pulumi-aws 7.11.0__py3-none-any.whl → 7.11.0a1761834890__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_aws/__init__.py +0 -8
- pulumi_aws/alb/_inputs.py +27 -353
- pulumi_aws/alb/listener_rule.py +3 -114
- pulumi_aws/alb/outputs.py +17 -266
- pulumi_aws/amplify/app.py +2 -2
- pulumi_aws/apigateway/integration.py +2 -2
- pulumi_aws/apigateway/integration_response.py +2 -2
- pulumi_aws/appstream/get_image.py +10 -10
- pulumi_aws/appstream/outputs.py +4 -4
- pulumi_aws/appsync/function.py +10 -10
- pulumi_aws/appsync/graph_ql_api.py +2 -2
- pulumi_aws/appsync/resolver.py +22 -22
- pulumi_aws/autoscaling/tag.py +0 -48
- pulumi_aws/autoscalingplans/scaling_plan.py +0 -184
- pulumi_aws/bcmdata/export.py +0 -13
- pulumi_aws/bedrock/agentcore_agent_runtime_endpoint.py +0 -8
- pulumi_aws/bedrock/agentcore_gateway.py +14 -14
- pulumi_aws/bedrockmodel/invocation_logging_configuration.py +28 -28
- pulumi_aws/cfg/organization_custom_policy_rule.py +6 -6
- pulumi_aws/cfg/rule.py +20 -20
- pulumi_aws/cloudwatch/event_target.py +6 -6
- pulumi_aws/cloudwatch/metric_alarm.py +2 -2
- pulumi_aws/codebuild/webhook.py +0 -38
- pulumi_aws/codepipeline/webhook.py +0 -148
- pulumi_aws/cognito/identity_pool_provider_principal_tag.py +0 -62
- pulumi_aws/datazone/form_type.py +18 -18
- pulumi_aws/dms/replication_config.py +2 -2
- pulumi_aws/dynamodb/get_table_item.py +2 -2
- pulumi_aws/dynamodb/table_item.py +10 -10
- pulumi_aws/ec2/get_subnets.py +0 -82
- pulumi_aws/ec2/security_group.py +8 -8
- pulumi_aws/ec2/vpc_ipam.py +0 -50
- pulumi_aws/ecr/lifecycle_policy.py +40 -40
- pulumi_aws/ecr/repository_creation_template.py +20 -20
- pulumi_aws/ecrpublic/__init__.py +0 -1
- pulumi_aws/ecrpublic/_inputs.py +0 -54
- pulumi_aws/ecrpublic/outputs.py +0 -116
- pulumi_aws/ecs/get_task_definition.py +18 -18
- pulumi_aws/eks/get_clusters.py +0 -22
- pulumi_aws/elasticsearch/domain.py +34 -34
- pulumi_aws/elasticsearch/domain_policy.py +16 -16
- pulumi_aws/emr/cluster.py +114 -114
- pulumi_aws/emr/instance_group.py +42 -42
- pulumi_aws/emr/security_configuration.py +18 -18
- pulumi_aws/emrserverless/_inputs.py +0 -454
- pulumi_aws/emrserverless/application.py +2 -230
- pulumi_aws/emrserverless/outputs.py +0 -367
- pulumi_aws/evidently/segment.py +4 -4
- pulumi_aws/glue/connection.py +22 -26
- pulumi_aws/glue/crawler.py +6 -6
- pulumi_aws/identitystore/group.py +0 -28
- pulumi_aws/imagebuilder/get_image_recipe.py +1 -15
- pulumi_aws/imagebuilder/image_recipe.py +0 -47
- pulumi_aws/imagebuilder/workflow.py +6 -6
- pulumi_aws/iot/get_endpoint.py +0 -44
- pulumi_aws/kinesis/firehose_delivery_stream.py +40 -40
- pulumi_aws/kinesis/resource_policy.py +26 -26
- pulumi_aws/kms/ciphertext.py +4 -4
- pulumi_aws/kms/get_cipher_text.py +4 -4
- pulumi_aws/lakeformation/__init__.py +0 -1
- pulumi_aws/lambda_/get_code_signing_config.py +0 -58
- pulumi_aws/lambda_/get_invocation.py +0 -86
- pulumi_aws/lambda_/invocation.py +0 -56
- pulumi_aws/lb/_inputs.py +36 -670
- pulumi_aws/lb/get_listener_rule.py +4 -24
- pulumi_aws/lb/listener_rule.py +3 -114
- pulumi_aws/lb/outputs.py +23 -452
- pulumi_aws/m2/application.py +26 -26
- pulumi_aws/mq/configuration.py +8 -8
- pulumi_aws/networkmanager/site_to_site_vpn_attachment.py +0 -138
- pulumi_aws/opensearchingest/pipeline.py +12 -12
- pulumi_aws/organizations/get_policies.py +0 -22
- pulumi_aws/organizations/get_policies_for_target.py +0 -26
- pulumi_aws/organizations/resource_policy.py +46 -46
- pulumi_aws/pulumi-plugin.json +1 -1
- pulumi_aws/rds/custom_db_engine_version.py +2 -2
- pulumi_aws/resourcegroups/group.py +10 -10
- pulumi_aws/route53/traffic_policy.py +14 -14
- pulumi_aws/s3/bucket_website_configuration.py +8 -8
- pulumi_aws/s3/bucket_website_configuration_v2.py +8 -8
- pulumi_aws/s3control/access_grants_instance_resource_policy.py +24 -24
- pulumi_aws/sagemaker/flow_definition.py +18 -18
- pulumi_aws/sagemaker/model.py +14 -24
- pulumi_aws/sagemaker/model_package_group_policy.py +0 -54
- pulumi_aws/sagemaker/notebook_instance.py +7 -7
