@pulumi/aws 7.0.0-alpha.2 → 7.0.0-rc.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/accessanalyzer/analyzer.d.ts +54 -7
- package/accessanalyzer/analyzer.js +48 -1
- package/accessanalyzer/analyzer.js.map +1 -1
- package/amp/index.d.ts +3 -0
- package/amp/index.js +6 -1
- package/amp/index.js.map +1 -1
- package/amp/queryLoggingConfiguration.d.ts +107 -0
- package/amp/queryLoggingConfiguration.js +82 -0
- package/amp/queryLoggingConfiguration.js.map +1 -0
- package/amplify/app.d.ts +26 -0
- package/amplify/app.js +16 -0
- package/amplify/app.js.map +1 -1
- package/amplify/branch.d.ts +12 -0
- package/amplify/branch.js +2 -0
- package/amplify/branch.js.map +1 -1
- package/bedrock/agentAgent.d.ts +2 -2
- package/bedrock/agentAgent.js +2 -2
- package/bedrock/agentAgentCollaborator.d.ts +4 -4
- package/bedrock/agentAgentCollaborator.js +4 -4
- package/cloudfront/distribution.d.ts +12 -0
- package/cloudfront/distribution.js +2 -0
- package/cloudfront/distribution.js.map +1 -1
- package/cloudfront/getDistribution.d.ts +4 -0
- package/cloudfront/getDistribution.js.map +1 -1
- package/cloudtrail/trail.d.ts +2 -2
- package/cloudtrail/trail.js +2 -2
- package/cloudwatch/eventArchive.d.ts +91 -15
- package/cloudwatch/eventArchive.js +67 -1
- package/cloudwatch/eventArchive.js.map +1 -1
- package/cloudwatch/logGroup.d.ts +6 -6
- package/codeartifact/domainPermissions.d.ts +1 -1
- package/codeartifact/domainPermissions.js +0 -3
- package/codeartifact/domainPermissions.js.map +1 -1
- package/connect/botAssociation.d.ts +1 -1
- package/connect/botAssociation.js +1 -1
- package/controltower/controlTowerControl.d.ts +1 -1
- package/controltower/controlTowerControl.js +1 -1
- package/cur/reportDefinition.d.ts +3 -3
- package/datasync/agent.d.ts +1 -1
- package/datasync/agent.js +1 -1
- package/dynamodb/table.d.ts +36 -1
- package/dynamodb/table.js +36 -1
- package/dynamodb/table.js.map +1 -1
- package/dynamodb/tag.d.ts +1 -1
- package/dynamodb/tag.js +1 -1
- package/ec2/getManagedPrefixList.d.ts +2 -2
- package/ec2/getManagedPrefixList.js +2 -2
- package/ec2/securityGroupRule.d.ts +1 -1
- package/ec2/securityGroupRule.js +1 -1
- package/ec2/vpc.d.ts +2 -2
- package/ec2/vpc.js +2 -2
- package/ec2/vpcIpam.d.ts +1 -1
- package/ec2/vpcIpam.js +1 -1
- package/ec2/vpcIpamPool.d.ts +4 -4
- package/ec2/vpcIpamPool.js +4 -4
- package/ec2/vpcIpamPoolCidr.d.ts +3 -3
- package/ec2/vpcIpamPoolCidr.js +3 -3
- package/ec2/vpcIpamPoolCidrAllocation.d.ts +4 -4
- package/ec2/vpcIpamPoolCidrAllocation.js +4 -4
- package/ec2/vpcIpamPreviewNextCidr.d.ts +2 -2
- package/ec2/vpcIpamPreviewNextCidr.js +2 -2
- package/ec2/vpcIpamResourceDiscovery.d.ts +1 -1
- package/ec2/vpcIpamResourceDiscovery.js +1 -1
- package/ec2/vpcIpamScope.d.ts +1 -1
- package/ec2/vpcIpamScope.js +1 -1
- package/ecr/registryPolicy.d.ts +1 -1
- package/ecr/registryPolicy.js +1 -1
- package/eks/cluster.d.ts +2 -4
- package/eks/cluster.js +0 -2
- package/eks/cluster.js.map +1 -1
- package/eks/podIdentityAssociation.d.ts +32 -0
- package/eks/podIdentityAssociation.js +6 -0
- package/eks/podIdentityAssociation.js.map +1 -1
- package/elasticsearch/domain.d.ts +2 -2
- package/elasticsearch/domain.js +2 -2
- package/emr/cluster.d.ts +12 -0
- package/emr/cluster.js +2 -0
- package/emr/cluster.js.map +1 -1
- package/fms/policy.d.ts +12 -0
- package/fms/policy.js +2 -0
- package/fms/policy.js.map +1 -1
- package/getRegion.d.ts +2 -2
- package/getService.d.ts +2 -2
- package/getService.js +2 -2
- package/glue/job.d.ts +12 -0
- package/glue/job.js +2 -0
- package/glue/job.js.map +1 -1
- package/glue/resourcePolicy.d.ts +1 -1
- package/glue/resourcePolicy.js +1 -1
- package/guardduty/detectorFeature.d.ts +21 -0
- package/guardduty/detectorFeature.js +21 -0
- package/guardduty/detectorFeature.js.map +1 -1
- package/guardduty/memberDetectorFeature.d.ts +1 -11
- package/guardduty/memberDetectorFeature.js +1 -11
- package/guardduty/memberDetectorFeature.js.map +1 -1
- package/guardduty/publishingDestination.d.ts +2 -2
- package/guardduty/publishingDestination.js +2 -2
- package/iam/rolePolicy.d.ts +21 -15
- package/iam/rolePolicy.js.map +1 -1
- package/imagebuilder/imageRecipe.d.ts +1 -1
- package/imagebuilder/imageRecipe.js +1 -1
- package/kinesis/firehoseDeliveryStream.d.ts +1 -1
- package/kinesis/firehoseDeliveryStream.js +1 -1
- package/kinesis/getStreamConsumer.d.ts +9 -0
- package/kinesis/getStreamConsumer.js +2 -0
- package/kinesis/getStreamConsumer.js.map +1 -1
- package/kinesis/streamConsumer.d.ts +15 -0
- package/kinesis/streamConsumer.js +4 -0
- package/kinesis/streamConsumer.js.map +1 -1
- package/kms/getKey.d.ts +1 -1
- package/kms/key.d.ts +3 -3
- package/lightsail/instancePublicPorts.d.ts +6 -6
- package/macie/findingsFilter.d.ts +1 -1
- package/macie/findingsFilter.js +1 -1
- package/mediastore/containerPolicy.d.ts +1 -1
