cdk-docker-image-deployment 0.0.82 → 0.0.83
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.jsii +4 -4
- package/lib/destination.js +1 -1
- package/lib/docker-image-deployment.js +1 -1
- package/lib/source.js +1 -1
- package/node_modules/@types/aws-lambda/README.md +1 -1
- package/node_modules/@types/aws-lambda/package.json +2 -2
- package/node_modules/@types/aws-lambda/trigger/sqs.d.ts +1 -0
- package/node_modules/aws-sdk/CHANGELOG.md +5 -1
- package/node_modules/aws-sdk/README.md +1 -1
- package/node_modules/aws-sdk/apis/grafana-2020-08-18.min.json +107 -18
- package/node_modules/aws-sdk/apis/rbin-2021-06-15.min.json +129 -5
- package/node_modules/aws-sdk/clients/grafana.d.ts +99 -24
- package/node_modules/aws-sdk/clients/rbin.d.ts +161 -3
- package/node_modules/aws-sdk/dist/aws-sdk-core-react-native.js +1 -1
- package/node_modules/aws-sdk/dist/aws-sdk-react-native.js +3 -3
- package/node_modules/aws-sdk/dist/aws-sdk.js +3 -3
- package/node_modules/aws-sdk/dist/aws-sdk.min.js +2 -2
- package/node_modules/aws-sdk/lib/core.js +1 -1
- package/node_modules/aws-sdk/package.json +1 -1
- package/package.json +5 -5
|
@@ -28,11 +28,11 @@ declare class Grafana extends Service {
|
|
|
28
28
|
*/
|
|
29
29
|
createWorkspace(callback?: (err: AWSError, data: Grafana.Types.CreateWorkspaceResponse) => void): Request<Grafana.Types.CreateWorkspaceResponse, AWSError>;
|
|
30
30
|
/**
|
|
31
|
-
* Creates
|
|
31
|
+
* Creates a Grafana API key for the workspace. This key can be used to authenticate requests sent to the workspace's HTTP API. See https://docs.aws.amazon.com/grafana/latest/userguide/Using-Grafana-APIs.html for available APIs and example requests.
|
|
32
32
|
*/
|
|
33
33
|
createWorkspaceApiKey(params: Grafana.Types.CreateWorkspaceApiKeyRequest, callback?: (err: AWSError, data: Grafana.Types.CreateWorkspaceApiKeyResponse) => void): Request<Grafana.Types.CreateWorkspaceApiKeyResponse, AWSError>;
|
|
34
34
|
/**
|
|
35
|
-
* Creates
|
|
35
|
+
* Creates a Grafana API key for the workspace. This key can be used to authenticate requests sent to the workspace's HTTP API. See https://docs.aws.amazon.com/grafana/latest/userguide/Using-Grafana-APIs.html for available APIs and example requests.
|
|
36
36
|
*/
|
|
37
37
|
createWorkspaceApiKey(callback?: (err: AWSError, data: Grafana.Types.CreateWorkspaceApiKeyResponse) => void): Request<Grafana.Types.CreateWorkspaceApiKeyResponse, AWSError>;
|
|
38
38
|
/**
|
|
@@ -44,11 +44,11 @@ declare class Grafana extends Service {
|
|
|
44
44
|
*/
|
|
45
45
|
deleteWorkspace(callback?: (err: AWSError, data: Grafana.Types.DeleteWorkspaceResponse) => void): Request<Grafana.Types.DeleteWorkspaceResponse, AWSError>;
|
|
46
46
|
/**
|
|
47
|
-
* Deletes
|
|
47
|
+
* Deletes a Grafana API key for the workspace.
|
|
48
48
|
*/
|
|
49
49
|
deleteWorkspaceApiKey(params: Grafana.Types.DeleteWorkspaceApiKeyRequest, callback?: (err: AWSError, data: Grafana.Types.DeleteWorkspaceApiKeyResponse) => void): Request<Grafana.Types.DeleteWorkspaceApiKeyResponse, AWSError>;
|
|
50
50
|
/**
|
|
51
|
-
* Deletes
|
|
51
|
+
* Deletes a Grafana API key for the workspace.
|
|
52
52
|
*/
|
|
53
53
|
deleteWorkspaceApiKey(callback?: (err: AWSError, data: Grafana.Types.DeleteWorkspaceApiKeyResponse) => void): Request<Grafana.Types.DeleteWorkspaceApiKeyResponse, AWSError>;
|
|
54
54
|
/**
|
|
@@ -67,6 +67,14 @@ declare class Grafana extends Service {
|
|
|
67
67
|
* Displays information about the authentication methods used in one Amazon Managed Grafana workspace.
|
|
68
68
|
*/
|
|
69
69
|
describeWorkspaceAuthentication(callback?: (err: AWSError, data: Grafana.Types.DescribeWorkspaceAuthenticationResponse) => void): Request<Grafana.Types.DescribeWorkspaceAuthenticationResponse, AWSError>;
|
|
70
|
+
/**
|
|
71
|
+
* Gets the current configuration string for the given workspace.
|
|
72
|
+
*/
|
|
73
|
+
describeWorkspaceConfiguration(params: Grafana.Types.DescribeWorkspaceConfigurationRequest, callback?: (err: AWSError, data: Grafana.Types.DescribeWorkspaceConfigurationResponse) => void): Request<Grafana.Types.DescribeWorkspaceConfigurationResponse, AWSError>;
|
|
74
|
+
/**
|
|
75
|
+
* Gets the current configuration string for the given workspace.
|
|
76
|
+
*/
|
|
77
|
+
describeWorkspaceConfiguration(callback?: (err: AWSError, data: Grafana.Types.DescribeWorkspaceConfigurationResponse) => void): Request<Grafana.Types.DescribeWorkspaceConfigurationResponse, AWSError>;
|
|
70
78
|
/**
|
|
71
79
|
* Removes the Grafana Enterprise license from a workspace.
