cdk-docker-image-deployment 0.0.577 → 0.0.579

package/node_modules/aws-sdk/clients/ecr.d.ts

@@ -68,6 +68,14 @@ declare class ECR extends Service {
    * Creates a repository. For more information, see Amazon ECR repositories in the Amazon Elastic Container Registry User Guide.
    */
   createRepository(callback?: (err: AWSError, data: ECR.Types.CreateRepositoryResponse) => void): Request<ECR.Types.CreateRepositoryResponse, AWSError>;
+  /**
+   * Creates a repository creation template. This template is used to define the settings for repositories created by Amazon ECR on your behalf. For example, repositories created through pull through cache actions. For more information, see Private repository creation templates in the Amazon Elastic Container Registry User Guide.
+   */
+  createRepositoryCreationTemplate(params: ECR.Types.CreateRepositoryCreationTemplateRequest, callback?: (err: AWSError, data: ECR.Types.CreateRepositoryCreationTemplateResponse) => void): Request<ECR.Types.CreateRepositoryCreationTemplateResponse, AWSError>;
+  /**
+   * Creates a repository creation template. This template is used to define the settings for repositories created by Amazon ECR on your behalf. For example, repositories created through pull through cache actions. For more information, see Private repository creation templates in the Amazon Elastic Container Registry User Guide.
+   */
+  createRepositoryCreationTemplate(callback?: (err: AWSError, data: ECR.Types.CreateRepositoryCreationTemplateResponse) => void): Request<ECR.Types.CreateRepositoryCreationTemplateResponse, AWSError>;
   /**
    * Deletes the lifecycle policy associated with the specified repository.
    */
@@ -100,6 +108,14 @@ declare class ECR extends Service {
    * Deletes a repository. If the repository isn't empty, you must either delete the contents of the repository or use the force option to delete the repository and have Amazon ECR delete all of its contents on your behalf.
    */
   deleteRepository(callback?: (err: AWSError, data: ECR.Types.DeleteRepositoryResponse) => void): Request<ECR.Types.DeleteRepositoryResponse, AWSError>;
+  /**
+   * Deletes a repository creation template.
+   */
+  deleteRepositoryCreationTemplate(params: ECR.Types.DeleteRepositoryCreationTemplateRequest, callback?: (err: AWSError, data: ECR.Types.DeleteRepositoryCreationTemplateResponse) => void): Request<ECR.Types.DeleteRepositoryCreationTemplateResponse, AWSError>;
+  /**
+   * Deletes a repository creation template.
+   */
+  deleteRepositoryCreationTemplate(callback?: (err: AWSError, data: ECR.Types.DeleteRepositoryCreationTemplateResponse) => void): Request<ECR.Types.DeleteRepositoryCreationTemplateResponse, AWSError>;
   /**
    * Deletes the repository policy associated with the specified repository.
    */
@@ -156,6 +172,22 @@ declare class ECR extends Service {
    * Describes image repositories in a registry.
    */
   describeRepositories(callback?: (err: AWSError, data: ECR.Types.DescribeRepositoriesResponse) => void): Request<ECR.Types.DescribeRepositoriesResponse, AWSError>;
+  /**
+   * Returns details about the repository creation templates in a registry. The prefixes request parameter can be used to return the details for a specific repository creation template.
+   */
+  describeRepositoryCreationTemplates(params: ECR.Types.DescribeRepositoryCreationTemplatesRequest, callback?: (err: AWSError, data: ECR.Types.DescribeRepositoryCreationTemplatesResponse) => void): Request<ECR.Types.DescribeRepositoryCreationTemplatesResponse, AWSError>;
+  /**
+   * Returns details about the repository creation templates in a registry. The prefixes request parameter can be used to return the details for a specific repository creation template.
+   */
+  describeRepositoryCreationTemplates(callback?: (err: AWSError, data: ECR.Types.DescribeRepositoryCreationTemplatesResponse) => void): Request<ECR.Types.DescribeRepositoryCreationTemplatesResponse, AWSError>;
+  /**
+   * Retrieves the basic scan type version name.
+   */
+  getAccountSetting(params: ECR.Types.GetAccountSettingRequest, callback?: (err: AWSError, data: ECR.Types.GetAccountSettingResponse) => void): Request<ECR.Types.GetAccountSettingResponse, AWSError>;
+  /**
+   * Retrieves the basic scan type version name.
+   */
+  getAccountSetting(callback?: (err: AWSError, data: ECR.Types.GetAccountSettingResponse) => void): Request<ECR.Types.GetAccountSettingResponse, AWSError>;
   /**
    * Retrieves an authorization token. An authorization token represents your IAM authentication credentials and can be used to access any Amazon ECR registry that your IAM principal has access to. The authorization token is valid for 12 hours. The authorizationToken returned is a base64 encoded string that can be decoded and used in a docker login command to authenticate to a registry. The CLI offers an get-login-password command that simplifies the login process. For more information, see Registry authentication in the Amazon Elastic Container Registry User Guide.
    */
@@ -236,6 +268,14 @@ declare class ECR extends Service {
    * List the tags for an Amazon ECR resource.
