@stacksjs/ts-cloud-aws-types 0.1.6 → 0.1.7

package/dist/secrets-manager.d.ts

@@ -0,0 +1,99 @@
+import type { Tag } from './common';
+/**
+ * AWS::SecretsManager::Secret
+ */
+export declare interface SecretsManagerSecret {
+  Type: 'AWS::SecretsManager::Secret'
+  Properties: {
+    Name?: string
+    Description?: string
+    SecretString?: string
+    GenerateSecretString?: {
+      ExcludeCharacters?: string
+      ExcludeLowercase?: boolean
+      ExcludeNumbers?: boolean
+      ExcludePunctuation?: boolean
+      ExcludeUppercase?: boolean
+      GenerateStringKey?: string
+      IncludeSpace?: boolean
+      PasswordLength?: number
+      RequireEachIncludedType?: boolean
+      SecretStringTemplate?: string
+    }
+    KmsKeyId?: string | { Ref: string } | { 'Fn::GetAtt': [string, string] }
+    ReplicaRegions?: Array<{
+      Region: string
+      KmsKeyId?: string
+    }>
+    Tags?: Tag[]
+  }
+  DeletionPolicy?: 'Delete' | 'Retain' | 'Snapshot'
+  UpdateReplacePolicy?: 'Delete' | 'Retain' | 'Snapshot'
+}
+/**
+ * AWS::SecretsManager::SecretTargetAttachment
+ */
+export declare interface SecretsManagerSecretTargetAttachment {
+  Type: 'AWS::SecretsManager::SecretTargetAttachment'
+  Properties: {
+    SecretId: string | { Ref: string }
+    TargetId: string | { Ref: string }
+    TargetType: 'AWS::RDS::DBInstance' | 'AWS::RDS::DBCluster' | 'AWS::Redshift::Cluster' | 'AWS::DocDB::DBInstance' | 'AWS::DocDB::DBCluster'
+  }
+}
+/**
+ * AWS::SecretsManager::RotationSchedule
+ */
+export declare interface SecretsManagerRotationSchedule {
+  Type: 'AWS::SecretsManager::RotationSchedule'
+  Properties: {
+    SecretId: string | { Ref: string }
+    RotationLambdaARN?: string | { 'Fn::GetAtt': [string, string] }
+    RotationRules?: {
+      AutomaticallyAfterDays?: number
+      Duration?: string
+      ScheduleExpression?: string
+    }
+    HostedRotationLambda?: {
+      RotationType: string
+      RotationLambdaName?: string
+      KmsKeyArn?: string
+      MasterSecretArn?: string
+      MasterSecretKmsKeyArn?: string
+      VpcSecurityGroupIds?: string
+      VpcSubnetIds?: string
+      ExcludeCharacters?: string
+      SuperuserSecretArn?: string
+      SuperuserSecretKmsKeyArn?: string
+    }
+  }
+}
+/**
+ * AWS::SecretsManager::ResourcePolicy
+ */
+export declare interface SecretsManagerResourcePolicy {
+  Type: 'AWS::SecretsManager::ResourcePolicy'
+  Properties: {
+    SecretId: string | { Ref: string }
+    ResourcePolicy: {
+      Version: string
+      Statement: Array<{
+        Sid?: string
+        Effect: 'Allow' | 'Deny'
+        Principal: {
+          AWS?: string | string[]
+          Service?: string | string[]
+          Federated?: string
+        }
+        Action: string | string[]
+        Resource?: string | string[]
+        Condition?: Record<string, any>
+      }>
+    }
+    BlockPublicPolicy?: boolean
+  }
+}
+export type SecretsManagerResource = | SecretsManagerSecret
+  | SecretsManagerSecretTargetAttachment
+  | SecretsManagerRotationSchedule
+  | SecretsManagerResourcePolicy