|
|
72
80
|
*/
|
|
@@ -124,11 +132,11 @@ declare class Grafana extends Service {
|
|
|
124
132
|
*/
|
|
125
133
|
updatePermissions(callback?: (err: AWSError, data: Grafana.Types.UpdatePermissionsResponse) => void): Request<Grafana.Types.UpdatePermissionsResponse, AWSError>;
|
|
126
134
|
/**
|
|
127
|
-
* Modifies an existing Amazon Managed Grafana workspace. If you use this operation and omit any optional parameters, the existing values of those parameters are not changed. To modify the user authentication methods that the workspace uses, such as SAML or
|
|
135
|
+
* Modifies an existing Amazon Managed Grafana workspace. If you use this operation and omit any optional parameters, the existing values of those parameters are not changed. To modify the user authentication methods that the workspace uses, such as SAML or IAM Identity Center, use UpdateWorkspaceAuthentication. To modify which users in the workspace have the Admin and Editor Grafana roles, use UpdatePermissions.
|
|
128
136
|
*/
|
|
129
137
|
updateWorkspace(params: Grafana.Types.UpdateWorkspaceRequest, callback?: (err: AWSError, data: Grafana.Types.UpdateWorkspaceResponse) => void): Request<Grafana.Types.UpdateWorkspaceResponse, AWSError>;
|
|
130
138
|
/**
|
|
131
|
-
* Modifies an existing Amazon Managed Grafana workspace. If you use this operation and omit any optional parameters, the existing values of those parameters are not changed. To modify the user authentication methods that the workspace uses, such as SAML or
|
|
139
|
+
* Modifies an existing Amazon Managed Grafana workspace. If you use this operation and omit any optional parameters, the existing values of those parameters are not changed. To modify the user authentication methods that the workspace uses, such as SAML or IAM Identity Center, use UpdateWorkspaceAuthentication. To modify which users in the workspace have the Admin and Editor Grafana roles, use UpdatePermissions.
|
|
132
140
|
*/
|
|
133
141
|
updateWorkspace(callback?: (err: AWSError, data: Grafana.Types.UpdateWorkspaceResponse) => void): Request<Grafana.Types.UpdateWorkspaceResponse, AWSError>;
|
|
134
142
|
/**
|
|
@@ -139,6 +147,14 @@ declare class Grafana extends Service {
|
|
|
139
147
|
* Use this operation to define the identity provider (IdP) that this workspace authenticates users from, using SAML. You can also map SAML assertion attributes to workspace user information and define which groups in the assertion attribute are to have the Admin and Editor roles in the workspace.
|
|
140
148
|
*/
|
|
141
149
|
updateWorkspaceAuthentication(callback?: (err: AWSError, data: Grafana.Types.UpdateWorkspaceAuthenticationResponse) => void): Request<Grafana.Types.UpdateWorkspaceAuthenticationResponse, AWSError>;
|
|
150
|
+
/**
|
|
151
|
+
* Updates the configuration string for the given workspace
|
|
152
|
+
*/
|
|
153
|
+
updateWorkspaceConfiguration(params: Grafana.Types.UpdateWorkspaceConfigurationRequest, callback?: (err: AWSError, data: Grafana.Types.UpdateWorkspaceConfigurationResponse) => void): Request<Grafana.Types.UpdateWorkspaceConfigurationResponse, AWSError>;
|
|
154
|
+
/**
|
|
155
|
+
* Updates the configuration string for the given workspace
|
|
156
|
+
*/
|
|
157
|
+
updateWorkspaceConfiguration(callback?: (err: AWSError, data: Grafana.Types.UpdateWorkspaceConfigurationResponse) => void): Request<Grafana.Types.UpdateWorkspaceConfigurationResponse, AWSError>;
|
|
142
158
|
}
|
|
143
159
|
declare namespace Grafana {
|
|
144
160
|
export type AccountAccessType = "CURRENT_ACCOUNT"|"ORGANIZATION"|string;
|
|
@@ -191,11 +207,11 @@ declare namespace Grafana {
|
|
|
191
207
|
}
|
|
192
208
|
export interface AuthenticationDescription {
|
|
193
209
|
/**
|
|
194
|
-
* A structure containing information about how this workspace works with
|
|
210
|
+
* A structure containing information about how this workspace works with IAM Identity Center.
|
|
195
211
|
*/
|
|
196
212
|
awsSso?: AwsSsoAuthentication;
|
|
197
213
|
/**
|
|
198
|
-
* Specifies whether this workspace uses
|
|
214
|
+
* Specifies whether this workspace uses IAM Identity Center, SAML, or both methods to authenticate users to use the Grafana console in the Amazon Managed Grafana workspace.
|
|
199
215
|
*/
|
|
200
216
|
providers: AuthenticationProviders;
|
|
201
217
|
/**
|
|
@@ -207,7 +223,7 @@ declare namespace Grafana {
|
|
|
207
223
|
export type AuthenticationProviders = AuthenticationProviderTypes[];
|
|
208
224
|
export interface AuthenticationSummary {
|
|
209
225
|
/**
|
|
210
|
-
* Specifies whether the workspace uses SAML,
|
|
226
|
+
* Specifies whether the workspace uses SAML, IAM Identity Center, or both methods for user authentication.
|
|
211
227
|
*/
|
|
212
228
|
providers: AuthenticationProviders;
|
|
213
229
|
/**
|
|
@@ -217,7 +233,7 @@ declare namespace Grafana {
|
|
|
217
233
|
}
|
|
218
234
|
export interface AwsSsoAuthentication {
|
|
219
235
|
/**
|
|
220
|
-
* The ID of the
|
|
236
|
+
* The ID of the IAM Identity Center-managed application that is created by Amazon Managed Grafana.
|
|
221
237
|
*/
|
|
222
238
|
ssoClientId?: SSOClientId;
|
|
223
239
|
}
|
|
@@ -225,11 +241,11 @@ declare namespace Grafana {
|
|
|
225
241
|
export type ClientToken = string;
|
|
226
242
|
export interface CreateWorkspaceApiKeyRequest {
|
|
227
243
|
/**
|
|
228
|
-
* Specifies the name of the key
|
|
244
|
+
* Specifies the name of the key. Keynames must be unique to the workspace.
