Module types/input
This page documents the language specification for the aws package. If you're looking for help working with the inputs, outputs, or functions of aws resources in a Pulumi program, please see the resource documentation for examples and API reference.
namespace acm
namespace acmpca
- CertificateAuthorityCertificateAuthorityConfiguration
- CertificateAuthorityCertificateAuthorityConfigurationSubject
- CertificateAuthorityRevocationConfiguration
- CertificateAuthorityRevocationConfigurationCrlConfiguration
- GetCertificateAuthorityRevocationConfiguration
- GetCertificateAuthorityRevocationConfigurationCrlConfiguration
namespace alb
- ListenerDefaultAction
- ListenerDefaultActionAuthenticateCognito
- ListenerDefaultActionAuthenticateOidc
- ListenerDefaultActionFixedResponse
- ListenerDefaultActionForward
- ListenerDefaultActionForwardStickiness
- ListenerDefaultActionForwardTargetGroup
- ListenerDefaultActionRedirect
- ListenerRuleAction
- ListenerRuleActionAuthenticateCognito
- ListenerRuleActionAuthenticateOidc
- ListenerRuleActionFixedResponse
- ListenerRuleActionForward
- ListenerRuleActionForwardStickiness
- ListenerRuleActionForwardTargetGroup
- ListenerRuleActionRedirect
- ListenerRuleCondition
- ListenerRuleConditionHostHeader
- ListenerRuleConditionHttpHeader
- ListenerRuleConditionHttpRequestMethod
- ListenerRuleConditionPathPattern
- ListenerRuleConditionQueryString
- ListenerRuleConditionSourceIp
- LoadBalancerAccessLogs
- LoadBalancerSubnetMapping
- TargetGroupHealthCheck
- TargetGroupStickiness
namespace apigateway
- AccountThrottleSettings
- DocumentationPartLocation
- DomainNameEndpointConfiguration
- MethodSettingsSettings
- RestApiEndpointConfiguration
- StageAccessLogSettings
- UsagePlanApiStage
- UsagePlanQuotaSettings
- UsagePlanThrottleSettings
namespace apigatewayv2
- ApiCorsConfiguration
- AuthorizerJwtConfiguration
- DomainNameDomainNameConfiguration
- StageAccessLogSettings
- StageDefaultRouteSettings
- StageRouteSetting
namespace appautoscaling
- PolicyStepScalingPolicyConfiguration
- PolicyStepScalingPolicyConfigurationStepAdjustment
- PolicyTargetTrackingScalingPolicyConfiguration
- PolicyTargetTrackingScalingPolicyConfigurationCustomizedMetricSpecification
- PolicyTargetTrackingScalingPolicyConfigurationCustomizedMetricSpecificationDimension
- PolicyTargetTrackingScalingPolicyConfigurationPredefinedMetricSpecification
- ScheduledActionScalableTargetAction
namespace applicationloadbalancing
- ListenerDefaultAction
- ListenerDefaultActionAuthenticateCognito
- ListenerDefaultActionAuthenticateOidc
- ListenerDefaultActionFixedResponse
- ListenerDefaultActionForward
- ListenerDefaultActionForwardStickiness
- ListenerDefaultActionForwardTargetGroup
- ListenerDefaultActionRedirect
- ListenerRuleAction
- ListenerRuleActionAuthenticateCognito
- ListenerRuleActionAuthenticateOidc
- ListenerRuleActionFixedResponse
- ListenerRuleActionForward
- ListenerRuleActionForwardStickiness
- ListenerRuleActionForwardTargetGroup
- ListenerRuleActionRedirect
- ListenerRuleCondition
- ListenerRuleConditionHostHeader
- ListenerRuleConditionHttpHeader
- ListenerRuleConditionHttpRequestMethod
- ListenerRuleConditionPathPattern
- ListenerRuleConditionQueryString
- ListenerRuleConditionSourceIp
- LoadBalancerAccessLogs
- LoadBalancerSubnetMapping
- TargetGroupHealthCheck
- TargetGroupStickiness
namespace appmesh
- MeshSpec
- MeshSpecEgressFilter
- RouteSpec
- RouteSpecHttpRoute
- RouteSpecHttpRouteAction
- RouteSpecHttpRouteActionWeightedTarget
- RouteSpecHttpRouteMatch
- RouteSpecHttpRouteMatchHeader
- RouteSpecHttpRouteMatchHeaderMatch
- RouteSpecHttpRouteMatchHeaderMatchRange
- RouteSpecTcpRoute
- RouteSpecTcpRouteAction
- RouteSpecTcpRouteActionWeightedTarget
- VirtualNodeSpec
- VirtualNodeSpecBackend
- VirtualNodeSpecBackendVirtualService
- VirtualNodeSpecListener
- VirtualNodeSpecListenerHealthCheck
- VirtualNodeSpecListenerPortMapping
- VirtualNodeSpecLogging
- VirtualNodeSpecLoggingAccessLog
- VirtualNodeSpecLoggingAccessLogFile
- VirtualNodeSpecServiceDiscovery
- VirtualNodeSpecServiceDiscoveryAwsCloudMap
- VirtualNodeSpecServiceDiscoveryDns
- VirtualRouterSpec
- VirtualRouterSpecListener
- VirtualRouterSpecListenerPortMapping
- VirtualServiceSpec
- VirtualServiceSpecProvider
- VirtualServiceSpecProviderVirtualNode
- VirtualServiceSpecProviderVirtualRouter
namespace appsync
- DataSourceDynamodbConfig
- DataSourceElasticsearchConfig
- DataSourceHttpConfig
- DataSourceLambdaConfig
- GraphQLApiAdditionalAuthenticationProvider
- GraphQLApiAdditionalAuthenticationProviderOpenidConnectConfig
- GraphQLApiAdditionalAuthenticationProviderUserPoolConfig
- GraphQLApiLogConfig
- GraphQLApiOpenidConnectConfig
- GraphQLApiUserPoolConfig
- ResolverCachingConfig
- ResolverPipelineConfig
namespace athena
- DatabaseEncryptionConfiguration
- WorkgroupConfiguration
- WorkgroupConfigurationResultConfiguration
- WorkgroupConfigurationResultConfigurationEncryptionConfiguration
namespace autoscaling
- GroupInitialLifecycleHook
- GroupLaunchTemplate
- GroupMixedInstancesPolicy
- GroupMixedInstancesPolicyInstancesDistribution
- GroupMixedInstancesPolicyLaunchTemplate
- GroupMixedInstancesPolicyLaunchTemplateLaunchTemplateSpecification
- GroupMixedInstancesPolicyLaunchTemplateOverride
- GroupTag
- PolicyStepAdjustment
- PolicyTargetTrackingConfiguration
- PolicyTargetTrackingConfigurationCustomizedMetricSpecification
- PolicyTargetTrackingConfigurationCustomizedMetricSpecificationMetricDimension
- PolicyTargetTrackingConfigurationPredefinedMetricSpecification
namespace backup
namespace batch
- ComputeEnvironmentComputeResources
- ComputeEnvironmentComputeResourcesLaunchTemplate
- JobDefinitionRetryStrategy
- JobDefinitionTimeout
namespace budgets
namespace cfg
- ConfigurationAggregatorAccountAggregationSource
- ConfigurationAggregatorOrganizationAggregationSource
- DeliveryChannelSnapshotDeliveryProperties
- RecorderRecordingGroup
- RuleScope
- RuleSource
- RuleSourceSourceDetail
namespace cloudfront
- DistributionCustomErrorResponse
- DistributionDefaultCacheBehavior
- DistributionDefaultCacheBehaviorForwardedValues
- DistributionDefaultCacheBehaviorForwardedValuesCookies
- DistributionDefaultCacheBehaviorLambdaFunctionAssociation
- DistributionLoggingConfig
- DistributionOrderedCacheBehavior
- DistributionOrderedCacheBehaviorForwardedValues
- DistributionOrderedCacheBehaviorForwardedValuesCookies
- DistributionOrderedCacheBehaviorLambdaFunctionAssociation
- DistributionOrigin
- DistributionOriginCustomHeader
- DistributionOriginCustomOriginConfig
- DistributionOriginGroup
- DistributionOriginGroupFailoverCriteria
- DistributionOriginGroupMember
- DistributionOriginS3OriginConfig
- DistributionRestrictions
- DistributionRestrictionsGeoRestriction
- DistributionViewerCertificate
namespace cloudhsmv2
namespace cloudtrail
namespace cloudwatch
- EventPermissionCondition
- EventTargetBatchTarget
- EventTargetEcsTarget
- EventTargetEcsTargetNetworkConfiguration
- EventTargetInputTransformer
- EventTargetKinesisTarget
- EventTargetRunCommandTarget
- EventTargetSqsTarget
- LogMetricFilterMetricTransformation
- MetricAlarmMetricQuery
- MetricAlarmMetricQueryMetric
namespace codebuild
- ProjectArtifacts
- ProjectCache
- ProjectEnvironment
- ProjectEnvironmentEnvironmentVariable
- ProjectEnvironmentRegistryCredential
- ProjectLogsConfig
- ProjectLogsConfigCloudwatchLogs
- ProjectLogsConfigS3Logs
- ProjectSecondaryArtifact
- ProjectSecondarySource
- ProjectSecondarySourceAuth
- ProjectSecondarySourceGitSubmodulesConfig
- ProjectSource
- ProjectSourceAuth
- ProjectSourceGitSubmodulesConfig
- ProjectVpcConfig
- WebhookFilterGroup
- WebhookFilterGroupFilter
namespace codecommit
namespace codedeploy
- DeploymentConfigMinimumHealthyHosts
- DeploymentConfigTrafficRoutingConfig
- DeploymentConfigTrafficRoutingConfigTimeBasedCanary
- DeploymentConfigTrafficRoutingConfigTimeBasedLinear
- DeploymentGroupAlarmConfiguration
- DeploymentGroupAutoRollbackConfiguration
- DeploymentGroupBlueGreenDeploymentConfig
- DeploymentGroupBlueGreenDeploymentConfigDeploymentReadyOption
- DeploymentGroupBlueGreenDeploymentConfigGreenFleetProvisioningOption
- DeploymentGroupBlueGreenDeploymentConfigTerminateBlueInstancesOnDeploymentSuccess
- DeploymentGroupDeploymentStyle
- DeploymentGroupEc2TagFilter
- DeploymentGroupEc2TagSet
- DeploymentGroupEc2TagSetEc2TagFilter
- DeploymentGroupEcsService
- DeploymentGroupLoadBalancerInfo
- DeploymentGroupLoadBalancerInfoElbInfo
- DeploymentGroupLoadBalancerInfoTargetGroupInfo
- DeploymentGroupLoadBalancerInfoTargetGroupPairInfo
- DeploymentGroupLoadBalancerInfoTargetGroupPairInfoProdTrafficRoute
- DeploymentGroupLoadBalancerInfoTargetGroupPairInfoTargetGroup
- DeploymentGroupLoadBalancerInfoTargetGroupPairInfoTestTrafficRoute
- DeploymentGroupOnPremisesInstanceTagFilter
- DeploymentGroupTriggerConfiguration
namespace codepipeline
- PipelineArtifactStore
- PipelineArtifactStoreEncryptionKey
- PipelineStage
- PipelineStageAction
- WebhookAuthenticationConfiguration
- WebhookFilter
namespace codestarnotifications
namespace cognito
- IdentityPoolCognitoIdentityProvider
- IdentityPoolRoleAttachmentRoleMapping
- IdentityPoolRoleAttachmentRoleMappingMappingRule
- ResourceServerScope
- UserPoolAdminCreateUserConfig
- UserPoolAdminCreateUserConfigInviteMessageTemplate
- UserPoolClientAnalyticsConfiguration
- UserPoolDeviceConfiguration
- UserPoolEmailConfiguration
- UserPoolLambdaConfig
- UserPoolPasswordPolicy
- UserPoolSchema
- UserPoolSchemaNumberAttributeConstraints
- UserPoolSchemaStringAttributeConstraints
- UserPoolSmsConfiguration
- UserPoolSoftwareTokenMfaConfiguration
- UserPoolUsernameConfiguration
- UserPoolUserPoolAddOns
- UserPoolVerificationMessageTemplate
namespace datasync
namespace dax
namespace directoryservice
namespace dlm
- LifecyclePolicyPolicyDetails
- LifecyclePolicyPolicyDetailsSchedule
- LifecyclePolicyPolicyDetailsScheduleCreateRule
- LifecyclePolicyPolicyDetailsScheduleRetainRule
namespace dms
- EndpointElasticsearchSettings
- EndpointKafkaSettings
- EndpointKinesisSettings
- EndpointMongodbSettings
- EndpointS3Settings
namespace docdb
namespace dynamodb
- GetTableServerSideEncryption
- GlobalTableReplica
- TableAttribute
- TableGlobalSecondaryIndex
- TableLocalSecondaryIndex
- TablePointInTimeRecovery
- TableReplica
- TableServerSideEncryption
- TableTtl
namespace ebs
namespace ec2
- AmiCopyEbsBlockDevice
- AmiCopyEphemeralBlockDevice
- AmiEbsBlockDevice
- AmiEphemeralBlockDevice
- AmiFromInstanceEbsBlockDevice
- AmiFromInstanceEphemeralBlockDevice
- DefaultNetworkAclEgress
- DefaultNetworkAclIngress
- DefaultRouteTableRoute
- DefaultSecurityGroupEgress
- DefaultSecurityGroupIngress
- FleetLaunchTemplateConfig
- FleetLaunchTemplateConfigLaunchTemplateSpecification
- FleetLaunchTemplateConfigOverride
- FleetOnDemandOptions
- FleetSpotOptions
- FleetTargetCapacitySpecification
- GetCoipPoolFilter
- GetCoipPoolsFilter
- GetCustomerGatewayFilter
- GetInstanceFilter
- GetInstancesFilter
- GetInstanceTypeOfferingFilter
