@pulumi/aws 7.2.0-alpha.1753487600 → 7.2.0-alpha.1753734409

package/types/input.d.ts

@@ -16727,6 +16727,48 @@ export declare namespace cognito {
          */
         value: pulumi.Input<string>;
     }
+    interface LogDeliveryConfigurationLogConfiguration {
+        /**
+         * Configuration for CloudWatch Logs delivery. See CloudWatch Logs Configuration below.
+         */
+        cloudWatchLogsConfiguration?: pulumi.Input<inputs.cognito.LogDeliveryConfigurationLogConfigurationCloudWatchLogsConfiguration>;
+        /**
+         * The event source to configure logging for. Valid values are `userNotification` and `userAuthEvents`.
+         */
+        eventSource: pulumi.Input<string>;
+        /**
+         * Configuration for Kinesis Data Firehose delivery. See Firehose Configuration below.
+         */
+        firehoseConfiguration?: pulumi.Input<inputs.cognito.LogDeliveryConfigurationLogConfigurationFirehoseConfiguration>;
+        /**
+         * The log level to set for the event source. Valid values are `ERROR` and `INFO`.
+         */
+        logLevel: pulumi.Input<string>;
+        /**
+         * Configuration for S3 delivery. See S3 Configuration below.
+         *
+         * > **Note:** At least one destination configuration (`cloudWatchLogsConfiguration`, `firehoseConfiguration`, or `s3Configuration`) must be specified for each log configuration.
+         */
+        s3Configuration?: pulumi.Input<inputs.cognito.LogDeliveryConfigurationLogConfigurationS3Configuration>;
+    }
+    interface LogDeliveryConfigurationLogConfigurationCloudWatchLogsConfiguration {
+        /**
+         * The ARN of the CloudWatch Logs log group to which the logs should be delivered.
+         */
+        logGroupArn?: pulumi.Input<string>;
+    }
+    interface LogDeliveryConfigurationLogConfigurationFirehoseConfiguration {
+        /**
+         * The ARN of the Kinesis Data Firehose delivery stream to which the logs should be delivered.
+         */
+        streamArn?: pulumi.Input<string>;
+    }
+    interface LogDeliveryConfigurationLogConfigurationS3Configuration {
+        /**
+         * The ARN of the S3 bucket to which the logs should be delivered.
+         */
+        bucketArn?: pulumi.Input<string>;
+    }
     interface ManagedUserPoolClientAnalyticsConfiguration {
         /**
          * Application ARN for an Amazon Pinpoint application. It conflicts with `externalId` and `roleArn`.
@@ -21117,11 +21159,21 @@ export declare namespace dms {
          */
         nestingLevel?: pulumi.Input<string>;
     }
+    interface EndpointOracleSettings {
+        /**
+         * Authentication mechanism to access the Oracle source endpoint. Default is `password`. Valid values are `password` and `kerberos`.
+         */
+        authenticationMethod?: pulumi.Input<string>;
+    }
     interface EndpointPostgresSettings {
         /**
          * For use with change data capture (CDC) only, this attribute has AWS DMS bypass foreign keys and user triggers to reduce the time it takes to bulk load data.
          */
         afterConnectScript?: pulumi.Input<string>;
+        /**
+         * Specifies the authentication method. Valid values: `password`, `iam`.
+         */
+        authenticationMethod?: pulumi.Input<string>;
         /**
          * The Babelfish for Aurora PostgreSQL database name for the endpoint.
          */
@@ -21178,6 +21230,10 @@ export declare namespace dms {
          * Specifies the plugin to use to create a replication slot. Valid values: `pglogical`, `testDecoding`.
          */
         pluginName?: pulumi.Input<string>;
+        /**
+         * Specifies the IAM role to use to authenticate the connection.
+         */
+        serviceAccessRoleArn?: pulumi.Input<string>;
         /**
          * Sets the name of a previously created logical replication slot for a CDC load of the PostgreSQL source instance.
          */
@@ -21278,6 +21334,20 @@ export declare namespace dms {
          */
         vpcSecurityGroupIds?: pulumi.Input<pulumi.Input<string>[]>;
     }
+    interface ReplicationInstanceKerberosAuthenticationSettings {
+        /**
+         * ARN of the IAM role that grants AWS DMS access to the secret containing key cache file for the Kerberos authentication.
