentAgent.d.ts
CHANGED
|
@@ -30,7 +30,7 @@ import * as outputs from "../types/output";
|
|
|
30
30
|
* },
|
|
31
31
|
* {
|
|
32
32
|
* test: "ArnLike",
|
|
33
|
-
* values: [`arn:${currentGetPartition.partition}:bedrock:${currentGetRegion.
|
|
33
|
+
* values: [`arn:${currentGetPartition.partition}:bedrock:${currentGetRegion.region}:${current1.accountId}:agent/*`],
|
|
34
34
|
* variable: "AWS:SourceArn",
|
|
35
35
|
* },
|
|
36
36
|
* ],
|
|
@@ -39,7 +39,7 @@ import * as outputs from "../types/output";
|
|
|
39
39
|
* const exampleAgentPermissions = Promise.all([currentGetPartition, currentGetRegion]).then(([currentGetPartition, currentGetRegion]) => aws.iam.getPolicyDocument({
|
|
40
40
|
* statements: [{
|
|
41
41
|
* actions: ["bedrock:InvokeModel"],
|
|
42
|
-
* resources: [`arn:${currentGetPartition.partition}:bedrock:${currentGetRegion.
|
|
42
|
+
* resources: [`arn:${currentGetPartition.partition}:bedrock:${currentGetRegion.region}::foundation-model/anthropic.claude-v2`],
|
|
43
43
|
* }],
|
|
44
44
|
* }));
|
|
45
45
|
* const example = new aws.iam.Role("example", {
|
package/bedrock/agentAgent.js
CHANGED
|
@@ -34,7 +34,7 @@ const utilities = require("../utilities");
|
|
|
34
34
|
* },
|
|
35
35
|
* {
|
|
36
36
|
* test: "ArnLike",
|
|
37
|
-
* values: [`arn:${currentGetPartition.partition}:bedrock:${currentGetRegion.
|
|
37
|
+
* values: [`arn:${currentGetPartition.partition}:bedrock:${currentGetRegion.region}:${current1.accountId}:agent/*`],
|
|
38
38
|
* variable: "AWS:SourceArn",
|
|
39
39
|
* },
|
|
40
40
|
* ],
|
|
@@ -43,7 +43,7 @@ const utilities = require("../utilities");
|
|
|
43
43
|
* const exampleAgentPermissions = Promise.all([currentGetPartition, currentGetRegion]).then(([currentGetPartition, currentGetRegion]) => aws.iam.getPolicyDocument({
|
|
44
44
|
* statements: [{
|
|
45
45
|
* actions: ["bedrock:InvokeModel"],
|
|
46
|
-
* resources: [`arn:${currentGetPartition.partition}:bedrock:${currentGetRegion.
|
|
46
|
+
* resources: [`arn:${currentGetPartition.partition}:bedrock:${currentGetRegion.region}::foundation-model/anthropic.claude-v2`],
|
|
47
47
|
* }],
|
|
48
48
|
* }));
|
|
49
49
|
* const example = new aws.iam.Role("example", {
|
|
@@ -30,7 +30,7 @@ import * as outputs from "../types/output";
|
|
|
30
30
|
* },
|
|
31
31
|
* {
|
|
32
32
|
* test: "ArnLike",
|
|
33
|
-
* values: [`arn:${currentGetPartition.partition}:bedrock:${currentGetRegion.
|
|
33
|
+
* values: [`arn:${currentGetPartition.partition}:bedrock:${currentGetRegion.region}:${current1.accountId}:agent/*`],
|
|
34
34
|
* variable: "AWS:SourceArn",
|
|
35
35
|
* },
|
|
36
36
|
* ],
|
|
@@ -40,7 +40,7 @@ import * as outputs from "../types/output";
|
|
|
40
40
|
* statements: [
|
|
41
41
|
* {
|
|
42
42
|
* actions: ["bedrock:InvokeModel"],
|
|
43
|
-
* resources: [`arn:${currentGetPartition.partition}:bedrock:${currentGetRegion.