- package/mediastore/containerPolicy.js +1 -1
- package/networkfirewall/firewallPolicy.d.ts +51 -2
- package/networkfirewall/firewallPolicy.js +51 -2
- package/networkfirewall/firewallPolicy.js.map +1 -1
- package/networkmanager/dxGatewayAttachment.d.ts +1 -1
- package/networkmanager/dxGatewayAttachment.js +1 -1
- package/opensearch/domain.d.ts +2 -2
- package/opensearch/domain.js +2 -2
- package/opensearch/inboundConnectionAccepter.d.ts +2 -2
- package/opensearch/inboundConnectionAccepter.js +2 -2
- package/opensearch/outboundConnection.d.ts +2 -2
- package/opensearch/outboundConnection.js +2 -2
- package/opensearchingest/pipeline.d.ts +1 -1
- package/opensearchingest/pipeline.js +1 -1
- package/package.json +2 -2
- package/quicksight/dataSource.d.ts +1 -1
- package/quicksight/dataSource.js +1 -1
- package/rbin/rule.d.ts +52 -17
- package/rbin/rule.js +26 -1
- package/rbin/rule.js.map +1 -1
- package/route53/getTrafficPolicyDocument.d.ts +4 -4
- package/route53/getTrafficPolicyDocument.js +4 -4
- package/route53/profilesResourceAssociation.d.ts +1 -1
- package/s3/bucket.d.ts +5 -4
- package/s3/bucketPolicy.d.ts +2 -0
- package/s3/bucketPolicy.js +2 -0
- package/s3/bucketPolicy.js.map +1 -1
- package/s3/directoryBucket.d.ts +30 -0
- package/s3/directoryBucket.js +4 -0
- package/s3/directoryBucket.js.map +1 -1
- package/s3tables/table.d.ts +62 -0
- package/s3tables/table.js +49 -0
- package/s3tables/table.js.map +1 -1
- package/sagemaker/flowDefinition.d.ts +1 -1
- package/sagemaker/flowDefinition.js +1 -1
- package/securityhub/productSubscription.d.ts +1 -1
- package/securityhub/productSubscription.js +1 -1
- package/securityhub/standardsSubscription.d.ts +1 -1
- package/securityhub/standardsSubscription.js +1 -1
- package/serverlessrepository/cloudFormationStack.d.ts +1 -1
- package/serverlessrepository/cloudFormationStack.js +1 -1
- package/shield/drtAccessLogBucketAssociation.d.ts +1 -1
- package/shield/drtAccessLogBucketAssociation.js +1 -1
- package/shield/protection.d.ts +1 -1
- package/shield/protection.js +1 -1
- package/shield/protectionGroup.d.ts +2 -2
- package/shield/protectionGroup.js +2 -2
- package/shield/protectionHealthCheckAssociation.d.ts +1 -1
- package/shield/protectionHealthCheckAssociation.js +1 -1
- package/ssm/parameter.d.ts +1 -1
- package/ssm/quicksetupConfigurationManager.d.ts +2 -2
- package/ssm/quicksetupConfigurationManager.js +2 -2
- package/ssoadmin/applicationAccessScope.d.ts +1 -1
- package/ssoadmin/applicationAccessScope.js +1 -1
- package/ssoadmin/applicationAssignment.d.ts +2 -2
- package/ssoadmin/applicationAssignment.js +2 -2
- package/ssoadmin/applicationAssignmentConfiguration.d.ts +1 -1
- package/ssoadmin/applicationAssignmentConfiguration.js +1 -1
- package/ssoadmin/getApplicationAssignments.d.ts +2 -2
- package/ssoadmin/getApplicationAssignments.js +2 -2
- package/types/input.d.ts +217 -26
- package/types/input.js.map +1 -1
- package/types/output.d.ts +209 -25
- package/types/output.js.map +1 -1
|
@@ -14,6 +14,9 @@ const utilities = require("../utilities");
|
|
|
14
14
|
* import * as pulumi from "@pulumi/pulumi";
|
|
15
15
|
* import * as aws from "@pulumi/aws";
|
|
16
16
|
*
|
|
17
|
+
* const current = aws.getRegion({});
|
|
18
|
+
* const currentGetPartition = aws.getPartition({});
|
|
19
|
+
* const currentGetCallerIdentity = aws.getCallerIdentity({});
|
|
17
20
|
* const example = new aws.networkfirewall.FirewallPolicy("example", {
|
|
18
21
|
* name: "example",
|
|
19
22
|
* firewallPolicy: {
|
|
@@ -23,7 +26,7 @@ const utilities = require("../utilities");
|
|
|
23
26
|
* priority: 1,
|
|
24
27
|
* resourceArn: exampleAwsNetworkfirewallRuleGroup.arn,
|
|
25
28
|
* }],
|
|
26
|
-
* tlsInspectionConfigurationArn:
|
|
29
|
+
* tlsInspectionConfigurationArn: Promise.all([currentGetPartition, current, currentGetCallerIdentity]).then(([currentGetPartition, current, currentGetCallerIdentity]) => `arn:${currentGetPartition.partition}:network-firewall:${current.region}:${currentGetCallerIdentity.accountId}:tls-configuration/example`),
|
|
27
30
|
* },
|
|
28
31
|
* tags: {
|
|
29
32
|
* Tag1: "Value1",
|
|
@@ -72,7 +75,7 @@ const utilities = require("../utilities");
|
|
|
72
75
|
* import * as pulumi from "@pulumi/pulumi";
|
|
73
76
|
* import * as aws from "@pulumi/aws";
|
|
74
77
|
*
|
|
75
|
-
* const
|
|
78
|
+
* const example = new aws.networkfirewall.FirewallPolicy("example", {
|
|
76
79
|
* name: "example",
|
|
77
80
|
* firewallPolicy: {
|
|
78
81
|
* statelessDefaultActions: [
|
|
@@ -94,6 +97,52 @@ const utilities = require("../utilities");
|
|
|
94
97
|
* });
|
|
95
98
|
* ```
|
|
96
99
|
*
|
|
100
|
+
* ## Policy with Active Threat Defense in Action Order
|
|
101
|
+
*
|
|
102
|
+
* ```typescript
|
|
103
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
104
|
+
* import * as aws from "@pulumi/aws";
|
|
105
|
+
*
|
|
106
|
+