- GetInstanceTypeOfferingsFilter
- GetInternetGatewayFilter
- GetLaunchTemplateFilter
- GetLocalGatewayFilter
- GetLocalGatewayRouteTableFilter
- GetLocalGatewayRouteTablesFilter
- GetLocalGatewaysFilter
- GetNatGatewayFilter
- GetNetworkAclsFilter
- GetNetworkInterfaceFilter
- GetNetworkInterfacesFilter
- GetRouteTableFilter
- GetRouteTablesFilter
- GetSecurityGroupFilter
- GetSecurityGroupsFilter
- GetSubnetFilter
- GetSubnetIdsFilter
- GetVpcDhcpOptionsFilter
- GetVpcEndpointFilter
- GetVpcEndpointServiceFilter
- GetVpcFilter
- GetVpcPeeringConnectionFilter
- GetVpcsFilter
- GetVpnGatewayFilter
- InstanceCreditSpecification
- InstanceEbsBlockDevice
- InstanceEphemeralBlockDevice
- InstanceMetadataOptions
- InstanceNetworkInterface
- InstanceRootBlockDevice
- LaunchConfigurationEbsBlockDevice
- LaunchConfigurationEphemeralBlockDevice
- LaunchConfigurationRootBlockDevice
- LaunchTemplateBlockDeviceMapping
- LaunchTemplateBlockDeviceMappingEbs
- LaunchTemplateCapacityReservationSpecification
- LaunchTemplateCapacityReservationSpecificationCapacityReservationTarget
- LaunchTemplateCpuOptions
- LaunchTemplateCreditSpecification
- LaunchTemplateElasticGpuSpecification
- LaunchTemplateElasticInferenceAccelerator
- LaunchTemplateHibernationOptions
- LaunchTemplateIamInstanceProfile
- LaunchTemplateInstanceMarketOptions
- LaunchTemplateInstanceMarketOptionsSpotOptions
- LaunchTemplateLicenseSpecification
- LaunchTemplateMetadataOptions
- LaunchTemplateMonitoring
- LaunchTemplateNetworkInterface
- LaunchTemplatePlacement
- LaunchTemplateTagSpecification
- NetworkAclEgress
- NetworkAclIngress
- NetworkInterfaceAttachment
- PeeringConnectionOptionsAccepter
- PeeringConnectionOptionsRequester
- RouteTableRoute
- SecurityGroupEgress
- SecurityGroupIngress
- SpotFleetRequestLaunchSpecification
- SpotFleetRequestLaunchSpecificationEbsBlockDevice
- SpotFleetRequestLaunchSpecificationEphemeralBlockDevice
- SpotFleetRequestLaunchSpecificationRootBlockDevice
- SpotFleetRequestLaunchTemplateConfig
- SpotFleetRequestLaunchTemplateConfigLaunchTemplateSpecification
- SpotFleetRequestLaunchTemplateConfigOverride
- SpotInstanceRequestCreditSpecification
- SpotInstanceRequestEbsBlockDevice
- SpotInstanceRequestEphemeralBlockDevice
- SpotInstanceRequestMetadataOptions
- SpotInstanceRequestNetworkInterface
- SpotInstanceRequestRootBlockDevice
- TrafficMirrorFilterRuleDestinationPortRange
- TrafficMirrorFilterRuleSourcePortRange
- VpcEndpointDnsEntry
- VpcPeeringConnectionAccepter
- VpcPeeringConnectionAccepterAccepter
- VpcPeeringConnectionAccepterRequester
- VpcPeeringConnectionRequester
- VpnConnectionRoute
- VpnConnectionVgwTelemetry
namespace ec2clientvpn
namespace ec2transitgateway
- GetDirectConnectGatewayAttachmentFilter
- GetPeeringAttachmentFilter
- GetRouteTableFilter
- GetTransitGatewayFilter
- GetVpcAttachmentFilter
- GetVpnAttachmentFilter
namespace ecr
namespace ecs
- CapacityProviderAutoScalingGroupProvider
- CapacityProviderAutoScalingGroupProviderManagedScaling
- ClusterDefaultCapacityProviderStrategy
- ClusterSetting
- ServiceCapacityProviderStrategy
- ServiceDeploymentController
- ServiceLoadBalancer
- ServiceNetworkConfiguration
- ServiceOrderedPlacementStrategy
- ServicePlacementConstraint
- ServiceServiceRegistries
- TaskDefinitionInferenceAccelerator
- TaskDefinitionPlacementConstraint
- TaskDefinitionProxyConfiguration
- TaskDefinitionVolume
- TaskDefinitionVolumeDockerVolumeConfiguration
- TaskDefinitionVolumeEfsVolumeConfiguration
namespace efs
- AccessPointPosixUser
- AccessPointRootDirectory
- AccessPointRootDirectoryCreationInfo
- FileSystemLifecyclePolicy
namespace eks
- ClusterCertificateAuthority
- ClusterEncryptionConfig
- ClusterEncryptionConfigProvider
- ClusterIdentity
- ClusterIdentityOidc
- ClusterVpcConfig
- FargateProfileSelector
- NodeGroupRemoteAccess
- NodeGroupResource
- NodeGroupResourceAutoscalingGroup
- NodeGroupScalingConfig
namespace elasticache
namespace elasticbeanstalk
namespace elasticloadbalancing
- LoadBalancerAccessLogs
- LoadBalancerHealthCheck
- LoadBalancerListener
- LoadBalancerPolicyPolicyAttribute
- SslNegotiationPolicyAttribute
namespace elasticloadbalancingv2
- ListenerDefaultAction
- ListenerDefaultActionAuthenticateCognito
- ListenerDefaultActionAuthenticateOidc
- ListenerDefaultActionFixedResponse
- ListenerDefaultActionForward
- ListenerDefaultActionForwardStickiness
- ListenerDefaultActionForwardTargetGroup
- ListenerDefaultActionRedirect
- ListenerRuleAction
- ListenerRuleActionAuthenticateCognito
- ListenerRuleActionAuthenticateOidc
- ListenerRuleActionFixedResponse
- ListenerRuleActionForward
- ListenerRuleActionForwardStickiness
- ListenerRuleActionForwardTargetGroup
- ListenerRuleActionRedirect
- ListenerRuleCondition
- ListenerRuleConditionHostHeader
- ListenerRuleConditionHttpHeader
- ListenerRuleConditionHttpRequestMethod
- ListenerRuleConditionPathPattern
- ListenerRuleConditionQueryString
- ListenerRuleConditionSourceIp
- LoadBalancerAccessLogs
- LoadBalancerSubnetMapping
- TargetGroupHealthCheck
- TargetGroupStickiness
namespace elasticsearch
- DomainClusterConfig
- DomainClusterConfigZoneAwarenessConfig
- DomainCognitoOptions
- DomainDomainEndpointOptions
- DomainEbsOptions
- DomainEncryptAtRest
- DomainLogPublishingOption
- DomainNodeToNodeEncryption
- DomainSnapshotOptions
- DomainVpcOptions
namespace elastictranscoder
- PipelineContentConfig
- PipelineContentConfigPermission
- PipelineNotifications
- PipelineThumbnailConfig
- PipelineThumbnailConfigPermission
- PresetAudio
- PresetAudioCodecOptions
- PresetThumbnails
- PresetVideo
- PresetVideoWatermark
namespace elb
- LoadBalancerAccessLogs
- LoadBalancerHealthCheck
- LoadBalancerListener
- LoadBalancerPolicyPolicyAttribute
- SslNegotiationPolicyAttribute
namespace emr
- ClusterBootstrapAction
- ClusterCoreInstanceGroup
- ClusterCoreInstanceGroupEbsConfig
- ClusterEc2Attributes
- ClusterInstanceGroup
- ClusterInstanceGroupEbsConfig
- ClusterKerberosAttributes
- ClusterMasterInstanceGroup
- ClusterMasterInstanceGroupEbsConfig
- ClusterStep
- ClusterStepHadoopJarStep
- InstanceGroupEbsConfig
namespace fsx
namespace gamelift
- AliasRoutingStrategy
- BuildStorageLocation
- FleetEc2InboundPermission
- FleetResourceCreationLimitPolicy
- FleetRuntimeConfiguration
- FleetRuntimeConfigurationServerProcess
- GameSessionQueuePlayerLatencyPolicy
namespace glacier
namespace globalaccelerator
namespace glue
- CatalogTablePartitionKey
- CatalogTableStorageDescriptor
- CatalogTableStorageDescriptorColumn
- CatalogTableStorageDescriptorSerDeInfo
- CatalogTableStorageDescriptorSkewedInfo
- CatalogTableStorageDescriptorSortColumn
- ClassifierCsvClassifier
- ClassifierGrokClassifier
- ClassifierJsonClassifier
- ClassifierXmlClassifier
- ConnectionPhysicalConnectionRequirements
- CrawlerCatalogTarget
- CrawlerDynamodbTarget
- CrawlerJdbcTarget
- CrawlerS3Target
- CrawlerSchemaChangePolicy
- GetScriptDagEdge
- GetScriptDagNode
- GetScriptDagNodeArg
- JobCommand
- JobExecutionProperty
- JobNotificationProperty
- SecurityConfigurationEncryptionConfiguration
- SecurityConfigurationEncryptionConfigurationCloudwatchEncryption
- SecurityConfigurationEncryptionConfigurationJobBookmarksEncryption
- SecurityConfigurationEncryptionConfigurationS3Encryption
- TriggerAction
- TriggerPredicate
- TriggerPredicateCondition
namespace iam
- GetPolicyDocumentStatement
- GetPolicyDocumentStatementCondition
- GetPolicyDocumentStatementNotPrincipal
- GetPolicyDocumentStatementPrincipal
namespace iot
- ThingTypeProperties
- TopicRuleCloudwatchAlarm
- TopicRuleCloudwatchMetric
- TopicRuleDynamodb
- TopicRuleDynamodbv2
- TopicRuleDynamodbv2PutItem
- TopicRuleElasticsearch
- TopicRuleFirehose
- TopicRuleIotAnalytic
- TopicRuleIotEvent
- TopicRuleKinesis
- TopicRuleLambda
- TopicRuleRepublish
- TopicRuleS3
- TopicRuleSns
- TopicRuleSqs
- TopicRuleStepFunction
namespace kinesis
- AnalyticsApplicationCloudwatchLoggingOptions
- AnalyticsApplicationInputs
- AnalyticsApplicationInputsKinesisFirehose
- AnalyticsApplicationInputsKinesisStream
- AnalyticsApplicationInputsParallelism
- AnalyticsApplicationInputsProcessingConfiguration
- AnalyticsApplicationInputsProcessingConfigurationLambda
- AnalyticsApplicationInputsSchema
- AnalyticsApplicationInputsSchemaRecordColumn
- AnalyticsApplicationInputsSchemaRecordFormat
- AnalyticsApplicationInputsSchemaRecordFormatMappingParameters
- AnalyticsApplicationInputsSchemaRecordFormatMappingParametersCsv
- AnalyticsApplicationInputsSchemaRecordFormatMappingParametersJson
- AnalyticsApplicationInputsStartingPositionConfiguration
- AnalyticsApplicationOutput
- AnalyticsApplicationOutputKinesisFirehose
- AnalyticsApplicationOutputKinesisStream
- AnalyticsApplicationOutputLambda
- AnalyticsApplicationOutputSchema
- AnalyticsApplicationReferenceDataSources
- AnalyticsApplicationReferenceDataSourcesS3
- AnalyticsApplicationReferenceDataSourcesSchema
- AnalyticsApplicationReferenceDataSourcesSchemaRecordColumn
- AnalyticsApplicationReferenceDataSourcesSchemaRecordFormat
- AnalyticsApplicationReferenceDataSourcesSchemaRecordFormatMappingParameters
- AnalyticsApplicationReferenceDataSourcesSchemaRecordFormatMappingParametersCsv
- AnalyticsApplicationReferenceDataSourcesSchemaRecordFormatMappingParametersJson
- FirehoseDeliveryStreamElasticsearchConfiguration
- FirehoseDeliveryStreamElasticsearchConfigurationCloudwatchLoggingOptions
- FirehoseDeliveryStreamElasticsearchConfigurationProcessingConfiguration
- FirehoseDeliveryStreamElasticsearchConfigurationProcessingConfigurationProcessor
- FirehoseDeliveryStreamElasticsearchConfigurationProcessingConfigurationProcessorParameter
- FirehoseDeliveryStreamExtendedS3Configuration
- FirehoseDeliveryStreamExtendedS3ConfigurationCloudwatchLoggingOptions
- FirehoseDeliveryStreamExtendedS3ConfigurationDataFormatConversionConfiguration
- FirehoseDeliveryStreamExtendedS3ConfigurationDataFormatConversionConfigurationInputFormatConfiguration
- FirehoseDeliveryStreamExtendedS3ConfigurationDataFormatConversionConfigurationInputFormatConfigurationDeserializer
- FirehoseDeliveryStreamExtendedS3ConfigurationDataFormatConversionConfigurationInputFormatConfigurationDeserializerHiveJsonSerDe
- FirehoseDeliveryStreamExtendedS3ConfigurationDataFormatConversionConfigurationInputFormatConfigurationDeserializerOpenXJsonSerDe
- FirehoseDeliveryStreamExtendedS3ConfigurationDataFormatConversionConfigurationOutputFormatConfiguration
- FirehoseDeliveryStreamExtendedS3ConfigurationDataFormatConversionConfigurationOutputFormatConfigurationSerializer
- FirehoseDeliveryStreamExtendedS3ConfigurationDataFormatConversionConfigurationOutputFormatConfigurationSerializerOrcSerDe
- FirehoseDeliveryStreamExtendedS3ConfigurationDataFormatConversionConfigurationOutputFormatConfigurationSerializerParquetSerDe
- FirehoseDeliveryStreamExtendedS3ConfigurationDataFormatConversionConfigurationSchemaConfiguration
- FirehoseDeliveryStreamExtendedS3ConfigurationProcessingConfiguration
- FirehoseDeliveryStreamExtendedS3ConfigurationProcessingConfigurationProcessor