- pulumi_aws/secretsmanager/get_secret_version.py +0 -22
- pulumi_aws/secretsmanager/secret_version.py +0 -58
- pulumi_aws/securityhub/standards_control_association.py +0 -36
- pulumi_aws/sesv2/email_identity_policy.py +26 -26
- pulumi_aws/sfn/state_machine.py +70 -70
- pulumi_aws/sns/topic.py +24 -24
- pulumi_aws/sns/topic_subscription.py +26 -26
- pulumi_aws/sqs/queue.py +12 -0
- pulumi_aws/ssm/association.py +2 -2
- pulumi_aws/ssm/document.py +16 -16
- pulumi_aws/timestreamquery/scheduled_query.py +16 -16
- pulumi_aws/verifiedpermissions/_inputs.py +3 -3
- pulumi_aws/verifiedpermissions/outputs.py +2 -2
- {pulumi_aws-7.11.0.dist-info → pulumi_aws-7.11.0a1761834890.dist-info}/METADATA +1 -1
- {pulumi_aws-7.11.0.dist-info → pulumi_aws-7.11.0a1761834890.dist-info}/RECORD +102 -104
- pulumi_aws/ecrpublic/get_images.py +0 -164
- pulumi_aws/lakeformation/identity_center_configuration.py +0 -365
- {pulumi_aws-7.11.0.dist-info → pulumi_aws-7.11.0a1761834890.dist-info}/WHEEL +0 -0
- {pulumi_aws-7.11.0.dist-info → pulumi_aws-7.11.0a1761834890.dist-info}/top_level.txt +0 -0
|
@@ -35,12 +35,12 @@ class AgentcoreGatewayArgs:
|
|
|
35
35
|
timeouts: Optional[pulumi.Input['AgentcoreGatewayTimeoutsArgs']] = None):
|
|
36
36
|
"""
|
|
37
37
|
The set of arguments for constructing a AgentcoreGateway resource.
|
|
38
|
-
:param pulumi.Input[_builtins.str] authorizer_type: Type of authorizer to use. Valid values: `CUSTOM_JWT`, `AWS_IAM`.
|
|
38
|
+
:param pulumi.Input[_builtins.str] authorizer_type: Type of authorizer to use. Valid values: `CUSTOM_JWT`, `AWS_IAM`.
|
|
39
39
|
:param pulumi.Input[_builtins.str] protocol_type: Protocol type for the gateway. Valid values: `MCP`.
|
|
40
40
|
:param pulumi.Input[_builtins.str] role_arn: ARN of the IAM role that the gateway assumes to access AWS services.
|
|
41
41
|
|
|
42
42
|
The following arguments are optional:
|
|
43
|
-
:param pulumi.Input['AgentcoreGatewayAuthorizerConfigurationArgs'] authorizer_configuration: Configuration for request authorization.
|
|
43
|
+
:param pulumi.Input['AgentcoreGatewayAuthorizerConfigurationArgs'] authorizer_configuration: Configuration for request authorization. See `authorizer_configuration` below.
|
|
44
44
|
:param pulumi.Input[_builtins.str] description: Description of the gateway.
|
|
45
45
|
:param pulumi.Input[_builtins.str] exception_level: Exception level for the gateway. Valid values: `INFO`, `WARN`, `ERROR`.
|
|
46
46
|
:param pulumi.Input[_builtins.str] kms_key_arn: ARN of the KMS key used to encrypt the gateway data.
|
|
@@ -75,7 +75,7 @@ class AgentcoreGatewayArgs:
|
|
|
75
75
|
@pulumi.getter(name="authorizerType")
|
|
76
76
|
def authorizer_type(self) -> pulumi.Input[_builtins.str]:
|
|
77
77
|
"""
|
|
78
|
-
Type of authorizer to use. Valid values: `CUSTOM_JWT`, `AWS_IAM`.
|
|
78
|
+
Type of authorizer to use. Valid values: `CUSTOM_JWT`, `AWS_IAM`.
|
|
79
79
|
"""
|
|
80
80
|
return pulumi.get(self, "authorizer_type")
|
|
81
81
|
|
|
@@ -113,7 +113,7 @@ class AgentcoreGatewayArgs:
|
|
|
113
113
|
@pulumi.getter(name="authorizerConfiguration")
|
|
114
114
|
def authorizer_configuration(self) -> Optional[pulumi.Input['AgentcoreGatewayAuthorizerConfigurationArgs']]:
|
|
115
115
|
"""
|
|
116
|
-
Configuration for request authorization.
|
|
116
|
+
Configuration for request authorization. See `authorizer_configuration` below.
|
|
117
117
|
"""
|
|
118
118
|
return pulumi.get(self, "authorizer_configuration")
|
|
119
119
|
|
|
@@ -237,8 +237,8 @@ class _AgentcoreGatewayState:
|
|
|
237
237
|
workload_identity_details: Optional[pulumi.Input[Sequence[pulumi.Input['AgentcoreGatewayWorkloadIdentityDetailArgs']]]] = None):
|
|
238
238
|
"""
|
|
239
239
|
Input properties used for looking up and filtering AgentcoreGateway resources.
|
|
240
|
-
:param pulumi.Input['AgentcoreGatewayAuthorizerConfigurationArgs'] authorizer_configuration: Configuration for request authorization.
|
|
241
|
-
:param pulumi.Input[_builtins.str] authorizer_type: Type of authorizer to use. Valid values: `CUSTOM_JWT`, `AWS_IAM`.
