@stacksjs/ts-cloud-aws-types 0.1.1

package/src/backup.ts

@@ -0,0 +1,187 @@
+/**
+ * AWS Backup Types
+ * @see https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/AWS_Backup.html
+ */
+
+import type { Tag } from './common'
+
+/**
+ * AWS::Backup::BackupVault
+ */
+export interface BackupVault {
+  Type: 'AWS::Backup::BackupVault'
+  Properties: {
+    BackupVaultName: string
+    BackupVaultTags?: Record<string, string>
+    EncryptionKeyArn?: string
+    Notifications?: {
+      SNSTopicArn: string
+      BackupVaultEvents: Array<'BACKUP_JOB_STARTED' | 'BACKUP_JOB_COMPLETED' | 'BACKUP_JOB_SUCCESSFUL' | 'BACKUP_JOB_FAILED' | 'BACKUP_JOB_EXPIRED' | 'RESTORE_JOB_STARTED' | 'RESTORE_JOB_COMPLETED' | 'RESTORE_JOB_SUCCESSFUL' | 'RESTORE_JOB_FAILED' | 'COPY_JOB_STARTED' | 'COPY_JOB_SUCCESSFUL' | 'COPY_JOB_FAILED' | 'RECOVERY_POINT_MODIFIED' | 'BACKUP_PLAN_CREATED' | 'BACKUP_PLAN_MODIFIED' | 'S3_BACKUP_OBJECT_FAILED' | 'S3_RESTORE_OBJECT_FAILED'>
+    }
+    AccessPolicy?: {
+      Version: string
+      Statement: Array<{
+        Sid?: string
+        Effect: 'Allow' | 'Deny'
+        Principal: any
+        Action: string | string[]
+        Resource?: string | string[]
+        Condition?: Record<string, any>
+      }>
+    }
+    LockConfiguration?: {
+      MinRetentionDays: number
+      MaxRetentionDays?: number
+      ChangeableForDays?: number
+    }
+  }
+}
+
+/**
+ * AWS::Backup::BackupPlan
+ */
+export interface BackupPlan {
+  Type: 'AWS::Backup::BackupPlan'
+  Properties: {
+    BackupPlan: {
+      BackupPlanName: string
+      BackupPlanRule: Array<{
+        RuleName: string
+        TargetBackupVault: string | { Ref: string }
+        ScheduleExpression?: string
+        ScheduleExpressionTimezone?: string
+        StartWindowMinutes?: number
+        CompletionWindowMinutes?: number
+        Lifecycle?: {
+          DeleteAfterDays?: number
+          MoveToColdStorageAfterDays?: number
+          OptInToArchiveForSupportedResources?: boolean
+        }
+        RecoveryPointTags?: Record<string, string>
+        CopyActions?: Array<{
+          DestinationBackupVaultArn: string
+          Lifecycle?: {
+            DeleteAfterDays?: number
+            MoveToColdStorageAfterDays?: number
+            OptInToArchiveForSupportedResources?: boolean
+          }
+        }>
+        EnableContinuousBackup?: boolean
+      }>
+      AdvancedBackupSettings?: Array<{
+        BackupOptions: Record<string, string>
+        ResourceType: string
+      }>
+    }
+    BackupPlanTags?: Record<string, string>
+  }
+}
+
+/**
+ * AWS::Backup::BackupSelection
+ */
+export interface BackupSelection {
+  Type: 'AWS::Backup::BackupSelection'
+  Properties: {
+    BackupPlanId: string | { Ref: string }
+    BackupSelection: {
+      SelectionName: string
+      IamRoleArn: string | { 'Fn::GetAtt': [string, string] }
+      Resources?: string[]
+      ListOfTags?: Array<{
+        ConditionType: 'STRINGEQUALS'
+        ConditionKey: string
+        ConditionValue: string
+      }>
+      NotResources?: string[]
+      Conditions?: {
+        StringEquals?: Array<{