- FirehoseDeliveryStreamExtendedS3ConfigurationProcessingConfigurationProcessorParameter
- FirehoseDeliveryStreamExtendedS3ConfigurationS3BackupConfiguration
- FirehoseDeliveryStreamExtendedS3ConfigurationS3BackupConfigurationCloudwatchLoggingOptions
- FirehoseDeliveryStreamKinesisSourceConfiguration
- FirehoseDeliveryStreamRedshiftConfiguration
- FirehoseDeliveryStreamRedshiftConfigurationCloudwatchLoggingOptions
- FirehoseDeliveryStreamRedshiftConfigurationProcessingConfiguration
- FirehoseDeliveryStreamRedshiftConfigurationProcessingConfigurationProcessor
- FirehoseDeliveryStreamRedshiftConfigurationProcessingConfigurationProcessorParameter
- FirehoseDeliveryStreamRedshiftConfigurationS3BackupConfiguration
- FirehoseDeliveryStreamRedshiftConfigurationS3BackupConfigurationCloudwatchLoggingOptions
- FirehoseDeliveryStreamS3Configuration
- FirehoseDeliveryStreamS3ConfigurationCloudwatchLoggingOptions
- FirehoseDeliveryStreamServerSideEncryption
- FirehoseDeliveryStreamSplunkConfiguration
- FirehoseDeliveryStreamSplunkConfigurationCloudwatchLoggingOptions
- FirehoseDeliveryStreamSplunkConfigurationProcessingConfiguration
- FirehoseDeliveryStreamSplunkConfigurationProcessingConfigurationProcessor
- FirehoseDeliveryStreamSplunkConfigurationProcessingConfigurationProcessorParameter
namespace kms
namespace lambda
- AliasRoutingConfig
- EventSourceMappingDestinationConfig
- EventSourceMappingDestinationConfigOnFailure
- FunctionDeadLetterConfig
- FunctionEnvironment
- FunctionEventInvokeConfigDestinationConfig
- FunctionEventInvokeConfigDestinationConfigOnFailure
- FunctionEventInvokeConfigDestinationConfigOnSuccess
- FunctionFileSystemConfig
- FunctionTracingConfig
- FunctionVpcConfig
namespace lb
- ListenerDefaultAction
- ListenerDefaultActionAuthenticateCognito
- ListenerDefaultActionAuthenticateOidc
- ListenerDefaultActionFixedResponse
- ListenerDefaultActionForward
- ListenerDefaultActionForwardStickiness
- ListenerDefaultActionForwardTargetGroup
- ListenerDefaultActionRedirect
- ListenerRuleAction
- ListenerRuleActionAuthenticateCognito
- ListenerRuleActionAuthenticateOidc
- ListenerRuleActionFixedResponse
- ListenerRuleActionForward
- ListenerRuleActionForwardStickiness
- ListenerRuleActionForwardTargetGroup
- ListenerRuleActionRedirect
- ListenerRuleCondition
- ListenerRuleConditionHostHeader
- ListenerRuleConditionHttpHeader
- ListenerRuleConditionHttpRequestMethod
- ListenerRuleConditionPathPattern
- ListenerRuleConditionQueryString
- ListenerRuleConditionSourceIp
- LoadBalancerAccessLogs
- LoadBalancerSubnetMapping
- TargetGroupHealthCheck
- TargetGroupStickiness
namespace macie
namespace mediaconvert
namespace mediapackage
namespace mq
- BrokerConfiguration
- BrokerEncryptionOptions
- BrokerInstance
- BrokerLogs
- BrokerMaintenanceWindowStartTime
- BrokerUser
- GetBrokerLogs
namespace msk
- ClusterBrokerNodeGroupInfo
- ClusterClientAuthentication
- ClusterClientAuthenticationTls
- ClusterConfigurationInfo
- ClusterEncryptionInfo
- ClusterEncryptionInfoEncryptionInTransit
- ClusterLoggingInfo
- ClusterLoggingInfoBrokerLogs
- ClusterLoggingInfoBrokerLogsCloudwatchLogs
- ClusterLoggingInfoBrokerLogsFirehose
- ClusterLoggingInfoBrokerLogsS3
- ClusterOpenMonitoring
- ClusterOpenMonitoringPrometheus
- ClusterOpenMonitoringPrometheusJmxExporter
- ClusterOpenMonitoringPrometheusNodeExporter
namespace neptune
namespace opsworks
- ApplicationAppSource
- ApplicationEnvironment
- ApplicationSslConfiguration
- CustomLayerEbsVolume
- GangliaLayerEbsVolume
- HaproxyLayerEbsVolume
- InstanceEbsBlockDevice
- InstanceEphemeralBlockDevice
- InstanceRootBlockDevice
- JavaAppLayerEbsVolume
- MemcachedLayerEbsVolume
- MysqlLayerEbsVolume
- NodejsAppLayerEbsVolume
- PhpAppLayerEbsVolume
- RailsAppLayerEbsVolume
- StackCustomCookbooksSource
- StaticWebLayerEbsVolume
namespace organizations
- OrganizationAccount
- OrganizationalUnitAccount
- OrganizationNonMasterAccount
- OrganizationRoot
- OrganizationRootPolicyType
namespace pinpoint
namespace pricing
namespace ram
namespace rds
- ClusterParameterGroupParameter
- ClusterS3Import
- ClusterScalingConfiguration
- InstanceS3Import
- OptionGroupOption
- OptionGroupOptionOptionSetting
- ParameterGroupParameter
- SecurityGroupIngress
namespace redshift
namespace resourcegroups
namespace route53
- RecordAlias
- RecordFailoverRoutingPolicy
- RecordGeolocationRoutingPolicy
- RecordLatencyRoutingPolicy
- RecordWeightedRoutingPolicy
- ResolverEndpointIpAddress
- ResolverRuleTargetIp
- ZoneVpc
namespace s3
- AccessPointPublicAccessBlockConfiguration
- AccessPointVpcConfiguration
- AnalyticsConfigurationFilter
- AnalyticsConfigurationStorageClassAnalysis
- AnalyticsConfigurationStorageClassAnalysisDataExport
- AnalyticsConfigurationStorageClassAnalysisDataExportDestination
- AnalyticsConfigurationStorageClassAnalysisDataExportDestinationS3BucketDestination
- BucketCorsRule
- BucketGrant
- BucketLifecycleRule
- BucketLifecycleRuleExpiration
- BucketLifecycleRuleNoncurrentVersionExpiration
- BucketLifecycleRuleNoncurrentVersionTransition
- BucketLifecycleRuleTransition
- BucketLogging
- BucketMetricFilter
- BucketNotificationLambdaFunction
- BucketNotificationQueue
- BucketNotificationTopic
- BucketObjectLockConfiguration
- BucketObjectLockConfigurationRule
- BucketObjectLockConfigurationRuleDefaultRetention
- BucketReplicationConfiguration
- BucketReplicationConfigurationRule
- BucketReplicationConfigurationRuleDestination
- BucketReplicationConfigurationRuleDestinationAccessControlTranslation
- BucketReplicationConfigurationRuleFilter
- BucketReplicationConfigurationRuleSourceSelectionCriteria
- BucketReplicationConfigurationRuleSourceSelectionCriteriaSseKmsEncryptedObjects
- BucketServerSideEncryptionConfiguration
- BucketServerSideEncryptionConfigurationRule
- BucketServerSideEncryptionConfigurationRuleApplyServerSideEncryptionByDefault
- BucketVersioning
- BucketWebsite
- InventoryDestination
- InventoryDestinationBucket
- InventoryDestinationBucketEncryption
- InventoryDestinationBucketEncryptionSseKms
- InventoryDestinationBucketEncryptionSseS3
- InventoryFilter
- InventorySchedule
namespace sagemaker
namespace secretsmanager
namespace servicediscovery
namespace ses
- EventDestinationCloudwatchDestination
- EventDestinationKinesisDestination
- EventDestinationSnsDestination
- ReceiptRuleAddHeaderAction
- ReceiptRuleBounceAction
- ReceiptRuleLambdaAction
- ReceiptRuleS3Action
- ReceiptRuleSnsAction
- ReceiptRuleStopAction
- ReceiptRuleWorkmailAction
namespace ssm
- AssociationOutputLocation
- AssociationTarget
- DocumentAttachmentsSource
- DocumentParameter
- MaintenanceWindowTargetTarget
- MaintenanceWindowTaskLoggingInfo
- MaintenanceWindowTaskTarget
- MaintenanceWindowTaskTaskInvocationParameters
- MaintenanceWindowTaskTaskInvocationParametersAutomationParameters
- MaintenanceWindowTaskTaskInvocationParametersAutomationParametersParameter
- MaintenanceWindowTaskTaskInvocationParametersLambdaParameters
- MaintenanceWindowTaskTaskInvocationParametersRunCommandParameters
- MaintenanceWindowTaskTaskInvocationParametersRunCommandParametersNotificationConfig
- MaintenanceWindowTaskTaskInvocationParametersRunCommandParametersParameter
- MaintenanceWindowTaskTaskInvocationParametersStepFunctionsParameters
- MaintenanceWindowTaskTaskParameter
- PatchBaselineApprovalRule
- PatchBaselineApprovalRulePatchFilter
- PatchBaselineGlobalFilter
- ResourceDataSyncS3Destination
namespace storagegateway
namespace transfer
namespace waf
- ByteMatchSetByteMatchTuple
- ByteMatchSetByteMatchTupleFieldToMatch
- GeoMatchSetGeoMatchConstraint
- IpSetIpSetDescriptor
- RateBasedRulePredicate
- RegexMatchSetRegexMatchTuple
- RegexMatchSetRegexMatchTupleFieldToMatch
- RuleGroupActivatedRule
- RuleGroupActivatedRuleAction
- RulePredicate
- SizeConstraintSetSizeConstraint
- SizeConstraintSetSizeConstraintFieldToMatch
- SqlInjectionMatchSetSqlInjectionMatchTuple
- SqlInjectionMatchSetSqlInjectionMatchTupleFieldToMatch
- WebAclDefaultAction
- WebAclLoggingConfiguration
- WebAclLoggingConfigurationRedactedFields
- WebAclLoggingConfigurationRedactedFieldsFieldToMatch
- WebAclRule
- WebAclRuleAction
- WebAclRuleOverrideAction
- XssMatchSetXssMatchTuple
- XssMatchSetXssMatchTupleFieldToMatch
namespace wafregional
- ByteMatchSetByteMatchTuple
- ByteMatchSetByteMatchTupleFieldToMatch
- GeoMatchSetGeoMatchConstraint
- IpSetIpSetDescriptor
- RateBasedRulePredicate
- RegexMatchSetRegexMatchTuple
- RegexMatchSetRegexMatchTupleFieldToMatch
- RuleGroupActivatedRule
- RuleGroupActivatedRuleAction
- RulePredicate
- SizeConstraintSetSizeConstraint
- SizeConstraintSetSizeConstraintFieldToMatch
- SqlInjectionMatchSetSqlInjectionMatchTuple
- SqlInjectionMatchSetSqlInjectionMatchTupleFieldToMatch
- WebAclDefaultAction
- WebAclLoggingConfiguration
- WebAclLoggingConfigurationRedactedFields
- WebAclLoggingConfigurationRedactedFieldsFieldToMatch
- WebAclRule
- WebAclRuleAction
- WebAclRuleOverrideAction
- XssMatchSetXssMatchTuple
- XssMatchSetXssMatchTupleFieldToMatch
namespace wafv2
namespace worklink
namespace workspaces
APIs
- GetAmiFilter
- GetAmiIdsFilter
- GetAutoscalingGroupsFilter
- GetAvailabilityZoneFilter
- GetAvailabilityZonesFilter
- GetElasticIpFilter
- GetPrefixListFilter
- GetRegionsFilter
- ProviderAssumeRole
- ProviderEndpoint
- ProviderIgnoreTags
namespace acm
interface CertificateDomainValidationOption
interface CertificateDomainValidationOptionproperty domainName
domainName?: pulumi.Input<string>;A domain name for which the certificate should be issued
property resourceRecordName
resourceRecordName?: pulumi.Input<string>;The name of the DNS record to create to validate the certificate
property resourceRecordType
resourceRecordType?: pulumi.Input<string>;The type of DNS record to create
property resourceRecordValue
resourceRecordValue?: pulumi.Input<string>;The value the DNS record needs to have
interface CertificateOptions
interface CertificateOptionsproperty certificateTransparencyLoggingPreference
certificateTransparencyLoggingPreference?: pulumi.Input<string>;Specifies whether certificate details should be added to a certificate transparency log. Valid values are ENABLED or DISABLED. See https://docs.aws.amazon.com/acm/latest/userguide/acm-concepts.html#concept-transparency for more details.
namespace acmpca
interface CertificateAuthorityCertificateAuthorityConfiguration
interface CertificateAuthorityCertificateAuthorityConfigurationproperty keyAlgorithm
keyAlgorithm: pulumi.Input<string>;Type of the public key algorithm and size, in bits, of the key pair that your key pair creates when it issues a certificate. Valid values can be found in the ACM PCA Documentation.
property signingAlgorithm
signingAlgorithm: pulumi.Input<string>;Name of the algorithm your private CA uses to sign certificate requests. Valid values can be found in the ACM PCA Documentation.
property subject
subject: pulumi.Input<CertificateAuthorityCertificateAuthorityConfigurationSubject>;Nested argument that contains X.500 distinguished name information. At least one nested attribute must be specified.