|
|
43
|
+
* resources: [`arn:${currentGetPartition.partition}:bedrock:${currentGetRegion.region}::foundation-model/anthropic.claude-3-5-sonnet-20241022-v2:0`],
|
|
44
44
|
* },
|
|
45
45
|
* {
|
|
46
46
|
* actions: [
|
|
@@ -48,8 +48,8 @@ import * as outputs from "../types/output";
|
|
|
48
48
|
* "bedrock:InvokeAgent",
|
|
49
49
|
* ],
|
|
50
50
|
* resources: [
|
|
51
|
-
* `arn:${currentAgent.partition}:bedrock:${currentGetRegion1.
|
|
52
|
-
* `arn:${currentAgent.partition}:bedrock:${currentGetRegion2.
|
|
51
|
+
* `arn:${currentAgent.partition}:bedrock:${currentGetRegion1.region}:${current.accountId}:agent/*`,
|
|
52
|
+
* `arn:${currentAgent.partition}:bedrock:${currentGetRegion2.region}:${current1.accountId}:agent-alias/*`,
|
|
53
53
|
* ],
|
|
54
54
|
* },
|
|
55
55
|
* ],
|
|
@@ -34,7 +34,7 @@ const utilities = require("../utilities");
|
|
|
34
34
|
* },
|
|
35
35
|
* {
|
|
36
36
|
* test: "ArnLike",
|
|
37
|
-
* values: [`arn:${currentGetPartition.partition}:bedrock:${currentGetRegion.
|
|
37
|
+
* values: [`arn:${currentGetPartition.partition}:bedrock:${currentGetRegion.region}:${current1.accountId}:agent/*`],
|
|
38
38
|
* variable: "AWS:SourceArn",
|
|
39
39
|
* },
|
|
40
40
|
* ],
|
|
@@ -44,7 +44,7 @@ const utilities = require("../utilities");
|
|
|
44
44
|
* statements: [
|
|
45
45
|
* {
|
|
46
46
|
* actions: ["bedrock:InvokeModel"],
|
|
47
|
-
* resources: [`arn:${currentGetPartition.partition}:bedrock:${currentGetRegion.
|
|
47
|
+
* resources: [`arn:${currentGetPartition.partition}:bedrock:${currentGetRegion.region}::foundation-model/anthropic.claude-3-5-sonnet-20241022-v2:0`],
|
|
48
48
|
* },
|
|
49
49
|
* {
|
|
50
50
|
* actions: [
|
|
@@ -52,8 +52,8 @@ const utilities = require("../utilities");
|
|
|
52
52
|
* "bedrock:InvokeAgent",
|
|
53
53
|
* ],
|
|
54
54
|
* resources: [
|
|
55
|
-
* `arn:${currentAgent.partition}:bedrock:${currentGetRegion1.
|
|
56
|
-
* `arn:${currentAgent.partition}:bedrock:${currentGetRegion2.
|
|
55
|
+
* `arn:${currentAgent.partition}:bedrock:${currentGetRegion1.region}:${current.accountId}:agent/*`,
|
|
56
|
+
* `arn:${currentAgent.partition}:bedrock:${currentGetRegion2.region}:${current1.accountId}:agent-alias/*`,
|
|
57
57
|
* ],
|
|
58
58
|
* },
|
|
59
59
|
* ],
|
package/cloudtrail/trail.d.ts
CHANGED
|
@@ -40,7 +40,7 @@ import * as outputs from "../types/output";
|
|
|
40
40
|
* conditions: [{
|
|
41
41
|
* test: "StringEquals",
|
|
42
42
|
* variable: "aws:SourceArn",
|
|
43
|
-
* values: [Promise.all([currentGetPartition, currentGetRegion, current]).then(([currentGetPartition, currentGetRegion, current]) => `arn:${currentGetPartition.partition}:cloudtrail:${currentGetRegion.