    */
   listTagsForResource(callback?: (err: AWSError, data: ECR.Types.ListTagsForResourceResponse) => void): Request<ECR.Types.ListTagsForResourceResponse, AWSError>;
+  /**
+   * Allows you to change the basic scan type version by setting the name parameter to either CLAIR to AWS_NATIVE.
+   */
+  putAccountSetting(params: ECR.Types.PutAccountSettingRequest, callback?: (err: AWSError, data: ECR.Types.PutAccountSettingResponse) => void): Request<ECR.Types.PutAccountSettingResponse, AWSError>;
+  /**
+   * Allows you to change the basic scan type version by setting the name parameter to either CLAIR to AWS_NATIVE.
+   */
+  putAccountSetting(callback?: (err: AWSError, data: ECR.Types.PutAccountSettingResponse) => void): Request<ECR.Types.PutAccountSettingResponse, AWSError>;
   /**
    * Creates or updates the image manifest and tags associated with an image. When an image is pushed and all new image layers have been uploaded, the PutImage API is called once to create or update the image manifest and the tags associated with the image.  This operation is used by the Amazon ECR proxy and is not generally used by customers for pulling and pushing images. In most cases, you should use the docker CLI to pull, tag, and push images. 
    */
@@ -285,11 +325,11 @@ declare class ECR extends Service {
    */
   putRegistryScanningConfiguration(callback?: (err: AWSError, data: ECR.Types.PutRegistryScanningConfigurationResponse) => void): Request<ECR.Types.PutRegistryScanningConfigurationResponse, AWSError>;
   /**
-   * Creates or updates the replication configuration for a registry. The existing replication configuration for a repository can be retrieved with the DescribeRegistry API action. The first time the PutReplicationConfiguration API is called, a service-linked IAM role is created in your account for the replication process. For more information, see Using service-linked roles for Amazon ECR in the Amazon Elastic Container Registry User Guide.  When configuring cross-account replication, the destination account must grant the source account permission to replicate. This permission is controlled using a registry permissions policy. For more information, see PutRegistryPolicy. 
+   * Creates or updates the replication configuration for a registry. The existing replication configuration for a repository can be retrieved with the DescribeRegistry API action. The first time the PutReplicationConfiguration API is called, a service-linked IAM role is created in your account for the replication process. For more information, see Using service-linked roles for Amazon ECR in the Amazon Elastic Container Registry User Guide. For more information on the custom role for replication, see Creating an IAM role for replication.  When configuring cross-account replication, the destination account must grant the source account permission to replicate. This permission is controlled using a registry permissions policy. For more information, see PutRegistryPolicy. 
    */
   putReplicationConfiguration(params: ECR.Types.PutReplicationConfigurationRequest, callback?: (err: AWSError, data: ECR.Types.PutReplicationConfigurationResponse) => void): Request<ECR.Types.PutReplicationConfigurationResponse, AWSError>;
   /**
-   * Creates or updates the replication configuration for a registry. The existing replication configuration for a repository can be retrieved with the DescribeRegistry API action. The first time the PutReplicationConfiguration API is called, a service-linked IAM role is created in your account for the replication process. For more information, see Using service-linked roles for Amazon ECR in the Amazon Elastic Container Registry User Guide.  When configuring cross-account replication, the destination account must grant the source account permission to replicate. This permission is controlled using a registry permissions policy. For more information, see PutRegistryPolicy. 
+   * Creates or updates the replication configuration for a registry. The existing replication configuration for a repository can be retrieved with the DescribeRegistry API action. The first time the PutReplicationConfiguration API is called, a service-linked IAM role is created in your account for the replication process. For more information, see Using service-linked roles for Amazon ECR in the Amazon Elastic Container Registry User Guide. For more information on the custom role for replication, see Creating an IAM role for replication.  When configuring cross-account replication, the destination account must grant the source account permission to replicate. This permission is controlled using a registry permissions policy. For more information, see PutRegistryPolicy. 
    */
   putReplicationConfiguration(callback?: (err: AWSError, data: ECR.Types.PutReplicationConfigurationResponse) => void): Request<ECR.Types.PutReplicationConfigurationResponse, AWSError>;
   /**
@@ -340,6 +380,14 @@ declare class ECR extends Service {
    * Updates an existing pull through cache rule.
    */
   updatePullThroughCacheRule(callback?: (err: AWSError, data: ECR.Types.UpdatePullThroughCacheRuleResponse) => void): Request<ECR.Types.UpdatePullThroughCacheRuleResponse, AWSError>;
+  /**
+   * Updates an existing repository creation template.
+   */
+  updateRepositoryCreationTemplate(params: ECR.Types.UpdateRepositoryCreationTemplateRequest, callback?: (err: AWSError, data: ECR.Types.UpdateRepositoryCreationTemplateResponse) => void): Request<ECR.Types.UpdateRepositoryCreationTemplateResponse, AWSError>;
+  /**
+   * Updates an existing repository creation template.