interface CertificateAuthorityCertificateAuthorityConfigurationSubject
interface CertificateAuthorityCertificateAuthorityConfigurationSubjectproperty commonName
commonName?: pulumi.Input<string>;Fully qualified domain name (FQDN) associated with the certificate subject.
property country
country?: pulumi.Input<string>;Two digit code that specifies the country in which the certificate subject located.
property distinguishedNameQualifier
distinguishedNameQualifier?: pulumi.Input<string>;Disambiguating information for the certificate subject.
property generationQualifier
generationQualifier?: pulumi.Input<string>;Typically a qualifier appended to the name of an individual. Examples include Jr. for junior, Sr. for senior, and III for third.
property givenName
givenName?: pulumi.Input<string>;First name.
property initials
initials?: pulumi.Input<string>;Concatenation that typically contains the first letter of the givenName, the first letter of the middle name if one exists, and the first letter of the surname.
property locality
locality?: pulumi.Input<string>;The locality (such as a city or town) in which the certificate subject is located.
property organization
organization?: pulumi.Input<string>;Legal name of the organization with which the certificate subject is affiliated.
property organizationalUnit
organizationalUnit?: pulumi.Input<string>;A subdivision or unit of the organization (such as sales or finance) with which the certificate subject is affiliated.
property pseudonym
pseudonym?: pulumi.Input<string>;Typically a shortened version of a longer givenName. For example, Jonathan is often shortened to John. Elizabeth is often shortened to Beth, Liz, or Eliza.
property state
state?: pulumi.Input<string>;State in which the subject of the certificate is located.
property surname
surname?: pulumi.Input<string>;Family name. In the US and the UK for example, the surname of an individual is ordered last. In Asian cultures the surname is typically ordered first.
property title
title?: pulumi.Input<string>;A title such as Mr. or Ms. which is pre-pended to the name to refer formally to the certificate subject.
interface CertificateAuthorityRevocationConfiguration
interface CertificateAuthorityRevocationConfigurationproperty crlConfiguration
crlConfiguration?: pulumi.Input<CertificateAuthorityRevocationConfigurationCrlConfiguration>;Nested argument containing configuration of the certificate revocation list (CRL), if any, maintained by the certificate authority. Defined below.
interface CertificateAuthorityRevocationConfigurationCrlConfiguration
interface CertificateAuthorityRevocationConfigurationCrlConfigurationproperty customCname
customCname?: pulumi.Input<string>;Name inserted into the certificate CRL Distribution Points extension that enables the use of an alias for the CRL distribution point. Use this value if you don’t want the name of your S3 bucket to be public.
property enabled
enabled?: pulumi.Input<boolean>;Boolean value that specifies whether certificate revocation lists (CRLs) are enabled. Defaults to false.
property expirationInDays
expirationInDays: pulumi.Input<number>;Number of days until a certificate expires. Must be between 1 and 5000.
property s3BucketName
s3BucketName?: pulumi.Input<string>;Name of the S3 bucket that contains the CRL. If you do not provide a value for the customCname argument, the name of your S3 bucket is placed into the CRL Distribution Points extension of the issued certificate. You must specify a bucket policy that allows ACM PCA to write the CRL to your bucket.
interface GetCertificateAuthorityRevocationConfiguration
interface GetCertificateAuthorityRevocationConfigurationproperty crlConfigurations
crlConfigurations?: GetCertificateAuthorityRevocationConfigurationCrlConfiguration[];interface GetCertificateAuthorityRevocationConfigurationCrlConfiguration
interface GetCertificateAuthorityRevocationConfigurationCrlConfigurationproperty customCname
customCname?: undefined | string;property enabled
enabled?: undefined | false | true;property expirationInDays
expirationInDays?: undefined | number;property s3BucketName
s3BucketName?: undefined | string;namespace alb
interface ListenerDefaultAction
interface ListenerDefaultActionproperty authenticateCognito
authenticateCognito?: pulumi.Input<ListenerDefaultActionAuthenticateCognito>;property authenticateOidc
authenticateOidc?: pulumi.Input<ListenerDefaultActionAuthenticateOidc>;property fixedResponse
fixedResponse?: pulumi.Input<ListenerDefaultActionFixedResponse>;Information for creating an action that returns a custom HTTP response. Required if type is fixed-response.
property forward
forward?: pulumi.Input<ListenerDefaultActionForward>;Information for creating an action that distributes requests among one or more target groups. Specify only if type is forward. If you specify both forward block and targetGroupArn attribute, you can specify only one target group using forward and it must be the same target group specified in targetGroupArn.
property order
order?: pulumi.Input<number>;property redirect
redirect?: pulumi.Input<ListenerDefaultActionRedirect>;Information for creating a redirect action. Required if type is redirect.
property targetGroupArn
targetGroupArn?: pulumi.Input<string>;The ARN of the Target Group to which to route traffic. Specify only if type is forward and you want to route to a single target group. To route to one or more target groups, use a forward block instead.
property type
type: pulumi.Input<string>;The type of routing action. Valid values are forward, redirect, fixed-response, authenticate-cognito and authenticate-oidc.
interface ListenerDefaultActionAuthenticateCognito
interface ListenerDefaultActionAuthenticateCognitoproperty authenticationRequestExtraParams
authenticationRequestExtraParams?: pulumi.Input<{[key: string]: any}>;The query parameters to include in the redirect request to the authorization endpoint. Max: 10.
property onUnauthenticatedRequest
onUnauthenticatedRequest?: pulumi.Input<string>;The behavior if the user is not authenticated. Valid values: deny, allow and authenticate
property scope
scope?: pulumi.Input<string>;The set of user claims to be requested from the IdP.
property sessionCookieName
sessionCookieName?: pulumi.Input<string>;The name of the cookie used to maintain session information.
property sessionTimeout
sessionTimeout?: pulumi.Input<number>;The maximum duration of the authentication session, in seconds.
property userPoolArn
userPoolArn: pulumi.Input<string>;The ARN of the Cognito user pool.
property userPoolClientId
userPoolClientId: pulumi.Input<string>;The ID of the Cognito user pool client.
property userPoolDomain
userPoolDomain: pulumi.Input<string>;The domain prefix or fully-qualified domain name of the Cognito user pool.
interface ListenerDefaultActionAuthenticateOidc
interface ListenerDefaultActionAuthenticateOidcproperty authenticationRequestExtraParams
authenticationRequestExtraParams?: pulumi.Input<{[key: string]: any}>;The query parameters to include in the redirect request to the authorization endpoint. Max: 10.
property authorizationEndpoint
authorizationEndpoint: pulumi.Input<string>;The authorization endpoint of the IdP.
property clientId
clientId: pulumi.Input<string>;The OAuth 2.0 client identifier.
property clientSecret
clientSecret: pulumi.Input<string>;The OAuth 2.0 client secret.
property issuer
issuer: pulumi.Input<string>;The OIDC issuer identifier of the IdP.
property onUnauthenticatedRequest
onUnauthenticatedRequest?: pulumi.Input<string>;The behavior if the user is not authenticated. Valid values: deny, allow and authenticate
property scope
scope?: pulumi.Input<string>;The set of user claims to be requested from the IdP.
property sessionCookieName
sessionCookieName?: pulumi.Input<string>;The name of the cookie used to maintain session information.
property sessionTimeout
sessionTimeout?: pulumi.Input<number>;The maximum duration of the authentication session, in seconds.
property tokenEndpoint
tokenEndpoint: pulumi.Input<string>;The token endpoint of the IdP.
property userInfoEndpoint
userInfoEndpoint: pulumi.Input<string>;The user info endpoint of the IdP.
interface ListenerDefaultActionFixedResponse
interface ListenerDefaultActionFixedResponseproperty contentType
contentType: pulumi.Input<string>;The content type. Valid values are text/plain, text/css, text/html, application/javascript and application/json.
property messageBody
messageBody?: pulumi.Input<string>;The message body.
property statusCode
statusCode?: pulumi.Input<string>;The HTTP response code. Valid values are 2XX, 4XX, or 5XX.
interface ListenerDefaultActionForward
interface ListenerDefaultActionForwardproperty stickiness
stickiness?: pulumi.Input<ListenerDefaultActionForwardStickiness>;The target group stickiness for the rule.
property targetGroups
targetGroups: pulumi.Input<pulumi.Input<ListenerDefaultActionForwardTargetGroup>[]>;One or more target groups block.
interface ListenerDefaultActionForwardStickiness
interface ListenerDefaultActionForwardStickinessproperty duration
duration: pulumi.Input<number>;The time period, in seconds, during which requests from a client should be routed to the same target group. The range is 1-604800 seconds (7 days).
property enabled
enabled?: pulumi.Input<boolean>;Indicates whether target group stickiness is enabled.
interface ListenerDefaultActionForwardTargetGroup
interface ListenerDefaultActionForwardTargetGroupproperty arn
arn: pulumi.Input<string>;The Amazon Resource Name (ARN) of the target group.
property weight
weight?: pulumi.Input<number>;The weight. The range is 0 to 999.
interface ListenerDefaultActionRedirect
interface ListenerDefaultActionRedirectproperty host
host?: pulumi.Input<string>;The hostname. This component is not percent-encoded. The hostname can contain #{host}. Defaults to #{host}.
property path
path?: pulumi.Input<string>;The absolute path, starting with the leading “/”. This component is not percent-encoded. The path can contain #{host}, #{path}, and #{port}. Defaults to /#{path}.
property port
port?: pulumi.Input<string>;The port. Specify a value from 1 to 65535 or #{port}. Defaults to #{port}.
property protocol
protocol?: pulumi.Input<string>;The protocol. Valid values are HTTP, HTTPS, or #{protocol}. Defaults to #{protocol}.
property query
query?: pulumi.Input<string>;The query parameters, URL-encoded when necessary, but not percent-encoded. Do not include the leading “?”. Defaults to #{query}.
property statusCode
statusCode: pulumi.Input<string>;The HTTP redirect code. The redirect is either permanent (HTTP_301) or temporary (HTTP_302).
interface ListenerRuleAction
interface ListenerRuleActionproperty authenticateCognito
authenticateCognito?: pulumi.Input<ListenerRuleActionAuthenticateCognito>;Information for creating an authenticate action using Cognito. Required if type is authenticate-cognito.
property authenticateOidc
authenticateOidc?: pulumi.Input<ListenerRuleActionAuthenticateOidc>;Information for creating an authenticate action using OIDC. Required if type is authenticate-oidc.
property fixedResponse
fixedResponse?: pulumi.Input<ListenerRuleActionFixedResponse>;Information for creating an action that returns a custom HTTP response. Required if type is fixed-response.
property forward
forward?: pulumi.Input<ListenerRuleActionForward>;Information for creating an action that distributes requests among one or more target groups. Specify only if type is forward. If you specify both forward block and targetGroupArn attribute, you can specify only one target group using forward and it must be the same target group specified in targetGroupArn.
property order
order?: pulumi.Input<number>;property redirect
redirect?: pulumi.Input<ListenerRuleActionRedirect>;Information for creating a redirect action. Required if type is redirect.
property targetGroupArn
targetGroupArn?: pulumi.Input<string>;The ARN of the Target Group to which to route traffic. Specify only if type is forward and you want to route to a single target group. To route to one or more target groups, use a forward block instead.
property type
type: pulumi.Input<string>;The type of routing action. Valid values are forward, redirect, fixed-response, authenticate-cognito and authenticate-oidc.
interface ListenerRuleActionAuthenticateCognito
interface ListenerRuleActionAuthenticateCognitoproperty authenticationRequestExtraParams
authenticationRequestExtraParams?: pulumi.Input<{[key: string]: any}>;The query parameters to include in the redirect request to the authorization endpoint. Max: 10.
property onUnauthenticatedRequest
onUnauthenticatedRequest?: pulumi.Input<string>;The behavior if the user is not authenticated. Valid values: deny, allow and authenticate
property scope
scope?: pulumi.Input<string>;The set of user claims to be requested from the IdP.
property sessionCookieName
sessionCookieName?: pulumi.Input<string>;The name of the cookie used to maintain session information.
property sessionTimeout
sessionTimeout?: pulumi.Input<number>;The maximum duration of the authentication session, in seconds.
property userPoolArn
userPoolArn: pulumi.Input<string>;The ARN of the Cognito user pool.
property userPoolClientId
userPoolClientId: pulumi.Input<string>;The ID of the Cognito user pool client.
property userPoolDomain
userPoolDomain: pulumi.Input<string>;The domain prefix or fully-qualified domain name of the Cognito user pool.
interface ListenerRuleActionAuthenticateOidc
interface ListenerRuleActionAuthenticateOidcproperty authenticationRequestExtraParams
authenticationRequestExtraParams?: pulumi.Input<{[key: string]: any}>;The query parameters to include in the redirect request to the authorization endpoint. Max: 10.
property authorizationEndpoint
authorizationEndpoint: pulumi.Input<string>;The authorization endpoint of the IdP.
property clientId
clientId: pulumi.Input<string>;The OAuth 2.0 client identifier.
property clientSecret
clientSecret: pulumi.Input<string>;The OAuth 2.0 client secret.
property issuer
issuer: pulumi.Input<string>;The OIDC issuer identifier of the IdP.
property onUnauthenticatedRequest
onUnauthenticatedRequest?: pulumi.Input<string>;The behavior if the user is not authenticated. Valid values: deny, allow and authenticate
property scope
scope?: pulumi.Input<string>;The set of user claims to be requested from the IdP.
property sessionCookieName
sessionCookieName?: pulumi.Input<string>;The name of the cookie used to maintain session information.
property sessionTimeout
sessionTimeout?: pulumi.Input<number>;The maximum duration of the authentication session, in seconds.