|
|
43
|
+
* values: [Promise.all([currentGetPartition, currentGetRegion, current]).then(([currentGetPartition, currentGetRegion, current]) => `arn:${currentGetPartition.partition}:cloudtrail:${currentGetRegion.region}:${current.accountId}:trail/example`)],
|
|
44
44
|
* }],
|
|
45
45
|
* },
|
|
46
46
|
* {
|
|
@@ -61,7 +61,7 @@ import * as outputs from "../types/output";
|
|
|
61
61
|
* {
|
|
62
62
|
* test: "StringEquals",
|
|
63
63
|
* variable: "aws:SourceArn",
|
|
64
|
-
* values: [Promise.all([currentGetPartition, currentGetRegion, current]).then(([currentGetPartition, currentGetRegion, current]) => `arn:${currentGetPartition.partition}:cloudtrail:${currentGetRegion.
|
|
64
|
+
* values: [Promise.all([currentGetPartition, currentGetRegion, current]).then(([currentGetPartition, currentGetRegion, current]) => `arn:${currentGetPartition.partition}:cloudtrail:${currentGetRegion.region}:${current.accountId}:trail/example`)],
|
|
65
65
|
* },
|
|
66
66
|
* ],
|
|
67
67
|
* },
|
package/cloudtrail/trail.js
CHANGED
|
@@ -44,7 +44,7 @@ const utilities = require("../utilities");
|
|
|
44
44
|
* conditions: [{
|
|
45
45
|
* test: "StringEquals",
|
|
46
46
|
* variable: "aws:SourceArn",
|
|
47
|
-
* values: [Promise.all([currentGetPartition, currentGetRegion, current]).then(([currentGetPartition, currentGetRegion, current]) => `arn:${currentGetPartition.partition}:cloudtrail:${currentGetRegion.
|
|
47
|
+
* values: [Promise.all([currentGetPartition, currentGetRegion, current]).then(([currentGetPartition, currentGetRegion, current]) => `arn:${currentGetPartition.partition}:cloudtrail:${currentGetRegion.region}:${current.accountId}:trail/example`)],
|
|
48
48
|
* }],
|
|
49
49
|
* },
|
|
50
50
|
* {
|
|
@@ -65,7 +65,7 @@ const utilities = require("../utilities");
|
|
|
65
65
|
* {
|
|
66
66
|
* test: "StringEquals",
|
|
67
67
|
* variable: "aws:SourceArn",
|
|
68
|
-
* values: [Promise.all([currentGetPartition, currentGetRegion, current]).then(([currentGetPartition, currentGetRegion, current]) => `arn:${currentGetPartition.partition}:cloudtrail:${currentGetRegion.
|
|
68
|
+
* values: [Promise.all([currentGetPartition, currentGetRegion, current]).then(([currentGetPartition, currentGetRegion, current]) => `arn:${currentGetPartition.partition}:cloudtrail:${currentGetRegion.region}:${current.accountId}:trail/example`)],
|
|
69
69
|
* },
|
|
70
70
|
* ],
|
|
71
71
|
* },
|
|
@@ -17,7 +17,7 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
17
17
|
* });
|
|
18
18
|
* ```
|
|
19
19
|
*
|
|
20
|
-
*
|
|
20
|
+
* ### Optional Arguments
|
|
21
21
|
*
|
|
22
22
|
* ```typescript
|
|
23
23
|
* import * as pulumi from "@pulumi/pulumi";
|
|
@@ -35,6 +35,70 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
35
35
|
* });
|
|
36
36
|
* ```
|
|
37
37
|
*
|
|
38
|
+
* ### CMK Encryption
|
|
39
|
+
*
|
|
40
|
+
* ```typescript
|
|
41
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
42
|
+
* import * as aws from "@pulumi/aws";
|
|
43
|
+
*
|
|
44
|
+
* const current = aws.getCallerIdentity({});
|
|
45
|
+
* const currentGetPartition = aws.getPartition({});
|
|
46
|
+
* const example = new aws.cloudwatch.EventBus("example", {name: "example"});
