pulumi-aws-native 1.38.0a1761284362__py3-none-any.whl → 1.39.0a1762409198__py3-none-any.whl

pulumi_aws_native/transfer/connector.py

@@ -25,26 +25,33 @@ __all__ = ['ConnectorArgs', 'Connector']
 class ConnectorArgs:
     def __init__(__self__, *,
                  access_role: pulumi.Input[_builtins.str],
-                 url: pulumi.Input[_builtins.str],
                  as2_config: Optional[pulumi.Input['As2ConfigPropertiesArgs']] = None,
+                 egress_config: Optional[pulumi.Input['ConnectorEgressConfigArgs']] = None,
+                 egress_type: Optional[pulumi.Input['ConnectorEgressType']] = None,
                  logging_role: Optional[pulumi.Input[_builtins.str]] = None,
                  security_policy_name: Optional[pulumi.Input[_builtins.str]] = None,
                  sftp_config: Optional[pulumi.Input['SftpConfigPropertiesArgs']] = None,
-                 tags: Optional[pulumi.Input[Sequence[pulumi.Input['_root_inputs.TagArgs']]]] = None):
+                 tags: Optional[pulumi.Input[Sequence[pulumi.Input['_root_inputs.TagArgs']]]] = None,
+                 url: Optional[pulumi.Input[_builtins.str]] = None):
         """
         The set of arguments for constructing a Connector resource.
         :param pulumi.Input[_builtins.str] access_role: Specifies the access role for the connector.
-        :param pulumi.Input[_builtins.str] url: URL for Connector
         :param pulumi.Input['As2ConfigPropertiesArgs'] as2_config: Configuration for an AS2 connector.
+        :param pulumi.Input['ConnectorEgressConfigArgs'] egress_config: Egress configuration for the connector.
+        :param pulumi.Input['ConnectorEgressType'] egress_type: Specifies the egress type for the connector.
         :param pulumi.Input[_builtins.str] logging_role: Specifies the logging role for the connector.
         :param pulumi.Input[_builtins.str] security_policy_name: Security policy for SFTP Connector
         :param pulumi.Input['SftpConfigPropertiesArgs'] sftp_config: Configuration for an SFTP connector.
         :param pulumi.Input[Sequence[pulumi.Input['_root_inputs.TagArgs']]] tags: Key-value pairs that can be used to group and search for connectors. Tags are metadata attached to connectors for any purpose.
+        :param pulumi.Input[_builtins.str] url: URL for Connector
         """
         pulumi.set(__self__, "access_role", access_role)
-        pulumi.set(__self__, "url", url)
         if as2_config is not None:
             pulumi.set(__self__, "as2_config", as2_config)
+        if egress_config is not None:
+            pulumi.set(__self__, "egress_config", egress_config)
+        if egress_type is not None:
+            pulumi.set(__self__, "egress_type", egress_type)
         if logging_role is not None:
             pulumi.set(__self__, "logging_role", logging_role)
         if security_policy_name is not None:
@@ -53,6 +60,8 @@ class ConnectorArgs:
             pulumi.set(__self__, "sftp_config", sftp_config)
         if tags is not None:
             pulumi.set(__self__, "tags", tags)
+        if url is not None:
+            pulumi.set(__self__, "url", url)
 
     @_builtins.property
     @pulumi.getter(name="accessRole")
@@ -66,18 +75,6 @@ class ConnectorArgs:
     def access_role(self, value: pulumi.Input[_builtins.str]):
         pulumi.set(self, "access_role", value)
 
-    @_builtins.property
-    @pulumi.getter
-    def url(self) -> pulumi.Input[_builtins.str]:
-        """
-        URL for Connector
-        """
-        return pulumi.get(self, "url")
-
-    @url.setter
-    def url(self, value: pulumi.Input[_builtins.str]):
-        pulumi.set(self, "url", value)
-
     @_builtins.property
     @pulumi.getter(name="as2Config")
     def as2_config(self) -> Optional[pulumi.Input['As2ConfigPropertiesArgs']]:
@@ -90,6 +87,30 @@ class ConnectorArgs:
     def as2_config(self, value: Optional[pulumi.Input['As2ConfigPropertiesArgs']]):
         pulumi.set(self, "as2_config", value)
 