property tokenEndpoint
tokenEndpoint: pulumi.Input<string>;The token endpoint of the IdP.
property userInfoEndpoint
userInfoEndpoint: pulumi.Input<string>;The user info endpoint of the IdP.
interface ListenerRuleActionFixedResponse
interface ListenerRuleActionFixedResponseproperty contentType
contentType: pulumi.Input<string>;The content type. Valid values are text/plain, text/css, text/html, application/javascript and application/json.
property messageBody
messageBody?: pulumi.Input<string>;The message body.
property statusCode
statusCode?: pulumi.Input<string>;The HTTP response code. Valid values are 2XX, 4XX, or 5XX.
interface ListenerRuleActionForward
interface ListenerRuleActionForwardproperty stickiness
stickiness?: pulumi.Input<ListenerRuleActionForwardStickiness>;The target group stickiness for the rule.
property targetGroups
targetGroups: pulumi.Input<pulumi.Input<ListenerRuleActionForwardTargetGroup>[]>;One or more target groups block.
interface ListenerRuleActionForwardStickiness
interface ListenerRuleActionForwardStickinessproperty duration
duration: pulumi.Input<number>;The time period, in seconds, during which requests from a client should be routed to the same target group. The range is 1-604800 seconds (7 days).
property enabled
enabled?: pulumi.Input<boolean>;Indicates whether target group stickiness is enabled.
interface ListenerRuleActionForwardTargetGroup
interface ListenerRuleActionForwardTargetGroupproperty arn
arn: pulumi.Input<string>;The Amazon Resource Name (ARN) of the target group.
property weight
weight?: pulumi.Input<number>;The weight. The range is 0 to 999.
interface ListenerRuleActionRedirect
interface ListenerRuleActionRedirectproperty host
host?: pulumi.Input<string>;The hostname. This component is not percent-encoded. The hostname can contain #{host}. Defaults to #{host}.
property path
path?: pulumi.Input<string>;The absolute path, starting with the leading “/”. This component is not percent-encoded. The path can contain #{host}, #{path}, and #{port}. Defaults to /#{path}.
property port
port?: pulumi.Input<string>;The port. Specify a value from 1 to 65535 or #{port}. Defaults to #{port}.
property protocol
protocol?: pulumi.Input<string>;The protocol. Valid values are HTTP, HTTPS, or #{protocol}. Defaults to #{protocol}.
property query
query?: pulumi.Input<string>;The query parameters, URL-encoded when necessary, but not percent-encoded. Do not include the leading “?”. Defaults to #{query}.
property statusCode
statusCode: pulumi.Input<string>;The HTTP redirect code. The redirect is either permanent (HTTP_301) or temporary (HTTP_302).
interface ListenerRuleCondition
interface ListenerRuleConditionproperty field
field?: pulumi.Input<string>;The type of condition. Valid values are host-header or path-pattern. Must also set values.
property hostHeader
hostHeader?: pulumi.Input<ListenerRuleConditionHostHeader>;Contains a single values item which is a list of host header patterns to match. The maximum size of each pattern is 128 characters. Comparison is case insensitive. Wildcard characters supported: * (matches 0 or more characters) and ? (matches exactly 1 character). Only one pattern needs to match for the condition to be satisfied.
property httpHeader
httpHeader?: pulumi.Input<ListenerRuleConditionHttpHeader>;HTTP headers to match. HTTP Header block fields documented below.
property httpRequestMethod
httpRequestMethod?: pulumi.Input<ListenerRuleConditionHttpRequestMethod>;Contains a single values item which is a list of HTTP request methods or verbs to match. Maximum size is 40 characters. Only allowed characters are A-Z, hyphen (-) and underscore (_). Comparison is case sensitive. Wildcards are not supported. Only one needs to match for the condition to be satisfied. AWS recommends that GET and HEAD requests are routed in the same way because the response to a HEAD request may be cached.
property pathPattern
pathPattern?: pulumi.Input<ListenerRuleConditionPathPattern>;Contains a single values item which is a list of path patterns to match against the request URL. Maximum size of each pattern is 128 characters. Comparison is case sensitive. Wildcard characters supported: * (matches 0 or more characters) and ? (matches exactly 1 character). Only one pattern needs to match for the condition to be satisfied. Path pattern is compared only to the path of the URL, not to its query string. To compare against the query string, use a queryString condition.
property queryStrings
queryStrings?: pulumi.Input<pulumi.Input<ListenerRuleConditionQueryString>[]>;Query strings to match. Query String block fields documented below.
property sourceIp
sourceIp?: pulumi.Input<ListenerRuleConditionSourceIp>;Contains a single values item which is a list of source IP CIDR notations to match. You can use both IPv4 and IPv6 addresses. Wildcards are not supported. Condition is satisfied if the source IP address of the request matches one of the CIDR blocks. Condition is not satisfied by the addresses in the X-Forwarded-For header, use httpHeader condition instead.
property values
values?: pulumi.Input<string>;List of exactly one pattern to match. Required when field is set.
interface ListenerRuleConditionHostHeader
interface ListenerRuleConditionHostHeaderproperty values
values?: pulumi.Input<pulumi.Input<string>[]>;List of exactly one pattern to match. Required when field is set.
interface ListenerRuleConditionHttpHeader
interface ListenerRuleConditionHttpHeaderproperty httpHeaderName
httpHeaderName: pulumi.Input<string>;Name of HTTP header to search. The maximum size is 40 characters. Comparison is case insensitive. Only RFC7240 characters are supported. Wildcards are not supported. You cannot use HTTP header condition to specify the host header, use a host-header condition instead.
property values
values: pulumi.Input<pulumi.Input<string>[]>;List of header value patterns to match. Maximum size of each pattern is 128 characters. Comparison is case insensitive. Wildcard characters supported: * (matches 0 or more characters) and ? (matches exactly 1 character). If the same header appears multiple times in the request they will be searched in order until a match is found. Only one pattern needs to match for the condition to be satisfied. To require that all of the strings are a match, create one condition block per string.
interface ListenerRuleConditionHttpRequestMethod
interface ListenerRuleConditionHttpRequestMethodproperty values
values: pulumi.Input<pulumi.Input<string>[]>;List of exactly one pattern to match. Required when field is set.
interface ListenerRuleConditionPathPattern
interface ListenerRuleConditionPathPatternproperty values
values?: pulumi.Input<pulumi.Input<string>[]>;List of exactly one pattern to match. Required when field is set.
interface ListenerRuleConditionQueryString
interface ListenerRuleConditionQueryStringproperty key
key?: pulumi.Input<string>;Query string key pattern to match.
property value
value: pulumi.Input<string>;Query string value pattern to match.
interface ListenerRuleConditionSourceIp
interface ListenerRuleConditionSourceIpproperty values
values: pulumi.Input<pulumi.Input<string>[]>;List of exactly one pattern to match. Required when field is set.
interface LoadBalancerAccessLogs
interface LoadBalancerAccessLogsproperty bucket
bucket: pulumi.Input<string>;The S3 bucket name to store the logs in.
property enabled
enabled?: pulumi.Input<boolean>;Boolean to enable / disable accessLogs. Defaults to false, even when bucket is specified.
property prefix
prefix?: pulumi.Input<string>;The S3 bucket prefix. Logs are stored in the root if not configured.
interface LoadBalancerSubnetMapping
interface LoadBalancerSubnetMappingproperty allocationId
allocationId?: pulumi.Input<string>;The allocation ID of the Elastic IP address.
property subnetId
subnetId: pulumi.Input<string>;The id of the subnet of which to attach to the load balancer. You can specify only one subnet per Availability Zone.
interface TargetGroupHealthCheck
interface TargetGroupHealthCheckproperty enabled
enabled?: pulumi.Input<boolean>;Boolean to enable / disable stickiness. Default is true
property healthyThreshold
healthyThreshold?: pulumi.Input<number>;The number of consecutive health checks successes required before considering an unhealthy target healthy. Defaults to 3.
property interval
interval?: pulumi.Input<number>;The approximate amount of time, in seconds, between health checks of an individual target. Minimum value 5 seconds, Maximum value 300 seconds. For lambda target groups, it needs to be greater as the timeout of the underlying lambda. Default 30 seconds.
property matcher
matcher?: pulumi.Input<string>;The HTTP codes to use when checking for a successful response from a target. You can specify multiple values (for example, “200,202”) or a range of values (for example, “200-299”). Applies to Application Load Balancers only (HTTP/HTTPS), not Network Load Balancers (TCP).
property path
path?: pulumi.Input<string>;The destination for the health check request. Applies to Application Load Balancers only (HTTP/HTTPS), not Network Load Balancers (TCP).
property port
port?: pulumi.Input<string>;The port on which targets receive traffic, unless overridden when registering a specific target. Required when targetType is instance or ip. Does not apply when targetType is lambda.
property protocol
protocol?: pulumi.Input<string>;The protocol to use for routing traffic to the targets. Should be one of “TCP”, “TLS”, “UDP”, “TCP_UDP”, “HTTP” or “HTTPS”. Required when targetType is instance or ip. Does not apply when targetType is lambda.
property timeout
timeout?: pulumi.Input<number>;The amount of time, in seconds, during which no response means a failed health check. For Application Load Balancers, the range is 2 to 120 seconds, and the default is 5 seconds for the instance target type and 30 seconds for the lambda target type. For Network Load Balancers, you cannot set a custom value, and the default is 10 seconds for TCP and HTTPS health checks and 6 seconds for HTTP health checks.
property unhealthyThreshold
unhealthyThreshold?: pulumi.Input<number>;The number of consecutive health check failures required before considering the target unhealthy . For Network Load Balancers, this value must be the same as the healthyThreshold. Defaults to 3.
interface TargetGroupStickiness
interface TargetGroupStickinessproperty cookieDuration
cookieDuration?: pulumi.Input<number>;The time period, in seconds, during which requests from a client should be routed to the same target. After this time period expires, the load balancer-generated cookie is considered stale. The range is 1 second to 1 week (604800 seconds). The default value is 1 day (86400 seconds).
property enabled
enabled?: pulumi.Input<boolean>;Indicates whether health checks are enabled. Defaults to true.
property type
type: pulumi.Input<string>;The type of sticky sessions. The only current possible value is lbCookie.
namespace apigateway
interface AccountThrottleSettings
interface AccountThrottleSettingsproperty burstLimit
burstLimit?: pulumi.Input<number>;The absolute maximum number of times API Gateway allows the API to be called per second (RPS).
property rateLimit
rateLimit?: pulumi.Input<number>;The number of times API Gateway allows the API to be called per second on average (RPS).
interface DocumentationPartLocation
interface DocumentationPartLocationproperty method
method?: pulumi.Input<string>;The HTTP verb of a method. The default value is * for any method.
property name
name?: pulumi.Input<string>;The name of the targeted API entity.
property path
path?: pulumi.Input<string>;The URL path of the target. The default value is / for the root resource.
property statusCode
statusCode?: pulumi.Input<string>;The HTTP status code of a response. The default value is * for any status code.
property type
type: pulumi.Input<string>;The type of API entity to which the documentation content applies. e.g. API, METHOD or REQUEST_BODY
interface DomainNameEndpointConfiguration
interface DomainNameEndpointConfigurationproperty types
types: pulumi.Input<string>;A list of endpoint types. This resource currently only supports managing a single value. Valid values: EDGE or REGIONAL. If unspecified, defaults to EDGE. Must be declared as REGIONAL in non-Commercial partitions. Refer to the documentation for more information on the difference between edge-optimized and regional APIs.
interface MethodSettingsSettings
interface MethodSettingsSettingsproperty cacheDataEncrypted
cacheDataEncrypted?: pulumi.Input<boolean>;Specifies whether the cached responses are encrypted.
property cacheTtlInSeconds
cacheTtlInSeconds?: pulumi.Input<number>;Specifies the time to live (TTL), in seconds, for cached responses. The higher the TTL, the longer the response will be cached.
property cachingEnabled
cachingEnabled?: pulumi.Input<boolean>;Specifies whether responses should be cached and returned for requests. A cache cluster must be enabled on the stage for responses to be cached.
property dataTraceEnabled
dataTraceEnabled?: pulumi.Input<boolean>;Specifies whether data trace logging is enabled for this method, which effects the log entries pushed to Amazon CloudWatch Logs.
property loggingLevel
loggingLevel?: pulumi.Input<string>;Specifies the logging level for this method, which effects the log entries pushed to Amazon CloudWatch Logs. The available levels are OFF, ERROR, and INFO.
property metricsEnabled
metricsEnabled?: pulumi.Input<boolean>;Specifies whether Amazon CloudWatch metrics are enabled for this method.
property requireAuthorizationForCacheControl
requireAuthorizationForCacheControl?: pulumi.Input<boolean>;Specifies whether authorization is required for a cache invalidation request.
property throttlingBurstLimit
throttlingBurstLimit?: pulumi.Input<number>;Specifies the throttling burst limit.
property throttlingRateLimit
throttlingRateLimit?: pulumi.Input<number>;Specifies the throttling rate limit.
property unauthorizedCacheControlHeaderStrategy
unauthorizedCacheControlHeaderStrategy?: pulumi.Input<string>;Specifies how to handle unauthorized requests for cache invalidation. The available values are FAIL_WITH_403, SUCCEED_WITH_RESPONSE_HEADER, SUCCEED_WITHOUT_RESPONSE_HEADER.
interface RestApiEndpointConfiguration
interface RestApiEndpointConfigurationproperty types
types: pulumi.Input<string>;A list of endpoint types. This resource currently only supports managing a single value. Valid values: EDGE, REGIONAL or PRIVATE. If unspecified, defaults to EDGE. Must be declared as REGIONAL in non-Commercial partitions. Refer to the documentation for more information on the difference between edge-optimized and regional APIs.
