@pulumi/aws 7.43.0 → 7.44.0-alpha.1787596087

package/accessanalyzer/analyzer.d.ts

@@ -37,11 +37,8 @@ import * as outputs from "../types/output";
  * import * as aws from "@pulumi/aws";
  *
  * const example = new aws.accessanalyzer.Analyzer("example", {
- *     analyzerName: "example",
- *     type: "ORGANIZATION_UNUSED_ACCESS",
  *     configuration: {
  *         unusedAccess: {
- *             unusedAccessAge: 180,
  *             analysisRule: {
  *                 exclusions: [
  *                     {
@@ -62,8 +59,11 @@ import * as outputs from "../types/output";
  *                     },
  *                 ],
  *             },
+ *             unusedAccessAge: 180,
  *         },
  *     },
+ *     analyzerName: "example",
+ *     type: "ORGANIZATION_UNUSED_ACCESS",
  * });
  * ```
  *
@@ -74,8 +74,6 @@ import * as outputs from "../types/output";
  * import * as aws from "@pulumi/aws";
  *
  * const test = new aws.accessanalyzer.Analyzer("test", {
- *     analyzerName: "example",
- *     type: "ORGANIZATION_INTERNAL_ACCESS",
  *     configuration: {
  *         internalAccess: {
  *             analysisRule: {
@@ -89,6 +87,8 @@ import * as outputs from "../types/output";
  *             },
  *         },
  *     },
+ *     analyzerName: "example",
+ *     type: "ORGANIZATION_INTERNAL_ACCESS",
  * });
  * ```
  *
@@ -99,8 +99,6 @@ import * as outputs from "../types/output";
  * import * as aws from "@pulumi/aws";
  *
  * const test = new aws.accessanalyzer.Analyzer("test", {
- *     analyzerName: "example",
- *     type: "ORGANIZATION_INTERNAL_ACCESS",
  *     configuration: {
  *         internalAccess: {
  *             analysisRule: {
@@ -111,6 +109,8 @@ import * as outputs from "../types/output";
  *             },
  *         },
  *     },
+ *     analyzerName: "example",
+ *     type: "ORGANIZATION_INTERNAL_ACCESS",
  * });
  * ```
  *

package/accessanalyzer/analyzer.js

@@ -64,11 +64,8 @@ const utilities = __importStar(require("../utilities"));
  * import * as aws from "@pulumi/aws";
  *
  * const example = new aws.accessanalyzer.Analyzer("example", {
- *     analyzerName: "example",
- *     type: "ORGANIZATION_UNUSED_ACCESS",
  *     configuration: {
  *         unusedAccess: {
- *             unusedAccessAge: 180,
  *             analysisRule: {
  *                 exclusions: [
  *                     {
@@ -89,8 +86,11 @@ const utilities = __importStar(require("../utilities"));
  *                     },
  *                 ],
  *             },
+ *             unusedAccessAge: 180,
  *         },
  *     },
+ *     analyzerName: "example",
+ *     type: "ORGANIZATION_UNUSED_ACCESS",
  * });
  * ```
  *
@@ -101,8 +101,6 @@ const utilities = __importStar(require("../utilities"));
  * import * as aws from "@pulumi/aws";
  *
  * const test = new aws.accessanalyzer.Analyzer("test", {
- *     analyzerName: "example",
- *     type: "ORGANIZATION_INTERNAL_ACCESS",
  *     configuration: {
  *         internalAccess: {
  *             analysisRule: {
@@ -116,6 +114,8 @@ const utilities = __importStar(require("../utilities"));
  *             },
  *         },
  *     },
+ *     analyzerName: "example",
+ *     type: "ORGANIZATION_INTERNAL_ACCESS",
  * });
  * ```
  *
@@ -126,8 +126,6 @@ const utilities = __importStar(require("../utilities"));
  * import * as aws from "@pulumi/aws";
  *
  * const test = new aws.accessanalyzer.Analyzer("test", {
- *     analyzerName: "example",
- *     type: "ORGANIZATION_INTERNAL_ACCESS",
  *     configuration: {
  *         internalAccess: {
  *             analysisRule: {
@@ -138,6 +136,8 @@ const utilities = __importStar(require("../utilities"));
  *             },
  *         },
  *     },
+ *     analyzerName: "example",
+ *     type: "ORGANIZATION_INTERNAL_ACCESS",
  * });
  * ```
  *