+    @_builtins.property
+    @pulumi.getter(name="egressConfig")
+    def egress_config(self) -> Optional[pulumi.Input['ConnectorEgressConfigArgs']]:
+        """
+        Egress configuration for the connector.
+        """
+        return pulumi.get(self, "egress_config")
+
+    @egress_config.setter
+    def egress_config(self, value: Optional[pulumi.Input['ConnectorEgressConfigArgs']]):
+        pulumi.set(self, "egress_config", value)
+
+    @_builtins.property
+    @pulumi.getter(name="egressType")
+    def egress_type(self) -> Optional[pulumi.Input['ConnectorEgressType']]:
+        """
+        Specifies the egress type for the connector.
+        """
+        return pulumi.get(self, "egress_type")
+
+    @egress_type.setter
+    def egress_type(self, value: Optional[pulumi.Input['ConnectorEgressType']]):
+        pulumi.set(self, "egress_type", value)
+
     @_builtins.property
     @pulumi.getter(name="loggingRole")
     def logging_role(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -138,6 +159,18 @@ class ConnectorArgs:
     def tags(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['_root_inputs.TagArgs']]]]):
         pulumi.set(self, "tags", value)
 
+    @_builtins.property
+    @pulumi.getter
+    def url(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        URL for Connector
+        """
+        return pulumi.get(self, "url")
+
+    @url.setter
+    def url(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "url", value)
+
 
 @pulumi.type_token("aws-native:transfer:Connector")
 class Connector(pulumi.CustomResource):
@@ -147,6 +180,8 @@ class Connector(pulumi.CustomResource):
                  opts: Optional[pulumi.ResourceOptions] = None,
                  access_role: Optional[pulumi.Input[_builtins.str]] = None,
                  as2_config: Optional[pulumi.Input[Union['As2ConfigPropertiesArgs', 'As2ConfigPropertiesArgsDict']]] = None,
+                 egress_config: Optional[pulumi.Input[Union['ConnectorEgressConfigArgs', 'ConnectorEgressConfigArgsDict']]] = None,
+                 egress_type: Optional[pulumi.Input['ConnectorEgressType']] = None,
                  logging_role: Optional[pulumi.Input[_builtins.str]] = None,
                  security_policy_name: Optional[pulumi.Input[_builtins.str]] = None,
                  sftp_config: Optional[pulumi.Input[Union['SftpConfigPropertiesArgs', 'SftpConfigPropertiesArgsDict']]] = None,
@@ -160,6 +195,8 @@ class Connector(pulumi.CustomResource):
         :param pulumi.ResourceOptions opts: Options for the resource.
         :param pulumi.Input[_builtins.str] access_role: Specifies the access role for the connector.
         :param pulumi.Input[Union['As2ConfigPropertiesArgs', 'As2ConfigPropertiesArgsDict']] as2_config: Configuration for an AS2 connector.
+        :param pulumi.Input[Union['ConnectorEgressConfigArgs', 'ConnectorEgressConfigArgsDict']] egress_config: Egress configuration for the connector.
+        :param pulumi.Input['ConnectorEgressType'] egress_type: Specifies the egress type for the connector.
         :param pulumi.Input[_builtins.str] logging_role: Specifies the logging role for the connector.
         :param pulumi.Input[_builtins.str] security_policy_name: Security policy for SFTP Connector
         :param pulumi.Input[Union['SftpConfigPropertiesArgs', 'SftpConfigPropertiesArgsDict']] sftp_config: Configuration for an SFTP connector.
@@ -192,6 +229,8 @@ class Connector(pulumi.CustomResource):
                  opts: Optional[pulumi.ResourceOptions] = None,
                  access_role: Optional[pulumi.Input[_builtins.str]] = None,
                  as2_config: Optional[pulumi.Input[Union['As2ConfigPropertiesArgs', 'As2ConfigPropertiesArgsDict']]] = None,
+                 egress_config: Optional[pulumi.Input[Union['ConnectorEgressConfigArgs', 'ConnectorEgressConfigArgsDict']]] = None,
+                 egress_type: Optional[pulumi.Input['ConnectorEgressType']] = None,
                  logging_role: Optional[pulumi.Input[_builtins.str]] = None,
                  security_policy_name: Optional[pulumi.Input[_builtins.str]] = None,
                  sftp_config: Optional[pulumi.Input[Union['SftpConfigPropertiesArgs', 'SftpConfigPropertiesArgsDict']]] = None,
@@ -210,16 +249,17 @@ class Connector(pulumi.CustomResource):
                 raise TypeError("Missing required property 'access_role'")
             __props__.__dict__["access_role"] = access_role
             __props__.__dict__["as2_config"] = as2_config
+            __props__.__dict__["egress_config"] = egress_config
+            __props__.__dict__["egress_type"] = egress_type
             __props__.__dict__["logging_role"] = logging_role
             __props__.__dict__["security_policy_name"] = security_policy_name
             __props__.__dict__["sftp_config"] = sftp_config
             __props__.__dict__["tags"] = tags
-            if url is None and not opts.urn:
-                raise TypeError("Missing required property 'url'")
             __props__.__dict__["url"] = url
             __props__.__dict__["arn"] = None
             __props__.__dict__["connector_id"] = None
             __props__.__dict__["service_managed_egress_ip_addresses"] = None
+            __props__.__dict__["status"] = None
         super(Connector, __self__).__init__(
             'aws-native:transfer:Connector',
             resource_name,
@@ -246,10 +286,13 @@ class Connector(pulumi.CustomResource):
         __props__.__dict__["arn"] = None
         __props__.__dict__["as2_config"] = None
         __props__.__dict__["connector_id"] = None
+        __props__.__dict__["egress_config"] = None
+        __props__.__dict__["egress_type"] = None
         __props__.__dict__["logging_role"] = None
         __props__.__dict__["security_policy_name"] = None
         __props__.__dict__["service_managed_egress_ip_addresses"] = None
         __props__.__dict__["sftp_config"] = None
+        __props__.__dict__["status"] = None
         __props__.__dict__["tags"] = None
         __props__.__dict__["url"] = None
         return Connector(resource_name, opts=opts, __props__=__props__)
@@ -286,6 +329,22 @@ class Connector(pulumi.CustomResource):
         """
         return pulumi.get(self, "connector_id")
 