property vpcEndpointIds
vpcEndpointIds?: pulumi.Input<pulumi.Input<string>[]>;A list of VPC Endpoint Ids. It is only supported for PRIVATE endpoint type.
interface StageAccessLogSettings
interface StageAccessLogSettingsproperty destinationArn
destinationArn: pulumi.Input<string>;The Amazon Resource Name (ARN) of the CloudWatch Logs log group or Kinesis Data Firehose delivery stream to receive access logs. If you specify a Kinesis Data Firehose delivery stream, the stream name must begin with amazon-apigateway-. Automatically removes trailing :* if present.
property format
format: pulumi.Input<string>;The formatting and values recorded in the logs. For more information on configuring the log format rules visit the AWS documentation
interface UsagePlanApiStage
interface UsagePlanApiStageproperty apiId
apiId: pulumi.Input<string>;API Id of the associated API stage in a usage plan.
property stage
stage: pulumi.Input<string>;API stage name of the associated API stage in a usage plan.
interface UsagePlanQuotaSettings
interface UsagePlanQuotaSettingsproperty limit
limit: pulumi.Input<number>;The maximum number of requests that can be made in a given time period.
property offset
offset?: pulumi.Input<number>;The number of requests subtracted from the given limit in the initial time period.
property period
period: pulumi.Input<string>;The time period in which the limit applies. Valid values are “DAY”, “WEEK” or “MONTH”.
interface UsagePlanThrottleSettings
interface UsagePlanThrottleSettingsproperty burstLimit
burstLimit?: pulumi.Input<number>;The API request burst limit, the maximum rate limit over a time ranging from one to a few seconds, depending upon whether the underlying token bucket is at its full capacity.
property rateLimit
rateLimit?: pulumi.Input<number>;The API request steady-state rate limit.
namespace apigatewayv2
interface ApiCorsConfiguration
interface ApiCorsConfigurationproperty allowCredentials
allowCredentials?: pulumi.Input<boolean>;Whether credentials are included in the CORS request.
property allowHeaders
allowHeaders?: pulumi.Input<pulumi.Input<string>[]>;The set of allowed HTTP headers.
property allowMethods
allowMethods?: pulumi.Input<pulumi.Input<string>[]>;The set of allowed HTTP methods.
property allowOrigins
allowOrigins?: pulumi.Input<pulumi.Input<string>[]>;The set of allowed origins.
property exposeHeaders
exposeHeaders?: pulumi.Input<pulumi.Input<string>[]>;The set of exposed HTTP headers.
property maxAge
maxAge?: pulumi.Input<number>;The number of seconds that the browser should cache preflight request results.
interface AuthorizerJwtConfiguration
interface AuthorizerJwtConfigurationproperty audiences
audiences?: pulumi.Input<pulumi.Input<string>[]>;A list of the intended recipients of the JWT. A valid JWT must provide an aud that matches at least one entry in this list.
property issuer
issuer?: pulumi.Input<string>;The base domain of the identity provider that issues JSON Web Tokens, such as the endpoint attribute of the aws.cognito.UserPool resource.
interface DomainNameDomainNameConfiguration
interface DomainNameDomainNameConfigurationproperty certificateArn
certificateArn: pulumi.Input<string>;The ARN of an AWS-managed certificate that will be used by the endpoint for the domain name. AWS Certificate Manager is the only supported source.
Use the aws.acm.Certificate resource to configure an ACM certificate.
property endpointType
endpointType: pulumi.Input<string>;The endpoint type. Valid values: REGIONAL.
property hostedZoneId
hostedZoneId?: pulumi.Input<string>;The Amazon Route 53 Hosted Zone ID of the endpoint.
property securityPolicy
securityPolicy: pulumi.Input<string>;The Transport Layer Security (TLS) version of the security policy for the domain name. Valid values: TLS_1_2.
property targetDomainName
targetDomainName?: pulumi.Input<string>;The target domain name.
interface StageAccessLogSettings
interface StageAccessLogSettingsproperty destinationArn
destinationArn: pulumi.Input<string>;The ARN of the CloudWatch Logs log group to receive access logs. Any trailing :* is trimmed from the ARN.
property format
format: pulumi.Input<string>;A single line format of the access logs of data, as specified by selected $context variables.
interface StageDefaultRouteSettings
interface StageDefaultRouteSettingsproperty dataTraceEnabled
dataTraceEnabled?: pulumi.Input<boolean>;Whether data trace logging is enabled for the default route. Affects the log entries pushed to Amazon CloudWatch Logs.
Defaults to false. Supported only for WebSocket APIs.
property detailedMetricsEnabled
detailedMetricsEnabled?: pulumi.Input<boolean>;Whether detailed metrics are enabled for the default route. Defaults to false.
property loggingLevel
loggingLevel?: pulumi.Input<string>;The logging level for the default route. Affects the log entries pushed to Amazon CloudWatch Logs.
Valid values: ERROR, INFO, OFF. Defaults to OFF. Supported only for WebSocket APIs.
property throttlingBurstLimit
throttlingBurstLimit?: pulumi.Input<number>;The throttling burst limit for the default route.
property throttlingRateLimit
throttlingRateLimit?: pulumi.Input<number>;The throttling rate limit for the default route.
interface StageRouteSetting
interface StageRouteSettingproperty dataTraceEnabled
dataTraceEnabled?: pulumi.Input<boolean>;Whether data trace logging is enabled for the route. Affects the log entries pushed to Amazon CloudWatch Logs.
Defaults to false. Supported only for WebSocket APIs.
property detailedMetricsEnabled
detailedMetricsEnabled?: pulumi.Input<boolean>;Whether detailed metrics are enabled for the route. Defaults to false.
property loggingLevel
loggingLevel?: pulumi.Input<string>;The logging level for the route. Affects the log entries pushed to Amazon CloudWatch Logs.
Valid values: ERROR, INFO, OFF. Defaults to OFF. Supported only for WebSocket APIs.
property routeKey
routeKey: pulumi.Input<string>;Route key.
property throttlingBurstLimit
throttlingBurstLimit?: pulumi.Input<number>;The throttling burst limit for the route.
property throttlingRateLimit
throttlingRateLimit?: pulumi.Input<number>;The throttling rate limit for the route.
namespace appautoscaling
interface PolicyStepScalingPolicyConfiguration
interface PolicyStepScalingPolicyConfigurationproperty adjustmentType
adjustmentType?: pulumi.Input<string>;Specifies whether the adjustment is an absolute number or a percentage of the current capacity. Valid values are ChangeInCapacity, ExactCapacity, and PercentChangeInCapacity.
property cooldown
cooldown?: pulumi.Input<number>;The amount of time, in seconds, after a scaling activity completes and before the next scaling activity can start.
property metricAggregationType
metricAggregationType?: pulumi.Input<string>;The aggregation type for the policy’s metrics. Valid values are “Minimum”, “Maximum”, and “Average”. Without a value, AWS will treat the aggregation type as “Average”.
property minAdjustmentMagnitude
minAdjustmentMagnitude?: pulumi.Input<number>;The minimum number to adjust your scalable dimension as a result of a scaling activity. If the adjustment type is PercentChangeInCapacity, the scaling policy changes the scalable dimension of the scalable target by this amount.
property stepAdjustments
stepAdjustments?: pulumi.Input<pulumi.Input<PolicyStepScalingPolicyConfigurationStepAdjustment>[]>;A set of adjustments that manage scaling. These have the following structure:
interface PolicyStepScalingPolicyConfigurationStepAdjustment
interface PolicyStepScalingPolicyConfigurationStepAdjustmentproperty metricIntervalLowerBound
metricIntervalLowerBound?: pulumi.Input<string>;The lower bound for the difference between the alarm threshold and the CloudWatch metric. Without a value, AWS will treat this bound as negative infinity.
property metricIntervalUpperBound
metricIntervalUpperBound?: pulumi.Input<string>;The upper bound for the difference between the alarm threshold and the CloudWatch metric. Without a value, AWS will treat this bound as infinity. The upper bound must be greater than the lower bound.
property scalingAdjustment
scalingAdjustment: pulumi.Input<number>;The number of members by which to scale, when the adjustment bounds are breached. A positive value scales up. A negative value scales down.
interface PolicyTargetTrackingScalingPolicyConfiguration
interface PolicyTargetTrackingScalingPolicyConfigurationproperty customizedMetricSpecification
customizedMetricSpecification?: pulumi.Input<PolicyTargetTrackingScalingPolicyConfigurationCustomizedMetricSpecification>;A custom CloudWatch metric. Documentation can be found at: AWS Customized Metric Specification. See supported fields below.
property disableScaleIn
disableScaleIn?: pulumi.Input<boolean>;Indicates whether scale in by the target tracking policy is disabled. If the value is true, scale in is disabled and the target tracking policy won’t remove capacity from the scalable resource. Otherwise, scale in is enabled and the target tracking policy can remove capacity from the scalable resource. The default value is false.
property predefinedMetricSpecification
predefinedMetricSpecification?: pulumi.Input<PolicyTargetTrackingScalingPolicyConfigurationPredefinedMetricSpecification>;A predefined metric. See supported fields below.
property scaleInCooldown
scaleInCooldown?: pulumi.Input<number>;The amount of time, in seconds, after a scale in activity completes before another scale in activity can start.
property scaleOutCooldown
scaleOutCooldown?: pulumi.Input<number>;The amount of time, in seconds, after a scale out activity completes before another scale out activity can start.
property targetValue
targetValue: pulumi.Input<number>;The target value for the metric.
interface PolicyTargetTrackingScalingPolicyConfigurationCustomizedMetricSpecification
interface PolicyTargetTrackingScalingPolicyConfigurationCustomizedMetricSpecificationproperty dimensions
dimensions?: pulumi.Input<pulumi.Input<PolicyTargetTrackingScalingPolicyConfigurationCustomizedMetricSpecificationDimension>[]>;Configuration block(s) with the dimensions of the metric if the metric was published with dimensions. Detailed below.
property metricName
metricName: pulumi.Input<string>;The name of the metric.
property namespace
namespace: pulumi.Input<string>;The namespace of the metric.
property statistic
statistic: pulumi.Input<string>;The statistic of the metric. Valid values: Average, Minimum, Maximum, SampleCount, and Sum.
property unit
unit?: pulumi.Input<string>;The unit of the metric.
interface PolicyTargetTrackingScalingPolicyConfigurationCustomizedMetricSpecificationDimension
interface PolicyTargetTrackingScalingPolicyConfigurationCustomizedMetricSpecificationDimensionproperty name
name: pulumi.Input<string>;The name of the policy.
property value
value: pulumi.Input<string>;Value of the dimension.
interface PolicyTargetTrackingScalingPolicyConfigurationPredefinedMetricSpecification
interface PolicyTargetTrackingScalingPolicyConfigurationPredefinedMetricSpecificationproperty predefinedMetricType
predefinedMetricType: pulumi.Input<string>;The metric type.
property resourceLabel
resourceLabel?: pulumi.Input<string>;Reserved for future use.
interface ScheduledActionScalableTargetAction
interface ScheduledActionScalableTargetActionproperty maxCapacity
maxCapacity?: pulumi.Input<number>;The maximum capacity.
property minCapacity
minCapacity?: pulumi.Input<number>;The minimum capacity.
namespace applicationloadbalancing
interface ListenerDefaultAction
interface ListenerDefaultActionproperty authenticateCognito
authenticateCognito?: pulumi.Input<ListenerDefaultActionAuthenticateCognito>;property authenticateOidc
authenticateOidc?: pulumi.Input<ListenerDefaultActionAuthenticateOidc>;property fixedResponse
fixedResponse?: pulumi.Input<ListenerDefaultActionFixedResponse>;Information for creating an action that returns a custom HTTP response. Required if type is fixed-response.
property forward
forward?: pulumi.Input<ListenerDefaultActionForward>;Information for creating an action that distributes requests among one or more target groups. Specify only if type is forward. If you specify both forward block and targetGroupArn attribute, you can specify only one target group using forward and it must be the same target group specified in targetGroupArn.
property order
order?: pulumi.Input<number>;property redirect
redirect?: pulumi.Input<ListenerDefaultActionRedirect>;Information for creating a redirect action. Required if type is redirect.
property targetGroupArn
targetGroupArn?: pulumi.Input<string>;The ARN of the Target Group to which to route traffic. Specify only if type is forward and you want to route to a single target group. To route to one or more target groups, use a forward block instead.
property type
type: pulumi.Input<string>;The type of routing action. Valid values are forward, redirect, fixed-response, authenticate-cognito and authenticate-oidc.
interface ListenerDefaultActionAuthenticateCognito
interface ListenerDefaultActionAuthenticateCognitoproperty authenticationRequestExtraParams
authenticationRequestExtraParams?: pulumi.Input<{[key: string]: any}>;The query parameters to include in the redirect request to the authorization endpoint. Max: 10.
property onUnauthenticatedRequest
onUnauthenticatedRequest?: pulumi.Input<string>;The behavior if the user is not authenticated. Valid values: deny, allow and authenticate
property scope
scope?: pulumi.Input<string>;The set of user claims to be requested from the IdP.
property sessionCookieName
sessionCookieName?: pulumi.Input<string>;The name of the cookie used to maintain session information.
property sessionTimeout
sessionTimeout?: pulumi.Input<number>;The maximum duration of the authentication session, in seconds.
property userPoolArn
userPoolArn: pulumi.Input<string>;The ARN of the Cognito user pool.
property userPoolClientId
userPoolClientId: pulumi.Input<string>;The ID of the Cognito user pool client.
property userPoolDomain
userPoolDomain: pulumi.Input<string>;The domain prefix or fully-qualified domain name of the Cognito user pool.
interface ListenerDefaultActionAuthenticateOidc
interface ListenerDefaultActionAuthenticateOidcproperty authenticationRequestExtraParams
authenticationRequestExtraParams?: pulumi.Input<{[key: string]: any}>;The query parameters to include in the redirect request to the authorization endpoint. Max: 10.