+         */
+        keyCacheSecretIamArn: pulumi.Input<string>;
+        /**
+         * Secret ID that stores the key cache file required for Kerberos authentication.
+         */
+        keyCacheSecretId: pulumi.Input<string>;
+        /**
+         * Contents of krb5 configuration file required for Kerberos authentication.
+         */
+        krb5FileContents: pulumi.Input<string>;
+    }
 }
 export declare namespace docdb {
     interface ClusterMasterUserSecret {
@@ -28462,7 +28532,7 @@ export declare namespace eks {
          */
         authenticationMode?: pulumi.Input<string>;
         /**
-         * Whether or not to bootstrap the access config values to the cluster. Default is `false`.
+         * Whether or not to bootstrap the access config values to the cluster. Default is `true`.
          */
         bootstrapClusterCreatorAdminPermissions?: pulumi.Input<boolean>;
     }
@@ -35674,6 +35744,10 @@ export declare namespace inspector2 {
         value: pulumi.Input<string>;
     }
     interface OrganizationConfigurationAutoEnable {
+        /**
+         * Whether code repository scans are automatically enabled for new members of your Amazon Inspector organization.
+         */
+        codeRepository?: pulumi.Input<boolean>;
         /**
          * Whether Amazon EC2 scans are automatically enabled for new members of your Amazon Inspector organization.
          */
@@ -58376,6 +58450,12 @@ export declare namespace neptunegraph {
     }
 }
 export declare namespace networkfirewall {
+    interface FirewallAvailabilityZoneMapping {
+        /**
+         * The ID of the Availability Zone where the firewall endpoint is located..
+         */
+        availabilityZoneId: pulumi.Input<string>;
+    }
     interface FirewallEncryptionConfiguration {
         /**
          * The ID of the customer managed key. You can use any of the [key identifiers](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#key-id) that KMS supports, unless you're using a key that's managed by another account. If you're using a key managed by another account, then specify the key ARN.
@@ -58391,6 +58471,10 @@ export declare namespace networkfirewall {
          * Set of subnets configured for use by the firewall.
          */
         syncStates?: pulumi.Input<pulumi.Input<inputs.networkfirewall.FirewallFirewallStatusSyncState>[]>;
+        /**
+         * Set of transit gateway configured for use by the firewall.
+         */
+        transitGatewayAttachmentSyncStates?: pulumi.Input<pulumi.Input<inputs.networkfirewall.FirewallFirewallStatusTransitGatewayAttachmentSyncState>[]>;
     }
     interface FirewallFirewallStatusSyncState {
         /**
@@ -58412,6 +58496,12 @@ export declare namespace networkfirewall {
          */
         subnetId?: pulumi.Input<string>;
     }
+    interface FirewallFirewallStatusTransitGatewayAttachmentSyncState {
+        /**
+         * The unique identifier of the transit gateway attachment.
+         */
+        attachmentId?: pulumi.Input<string>;
+    }
     interface FirewallPolicyEncryptionConfiguration {
         /**
          * The ID of the customer managed key. You can use any of the [key identifiers](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#key-id) that KMS supports, unless you're using a key that's managed by another account. If you're using a key managed by another account, then specify the key ARN.
@@ -58575,6 +58665,16 @@ export declare namespace networkfirewall {
          */
         subnetId: pulumi.Input<string>;
     }
+    interface FirewallTransitGatewayAttachmentAccepterTimeouts {
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
+         */
+        create?: pulumi.Input<string>;
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
+         */
+        delete?: pulumi.Input<string>;
+    }
     interface LoggingConfigurationLoggingConfiguration {
         /**
          * Set of configuration blocks describing the logging details for a firewall. See Log Destination Config below for details. At most, only Three blocks can be specified; one for `FLOW` logs and one for `ALERT` logs and one for `TLS` logs.