|
|
229
245
|
*/
|
|
230
246
|
keyName: ApiKeyName;
|
|
231
247
|
/**
|
|
232
|
-
* Specifies the permission level of the key.
|
|
248
|
+
* Specifies the permission level of the key. Valid values: VIEWER|EDITOR|ADMIN
|
|
233
249
|
*/
|
|
234
250
|
keyRole: String;
|
|
235
251
|
/**
|
|
@@ -237,14 +253,14 @@ declare namespace Grafana {
|
|
|
237
253
|
*/
|
|
238
254
|
secondsToLive: CreateWorkspaceApiKeyRequestSecondsToLiveInteger;
|
|
239
255
|
/**
|
|
240
|
-
* The ID of the workspace
|
|
256
|
+
* The ID of the workspace to create an API key.
|
|
241
257
|
*/
|
|
242
258
|
workspaceId: WorkspaceId;
|
|
243
259
|
}
|
|
244
260
|
export type CreateWorkspaceApiKeyRequestSecondsToLiveInteger = number;
|
|
245
261
|
export interface CreateWorkspaceApiKeyResponse {
|
|
246
262
|
/**
|
|
247
|
-
* The key token
|
|
263
|
+
* The key token. Use this value as a bearer token to authenticate HTTP requests to the workspace.
|
|
248
264
|
*/
|
|
249
265
|
key: ApiKeyToken;
|
|
250
266
|
/**
|
|
@@ -262,19 +278,23 @@ declare namespace Grafana {
|
|
|
262
278
|
*/
|
|
263
279
|
accountAccessType: AccountAccessType;
|
|
264
280
|
/**
|
|
265
|
-
* Specifies whether this workspace uses SAML 2.0,
|
|
281
|
+
* Specifies whether this workspace uses SAML 2.0, IAM Identity Center (successor to Single Sign-On), or both to authenticate users for using the Grafana console within a workspace. For more information, see User authentication in Amazon Managed Grafana.
|
|
266
282
|
*/
|
|
267
283
|
authenticationProviders: AuthenticationProviders;
|
|
268
284
|
/**
|
|
269
285
|
* A unique, case-sensitive, user-provided identifier to ensure the idempotency of the request.
|
|
270
286
|
*/
|
|
271
287
|
clientToken?: ClientToken;
|
|
288
|
+
/**
|
|
289
|
+
* The configuration string for the workspace that you create. For more information about the format and configuration options available, see Working in your Grafana workspace.
|
|
290
|
+
*/
|
|
291
|
+
configuration?: OverridableConfigurationJson;
|
|
272
292
|
/**
|
|
273
293
|
* The name of an IAM role that already exists to use with Organizations to access Amazon Web Services data sources and notification channels in other accounts in an organization.
|
|
274
294
|
*/
|
|
275
295
|
organizationRoleName?: OrganizationRoleName;
|
|
276
296
|
/**
|
|
277
|
-
* If you specify SERVICE_MANAGED on AWS Grafana console, Amazon Managed Grafana automatically creates the IAM roles and provisions the permissions that the workspace needs to use Amazon Web Services data sources and notification channels. In CLI mode, the permissionType SERVICE_MANAGED will not create the IAM role for you. If you specify CUSTOMER_MANAGED, you will manage those roles and permissions yourself. If you are creating this workspace in a member account of an organization that is not a delegated administrator account, and you want the workspace to access data sources in other Amazon Web Services accounts in the organization, you must choose CUSTOMER_MANAGED. For more information, see Amazon Managed Grafana permissions and policies for Amazon Web Services data sources and notification channels.
|
|
297
|
+
* If you specify SERVICE_MANAGED on AWS Grafana console, Amazon Managed Grafana automatically creates the IAM roles and provisions the permissions that the workspace needs to use Amazon Web Services data sources and notification channels. In the CLI mode, the permissionType SERVICE_MANAGED will not create the IAM role for you. The ability for the Amazon Managed Grafana to create the IAM role on behalf of the user is supported only in the Amazon Managed Grafana AWS console. Use only the CUSTOMER_MANAGED permission type when creating a workspace in the CLI. If you specify CUSTOMER_MANAGED, you will manage those roles and permissions yourself. If you are creating this workspace in a member account of an organization that is not a delegated administrator account, and you want the workspace to access data sources in other Amazon Web Services accounts in the organization, you must choose CUSTOMER_MANAGED. For more information, see Amazon Managed Grafana permissions and policies for Amazon Web Services data sources and notification channels.
|
|
278
298
|
*/
|
|
279
299
|
permissionType: PermissionType;
|
|
280
300
|
/**
|
|
@@ -285,6 +305,10 @@ declare namespace Grafana {
|
|
|
285
305
|
* The list of tags associated with the workspace.
|
|
286
306
|
*/
|
|
287
307
|
tags?: TagMap;
|
|
308
|
+
/**
|
|
309
|
+
* The configuration settings for an Amazon VPC that contains data sources for your Grafana workspace to connect to.
|
|
310
|
+
*/
|
|
311
|
+
vpcConfiguration?: VpcConfiguration;
|
|
288
312
|
/**
|
|
289
313
|
* Specify the Amazon Web Services data sources that you want to be queried in this workspace. Specifying these data sources here enables Amazon Managed Grafana to create IAM roles and permissions that allow Amazon Managed Grafana to read data from these sources. You must still add them as data sources in the Grafana console in the workspace. If you don't specify a data source here, you can still add it as a data source in the workspace console later. However, you will then have to manually configure permissions for it.