package/accessanalyzer/archiveRule.d.ts

@@ -13,8 +13,6 @@ import * as outputs from "../types/output";
  * import * as aws from "@pulumi/aws";
  *
  * const example = new aws.accessanalyzer.ArchiveRule("example", {
- *     analyzerName: "example-analyzer",
- *     ruleName: "example-rule",
  *     filters: [
  *         {
  *             criteria: "condition.aws:UserId",
@@ -29,6 +27,8 @@ import * as outputs from "../types/output";
  *             eqs: ["false"],
  *         },
  *     ],
+ *     analyzerName: "example-analyzer",
+ *     ruleName: "example-rule",
  * });
  * ```
  *

package/accessanalyzer/archiveRule.js

@@ -40,8 +40,6 @@ const utilities = __importStar(require("../utilities"));
  * import * as aws from "@pulumi/aws";
  *
  * const example = new aws.accessanalyzer.ArchiveRule("example", {
- *     analyzerName: "example-analyzer",
- *     ruleName: "example-rule",
  *     filters: [
  *         {
  *             criteria: "condition.aws:UserId",
@@ -56,6 +54,8 @@ const utilities = __importStar(require("../utilities"));
  *             eqs: ["false"],
  *         },
  *     ],
+ *     analyzerName: "example-analyzer",
+ *     ruleName: "example-rule",
  * });
  * ```
  *

package/acm/certificate.d.ts

@@ -25,12 +25,12 @@ import * as outputs from "../types/output";
  * import * as aws from "@pulumi/aws";
  *
  * const cert = new aws.acm.Certificate("cert", {
- *     domainName: "testing.example.com",
- *     validationMethod: "EMAIL",
  *     validationOptions: [{
  *         domainName: "testing.example.com",
  *         validationDomain: "example.com",
  *     }],
+ *     domainName: "testing.example.com",
+ *     validationMethod: "EMAIL",
  * });
  * ```
  *
@@ -43,12 +43,12 @@ import * as outputs from "../types/output";
  *
  * const example = new tls.PrivateKey("example", {algorithm: "RSA"});
  * const exampleSelfSignedCert = new tls.SelfSignedCert("example", {
- *     keyAlgorithm: "RSA",
- *     privateKeyPem: example.privateKeyPem,
  *     subject: [{
  *         commonName: "example.com",
  *         organization: "ACME Examples, Inc",
  *     }],
+ *     keyAlgorithm: "RSA",
+ *     privateKeyPem: example.privateKeyPem,
  *     validityPeriodHours: 12,
  *     allowedUses: [
  *         "key_encipherment",
@@ -71,12 +71,12 @@ import * as outputs from "../types/output";
  *
  * const example = new tls.PrivateKey("example", {algorithm: "RSA"});
  * const exampleSelfSignedCert = new tls.SelfSignedCert("example", {
- *     keyAlgorithm: "RSA",
- *     privateKeyPem: example.privateKeyPem,
  *     subject: [{
  *         commonName: "example.com",
  *         organization: "ACME Examples, Inc",
  *     }],
+ *     keyAlgorithm: "RSA",
+ *     privateKeyPem: example.privateKeyPem,
  *     validityPeriodHours: 12,
  *     allowedUses: [
  *         "key_encipherment",

package/acm/certificate.js

@@ -52,12 +52,12 @@ const utilities = __importStar(require("../utilities"));
  * import * as aws from "@pulumi/aws";
  *
  * const cert = new aws.acm.Certificate("cert", {
- *     domainName: "testing.example.com",
- *     validationMethod: "EMAIL",
  *     validationOptions: [{
  *         domainName: "testing.example.com",
  *         validationDomain: "example.com",
  *     }],
+ *     domainName: "testing.example.com",
+ *     validationMethod: "EMAIL",
  * });
  * ```
  *
@@ -70,12 +70,12 @@ const utilities = __importStar(require("../utilities"));
  *
  * const example = new tls.PrivateKey("example", {algorithm: "RSA"});
  * const exampleSelfSignedCert = new tls.SelfSignedCert("example", {
- *     keyAlgorithm: "RSA",
- *     privateKeyPem: example.privateKeyPem,
  *     subject: [{
  *         commonName: "example.com",
  *         organization: "ACME Examples, Inc",
  *     }],
+ *     keyAlgorithm: "RSA",
+ *     privateKeyPem: example.privateKeyPem,
  *     validityPeriodHours: 12,
  *     allowedUses: [
  *         "key_encipherment",
@@ -98,12 +98,12 @@ const utilities = __importStar(require("../utilities"));
  *
  * const example = new tls.PrivateKey("example", {algorithm: "RSA"});
  * const exampleSelfSignedCert = new tls.SelfSignedCert("example", {
- *     keyAlgorithm: "RSA",
- *     privateKeyPem: example.privateKeyPem,
  *     subject: [{
  *         commonName: "example.com",
  *         organization: "ACME Examples, Inc",
  *     }],
+ *     keyAlgorithm: "RSA",
+ *     privateKeyPem: example.privateKeyPem,
  *     validityPeriodHours: 12,
  *     allowedUses: [
  *         "key_encipherment",