|
|
240
|
+
:param pulumi.Input['AgentcoreGatewayAuthorizerConfigurationArgs'] authorizer_configuration: Configuration for request authorization. See `authorizer_configuration` below.
|
|
241
|
+
:param pulumi.Input[_builtins.str] authorizer_type: Type of authorizer to use. Valid values: `CUSTOM_JWT`, `AWS_IAM`.
|
|
242
242
|
:param pulumi.Input[_builtins.str] description: Description of the gateway.
|
|
243
243
|
:param pulumi.Input[_builtins.str] exception_level: Exception level for the gateway. Valid values: `INFO`, `WARN`, `ERROR`.
|
|
244
244
|
:param pulumi.Input[_builtins.str] gateway_arn: ARN of the Gateway.
|
|
@@ -295,7 +295,7 @@ class _AgentcoreGatewayState:
|
|
|
295
295
|
@pulumi.getter(name="authorizerConfiguration")
|
|
296
296
|
def authorizer_configuration(self) -> Optional[pulumi.Input['AgentcoreGatewayAuthorizerConfigurationArgs']]:
|
|
297
297
|
"""
|
|
298
|
-
Configuration for request authorization.
|
|
298
|
+
Configuration for request authorization. See `authorizer_configuration` below.
|
|
299
299
|
"""
|
|
300
300
|
return pulumi.get(self, "authorizer_configuration")
|
|
301
301
|
|
|
@@ -307,7 +307,7 @@ class _AgentcoreGatewayState:
|
|
|
307
307
|
@pulumi.getter(name="authorizerType")
|
|
308
308
|
def authorizer_type(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
309
309
|
"""
|
|
310
|
-
Type of authorizer to use. Valid values: `CUSTOM_JWT`, `AWS_IAM`.
|
|
310
|
+
Type of authorizer to use. Valid values: `CUSTOM_JWT`, `AWS_IAM`.
|
|
311
311
|
"""
|
|
312
312
|
return pulumi.get(self, "authorizer_type")
|
|
313
313
|
|
|
@@ -599,8 +599,8 @@ class AgentcoreGateway(pulumi.CustomResource):
|
|
|
599
599
|
|
|
600
600
|
:param str resource_name: The name of the resource.
|
|
601
601
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
602
|
-
:param pulumi.Input[Union['AgentcoreGatewayAuthorizerConfigurationArgs', 'AgentcoreGatewayAuthorizerConfigurationArgsDict']] authorizer_configuration: Configuration for request authorization.
|
|
603
|
-
:param pulumi.Input[_builtins.str] authorizer_type: Type of authorizer to use. Valid values: `CUSTOM_JWT`, `AWS_IAM`.
|
|
602
|
+
:param pulumi.Input[Union['AgentcoreGatewayAuthorizerConfigurationArgs', 'AgentcoreGatewayAuthorizerConfigurationArgsDict']] authorizer_configuration: Configuration for request authorization. See `authorizer_configuration` below.
|
|
603
|
+
:param pulumi.Input[_builtins.str] authorizer_type: Type of authorizer to use. Valid values: `CUSTOM_JWT`, `AWS_IAM`.
|
|
604
604
|
:param pulumi.Input[_builtins.str] description: Description of the gateway.
|
|
605
605
|
:param pulumi.Input[_builtins.str] exception_level: Exception level for the gateway. Valid values: `INFO`, `WARN`, `ERROR`.
|
|
606
606
|
:param pulumi.Input[_builtins.str] kms_key_arn: ARN of the KMS key used to encrypt the gateway data.
|
|
@@ -795,8 +795,8 @@ class AgentcoreGateway(pulumi.CustomResource):
|
|
|
795
795
|
:param str resource_name: The unique name of the resulting resource.
|
|
796
796
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
797
797
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
798
|
-
:param pulumi.Input[Union['AgentcoreGatewayAuthorizerConfigurationArgs', 'AgentcoreGatewayAuthorizerConfigurationArgsDict']] authorizer_configuration: Configuration for request authorization.
|
|
799
|
-
:param pulumi.Input[_builtins.str] authorizer_type: Type of authorizer to use. Valid values: `CUSTOM_JWT`, `AWS_IAM`.
|
|
798
|
+
:param pulumi.Input[Union['AgentcoreGatewayAuthorizerConfigurationArgs', 'AgentcoreGatewayAuthorizerConfigurationArgsDict']] authorizer_configuration: Configuration for request authorization. See `authorizer_configuration` below.
|
|
799
|
+
:param pulumi.Input[_builtins.str] authorizer_type: Type of authorizer to use. Valid values: `CUSTOM_JWT`, `AWS_IAM`.
|
|
800
800
|
:param pulumi.Input[_builtins.str] description: Description of the gateway.
|
|
801
801
|
:param pulumi.Input[_builtins.str] exception_level: Exception level for the gateway. Valid values: `INFO`, `WARN`, `ERROR`.
|
|
802
802
|
:param pulumi.Input[_builtins.str] gateway_arn: ARN of the Gateway.
|
|
@@ -841,7 +841,7 @@ class AgentcoreGateway(pulumi.CustomResource):
|
|
|
841
841
|
@pulumi.getter(name="authorizerConfiguration")
|
|
842
842
|
def authorizer_configuration(self) -> pulumi.Output[Optional['outputs.AgentcoreGatewayAuthorizerConfiguration']]:
|
|
843
843
|
"""
|
|
844
|
-
Configuration for request authorization.
|
|
844
|
+
Configuration for request authorization. See `authorizer_configuration` below.