|
|
290
314
|
*/
|
|
@@ -316,7 +340,7 @@ declare namespace Grafana {
|
|
|
316
340
|
*/
|
|
317
341
|
workspace: WorkspaceDescription;
|
|
318
342
|
}
|
|
319
|
-
export type DataSourceType = "AMAZON_OPENSEARCH_SERVICE"|"CLOUDWATCH"|"PROMETHEUS"|"XRAY"|"TIMESTREAM"|"SITEWISE"|"ATHENA"|"REDSHIFT"|string;
|
|
343
|
+
export type DataSourceType = "AMAZON_OPENSEARCH_SERVICE"|"CLOUDWATCH"|"PROMETHEUS"|"XRAY"|"TIMESTREAM"|"SITEWISE"|"ATHENA"|"REDSHIFT"|"TWINMAKER"|string;
|
|
320
344
|
export type DataSourceTypesList = DataSourceType[];
|
|
321
345
|
export interface DeleteWorkspaceApiKeyRequest {
|
|
322
346
|
/**
|
|
@@ -330,7 +354,7 @@ declare namespace Grafana {
|
|
|
330
354
|
}
|
|
331
355
|
export interface DeleteWorkspaceApiKeyResponse {
|
|
332
356
|
/**
|
|
333
|
-
* The name of the
|
|
357
|
+
* The name of the key that was deleted.
|
|
334
358
|
*/
|
|
335
359
|
keyName: ApiKeyName;
|
|
336
360
|
/**
|
|
@@ -362,6 +386,18 @@ declare namespace Grafana {
|
|
|
362
386
|
*/
|
|
363
387
|
authentication: AuthenticationDescription;
|
|
364
388
|
}
|
|
389
|
+
export interface DescribeWorkspaceConfigurationRequest {
|
|
390
|
+
/**
|
|
391
|
+
* The ID of the workspace to get configuration information for.
|
|
392
|
+
*/
|
|
393
|
+
workspaceId: WorkspaceId;
|
|
394
|
+
}
|
|
395
|
+
export interface DescribeWorkspaceConfigurationResponse {
|
|
396
|
+
/**
|
|
397
|
+
* The configuration string for the workspace that you requested. For more information about the format and configuration options available, see Working in your Grafana workspace.
|
|
398
|
+
*/
|
|
399
|
+
configuration: OverridableConfigurationJson;
|
|
400
|
+
}
|
|
365
401
|
export interface DescribeWorkspaceRequest {
|
|
366
402
|
/**
|
|
367
403
|
* The ID of the workspace to display information about.
|
|
@@ -396,11 +432,11 @@ declare namespace Grafana {
|
|
|
396
432
|
export type IamRoleArn = string;
|
|
397
433
|
export interface IdpMetadata {
|
|
398
434
|
/**
|
|
399
|
-
* The URL of the location containing the metadata.
|
|
435
|
+
* The URL of the location containing the IdP metadata.
|
|
400
436
|
*/
|
|
401
437
|
url?: IdpMetadataUrl;
|
|
402
438
|
/**
|
|
403
|
-
* The
|
|
439
|
+
* The full IdP metadata, in XML format.
|
|
404
440
|
*/
|
|
405
441
|
xml?: String;
|
|
406
442
|
}
|
|
@@ -424,7 +460,7 @@ declare namespace Grafana {
|
|
|
424
460
|
*/
|
|
425
461
|
userId?: SsoId;
|
|
426
462
|
/**
|
|
427
|
-
* (Optional) If you specify SSO_USER, then only the permissions of
|
|
463
|
+
* (Optional) If you specify SSO_USER, then only the permissions of IAM Identity Center users are returned. If you specify SSO_GROUP, only the permissions of IAM Identity Center groups are returned.
|
|
428
464
|
*/
|
|
429
465
|
userType?: UserType;
|
|
430
466
|
/**
|
|
@@ -482,10 +518,11 @@ declare namespace Grafana {
|
|
|
482
518
|
export type OrganizationRoleName = string;
|
|
483
519
|
export type OrganizationalUnit = string;
|
|
484
520
|
export type OrganizationalUnitList = OrganizationalUnit[];
|
|
521
|
+
export type OverridableConfigurationJson = string;
|
|
485
522
|
export type PaginationToken = string;
|
|
486
523
|
export interface PermissionEntry {
|
|
487
524
|
/**
|
|
488
|
-
* Specifies whether the user or group has the Admin or
|
|
525
|
+
* Specifies whether the user or group has the Admin, Editor, or Viewer role.
|
|
489
526
|
*/
|
|
490
527
|
role: Role;
|
|
491
528
|
/**
|
|
@@ -542,9 +579,13 @@ declare namespace Grafana {
|
|
|
542
579
|
roleValues?: RoleValues;
|
|
543
580
|
}
|
|
544
581
|
export type SamlConfigurationStatus = "CONFIGURED"|"NOT_CONFIGURED"|string;
|
|
582
|
+
export type SecurityGroupId = string;
|
|
583
|
+
export type SecurityGroupIds = SecurityGroupId[];
|
|
545
584
|
export type SsoId = string;
|
|
546
585
|
export type StackSetName = string;
|
|
547
586
|
export type String = string;
|
|
587
|
+
export type SubnetId = string;
|
|
588
|
+
export type SubnetIds = SubnetId[];
|
|
548
589
|
export type TagKey = string;
|
|
549
590
|
export type TagKeys = TagKey[];
|
|
550
591
|
export type TagMap = {[key: string]: TagValue};
|
|
@@ -624,7 +665,7 @@ declare namespace Grafana {
|
|
|
624
665
|
}
|
|
625
666
|
export interface UpdateWorkspaceAuthenticationRequest {
|
|
626
667
|
/**
|
|
627
|
-
* Specifies whether this workspace uses SAML 2.0,
|
|
668
|
+
* Specifies whether this workspace uses SAML 2.0, IAM Identity Center (successor to Single Sign-On), or both to authenticate users for using the Grafana console within a workspace. For more information, see User authentication in Amazon Managed Grafana.