* const current = aws.getRegion({});
|
|
107
|
+
* const currentGetPartition = aws.getPartition({});
|
|
108
|
+
* const example = new aws.networkfirewall.FirewallPolicy("example", {
|
|
109
|
+
* name: "example",
|
|
110
|
+
* firewallPolicy: {
|
|
111
|
+
* statelessFragmentDefaultActions: ["aws:drop"],
|
|
112
|
+
* statelessDefaultActions: ["aws:pass"],
|
|
113
|
+
* statefulRuleGroupReferences: [{
|
|
114
|
+
* deepThreatInspection: "true",
|
|
115
|
+
* resourceArn: Promise.all([currentGetPartition, current]).then(([currentGetPartition, current]) => `arn:${currentGetPartition.partition}:network-firewall:${current.region}:aws-managed:stateful-rulegroup/AttackInfrastructureActionOrder`),
|
|
116
|
+
* }],
|
|
117
|
+
* },
|
|
118
|
+
* });
|
|
119
|
+
* ```
|
|
120
|
+
*
|
|
121
|
+
* ## Policy with Active Threat Defense in Strict Order
|
|
122
|
+
*
|
|
123
|
+
* ```typescript
|
|
124
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
125
|
+
* import * as aws from "@pulumi/aws";
|
|
126
|
+
*
|
|
127
|
+
* const current = aws.getRegion({});
|
|
128
|
+
* const currentGetPartition = aws.getPartition({});
|
|
129
|
+
* const example = new aws.networkfirewall.FirewallPolicy("example", {
|
|
130
|
+
* name: "example",
|
|
131
|
+
* firewallPolicy: {
|
|
132
|
+
* statelessFragmentDefaultActions: ["aws:drop"],
|
|
133
|
+
* statelessDefaultActions: ["aws:pass"],
|
|
134
|
+
* statefulEngineOptions: {
|
|
135
|
+
* ruleOrder: "STRICT_ORDER",
|
|
136
|
+
* },
|
|
137
|
+
* statefulRuleGroupReferences: [{
|
|
138
|
+
* deepThreatInspection: "false",
|
|
139
|
+
* priority: 1,
|
|
140
|
+
* resourceArn: Promise.all([currentGetPartition, current]).then(([currentGetPartition, current]) => `arn:${currentGetPartition.partition}:network-firewall:${current.region}:aws-managed:stateful-rulegroup/AttackInfrastructureStrictOrder`),
|
|
141
|
+
* }],
|
|
142
|
+
* },
|
|
143
|
+
* });
|
|
144
|
+
* ```
|
|
145
|
+
*
|
|
97
146
|
* ## Import
|
|
98
147
|
*
|
|
99
148
|
* Using `pulumi import`, import Network Firewall Policies using their `arn`. For example:
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"firewallPolicy.js","sourceRoot":"","sources":["../../networkfirewall/firewallPolicy.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAIzC,0CAA0C;AAE1C
|
|
1
|
+
{"version":3,"file":"firewallPolicy.js","sourceRoot":"","sources":["../../networkfirewall/firewallPolicy.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAIzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiJG;AACH,MAAa,cAAe,SAAQ,MAAM,CAAC,cAAc;IACrD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA2B,EAAE,IAAmC;QACzH,OAAO,IAAI,cAAc,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACrE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,cAAc,CAAC,YAAY,CAAC;IAC/D,CAAC;IA+CD,YAAY,IAAY,EAAE,WAAsD,EAAE,IAAmC;QACjH,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA8C,CAAC;YAC7D,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,yBAAyB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;SACzE;aAAM;YACH,MAAM,IAAI,GAAG,WAA6C,CAAC;YAC3D,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC3D,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;aACjE;YACD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,yBAAyB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC1C,cAAc,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC9C,cAAc,CAAC,aAAa,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACrD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,cAAc,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACnE,CAAC;;AAxGL,wCAyGC;AA3FG,gBAAgB;AACO,2BAAY,GAAG,mDAAmD,CAAC"}
|
|
@@ -17,7 +17,7 @@ import * as outputs from "../types/output";
|
|
|
17
17
|
* const test = new aws.networkmanager.DxGatewayAttachment("test", {
|
|
18
18
|
* coreNetworkId: testAwsNetworkmanagerCoreNetworkPolicyAttachment.coreNetworkId,
|
|
19
19
|
* directConnectGatewayArn: `arn:aws:directconnect::${current.accountId}:dx-gateway/${testAwsDxGateway.id}`,
|
|
20
|
-
* edgeLocations: [currentAwsRegion.
|
|
20
|
+
* edgeLocations: [currentAwsRegion.region],
|
|
21
21
|
* });
|
|
22
22
|
* ```
|
|
23
23
|
*
|
|
@@ -21,7 +21,7 @@ const utilities = require("../utilities");
|
|
|
21
21
|
* const test = new aws.networkmanager.DxGatewayAttachment("test", {
|
|
22
22
|
* coreNetworkId: testAwsNetworkmanagerCoreNetworkPolicyAttachment.coreNetworkId,
|
|
23
23
|
* directConnectGatewayArn: `arn:aws:directconnect::${current.accountId}:dx-gateway/${testAwsDxGateway.id}`,
|
|
24
|
-
* edgeLocations: [currentAwsRegion.
|
|
24
|
+
* edgeLocations: [currentAwsRegion.region],
|
|
25
25
|
* });
|
|
26
26
|
* ```
|
|
27
27
|
*
|
package/opensearch/domain.d.ts
CHANGED
|
@@ -61,7 +61,7 @@ import * as outputs from "../types/output";
|
|
|
61
61
|
* identifiers: ["*"],
|
|
62
62
|
* }],
|
|
63
63
|
* actions: ["es:*"],
|
|
64
|
-
* resources: [`arn:aws:es:${current.
