@stacksjs/ts-cloud-aws-types 0.1.1

package/src/kinesis.ts

@@ -0,0 +1,261 @@
+/**
+ * AWS Kinesis Types
+ * CloudFormation resource types for AWS Kinesis (data streaming)
+ */
+
+import type { Tag } from './common'
+
+export interface Stream {
+  Type: 'AWS::Kinesis::Stream'
+  Properties: {
+    Name?: string
+    ShardCount?: number
+    RetentionPeriodHours?: number // 24-8760 (1-365 days)
+
+    // Stream mode
+    StreamModeDetails?: {
+      StreamMode: 'PROVISIONED' | 'ON_DEMAND'
+    }
+
+    // Encryption
+    StreamEncryption?: {
+      EncryptionType: 'KMS'
+      KeyId: string | { Ref: string }
+    }
+
+    Tags?: Tag[]
+  }
+  DeletionPolicy?: 'Delete' | 'Retain'
+  UpdateReplacePolicy?: 'Delete' | 'Retain'
+}
+
+export interface StreamConsumer {
+  Type: 'AWS::Kinesis::StreamConsumer'
+  Properties: {
+    StreamARN: string | { 'Fn::GetAtt': [string, string] }
+    ConsumerName: string
+  }
+  DependsOn?: string | string[]
+}
+
+// Kinesis Data Firehose
+export interface DeliveryStream {
+  Type: 'AWS::KinesisFirehose::DeliveryStream'
+  Properties: {
+    DeliveryStreamName?: string
+    DeliveryStreamType?: 'DirectPut' | 'KinesisStreamAsSource'
+
+    // Source configuration (if Type = KinesisStreamAsSource)
+    KinesisStreamSourceConfiguration?: {
+      KinesisStreamARN: string | { 'Fn::GetAtt': [string, string] }
+      RoleARN: string | { Ref: string }
+    }
+
+    // S3 destination
+    S3DestinationConfiguration?: {
+      BucketARN: string | { 'Fn::GetAtt': [string, string] }
+      RoleARN: string | { Ref: string }
+      Prefix?: string
+      ErrorOutputPrefix?: string
+      BufferingHints?: {
+        IntervalInSeconds?: number
+        SizeInMBs?: number
+      }
+      CompressionFormat?: 'UNCOMPRESSED' | 'GZIP' | 'ZIP' | 'Snappy' | 'HADOOP_SNAPPY'
+      EncryptionConfiguration?: {
+        NoEncryptionConfig?: 'NoEncryption'
+        KMSEncryptionConfig?: {
+          AWSKMSKeyARN: string | { Ref: string }
+        }
+      }
+      CloudWatchLoggingOptions?: {
+        Enabled?: boolean
+        LogGroupName?: string
+        LogStreamName?: string
+      }
+    }
+
+    // Extended S3 destination
+    ExtendedS3DestinationConfiguration?: {
+      BucketARN: string | { 'Fn::GetAtt': [string, string] }
+      RoleARN: string | { Ref: string }
+      Prefix?: string
+      ErrorOutputPrefix?: string
+      BufferingHints?: {
+        IntervalInSeconds?: number
+        SizeInMBs?: number
+      }
+      CompressionFormat?: 'UNCOMPRESSED' | 'GZIP' | 'ZIP' | 'Snappy' | 'HADOOP_SNAPPY'
+      EncryptionConfiguration?: {
+        NoEncryptionConfig?: 'NoEncryption'
+        KMSEncryptionConfig?: {
+          AWSKMSKeyARN: string | { Ref: string }
+        }
+      }
+      CloudWatchLoggingOptions?: {
+        Enabled?: boolean
+        LogGroupName?: string
+        LogStreamName?: string
+      }
+      DataFormatConversionConfiguration?: {
+        Enabled?: boolean
+        SchemaConfiguration?: {
+          DatabaseName?: string
+          TableName?: string
+          Region?: string
+          RoleARN?: string | { Ref: string }
+        }
+        InputFormatConfiguration?: {
+          Deserializer?: {
+            OpenXJsonSerDe?: Record<string, any>
+            HiveJsonSerDe?: Record<string, any>
+          }
+        }
+        OutputFormatConfiguration?: {
+          Serializer?: {
+            ParquetSerDe?: Record<string, any>
+            OrcSerDe?: Record<string, any>
+          }
+        }
+      }
+      DynamicPartitioningConfiguration?: {
+        Enabled?: boolean
+        RetryOptions?: {
+          DurationInSeconds?: number
+        }
+      }
+      ProcessingConfiguration?: {
+        Enabled?: boolean
+        Processors?: Array<{