package/dist/ses.d.ts

@@ -0,0 +1,62 @@
+import type { CloudFormationResource } from './index';
+export declare interface SESEmailIdentity extends CloudFormationResource {
+  Type: 'AWS::SES::EmailIdentity'
+  Properties: {
+    EmailIdentity: string
+    DkimSigningAttributes?: {
+      NextSigningKeyLength?: 'RSA_1024_BIT' | 'RSA_2048_BIT'
+    }
+    FeedbackAttributes?: {
+      EmailForwardingEnabled?: boolean
+    }
+  }
+}
+export declare interface SESConfigurationSet extends CloudFormationResource {
+  Type: 'AWS::SES::ConfigurationSet'
+  Properties: {
+    Name?: string
+    ReputationOptions?: {
+      ReputationMetricsEnabled?: boolean
+    }
+    SendingOptions?: {
+      SendingEnabled?: boolean
+    }
+    SuppressionOptions?: {
+      SuppressedReasons?: ('BOUNCE' | 'COMPLAINT')[]
+    }
+  }
+}
+export declare interface SESReceiptRuleSet extends CloudFormationResource {
+  Type: 'AWS::SES::ReceiptRuleSet'
+  Properties?: {
+    RuleSetName?: string
+  }
+}
+export declare interface SESReceiptRule extends CloudFormationResource {
+  Type: 'AWS::SES::ReceiptRule'
+  Properties: {
+    RuleSetName: string | { Ref: string }
+    Rule: {
+      Name?: string
+      Enabled?: boolean
+      Recipients?: string[]
+      ScanEnabled?: boolean
+      TlsPolicy?: 'Optional' | 'Require'
+      Actions?: Array<{
+        S3Action?: {
+          BucketName: string
+          ObjectKeyPrefix?: string
+          KmsKeyArn?: string
+        }
+        LambdaAction?: {
+          FunctionArn: string
+          InvocationType?: 'Event' | 'RequestResponse'
+        }
+        SNSAction?: {
+          TopicArn: string
+          Encoding?: 'UTF-8' | 'Base64'
+        }
+      }>
+    }
+  }
+}

package/dist/sns.d.ts

@@ -0,0 +1,42 @@
+import type { CloudFormationResource } from './index';
+export declare interface SNSTopic extends CloudFormationResource {
+  Type: 'AWS::SNS::Topic'
+  Properties?: {
+    TopicName?: string
+    DisplayName?: string
+    Subscription?: Array<{
+      Endpoint: string
+      Protocol: 'http' | 'https' | 'email' | 'email-json' | 'sms' | 'sqs' | 'application' | 'lambda' | 'firehose'
+    }>
+    KmsMasterKeyId?: string
+    Tags?: Array<{
+      Key: string
+      Value: string
+    }>
+  }
+}
+export declare interface SNSSubscription extends CloudFormationResource {
+  Type: 'AWS::SNS::Subscription'
+  Properties: {
+    TopicArn: string | { Ref: string }
+    Protocol: 'http' | 'https' | 'email' | 'email-json' | 'sms' | 'sqs' | 'application' | 'lambda' | 'firehose'
+    Endpoint: string
+    FilterPolicy?: unknown
+    RawMessageDelivery?: boolean
+  }
+}
+export declare interface SNSTopicPolicy extends CloudFormationResource {
+  Type: 'AWS::SNS::TopicPolicy'
+  Properties: {
+    Topics: (string | { Ref: string })[]
+    PolicyDocument: {
+      Version: '2012-10-17'
+      Statement: Array<{
+        Effect: 'Allow' | 'Deny'
+        Principal: unknown
+        Action: string | string[]
+        Resource: string | string[]
+      }>
+    }
+  }
+}

package/dist/sqs.d.ts

@@ -0,0 +1,51 @@
+import type { CloudFormationResource } from './index';
+/**
+ * AWS SQS (Simple Queue Service) Types
+ */
+export declare interface SQSQueue extends CloudFormationResource {
+  Type: 'AWS::SQS::Queue'
+  Properties?: {
+    QueueName?: string
+    DelaySeconds?: number
+    MaximumMessageSize?: number
+    MessageRetentionPeriod?: number
+    ReceiveMessageWaitTimeSeconds?: number
+    VisibilityTimeout?: number
+    KmsMasterKeyId?: string
+    KmsDataKeyReusePeriodSeconds?: number
+    SqsManagedSseEnabled?: boolean
+    FifoQueue?: boolean
+    ContentBasedDeduplication?: boolean
+    DeduplicationScope?: 'messageGroup' | 'queue'
+    FifoThroughputLimit?: 'perQueue' | 'perMessageGroupId'
+    RedrivePolicy?: {
+      deadLetterTargetArn: string
+      maxReceiveCount: number
+    }
+    RedriveAllowPolicy?: {
+      redrivePermission: 'allowAll' | 'denyAll' | 'byQueue'
+      sourceQueueArns?: string[]
+    }
+    Tags?: Array<{
+      Key: string
+      Value: string
+    }>
+  }
+}
+export declare interface SQSQueuePolicy extends CloudFormationResource {
+  Type: 'AWS::SQS::QueuePolicy'
+  Properties: {
+    Queues: Array<string | { Ref: string }>
+    PolicyDocument: {
+      Version: '2012-10-17'
+      Statement: Array<{
+        Sid?: string
+        Effect: 'Allow' | 'Deny'
+        Principal: unknown
+        Action: string | string[]
+        Resource: string | string[]
+        Condition?: unknown
+      }>
+    }
+  }
+}