+   */
+  updateRepositoryCreationTemplate(callback?: (err: AWSError, data: ECR.Types.UpdateRepositoryCreationTemplateResponse) => void): Request<ECR.Types.UpdateRepositoryCreationTemplateResponse, AWSError>;
   /**
    * Uploads an image layer part to Amazon ECR. When an image is pushed, each new image layer is uploaded in parts. The maximum size of each image layer part can be 20971520 bytes (or about 20MB). The UploadLayerPart API is called once per each new image layer part.  This operation is used by the Amazon ECR proxy and is not generally used by customers for pulling and pushing images. In most cases, you should use the docker CLI to pull, tag, and push images. 
    */
@@ -374,6 +422,8 @@ declare class ECR extends Service {
   waitFor(state: "lifecyclePolicyPreviewComplete", callback?: (err: AWSError, data: ECR.Types.GetLifecyclePolicyPreviewResponse) => void): Request<ECR.Types.GetLifecyclePolicyPreviewResponse, AWSError>;
 }
 declare namespace ECR {
+  export type AccountSettingName = string;
+  export type AccountSettingValue = string;
   export type Arch = string;
   export type Arn = string;
   export interface Attribute {
@@ -619,6 +669,54 @@ declare namespace ECR {
      */
     credentialArn?: CredentialArn;
   }
+  export interface CreateRepositoryCreationTemplateRequest {
+    /**
+     * The repository namespace prefix to associate with the template. All repositories created using this namespace prefix will have the settings defined in this template applied. For example, a prefix of prod would apply to all repositories beginning with prod/. Similarly, a prefix of prod/team would apply to all repositories beginning with prod/team/. To apply a template to all repositories in your registry that don't have an associated creation template, you can use ROOT as the prefix.  There is always an assumed / applied to the end of the prefix. If you specify ecr-public as the prefix, Amazon ECR treats that as ecr-public/. When using a pull through cache rule, the repository prefix you specify during rule creation is what you should specify as your repository creation template prefix as well. 
+     */
+    prefix: Prefix;
+    /**
+     * A description for the repository creation template.
+     */
+    description?: RepositoryTemplateDescription;
+    /**
+     * The encryption configuration to use for repositories created using the template.
+     */
+    encryptionConfiguration?: EncryptionConfigurationForRepositoryCreationTemplate;
+    /**
+     * The metadata to apply to the repository to help you categorize and organize. Each tag consists of a key and an optional value, both of which you define. Tag keys can have a maximum character length of 128 characters, and tag values can have a maximum length of 256 characters.
+     */
+    resourceTags?: TagList;
+    /**
+     * The tag mutability setting for the repository. If this parameter is omitted, the default setting of MUTABLE will be used which will allow image tags to be overwritten. If IMMUTABLE is specified, all image tags within the repository will be immutable which will prevent them from being overwritten.
+     */
+    imageTagMutability?: ImageTagMutability;
+    /**
+     * The repository policy to apply to repositories created using the template. A repository policy is a permissions policy associated with a repository to control access permissions. 
+     */
+    repositoryPolicy?: RepositoryPolicyText;
+    /**
+     * The lifecycle policy to use for repositories created using the template.
+     */
+    lifecyclePolicy?: LifecyclePolicyTextForRepositoryCreationTemplate;
+    /**
+     * A list of enumerable strings representing the Amazon ECR repository creation scenarios that this template will apply towards. The two supported scenarios are PULL_THROUGH_CACHE and REPLICATION 
+     */
+    appliedFor: RCTAppliedForList;
+    /**
+     * The ARN of the role to be assumed by Amazon ECR. This role must be in the same account as the registry that you are configuring. Amazon ECR will assume your supplied role when the customRoleArn is specified. When this field isn't specified, Amazon ECR will use the service-linked role for the repository creation template.
+     */
+    customRoleArn?: CustomRoleArn;
+  }
+  export interface CreateRepositoryCreationTemplateResponse {
+    /**
+     * The registry ID associated with the request.
+     */
+    registryId?: RegistryId;
+    /**
+     * The details of the repository creation template associated with the request.
+     */
+    repositoryCreationTemplate?: RepositoryCreationTemplate;
+  }
   export interface CreateRepositoryRequest {
     /**
      * The Amazon Web Services account ID associated with the registry to create the repository. If you do not specify a registry, the default registry is assumed.
@@ -653,6 +751,7 @@ declare namespace ECR {
   }
   export type CreationTimestamp = Date;
   export type CredentialArn = string;
+  export type CustomRoleArn = string;
   export interface CvssScore {
     /**
      * The base CVSS score used for the finding.
@@ -778,6 +877,22 @@ declare namespace ECR {
      */
     policyText?: RegistryPolicyText;
   }
+  export interface DeleteRepositoryCreationTemplateRequest {
+    /**
+     * The repository namespace prefix associated with the repository creation template.
+     */
+    prefix: Prefix;
+  }
+  export interface DeleteRepositoryCreationTemplateResponse {
+    /**
+     * The registry ID associated with the request.
+     */
+    registryId?: RegistryId;
+    /**
+     * The details of the repository creation template that was deleted.
+     */
+    repositoryCreationTemplate?: RepositoryCreationTemplate;
+  }
   export interface DeleteRepositoryPolicyRequest {
     /**
      * The Amazon Web Services account ID associated with the registry that contains the repository policy to delete. If you do not specify a registry, the default registry is assumed.
@@ -960,7 +1075,7 @@ declare namespace ECR {
   }
   export interface DescribeRegistryResponse {
     /**
-     * The ID of the registry.