|
|
845
845
|
"""
|
|
846
846
|
return pulumi.get(self, "authorizer_configuration")
|
|
847
847
|
|
|
@@ -849,7 +849,7 @@ class AgentcoreGateway(pulumi.CustomResource):
|
|
|
849
849
|
@pulumi.getter(name="authorizerType")
|
|
850
850
|
def authorizer_type(self) -> pulumi.Output[_builtins.str]:
|
|
851
851
|
"""
|
|
852
|
-
Type of authorizer to use. Valid values: `CUSTOM_JWT`, `AWS_IAM`.
|
|
852
|
+
Type of authorizer to use. Valid values: `CUSTOM_JWT`, `AWS_IAM`.
|
|
853
853
|
"""
|
|
854
854
|
return pulumi.get(self, "authorizer_type")
|
|
855
855
|
|
|
@@ -127,25 +127,25 @@ class InvocationLoggingConfiguration(pulumi.CustomResource):
|
|
|
127
127
|
example_bucket_policy = aws.s3.BucketPolicy("example",
|
|
128
128
|
bucket=example.bucket,
|
|
129
129
|
policy=example.arn.apply(lambda arn: f\"\"\"{{
|
|
130
|
-
|
|
131
|
-
|
|
130
|
+
"Version": "2012-10-17",
|
|
131
|
+
"Statement": [
|
|
132
132
|
{{
|
|
133
|
-
|
|
134
|
-
|
|
135
|
-
|
|
133
|
+
"Effect": "Allow",
|
|
134
|
+
"Principal": {{
|
|
135
|
+
"Service": "bedrock.amazonaws.com"
|
|
136
136
|
}},
|
|
137
|
-
|
|
138
|
-
|
|
137
|
+
"Action": [
|
|
138
|
+
"s3:*"
|
|
139
139
|
],
|
|
140
|
-
|
|
141
|
-
|
|
140
|
+
"Resource": [
|
|
141
|
+
"{arn}/*"
|
|
142
142
|
],
|
|
143
|
-
|
|
144
|
-
|
|
145
|
-
|
|
143
|
+
"Condition": {{
|
|
144
|
+
"StringEquals": {{
|
|
145
|
+
"aws:SourceAccount": "{current.account_id}"
|
|
146
146
|
}},
|
|
147
|
-
|
|
148
|
-
|
|
147
|
+
"ArnLike": {{
|
|
148
|
+
"aws:SourceArn": "arn:aws:bedrock:us-east-1:{current.account_id}:*"
|
|
149
149
|
}}
|
|
150
150
|
}}
|
|
151
151
|
}}
|
|
@@ -204,25 +204,25 @@ class InvocationLoggingConfiguration(pulumi.CustomResource):
|
|
|
204
204
|
example_bucket_policy = aws.s3.BucketPolicy("example",
|
|
205
205
|
bucket=example.bucket,
|
|
206
206
|
policy=example.arn.apply(lambda arn: f\"\"\"{{
|
|
207
|
-
|
|
208
|
-
|
|
207
|
+
"Version": "2012-10-17",
|
|
208
|
+
"Statement": [
|
|
209
209
|
{{
|
|
210
|
-
|
|
211
|
-
|
|
212
|
-
|
|
210
|
+
"Effect": "Allow",
|
|
211
|
+
"Principal": {{
|
|
212
|
+
"Service": "bedrock.amazonaws.com"
|
|
213
213
|
}},
|
|
214
|
-
|
|
215
|
-
|
|
214
|
+
"Action": [
|
|
215
|
+
"s3:*"
|
|
216
216
|
],
|
|
217
|
-
|
|
218
|
-
|
|
217
|
+
"Resource": [
|
|
218
|
+
"{arn}/*"
|
|
219
219
|
],
|
|
220
|
-
|
|
221
|
-
|
|
222
|
-
|
|
220
|
+
"Condition": {{
|
|
221
|
+
"StringEquals": {{
|
|
222
|
+
"aws:SourceAccount": "{current.account_id}"
|
|
223
223
|
}},
|
|
224
|
-
|
|
225
|
-
|
|
224
|
+
"ArnLike": {{
|
|
225
|
+
"aws:SourceArn": "arn:aws:bedrock:us-east-1:{current.account_id}:*"
|
|
226
226
|
}}
|
|
227
227
|
}}
|
|
228
228
|
}}
|
|
@@ -541,15 +541,15 @@ class OrganizationCustomPolicyRule(pulumi.CustomResource):
|
|
|
541
541
|
policy_text=\"\"\"let status = ['ACTIVE']
|
|
542
542
|
|
|
543
543
|
rule tableisactive when
|
|
544
|
-
resourceType ==
|
|
544
|
+
resourceType == "AWS::DynamoDB::Table" {
|
|
545
545
|
configuration.tableStatus == %status
|
|
546
546
|
}
|
|
547
547
|
|
|
548
548
|
rule checkcompliance when
|
|
549
|
-
resourceType ==
|
|
549
|
+
resourceType == "AWS::DynamoDB::Table"
|
|
550
550
|
tableisactive {
|
|
551
551
|
let pitr = supplementaryConfiguration.ContinuousBackupsDescription.pointInTimeRecoveryDescription.pointInTimeRecoveryStatus
|
|
552
|
-
%pitr ==
|
|
552
|
+
%pitr == "ENABLED"
|
|
553
553
|
}
|
|
554
554
|
\"\"\",
|
|
555
555
|
resource_types_scopes=["AWS::DynamoDB::Table"])
|
|
@@ -607,15 +607,15 @@ class OrganizationCustomPolicyRule(pulumi.CustomResource):
|
|
|
607