package/dist/ssm.d.ts

@@ -0,0 +1,253 @@
+import type { Tag } from './common';
+/**
+ * AWS::SSM::Parameter
+ */
+export declare interface SSMParameter {
+  Type: 'AWS::SSM::Parameter'
+  Properties: {
+    Name?: string
+    Type: 'String' | 'StringList' | 'SecureString'
+    Value: string
+    Description?: string
+    AllowedPattern?: string
+    DataType?: 'text' | 'aws:ec2:image'
+    Tier?: 'Standard' | 'Advanced' | 'Intelligent-Tiering'
+    Policies?: string
+    Tags?: Record<string, string>
+  }
+}
+/**
+ * AWS::SSM::Association
+ */
+export declare interface SSMAssociation {
+  Type: 'AWS::SSM::Association'
+  Properties: {
+    Name: string
+    AssociationName?: string
+    DocumentVersion?: string
+    InstanceId?: string
+    Parameters?: Record<string, string[]>
+    ScheduleExpression?: string
+    Targets?: Array<{
+      Key: string
+      Values: string[]
+    }>
+    OutputLocation?: {
+      S3Location?: {
+        OutputS3BucketName?: string
+        OutputS3KeyPrefix?: string
+        OutputS3Region?: string
+      }
+    }
+    AutomationTargetParameterName?: string
+    MaxErrors?: string
+    MaxConcurrency?: string
+    ComplianceSeverity?: 'CRITICAL' | 'HIGH' | 'MEDIUM' | 'LOW' | 'UNSPECIFIED'
+    SyncCompliance?: 'AUTO' | 'MANUAL'
+    WaitForSuccessTimeoutSeconds?: number
+    ApplyOnlyAtCronInterval?: boolean
+    CalendarNames?: string[]
+    ScheduleOffset?: number
+  }
+}
+/**
+ * AWS::SSM::Document
+ */
+export declare interface SSMDocument {
+  Type: 'AWS::SSM::Document'
+  Properties: {
+    Name?: string
+    Content: any
+    DocumentType?: 'Command' | 'Policy' | 'Automation' | 'Session' | 'Package' | 'ApplicationConfiguration' | 'ApplicationConfigurationSchema' | 'DeploymentStrategy' | 'ChangeCalendar' | 'Automation.ChangeTemplate' | 'ProblemAnalysis' | 'ProblemAnalysisTemplate' | 'CloudFormation' | 'ConformancePackTemplate' | 'QuickSetup'
+    DocumentFormat?: 'YAML' | 'JSON' | 'TEXT'
+    TargetType?: string
+    VersionName?: string
+    Requires?: Array<{
+      Name: string
+      Version?: string
+    }>
+    Attachments?: Array<{
+      Key?: 'SourceUrl' | 'S3FileUrl' | 'AttachmentReference'
+      Name?: string
+      Values?: string[]
+    }>
+    Tags?: Tag[]
+    UpdateMethod?: 'Replace' | 'NewVersion'
+  }
+}
+/**
+ * AWS::SSM::MaintenanceWindow
+ */
+export declare interface SSMMaintenanceWindow {
+  Type: 'AWS::SSM::MaintenanceWindow'
+  Properties: {
+    Name: string
+    Description?: string
+    AllowUnassociatedTargets: boolean
+    Cutoff: number
+    Duration: number
+    Schedule: string
+    ScheduleTimezone?: string
+    ScheduleOffset?: number
+    StartDate?: string
+    EndDate?: string
+    Tags?: Tag[]
+  }
+}
+/**
+ * AWS::SSM::MaintenanceWindowTarget
+ */
+export declare interface SSMMaintenanceWindowTarget {
+  Type: 'AWS::SSM::MaintenanceWindowTarget'
+  Properties: {
+    WindowId: string | { Ref: string }
+    ResourceType: 'INSTANCE' | 'RESOURCE_GROUP'
+    Targets: Array<{
+      Key: string
+      Values: string[]
+    }>
+    OwnerInformation?: string
+    Name?: string
+    Description?: string
+  }
+}
+/**
+ * AWS::SSM::MaintenanceWindowTask
+ */
+export declare interface SSMMaintenanceWindowTask {
+  Type: 'AWS::SSM::MaintenanceWindowTask'
+  Properties: {
+    WindowId: string | { Ref: string }
+    TaskType: 'RUN_COMMAND' | 'AUTOMATION' | 'LAMBDA' | 'STEP_FUNCTIONS'
+    TaskArn: string
+    ServiceRoleArn?: string