|
|
64
|
+
* resources: [`arn:aws:es:${current.region}:${currentGetCallerIdentity.accountId}:domain/${domain}/*`],
|
|
65
65
|
* conditions: [{
|
|
66
66
|
* test: "IpAddress",
|
|
67
67
|
* variable: "aws:SourceIp",
|
|
@@ -152,7 +152,7 @@ import * as outputs from "../types/output";
|
|
|
152
152
|
* identifiers: ["*"],
|
|
153
153
|
* }],
|
|
154
154
|
* actions: ["es:*"],
|
|
155
|
-
* resources: [`arn:aws:es:${current.
|
|
155
|
+
* resources: [`arn:aws:es:${current.region}:${currentGetCallerIdentity.accountId}:domain/${domain}/*`],
|
|
156
156
|
* }],
|
|
157
157
|
* }));
|
|
158
158
|
* const exampleDomain = new aws.opensearch.Domain("example", {
|
package/opensearch/domain.js
CHANGED
|
@@ -65,7 +65,7 @@ const utilities = require("../utilities");
|
|
|
65
65
|
* identifiers: ["*"],
|
|
66
66
|
* }],
|
|
67
67
|
* actions: ["es:*"],
|
|
68
|
-
* resources: [`arn:aws:es:${current.
|
|
68
|
+
* resources: [`arn:aws:es:${current.region}:${currentGetCallerIdentity.accountId}:domain/${domain}/*`],
|
|
69
69
|
* conditions: [{
|
|
70
70
|
* test: "IpAddress",
|
|
71
71
|
* variable: "aws:SourceIp",
|
|
@@ -156,7 +156,7 @@ const utilities = require("../utilities");
|
|
|
156
156
|
* identifiers: ["*"],
|
|
157
157
|
* }],
|
|
158
158
|
* actions: ["es:*"],
|
|
159
|
-
* resources: [`arn:aws:es:${current.
|
|
159
|
+
* resources: [`arn:aws:es:${current.region}:${currentGetCallerIdentity.accountId}:domain/${domain}/*`],
|
|
160
160
|
* }],
|
|
161
161
|
* }));
|
|
162
162
|
* const exampleDomain = new aws.opensearch.Domain("example", {
|
|
@@ -16,12 +16,12 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
16
16
|
* connectionAlias: "outbound_connection",
|
|
17
17
|
* localDomainInfo: {
|
|
18
18
|
* ownerId: current.then(current => current.accountId),
|
|
19
|
-
* region: currentGetRegion.then(currentGetRegion => currentGetRegion.
|
|
19
|
+
* region: currentGetRegion.then(currentGetRegion => currentGetRegion.region),
|
|
20
20
|
* domainName: localDomain.domainName,
|
|
21
21
|
* },
|
|
22
22
|
* remoteDomainInfo: {
|
|
23
23
|
* ownerId: current.then(current => current.accountId),
|
|
24
|
-
* region: currentGetRegion.then(currentGetRegion => currentGetRegion.
|
|
24
|
+
* region: currentGetRegion.then(currentGetRegion => currentGetRegion.region),
|
|
25
25
|
* domainName: remoteDomain.domainName,
|
|
26
26
|
* },
|
|
27
27
|
* });
|
|
@@ -22,12 +22,12 @@ const utilities = require("../utilities");
|
|
|
22
22
|
* connectionAlias: "outbound_connection",
|
|
23
23
|
* localDomainInfo: {
|
|
24
24
|
* ownerId: current.then(current => current.accountId),
|
|
25
|
-
* region: currentGetRegion.then(currentGetRegion => currentGetRegion.
|
|
25
|
+
* region: currentGetRegion.then(currentGetRegion => currentGetRegion.region),
|
|
26
26
|
* domainName: localDomain.domainName,
|
|
27
27
|
* },
|
|
28
28
|
* remoteDomainInfo: {
|
|
29
29
|
* ownerId: current.then(current => current.accountId),
|
|
30
|
-
* region: currentGetRegion.then(currentGetRegion => currentGetRegion.
|
|
30
|
+
* region: currentGetRegion.then(currentGetRegion => currentGetRegion.region),
|
|
31
31
|
* domainName: remoteDomain.domainName,
|
|
32
32
|
* },
|
|
33
33
|
* });
|
|
@@ -19,12 +19,12 @@ import * as outputs from "../types/output";
|
|
|
19
19
|
* connectionMode: "DIRECT",
|
|
20
20
|
* localDomainInfo: {
|
|
21
21
|
* ownerId: current.then(current => current.accountId),
|
|
22
|
-
* region: currentGetRegion.then(currentGetRegion => currentGetRegion.
|
|
22
|
+
* region: currentGetRegion.then(currentGetRegion => currentGetRegion.region),
|
|
23
23
|
* domainName: localDomain.domainName,
|
|
24
24
|
* },
|
|
25
25
|
* remoteDomainInfo: {
|
|
26
26
|
* ownerId: current.then(current => current.accountId),
|
|
27
|
-
* region: currentGetRegion.then(currentGetRegion => currentGetRegion.
|
|
27
|
+
* region: currentGetRegion.then(currentGetRegion => currentGetRegion.region),
|
|
28
28
|
* domainName: remoteDomain.domainName,
|
|
29
29
|
* },
|
|
30
30
|
* });
|
|
@@ -23,12 +23,12 @@ const utilities = require("../utilities");
|
|
|
23
23
|
* connectionMode: "DIRECT",
|
|
24
24
|
* localDomainInfo: {
|
|
25
25
|
* ownerId: current.then(current => current.accountId),
|
|
26
|
-
* region: currentGetRegion.then(currentGetRegion => currentGetRegion.
|
|
26
|
+
* region: currentGetRegion.then(currentGetRegion => currentGetRegion.region),
|
|
27
27
|
* domainName: localDomain.domainName,
|
|
28
28
|
* },
|
|
29
29
|
* remoteDomainInfo: {
|
|
30
30
|
* ownerId: current.then(current => current.accountId),
|
|
31
|
-
* region: currentGetRegion.then(currentGetRegion => currentGetRegion.