+          Type: 'Lambda'
+          Parameters?: Array<{
+            ParameterName: string
+            ParameterValue: string
+          }>
+        }>
+      }
+    }
+
+    // Elasticsearch destination
+    ElasticsearchDestinationConfiguration?: {
+      DomainARN: string | { 'Fn::GetAtt': [string, string] }
+      IndexName: string
+      RoleARN: string | { Ref: string }
+      TypeName?: string
+      IndexRotationPeriod?: 'NoRotation' | 'OneHour' | 'OneDay' | 'OneWeek' | 'OneMonth'
+      BufferingHints?: {
+        IntervalInSeconds?: number
+        SizeInMBs?: number
+      }
+      RetryOptions?: {
+        DurationInSeconds?: number
+      }
+      S3BackupMode?: 'FailedDocumentsOnly' | 'AllDocuments'
+      S3Configuration: {
+        BucketARN: string | { 'Fn::GetAtt': [string, string] }
+        RoleARN: string | { Ref: string }
+        Prefix?: string
+      }
+      CloudWatchLoggingOptions?: {
+        Enabled?: boolean
+        LogGroupName?: string
+        LogStreamName?: string
+      }
+    }
+
+    // OpenSearch destination
+    AmazonopensearchserviceDestinationConfiguration?: {
+      DomainARN: string | { 'Fn::GetAtt': [string, string] }
+      IndexName: string
+      RoleARN: string | { Ref: string }
+      TypeName?: string
+      IndexRotationPeriod?: 'NoRotation' | 'OneHour' | 'OneDay' | 'OneWeek' | 'OneMonth'
+      BufferingHints?: {
+        IntervalInSeconds?: number
+        SizeInMBs?: number
+      }
+      RetryOptions?: {
+        DurationInSeconds?: number
+      }
+      S3BackupMode?: 'FailedDocumentsOnly' | 'AllDocuments'
+      S3Configuration: {
+        BucketARN: string | { 'Fn::GetAtt': [string, string] }
+        RoleARN: string | { Ref: string }
+        Prefix?: string
+      }
+      CloudWatchLoggingOptions?: {
+        Enabled?: boolean
+        LogGroupName?: string
+        LogStreamName?: string
+      }
+    }
+
+    // Redshift destination
+    RedshiftDestinationConfiguration?: {
+      ClusterJDBCURL: string
+      CopyCommand: {
+        DataTableName: string
+        CopyOptions?: string
+        DataTableColumns?: string
+      }
+      Username: string
+      Password: string
+      RoleARN: string | { Ref: string }
+      S3Configuration: {
+        BucketARN: string | { 'Fn::GetAtt': [string, string] }
+        RoleARN: string | { Ref: string }
+        Prefix?: string
+      }
+      CloudWatchLoggingOptions?: {
+        Enabled?: boolean
+        LogGroupName?: string
+        LogStreamName?: string
+      }
+    }
+
+    Tags?: Tag[]
+  }
+  DeletionPolicy?: 'Delete' | 'Retain'
+  UpdateReplacePolicy?: 'Delete' | 'Retain'
+}
+
+// Kinesis Data Analytics
+export interface Application {
+  Type: 'AWS::KinesisAnalytics::Application'
+  Properties: {
+    ApplicationName?: string
+    ApplicationDescription?: string
+    ApplicationCode?: string
+    Inputs: Array<{
+      NamePrefix: string
+      InputSchema: {
+        RecordColumns: Array<{
+          Name: string
+          SqlType: string
+          Mapping?: string
+        }>
+        RecordFormat: {
+          RecordFormatType: 'CSV' | 'JSON'
+          MappingParameters?: {
+            CSVMappingParameters?: {
+              RecordRowDelimiter: string
+              RecordColumnDelimiter: string
+            }
+            JSONMappingParameters?: {
+              RecordRowPath: string
+            }
+          }
+        }
+        RecordEncoding?: string
+      }
+      KinesisStreamsInput?: {
+        ResourceARN: string | { 'Fn::GetAtt': [string, string] }
+        RoleARN: string | { Ref: string }
+      }
+      KinesisFirehoseInput?: {
+        ResourceARN: string | { 'Fn::GetAtt': [string, string] }
+        RoleARN: string | { Ref: string }
+      }
+    }>
+  }
+}