+    Targets?: Array<{
+      Key: string
+      Values: string[]
+    }>
+    MaxConcurrency?: string
+    MaxErrors?: string
+    Priority?: number
+    LoggingInfo?: {
+      S3Bucket: string
+      S3Prefix?: string
+      S3Region: string
+    }
+    Name?: string
+    Description?: string
+    TaskInvocationParameters?: {
+      RunCommand?: {
+        Comment?: string
+        DocumentHash?: string
+        DocumentHashType?: 'Sha256' | 'Sha1'
+        NotificationConfig?: {
+          NotificationArn?: string
+          NotificationEvents?: string[]
+          NotificationType?: 'Command' | 'Invocation'
+        }
+        OutputS3BucketName?: string
+        OutputS3KeyPrefix?: string
+        Parameters?: Record<string, string[]>
+        ServiceRoleArn?: string
+        TimeoutSeconds?: number
+      }
+      Automation?: {
+        DocumentVersion?: string
+        Parameters?: Record<string, string[]>
+      }
+      Lambda?: {
+        ClientContext?: string
+        Payload?: string
+        Qualifier?: string
+      }
+      StepFunctions?: {
+        Input?: string
+        Name?: string
+      }
+    }
+  }
+}
+/**
+ * AWS::SSM::PatchBaseline
+ */
+export declare interface SSMPatchBaseline {
+  Type: 'AWS::SSM::PatchBaseline'
+  Properties: {
+    Name: string
+    Description?: string
+    OperatingSystem?: 'WINDOWS' | 'AMAZON_LINUX' | 'AMAZON_LINUX_2' | 'UBUNTU' | 'REDHAT_ENTERPRISE_LINUX' | 'SUSE' | 'CENTOS' | 'ORACLE_LINUX' | 'DEBIAN' | 'MACOS'
+    ApprovedPatches?: string[]
+    ApprovedPatchesComplianceLevel?: 'CRITICAL' | 'HIGH' | 'MEDIUM' | 'LOW' | 'INFORMATIONAL' | 'UNSPECIFIED'
+    ApprovedPatchesEnableNonSecurity?: boolean
+    RejectedPatches?: string[]
+    RejectedPatchesAction?: 'ALLOW_AS_DEPENDENCY' | 'BLOCK'
+    ApprovalRules?: {
+      PatchRules: Array<{
+        PatchFilterGroup: {
+          PatchFilters: Array<{
+            Key: string
+            Values: string[]
+          }>
+        }
+        ComplianceLevel?: 'CRITICAL' | 'HIGH' | 'MEDIUM' | 'LOW' | 'INFORMATIONAL' | 'UNSPECIFIED'
+        ApproveAfterDays?: number
+        ApproveUntilDate?: string
+        EnableNonSecurity?: boolean
+      }>
+    }
+    GlobalFilters?: {
+      PatchFilters: Array<{
+        Key: string
+        Values: string[]
+      }>
+    }
+    Sources?: Array<{
+      Name: string
+      Products: string[]
+      Configuration: string
+    }>
+    Tags?: Tag[]
+  }
+}
+/**
+ * AWS::SSM::ResourceDataSync
+ */
+export declare interface SSMResourceDataSync {
+  Type: 'AWS::SSM::ResourceDataSync'
+  Properties: {
+    SyncName: string
+    SyncType?: string
+    BucketName?: string
+    BucketPrefix?: string
+    BucketRegion?: string
+    KMSKeyArn?: string
+    SyncFormat?: string
+    S3Destination?: {
+      BucketName: string
+      BucketPrefix?: string
+      BucketRegion: string
+      KMSKeyArn?: string
+      SyncFormat: string
+      DestinationDataSharing?: {
+        DestinationDataSharingType: string
+      }
+    }
+    SyncSource?: {
+      SourceType: string
+      SourceRegions: string[]
+      IncludeFutureRegions?: boolean
+      AwsOrganizationsSource?: {
+        OrganizationSourceType: string
+        OrganizationalUnits?: string[]
+      }
+    }
+  }
+}
+export type SSMResource = | SSMParameter
+  | SSMAssociation
+  | SSMDocument
+  | SSMMaintenanceWindow
+  | SSMMaintenanceWindowTarget
+  | SSMMaintenanceWindowTask
+  | SSMPatchBaseline
+  | SSMResourceDataSync