+          ConditionKey: string
+          ConditionValue: string
+        }>
+        StringNotEquals?: Array<{
+          ConditionKey: string
+          ConditionValue: string
+        }>
+        StringLike?: Array<{
+          ConditionKey: string
+          ConditionValue: string
+        }>
+        StringNotLike?: Array<{
+          ConditionKey: string
+          ConditionValue: string
+        }>
+      }
+    }
+  }
+}
+
+/**
+ * AWS::Backup::Framework
+ */
+export interface BackupFramework {
+  Type: 'AWS::Backup::Framework'
+  Properties: {
+    FrameworkName?: string
+    FrameworkDescription?: string
+    FrameworkControls: Array<{
+      ControlName: string
+      ControlInputParameters?: Array<{
+        ParameterName: string
+        ParameterValue: string
+      }>
+      ControlScope?: {
+        ComplianceResourceIds?: string[]
+        ComplianceResourceTypes?: string[]
+        Tags?: Array<{
+          Key: string
+          Value: string
+        }>
+      }
+    }>
+    FrameworkTags?: Tag[]
+  }
+}
+
+/**
+ * AWS::Backup::ReportPlan
+ */
+export interface BackupReportPlan {
+  Type: 'AWS::Backup::ReportPlan'
+  Properties: {
+    ReportPlanName?: string
+    ReportPlanDescription?: string
+    ReportDeliveryChannel: {
+      S3BucketName: string
+      S3KeyPrefix?: string
+      Formats?: string[]
+    }
+    ReportSetting: {
+      ReportTemplate: string
+      FrameworkArns?: string[]
+      Accounts?: string[]
+      OrganizationUnits?: string[]
+      Regions?: string[]
+    }
+    ReportPlanTags?: Tag[]
+  }
+}
+
+/**
+ * AWS::Backup::BackupVaultNotifications (Legacy)
+ */
+export interface BackupVaultNotifications {
+  Type: 'AWS::Backup::BackupVault'
+  Properties: {
+    BackupVaultName: string
+    SNSTopicArn: string
+    BackupVaultEvents: Array<'BACKUP_JOB_STARTED' | 'BACKUP_JOB_COMPLETED' | 'RESTORE_JOB_STARTED' | 'RESTORE_JOB_COMPLETED' | 'COPY_JOB_STARTED' | 'COPY_JOB_SUCCESSFUL' | 'COPY_JOB_FAILED' | 'RECOVERY_POINT_MODIFIED'>
+  }
+}
+
+export type BackupResource =
+  | BackupVault
+  | BackupPlan
+  | BackupSelection
+  | BackupFramework
+  | BackupReportPlan

package/src/cloudwatch.ts

@@ -0,0 +1,98 @@
+import type { CloudFormationResource } from './index'
+
+export interface CloudWatchAlarm extends CloudFormationResource {
+  Type: 'AWS::CloudWatch::Alarm'
+  Properties: {
+    AlarmName?: string
+    AlarmDescription?: string
+    MetricName?: string
+    Namespace?: string
+    Statistic?: 'SampleCount' | 'Average' | 'Sum' | 'Minimum' | 'Maximum'
+    Period?: number
+    EvaluationPeriods: number
+    Threshold: number
+    ComparisonOperator: 'GreaterThanOrEqualToThreshold' | 'GreaterThanThreshold' | 'LessThanThreshold' | 'LessThanOrEqualToThreshold'
+    ActionsEnabled?: boolean
+    AlarmActions?: string[]
+    InsufficientDataActions?: string[]
+    OKActions?: string[]
+    Dimensions?: Array<{
+      Name: string
+      Value: string
+    }>
+    TreatMissingData?: 'breaching' | 'notBreaching' | 'ignore' | 'missing'
+    /** Unit of the metric (e.g., 'Seconds', 'Bytes', 'Count') */
+    Unit?: string