+     * The registry ID associated with the request.
      */
     registryId?: RegistryId;
     /**
@@ -996,9 +1111,37 @@ declare namespace ECR {
      */
     nextToken?: NextToken;
   }
+  export interface DescribeRepositoryCreationTemplatesRequest {
+    /**
+     * The repository namespace prefixes associated with the repository creation templates to describe. If this value is not specified, all repository creation templates are returned.
+     */
+    prefixes?: PrefixList;
+    /**
+     * The nextToken value returned from a previous paginated DescribeRepositoryCreationTemplates request where maxResults was used and the results exceeded the value of that parameter. Pagination continues from the end of the previous results that returned the nextToken value. This value is null when there are no more results to return.  This token should be treated as an opaque identifier that is only used to retrieve the next items in a list and not for other programmatic purposes. 
+     */
+    nextToken?: NextToken;
+    /**
+     * The maximum number of repository results returned by DescribeRepositoryCreationTemplatesRequest in paginated output. When this parameter is used, DescribeRepositoryCreationTemplatesRequest only returns maxResults results in a single page along with a nextToken response element. The remaining results of the initial request can be seen by sending another DescribeRepositoryCreationTemplatesRequest request with the returned nextToken value. This value can be between 1 and 1000. If this parameter is not used, then DescribeRepositoryCreationTemplatesRequest returns up to 100 results and a nextToken value, if applicable.
+     */
+    maxResults?: MaxResults;
+  }
+  export interface DescribeRepositoryCreationTemplatesResponse {
+    /**
+     * The registry ID associated with the request.
+     */
+    registryId?: RegistryId;
+    /**
+     * The details of the repository creation templates.
+     */
+    repositoryCreationTemplates?: RepositoryCreationTemplateList;
+    /**
+     * The nextToken value to include in a future DescribeRepositoryCreationTemplates request. When the results of a DescribeRepositoryCreationTemplates request exceed maxResults, this value can be used to retrieve the next page of results. This value is null when there are no more results to return.
+     */
+    nextToken?: NextToken;
+  }
   export interface EncryptionConfiguration {
     /**
-     * The encryption type to use. If you use the KMS encryption type, the contents of the repository will be encrypted using server-side encryption with Key Management Service key stored in KMS. When you use KMS to encrypt your data, you can either use the default Amazon Web Services managed KMS key for Amazon ECR, or specify your own KMS key, which you already created. For more information, see Protecting data using server-side encryption with an KMS key stored in Key Management Service (SSE-KMS) in the Amazon Simple Storage Service Console Developer Guide. If you use the AES256 encryption type, Amazon ECR uses server-side encryption with Amazon S3-managed encryption keys which encrypts the images in the repository using an AES-256 encryption algorithm. For more information, see Protecting data using server-side encryption with Amazon S3-managed encryption keys (SSE-S3) in the Amazon Simple Storage Service Console Developer Guide.
+     * The encryption type to use. If you use the KMS encryption type, the contents of the repository will be encrypted using server-side encryption with Key Management Service key stored in KMS. When you use KMS to encrypt your data, you can either use the default Amazon Web Services managed KMS key for Amazon ECR, or specify your own KMS key, which you already created. For more information, see Protecting data using server-side encryption with an KMS key stored in Key Management Service (SSE-KMS) in the Amazon Simple Storage Service Console Developer Guide. If you use the AES256 encryption type, Amazon ECR uses server-side encryption with Amazon S3-managed encryption keys which encrypts the images in the repository using an AES256 encryption algorithm. For more information, see Protecting data using server-side encryption with Amazon S3-managed encryption keys (SSE-S3) in the Amazon Simple Storage Service Console Developer Guide.
      */
     encryptionType: EncryptionType;
     /**
@@ -1006,6 +1149,16 @@ declare namespace ECR {
      */
     kmsKey?: KmsKey;
   }
+  export interface EncryptionConfigurationForRepositoryCreationTemplate {
+    /**
+     * The encryption type to use. If you use the KMS encryption type, the contents of the repository will be encrypted using server-side encryption with Key Management Service key stored in KMS. When you use KMS to encrypt your data, you can either use the default Amazon Web Services managed KMS key for Amazon ECR, or specify your own KMS key, which you already created. For more information, see Protecting data using server-side encryption with an KMS key stored in Key Management Service (SSE-KMS) in the Amazon Simple Storage Service Console Developer Guide. If you use the AES256 encryption type, Amazon ECR uses server-side encryption with Amazon S3-managed encryption keys which encrypts the images in the repository using an AES256 encryption algorithm. For more information, see Protecting data using server-side encryption with Amazon S3-managed encryption keys (SSE-S3) in the Amazon Simple Storage Service Console Developer Guide.
+     */
+    encryptionType: EncryptionType;
+    /**
+     * If you use the KMS encryption type, specify the KMS key to use for encryption. The full ARN of the KMS key must be specified. The key must exist in the same Region as the repository. If no key is specified, the default Amazon Web Services managed KMS key for Amazon ECR will be used.