property authorizationEndpoint
authorizationEndpoint: pulumi.Input<string>;The authorization endpoint of the IdP.
property clientId
clientId: pulumi.Input<string>;The OAuth 2.0 client identifier.
property clientSecret
clientSecret: pulumi.Input<string>;The OAuth 2.0 client secret.
property issuer
issuer: pulumi.Input<string>;The OIDC issuer identifier of the IdP.
property onUnauthenticatedRequest
onUnauthenticatedRequest?: pulumi.Input<string>;The behavior if the user is not authenticated. Valid values: deny, allow and authenticate
property scope
scope?: pulumi.Input<string>;The set of user claims to be requested from the IdP.
property sessionCookieName
sessionCookieName?: pulumi.Input<string>;The name of the cookie used to maintain session information.
property sessionTimeout
sessionTimeout?: pulumi.Input<number>;The maximum duration of the authentication session, in seconds.
property tokenEndpoint
tokenEndpoint: pulumi.Input<string>;The token endpoint of the IdP.
property userInfoEndpoint
userInfoEndpoint: pulumi.Input<string>;The user info endpoint of the IdP.
interface ListenerDefaultActionFixedResponse
interface ListenerDefaultActionFixedResponseproperty contentType
contentType: pulumi.Input<string>;The content type. Valid values are text/plain, text/css, text/html, application/javascript and application/json.
property messageBody
messageBody?: pulumi.Input<string>;The message body.
property statusCode
statusCode?: pulumi.Input<string>;The HTTP response code. Valid values are 2XX, 4XX, or 5XX.
interface ListenerDefaultActionForward
interface ListenerDefaultActionForwardproperty stickiness
stickiness?: pulumi.Input<ListenerDefaultActionForwardStickiness>;The target group stickiness for the rule.
property targetGroups
targetGroups: pulumi.Input<pulumi.Input<ListenerDefaultActionForwardTargetGroup>[]>;One or more target groups block.
interface ListenerDefaultActionForwardStickiness
interface ListenerDefaultActionForwardStickinessproperty duration
duration: pulumi.Input<number>;The time period, in seconds, during which requests from a client should be routed to the same target group. The range is 1-604800 seconds (7 days).
property enabled
enabled?: pulumi.Input<boolean>;Indicates whether target group stickiness is enabled.
interface ListenerDefaultActionForwardTargetGroup
interface ListenerDefaultActionForwardTargetGroupproperty arn
arn: pulumi.Input<string>;The Amazon Resource Name (ARN) of the target group.
property weight
weight?: pulumi.Input<number>;The weight. The range is 0 to 999.
interface ListenerDefaultActionRedirect
interface ListenerDefaultActionRedirectproperty host
host?: pulumi.Input<string>;The hostname. This component is not percent-encoded. The hostname can contain #{host}. Defaults to #{host}.
property path
path?: pulumi.Input<string>;The absolute path, starting with the leading “/”. This component is not percent-encoded. The path can contain #{host}, #{path}, and #{port}. Defaults to /#{path}.
property port
port?: pulumi.Input<string>;The port. Specify a value from 1 to 65535 or #{port}. Defaults to #{port}.
property protocol
protocol?: pulumi.Input<string>;The protocol. Valid values are HTTP, HTTPS, or #{protocol}. Defaults to #{protocol}.
property query
query?: pulumi.Input<string>;The query parameters, URL-encoded when necessary, but not percent-encoded. Do not include the leading “?”. Defaults to #{query}.
property statusCode
statusCode: pulumi.Input<string>;The HTTP redirect code. The redirect is either permanent (HTTP_301) or temporary (HTTP_302).
interface ListenerRuleAction
interface ListenerRuleActionproperty authenticateCognito
authenticateCognito?: pulumi.Input<ListenerRuleActionAuthenticateCognito>;Information for creating an authenticate action using Cognito. Required if type is authenticate-cognito.
property authenticateOidc
authenticateOidc?: pulumi.Input<ListenerRuleActionAuthenticateOidc>;Information for creating an authenticate action using OIDC. Required if type is authenticate-oidc.
property fixedResponse
fixedResponse?: pulumi.Input<ListenerRuleActionFixedResponse>;Information for creating an action that returns a custom HTTP response. Required if type is fixed-response.
property forward
forward?: pulumi.Input<ListenerRuleActionForward>;Information for creating an action that distributes requests among one or more target groups. Specify only if type is forward. If you specify both forward block and targetGroupArn attribute, you can specify only one target group using forward and it must be the same target group specified in targetGroupArn.
property order
order?: pulumi.Input<number>;property redirect
redirect?: pulumi.Input<ListenerRuleActionRedirect>;Information for creating a redirect action. Required if type is redirect.
property targetGroupArn
targetGroupArn?: pulumi.Input<string>;The ARN of the Target Group to which to route traffic. Specify only if type is forward and you want to route to a single target group. To route to one or more target groups, use a forward block instead.
property type
type: pulumi.Input<string>;The type of routing action. Valid values are forward, redirect, fixed-response, authenticate-cognito and authenticate-oidc.
interface ListenerRuleActionAuthenticateCognito
interface ListenerRuleActionAuthenticateCognitoproperty authenticationRequestExtraParams
authenticationRequestExtraParams?: pulumi.Input<{[key: string]: any}>;The query parameters to include in the redirect request to the authorization endpoint. Max: 10.
property onUnauthenticatedRequest
onUnauthenticatedRequest?: pulumi.Input<string>;The behavior if the user is not authenticated. Valid values: deny, allow and authenticate
property scope
scope?: pulumi.Input<string>;The set of user claims to be requested from the IdP.
property sessionCookieName
sessionCookieName?: pulumi.Input<string>;The name of the cookie used to maintain session information.
property sessionTimeout
sessionTimeout?: pulumi.Input<number>;The maximum duration of the authentication session, in seconds.
property userPoolArn
userPoolArn: pulumi.Input<string>;The ARN of the Cognito user pool.
property userPoolClientId
userPoolClientId: pulumi.Input<string>;The ID of the Cognito user pool client.
property userPoolDomain
userPoolDomain: pulumi.Input<string>;The domain prefix or fully-qualified domain name of the Cognito user pool.
interface ListenerRuleActionAuthenticateOidc
interface ListenerRuleActionAuthenticateOidcproperty authenticationRequestExtraParams
authenticationRequestExtraParams?: pulumi.Input<{[key: string]: any}>;The query parameters to include in the redirect request to the authorization endpoint. Max: 10.
property authorizationEndpoint
authorizationEndpoint: pulumi.Input<string>;The authorization endpoint of the IdP.
property clientId
clientId: pulumi.Input<string>;The OAuth 2.0 client identifier.
property clientSecret
clientSecret: pulumi.Input<string>;The OAuth 2.0 client secret.
property issuer
issuer: pulumi.Input<string>;The OIDC issuer identifier of the IdP.
property onUnauthenticatedRequest
onUnauthenticatedRequest?: pulumi.Input<string>;The behavior if the user is not authenticated. Valid values: deny, allow and authenticate
property scope
scope?: pulumi.Input<string>;The set of user claims to be requested from the IdP.
property sessionCookieName
sessionCookieName?: pulumi.Input<string>;The name of the cookie used to maintain session information.
property sessionTimeout
sessionTimeout?: pulumi.Input<number>;The maximum duration of the authentication session, in seconds.
property tokenEndpoint
tokenEndpoint: pulumi.Input<string>;The token endpoint of the IdP.
property userInfoEndpoint
userInfoEndpoint: pulumi.Input<string>;The user info endpoint of the IdP.
interface ListenerRuleActionFixedResponse
interface ListenerRuleActionFixedResponseproperty contentType
contentType: pulumi.Input<string>;The content type. Valid values are text/plain, text/css, text/html, application/javascript and application/json.
property messageBody
messageBody?: pulumi.Input<string>;The message body.
property statusCode
statusCode?: pulumi.Input<string>;The HTTP response code. Valid values are 2XX, 4XX, or 5XX.
interface ListenerRuleActionForward
interface ListenerRuleActionForwardproperty stickiness
stickiness?: pulumi.Input<ListenerRuleActionForwardStickiness>;The target group stickiness for the rule.
property targetGroups
targetGroups: pulumi.Input<pulumi.Input<ListenerRuleActionForwardTargetGroup>[]>;One or more target groups block.
interface ListenerRuleActionForwardStickiness
interface ListenerRuleActionForwardStickinessproperty duration
duration: pulumi.Input<number>;The time period, in seconds, during which requests from a client should be routed to the same target group. The range is 1-604800 seconds (7 days).
property enabled
enabled?: pulumi.Input<boolean>;Indicates whether target group stickiness is enabled.
interface ListenerRuleActionForwardTargetGroup
interface ListenerRuleActionForwardTargetGroupproperty arn
arn: pulumi.Input<string>;The Amazon Resource Name (ARN) of the target group.
property weight
weight?: pulumi.Input<number>;The weight. The range is 0 to 999.
interface ListenerRuleActionRedirect
interface ListenerRuleActionRedirectproperty host
host?: pulumi.Input<string>;The hostname. This component is not percent-encoded. The hostname can contain #{host}. Defaults to #{host}.
property path
path?: pulumi.Input<string>;The absolute path, starting with the leading “/”. This component is not percent-encoded. The path can contain #{host}, #{path}, and #{port}. Defaults to /#{path}.
property port
port?: pulumi.Input<string>;The port. Specify a value from 1 to 65535 or #{port}. Defaults to #{port}.
property protocol
protocol?: pulumi.Input<string>;The protocol. Valid values are HTTP, HTTPS, or #{protocol}. Defaults to #{protocol}.
property query
query?: pulumi.Input<string>;The query parameters, URL-encoded when necessary, but not percent-encoded. Do not include the leading “?”. Defaults to #{query}.
property statusCode
statusCode: pulumi.Input<string>;The HTTP redirect code. The redirect is either permanent (HTTP_301) or temporary (HTTP_302).
interface ListenerRuleCondition
interface ListenerRuleConditionproperty field
field?: pulumi.Input<string>;The type of condition. Valid values are host-header or path-pattern. Must also set values.
property hostHeader
hostHeader?: pulumi.Input<ListenerRuleConditionHostHeader>;Contains a single values item which is a list of host header patterns to match. The maximum size of each pattern is 128 characters. Comparison is case insensitive. Wildcard characters supported: * (matches 0 or more characters) and ? (matches exactly 1 character). Only one pattern needs to match for the condition to be satisfied.
property httpHeader
httpHeader?: pulumi.Input<ListenerRuleConditionHttpHeader>;HTTP headers to match. HTTP Header block fields documented below.
property httpRequestMethod
httpRequestMethod?: pulumi.Input<ListenerRuleConditionHttpRequestMethod>;Contains a single values item which is a list of HTTP request methods or verbs to match. Maximum size is 40 characters. Only allowed characters are A-Z, hyphen (-) and underscore (_). Comparison is case sensitive. Wildcards are not supported. Only one needs to match for the condition to be satisfied. AWS recommends that GET and HEAD requests are routed in the same way because the response to a HEAD request may be cached.
property pathPattern
pathPattern?: pulumi.Input<ListenerRuleConditionPathPattern>;Contains a single values item which is a list of path patterns to match against the request URL. Maximum size of each pattern is 128 characters. Comparison is case sensitive. Wildcard characters supported: * (matches 0 or more characters) and ? (matches exactly 1 character). Only one pattern needs to match for the condition to be satisfied. Path pattern is compared only to the path of the URL, not to its query string. To compare against the query string, use a queryString condition.
property queryStrings
queryStrings?: pulumi.Input<pulumi.Input<ListenerRuleConditionQueryString>[]>;Query strings to match. Query String block fields documented below.
property sourceIp
sourceIp?: pulumi.Input<ListenerRuleConditionSourceIp>;Contains a single values item which is a list of source IP CIDR notations to match. You can use both IPv4 and IPv6 addresses. Wildcards are not supported. Condition is satisfied if the source IP address of the request matches one of the CIDR blocks. Condition is not satisfied by the addresses in the X-Forwarded-For header, use httpHeader condition instead.
property values
values?: pulumi.Input<string>;List of exactly one pattern to match. Required when field is set.
interface ListenerRuleConditionHostHeader
interface ListenerRuleConditionHostHeaderproperty values
values?: pulumi.Input<pulumi.Input<string>[]>;List of exactly one pattern to match. Required when field is set.
interface ListenerRuleConditionHttpHeader
interface ListenerRuleConditionHttpHeaderproperty httpHeaderName
httpHeaderName: pulumi.Input<string>;Name of HTTP header to search. The maximum size is 40 characters. Comparison is case insensitive. Only RFC7240 characters are supported. Wildcards are not supported. You cannot use HTTP header condition to specify the host header, use a host-header condition instead.
property values
values: pulumi.Input<pulumi.Input<string>[]>;List of header value patterns to match. Maximum size of each pattern is 128 characters. Comparison is case insensitive. Wildcard characters supported: * (matches 0 or more characters) and ? (matches exactly 1 character). If the same header appears multiple times in the request they will be searched in order until a match is found. Only one pattern needs to match for the condition to be satisfied. To require that all of the strings are a match, create one condition block per string.
interface ListenerRuleConditionHttpRequestMethod
interface ListenerRuleConditionHttpRequestMethodproperty values
values: pulumi.Input<pulumi.Input<string>[]>;List of exactly one pattern to match. Required when field is set.
interface ListenerRuleConditionPathPattern
interface ListenerRuleConditionPathPatternproperty values
values?: pulumi.Input<pulumi.Input<string>[]>;List of exactly one pattern to match. Required when field is set.