+    /** Number of datapoints that must be breaching to trigger the alarm */
+    DatapointsToAlarm?: number
+  }
+}
+
+export interface CloudWatchLogGroup extends CloudFormationResource {
+  Type: 'AWS::Logs::LogGroup'
+  Properties?: {
+    LogGroupName?: string
+    RetentionInDays?: 1 | 3 | 5 | 7 | 14 | 30 | 60 | 90 | 120 | 150 | 180 | 365 | 400 | 545 | 731 | 1827 | 3653
+    KmsKeyId?: string
+    Tags?: Array<{
+      Key: string
+      Value: string
+    }>
+  }
+}
+
+export interface CloudWatchDashboard extends CloudFormationResource {
+  Type: 'AWS::CloudWatch::Dashboard'
+  Properties: {
+    DashboardName?: string
+    DashboardBody: string
+  }
+}
+
+export interface CloudWatchLogStream extends CloudFormationResource {
+  Type: 'AWS::Logs::LogStream'
+  Properties: {
+    LogGroupName: string | { Ref: string }
+    LogStreamName?: string
+  }
+}
+
+export interface CloudWatchMetricFilter extends CloudFormationResource {
+  Type: 'AWS::Logs::MetricFilter'
+  Properties: {
+    LogGroupName: string | { Ref: string }
+    FilterPattern: string
+    MetricTransformations: Array<{
+      MetricName: string
+      MetricNamespace: string
+      MetricValue: string
+      DefaultValue?: number
+      Unit?: string
+      Dimensions?: Array<{
+        Key: string
+        Value: string
+      }>
+    }>
+    FilterName?: string
+  }
+}
+
+export interface CloudWatchCompositeAlarm extends CloudFormationResource {
+  Type: 'AWS::CloudWatch::CompositeAlarm'
+  Properties: {
+    AlarmName: string
+    AlarmRule: string
+    AlarmDescription?: string
+    ActionsEnabled?: boolean
+    AlarmActions?: string[]
+    InsufficientDataActions?: string[]
+    OKActions?: string[]
+    ActionsSuppressor?: string
+    ActionsSuppressorExtensionPeriod?: number
+    ActionsSuppressorWaitPeriod?: number
+    Tags?: Array<{
+      Key: string
+      Value: string
+    }>
+  }
+}

package/src/codedeploy.ts

@@ -0,0 +1,132 @@
+/**
+ * AWS CodeDeploy Types
+ * CloudFormation resource types for AWS CodeDeploy
+ */
+
+import type { CloudFormationResource } from './index'
+
+export interface CodeDeployApplication extends CloudFormationResource {
+  Type: 'AWS::CodeDeploy::Application'
+  Properties?: {
+    ApplicationName?: string
+    ComputePlatform?: 'Server' | 'Lambda' | 'ECS'
+    Tags?: Array<{
+      Key: string
+      Value: string
+    }>
+  }
+}
+
+export interface CodeDeployDeploymentGroup extends CloudFormationResource {
+  Type: 'AWS::CodeDeploy::DeploymentGroup'
+  Properties: {
+    ApplicationName: string | { Ref: string }
+    DeploymentGroupName?: string
+    ServiceRoleArn: string | { Ref: string } | { 'Fn::GetAtt': [string, string] }
+    AutoScalingGroups?: string[]
+    Ec2TagFilters?: Array<{
+      Key?: string
+      Value?: string
+      Type?: 'KEY_ONLY' | 'VALUE_ONLY' | 'KEY_AND_VALUE'
+    }>
+    Ec2TagSet?: {
+      Ec2TagSetList?: Array<{
+        Ec2TagGroup?: Array<{
+          Key?: string
+          Value?: string
+          Type?: 'KEY_ONLY' | 'VALUE_ONLY' | 'KEY_AND_VALUE'
+        }>
+      }>
+    }
+    OnPremisesInstanceTagFilters?: Array<{