607
|
policy_text=\"\"\"let status = ['ACTIVE']
|
|
608
608
|
|
|
609
609
|
rule tableisactive when
|
|
610
|
-
resourceType ==
|
|
610
|
+
resourceType == "AWS::DynamoDB::Table" {
|
|
611
611
|
configuration.tableStatus == %status
|
|
612
612
|
}
|
|
613
613
|
|
|
614
614
|
rule checkcompliance when
|
|
615
|
-
resourceType ==
|
|
615
|
+
resourceType == "AWS::DynamoDB::Table"
|
|
616
616
|
tableisactive {
|
|
617
617
|
let pitr = supplementaryConfiguration.ContinuousBackupsDescription.pointInTimeRecoveryDescription.pointInTimeRecoveryStatus
|
|
618
|
-
%pitr ==
|
|
618
|
+
%pitr == "ENABLED"
|
|
619
619
|
}
|
|
620
620
|
\"\"\",
|
|
621
621
|
resource_types_scopes=["AWS::DynamoDB::Table"])
|
pulumi_aws/cfg/rule.py
CHANGED
|
@@ -472,16 +472,16 @@ class Rule(pulumi.CustomResource):
|
|
|
472
472
|
}],
|
|
473
473
|
"custom_policy_details": {
|
|
474
474
|
"policy_runtime": "guard-2.x.x",
|
|
475
|
-
"policy_text": \"\"\"\\
|
|
476
|
-
\\
|
|
477
|
-
\\
|
|
478
|
-
\\
|
|
479
|
-
\\
|
|
480
|
-
\\
|
|
481
|
-
\\
|
|
482
|
-
\\
|
|
483
|
-
\\
|
|
484
|
-
\\
|
|
475
|
+
"policy_text": \"\"\"\\x09 rule tableisactive when
|
|
476
|
+
\\x09\\x09 resourceType == "AWS::DynamoDB::Table" {
|
|
477
|
+
\\x09\\x09 configuration.tableStatus == ['ACTIVE']
|
|
478
|
+
\\x09 }
|
|
479
|
+
\\x09
|
|
480
|
+
\\x09 rule checkcompliance when
|
|
481
|
+
\\x09\\x09 resourceType == "AWS::DynamoDB::Table"
|
|
482
|
+
\\x09\\x09 tableisactive {
|
|
483
|
+
\\x09\\x09\\x09 supplementaryConfiguration.ContinuousBackupsDescription.pointInTimeRecoveryDescription.pointInTimeRecoveryStatus == "ENABLED"
|
|
484
|
+
\\x09 }
|
|
485
485
|
\"\"\",
|
|
486
486
|
},
|
|
487
487
|
})
|
|
@@ -600,16 +600,16 @@ class Rule(pulumi.CustomResource):
|
|
|
600
600
|
}],
|
|
601
601
|
"custom_policy_details": {
|
|
602
602
|
"policy_runtime": "guard-2.x.x",
|
|
603
|
-
"policy_text": \"\"\"\\
|
|
604
|
-
\\
|
|
605
|
-
\\
|
|
606
|
-
\\
|
|
607
|
-
\\
|
|
608
|
-
\\
|
|
609
|
-
\\
|
|
610
|
-
\\
|
|
611
|
-
\\
|
|
612
|
-
\\
|
|
603
|
+
"policy_text": \"\"\"\\x09 rule tableisactive when
|
|
604
|
+
\\x09\\x09 resourceType == "AWS::DynamoDB::Table" {
|
|
605
|
+
\\x09\\x09 configuration.tableStatus == ['ACTIVE']
|
|
606
|
+
\\x09 }
|
|
607
|
+
\\x09
|
|
608
|
+
\\x09 rule checkcompliance when
|
|
609
|
+
\\x09\\x09 resourceType == "AWS::DynamoDB::Table"
|
|
610
|
+
\\x09\\x09 tableisactive {
|
|
611
|
+
\\x09\\x09\\x09 supplementaryConfiguration.ContinuousBackupsDescription.pointInTimeRecoveryDescription.pointInTimeRecoveryStatus == "ENABLED"
|
|
612
|
+
\\x09 }
|
|
613
613
|
\"\"\",
|
|
614
614
|
},
|
|
615
615
|
})
|
|
@@ -1024,8 +1024,8 @@ class EventTarget(pulumi.CustomResource):
|
|
|
1024
1024
|
"status": "$.detail.status",
|
|
1025
1025
|
},
|
|
1026
1026
|
"input_template": \"\"\"{
|
|
1027
|
-
|
|
1028
|
-
|
|
1027
|
+
"instance_id": <instance>,
|
|
1028
|
+
"instance_status": <status>
|
|
1029
1029
|
}
|
|
1030
1030
|
\"\"\",
|
|
1031
1031
|
})
|
|
@@ -1164,7 +1164,7 @@ class EventTarget(pulumi.CustomResource):
|
|
|
1164
1164
|
"input": "$.detail.input",
|
|
1165
1165
|
},
|
|
1166
1166
|
"input_template": \"\"\" {
|
|
1167
|
-
|
|
1167
|
+
"input": <input>
|
|
1168
1168
|
}
|
|
1169
1169
|
\"\"\",
|
|
1170
1170
|
},
|
|
@@ -1521,8 +1521,8 @@ class EventTarget(pulumi.CustomResource):
|
|
|
1521
1521
|
"status": "$.detail.status",
|
|
1522
1522
|
},
|
|
1523
1523
|
"input_template": \"\"\"{
|
|
1524
|
-
|
|
1525
|
-
|
|
1524
|
+
"instance_id": <instance>,
|
|
1525
|
+
"instance_status": <status>
|
|
1526
1526
|