+     */
+    kmsKey?: KmsKeyForRepositoryCreationTemplate;
+  }
   export type EncryptionType = "AES256"|"KMS"|string;
   export interface EnhancedImageScanFinding {
     /**
@@ -1080,6 +1233,22 @@ declare namespace ECR {
   export type FindingSeverity = "INFORMATIONAL"|"LOW"|"MEDIUM"|"HIGH"|"CRITICAL"|"UNDEFINED"|string;
   export type FindingSeverityCounts = {[key: string]: SeverityCount};
   export type ForceFlag = boolean;
+  export interface GetAccountSettingRequest {
+    /**
+     * Basic scan type version name. 
+     */
+    name: AccountSettingName;
+  }
+  export interface GetAccountSettingResponse {
+    /**
+     * Retrieves the basic scan type version name.
+     */
+    name?: AccountSettingName;
+    /**
+     * Retrieves the value that specifies what basic scan type is being used: AWS_NATIVE or CLAIR.
+     */
+    value?: AccountSettingName;
+  }
   export type GetAuthorizationTokenRegistryIdList = RegistryId[];
   export interface GetAuthorizationTokenRequest {
     /**
@@ -1205,7 +1374,7 @@ declare namespace ECR {
   }
   export interface GetRegistryPolicyResponse {
     /**
-     * The ID of the registry.
+     * The registry ID associated with the request.
      */
     registryId?: RegistryId;
     /**
@@ -1217,7 +1386,7 @@ declare namespace ECR {
   }
   export interface GetRegistryScanningConfigurationResponse {
     /**
-     * The ID of the registry.
+     * The registry ID associated with the request.
      */
     registryId?: RegistryId;
     /**
@@ -1472,6 +1641,7 @@ declare namespace ECR {
   }
   export type IsPTCRuleValid = boolean;
   export type KmsKey = string;
+  export type KmsKeyForRepositoryCreationTemplate = string;
   export interface Layer {
     /**
      * The sha256 digest of the image layer.
@@ -1557,6 +1727,7 @@ declare namespace ECR {
   }
   export type LifecyclePolicyRulePriority = number;
   export type LifecyclePolicyText = string;
+  export type LifecyclePolicyTextForRepositoryCreationTemplate = string;
   export type LifecyclePreviewMaxResults = number;
   export interface ListImagesFilter {
     /**
@@ -1659,6 +1830,8 @@ declare namespace ECR {
   }
   export type PartSize = number;
   export type Platform = string;
+  export type Prefix = string;
+  export type PrefixList = Prefix[];
   export type ProxyEndpoint = string;
   export interface PullThroughCacheRule {
     /**
@@ -1694,6 +1867,26 @@ declare namespace ECR {
   export type PullThroughCacheRuleRepositoryPrefix = string;
   export type PullThroughCacheRuleRepositoryPrefixList = PullThroughCacheRuleRepositoryPrefix[];
   export type PushTimestamp = Date;
+  export interface PutAccountSettingRequest {
+    /**
+     * Basic scan type version name. 
+     */
+    name: AccountSettingName;
+    /**
+     * Setting value that determines what basic scan type is being used: AWS_NATIVE or CLAIR.
+     */
+    value: AccountSettingValue;
+  }
+  export interface PutAccountSettingResponse {
+    /**
+     * Retrieves the the basic scan type version name.
+     */
+    name?: AccountSettingName;
+    /**
+     * Retrieves the basic scan type value, either AWS_NATIVE or -.
+     */
+    value?: AccountSettingValue;
+  }
   export interface PutImageRequest {
     /**
      * The Amazon Web Services account ID associated with the registry that contains the repository in which to put the image. If you do not specify a registry, the default registry is assumed.
@@ -1818,7 +2011,7 @@ declare namespace ECR {
   }
   export interface PutRegistryPolicyResponse {
     /**
-     * The registry ID.
+     * The registry ID associated with the request.
      */
     registryId?: RegistryId;
     /**
@@ -1854,6 +2047,8 @@ declare namespace ECR {
      */
     replicationConfiguration?: ReplicationConfiguration;
   }
+  export type RCTAppliedFor = "REPLICATION"|"PULL_THROUGH_CACHE"|string;
+  export type RCTAppliedForList = RCTAppliedFor[];
   export type Reason = string;
   export interface Recommendation {
     /**
@@ -1962,6 +2157,53 @@ declare namespace ECR {
      */
     encryptionConfiguration?: EncryptionConfiguration;
   }
+  export interface RepositoryCreationTemplate {
+    /**
+     * The repository namespace prefix associated with the repository creation template.
+     */
+    prefix?: Prefix;
+    /**
+     * The description associated with the repository creation template.
+     */
+    description?: RepositoryTemplateDescription;
+    /**
+     * The encryption configuration associated with the repository creation template.
+     */
+    encryptionConfiguration?: EncryptionConfigurationForRepositoryCreationTemplate;
+    /**
+     * The metadata to apply to the repository to help you categorize and organize. Each tag consists of a key and an optional value, both of which you define. Tag keys can have a maximum character length of 128 characters, and tag values can have a maximum length of 256 characters.
+     */
+    resourceTags?: TagList;
+    /**
+     * The tag mutability setting for the repository. If this parameter is omitted, the default setting of MUTABLE will be used which will allow image tags to be overwritten. If IMMUTABLE is specified, all image tags within the repository will be immutable which will prevent them from being overwritten.