+      Key?: string
+      Value?: string
+      Type?: 'KEY_ONLY' | 'VALUE_ONLY' | 'KEY_AND_VALUE'
+    }>
+    DeploymentConfigName?: string | { Ref: string }
+    DeploymentStyle?: {
+      DeploymentType?: 'IN_PLACE' | 'BLUE_GREEN'
+      DeploymentOption?: 'WITH_TRAFFIC_CONTROL' | 'WITHOUT_TRAFFIC_CONTROL'
+    }
+    AutoRollbackConfiguration?: {
+      Enabled?: boolean
+      Events?: ('DEPLOYMENT_FAILURE' | 'DEPLOYMENT_STOP_ON_ALARM' | 'DEPLOYMENT_STOP_ON_REQUEST')[]
+    }
+    AlarmConfiguration?: {
+      Enabled?: boolean
+      Alarms?: Array<{
+        Name?: string
+      }>
+      IgnorePollAlarmFailure?: boolean
+    }
+    LoadBalancerInfo?: {
+      TargetGroupInfoList?: Array<{
+        Name?: string
+      }>
+      ElbInfoList?: Array<{
+        Name?: string
+      }>
+      TargetGroupPairInfoList?: Array<{
+        TargetGroups?: Array<{
+          Name?: string
+        }>
+        ProdTrafficRoute?: {
+          ListenerArns?: string[]
+        }
+        TestTrafficRoute?: {
+          ListenerArns?: string[]
+        }
+      }>
+    }
+    BlueGreenDeploymentConfiguration?: {
+      TerminateBlueInstancesOnDeploymentSuccess?: {
+        Action?: 'TERMINATE' | 'KEEP_ALIVE'
+        TerminationWaitTimeInMinutes?: number
+      }
+      DeploymentReadyOption?: {
+        ActionOnTimeout?: 'CONTINUE_DEPLOYMENT' | 'STOP_DEPLOYMENT'
+        WaitTimeInMinutes?: number
+      }
+      GreenFleetProvisioningOption?: {
+        Action?: 'DISCOVER_EXISTING' | 'COPY_AUTO_SCALING_GROUP'
+      }
+    }
+    TriggerConfigurations?: Array<{
+      TriggerName?: string
+      TriggerTargetArn?: string
+      TriggerEvents?: string[]
+    }>
+    ECSServices?: Array<{
+      ClusterName: string
+      ServiceName: string
+    }>
+    OutdatedInstancesStrategy?: 'UPDATE' | 'IGNORE'
+    Tags?: Array<{
+      Key: string
+      Value: string
+    }>
+  }
+}
+
+export interface CodeDeployDeploymentConfig extends CloudFormationResource {
+  Type: 'AWS::CodeDeploy::DeploymentConfig'
+  Properties?: {
+    DeploymentConfigName?: string
+    ComputePlatform?: 'Server' | 'Lambda' | 'ECS'
+    MinimumHealthyHosts?: {
+      Type: 'HOST_COUNT' | 'FLEET_PERCENT'
+      Value: number
+    }
+    TrafficRoutingConfig?: {
+      Type: 'TimeBasedCanary' | 'TimeBasedLinear' | 'AllAtOnce'
+      TimeBasedCanary?: {
+        CanaryPercentage: number
+        CanaryInterval: number
+      }
+      TimeBasedLinear?: {
+        LinearPercentage: number
+        LinearInterval: number
+      }
+    }
+  }
+}

package/src/cognito.ts

@@ -0,0 +1,216 @@
+/**
+ * AWS Cognito Types
+ * CloudFormation resource types for Amazon Cognito
+ */
+
+import type { CloudFormationResource } from './index'
+
+export interface CognitoUserPool extends CloudFormationResource {
+  Type: 'AWS::Cognito::UserPool'
+  Properties?: {
+    UserPoolName?: string
+    Policies?: {
+      PasswordPolicy?: {
+        MinimumLength?: number
+        RequireLowercase?: boolean
+        RequireUppercase?: boolean
+        RequireNumbers?: boolean
+        RequireSymbols?: boolean
+        TemporaryPasswordValidityDays?: number