}
|
|
1527
1527
|
\"\"\",
|
|
1528
1528
|
})
|
|
@@ -1661,7 +1661,7 @@ class EventTarget(pulumi.CustomResource):
|
|
|
1661
1661
|
"input": "$.detail.input",
|
|
1662
1662
|
},
|
|
1663
1663
|
"input_template": \"\"\" {
|
|
1664
|
-
|
|
1664
|
+
"input": <input>
|
|
1665
1665
|
}
|
|
1666
1666
|
\"\"\",
|
|
1667
1667
|
},
|
|
@@ -1031,7 +1031,7 @@ class MetricAlarm(pulumi.CustomResource):
|
|
|
1031
1031
|
"id": "q1",
|
|
1032
1032
|
"expression": \"\"\"SELECT
|
|
1033
1033
|
MAX(DBLoadRelativeToNumVCPUs)
|
|
1034
|
-
FROM SCHEMA(
|
|
1034
|
+
FROM SCHEMA("AWS/RDS", DBInstanceIdentifier)
|
|
1035
1035
|
WHERE DBInstanceIdentifier != 'example-rds-instance'
|
|
1036
1036
|
GROUP BY DBInstanceIdentifier
|
|
1037
1037
|
ORDER BY MIN() ASC
|
|
@@ -1288,7 +1288,7 @@ class MetricAlarm(pulumi.CustomResource):
|
|
|
1288
1288
|
"id": "q1",
|
|
1289
1289
|
"expression": \"\"\"SELECT
|
|
1290
1290
|
MAX(DBLoadRelativeToNumVCPUs)
|
|
1291
|
-
FROM SCHEMA(
|
|
1291
|
+
FROM SCHEMA("AWS/RDS", DBInstanceIdentifier)
|
|
1292
1292
|
WHERE DBInstanceIdentifier != 'example-rds-instance'
|
|
1293
1293
|
GROUP BY DBInstanceIdentifier
|
|
1294
1294
|
ORDER BY MIN() ASC
|
pulumi_aws/codebuild/webhook.py
CHANGED
|
@@ -392,25 +392,6 @@ class Webhook(pulumi.CustomResource):
|
|
|
392
392
|
|
|
393
393
|
More information creating webhooks with GitHub Enterprise can be found in the [CodeBuild User Guide](https://docs.aws.amazon.com/codebuild/latest/userguide/sample-github-enterprise.html).
|
|
394
394
|
|
|
395
|
-
```python
|
|
396
|
-
import pulumi
|
|
397
|
-
import pulumi_aws as aws
|
|
398
|
-
import pulumi_github as github
|
|
399
|
-
|
|
400
|
-
example = aws.codebuild.Webhook("example", project_name=example_aws_codebuild_project["name"])
|
|
401
|
-
example_repository_webhook = github.index.RepositoryWebhook("example",
|
|
402
|
-
active=True,
|
|
403
|
-
events=[push],
|
|
404
|
-
name=example,
|
|
405
|
-
repository=example_github_repository.name,
|
|
406
|
-
configuration=[{
|
|
407
|
-
url: example.payload_url,
|
|
408
|
-
secret: example.secret,
|
|
409
|
-
contentType: json,
|
|
410
|
-
insecureSsl: False,
|
|
411
|
-
}])
|
|
412
|
-
```
|
|
413
|
-
|
|
414
395
|
### For CodeBuild Runner Project
|
|
415
396
|
|
|
416
397
|
To create a CodeBuild project as a Runner Project, the following `codebuild.Webhook` resource is required for the project.
|
|
@@ -496,25 +477,6 @@ class Webhook(pulumi.CustomResource):
|
|
|
496
477
|
|
|
497
478
|
More information creating webhooks with GitHub Enterprise can be found in the [CodeBuild User Guide](https://docs.aws.amazon.com/codebuild/latest/userguide/sample-github-enterprise.html).
|
|
498
479
|
|
|
499
|
-
```python
|
|
500
|
-
import pulumi
|
|
501
|
-
import pulumi_aws as aws
|
|
502
|
-
import pulumi_github as github
|
|
503
|
-
|
|
504
|
-
example = aws.codebuild.Webhook("example", project_name=example_aws_codebuild_project["name"])
|
|
505
|
-
example_repository_webhook = github.index.RepositoryWebhook("example",
|
|
506
|
-
active=True,
|
|
507
|
-
events=[push],
|
|
508
|
-
name=example,
|
|
509
|
-
repository=example_github_repository.name,
|
|
510
|
-
configuration=[{
|
|
511
|
-
url: example.payload_url,
|
|
512
|
-
secret: example.secret,
|
|
513
|
-
contentType: json,
|
|
514
|
-
insecureSsl: False,
|
|
515
|
-
}])
|
|
516
|
-
```
|
|
517
|
-
|
|
518
480
|
### For CodeBuild Runner Project
|
|
519
481
|
|
|
520
482
|
To create a CodeBuild project as a Runner Project, the following `codebuild.Webhook` resource is required for the project.