@@ -66204,6 +66304,106 @@ export declare namespace s3 {
     }
     interface BucketLoggingV2TargetObjectKeyFormatSimplePrefix {
     }
+    interface BucketMetadataConfigurationMetadataConfiguration {
+        /**
+         * Destination information for the S3 Metadata configuration.
+         */
+        destinations?: pulumi.Input<pulumi.Input<inputs.s3.BucketMetadataConfigurationMetadataConfigurationDestination>[]>;
+        /**
+         * Inventory table configuration. See `inventoryTableConfiguration` Block for details.
+         */
+        inventoryTableConfiguration?: pulumi.Input<inputs.s3.BucketMetadataConfigurationMetadataConfigurationInventoryTableConfiguration>;
+        /**
+         * Journal table configuration. See `journalTableConfiguration` Block for details.
+         */
+        journalTableConfiguration?: pulumi.Input<inputs.s3.BucketMetadataConfigurationMetadataConfigurationJournalTableConfiguration>;
+    }
+    interface BucketMetadataConfigurationMetadataConfigurationDestination {
+        /**
+         * ARN of the table bucket where the metadata configuration is stored.
+         */
+        tableBucketArn: pulumi.Input<string>;
+        /**
+         * Type of the table bucket where the metadata configuration is stored.
+         */
+        tableBucketType: pulumi.Input<string>;
+        /**
+         * Namespace in the table bucket where the metadata tables for the metadata configuration are stored.
+         */
+        tableNamespace: pulumi.Input<string>;
+    }
+    interface BucketMetadataConfigurationMetadataConfigurationInventoryTableConfiguration {
+        /**
+         * Configuration state of the inventory table, indicating whether the inventory table is enabled or disabled. Valid values: `ENABLED`, `DISABLED`.
+         */
+        configurationState: pulumi.Input<string>;
+        /**
+         * Encryption configuration for the inventory table. See `encryptionConfiguration` Block for details.
+         */
+        encryptionConfiguration?: pulumi.Input<inputs.s3.BucketMetadataConfigurationMetadataConfigurationInventoryTableConfigurationEncryptionConfiguration>;
+        /**
+         * Inventory table ARN.
+         */
+        tableArn?: pulumi.Input<string>;
+        /**
+         * Inventory table name.
+         */
+        tableName?: pulumi.Input<string>;
+    }
+    interface BucketMetadataConfigurationMetadataConfigurationInventoryTableConfigurationEncryptionConfiguration {
+        /**
+         * KMS key ARN when `sseAlgorithm` is `aws:kms`.
+         */
+        kmsKeyArn?: pulumi.Input<string>;
+        /**
+         * Encryption type for the metadata table. Valid values: `aws:kms`, `AES256`.
+         */
+        sseAlgorithm: pulumi.Input<string>;
+    }
+    interface BucketMetadataConfigurationMetadataConfigurationJournalTableConfiguration {
+        /**
+         * Encryption configuration for the journal table. See `encryptionConfiguration` Block for details.
+         */
+        encryptionConfiguration?: pulumi.Input<inputs.s3.BucketMetadataConfigurationMetadataConfigurationJournalTableConfigurationEncryptionConfiguration>;
+        /**
+         * Journal table record expiration settings. See `recordExpiration` Block for details.
+         */
+        recordExpiration?: pulumi.Input<inputs.s3.BucketMetadataConfigurationMetadataConfigurationJournalTableConfigurationRecordExpiration>;
+        /**
+         * Journal table ARN.
+         */
+        tableArn?: pulumi.Input<string>;
+        /**
+         * Journal table name.
+         */
+        tableName?: pulumi.Input<string>;
+    }
+    interface BucketMetadataConfigurationMetadataConfigurationJournalTableConfigurationEncryptionConfiguration {
+        /**
+         * KMS key ARN when `sseAlgorithm` is `aws:kms`.
+         */
+        kmsKeyArn?: pulumi.Input<string>;
+        /**
+         * Encryption type for the metadata table. Valid values: `aws:kms`, `AES256`.
+         */
+        sseAlgorithm: pulumi.Input<string>;
+    }
+    interface BucketMetadataConfigurationMetadataConfigurationJournalTableConfigurationRecordExpiration {
+        /**
+         * Number of days to retain journal table records.