+     */
+    imageTagMutability?: ImageTagMutability;
+    /**
+     * he repository policy to apply to repositories created using the template. A repository policy is a permissions policy associated with a repository to control access permissions. 
+     */
+    repositoryPolicy?: RepositoryPolicyText;
+    /**
+     * The lifecycle policy to use for repositories created using the template.
+     */
+    lifecyclePolicy?: LifecyclePolicyTextForRepositoryCreationTemplate;
+    /**
+     * A list of enumerable Strings representing the repository creation scenarios that this template will apply towards. The two supported scenarios are PULL_THROUGH_CACHE and REPLICATION
+     */
+    appliedFor?: RCTAppliedForList;
+    /**
+     * The ARN of the role to be assumed by Amazon ECR. Amazon ECR will assume your supplied role when the customRoleArn is specified. When this field isn't specified, Amazon ECR will use the service-linked role for the repository creation template.
+     */
+    customRoleArn?: CustomRoleArn;
+    /**
+     * The date and time, in JavaScript date format, when the repository creation template was created.
+     */
+    createdAt?: _Date;
+    /**
+     * The date and time, in JavaScript date format, when the repository creation template was last updated.
+     */
+    updatedAt?: _Date;
+  }
+  export type RepositoryCreationTemplateList = RepositoryCreationTemplate[];
   export interface RepositoryFilter {
     /**
      * The repository filter details. When the PREFIX_MATCH filter type is specified, this value is required and should be the repository name prefix to configure replication for.
@@ -2017,6 +2259,7 @@ declare namespace ECR {
   }
   export type RepositoryScanningConfigurationFailureList = RepositoryScanningConfigurationFailure[];
   export type RepositoryScanningConfigurationList = RepositoryScanningConfiguration[];
+  export type RepositoryTemplateDescription = string;
   export interface Resource {
     /**
      * An object that contains details about the resource involved in a finding.
@@ -2242,6 +2485,51 @@ declare namespace ECR {
      */
     credentialArn?: CredentialArn;
   }
+  export interface UpdateRepositoryCreationTemplateRequest {
+    /**
+     * The repository namespace prefix that matches an existing repository creation template in the registry. All repositories created using this namespace prefix will have the settings defined in this template applied. For example, a prefix of prod would apply to all repositories beginning with prod/. This includes a repository named prod/team1 as well as a repository named prod/repository1. To apply a template to all repositories in your registry that don't have an associated creation template, you can use ROOT as the prefix.
+     */
+    prefix: Prefix;
+    /**
+     * A description for the repository creation template.
+     */
+    description?: RepositoryTemplateDescription;
+    encryptionConfiguration?: EncryptionConfigurationForRepositoryCreationTemplate;
+    /**
+     * The metadata to apply to the repository to help you categorize and organize. Each tag consists of a key and an optional value, both of which you define. Tag keys can have a maximum character length of 128 characters, and tag values can have a maximum length of 256 characters.
+     */
+    resourceTags?: TagList;
+    /**
+     * Updates the tag mutability setting for the repository. If this parameter is omitted, the default setting of MUTABLE will be used which will allow image tags to be overwritten. If IMMUTABLE is specified, all image tags within the repository will be immutable which will prevent them from being overwritten.
+     */
+    imageTagMutability?: ImageTagMutability;
+    /**
+     * Updates the repository policy created using the template. A repository policy is a permissions policy associated with a repository to control access permissions. 
+     */
+    repositoryPolicy?: RepositoryPolicyText;
+    /**
+     * Updates the lifecycle policy associated with the specified repository creation template.
+     */
+    lifecyclePolicy?: LifecyclePolicyTextForRepositoryCreationTemplate;
+    /**
+     * Updates the list of enumerable strings representing the Amazon ECR repository creation scenarios that this template will apply towards. The two supported scenarios are PULL_THROUGH_CACHE and REPLICATION 
+     */
+    appliedFor?: RCTAppliedForList;
+    /**
+     * The ARN of the role to be assumed by Amazon ECR. This role must be in the same account as the registry that you are configuring. Amazon ECR will assume your supplied role when the customRoleArn is specified. When this field isn't specified, Amazon ECR will use the service-linked role for the repository creation template.
+     */
+    customRoleArn?: CustomRoleArn;
+  }
+  export interface UpdateRepositoryCreationTemplateResponse {
+    /**
+     * The registry ID associated with the request.
+     */
+    registryId?: RegistryId;
+    /**
+     * The details of the repository creation template associated with the request.