package/dist/waf.d.ts

@@ -0,0 +1,79 @@
+import type { CloudFormationResource } from './index';
+export declare interface WAFv2WebACL extends CloudFormationResource {
+  Type: 'AWS::WAFv2::WebACL'
+  Properties: {
+    Name: string
+    Scope: 'CLOUDFRONT' | 'REGIONAL'
+    DefaultAction: {
+      Allow?: Record<string, unknown>
+      Block?: Record<string, unknown>
+    }
+    Description?: string
+    Rules?: Array<{
+      Name: string
+      Priority: number
+      Statement: {
+        ByteMatchStatement?: {
+          SearchString: string
+          FieldToMatch: unknown
+          TextTransformations: Array<{
+            Priority: number
+            Type: string
+          }>
+          PositionalConstraint: 'EXACTLY' | 'STARTS_WITH' | 'ENDS_WITH' | 'CONTAINS' | 'CONTAINS_WORD'
+        }
+        GeoMatchStatement?: {
+          CountryCodes: string[]
+        }
+        IPSetReferenceStatement?: {
+          Arn: string
+        }
+        RateBasedStatement?: {
+          Limit: number
+          AggregateKeyType: 'IP' | 'FORWARDED_IP'
+          ScopeDownStatement?: unknown
+        }
+        ManagedRuleGroupStatement?: {
+          VendorName: string
+          Name: string
+          ExcludedRules?: Array<{
+            Name: string
+          }>
+        }
+      }
+      Action?: {
+        Allow?: Record<string, unknown>
+        Block?: Record<string, unknown>
+        Count?: Record<string, unknown>
+      }
+      VisibilityConfig: {
+        SampledRequestsEnabled: boolean
+        CloudWatchMetricsEnabled: boolean
+        MetricName: string
+      }
+    }>
+    VisibilityConfig: {
+      SampledRequestsEnabled: boolean
+      CloudWatchMetricsEnabled: boolean
+      MetricName: string
+    }
+    Tags?: Array<{
+      Key: string
+      Value: string
+    }>
+  }
+}
+export declare interface WAFv2IPSet extends CloudFormationResource {
+  Type: 'AWS::WAFv2::IPSet'
+  Properties: {
+    Name: string
+    Scope: 'CLOUDFRONT' | 'REGIONAL'
+    IPAddressVersion: 'IPV4' | 'IPV6'
+    Addresses: string[]
+    Description?: string
+    Tags?: Array<{
+      Key: string
+      Value: string
+    }>
+  }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stacksjs/ts-cloud-aws-types",
-  "version": "0.1.6",
+  "version": "0.1.7",
   "type": "module",
   "description": "AWS CloudFormation resource type definitions (without AWS SDK)",
   "author": "Chris Breuer <chris@stacksjs.com>",
@@ -26,7 +26,7 @@
     "dist"
   ],
   "scripts": {
-    "build": "bun build src/index.ts --outdir dist --target bun",
+    "build": "bun --bun build.ts",
     "prepublishOnly": "bun --bun run build",
     "typecheck": "tsc --noEmit"
   },