+         */
+        days?: pulumi.Input<number>;
+        /**
+         * Whether journal table record expiration is enabled or disabled. Valid values: `ENABLED`, `DISABLED`.
+         */
+        expiration: pulumi.Input<string>;
+    }
+    interface BucketMetadataConfigurationTimeouts {
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
+         */
+        create?: pulumi.Input<string>;
+    }
     interface BucketMetricFilter {
         /**
          * S3 Access Point ARN for filtering (singular).
@@ -78135,6 +78335,7 @@ export declare namespace wafv2 {
         scopeDownStatement?: pulumi.Input<inputs.wafv2.RuleGroupRuleStatementRateBasedStatementScopeDownStatement>;
     }
     interface RuleGroupRuleStatementRateBasedStatementCustomKey {
+        asn?: pulumi.Input<inputs.wafv2.RuleGroupRuleStatementRateBasedStatementCustomKeyAsn>;
         /**
          * (Optional) Use the value of a cookie in the request as an aggregate key. See RateLimit `cookie` below for details.
          */
@@ -78180,6 +78381,8 @@ export declare namespace wafv2 {
          */
         uriPath?: pulumi.Input<inputs.wafv2.RuleGroupRuleStatementRateBasedStatementCustomKeyUriPath>;
     }
+    interface RuleGroupRuleStatementRateBasedStatementCustomKeyAsn {
+    }
     interface RuleGroupRuleStatementRateBasedStatementCustomKeyCookie {
         /**
          * A friendly name of the rule group.
@@ -83648,6 +83851,10 @@ export declare namespace wafv2 {
         scopeDownStatement?: pulumi.Input<inputs.wafv2.WebAclRuleStatementRateBasedStatementScopeDownStatement>;
     }
     interface WebAclRuleStatementRateBasedStatementCustomKey {
+        /**
+         * Use an Autonomous System Number (ASN) derived from the request's originating or forwarded IP address as an aggregate key. See RateLimit `asn` below for details.
+         */
+        asn?: pulumi.Input<inputs.wafv2.WebAclRuleStatementRateBasedStatementCustomKeyAsn>;
         /**
          * Use the value of a cookie in the request as an aggregate key. See RateLimit `cookie` below for details.
          */
@@ -83693,6 +83900,8 @@ export declare namespace wafv2 {
          */
         uriPath?: pulumi.Input<inputs.wafv2.WebAclRuleStatementRateBasedStatementCustomKeyUriPath>;
     }
+    interface WebAclRuleStatementRateBasedStatementCustomKeyAsn {
+    }
     interface WebAclRuleStatementRateBasedStatementCustomKeyCookie {
         /**
          * The name of the cookie to use.

package/types/input.js.map

@@ -1 +1 @@
-{"version":3,"file":"input.js","sourceRoot":"","sources":["../../types/input.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAy+jEjF,IAAiB,GAAG,CAwcnB;AAxcD,WAAiB,GAAG;IAyXhB;;OAEG;IACH,SAAgB,sCAAsC,CAAC,GAA4B;;QAC/E,uCACO,GAAG,KACN,WAAW,EAAE,MAAA,CAAC,GAAG,CAAC,WAAW,CAAC,mCAAI,WAAW,IAC/C;IACN,CAAC;IALe,0CAAsC,yCAKrD,CAAA;AAuEL,CAAC,EAxcgB,GAAG,GAAH,WAAG,KAAH,WAAG,QAwcnB"}
+{"version":3,"file":"input.js","sourceRoot":"","sources":["../../types/input.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAslkEjF,IAAiB,GAAG,CAwcnB;AAxcD,WAAiB,GAAG;IAyXhB;;OAEG;IACH,SAAgB,sCAAsC,CAAC,GAA4B;;QAC/E,uCACO,GAAG,KACN,WAAW,EAAE,MAAA,CAAC,GAAG,CAAC,WAAW,CAAC,mCAAI,WAAW,IAC/C;IACN,CAAC;IALe,0CAAsC,yCAKrD,CAAA;AAuEL,CAAC,EAxcgB,GAAG,GAAH,WAAG,KAAH,WAAG,QAwcnB"}