+    @_builtins.property
+    @pulumi.getter(name="egressConfig")
+    def egress_config(self) -> pulumi.Output[Optional['outputs.ConnectorEgressConfig']]:
+        """
+        Egress configuration for the connector.
+        """
+        return pulumi.get(self, "egress_config")
+
+    @_builtins.property
+    @pulumi.getter(name="egressType")
+    def egress_type(self) -> pulumi.Output[Optional['ConnectorEgressType']]:
+        """
+        Specifies the egress type for the connector.
+        """
+        return pulumi.get(self, "egress_type")
+
     @_builtins.property
     @pulumi.getter(name="loggingRole")
     def logging_role(self) -> pulumi.Output[Optional[_builtins.str]]:
@@ -318,6 +377,14 @@ class Connector(pulumi.CustomResource):
         """
         return pulumi.get(self, "sftp_config")
 
+    @_builtins.property
+    @pulumi.getter
+    def status(self) -> pulumi.Output['ConnectorStatus']:
+        """
+        Current status of the connector. PENDING indicates creation/update in progress, ACTIVE means ready for operations, and ERRORED indicates a failure requiring attention.
+        """
+        return pulumi.get(self, "status")
+
     @_builtins.property
     @pulumi.getter
     def tags(self) -> pulumi.Output[Optional[Sequence['_root_outputs.Tag']]]:
@@ -328,7 +395,7 @@ class Connector(pulumi.CustomResource):
 
     @_builtins.property
     @pulumi.getter
-    def url(self) -> pulumi.Output[_builtins.str]:
+    def url(self) -> pulumi.Output[Optional[_builtins.str]]:
         """
         URL for Connector
         """