|
|
@@ -354,80 +354,6 @@ class Webhook(pulumi.CustomResource):
|
|
|
354
354
|
|
|
355
355
|
## Example Usage
|
|
356
356
|
|
|
357
|
-
```python
|
|
358
|
-
import pulumi
|
|
359
|
-
import pulumi_aws as aws
|
|
360
|
-
import pulumi_github as github
|
|
361
|
-
|
|
362
|
-
bar = aws.codepipeline.Pipeline("bar",
|
|
363
|
-
name="tf-test-pipeline",
|
|
364
|
-
role_arn=bar_aws_iam_role["arn"],
|
|
365
|
-
artifact_stores=[{
|
|
366
|
-
"location": bar_aws_s3_bucket["bucket"],
|
|
367
|
-
"type": "S3",
|
|
368
|
-
"encryption_key": {
|
|
369
|
-
"id": s3kmskey["arn"],
|
|
370
|
-
"type": "KMS",
|
|
371
|
-
},
|
|
372
|
-
}],
|
|
373
|
-
stages=[
|
|
374
|
-
{
|
|
375
|
-
"name": "Source",
|
|
376
|
-
"actions": [{
|
|
377
|
-
"name": "Source",
|
|
378
|
-
"category": "Source",
|
|
379
|
-
"owner": "ThirdParty",
|
|
380
|
-
"provider": "GitHub",
|
|
381
|
-
"version": "1",
|
|
382
|
-
"output_artifacts": ["test"],
|
|
383
|
-
"configuration": {
|
|
384
|
-
"Owner": "my-organization",
|
|
385
|
-
"Repo": "test",
|
|
386
|
-
"Branch": "master",
|
|
387
|
-
},
|
|
388
|
-
}],
|
|
389
|
-
},
|
|
390
|
-
{
|
|
391
|
-
"name": "Build",
|
|
392
|
-
"actions": [{
|
|
393
|
-
"name": "Build",
|
|
394
|
-
"category": "Build",
|
|
395
|
-
"owner": "AWS",
|
|
396
|
-
"provider": "CodeBuild",
|
|
397
|
-
"input_artifacts": ["test"],
|
|
398
|
-
"version": "1",
|
|
399
|
-
"configuration": {
|
|
400
|
-
"ProjectName": "test",
|
|
401
|
-
},
|
|
402
|
-
}],
|
|
403
|
-
},
|
|
404
|
-
])
|
|
405
|
-
webhook_secret = "super-secret"
|
|
406
|
-
bar_webhook = aws.codepipeline.Webhook("bar",
|
|
407
|
-
name="test-webhook-github-bar",
|
|
408
|
-
authentication="GITHUB_HMAC",
|
|
409
|
-
target_action="Source",
|
|
410
|
-
target_pipeline=bar.name,
|
|
411
|
-
authentication_configuration={
|
|
412
|
-
"secret_token": webhook_secret,
|
|
413
|
-
},
|
|
414
|
-
filters=[{
|
|
415
|
-
"json_path": "$.ref",
|
|
416
|
-
"match_equals": "refs/heads/{Branch}",
|
|
417
|
-
}])
|
|
418
|
-
# Wire the CodePipeline webhook into a GitHub repository.
|
|
419
|
-
bar_repository_webhook = github.index.RepositoryWebhook("bar",
|
|
420
|
-
repository=repo.name,
|
|
421
|
-
name=web,
|
|
422
|
-
configuration=[{
|
|
423
|
-
url: bar_webhook.url,
|
|
424
|
-
contentType: json,
|
|
425
|
-
insecureSsl: True,
|
|
426
|
-
secret: webhook_secret,
|
|
427
|
-
}],
|
|
428
|
-
events=[push])
|
|
429
|
-
```
|
|
430
|
-
|
|
431
357
|
## Import
|
|
432
358
|
|
|
433
359
|
### Identity Schema
|
|
@@ -464,80 +390,6 @@ class Webhook(pulumi.CustomResource):
|
|
|
464
390
|
|
|
465
391
|
## Example Usage
|
|
466
392
|
|
|
467
|
-
```python
|
|
468
|
-
import pulumi
|
|
469
|
-
import pulumi_aws as aws
|
|
470
|
-
import pulumi_github as github
|
|
471
|
-
|
|
472
|
-
bar = aws.codepipeline.Pipeline("bar",
|
|
473
|
-
name="tf-test-pipeline",
|
|
474
|
-
role_arn=bar_aws_iam_role["arn"],
|
|
475
|
-
artifact_stores=[{
|
|
476
|
-
"location": bar_aws_s3_bucket["bucket"],
|
|
477
|
-
"type": "S3",
|
|
478
|
-
"encryption_key": {
|
|
479
|
-
"id": s3kmskey["arn"],
|
|
480
|
-
"type": "KMS",
|
|
481
|
-
},
|
|
482
|
-
}],
|
|
483
|
-
stages=[
|
|
484
|
-
{
|
|
485
|
-
"name": "Source",
|
|
486
|
-
"actions": [{
|
|
487
|
-
"name": "Source",
|
|
488
|
-
"category": "Source",
|
|
489
|
-
"owner": "ThirdParty",
|
|
490
|
-
"provider": "GitHub",
|
|
491
|
-
"version": "1",
|
|
492
|
-
"output_artifacts": ["test"],
|
|
493
|
-
"configuration": {
|
|
494
|
-
"Owner": "my-organization",
|
|
495
|
-
"Repo": "test",
|
|
496
|
-
"Branch": "master",
|
|
497
|
-
},
|
|
498
|
-
}],
|
|
499
|
-
},
|
|
500
|
-
{
|
|
501
|
-
"name": "Build",
|
|
502
|
-
"actions": [{
|
|
503
|
-
"name": "Build",
|
|
504
|
-
"category": "Build",
|
|
505
|
-
"owner": "AWS",
|
|
506
|
-
"provider": "CodeBuild",
|
|
507
|
-
"input_artifacts": ["test"],
|
|
508
|
-
"version": "1",
|
|
509
|
-
"configuration": {
|
|
510
|
-
"ProjectName": "test",
|
|
511
|
-
},
|
|
512
|
-
}],
|
|
513
|
-
},
|
|
514
|
-
])
|
|
515
|
-
webhook_secret = "super-secret"
|
|
516
|
-
bar_webhook = aws.codepipeline.Webhook("bar",
|
|
517
|
-
name="test-webhook-github-bar",
|
|
518
|
-
authentication="GITHUB_HMAC",
|
|
519
|
-
target_action="Source",
|
|
520
|
-
target_pipeline=bar.name,
|
|
521
|
-
authentication_configuration={
|
|
522
|
-
"secret_token": webhook_secret,
|
|
523
|
-
},
|
|
524
|
-
filters=[{
|
|
525
|
-
"json_path": "$.ref",
|
|
526
|
-
"match_equals": "refs/heads/{Branch}",
|
|
527
|
-
}])