+     */
+    repositoryCreationTemplate?: RepositoryCreationTemplate;
+  }
   export type UpdatedTimestamp = Date;
   export type UploadId = string;
   export interface UploadLayerPartRequest {
@@ -2288,7 +2576,7 @@ declare namespace ECR {
      */
     lastByteReceived?: PartSize;
   }
-  export type UpstreamRegistry = "ecr-public"|"quay"|"k8s"|"docker-hub"|"github-container-registry"|"azure-container-registry"|string;
+  export type UpstreamRegistry = "ecr-public"|"quay"|"k8s"|"docker-hub"|"github-container-registry"|"azure-container-registry"|"gitlab-container-registry"|string;
   export type Url = string;
   export interface ValidatePullThroughCacheRuleRequest {
     /**

package/node_modules/aws-sdk/clients/ecs.d.ts

@@ -341,11 +341,11 @@ declare class ECS extends Service {
    */
   startTask(callback?: (err: AWSError, data: ECS.Types.StartTaskResponse) => void): Request<ECS.Types.StartTaskResponse, AWSError>;
   /**
-   * Stops a running task. Any tags associated with the task will be deleted. When StopTask is called on a task, the equivalent of docker stop is issued to the containers running in the task. This results in a SIGTERM value and a default 30-second timeout, after which the SIGKILL value is sent and the containers are forcibly stopped. If the container handles the SIGTERM value gracefully and exits within 30 seconds from receiving it, no SIGKILL value is sent.  The default 30-second timeout can be configured on the Amazon ECS container agent with the ECS_CONTAINER_STOP_TIMEOUT variable. For more information, see Amazon ECS Container Agent Configuration in the Amazon Elastic Container Service Developer Guide. 
+   * Stops a running task. Any tags associated with the task will be deleted. When StopTask is called on a task, the equivalent of docker stop is issued to the containers running in the task. This results in a SIGTERM value and a default 30-second timeout, after which the SIGKILL value is sent and the containers are forcibly stopped. If the container handles the SIGTERM value gracefully and exits within 30 seconds from receiving it, no SIGKILL value is sent. For Windows containers, POSIX signals do not work and runtime stops the container by sending a CTRL_SHUTDOWN_EVENT. For more information, see Unable to react to graceful shutdown of (Windows) container #25982 on GitHub.  The default 30-second timeout can be configured on the Amazon ECS container agent with the ECS_CONTAINER_STOP_TIMEOUT variable. For more information, see Amazon ECS Container Agent Configuration in the Amazon Elastic Container Service Developer Guide. 
    */
   stopTask(params: ECS.Types.StopTaskRequest, callback?: (err: AWSError, data: ECS.Types.StopTaskResponse) => void): Request<ECS.Types.StopTaskResponse, AWSError>;
   /**
-   * Stops a running task. Any tags associated with the task will be deleted. When StopTask is called on a task, the equivalent of docker stop is issued to the containers running in the task. This results in a SIGTERM value and a default 30-second timeout, after which the SIGKILL value is sent and the containers are forcibly stopped. If the container handles the SIGTERM value gracefully and exits within 30 seconds from receiving it, no SIGKILL value is sent.  The default 30-second timeout can be configured on the Amazon ECS container agent with the ECS_CONTAINER_STOP_TIMEOUT variable. For more information, see Amazon ECS Container Agent Configuration in the Amazon Elastic Container Service Developer Guide. 
+   * Stops a running task. Any tags associated with the task will be deleted. When StopTask is called on a task, the equivalent of docker stop is issued to the containers running in the task. This results in a SIGTERM value and a default 30-second timeout, after which the SIGKILL value is sent and the containers are forcibly stopped. If the container handles the SIGTERM value gracefully and exits within 30 seconds from receiving it, no SIGKILL value is sent. For Windows containers, POSIX signals do not work and runtime stops the container by sending a CTRL_SHUTDOWN_EVENT. For more information, see Unable to react to graceful shutdown of (Windows) container #25982 on GitHub.  The default 30-second timeout can be configured on the Amazon ECS container agent with the ECS_CONTAINER_STOP_TIMEOUT variable. For more information, see Amazon ECS Container Agent Configuration in the Amazon Elastic Container Service Developer Guide. 
    */
   stopTask(callback?: (err: AWSError, data: ECS.Types.StopTaskResponse) => void): Request<ECS.Types.StopTaskResponse, AWSError>;
   /**
@@ -720,6 +720,10 @@ declare namespace ECS {
      * The details of the execute command configuration.
      */
     executeCommandConfiguration?: ExecuteCommandConfiguration;
+    /**
+     * The details of the managed storage configuration.
+     */
+    managedStorageConfiguration?: ManagedStorageConfiguration;
   }
   export type ClusterField = "ATTACHMENTS"|"CONFIGURATIONS"|"SETTINGS"|"STATISTICS"|"TAGS"|string;
   export type ClusterFieldList = ClusterField[];
@@ -1564,6 +1568,10 @@ declare namespace ECS {
      * The details of the volume that was configuredAtLaunch. You can configure different settings like the size, throughput, volumeType, and ecryption in ServiceManagedEBSVolumeConfiguration. The name of the volume must match the name from the task definition.
      */
     volumeConfigurations?: ServiceVolumeConfigurations;
+    /**
+     * The Fargate ephemeral storage settings for the deployment.
+     */
+    fargateEphemeralStorage?: DeploymentEphemeralStorage;
   }
   export interface DeploymentAlarms {
     /**
@@ -1614,6 +1622,12 @@ declare namespace ECS {
     type: DeploymentControllerType;
   }
   export type DeploymentControllerType = "ECS"|"CODE_DEPLOY"|"EXTERNAL"|string;
+  export interface DeploymentEphemeralStorage {
+    /**
+     * Specify an Key Management Service key ID to encrypt the ephemeral storage for deployment.