pulumi_aws_native/transfer/get_connector.py

@@ -26,7 +26,7 @@ __all__ = [
 
 @pulumi.output_type
 class GetConnectorResult:
-    def __init__(__self__, access_role=None, arn=None, as2_config=None, connector_id=None, logging_role=None, security_policy_name=None, service_managed_egress_ip_addresses=None, sftp_config=None, tags=None, url=None):
+    def __init__(__self__, access_role=None, arn=None, as2_config=None, connector_id=None, egress_config=None, egress_type=None, logging_role=None, security_policy_name=None, service_managed_egress_ip_addresses=None, sftp_config=None, status=None, tags=None, url=None):
         if access_role and not isinstance(access_role, str):
             raise TypeError("Expected argument 'access_role' to be a str")
         pulumi.set(__self__, "access_role", access_role)
@@ -39,6 +39,12 @@ class GetConnectorResult:
         if connector_id and not isinstance(connector_id, str):
             raise TypeError("Expected argument 'connector_id' to be a str")
         pulumi.set(__self__, "connector_id", connector_id)
+        if egress_config and not isinstance(egress_config, dict):
+            raise TypeError("Expected argument 'egress_config' to be a dict")
+        pulumi.set(__self__, "egress_config", egress_config)
+        if egress_type and not isinstance(egress_type, str):
+            raise TypeError("Expected argument 'egress_type' to be a str")
+        pulumi.set(__self__, "egress_type", egress_type)
         if logging_role and not isinstance(logging_role, str):
             raise TypeError("Expected argument 'logging_role' to be a str")
         pulumi.set(__self__, "logging_role", logging_role)
@@ -51,6 +57,9 @@ class GetConnectorResult:
         if sftp_config and not isinstance(sftp_config, dict):
             raise TypeError("Expected argument 'sftp_config' to be a dict")
         pulumi.set(__self__, "sftp_config", sftp_config)
+        if status and not isinstance(status, str):
+            raise TypeError("Expected argument 'status' to be a str")
+        pulumi.set(__self__, "status", status)
         if tags and not isinstance(tags, list):
             raise TypeError("Expected argument 'tags' to be a list")
         pulumi.set(__self__, "tags", tags)
@@ -90,6 +99,22 @@ class GetConnectorResult:
         """
         return pulumi.get(self, "connector_id")
 
+    @_builtins.property
+    @pulumi.getter(name="egressConfig")
+    def egress_config(self) -> Optional['outputs.ConnectorEgressConfig']:
+        """
+        Egress configuration for the connector.
+        """
+        return pulumi.get(self, "egress_config")
+
+    @_builtins.property
+    @pulumi.getter(name="egressType")
+    def egress_type(self) -> Optional['ConnectorEgressType']:
+        """
+        Specifies the egress type for the connector.
+        """
+        return pulumi.get(self, "egress_type")
+
     @_builtins.property
     @pulumi.getter(name="loggingRole")
     def logging_role(self) -> Optional[_builtins.str]:
@@ -122,6 +147,14 @@ class GetConnectorResult:
         """
         return pulumi.get(self, "sftp_config")
 
+    @_builtins.property
+    @pulumi.getter
+    def status(self) -> Optional['ConnectorStatus']:
+        """
+        Current status of the connector. PENDING indicates creation/update in progress, ACTIVE means ready for operations, and ERRORED indicates a failure requiring attention.
+        """
+        return pulumi.get(self, "status")
+
     @_builtins.property
     @pulumi.getter
     def tags(self) -> Optional[Sequence['_root_outputs.Tag']]:
@@ -149,10 +182,13 @@ class AwaitableGetConnectorResult(GetConnectorResult):
             arn=self.arn,
             as2_config=self.as2_config,
             connector_id=self.connector_id,
+            egress_config=self.egress_config,
+            egress_type=self.egress_type,
             logging_role=self.logging_role,
             security_policy_name=self.security_policy_name,
             service_managed_egress_ip_addresses=self.service_managed_egress_ip_addresses,
             sftp_config=self.sftp_config,
+            status=self.status,
             tags=self.tags,
             url=self.url)
 