package/src/kms.ts

@@ -0,0 +1,35 @@
+import type { CloudFormationResource } from './index'
+
+export interface KMSKey extends CloudFormationResource {
+  Type: 'AWS::KMS::Key'
+  Properties: {
+    Description?: string
+    Enabled?: boolean
+    EnableKeyRotation?: boolean
+    KeyPolicy: {
+      Version: '2012-10-17'
+      Statement: Array<{
+        Sid?: string
+        Effect: 'Allow' | 'Deny'
+        Principal: unknown
+        Action: string | string[]
+        Resource: string | string[]
+      }>
+    }
+    KeySpec?: 'SYMMETRIC_DEFAULT' | 'RSA_2048' | 'RSA_3072' | 'RSA_4096' | 'ECC_NIST_P256' | 'ECC_NIST_P384' | 'ECC_NIST_P521' | 'ECC_SECG_P256K1'
+    KeyUsage?: 'ENCRYPT_DECRYPT' | 'SIGN_VERIFY'
+    MultiRegion?: boolean
+    Tags?: Array<{
+      Key: string
+      Value: string
+    }>
+  }
+}
+
+export interface KMSAlias extends CloudFormationResource {
+  Type: 'AWS::KMS::Alias'
+  Properties: {
+    AliasName: string
+    TargetKeyId: string | { Ref: string }
+  }
+}

package/src/lambda.ts

@@ -0,0 +1,42 @@
+import type { CloudFormationResource } from './index'
+
+export interface LambdaFunction extends CloudFormationResource {
+  Type: 'AWS::Lambda::Function'
+  Properties: {
+    FunctionName?: string
+    Description?: string
+    Runtime: string
+    Role: string | { 'Fn::GetAtt': [string, string] }
+    Handler: string
+    Code: {
+      S3Bucket?: string
+      S3Key?: string
+      ZipFile?: string
+    }
+    Timeout?: number
+    MemorySize?: number
+    Environment?: {
+      Variables: Record<string, string>
+    }
+    VpcConfig?: {
+      SecurityGroupIds: string[]
+      SubnetIds: string[]
+    }
+    Layers?: string[]
+    Tags?: Array<{
+      Key: string
+      Value: string
+    }>
+  }
+}
+
+export interface LambdaPermission extends CloudFormationResource {
+  Type: 'AWS::Lambda::Permission'
+  Properties: {
+    FunctionName: string | { Ref: string }
+    Action: string
+    Principal: string
+    SourceArn?: string
+    SourceAccount?: string
+  }
+}