|
|
628
669
|
*/
|
|
629
670
|
authenticationProviders: AuthenticationProviders;
|
|
630
671
|
/**
|
|
@@ -642,6 +683,18 @@ declare namespace Grafana {
|
|
|
642
683
|
*/
|
|
643
684
|
authentication: AuthenticationDescription;
|
|
644
685
|
}
|
|
686
|
+
export interface UpdateWorkspaceConfigurationRequest {
|
|
687
|
+
/**
|
|
688
|
+
* The new configuration string for the workspace. For more information about the format and configuration options available, see Working in your Grafana workspace.
|
|
689
|
+
*/
|
|
690
|
+
configuration: OverridableConfigurationJson;
|
|
691
|
+
/**
|
|
692
|
+
* The ID of the workspace to update.
|
|
693
|
+
*/
|
|
694
|
+
workspaceId: WorkspaceId;
|
|
695
|
+
}
|
|
696
|
+
export interface UpdateWorkspaceConfigurationResponse {
|
|
697
|
+
}
|
|
645
698
|
export interface UpdateWorkspaceRequest {
|
|
646
699
|
/**
|
|
647
700
|
* Specifies whether the workspace can access Amazon Web Services resources in this Amazon Web Services account only, or whether it can also access Amazon Web Services resources in other accounts in the same organization. If you specify ORGANIZATION, you must specify which organizational units the workspace can access in the workspaceOrganizationalUnits parameter.
|
|
@@ -655,10 +708,18 @@ declare namespace Grafana {
|
|
|
655
708
|
* If you specify Service Managed, Amazon Managed Grafana automatically creates the IAM roles and provisions the permissions that the workspace needs to use Amazon Web Services data sources and notification channels. If you specify CUSTOMER_MANAGED, you will manage those roles and permissions yourself. If you are creating this workspace in a member account of an organization and that account is not a delegated administrator account, and you want the workspace to access data sources in other Amazon Web Services accounts in the organization, you must choose CUSTOMER_MANAGED. For more information, see Amazon Managed Grafana permissions and policies for Amazon Web Services data sources and notification channels
|
|
656
709
|
*/
|
|
657
710
|
permissionType?: PermissionType;
|
|
711
|
+
/**
|
|
712
|
+
* Whether to remove the VPC configuration from the workspace. Setting this to true and providing a vpcConfiguration to set will return an error.
|
|
713
|
+
*/
|
|
714
|
+
removeVpcConfiguration?: Boolean;
|
|
658
715
|
/**
|
|
659
716
|
* The name of the CloudFormation stack set to use to generate IAM roles to be used for this workspace.
|
|
660
717
|
*/
|
|
661
718
|
stackSetName?: StackSetName;
|
|
719
|
+
/**
|
|
720
|
+
* The configuration settings for an Amazon VPC that contains data sources for your Grafana workspace to connect to.
|
|
721
|
+
*/
|
|
722
|
+
vpcConfiguration?: VpcConfiguration;
|
|
662
723
|
/**
|
|
663
724
|
* Specify the Amazon Web Services data sources that you want to be queried in this workspace. Specifying these data sources here enables Amazon Managed Grafana to create IAM roles and permissions that allow Amazon Managed Grafana to read data from these sources. You must still add them as data sources in the Grafana console in the workspace. If you don't specify a data source here, you can still add it as a data source later in the workspace console. However, you will then have to manually configure permissions for it.
|
|
664
725
|
*/
|
|
@@ -706,13 +767,23 @@ declare namespace Grafana {
|
|
|
706
767
|
}
|
|
707
768
|
export type UserList = User[];
|
|
708
769
|
export type UserType = "SSO_USER"|"SSO_GROUP"|string;
|
|
770
|
+
export interface VpcConfiguration {
|
|
771
|
+
/**
|
|
772
|
+
* The list of Amazon EC2 security group IDs attached to the Amazon VPC for your Grafana workspace to connect.
|
|
773
|
+
*/
|
|
774
|
+
securityGroupIds: SecurityGroupIds;
|
|
775
|
+
/**
|
|
776
|
+
* The list of Amazon EC2 subnet IDs created in the Amazon VPC for your Grafana workspace to connect.
|
|
777
|
+
*/
|
|
778
|
+
subnetIds: SubnetIds;
|
|
779
|
+
}
|
|
709
780
|
export interface WorkspaceDescription {
|
|
710
781
|
/**
|
|
711
782
|
* Specifies whether the workspace can access Amazon Web Services resources in this Amazon Web Services account only, or whether it can also access Amazon Web Services resources in other accounts in the same organization. If this is ORGANIZATION, the workspaceOrganizationalUnits parameter specifies which organizational units the workspace can access.
|
|
712
783
|
*/
|
|
713
784
|
accountAccessType?: AccountAccessType;
|
|
714
785
|
/**
|
|
715
|
-
* A structure that describes whether the workspace uses SAML,
|
|
786
|
+
* A structure that describes whether the workspace uses SAML, IAM Identity Center, or both methods for user authentication.
|
|
716
787
|
*/
|
|
717
788
|
authentication: AuthenticationSummary;
|
|
718
789
|
/**
|
|
@@ -791,6 +862,10 @@ declare namespace Grafana {
|
|
|
791
862
|
* The list of tags associated with the workspace.
|
|
792
863
|
*/
|
|
793
864
|
tags?: TagMap;
|
|
865
|
+
/**
|
|
866
|
+
* The configuration for connecting to data sources in a private VPC (Amazon Virtual Private Cloud).
|
|
867
|
+
*/
|
|
868
|
+
vpcConfiguration?: VpcConfiguration;
|
|
794
869
|
/**
|
|
795
870
|
* The IAM role that grants permissions to the Amazon Web Services resources that the workspace will view data from. This role must already exist.
|
|
796
871
|
*/
|
|
@@ -51,6 +51,14 @@ declare class Rbin extends Service {
|
|
|
51
51
|
* Lists the tags assigned to a retention rule.
|
|
52
52
|
*/
|
|
53
53
|
listTagsForResource(callback?: (err: AWSError, data: Rbin.Types.ListTagsForResourceResponse) => void): Request<Rbin.Types.ListTagsForResourceResponse, AWSError>;
|
|
54
|
+
/**
|
|
55
|
+
* Locks a retention rule. A locked retention rule can't be modified or deleted.