package/acmpca/certificate.d.ts

@@ -20,29 +20,29 @@ import * as outputs from "../types/output";
  *
  * const exampleCertificateAuthority = new aws.acmpca.CertificateAuthority("example", {
  *     certificateAuthorityConfiguration: {
- *         keyAlgorithm: "RSA_4096",
- *         signingAlgorithm: "SHA512WITHRSA",
  *         subject: {
  *             commonName: "example.com",
  *         },
+ *         keyAlgorithm: "RSA_4096",
+ *         signingAlgorithm: "SHA512WITHRSA",
  *     },
  *     permanentDeletionTimeInDays: 7,
  * });
  * const key = new tls.PrivateKey("key", {algorithm: "RSA"});
  * const csr = new tls.CertRequest("csr", {
- *     privateKeyPem: key.privateKeyPem,
  *     subject: [{
  *         commonName: "example",
  *     }],
+ *     privateKeyPem: key.privateKeyPem,
  * });
  * const example = new aws.acmpca.Certificate("example", {
- *     certificateAuthorityArn: exampleCertificateAuthority.arn,
- *     certificateSigningRequest: csr.certRequestPem,
- *     signingAlgorithm: "SHA256WITHRSA",
  *     validity: {
  *         type: "YEARS",
  *         value: "1",
  *     },
+ *     certificateAuthorityArn: exampleCertificateAuthority.arn,
+ *     certificateSigningRequest: csr.certRequestPem,
+ *     signingAlgorithm: "SHA256WITHRSA",
  * });
  * ```
  *

package/acmpca/certificate.js

@@ -47,29 +47,29 @@ const utilities = __importStar(require("../utilities"));
  *
  * const exampleCertificateAuthority = new aws.acmpca.CertificateAuthority("example", {
  *     certificateAuthorityConfiguration: {
- *         keyAlgorithm: "RSA_4096",
- *         signingAlgorithm: "SHA512WITHRSA",
  *         subject: {
  *             commonName: "example.com",
  *         },
+ *         keyAlgorithm: "RSA_4096",
+ *         signingAlgorithm: "SHA512WITHRSA",
  *     },
  *     permanentDeletionTimeInDays: 7,
  * });
  * const key = new tls.PrivateKey("key", {algorithm: "RSA"});
  * const csr = new tls.CertRequest("csr", {
- *     privateKeyPem: key.privateKeyPem,
  *     subject: [{
  *         commonName: "example",
  *     }],
+ *     privateKeyPem: key.privateKeyPem,
  * });
  * const example = new aws.acmpca.Certificate("example", {
- *     certificateAuthorityArn: exampleCertificateAuthority.arn,
- *     certificateSigningRequest: csr.certRequestPem,
- *     signingAlgorithm: "SHA256WITHRSA",
  *     validity: {
  *         type: "YEARS",
  *         value: "1",
  *     },
+ *     certificateAuthorityArn: exampleCertificateAuthority.arn,
+ *     certificateSigningRequest: csr.certRequestPem,
+ *     signingAlgorithm: "SHA256WITHRSA",
  * });
  * ```
  *