@@ -175,10 +211,13 @@ def get_connector(connector_id: Optional[_builtins.str] = None,
         arn=pulumi.get(__ret__, 'arn'),
         as2_config=pulumi.get(__ret__, 'as2_config'),
         connector_id=pulumi.get(__ret__, 'connector_id'),
+        egress_config=pulumi.get(__ret__, 'egress_config'),
+        egress_type=pulumi.get(__ret__, 'egress_type'),
         logging_role=pulumi.get(__ret__, 'logging_role'),
         security_policy_name=pulumi.get(__ret__, 'security_policy_name'),
         service_managed_egress_ip_addresses=pulumi.get(__ret__, 'service_managed_egress_ip_addresses'),
         sftp_config=pulumi.get(__ret__, 'sftp_config'),
+        status=pulumi.get(__ret__, 'status'),
         tags=pulumi.get(__ret__, 'tags'),
         url=pulumi.get(__ret__, 'url'))
 def get_connector_output(connector_id: Optional[pulumi.Input[_builtins.str]] = None,
@@ -198,9 +237,12 @@ def get_connector_output(connector_id: Optional[pulumi.Input[_builtins.str]] = N
         arn=pulumi.get(__response__, 'arn'),
         as2_config=pulumi.get(__response__, 'as2_config'),
         connector_id=pulumi.get(__response__, 'connector_id'),
+        egress_config=pulumi.get(__response__, 'egress_config'),
+        egress_type=pulumi.get(__response__, 'egress_type'),
         logging_role=pulumi.get(__response__, 'logging_role'),
         security_policy_name=pulumi.get(__response__, 'security_policy_name'),
         service_managed_egress_ip_addresses=pulumi.get(__response__, 'service_managed_egress_ip_addresses'),
         sftp_config=pulumi.get(__response__, 'sftp_config'),
+        status=pulumi.get(__response__, 'status'),
         tags=pulumi.get(__response__, 'tags'),
         url=pulumi.get(__response__, 'url')))

pulumi_aws_native/transfer/outputs.py

@@ -18,6 +18,8 @@ from ._enums import *
 
 __all__ = [
     'As2ConfigProperties',
+    'ConnectorEgressConfig',
+    'ConnectorVpcLatticeEgressConfig',
     'CustomDirectoriesProperties',
     'ServerEndpointDetails',
     'ServerIdentityProviderDetails',
@@ -208,6 +210,90 @@ class As2ConfigProperties(dict):
         return pulumi.get(self, "signing_algorithm")
 
 
+@pulumi.output_type
+class ConnectorEgressConfig(dict):
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "vpcLattice":
+            suggest = "vpc_lattice"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in ConnectorEgressConfig. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        ConnectorEgressConfig.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        ConnectorEgressConfig.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 vpc_lattice: 'outputs.ConnectorVpcLatticeEgressConfig'):
+        """
+        :param 'ConnectorVpcLatticeEgressConfig' vpc_lattice: VPC_LATTICE configuration for routing connector traffic through customer VPCs. Enables private connectivity to SFTP servers without requiring public internet access or complex network configurations.
+        """
+        pulumi.set(__self__, "vpc_lattice", vpc_lattice)
+
+    @_builtins.property
+    @pulumi.getter(name="vpcLattice")
+    def vpc_lattice(self) -> 'outputs.ConnectorVpcLatticeEgressConfig':
+        """
+        VPC_LATTICE configuration for routing connector traffic through customer VPCs. Enables private connectivity to SFTP servers without requiring public internet access or complex network configurations.
+        """
+        return pulumi.get(self, "vpc_lattice")
+
+
+@pulumi.output_type
+class ConnectorVpcLatticeEgressConfig(dict):
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "resourceConfigurationArn":
+            suggest = "resource_configuration_arn"
+        elif key == "portNumber":
+            suggest = "port_number"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in ConnectorVpcLatticeEgressConfig. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        ConnectorVpcLatticeEgressConfig.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        ConnectorVpcLatticeEgressConfig.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 resource_configuration_arn: _builtins.str,
+                 port_number: Optional[_builtins.int] = None):
+        """
+        :param _builtins.str resource_configuration_arn: ARN of the VPC Lattice resource configuration
+        :param _builtins.int port_number: Port to connect to on the target VPC Lattice resource
+        """
+        pulumi.set(__self__, "resource_configuration_arn", resource_configuration_arn)
+        if port_number is not None:
+            pulumi.set(__self__, "port_number", port_number)
+
+    @_builtins.property
+    @pulumi.getter(name="resourceConfigurationArn")
+    def resource_configuration_arn(self) -> _builtins.str:
+        """
+        ARN of the VPC Lattice resource configuration
+        """
+        return pulumi.get(self, "resource_configuration_arn")
+
+    @_builtins.property
+    @pulumi.getter(name="portNumber")
+    def port_number(self) -> Optional[_builtins.int]:
+        """
+        Port to connect to on the target VPC Lattice resource
+        """
+        return pulumi.get(self, "port_number")
+
+
 @pulumi.output_type
 class CustomDirectoriesProperties(dict):
     """
@@ -579,7 +665,9 @@ class ServerProtocolDetails(dict):
                
                Replace `0.0.0.0` in the example above with the actual IP address you want to use.
                