|
|
56
|
+
*/
|
|
57
|
+
lockRule(params: Rbin.Types.LockRuleRequest, callback?: (err: AWSError, data: Rbin.Types.LockRuleResponse) => void): Request<Rbin.Types.LockRuleResponse, AWSError>;
|
|
58
|
+
/**
|
|
59
|
+
* Locks a retention rule. A locked retention rule can't be modified or deleted.
|
|
60
|
+
*/
|
|
61
|
+
lockRule(callback?: (err: AWSError, data: Rbin.Types.LockRuleResponse) => void): Request<Rbin.Types.LockRuleResponse, AWSError>;
|
|
54
62
|
/**
|
|
55
63
|
* Assigns tags to the specified retention rule.
|
|
56
64
|
*/
|
|
@@ -59,6 +67,14 @@ declare class Rbin extends Service {
|
|
|
59
67
|
* Assigns tags to the specified retention rule.
|
|
60
68
|
*/
|
|
61
69
|
tagResource(callback?: (err: AWSError, data: Rbin.Types.TagResourceResponse) => void): Request<Rbin.Types.TagResourceResponse, AWSError>;
|
|
70
|
+
/**
|
|
71
|
+
* Unlocks a retention rule. After a retention rule is unlocked, it can be modified or deleted only after the unlock delay period expires.
|
|
72
|
+
*/
|
|
73
|
+
unlockRule(params: Rbin.Types.UnlockRuleRequest, callback?: (err: AWSError, data: Rbin.Types.UnlockRuleResponse) => void): Request<Rbin.Types.UnlockRuleResponse, AWSError>;
|
|
74
|
+
/**
|
|
75
|
+
* Unlocks a retention rule. After a retention rule is unlocked, it can be modified or deleted only after the unlock delay period expires.
|
|
76
|
+
*/
|
|
77
|
+
unlockRule(callback?: (err: AWSError, data: Rbin.Types.UnlockRuleResponse) => void): Request<Rbin.Types.UnlockRuleResponse, AWSError>;
|
|
62
78
|
/**
|
|
63
79
|
* Unassigns a tag from a retention rule.
|
|
64
80
|
*/
|
|
@@ -68,11 +84,11 @@ declare class Rbin extends Service {
|
|
|
68
84
|
*/
|
|
69
85
|
untagResource(callback?: (err: AWSError, data: Rbin.Types.UntagResourceResponse) => void): Request<Rbin.Types.UntagResourceResponse, AWSError>;
|
|
70
86
|
/**
|
|
71
|
-
* Updates an existing Recycle Bin retention rule. For more information, see Update Recycle Bin retention rules in the Amazon Elastic Compute Cloud User Guide.
|
|
87
|
+
* Updates an existing Recycle Bin retention rule. You can update a retention rule's description, resource tags, and retention period at any time after creation. You can't update a retention rule's resource type after creation. For more information, see Update Recycle Bin retention rules in the Amazon Elastic Compute Cloud User Guide.
|
|
72
88
|
*/
|
|
73
89
|
updateRule(params: Rbin.Types.UpdateRuleRequest, callback?: (err: AWSError, data: Rbin.Types.UpdateRuleResponse) => void): Request<Rbin.Types.UpdateRuleResponse, AWSError>;
|
|
74
90
|
/**
|
|
75
|
-
* Updates an existing Recycle Bin retention rule. For more information, see Update Recycle Bin retention rules in the Amazon Elastic Compute Cloud User Guide.
|
|
91
|
+
* Updates an existing Recycle Bin retention rule. You can update a retention rule's description, resource tags, and retention period at any time after creation. You can't update a retention rule's resource type after creation. For more information, see Update Recycle Bin retention rules in the Amazon Elastic Compute Cloud User Guide.
|
|
76
92
|
*/
|
|
77
93
|
updateRule(callback?: (err: AWSError, data: Rbin.Types.UpdateRuleResponse) => void): Request<Rbin.Types.UpdateRuleResponse, AWSError>;
|
|
78
94
|
}
|
|
@@ -98,6 +114,10 @@ declare namespace Rbin {
|
|
|
98
114
|
* Specifies the resource tags to use to identify resources that are to be retained by a tag-level retention rule. For tag-level retention rules, only deleted resources, of the specified resource type, that have one or more of the specified tag key and value pairs are retained. If a resource is deleted, but it does not have any of the specified tag key and value pairs, it is immediately deleted without being retained by the retention rule. You can add the same tag key and value pair to a maximum or five retention rules. To create a Region-level retention rule, omit this parameter. A Region-level retention rule does not have any resource tags specified. It retains all deleted resources of the specified resource type in the Region in which the rule is created, even if the resources are not tagged.
|
|
99
115
|
*/
|
|
100
116
|
ResourceTags?: ResourceTags;
|
|
117
|
+
/**
|
|
118
|
+
* Information about the retention rule lock configuration.
|
|
119
|
+
*/
|
|
120
|
+
LockConfiguration?: LockConfiguration;
|
|
101
121
|
}
|
|
102
122
|
export interface CreateRuleResponse {
|
|
103
123
|
/**
|
|
@@ -125,6 +145,14 @@ declare namespace Rbin {
|
|
|
125
145
|
* The state of the retention rule. Only retention rules that are in the available state retain resources.
|
|
126
146
|
*/
|
|
127
147
|
Status?: RuleStatus;
|
|
148
|
+
/**
|
|
149
|
+
* Information about the retention rule lock configuration.
|
|
150
|
+
*/
|
|
151
|
+
LockConfiguration?: LockConfiguration;
|
|
152
|
+
/**
|
|
153
|
+
* The lock state for the retention rule. locked - The retention rule is locked and can't be modified or deleted. pending_unlock - The retention rule has been unlocked but it is still within the unlock delay period. The retention rule can be modified or deleted only after the unlock delay period has expired. unlocked - The retention rule is unlocked and it can be modified or deleted by any user with the required permissions. null - The retention rule has never been locked. Once a retention rule has been locked, it can transition between the locked and unlocked states only; it can never transition back to null.