|
|
47
|
+
* const exampleKey = new aws.kms.Key("example", {
|
|
48
|
+
* deletionWindowInDays: 7,
|
|
49
|
+
* policy: pulumi.jsonStringify({
|
|
50
|
+
* Version: "2012-10-17",
|
|
51
|
+
* Id: "key-policy-example",
|
|
52
|
+
* Statement: [
|
|
53
|
+
* {
|
|
54
|
+
* Sid: "Enable IAM User Permissions",
|
|
55
|
+
* Effect: "Allow",
|
|
56
|
+
* Principal: {
|
|
57
|
+
* AWS: Promise.all([currentGetPartition, current]).then(([currentGetPartition, current]) => `arn:${currentGetPartition.partition}:iam::${current.accountId}:root`),
|
|
58
|
+
* },
|
|
59
|
+
* Action: "kms:*",
|
|
60
|
+
* Resource: "*",
|
|
61
|
+
* },
|
|
62
|
+
* {
|
|
63
|
+
* Sid: "Allow describing of the key",
|
|
64
|
+
* Effect: "Allow",
|
|
65
|
+
* Principal: {
|
|
66
|
+
* Service: "events.amazonaws.com",
|
|
67
|
+
* },
|
|
68
|
+
* Action: ["kms:DescribeKey"],
|
|
69
|
+
* Resource: "*",
|
|
70
|
+
* },
|
|
71
|
+
* {
|
|
72
|
+
* Sid: "Allow use of the key",
|
|
73
|
+
* Effect: "Allow",
|
|
74
|
+
* Principal: {
|
|
75
|
+
* Service: "events.amazonaws.com",
|
|
76
|
+
* },
|
|
77
|
+
* Action: [
|
|
78
|
+
* "kms:GenerateDataKey",
|
|
79
|
+
* "kms:Decrypt",
|
|
80
|
+
* "kms:ReEncrypt*",
|
|
81
|
+
* ],
|
|
82
|
+
* Resource: "*",
|
|
83
|
+
* Condition: {
|
|
84
|
+
* StringEquals: {
|
|
85
|
+
* "kms:EncryptionContext:aws:events:event-bus:arn": example.arn,
|
|
86
|
+
* },
|
|
87
|
+
* },
|
|
88
|
+
* },
|
|
89
|
+
* ],
|
|
90
|
+
* }),
|
|
91
|
+
* tags: {
|
|
92
|
+
* EventBridgeApiDestinations: "true",
|
|
93
|
+
* },
|
|
94
|
+
* });
|
|
95
|
+
* const exampleEventArchive = new aws.cloudwatch.EventArchive("example", {
|
|
96
|
+
* name: "example",
|
|
97
|
+
* eventSourceArn: example.arn,
|
|
98
|
+
* kmsKeyIdentifier: exampleKey.id,
|
|
99
|
+
* });
|
|
100
|
+
* ```
|
|
101
|
+
*
|
|
38
102
|
* ## Import
|
|
39
103
|
*
|
|
40
104
|
* Using `pulumi import`, import an EventBridge archive using the `name`. For example:
|
|
@@ -60,23 +124,27 @@ export declare class EventArchive extends pulumi.CustomResource {
|
|
|
60
124
|
*/
|
|
61
125
|
static isInstance(obj: any): obj is EventArchive;
|
|
62
126
|
/**
|
|
63
|
-
*
|
|
127
|
+
* ARN of the archive.
|
|
64
128
|
*/
|
|
65
129
|
readonly arn: pulumi.Output<string>;
|
|
66
130
|
/**
|
|
67
|
-
*
|
|
131
|
+
* Description for the archive.
|
|
68
132
|
*/
|
|
69
133
|
readonly description: pulumi.Output<string | undefined>;
|
|
70
134
|
/**
|
|
71
|
-
*
|
|
135
|
+
* Event pattern to use to filter events sent to the archive. By default, it attempts to archive every event received in the `eventSourceArn`.
|
|
72
136
|
*/
|
|
73
137
|
readonly eventPattern: pulumi.Output<string | undefined>;
|
|
74
138
|
/**
|
|
75
|
-
*
|
|
139
|
+
* ARN of the event bus associated with the archive. Only events from this event bus are sent to the archive.
|
|
76
140
|
*/
|
|
77
141
|
readonly eventSourceArn: pulumi.Output<string>;
|
|
78
142
|
/**
|
|
79
|
-
*
|
|
143
|
+
* Identifier of the AWS KMS customer managed key for EventBridge to use, if you choose to use a customer managed key to encrypt this archive. The identifier can be the key Amazon Resource Name (ARN), KeyId, key alias, or key alias ARN.