package/acmpca/certificateAuthority.d.ts

@@ -16,11 +16,11 @@ import * as outputs from "../types/output";
  *
  * const example = new aws.acmpca.CertificateAuthority("example", {
  *     certificateAuthorityConfiguration: {
- *         keyAlgorithm: "RSA_4096",
- *         signingAlgorithm: "SHA512WITHRSA",
  *         subject: {
  *             commonName: "example.com",
  *         },
+ *         keyAlgorithm: "RSA_4096",
+ *         signingAlgorithm: "SHA512WITHRSA",
  *     },
  *     permanentDeletionTimeInDays: 7,
  * });
@@ -33,14 +33,14 @@ import * as outputs from "../types/output";
  * import * as aws from "@pulumi/aws";
  *
  * const example = new aws.acmpca.CertificateAuthority("example", {
- *     usageMode: "SHORT_LIVED_CERTIFICATE",
  *     certificateAuthorityConfiguration: {
- *         keyAlgorithm: "RSA_4096",
- *         signingAlgorithm: "SHA512WITHRSA",
  *         subject: {
  *             commonName: "example.com",
  *         },
+ *         keyAlgorithm: "RSA_4096",
+ *         signingAlgorithm: "SHA512WITHRSA",
  *     },
+ *     usageMode: "SHORT_LIVED_CERTIFICATE",
  * });
  * ```
  *
@@ -56,6 +56,10 @@ import * as outputs from "../types/output";
  * });
  * const acmpcaBucketAccess = aws.iam.getPolicyDocumentOutput({
  *     statements: [{
+ *         principals: [{
+ *             identifiers: ["acm-pca.amazonaws.com"],
+ *             type: "Service",
+ *         }],
  *         actions: [
  *             "s3:GetBucketAcl",
  *             "s3:GetBucketLocation",
@@ -66,10 +70,6 @@ import * as outputs from "../types/output";
  *             example.arn,
  *             pulumi.interpolate`${example.arn}/*`,
  *         ],
- *         principals: [{
- *             identifiers: ["acm-pca.amazonaws.com"],
- *             type: "Service",
- *         }],
  *     }],
  * });
  * const exampleBucketPolicy = new aws.s3.BucketPolicy("example", {
@@ -78,11 +78,11 @@ import * as outputs from "../types/output";
  * });
  * const exampleCertificateAuthority = new aws.acmpca.CertificateAuthority("example", {
  *     certificateAuthorityConfiguration: {
- *         keyAlgorithm: "RSA_4096",
- *         signingAlgorithm: "SHA512WITHRSA",
  *         subject: {
  *             commonName: "example.com",
  *         },
+ *         keyAlgorithm: "RSA_4096",
+ *         signingAlgorithm: "SHA512WITHRSA",
  *     },
  *     revocationConfiguration: {
  *         crlConfiguration: {

package/acmpca/certificateAuthority.js

@@ -43,11 +43,11 @@ const utilities = __importStar(require("../utilities"));
  *
  * const example = new aws.acmpca.CertificateAuthority("example", {
  *     certificateAuthorityConfiguration: {
- *         keyAlgorithm: "RSA_4096",
- *         signingAlgorithm: "SHA512WITHRSA",
  *         subject: {
  *             commonName: "example.com",
  *         },
+ *         keyAlgorithm: "RSA_4096",
+ *         signingAlgorithm: "SHA512WITHRSA",
  *     },
  *     permanentDeletionTimeInDays: 7,
  * });
@@ -60,14 +60,14 @@ const utilities = __importStar(require("../utilities"));
  * import * as aws from "@pulumi/aws";
  *
  * const example = new aws.acmpca.CertificateAuthority("example", {
- *     usageMode: "SHORT_LIVED_CERTIFICATE",
  *     certificateAuthorityConfiguration: {
- *         keyAlgorithm: "RSA_4096",
- *         signingAlgorithm: "SHA512WITHRSA",
  *         subject: {
  *             commonName: "example.com",
  *         },
+ *         keyAlgorithm: "RSA_4096",
+ *         signingAlgorithm: "SHA512WITHRSA",
  *     },
+ *     usageMode: "SHORT_LIVED_CERTIFICATE",
  * });
  * ```
  *
@@ -83,6 +83,10 @@ const utilities = __importStar(require("../utilities"));
  * });
  * const acmpcaBucketAccess = aws.iam.getPolicyDocumentOutput({
  *     statements: [{
+ *         principals: [{
+ *             identifiers: ["acm-pca.amazonaws.com"],
+ *             type: "Service",
+ *         }],
  *         actions: [
  *             "s3:GetBucketAcl",
  *             "s3:GetBucketLocation",
@@ -93,10 +97,6 @@ const utilities = __importStar(require("../utilities"));
  *             example.arn,
  *             pulumi.interpolate`${example.arn}/*`,
  *         ],
- *         principals: [{
- *             identifiers: ["acm-pca.amazonaws.com"],
- *             type: "Service",
- *         }],
  *     }],
  * });
  * const exampleBucketPolicy = new aws.s3.BucketPolicy("example", {
@@ -105,11 +105,11 @@ const utilities = __importStar(require("../utilities"));
  * });
  * const exampleCertificateAuthority = new aws.acmpca.CertificateAuthority("example", {
  *     certificateAuthorityConfiguration: {
- *         keyAlgorithm: "RSA_4096",
- *         signingAlgorithm: "SHA512WITHRSA",
  *         subject: {
  *             commonName: "example.com",
  *         },
+ *         keyAlgorithm: "RSA_4096",
+ *         signingAlgorithm: "SHA512WITHRSA",
  *     },
  *     revocationConfiguration: {
  *         crlConfiguration: {