+      }
+    }
+    MfaConfiguration?: 'OFF' | 'ON' | 'OPTIONAL'
+    UsernameAttributes?: ('email' | 'phone_number')[]
+    AutoVerifiedAttributes?: ('email' | 'phone_number')[]
+    Schema?: Array<{
+      Name: string
+      AttributeDataType?: 'String' | 'Number' | 'DateTime' | 'Boolean'
+      Required?: boolean
+      Mutable?: boolean
+      StringAttributeConstraints?: {
+        MinLength?: string
+        MaxLength?: string
+      }
+      NumberAttributeConstraints?: {
+        MinValue?: string
+        MaxValue?: string
+      }
+    }>
+    EmailConfiguration?: {
+      EmailSendingAccount?: 'COGNITO_DEFAULT' | 'DEVELOPER'
+      From?: string
+      ReplyToEmailAddress?: string
+      SourceArn?: string
+      ConfigurationSet?: string
+    }
+    SmsConfiguration?: {
+      ExternalId?: string
+      SnsCallerArn?: string
+    }
+    LambdaConfig?: {
+      PreSignUp?: string
+      PostConfirmation?: string
+      PreAuthentication?: string
+      PostAuthentication?: string
+      CustomMessage?: string
+      DefineAuthChallenge?: string
+      CreateAuthChallenge?: string
+      VerifyAuthChallengeResponse?: string
+      PreTokenGeneration?: string
+      UserMigration?: string
+    }
+    UserPoolAddOns?: {
+      AdvancedSecurityMode?: 'OFF' | 'AUDIT' | 'ENFORCED'
+    }
+    AccountRecoverySetting?: {
+      RecoveryMechanisms?: Array<{
+        Name?: 'verified_email' | 'verified_phone_number' | 'admin_only'
+        Priority?: number
+      }>
+    }
+    AdminCreateUserConfig?: {
+      AllowAdminCreateUserOnly?: boolean
+      InviteMessageTemplate?: {
+        EmailMessage?: string
+        EmailSubject?: string
+        SMSMessage?: string
+      }
+    }
+    Tags?: Array<{
+      Key: string
+      Value: string
+    }>
+  }
+}
+
+export interface CognitoUserPoolClient extends CloudFormationResource {
+  Type: 'AWS::Cognito::UserPoolClient'
+  Properties: {
+    ClientName?: string
+    UserPoolId: string | { Ref: string }
+    GenerateSecret?: boolean
+    RefreshTokenValidity?: number
+    AccessTokenValidity?: number
+    IdTokenValidity?: number
+    TokenValidityUnits?: {
+      RefreshToken?: 'seconds' | 'minutes' | 'hours' | 'days'
+      AccessToken?: 'seconds' | 'minutes' | 'hours' | 'days'
+      IdToken?: 'seconds' | 'minutes' | 'hours' | 'days'
+    }
+    ReadAttributes?: string[]
+    WriteAttributes?: string[]
+    ExplicitAuthFlows?: string[]
+    PreventUserExistenceErrors?: 'ENABLED' | 'LEGACY'
+    EnableTokenRevocation?: boolean
+    CallbackURLs?: string[]
+    LogoutURLs?: string[]
+    AllowedOAuthFlows?: ('code' | 'implicit' | 'client_credentials')[]
+    AllowedOAuthScopes?: string[]
+    AllowedOAuthFlowsUserPoolClient?: boolean
+    SupportedIdentityProviders?: string[]
+    DefaultRedirectURI?: string
+    AnalyticsConfiguration?: {
+      ApplicationArn?: string
+      ApplicationId?: string
+      ExternalId?: string
+      RoleArn?: string
+      UserDataShared?: boolean
+    }
+  }
+}
+
+export interface CognitoUserPoolDomain extends CloudFormationResource {
+  Type: 'AWS::Cognito::UserPoolDomain'