|
|
31
|
+
* region: currentGetRegion.then(currentGetRegion => currentGetRegion.region),
|
|
32
32
|
* domainName: remoteDomain.domainName,
|
|
33
33
|
* },
|
|
34
34
|
* });
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@pulumi/aws",
|
|
3
|
-
"version": "7.0.0-
|
|
3
|
+
"version": "7.0.0-rc.1",
|
|
4
4
|
"description": "A Pulumi package for creating and managing Amazon Web Services (AWS) cloud resources.",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"pulumi",
|
|
@@ -24,6 +24,6 @@
|
|
|
24
24
|
"pulumi": {
|
|
25
25
|
"resource": true,
|
|
26
26
|
"name": "aws",
|
|
27
|
-
"version": "7.0.0-
|
|
27
|
+
"version": "7.0.0-rc.1"
|
|
28
28
|
}
|
|
29
29
|
}
|
|
@@ -42,7 +42,7 @@ import * as outputs from "../types/output";
|
|
|
42
42
|
* key: "manifest.json",
|
|
43
43
|
* content: pulumi.jsonStringify({
|
|
44
44
|
* fileLocations: [{
|
|
45
|
-
* URIPrefixes: [pulumi.all([example.id, currentGetRegion, currentGetPartition]).apply(([id, currentGetRegion, currentGetPartition]) => `https://${id}.s3-${currentGetRegion.
|
|
45
|
+
* URIPrefixes: [pulumi.all([example.id, currentGetRegion, currentGetPartition]).apply(([id, currentGetRegion, currentGetPartition]) => `https://${id}.s3-${currentGetRegion.region}.${currentGetPartition.dnsSuffix}`)],
|
|
46
46
|
* }],
|
|
47
47
|
* globalUploadSettings: {
|
|
48
48
|
* format: "CSV",
|
package/quicksight/dataSource.js
CHANGED
|
@@ -46,7 +46,7 @@ const utilities = require("../utilities");
|
|
|
46
46
|
* key: "manifest.json",
|
|
47
47
|
* content: pulumi.jsonStringify({
|
|
48
48
|
* fileLocations: [{
|
|
49
|
-
* URIPrefixes: [pulumi.all([example.id, currentGetRegion, currentGetPartition]).apply(([id, currentGetRegion, currentGetPartition]) => `https://${id}.s3-${currentGetRegion.
|
|
49
|
+
* URIPrefixes: [pulumi.all([example.id, currentGetRegion, currentGetPartition]).apply(([id, currentGetRegion, currentGetPartition]) => `https://${id}.s3-${currentGetRegion.region}.${currentGetPartition.dnsSuffix}`)],
|
|
50
50
|
* }],
|
|
51
51
|
* globalUploadSettings: {
|
|
52
52
|
* format: "CSV",
|
package/rbin/rule.d.ts
CHANGED
|
@@ -13,7 +13,7 @@ import * as outputs from "../types/output";
|
|
|
13
13
|
* import * as aws from "@pulumi/aws";
|
|
14
14
|
*
|
|
15
15
|
* const example = new aws.rbin.Rule("example", {
|
|
16
|
-
* description: "
|
|
16
|
+
* description: "Example tag-level retention rule",
|
|
17
17
|
* resourceType: "EBS_SNAPSHOT",
|
|
18
18
|
* resourceTags: [{
|
|
19
19
|
* resourceTagKey: "tag_key",
|
|
@@ -29,6 +29,29 @@ import * as outputs from "../types/output";
|
|
|
29
29
|
* });
|
|
30
30
|
* ```
|
|
31
31
|
*
|
|
32
|
+
* ### Region-Level Retention Rule
|
|
33
|
+
*
|
|
34
|
+
* ```typescript
|
|
35
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
36
|
+
* import * as aws from "@pulumi/aws";
|
|
37
|
+
*
|
|
38
|
+
* const example = new aws.rbin.Rule("example", {
|
|
39
|
+
* description: "Example region-level retention rule with exclusion tags",
|
|
40
|
+
* resourceType: "EC2_IMAGE",
|
|
41
|
+
* excludeResourceTags: [{
|
|
42
|
+
* resourceTagKey: "tag_key",
|
|
43
|
+
* resourceTagValue: "tag_value",
|
|
44
|
+
* }],
|
|
45
|
+
* retentionPeriod: {
|
|
46
|
+
* retentionPeriodValue: 10,
|
|
47
|
+
* retentionPeriodUnit: "DAYS",
|
|
48
|
+
* },
|
|
49
|
+
* tags: {
|
|
50
|
+
* test_tag_key: "test_tag_value",
|
|
51
|
+
* },
|
|
52
|
+
* });
|
|
53
|
+
* ```
|
|
54
|
+
*
|
|
32
55
|
* ## Import
|
|
33
56
|
*
|
|
34
57
|
* Using `pulumi import`, import RBin Rule using the `id`. For example:
|
|
@@ -55,19 +78,23 @@ export declare class Rule extends pulumi.CustomResource {
|
|
|
55
78
|
static isInstance(obj: any): obj is Rule;
|
|
56
79
|
readonly arn: pulumi.Output<string>;
|
|
57
80
|
/**
|
|
58
|
-
*
|
|
81
|
+
* Retention rule description.
|
|
59
82
|
*/
|
|
60
83
|
readonly description: pulumi.Output<string>;
|
|
84
|
+
/**
|
|
85
|
+
* Exclusion tags to use to identify resources that are to be excluded, or ignored, by a Region-level retention rule. See `excludeResourceTags` below.
|
|
86
|
+
*/
|
|
87
|
+
readonly excludeResourceTags: pulumi.Output<outputs.rbin.RuleExcludeResourceTag[] | undefined>;
|
|
61
88
|
/**
|
|
62
89
|
* Information about the retention rule lock configuration. See `lockConfiguration` below.
|
|
63
90
|
*/
|
|
64
91
|
readonly lockConfiguration: pulumi.Output<outputs.rbin.RuleLockConfiguration | undefined>;
|
|
65
92
|
/**
|
|
66
|
-
* (Timestamp)
|
|
93
|
+
* (Timestamp) Date and time at which the unlock delay is set to expire. Only returned for retention rules that have been unlocked and that are still within the unlock delay period.
|
|
67
94
|
*/
|
|
68
95
|
readonly lockEndTime: pulumi.Output<string>;
|
|
69
96
|
/**
|
|
70
|
-
* (Optional)
|
|
97
|
+
* (Optional) Lock state of the retention rules to list. Only retention rules with the specified lock state are returned. Valid values are `locked`, `pendingUnlock`, `unlocked`.
|
|
71
98
|
*/
|
|
72
99
|
readonly lockState: pulumi.Output<string>;
|
|
73
100
|
/**
|
|
@@ -75,11 +102,11 @@ export declare class Rule extends pulumi.CustomResource {
|
|
|
75
102
|
*/
|
|
76
103
|
readonly region: pulumi.Output<string>;
|
|
77
104
|
/**
|
|
78
|
-
*
|
|
105
|
+
* Resource tags to use to identify resources that are to be retained by a tag-level retention rule. See `resourceTags` below.