package/acmpca/certificateAuthorityCertificate.d.ts

@@ -11,25 +11,25 @@ import * as pulumi from "@pulumi/pulumi";
  * import * as aws from "@pulumi/aws";
  *
  * const exampleCertificateAuthority = new aws.acmpca.CertificateAuthority("example", {
- *     type: "ROOT",
  *     certificateAuthorityConfiguration: {
- *         keyAlgorithm: "RSA_4096",
- *         signingAlgorithm: "SHA512WITHRSA",
  *         subject: {
  *             commonName: "example.com",
  *         },
+ *         keyAlgorithm: "RSA_4096",
+ *         signingAlgorithm: "SHA512WITHRSA",
  *     },
+ *     type: "ROOT",
  * });
  * const current = aws.getPartition({});
  * const exampleCertificate = new aws.acmpca.Certificate("example", {
- *     certificateAuthorityArn: exampleCertificateAuthority.arn,
- *     certificateSigningRequest: exampleCertificateAuthority.certificateSigningRequest,
- *     signingAlgorithm: "SHA512WITHRSA",
- *     templateArn: current.then(current => `arn:${current.partition}:acm-pca:::template/RootCACertificate/V1`),
  *     validity: {
  *         type: "YEARS",
  *         value: "1",
  *     },
+ *     certificateAuthorityArn: exampleCertificateAuthority.arn,
+ *     certificateSigningRequest: exampleCertificateAuthority.certificateSigningRequest,
+ *     signingAlgorithm: "SHA512WITHRSA",
+ *     templateArn: current.then(current => `arn:${current.partition}:acm-pca:::template/RootCACertificate/V1`),
  * });
  * const example = new aws.acmpca.CertificateAuthorityCertificate("example", {
  *     certificateAuthorityArn: exampleCertificateAuthority.arn,
@@ -47,26 +47,26 @@ import * as pulumi from "@pulumi/pulumi";
  * import * as aws from "@pulumi/aws";
  *
  * const subordinateCertificateAuthority = new aws.acmpca.CertificateAuthority("subordinate", {
- *     type: "SUBORDINATE",
  *     certificateAuthorityConfiguration: {
- *         keyAlgorithm: "RSA_2048",
- *         signingAlgorithm: "SHA512WITHRSA",
  *         subject: {
  *             commonName: "sub.example.com",
  *         },
+ *         keyAlgorithm: "RSA_2048",
+ *         signingAlgorithm: "SHA512WITHRSA",
  *     },
+ *     type: "SUBORDINATE",
  * });
  * const root = new aws.acmpca.CertificateAuthority("root", {});
  * const current = aws.getPartition({});
  * const subordinateCertificate = new aws.acmpca.Certificate("subordinate", {
- *     certificateAuthorityArn: root.arn,
- *     certificateSigningRequest: subordinateCertificateAuthority.certificateSigningRequest,
- *     signingAlgorithm: "SHA512WITHRSA",
- *     templateArn: current.then(current => `arn:${current.partition}:acm-pca:::template/SubordinateCACertificate_PathLen0/V1`),
  *     validity: {
  *         type: "YEARS",
  *         value: "1",
  *     },
+ *     certificateAuthorityArn: root.arn,
+ *     certificateSigningRequest: subordinateCertificateAuthority.certificateSigningRequest,
+ *     signingAlgorithm: "SHA512WITHRSA",
+ *     templateArn: current.then(current => `arn:${current.partition}:acm-pca:::template/SubordinateCACertificate_PathLen0/V1`),
  * });
  * const subordinate = new aws.acmpca.CertificateAuthorityCertificate("subordinate", {
  *     certificateAuthorityArn: subordinateCertificateAuthority.arn,