|
|
528
|
-
# Wire the CodePipeline webhook into a GitHub repository.
|
|
529
|
-
bar_repository_webhook = github.index.RepositoryWebhook("bar",
|
|
530
|
-
repository=repo.name,
|
|
531
|
-
name=web,
|
|
532
|
-
configuration=[{
|
|
533
|
-
url: bar_webhook.url,
|
|
534
|
-
contentType: json,
|
|
535
|
-
insecureSsl: True,
|
|
536
|
-
secret: webhook_secret,
|
|
537
|
-
}],
|
|
538
|
-
events=[push])
|
|
539
|
-
```
|
|
540
|
-
|
|
541
393
|
## Import
|
|
542
394
|
|
|
543
395
|
### Identity Schema
|
|
@@ -205,37 +205,6 @@ class IdentityPoolProviderPrincipalTag(pulumi.CustomResource):
|
|
|
205
205
|
"""
|
|
206
206
|
Provides an AWS Cognito Identity Principal Mapping.
|
|
207
207
|
|
|
208
|
-
## Example Usage
|
|
209
|
-
|
|
210
|
-
```python
|
|
211
|
-
import pulumi
|
|
212
|
-
import pulumi_aws as aws
|
|
213
|
-
import pulumi_std as std
|
|
214
|
-
|
|
215
|
-
example = aws.cognito.UserPool("example",
|
|
216
|
-
name="user pool",
|
|
217
|
-
auto_verified_attributes=["email"])
|
|
218
|
-
example_user_pool_client = aws.cognito.UserPoolClient("example",
|
|
219
|
-
name="client",
|
|
220
|
-
user_pool_id=example.id,
|
|
221
|
-
supported_identity_providers=std.compact(input=["COGNITO"]).result)
|
|
222
|
-
example_identity_pool = aws.cognito.IdentityPool("example",
|
|
223
|
-
identity_pool_name="identity pool",
|
|
224
|
-
allow_unauthenticated_identities=False,
|
|
225
|
-
cognito_identity_providers=[{
|
|
226
|
-
"client_id": example_user_pool_client.id,
|
|
227
|
-
"provider_name": example.endpoint,
|
|
228
|
-
"server_side_token_check": False,
|
|
229
|
-
}])
|
|
230
|
-
example_identity_pool_provider_principal_tag = aws.cognito.IdentityPoolProviderPrincipalTag("example",
|
|
231
|
-
identity_pool_id=example_identity_pool.id,
|
|
232
|
-
identity_provider_name=example.endpoint,
|
|
233
|
-
use_defaults=False,
|
|
234
|
-
principal_tags={
|
|
235
|
-
"test": "value",
|
|
236
|
-
})
|
|
237
|
-
```
|
|
238
|
-
|
|
239
208
|
## Import
|
|
240
209
|
|
|
241
210
|
Using `pulumi import`, import Cognito Identity Pool Roles Attachment using the Identity Pool ID and provider name. For example:
|
|
@@ -261,37 +230,6 @@ class IdentityPoolProviderPrincipalTag(pulumi.CustomResource):
|
|
|
261
230
|
"""
|
|
262
231
|
Provides an AWS Cognito Identity Principal Mapping.
|
|
263
232
|
|
|
264
|
-
## Example Usage
|
|
265
|
-
|
|
266
|
-
```python
|
|
267
|
-
import pulumi
|
|
268
|
-
import pulumi_aws as aws
|
|
269
|
-
import pulumi_std as std
|
|
270
|
-
|
|
271
|
-
example = aws.cognito.UserPool("example",
|
|
272
|
-
name="user pool",
|
|
273
|
-
auto_verified_attributes=["email"])
|
|
274
|
-
example_user_pool_client = aws.cognito.UserPoolClient("example",
|
|
275
|
-
name="client",
|
|
276
|
-
user_pool_id=example.id,
|
|
277
|
-
supported_identity_providers=std.compact(input=["COGNITO"]).result)
|
|
278
|
-
example_identity_pool = aws.cognito.IdentityPool("example",
|
|
279
|
-
identity_pool_name="identity pool",
|
|
280
|
-
allow_unauthenticated_identities=False,
|
|
281
|
-
cognito_identity_providers=[{
|
|
282
|
-
"client_id": example_user_pool_client.id,
|
|
283
|
-
"provider_name": example.endpoint,
|
|
284
|
-
"server_side_token_check": False,
|
|
285
|
-
}])
|
|
286
|
-
example_identity_pool_provider_principal_tag = aws.cognito.IdentityPoolProviderPrincipalTag("example",
|
|
287
|
-
identity_pool_id=example_identity_pool.id,
|
|
288
|
-
identity_provider_name=example.endpoint,
|
|
289
|
-
use_defaults=False,
|
|
290
|
-
principal_tags={
|
|
291
|
-
"test": "value",
|
|
292
|
-
})
|
|
293
|
-
```
|
|
294
|
-
|
|
295
233
|
## Import
|
|
296
234
|
|
|
297
235
|
Using `pulumi import`, import Cognito Identity Pool Roles Attachment using the Identity Pool ID and provider name. For example:
|