|
|
79
106
|
*/
|
|
80
|
-
readonly resourceTags: pulumi.Output<outputs.rbin.RuleResourceTag[]>;
|
|
107
|
+
readonly resourceTags: pulumi.Output<outputs.rbin.RuleResourceTag[] | undefined>;
|
|
81
108
|
/**
|
|
82
|
-
*
|
|
109
|
+
* Resource type to be retained by the retention rule. Valid values are `EBS_SNAPSHOT` and `EC2_IMAGE`.
|
|
83
110
|
*/
|
|
84
111
|
readonly resourceType: pulumi.Output<string>;
|
|
85
112
|
/**
|
|
@@ -89,7 +116,7 @@ export declare class Rule extends pulumi.CustomResource {
|
|
|
89
116
|
*/
|
|
90
117
|
readonly retentionPeriod: pulumi.Output<outputs.rbin.RuleRetentionPeriod>;
|
|
91
118
|
/**
|
|
92
|
-
* (String)
|
|
119
|
+
* (String) State of the retention rule. Only retention rules that are in the `available` state retain resources. Valid values include `pending` and `available`.
|
|
93
120
|
*/
|
|
94
121
|
readonly status: pulumi.Output<string>;
|
|
95
122
|
readonly tags: pulumi.Output<{
|
|
@@ -113,19 +140,23 @@ export declare class Rule extends pulumi.CustomResource {
|
|
|
113
140
|
export interface RuleState {
|
|
114
141
|
arn?: pulumi.Input<string>;
|
|
115
142
|
/**
|
|
116
|
-
*
|
|
143
|
+
* Retention rule description.
|
|
117
144
|
*/
|
|
118
145
|
description?: pulumi.Input<string>;
|
|
146
|
+
/**
|
|
147
|
+
* Exclusion tags to use to identify resources that are to be excluded, or ignored, by a Region-level retention rule. See `excludeResourceTags` below.
|
|
148
|
+
*/
|
|
149
|
+
excludeResourceTags?: pulumi.Input<pulumi.Input<inputs.rbin.RuleExcludeResourceTag>[]>;
|
|
119
150
|
/**
|
|
120
151
|
* Information about the retention rule lock configuration. See `lockConfiguration` below.
|
|
121
152
|
*/
|
|
122
153
|
lockConfiguration?: pulumi.Input<inputs.rbin.RuleLockConfiguration>;
|
|
123
154
|
/**
|
|
124
|
-
* (Timestamp)
|
|
155
|
+
* (Timestamp) Date and time at which the unlock delay is set to expire. Only returned for retention rules that have been unlocked and that are still within the unlock delay period.
|
|
125
156
|
*/
|
|
126
157
|
lockEndTime?: pulumi.Input<string>;
|
|
127
158
|
/**
|
|
128
|
-
* (Optional)
|
|
159
|
+
* (Optional) Lock state of the retention rules to list. Only retention rules with the specified lock state are returned. Valid values are `locked`, `pendingUnlock`, `unlocked`.
|
|
129
160
|
*/
|
|
130
161
|
lockState?: pulumi.Input<string>;
|
|
131
162
|
/**
|
|
@@ -133,11 +164,11 @@ export interface RuleState {
|
|
|
133
164
|
*/
|
|
134
165
|
region?: pulumi.Input<string>;
|
|
135
166
|
/**
|
|
136
|
-
*
|
|
167
|
+
* Resource tags to use to identify resources that are to be retained by a tag-level retention rule. See `resourceTags` below.
|
|
137
168
|
*/
|
|
138
169
|
resourceTags?: pulumi.Input<pulumi.Input<inputs.rbin.RuleResourceTag>[]>;
|
|
139
170
|
/**
|
|
140
|
-
*
|
|
171
|
+
* Resource type to be retained by the retention rule. Valid values are `EBS_SNAPSHOT` and `EC2_IMAGE`.
|
|
141
172
|
*/
|
|
142
173
|
resourceType?: pulumi.Input<string>;
|
|
143
174
|
/**
|
|
@@ -147,7 +178,7 @@ export interface RuleState {
|
|
|
147
178
|
*/
|
|
148
179
|
retentionPeriod?: pulumi.Input<inputs.rbin.RuleRetentionPeriod>;
|
|
149
180
|
/**
|
|
150
|
-
* (String)
|
|
181
|
+
* (String) State of the retention rule. Only retention rules that are in the `available` state retain resources. Valid values include `pending` and `available`.
|
|
151
182
|
*/
|
|
152
183
|
status?: pulumi.Input<string>;
|
|
153
184
|
tags?: pulumi.Input<{
|
|
@@ -162,9 +193,13 @@ export interface RuleState {
|
|
|
162
193
|
*/
|
|
163
194
|
export interface RuleArgs {
|
|
164
195
|
/**
|
|
165
|
-
*
|
|
196
|
+
* Retention rule description.
|
|
166
197
|
*/
|
|
167
198
|
description?: pulumi.Input<string>;
|
|
199
|
+
/**
|
|
200
|
+
* Exclusion tags to use to identify resources that are to be excluded, or ignored, by a Region-level retention rule. See `excludeResourceTags` below.
|
|
201
|
+
*/
|
|
202
|
+
excludeResourceTags?: pulumi.Input<pulumi.Input<inputs.rbin.RuleExcludeResourceTag>[]>;
|
|
168
203
|
/**
|
|
169
204
|
* Information about the retention rule lock configuration. See `lockConfiguration` below.
|
|
170
205
|
*/
|
|
@@ -174,11 +209,11 @@ export interface RuleArgs {
|
|
|
174
209
|
*/
|
|
175
210
|
region?: pulumi.Input<string>;
|
|
176
211
|
/**
|
|
177
|
-
*
|
|
212
|
+
* Resource tags to use to identify resources that are to be retained by a tag-level retention rule. See `resourceTags` below.
|
|
178
213
|
*/
|
|
179
214
|
resourceTags?: pulumi.Input<pulumi.Input<inputs.rbin.RuleResourceTag>[]>;
|
|
180
215
|
/**
|
|
181
|
-
*
|
|
216
|
+
* Resource type to be retained by the retention rule. Valid values are `EBS_SNAPSHOT` and `EC2_IMAGE`.