package/acmpca/certificateAuthorityCertificate.js

@@ -40,25 +40,25 @@ const utilities = __importStar(require("../utilities"));
  * import * as aws from "@pulumi/aws";
  *
  * const exampleCertificateAuthority = new aws.acmpca.CertificateAuthority("example", {
- *     type: "ROOT",
  *     certificateAuthorityConfiguration: {
- *         keyAlgorithm: "RSA_4096",
- *         signingAlgorithm: "SHA512WITHRSA",
  *         subject: {
  *             commonName: "example.com",
  *         },
+ *         keyAlgorithm: "RSA_4096",
+ *         signingAlgorithm: "SHA512WITHRSA",
  *     },
+ *     type: "ROOT",
  * });
  * const current = aws.getPartition({});
  * const exampleCertificate = new aws.acmpca.Certificate("example", {
- *     certificateAuthorityArn: exampleCertificateAuthority.arn,
- *     certificateSigningRequest: exampleCertificateAuthority.certificateSigningRequest,
- *     signingAlgorithm: "SHA512WITHRSA",
- *     templateArn: current.then(current => `arn:${current.partition}:acm-pca:::template/RootCACertificate/V1`),
  *     validity: {
  *         type: "YEARS",
  *         value: "1",
  *     },
+ *     certificateAuthorityArn: exampleCertificateAuthority.arn,
+ *     certificateSigningRequest: exampleCertificateAuthority.certificateSigningRequest,
+ *     signingAlgorithm: "SHA512WITHRSA",
+ *     templateArn: current.then(current => `arn:${current.partition}:acm-pca:::template/RootCACertificate/V1`),
  * });
  * const example = new aws.acmpca.CertificateAuthorityCertificate("example", {
  *     certificateAuthorityArn: exampleCertificateAuthority.arn,
@@ -76,26 +76,26 @@ const utilities = __importStar(require("../utilities"));
  * import * as aws from "@pulumi/aws";
  *
  * const subordinateCertificateAuthority = new aws.acmpca.CertificateAuthority("subordinate", {
- *     type: "SUBORDINATE",
  *     certificateAuthorityConfiguration: {
- *         keyAlgorithm: "RSA_2048",
- *         signingAlgorithm: "SHA512WITHRSA",
  *         subject: {
  *             commonName: "sub.example.com",
  *         },
+ *         keyAlgorithm: "RSA_2048",
+ *         signingAlgorithm: "SHA512WITHRSA",
  *     },
+ *     type: "SUBORDINATE",
  * });
  * const root = new aws.acmpca.CertificateAuthority("root", {});
  * const current = aws.getPartition({});
  * const subordinateCertificate = new aws.acmpca.Certificate("subordinate", {
- *     certificateAuthorityArn: root.arn,
- *     certificateSigningRequest: subordinateCertificateAuthority.certificateSigningRequest,
- *     signingAlgorithm: "SHA512WITHRSA",
- *     templateArn: current.then(current => `arn:${current.partition}:acm-pca:::template/SubordinateCACertificate_PathLen0/V1`),
  *     validity: {
  *         type: "YEARS",
  *         value: "1",
  *     },
+ *     certificateAuthorityArn: root.arn,
+ *     certificateSigningRequest: subordinateCertificateAuthority.certificateSigningRequest,
+ *     signingAlgorithm: "SHA512WITHRSA",
+ *     templateArn: current.then(current => `arn:${current.partition}:acm-pca:::template/SubordinateCACertificate_PathLen0/V1`),
  * });
  * const subordinate = new aws.acmpca.CertificateAuthorityCertificate("subordinate", {
  *     certificateAuthorityArn: subordinateCertificateAuthority.arn,