-               > If you change the `PassiveIp` value, you must stop and then restart your Transfer Family server for the change to take effect. For details on using passive mode (PASV) in a NAT environment, see [Configuring your FTPS server behind a firewall or NAT with AWS Transfer Family](https://docs.aws.amazon.com/storage/configuring-your-ftps-server-behind-a-firewall-or-nat-with-aws-transfer-family/) . 
+               > If you change the `PassiveIp` value, you must stop and then restart your Transfer Family server for the change to take effect. For details on using passive mode (PASV) in a NAT environment, see [Configuring your FTPS server behind a firewall or NAT with AWS Transfer Family](https://docs.aws.amazon.com/storage/configuring-your-ftps-server-behind-a-firewall-or-nat-with-aws-transfer-family/) .
+               > 
+               > Additionally, avoid placing Network Load Balancers (NLBs) or NAT gateways in front of AWS Transfer Family servers. This configuration increases costs and can cause performance issues. When NLBs or NATs are in the communication path, Transfer Family cannot accurately recognize client IP addresses, which impacts connection sharding and limits FTPS servers to only 300 simultaneous connections instead of 10,000. If you must use an NLB, use port 21 for health checks and enable TLS session resumption by setting `TlsSessionResumptionMode = ENFORCED` . For optimal performance, migrate to VPC endpoints with Elastic IP addresses instead of using NLBs. For more details, see [Avoid placing NLBs and NATs in front of AWS Transfer Family](https://docs.aws.amazon.com/transfer/latest/userguide/infrastructure-security.html#nlb-considerations) . 
                
                *Special values*
                
@@ -626,7 +714,9 @@ class ServerProtocolDetails(dict):
 
         Replace `0.0.0.0` in the example above with the actual IP address you want to use.
 
-        > If you change the `PassiveIp` value, you must stop and then restart your Transfer Family server for the change to take effect. For details on using passive mode (PASV) in a NAT environment, see [Configuring your FTPS server behind a firewall or NAT with AWS Transfer Family](https://docs.aws.amazon.com/storage/configuring-your-ftps-server-behind-a-firewall-or-nat-with-aws-transfer-family/) . 
+        > If you change the `PassiveIp` value, you must stop and then restart your Transfer Family server for the change to take effect. For details on using passive mode (PASV) in a NAT environment, see [Configuring your FTPS server behind a firewall or NAT with AWS Transfer Family](https://docs.aws.amazon.com/storage/configuring-your-ftps-server-behind-a-firewall-or-nat-with-aws-transfer-family/) .
+        > 
+        > Additionally, avoid placing Network Load Balancers (NLBs) or NAT gateways in front of AWS Transfer Family servers. This configuration increases costs and can cause performance issues. When NLBs or NATs are in the communication path, Transfer Family cannot accurately recognize client IP addresses, which impacts connection sharding and limits FTPS servers to only 300 simultaneous connections instead of 10,000. If you must use an NLB, use port 21 for health checks and enable TLS session resumption by setting `TlsSessionResumptionMode = ENFORCED` . For optimal performance, migrate to VPC endpoints with Elastic IP addresses instead of using NLBs. For more details, see [Avoid placing NLBs and NATs in front of AWS Transfer Family](https://docs.aws.amazon.com/transfer/latest/userguide/infrastructure-security.html#nlb-considerations) . 
 