package/src/opensearch.ts

@@ -0,0 +1,147 @@
+/**
+ * AWS OpenSearch Types
+ * CloudFormation resource types for AWS OpenSearch Service
+ */
+
+import type { Tag } from './common'
+
+export interface OpenSearchDomain {
+  Type: 'AWS::OpenSearchService::Domain'
+  Properties: {
+    DomainName?: string
+    EngineVersion?: string // e.g., 'OpenSearch_2.11', 'Elasticsearch_7.10'
+
+    // Cluster configuration
+    ClusterConfig?: {
+      InstanceType?: string // e.g., 't3.small.search', 'm6g.large.search'
+      InstanceCount?: number
+      DedicatedMasterEnabled?: boolean
+      DedicatedMasterType?: string
+      DedicatedMasterCount?: number
+      ZoneAwarenessEnabled?: boolean
+      ZoneAwarenessConfig?: {
+        AvailabilityZoneCount?: number
+      }
+      WarmEnabled?: boolean
+      WarmType?: string
+      WarmCount?: number
+      ColdStorageOptions?: {
+        Enabled?: boolean
+      }
+    }
+
+    // Storage
+    EBSOptions?: {
+      EBSEnabled?: boolean
+      VolumeType?: 'gp2' | 'gp3' | 'io1' | 'standard'
+      VolumeSize?: number // in GiB
+      Iops?: number
+      Throughput?: number
+    }
+
+    // Access control
+    AccessPolicies?: Record<string, any> | string
+
+    // Encryption
+    EncryptionAtRestOptions?: {
+      Enabled?: boolean
+      KmsKeyId?: string | { Ref: string }
+    }
+    NodeToNodeEncryptionOptions?: {
+      Enabled?: boolean
+    }
+    DomainEndpointOptions?: {
+      EnforceHTTPS?: boolean
+      TLSSecurityPolicy?: 'Policy-Min-TLS-1-0-2019-07' | 'Policy-Min-TLS-1-2-2019-07'
+      CustomEndpointEnabled?: boolean
+      CustomEndpoint?: string
+      CustomEndpointCertificateArn?: string | { Ref: string }
+    }
+
+    // Advanced security
+    AdvancedSecurityOptions?: {
+      Enabled?: boolean
+      InternalUserDatabaseEnabled?: boolean
+      MasterUserOptions?: {
+        MasterUserARN?: string | { Ref: string }
+        MasterUserName?: string
+        MasterUserPassword?: string
+      }
+      SAMLOptions?: {
+        Enabled?: boolean
+        Idp?: {
+          EntityId: string
+          MetadataContent: string
+        }
+        MasterBackendRole?: string
+        MasterUserName?: string
+        RolesKey?: string
+        SessionTimeoutMinutes?: number
+        SubjectKey?: string
+      }
+    }
+
+    // VPC configuration
+    VPCOptions?: {
+      SubnetIds?: Array<string | { Ref: string }>
+      SecurityGroupIds?: Array<string | { Ref: string }>
+    }
+
+    // Snapshot configuration
+    SnapshotOptions?: {
+      AutomatedSnapshotStartHour?: number
+    }
+
+    // Advanced options
+    AdvancedOptions?: Record<string, string>
+
+    // Logging
+    LogPublishingOptions?: {
+      [key: string]: {
+        CloudWatchLogsLogGroupArn: string | { Ref: string }
+        Enabled?: boolean
+      }
+    }
+
+    // Auto-Tune
+    AutoTuneOptions?: {
+      DesiredState?: 'ENABLED' | 'DISABLED'
+      MaintenanceSchedules?: Array<{
+        StartAt?: string
+        Duration?: {
+          Value?: number
+          Unit?: 'HOURS'
+        }
+        CronExpressionForRecurrence?: string
+      }>
+    }
+
+    // Software update options
+    SoftwareUpdateOptions?: {
+      AutoSoftwareUpdateEnabled?: boolean
+    }
+
+    // Off-peak window
+    OffPeakWindowOptions?: {
+      Enabled?: boolean
+      OffPeakWindow?: {
+        WindowStartTime?: {
+          Hours: number
+          Minutes: number
+        }
+      }
+    }
+
+    Tags?: Tag[]
+  }
+  DeletionPolicy?: 'Delete' | 'Retain' | 'Snapshot'
+  UpdateReplacePolicy?: 'Delete' | 'Retain' | 'Snapshot'
+}
+
+export interface OpenSearchDomainPolicy {
+  Type: 'AWS::OpenSearchService::DomainPolicy'
+  Properties: {
+    DomainName: string | { Ref: string }
+    AccessPolicies: Record<string, any> | string
+  }
+}