package/acmpca/permission.d.ts

@@ -10,11 +10,11 @@ import * as pulumi from "@pulumi/pulumi";
  * import * as aws from "@pulumi/aws";
  *
  * const exampleCertificateAuthority = new aws.acmpca.CertificateAuthority("example", {certificateAuthorityConfiguration: {
- *     keyAlgorithm: "RSA_4096",
- *     signingAlgorithm: "SHA512WITHRSA",
  *     subject: {
  *         commonName: "example.com",
  *     },
+ *     keyAlgorithm: "RSA_4096",
+ *     signingAlgorithm: "SHA512WITHRSA",
  * }});
  * const example = new aws.acmpca.Permission("example", {
  *     certificateAuthorityArn: exampleCertificateAuthority.arn,

package/acmpca/permission.js

@@ -39,11 +39,11 @@ const utilities = __importStar(require("../utilities"));
  * import * as aws from "@pulumi/aws";
  *
  * const exampleCertificateAuthority = new aws.acmpca.CertificateAuthority("example", {certificateAuthorityConfiguration: {
- *     keyAlgorithm: "RSA_4096",
- *     signingAlgorithm: "SHA512WITHRSA",
  *     subject: {
  *         commonName: "example.com",
  *     },
+ *     keyAlgorithm: "RSA_4096",
+ *     signingAlgorithm: "SHA512WITHRSA",
  * }});
  * const example = new aws.acmpca.Permission("example", {
  *     certificateAuthorityArn: exampleCertificateAuthority.arn,

package/acmpca/policy.d.ts

@@ -13,12 +13,12 @@ import * as pulumi from "@pulumi/pulumi";
  * const example = aws.iam.getPolicyDocument({
  *     statements: [
  *         {
- *             sid: "1",
- *             effect: "Allow",
  *             principals: [{
  *                 type: "AWS",
  *                 identifiers: [current.accountId],
  *             }],
+ *             sid: "1",
+ *             effect: "Allow",
  *             actions: [
  *                 "acm-pca:DescribeCertificateAuthority",
  *                 "acm-pca:GetCertificate",
@@ -29,19 +29,19 @@ import * as pulumi from "@pulumi/pulumi";
  *             resources: [exampleAwsAcmpcaCertificateAuthority.arn],
  *         },
  *         {
- *             sid: "2",
- *             effect: allow,
+ *             conditions: [{
+ *                 test: "StringEquals",
+ *                 variable: "acm-pca:TemplateArn",
+ *                 values: ["arn:aws:acm-pca:::template/EndEntityCertificate/V1"],
+ *             }],
  *             principals: [{
  *                 type: "AWS",
  *                 identifiers: [current.accountId],
  *             }],
+ *             sid: "2",
+ *             effect: allow,
  *             actions: ["acm-pca:IssueCertificate"],
  *             resources: [exampleAwsAcmpcaCertificateAuthority.arn],
- *             conditions: [{
- *                 test: "StringEquals",
- *                 variable: "acm-pca:TemplateArn",
- *                 values: ["arn:aws:acm-pca:::template/EndEntityCertificate/V1"],
- *             }],
  *         },
  *     ],
  * });