+  Properties: {
+    Domain: string
+    UserPoolId: string | { Ref: string }
+    CustomDomainConfig?: {
+      CertificateArn?: string
+    }
+  }
+}
+
+export interface CognitoIdentityPool extends CloudFormationResource {
+  Type: 'AWS::Cognito::IdentityPool'
+  Properties: {
+    IdentityPoolName?: string
+    AllowUnauthenticatedIdentities: boolean
+    CognitoIdentityProviders?: Array<{
+      ClientId?: string
+      ProviderName?: string
+      ServerSideTokenCheck?: boolean
+    }>
+    SupportedLoginProviders?: Record<string, string>
+    SamlProviderARNs?: string[]
+    OpenIdConnectProviderARNs?: string[]
+    CognitoStreams?: {
+      StreamingStatus?: 'ENABLED' | 'DISABLED'
+      StreamName?: string
+      RoleArn?: string
+    }
+    PushSync?: {
+      ApplicationArns?: string[]
+      RoleArn?: string
+    }
+    CognitoEvents?: Record<string, string>
+    DeveloperProviderName?: string
+    AllowClassicFlow?: boolean
+  }
+}
+
+export interface CognitoIdentityPoolRoleAttachment extends CloudFormationResource {
+  Type: 'AWS::Cognito::IdentityPoolRoleAttachment'
+  Properties: {
+    IdentityPoolId: string | { Ref: string }
+    Roles?: Record<string, string>
+    RoleMappings?: Record<string, {
+      Type?: 'Token' | 'Rules'
+      AmbiguousRoleResolution?: 'AuthenticatedRole' | 'Deny'
+      IdentityProvider?: string
+      RulesConfiguration?: {
+        Rules?: Array<{
+          Claim?: string
+          MatchType?: 'Equals' | 'Contains' | 'StartsWith' | 'NotEqual'
+          Value?: string
+          RoleARN?: string
+        }>
+      }
+    }>
+  }
+}
+
+export interface CognitoUserPoolGroup extends CloudFormationResource {
+  Type: 'AWS::Cognito::UserPoolGroup'
+  Properties: {
+    GroupName: string
+    UserPoolId: string | { Ref: string }
+    Description?: string
+    Precedence?: number
+    RoleArn?: string
+  }
+}
+
+export interface CognitoUserPoolResourceServer extends CloudFormationResource {
+  Type: 'AWS::Cognito::UserPoolResourceServer'
+  Properties: {
+    Identifier: string
+    Name: string
+    UserPoolId: string | { Ref: string }
+    Scopes?: Array<{
+      ScopeName: string
+      ScopeDescription: string
+    }>
+  }
+}
+
+export interface CognitoUserPoolIdentityProvider extends CloudFormationResource {
+  Type: 'AWS::Cognito::UserPoolIdentityProvider'
+  Properties: {
+    ProviderName: string
+    ProviderType: 'SAML' | 'Facebook' | 'Google' | 'LoginWithAmazon' | 'SignInWithApple' | 'OIDC'
+    UserPoolId: string | { Ref: string }
+    AttributeMapping?: Record<string, string>
+    ProviderDetails?: Record<string, string>
+    IdpIdentifiers?: string[]
+  }
+}

package/src/common.ts

@@ -0,0 +1,20 @@
+/**
+ * Common AWS Types
+ */
+
+export interface Tag {
+  Key: string
+  Value: string
+}
+
+export type Tags = Tag[]
+
+export interface ResourceBase {
+  Type: string
+  Properties: Record<string, any>
+  DependsOn?: string | string[]
+  Condition?: string
+  DeletionPolicy?: 'Delete' | 'Retain' | 'Snapshot'
+  UpdateReplacePolicy?: 'Delete' | 'Retain' | 'Snapshot'
+  Metadata?: Record<string, any>
+}