         *Special values*
 

pulumi_aws_native/wafv2/_inputs.py

@@ -156,6 +156,10 @@ __all__ = [
     'WebAclAllowActionArgsDict',
     'WebAclAndStatementArgs',
     'WebAclAndStatementArgsDict',
+    'WebAclApplicationAttributeArgs',
+    'WebAclApplicationAttributeArgsDict',
+    'WebAclApplicationConfigArgs',
+    'WebAclApplicationConfigArgsDict',
     'WebAclAsnMatchStatementArgs',
     'WebAclAsnMatchStatementArgsDict',
     'WebAclAssociationConfigArgs',
@@ -5747,6 +5751,74 @@ class WebAclAndStatementArgs:
         pulumi.set(self, "statements", value)
 
 
+if not MYPY:
+    class WebAclApplicationAttributeArgsDict(TypedDict):
+        """
+        Application details defined during the &webacl; creation process. Application attributes help WAF; give recommendations for protection packs.
+        """
+        name: pulumi.Input[_builtins.str]
+        values: pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]
+elif False:
+    WebAclApplicationAttributeArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class WebAclApplicationAttributeArgs:
+    def __init__(__self__, *,
+                 name: pulumi.Input[_builtins.str],
+                 values: pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]):
+        """
+        Application details defined during the &webacl; creation process. Application attributes help WAF; give recommendations for protection packs.
+        """
+        pulumi.set(__self__, "name", name)
+        pulumi.set(__self__, "values", values)
+
+    @_builtins.property
+    @pulumi.getter
+    def name(self) -> pulumi.Input[_builtins.str]:
+        return pulumi.get(self, "name")
+
+    @name.setter
+    def name(self, value: pulumi.Input[_builtins.str]):
+        pulumi.set(self, "name", value)
+
+    @_builtins.property
+    @pulumi.getter
+    def values(self) -> pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]:
+        return pulumi.get(self, "values")
+
+    @values.setter
+    def values(self, value: pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]):
+        pulumi.set(self, "values", value)
+
+
+if not MYPY:
+    class WebAclApplicationConfigArgsDict(TypedDict):
+        """
+        Configures the ability for the WAF; console to store and retrieve application attributes during the webacl; creation process. Application attributes help WAF; give recommendations for protection packs.
+        """
+        attributes: pulumi.Input[Sequence[pulumi.Input['WebAclApplicationAttributeArgsDict']]]
+elif False:
+    WebAclApplicationConfigArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class WebAclApplicationConfigArgs:
+    def __init__(__self__, *,
+                 attributes: pulumi.Input[Sequence[pulumi.Input['WebAclApplicationAttributeArgs']]]):
+        """
+        Configures the ability for the WAF; console to store and retrieve application attributes during the webacl; creation process. Application attributes help WAF; give recommendations for protection packs.
+        """
+        pulumi.set(__self__, "attributes", attributes)
+
+    @_builtins.property
+    @pulumi.getter
+    def attributes(self) -> pulumi.Input[Sequence[pulumi.Input['WebAclApplicationAttributeArgs']]]:
+        return pulumi.get(self, "attributes")
+
+    @attributes.setter
+    def attributes(self, value: pulumi.Input[Sequence[pulumi.Input['WebAclApplicationAttributeArgs']]]):
+        pulumi.set(self, "attributes", value)
+
+
 if not MYPY:
     class WebAclAsnMatchStatementArgsDict(TypedDict):
         asn_list: NotRequired[pulumi.Input[Sequence[pulumi.Input[_builtins.int]]]]

pulumi_aws_native/wafv2/get_web_acl.py

@@ -26,7 +26,10 @@ __all__ = [
 
 @pulumi.output_type
 class GetWebAclResult:
-    def __init__(__self__, arn=None, association_config=None, capacity=None, captcha_config=None, challenge_config=None, custom_response_bodies=None, data_protection_config=None, default_action=None, description=None, id=None, label_namespace=None, on_source_d_do_s_protection_config=None, rules=None, tags=None, token_domains=None, visibility_config=None):
+    def __init__(__self__, application_config=None, arn=None, association_config=None, capacity=None, captcha_config=None, challenge_config=None, custom_response_bodies=None, data_protection_config=None, default_action=None, description=None, id=None, label_namespace=None, on_source_d_do_s_protection_config=None, rules=None, tags=None, token_domains=None, visibility_config=None):
+        if application_config and not isinstance(application_config, dict):
+            raise TypeError("Expected argument 'application_config' to be a dict")
+        pulumi.set(__self__, "application_config", application_config)
         if arn and not isinstance(arn, str):
             raise TypeError("Expected argument 'arn' to be a str")
         pulumi.set(__self__, "arn", arn)
@@ -76,6 +79,14 @@ class GetWebAclResult:
             raise TypeError("Expected argument 'visibility_config' to be a dict")
         pulumi.set(__self__, "visibility_config", visibility_config)
 