|
|
182
217
|
*/
|
|
183
218
|
resourceType: pulumi.Input<string>;
|
|
184
219
|
/**
|
package/rbin/rule.js
CHANGED
|
@@ -17,7 +17,7 @@ const utilities = require("../utilities");
|
|
|
17
17
|
* import * as aws from "@pulumi/aws";
|
|
18
18
|
*
|
|
19
19
|
* const example = new aws.rbin.Rule("example", {
|
|
20
|
-
* description: "
|
|
20
|
+
* description: "Example tag-level retention rule",
|
|
21
21
|
* resourceType: "EBS_SNAPSHOT",
|
|
22
22
|
* resourceTags: [{
|
|
23
23
|
* resourceTagKey: "tag_key",
|
|
@@ -33,6 +33,29 @@ const utilities = require("../utilities");
|
|
|
33
33
|
* });
|
|
34
34
|
* ```
|
|
35
35
|
*
|
|
36
|
+
* ### Region-Level Retention Rule
|
|
37
|
+
*
|
|
38
|
+
* ```typescript
|
|
39
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
40
|
+
* import * as aws from "@pulumi/aws";
|
|
41
|
+
*
|
|
42
|
+
* const example = new aws.rbin.Rule("example", {
|
|
43
|
+
* description: "Example region-level retention rule with exclusion tags",
|
|
44
|
+
* resourceType: "EC2_IMAGE",
|
|
45
|
+
* excludeResourceTags: [{
|
|
46
|
+
* resourceTagKey: "tag_key",
|
|
47
|
+
* resourceTagValue: "tag_value",
|
|
48
|
+
* }],
|
|
49
|
+
* retentionPeriod: {
|
|
50
|
+
* retentionPeriodValue: 10,
|
|
51
|
+
* retentionPeriodUnit: "DAYS",
|
|
52
|
+
* },
|
|
53
|
+
* tags: {
|
|
54
|
+
* test_tag_key: "test_tag_value",
|
|
55
|
+
* },
|
|
56
|
+
* });
|
|
57
|
+
* ```
|
|
58
|
+
*
|
|
36
59
|
* ## Import
|
|
37
60
|
*
|
|
38
61
|
* Using `pulumi import`, import RBin Rule using the `id`. For example:
|
|
@@ -71,6 +94,7 @@ class Rule extends pulumi.CustomResource {
|
|
|
71
94
|
const state = argsOrState;
|
|
72
95
|
resourceInputs["arn"] = state ? state.arn : undefined;
|
|
73
96
|
resourceInputs["description"] = state ? state.description : undefined;
|
|
97
|
+
resourceInputs["excludeResourceTags"] = state ? state.excludeResourceTags : undefined;
|
|
74
98
|
resourceInputs["lockConfiguration"] = state ? state.lockConfiguration : undefined;
|
|
75
99
|
resourceInputs["lockEndTime"] = state ? state.lockEndTime : undefined;
|
|
76
100
|
resourceInputs["lockState"] = state ? state.lockState : undefined;
|
|
@@ -91,6 +115,7 @@ class Rule extends pulumi.CustomResource {
|
|
|
91
115
|
throw new Error("Missing required property 'retentionPeriod'");
|
|
92
116
|
}
|
|
93
117
|
resourceInputs["description"] = args ? args.description : undefined;
|
|
118
|
+
resourceInputs["excludeResourceTags"] = args ? args.excludeResourceTags : undefined;
|
|
94
119
|
resourceInputs["lockConfiguration"] = args ? args.lockConfiguration : undefined;
|
|
95
120
|
resourceInputs["region"] = args ? args.region : undefined;
|
|
96
121
|
resourceInputs["resourceTags"] = args ? args.resourceTags : undefined;
|
package/rbin/rule.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"rule.js","sourceRoot":"","sources":["../../rbin/rule.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAIzC,0CAA0C;AAE1C
|
|
1
|
+
{"version":3,"file":"rule.js","sourceRoot":"","sources":["../../rbin/rule.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAIzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0DG;AACH,MAAa,IAAK,SAAQ,MAAM,CAAC,cAAc;IAC3C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAiB,EAAE,IAAmC;QAC/G,OAAO,IAAI,IAAI,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC3D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,IAAI,CAAC,YAAY,CAAC;IACrD,CAAC;IAwDD,YAAY,IAAY,EAAE,WAAkC,EAAE,IAAmC;QAC7F,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAoC,CAAC;YACnD,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,qBAAqB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SACjE;aAAM;YACH,MAAM,IAAI,GAAG,WAAmC,CAAC;YACjD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACzD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;aAC/D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC5D,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;aAClE;YACD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,qBAAqB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC1C,cAAc,CAAC,aAAa,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAClD,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChD,cAAc,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC7C,cAAc,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACjD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACzD,CAAC;;AA5HL,oBA6HC;AA/GG,gBAAgB;AACO,iBAAY,GAAG,oBAAoB,CAAC"}
|
|
@@ -20,12 +20,12 @@ import * as outputs from "../types/output";
|
|
|
20
20
|
* {
|
|
21
21
|
* id: "my_elb",
|
|
22
22
|
* type: "elastic-load-balancer",
|
|
23
|
-
* value: `elb-111111.${current.
|
|
23
|
+
* value: `elb-111111.${current.region}.elb.amazonaws.com`,
|
|
24
24
|
* },
|
|
25
25
|
* {
|
|
26
26
|
* id: "site_down_banner",
|
|
27
27
|
* type: "s3-website",
|
|
28
|
-
* region: current1.
|
|
28
|
+
* region: current1.region,
|
|
29
29
|
* value: "www.example.com",
|
|
30
30
|
* },
|
|
31
31
|
* ],
|
|
@@ -192,12 +192,12 @@ export interface GetTrafficPolicyDocumentResult {
|
|
|
192
192
|
* {
|
|
193
193
|
* id: "my_elb",
|
|
194
194
|
* type: "elastic-load-balancer",
|
|
195
|
-
* value: `elb-111111.${current.
|
|
195
|
+
* value: `elb-111111.${current.region}.elb.amazonaws.com`,
|
|
196
196
|
* },
|
|
197
197
|
* {
|
|
198
198
|
* id: "site_down_banner",
|
|
199
199
|
* type: "s3-website",
|
|
200
|
-
* region: current1.