|
|
154
|
+
*/
|
|
155
|
+
LockState?: LockState;
|
|
128
156
|
}
|
|
129
157
|
export interface DeleteRuleRequest {
|
|
130
158
|
/**
|
|
@@ -166,6 +194,18 @@ declare namespace Rbin {
|
|
|
166
194
|
* The state of the retention rule. Only retention rules that are in the available state retain resources.
|
|
167
195
|
*/
|
|
168
196
|
Status?: RuleStatus;
|
|
197
|
+
/**
|
|
198
|
+
* Information about the retention rule lock configuration.
|
|
199
|
+
*/
|
|
200
|
+
LockConfiguration?: LockConfiguration;
|
|
201
|
+
/**
|
|
202
|
+
* The lock state for the retention rule. locked - The retention rule is locked and can't be modified or deleted. pending_unlock - The retention rule has been unlocked but it is still within the unlock delay period. The retention rule can be modified or deleted only after the unlock delay period has expired. unlocked - The retention rule is unlocked and it can be modified or deleted by any user with the required permissions. null - The retention rule has never been locked. Once a retention rule has been locked, it can transition between the locked and unlocked states only; it can never transition back to null.
|
|
203
|
+
*/
|
|
204
|
+
LockState?: LockState;
|
|
205
|
+
/**
|
|
206
|
+
* The date and time at which the unlock delay is set to expire. Only returned for retention rules that have been unlocked and that are still within the unlock delay period.
|
|
207
|
+
*/
|
|
208
|
+
LockEndTime?: TimeStamp;
|
|
169
209
|
}
|
|
170
210
|
export interface ListRulesRequest {
|
|
171
211
|
/**
|
|
@@ -184,6 +224,10 @@ declare namespace Rbin {
|
|
|
184
224
|
* Information about the resource tags used to identify resources that are retained by the retention rule.
|
|
185
225
|
*/
|
|
186
226
|
ResourceTags?: ResourceTags;
|
|
227
|
+
/**
|
|
228
|
+
* The lock state of the retention rules to list. Only retention rules with the specified lock state are returned.
|
|
229
|
+
*/
|
|
230
|
+
LockState?: LockState;
|
|
187
231
|
}
|
|
188
232
|
export interface ListRulesResponse {
|
|
189
233
|
/**
|
|
@@ -207,6 +251,54 @@ declare namespace Rbin {
|
|
|
207
251
|
*/
|
|
208
252
|
Tags?: TagList;
|
|
209
253
|
}
|
|
254
|
+
export interface LockConfiguration {
|
|
255
|
+
/**
|
|
256
|
+
* Information about the retention rule unlock delay.
|
|
257
|
+
*/
|
|
258
|
+
UnlockDelay: UnlockDelay;
|
|
259
|
+
}
|
|
260
|
+
export interface LockRuleRequest {
|
|
261
|
+
/**
|
|
262
|
+
* The unique ID of the retention rule.
|
|
263
|
+
*/
|
|
264
|
+
Identifier: RuleIdentifier;
|
|
265
|
+
/**
|
|
266
|
+
* Information about the retention rule lock configuration.
|
|
267
|
+
*/
|
|
268
|
+
LockConfiguration: LockConfiguration;
|
|
269
|
+
}
|
|
270
|
+
export interface LockRuleResponse {
|
|
271
|
+
/**
|
|
272
|
+
* The unique ID of the retention rule.
|
|
273
|
+
*/
|
|
274
|
+
Identifier?: RuleIdentifier;
|
|
275
|
+
/**
|
|
276
|
+
* The retention rule description.
|
|
277
|
+
*/
|
|
278
|
+
Description?: Description;
|
|
279
|
+
/**
|
|
280
|
+
* The resource type retained by the retention rule.
|
|
281
|
+
*/
|
|
282
|
+
ResourceType?: ResourceType;
|
|
283
|
+
RetentionPeriod?: RetentionPeriod;
|
|
284
|
+
/**
|
|
285
|
+
* Information about the resource tags used to identify resources that are retained by the retention rule.
|
|
286
|
+
*/
|
|
287
|
+
ResourceTags?: ResourceTags;
|
|
288
|
+
/**
|
|
289
|
+
* The state of the retention rule. Only retention rules that are in the available state retain resources.
|
|
290
|
+
*/
|
|
291
|
+
Status?: RuleStatus;
|
|
292
|
+
/**
|
|
293
|
+
* Information about the retention rule lock configuration.
|
|
294
|
+
*/
|
|
295
|
+
LockConfiguration?: LockConfiguration;
|
|
296
|
+
/**
|
|
297
|
+
* The lock state for the retention rule. locked - The retention rule is locked and can't be modified or deleted. pending_unlock - The retention rule has been unlocked but it is still within the unlock delay period. The retention rule can be modified or deleted only after the unlock delay period has expired. unlocked - The retention rule is unlocked and it can be modified or deleted by any user with the required permissions. null - The retention rule has never been locked. Once a retention rule has been locked, it can transition between the locked and unlocked states only; it can never transition back to null.
|
|
298
|
+
*/
|
|
299
|
+
LockState?: LockState;
|
|
300
|
+
}
|
|
301
|
+
export type LockState = "locked"|"pending_unlock"|"unlocked"|string;
|
|
210
302
|
export type MaxResults = number;
|
|
211
303
|
export type NextToken = string;
|
|
212
304
|
export interface ResourceTag {
|
|
@@ -251,6 +343,10 @@ declare namespace Rbin {
|
|
|
251
343
|
* Information about the retention period for which the retention rule is to retain resources.
|
|
252
344
|
*/
|
|
253
345
|
RetentionPeriod?: RetentionPeriod;
|
|
346
|
+
/**
|
|
347
|
+
* The lock state for the retention rule. locked - The retention rule is locked and can't be modified or deleted. pending_unlock - The retention rule has been unlocked but it is still within the unlock delay period. The retention rule can be modified or deleted only after the unlock delay period has expired. unlocked - The retention rule is unlocked and it can be modified or deleted by any user with the required permissions. null - The retention rule has never been locked. Once a retention rule has been locked, it can transition between the locked and unlocked states only; it can never transition back to null.