|
|
144
|
+
*/
|
|
145
|
+
readonly kmsKeyIdentifier: pulumi.Output<string | undefined>;
|
|
146
|
+
/**
|
|
147
|
+
* Name of the archive. The archive name cannot exceed 48 characters.
|
|
80
148
|
*/
|
|
81
149
|
readonly name: pulumi.Output<string>;
|
|
82
150
|
/**
|
|
@@ -101,23 +169,27 @@ export declare class EventArchive extends pulumi.CustomResource {
|
|
|
101
169
|
*/
|
|
102
170
|
export interface EventArchiveState {
|
|
103
171
|
/**
|
|
104
|
-
*
|
|
172
|
+
* ARN of the archive.
|
|
105
173
|
*/
|
|
106
174
|
arn?: pulumi.Input<string>;
|
|
107
175
|
/**
|
|
108
|
-
*
|
|
176
|
+
* Description for the archive.
|
|
109
177
|
*/
|
|
110
178
|
description?: pulumi.Input<string>;
|
|
111
179
|
/**
|
|
112
|
-
*
|
|
180
|
+
* Event pattern to use to filter events sent to the archive. By default, it attempts to archive every event received in the `eventSourceArn`.
|
|
113
181
|
*/
|
|
114
182
|
eventPattern?: pulumi.Input<string>;
|
|
115
183
|
/**
|
|
116
|
-
*
|
|
184
|
+
* ARN of the event bus associated with the archive. Only events from this event bus are sent to the archive.
|
|
117
185
|
*/
|
|
118
186
|
eventSourceArn?: pulumi.Input<string>;
|
|
119
187
|
/**
|
|
120
|
-
*
|
|
188
|
+
* Identifier of the AWS KMS customer managed key for EventBridge to use, if you choose to use a customer managed key to encrypt this archive. The identifier can be the key Amazon Resource Name (ARN), KeyId, key alias, or key alias ARN.
|
|
189
|
+
*/
|
|
190
|
+
kmsKeyIdentifier?: pulumi.Input<string>;
|
|
191
|
+
/**
|
|
192
|
+
* Name of the archive. The archive name cannot exceed 48 characters.
|
|
121
193
|
*/
|
|
122
194
|
name?: pulumi.Input<string>;
|
|
123
195
|
/**
|
|
@@ -134,19 +206,23 @@ export interface EventArchiveState {
|
|
|
134
206
|
*/
|
|
135
207
|
export interface EventArchiveArgs {
|
|
136
208
|
/**
|
|
137
|
-
*
|
|
209
|
+
* Description for the archive.
|
|
138
210
|
*/
|
|
139
211
|
description?: pulumi.Input<string>;
|
|
140
212
|
/**
|
|
141
|
-
*
|
|
213
|
+
* Event pattern to use to filter events sent to the archive. By default, it attempts to archive every event received in the `eventSourceArn`.
|
|
142
214
|
*/
|
|
143
215
|
eventPattern?: pulumi.Input<string>;
|
|
144
216
|
/**
|
|
145
|
-
*
|
|
217
|
+
* ARN of the event bus associated with the archive. Only events from this event bus are sent to the archive.
|
|
146
218
|
*/
|
|
147
219
|
eventSourceArn: pulumi.Input<string>;
|
|
148
220
|
/**
|
|
149
|
-
*
|
|
221
|
+
* Identifier of the AWS KMS customer managed key for EventBridge to use, if you choose to use a customer managed key to encrypt this archive. The identifier can be the key Amazon Resource Name (ARN), KeyId, key alias, or key alias ARN.
|
|
222
|
+
*/
|
|
223
|
+
kmsKeyIdentifier?: pulumi.Input<string>;
|
|
224
|
+
/**
|
|
225
|
+
* Name of the archive. The archive name cannot exceed 48 characters.
|
|
150
226
|
*/
|
|
151
227
|
name?: pulumi.Input<string>;
|
|
152
228
|
/**
|