|
|
200
|
+
* region: current1.region,
|
|
201
201
|
* value: "www.example.com",
|
|
202
202
|
* },
|
|
203
203
|
* ],
|
|
@@ -24,12 +24,12 @@ const utilities = require("../utilities");
|
|
|
24
24
|
* {
|
|
25
25
|
* id: "my_elb",
|
|
26
26
|
* type: "elastic-load-balancer",
|
|
27
|
-
* value: `elb-111111.${current.
|
|
27
|
+
* value: `elb-111111.${current.region}.elb.amazonaws.com`,
|
|
28
28
|
* },
|
|
29
29
|
* {
|
|
30
30
|
* id: "site_down_banner",
|
|
31
31
|
* type: "s3-website",
|
|
32
|
-
* region: current1.
|
|
32
|
+
* region: current1.region,
|
|
33
33
|
* value: "www.example.com",
|
|
34
34
|
* },
|
|
35
35
|
* ],
|
|
@@ -160,12 +160,12 @@ exports.getTrafficPolicyDocument = getTrafficPolicyDocument;
|
|
|
160
160
|
* {
|
|
161
161
|
* id: "my_elb",
|
|
162
162
|
* type: "elastic-load-balancer",
|
|
163
|
-
* value: `elb-111111.${current.
|
|
163
|
+
* value: `elb-111111.${current.region}.elb.amazonaws.com`,
|
|
164
164
|
* },
|
|
165
165
|
* {
|
|
166
166
|
* id: "site_down_banner",
|
|
167
167
|
* type: "s3-website",
|
|
168
|
-
* region: current1.
|
|
168
|
+
* region: current1.region,
|
|
169
169
|
* value: "www.example.com",
|
|
170
170
|
* },
|
|
171
171
|
* ],
|
|
@@ -50,7 +50,7 @@ export declare class ProfilesResourceAssociation extends pulumi.CustomResource {
|
|
|
50
50
|
/**
|
|
51
51
|
* Resource properties for the resource to be associated with the profile.
|
|
52
52
|
*/
|
|
53
|
-
readonly resourceProperties: pulumi.Output<string
|
|
53
|
+
readonly resourceProperties: pulumi.Output<string>;
|
|
54
54
|
/**
|
|
55
55
|
* Type of resource associated with the profile.
|
|
56
56
|
*/
|
package/s3/bucket.d.ts
CHANGED
|
@@ -1,6 +1,7 @@
|
|
|
1
1
|
import * as pulumi from "@pulumi/pulumi";
|
|
2
2
|
import * as inputs from "../types/input";
|
|
3
3
|
import * as outputs from "../types/output";
|
|
4
|
+
import * as enums from "../types/enums";
|
|
4
5
|
/**
|
|
5
6
|
* Provides a S3 bucket resource.
|
|
6
7
|
*
|
|
@@ -233,7 +234,7 @@ export interface BucketState {
|
|
|
233
234
|
*
|
|
234
235
|
* @deprecated acl is deprecated. Use the aws.s3.BucketAcl resource instead.
|
|
235
236
|
*/
|
|
236
|
-
acl?: pulumi.Input<string>;
|
|
237
|
+
acl?: pulumi.Input<string | enums.s3.CannedAcl>;
|
|
237
238
|
/**
|
|
238
239
|
* ARN of the bucket. Will be of format `arn:aws:s3:::bucketname`.
|
|
239
240
|
*/
|
|
@@ -311,7 +312,7 @@ export interface BucketState {
|
|
|
311
312
|
*
|
|
312
313
|
* @deprecated policy is deprecated. Use the aws.s3.BucketPolicy resource instead.
|
|
313
314
|
*/
|
|
314
|
-
policy?: pulumi.Input<string>;
|
|
315
|
+
policy?: pulumi.Input<string | inputs.s3.PolicyDocument>;
|
|
315
316
|
/**
|
|
316
317
|
* Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
|
|
317
318
|
*/
|
|
@@ -397,7 +398,7 @@ export interface BucketArgs {
|
|
|
397
398
|
*
|
|
398
399
|
* @deprecated acl is deprecated. Use the aws.s3.BucketAcl resource instead.
|
|
399
400
|
*/
|
|
400
|
-
acl?: pulumi.Input<string>;
|
|
401
|
+
acl?: pulumi.Input<string | enums.s3.CannedAcl>;
|
|
401
402
|
/**
|
|
402
403
|
* Name of the bucket. If omitted, the provider will assign a random, unique name. Must be lowercase and less than or equal to 63 characters in length. A full list of bucket naming rules [may be found here](https://docs.aws.amazon.com/AmazonS3/latest/userguide/bucketnamingrules.html). The name must not be in the format `[bucketName]--[azid]--x-s3`. Use the `aws.s3.DirectoryBucket` resource to manage S3 Express buckets.
|
|
403
404
|
*/
|
|
@@ -455,7 +456,7 @@ export interface BucketArgs {
|
|
|
455
456
|
*
|
|
456
457
|
* @deprecated policy is deprecated. Use the aws.s3.BucketPolicy resource instead.
|
|
457
458
|
*/
|
|
458
|
-
policy?: pulumi.Input<string>;
|
|
459
|
+
policy?: pulumi.Input<string | inputs.s3.PolicyDocument>;
|
|
459
460
|
/**
|
|
460
461
|
* Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
|
|
461
462
|
*/
|
package/s3/bucketPolicy.d.ts
CHANGED
|
@@ -36,6 +36,8 @@ import * as inputs from "../types/input";
|
|
|
36
36
|
* });
|
|
37
37
|
* ```
|
|
38
38
|
*
|
|
39
|
+
* > Only one `aws.s3.BucketPolicy` resource should be defined per S3 bucket. Defining multiple `aws.s3.BucketPolicy` resources with different Pulumi names but the same `bucket` value may result in unexpected policy overwrites. Each resource uses the `PutBucketPolicy` API, which replaces the entire existing policy without error or warning. Because Pulumi treats each resource independently, the policy applied last will silently override any previously applied policy.
|
|
40
|
+
*
|
|
39
41
|
* ## Import
|
|
40
42
|
*
|
|
41
43
|
* Using `pulumi import`, import S3 bucket policies using the bucket name. For example:
|