|
|
348
|
+
*/
|
|
349
|
+
LockState?: LockState;
|
|
254
350
|
}
|
|
255
351
|
export type RuleSummaryList = RuleSummary[];
|
|
256
352
|
export interface Tag {
|
|
@@ -279,6 +375,60 @@ declare namespace Rbin {
|
|
|
279
375
|
export interface TagResourceResponse {
|
|
280
376
|
}
|
|
281
377
|
export type TagValue = string;
|
|
378
|
+
export type TimeStamp = Date;
|
|
379
|
+
export interface UnlockDelay {
|
|
380
|
+
/**
|
|
381
|
+
* The unlock delay period, measured in the unit specified for UnlockDelayUnit.
|
|
382
|
+
*/
|
|
383
|
+
UnlockDelayValue: UnlockDelayValue;
|
|
384
|
+
/**
|
|
385
|
+
* The unit of time in which to measure the unlock delay. Currently, the unlock delay can be measure only in days.
|
|
386
|
+
*/
|
|
387
|
+
UnlockDelayUnit: UnlockDelayUnit;
|
|
388
|
+
}
|
|
389
|
+
export type UnlockDelayUnit = "DAYS"|string;
|
|
390
|
+
export type UnlockDelayValue = number;
|
|
391
|
+
export interface UnlockRuleRequest {
|
|
392
|
+
/**
|
|
393
|
+
* The unique ID of the retention rule.
|
|
394
|
+
*/
|
|
395
|
+
Identifier: RuleIdentifier;
|
|
396
|
+
}
|
|
397
|
+
export interface UnlockRuleResponse {
|
|
398
|
+
/**
|
|
399
|
+
* The unique ID of the retention rule.
|
|
400
|
+
*/
|
|
401
|
+
Identifier?: RuleIdentifier;
|
|
402
|
+
/**
|
|
403
|
+
* The retention rule description.
|
|
404
|
+
*/
|
|
405
|
+
Description?: Description;
|
|
406
|
+
/**
|
|
407
|
+
* The resource type retained by the retention rule.
|
|
408
|
+
*/
|
|
409
|
+
ResourceType?: ResourceType;
|
|
410
|
+
RetentionPeriod?: RetentionPeriod;
|
|
411
|
+
/**
|
|
412
|
+
* Information about the resource tags used to identify resources that are retained by the retention rule.
|
|
413
|
+
*/
|
|
414
|
+
ResourceTags?: ResourceTags;
|
|
415
|
+
/**
|
|
416
|
+
* The state of the retention rule. Only retention rules that are in the available state retain resources.
|
|
417
|
+
*/
|
|
418
|
+
Status?: RuleStatus;
|
|
419
|
+
/**
|
|
420
|
+
* Information about the retention rule lock configuration.
|
|
421
|
+
*/
|
|
422
|
+
LockConfiguration?: LockConfiguration;
|
|
423
|
+
/**
|
|
424
|
+
* The lock state for the retention rule. locked - The retention rule is locked and can't be modified or deleted. pending_unlock - The retention rule has been unlocked but it is still within the unlock delay period. The retention rule can be modified or deleted only after the unlock delay period has expired. unlocked - The retention rule is unlocked and it can be modified or deleted by any user with the required permissions. null - The retention rule has never been locked. Once a retention rule has been locked, it can transition between the locked and unlocked states only; it can never transition back to null.
|
|
425
|
+
*/
|
|
426
|
+
LockState?: LockState;
|
|
427
|
+
/**
|
|
428
|
+
* The date and time at which the unlock delay is set to expire. Only returned for retention rules that have been unlocked and that are still within the unlock delay period.
|
|
429
|
+
*/
|
|
430
|
+
LockEndTime?: TimeStamp;
|
|
431
|
+
}
|
|
282
432
|
export interface UntagResourceRequest {
|
|
283
433
|
/**
|
|
284
434
|
* The Amazon Resource Name (ARN) of the retention rule.
|
|
@@ -305,7 +455,7 @@ declare namespace Rbin {
|
|
|
305
455
|
*/
|
|
306
456
|
Description?: Description;
|
|
307
457
|
/**
|
|
308
|
-
*
|
|
458
|
+
* This parameter is currently not supported. You can't update a retention rule's resource type after creation.
|
|
309
459
|
*/
|
|
310
460
|
ResourceType?: ResourceType;
|
|
311
461
|
/**
|
|
@@ -335,6 +485,14 @@ declare namespace Rbin {
|
|
|
335
485
|
* The state of the retention rule. Only retention rules that are in the available state retain resources.
|
|
336
486
|
*/
|
|
337
487
|
Status?: RuleStatus;
|
|
488
|
+
/**
|
|
489
|
+
* The lock state for the retention rule. locked - The retention rule is locked and can't be modified or deleted. pending_unlock - The retention rule has been unlocked but it is still within the unlock delay period. The retention rule can be modified or deleted only after the unlock delay period has expired. unlocked - The retention rule is unlocked and it can be modified or deleted by any user with the required permissions. null - The retention rule has never been locked. Once a retention rule has been locked, it can transition between the locked and unlocked states only; it can never transition back to null.
|
|
490
|
+
*/
|
|
491
|
+
LockState?: LockState;
|
|
492
|
+
/**
|
|
493
|
+
* The date and time at which the unlock delay is set to expire. Only returned for retention rules that have been unlocked and that are still within the unlock delay period.
|
|
494
|
+
*/
|
|
495
|
+
LockEndTime?: TimeStamp;
|
|
338
496
|
}
|
|
339
497
|
/**
|
|
340
498
|
* A string in YYYY-MM-DD format that represents the latest possible API version that can be used in this service. Specify 'latest' to use the latest possible version.
|