+     */
+    kmsKeyId?: String;
+  }
   export type DeploymentRolloutState = "COMPLETED"|"FAILED"|"IN_PROGRESS"|string;
   export type Deployments = Deployment[];
   export interface DeregisterContainerInstanceRequest {
@@ -2656,6 +2670,16 @@ declare namespace ECS {
   export type ManagedScalingStatus = "ENABLED"|"DISABLED"|string;
   export type ManagedScalingStepSize = number;
   export type ManagedScalingTargetCapacity = number;
+  export interface ManagedStorageConfiguration {
+    /**
+     * Specify a Key Management Service key ID to encrypt the managed storage.
+     */
+    kmsKeyId?: String;
+    /**
+     * Specify the Key Management Service key ID for the Fargate ephemeral storage.
+     */
+    fargateEphemeralStorageKmsKeyId?: String;
+  }
   export type ManagedTerminationProtection = "ENABLED"|"DISABLED"|string;
   export interface MountPoint {
     /**
@@ -3001,7 +3025,7 @@ declare namespace ECS {
      */
     ephemeralStorage?: EphemeralStorage;
     /**
-     * The operating system that your tasks definitions run on. A platform family is specified only for tasks using the Fargate launch type.  When you specify a task definition in a service, this value must match the runtimePlatform value of the service.
+     * The operating system that your tasks definitions run on. A platform family is specified only for tasks using the Fargate launch type. 
      */
     runtimePlatform?: RuntimePlatform;
   }
@@ -3050,11 +3074,11 @@ declare namespace ECS {
   }
   export interface ResourceRequirement {
     /**
-     * The value for the specified resource type. If the GPU type is used, the value is the number of physical GPUs the Amazon ECS container agent reserves for the container. The number of GPUs that's reserved for all containers in a task can't exceed the number of available GPUs on the container instance that the task is launched on. If the InferenceAccelerator type is used, the value matches the deviceName for an InferenceAccelerator specified in a task definition.
+     * The value for the specified resource type. When the type is GPU, the value is the number of physical GPUs the Amazon ECS container agent reserves for the container. The number of GPUs that's reserved for all containers in a task can't exceed the number of available GPUs on the container instance that the task is launched on. When the type is InferenceAccelerator, the value matches the deviceName for an InferenceAccelerator specified in a task definition.
      */
     value: String;
     /**
-     * The type of resource to assign to a container. The supported values are GPU or InferenceAccelerator.
+     * The type of resource to assign to a container. 
      */
     type: ResourceType;
   }
@@ -3896,6 +3920,10 @@ declare namespace ECS {
      * The ephemeral storage settings for the task.
      */
     ephemeralStorage?: EphemeralStorage;
+    /**
+     * The Fargate ephemeral storage settings for the task.
+     */
+    fargateEphemeralStorage?: TaskEphemeralStorage;
   }
   export interface TaskDefinition {
     /**
@@ -4012,6 +4040,16 @@ declare namespace ECS {
   export type TaskDefinitionPlacementConstraintType = "memberOf"|string;
   export type TaskDefinitionPlacementConstraints = TaskDefinitionPlacementConstraint[];
   export type TaskDefinitionStatus = "ACTIVE"|"INACTIVE"|"DELETE_IN_PROGRESS"|string;
+  export interface TaskEphemeralStorage {
+    /**
+     * The total amount, in GiB, of the ephemeral storage to set for the task. The minimum supported value is 20 GiB and the maximum supported value is&#x2028; 200 GiB.
+     */
+    sizeInGiB?: Integer;
+    /**
+     * Specify an Key Management Service key ID to encrypt the ephemeral storage for the task.
+     */
+    kmsKeyId?: String;
+  }
   export type TaskField = "TAGS"|string;
   export type TaskFieldList = TaskField[];
   export type TaskFilesystemType = "ext3"|"ext4"|"xfs"|string;
@@ -4194,6 +4232,10 @@ declare namespace ECS {
      * The metadata that you apply to the task set to help you categorize and organize them. Each tag consists of a key and an optional value. You define both. The following basic restrictions apply to tags:   Maximum number of tags per resource - 50   For each resource, each tag key must be unique, and each tag key can have only one value.   Maximum key length - 128 Unicode characters in UTF-8   Maximum value length - 256 Unicode characters in UTF-8   If your tagging schema is used across multiple services and resources, remember that other services may have restrictions on allowed characters. Generally allowed characters are: letters, numbers, and spaces representable in UTF-8, and the following characters: + - = . _ : / @.   Tag keys and values are case-sensitive.   Do not use aws:, AWS:, or any upper or lowercase combination of such as a prefix for either keys or values as it is reserved for Amazon Web Services use. You cannot edit or delete tag keys or values with this prefix. Tags with this prefix do not count against your tags per resource limit.  
      */
     tags?: Tags;
+    /**
+     * The Fargate ephemeral storage settings for the task set.
+     */
+    fargateEphemeralStorage?: DeploymentEphemeralStorage;
   }
   export type TaskSetField = "TAGS"|string;
   export type TaskSetFieldList = TaskSetField[];