+    @_builtins.property
+    @pulumi.getter(name="applicationConfig")
+    def application_config(self) -> Optional['outputs.WebAclApplicationConfig']:
+        """
+        Collection of application attributes.
+        """
+        return pulumi.get(self, "application_config")
+
     @_builtins.property
     @pulumi.getter
     def arn(self) -> Optional[_builtins.str]:
@@ -229,6 +240,7 @@ class AwaitableGetWebAclResult(GetWebAclResult):
         if False:
             yield self
         return GetWebAclResult(
+            application_config=self.application_config,
             arn=self.arn,
             association_config=self.association_config,
             capacity=self.capacity,
@@ -271,6 +283,7 @@ def get_web_acl(id: Optional[_builtins.str] = None,
     __ret__ = pulumi.runtime.invoke('aws-native:wafv2:getWebAcl', __args__, opts=opts, typ=GetWebAclResult).value
 
     return AwaitableGetWebAclResult(
+        application_config=pulumi.get(__ret__, 'application_config'),
         arn=pulumi.get(__ret__, 'arn'),
         association_config=pulumi.get(__ret__, 'association_config'),
         capacity=pulumi.get(__ret__, 'capacity'),
@@ -310,6 +323,7 @@ def get_web_acl_output(id: Optional[pulumi.Input[_builtins.str]] = None,
     opts = pulumi.InvokeOutputOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
     __ret__ = pulumi.runtime.invoke_output('aws-native:wafv2:getWebAcl', __args__, opts=opts, typ=GetWebAclResult)
     return __ret__.apply(lambda __response__: GetWebAclResult(
+        application_config=pulumi.get(__response__, 'application_config'),
         arn=pulumi.get(__response__, 'arn'),
         association_config=pulumi.get(__response__, 'association_config'),
         capacity=pulumi.get(__response__, 'capacity'),

pulumi_aws_native/wafv2/outputs.py

@@ -87,6 +87,8 @@ __all__ = [
     'RuleGroupXssMatchStatement',
     'WebAclAllowAction',
     'WebAclAndStatement',
+    'WebAclApplicationAttribute',
+    'WebAclApplicationConfig',
     'WebAclAsnMatchStatement',
     'WebAclAssociationConfig',
     'WebAclAwsManagedRulesAcfpRuleSet',
@@ -4518,6 +4520,49 @@ class WebAclAndStatement(dict):
         return pulumi.get(self, "statements")
 
 
+@pulumi.output_type
+class WebAclApplicationAttribute(dict):
+    """
+    Application details defined during the &webacl; creation process. Application attributes help WAF; give recommendations for protection packs.
+    """
+    def __init__(__self__, *,
+                 name: _builtins.str,
+                 values: Sequence[_builtins.str]):
+        """
+        Application details defined during the &webacl; creation process. Application attributes help WAF; give recommendations for protection packs.
+        """
+        pulumi.set(__self__, "name", name)
+        pulumi.set(__self__, "values", values)
+
+    @_builtins.property
+    @pulumi.getter
+    def name(self) -> _builtins.str:
+        return pulumi.get(self, "name")
+
+    @_builtins.property
+    @pulumi.getter
+    def values(self) -> Sequence[_builtins.str]:
+        return pulumi.get(self, "values")
+
+
+@pulumi.output_type
+class WebAclApplicationConfig(dict):
+    """
+    Configures the ability for the WAF; console to store and retrieve application attributes during the webacl; creation process. Application attributes help WAF; give recommendations for protection packs.
+    """
+    def __init__(__self__, *,
+                 attributes: Sequence['outputs.WebAclApplicationAttribute']):
+        """
+        Configures the ability for the WAF; console to store and retrieve application attributes during the webacl; creation process. Application attributes help WAF; give recommendations for protection packs.
+        """
+        pulumi.set(__self__, "attributes", attributes)
+
+    @_builtins.property
+    @pulumi.getter
+    def attributes(self) -> Sequence['outputs.WebAclApplicationAttribute']:
+        return pulumi.get(self, "attributes")
+
+
 @pulumi.output_type
 class WebAclAsnMatchStatement(dict):
     @staticmethod