interface ListenerRuleConditionQueryString
interface ListenerRuleConditionQueryStringproperty key
key?: pulumi.Input<string>;Query string key pattern to match.
property value
value: pulumi.Input<string>;Query string value pattern to match.
interface ListenerRuleConditionSourceIp
interface ListenerRuleConditionSourceIpproperty values
values: pulumi.Input<pulumi.Input<string>[]>;List of exactly one pattern to match. Required when field is set.
interface LoadBalancerAccessLogs
interface LoadBalancerAccessLogsproperty bucket
bucket: pulumi.Input<string>;The S3 bucket name to store the logs in.
property enabled
enabled?: pulumi.Input<boolean>;Boolean to enable / disable accessLogs. Defaults to false, even when bucket is specified.
property prefix
prefix?: pulumi.Input<string>;The S3 bucket prefix. Logs are stored in the root if not configured.
interface LoadBalancerSubnetMapping
interface LoadBalancerSubnetMappingproperty allocationId
allocationId?: pulumi.Input<string>;The allocation ID of the Elastic IP address.
property subnetId
subnetId: pulumi.Input<string>;The id of the subnet of which to attach to the load balancer. You can specify only one subnet per Availability Zone.
interface TargetGroupHealthCheck
interface TargetGroupHealthCheckproperty enabled
enabled?: pulumi.Input<boolean>;Boolean to enable / disable stickiness. Default is true
property healthyThreshold
healthyThreshold?: pulumi.Input<number>;The number of consecutive health checks successes required before considering an unhealthy target healthy. Defaults to 3.
property interval
interval?: pulumi.Input<number>;The approximate amount of time, in seconds, between health checks of an individual target. Minimum value 5 seconds, Maximum value 300 seconds. For lambda target groups, it needs to be greater as the timeout of the underlying lambda. Default 30 seconds.
property matcher
matcher?: pulumi.Input<string>;The HTTP codes to use when checking for a successful response from a target. You can specify multiple values (for example, “200,202”) or a range of values (for example, “200-299”). Applies to Application Load Balancers only (HTTP/HTTPS), not Network Load Balancers (TCP).
property path
path?: pulumi.Input<string>;The destination for the health check request. Applies to Application Load Balancers only (HTTP/HTTPS), not Network Load Balancers (TCP).
property port
port?: pulumi.Input<string>;The port on which targets receive traffic, unless overridden when registering a specific target. Required when targetType is instance or ip. Does not apply when targetType is lambda.
property protocol
protocol?: pulumi.Input<string>;The protocol to use for routing traffic to the targets. Should be one of “TCP”, “TLS”, “UDP”, “TCP_UDP”, “HTTP” or “HTTPS”. Required when targetType is instance or ip. Does not apply when targetType is lambda.
property timeout
timeout?: pulumi.Input<number>;The amount of time, in seconds, during which no response means a failed health check. For Application Load Balancers, the range is 2 to 120 seconds, and the default is 5 seconds for the instance target type and 30 seconds for the lambda target type. For Network Load Balancers, you cannot set a custom value, and the default is 10 seconds for TCP and HTTPS health checks and 6 seconds for HTTP health checks.
property unhealthyThreshold
unhealthyThreshold?: pulumi.Input<number>;The number of consecutive health check failures required before considering the target unhealthy . For Network Load Balancers, this value must be the same as the healthyThreshold. Defaults to 3.
interface TargetGroupStickiness
interface TargetGroupStickinessproperty cookieDuration
cookieDuration?: pulumi.Input<number>;The time period, in seconds, during which requests from a client should be routed to the same target. After this time period expires, the load balancer-generated cookie is considered stale. The range is 1 second to 1 week (604800 seconds). The default value is 1 day (86400 seconds).
property enabled
enabled?: pulumi.Input<boolean>;Indicates whether health checks are enabled. Defaults to true.
property type
type: pulumi.Input<string>;The type of sticky sessions. The only current possible value is lbCookie.
namespace appmesh
interface MeshSpec
interface MeshSpecproperty egressFilter
egressFilter?: pulumi.Input<MeshSpecEgressFilter>;The egress filter rules for the service mesh.
interface MeshSpecEgressFilter
interface MeshSpecEgressFilterproperty type
type?: pulumi.Input<string>;The egress filter type. By default, the type is DROP_ALL.
Valid values are ALLOW_ALL and DROP_ALL.
interface RouteSpec
interface RouteSpecproperty httpRoute
httpRoute?: pulumi.Input<RouteSpecHttpRoute>;The HTTP routing information for the route.
property priority
priority?: pulumi.Input<number>;The priority for the route, between 0 and 1000.
Routes are matched based on the specified value, where 0 is the highest priority.
property tcpRoute
tcpRoute?: pulumi.Input<RouteSpecTcpRoute>;The TCP routing information for the route.
interface RouteSpecHttpRoute
interface RouteSpecHttpRouteproperty action
action: pulumi.Input<RouteSpecHttpRouteAction>;The action to take if a match is determined.
property match
match: pulumi.Input<RouteSpecHttpRouteMatch>;The criteria for determining an HTTP request match.
interface RouteSpecHttpRouteAction
interface RouteSpecHttpRouteActionproperty weightedTargets
weightedTargets: pulumi.Input<pulumi.Input<RouteSpecHttpRouteActionWeightedTarget>[]>;The targets that traffic is routed to when a request matches the route. You can specify one or more targets and their relative weights with which to distribute traffic.
interface RouteSpecHttpRouteActionWeightedTarget
interface RouteSpecHttpRouteActionWeightedTargetproperty virtualNode
virtualNode: pulumi.Input<string>;The virtual node to associate with the weighted target.
property weight
weight: pulumi.Input<number>;The relative weight of the weighted target. An integer between 0 and 100.
interface RouteSpecHttpRouteMatch
interface RouteSpecHttpRouteMatchproperty headers
headers?: pulumi.Input<pulumi.Input<RouteSpecHttpRouteMatchHeader>[]>;The client request headers to match on.
property method
method?: pulumi.Input<string>;The client request header method to match on. Valid values: GET, HEAD, POST, PUT, DELETE, CONNECT, OPTIONS, TRACE, PATCH.
property prefix
prefix: pulumi.Input<string>;Specifies the path with which to match requests. This parameter must always start with /, which by itself matches all requests to the virtual router service name.
property scheme
scheme?: pulumi.Input<string>;The client request header scheme to match on. Valid values: http, https.
interface RouteSpecHttpRouteMatchHeader
interface RouteSpecHttpRouteMatchHeaderproperty invert
invert?: pulumi.Input<boolean>;If true, the match is on the opposite of the match method and value. Default is false.
property match
match?: pulumi.Input<RouteSpecHttpRouteMatchHeaderMatch>;The method and value to match the header value sent with a request. Specify one match method.
property name
name: pulumi.Input<string>;A name for the HTTP header in the client request that will be matched on.
interface RouteSpecHttpRouteMatchHeaderMatch
interface RouteSpecHttpRouteMatchHeaderMatchproperty exact
exact?: pulumi.Input<string>;The header value sent by the client must match the specified value exactly.
property prefix
prefix?: pulumi.Input<string>;Specifies the path with which to match requests. This parameter must always start with /, which by itself matches all requests to the virtual router service name.
property range
range?: pulumi.Input<RouteSpecHttpRouteMatchHeaderMatchRange>;The object that specifies the range of numbers that the header value sent by the client must be included in.
property regex
regex?: pulumi.Input<string>;The header value sent by the client must include the specified characters.
property suffix
suffix?: pulumi.Input<string>;The header value sent by the client must end with the specified characters.
interface RouteSpecHttpRouteMatchHeaderMatchRange
interface RouteSpecHttpRouteMatchHeaderMatchRangeproperty end
end: pulumi.Input<number>;The end of the range.
property start
start: pulumi.Input<number>;The start of the range.
interface RouteSpecTcpRoute
interface RouteSpecTcpRouteproperty action
action: pulumi.Input<RouteSpecTcpRouteAction>;The action to take if a match is determined.
interface RouteSpecTcpRouteAction
interface RouteSpecTcpRouteActionproperty weightedTargets
weightedTargets: pulumi.Input<pulumi.Input<RouteSpecTcpRouteActionWeightedTarget>[]>;The targets that traffic is routed to when a request matches the route. You can specify one or more targets and their relative weights with which to distribute traffic.
interface RouteSpecTcpRouteActionWeightedTarget
interface RouteSpecTcpRouteActionWeightedTargetproperty virtualNode
virtualNode: pulumi.Input<string>;The virtual node to associate with the weighted target.
property weight
weight: pulumi.Input<number>;The relative weight of the weighted target. An integer between 0 and 100.
interface VirtualNodeSpec
interface VirtualNodeSpecproperty backends
backends?: pulumi.Input<pulumi.Input<VirtualNodeSpecBackend>[]>;The backends to which the virtual node is expected to send outbound traffic.
property listener
listener?: pulumi.Input<VirtualNodeSpecListener>;The listeners from which the virtual node is expected to receive inbound traffic.
property logging
logging?: pulumi.Input<VirtualNodeSpecLogging>;The inbound and outbound access logging information for the virtual node.
property serviceDiscovery
serviceDiscovery?: pulumi.Input<VirtualNodeSpecServiceDiscovery>;The service discovery information for the virtual node.
interface VirtualNodeSpecBackend
interface VirtualNodeSpecBackendproperty virtualService
virtualService?: pulumi.Input<VirtualNodeSpecBackendVirtualService>;Specifies a virtual service to use as a backend for a virtual node.
interface VirtualNodeSpecBackendVirtualService
interface VirtualNodeSpecBackendVirtualServiceproperty virtualServiceName
virtualServiceName: pulumi.Input<string>;The name of the virtual service that is acting as a virtual node backend.
interface VirtualNodeSpecListener
interface VirtualNodeSpecListenerproperty healthCheck
healthCheck?: pulumi.Input<VirtualNodeSpecListenerHealthCheck>;The health check information for the listener.
property portMapping
portMapping: pulumi.Input<VirtualNodeSpecListenerPortMapping>;The port mapping information for the listener.
interface VirtualNodeSpecListenerHealthCheck
interface VirtualNodeSpecListenerHealthCheckproperty healthyThreshold
healthyThreshold: pulumi.Input<number>;The number of consecutive successful health checks that must occur before declaring listener healthy.
property intervalMillis
intervalMillis: pulumi.Input<number>;The time period in milliseconds between each health check execution.
property path
path?: pulumi.Input<string>;The destination path for the health check request. This is only required if the specified protocol is http.
property port
port?: pulumi.Input<number>;The destination port for the health check request. This port must match the port defined in the portMapping for the listener.
property protocol
protocol: pulumi.Input<string>;The protocol for the health check request. Valid values are http and tcp.
property timeoutMillis
timeoutMillis: pulumi.Input<number>;The amount of time to wait when receiving a response from the health check, in milliseconds.
property unhealthyThreshold
unhealthyThreshold: pulumi.Input<number>;The number of consecutive failed health checks that must occur before declaring a virtual node unhealthy.
interface VirtualNodeSpecListenerPortMapping
interface VirtualNodeSpecListenerPortMappingproperty port
port: pulumi.Input<number>;The port used for the port mapping.
property protocol
protocol: pulumi.Input<string>;The protocol used for the port mapping. Valid values are http and tcp.
interface VirtualNodeSpecLogging
interface VirtualNodeSpecLoggingproperty accessLog
accessLog?: pulumi.Input<VirtualNodeSpecLoggingAccessLog>;The access log configuration for a virtual node.
interface VirtualNodeSpecLoggingAccessLog
interface VirtualNodeSpecLoggingAccessLogproperty file
file?: pulumi.Input<VirtualNodeSpecLoggingAccessLogFile>;The file object to send virtual node access logs to.
interface VirtualNodeSpecLoggingAccessLogFile
interface VirtualNodeSpecLoggingAccessLogFileproperty path
path: pulumi.Input<string>;The file path to write access logs to. You can use /dev/stdout to send access logs to standard out.
interface VirtualNodeSpecServiceDiscovery
interface VirtualNodeSpecServiceDiscoveryproperty awsCloudMap
awsCloudMap?: pulumi.Input<VirtualNodeSpecServiceDiscoveryAwsCloudMap>;Specifies any AWS Cloud Map information for the virtual node.
property dns
dns?: pulumi.Input<VirtualNodeSpecServiceDiscoveryDns>;Specifies the DNS service name for the virtual node.
interface VirtualNodeSpecServiceDiscoveryAwsCloudMap
interface VirtualNodeSpecServiceDiscoveryAwsCloudMapproperty attributes
attributes?: pulumi.Input<{[key: string]: pulumi.Input<string>}>;A string map that contains attributes with values that you can use to filter instances by any custom attribute that you specified when you registered the instance. Only instances that match all of the specified key/value pairs will be returned.
property namespaceName
namespaceName: pulumi.Input<string>;The name of the AWS Cloud Map namespace to use.
Use the aws.servicediscovery.HttpNamespace resource to configure a Cloud Map namespace.
property serviceName
serviceName: pulumi.Input<string>;The name of the AWS Cloud Map service to use. Use the aws.servicediscovery.Service resource to configure a Cloud Map service.
interface VirtualNodeSpecServiceDiscoveryDns
interface VirtualNodeSpecServiceDiscoveryDnsproperty hostname
hostname: pulumi.Input<string>;The DNS host name for your virtual node.
interface VirtualRouterSpec
interface VirtualRouterSpecproperty listener
listener: pulumi.Input<VirtualRouterSpecListener>;The listeners that the virtual router is expected to receive inbound traffic from. Currently only one listener is supported per virtual router.
interface VirtualRouterSpecListener
interface VirtualRouterSpecListenerproperty portMapping
portMapping: pulumi.Input<VirtualRouterSpecListenerPortMapping>;The port mapping information for the listener.
interface VirtualRouterSpecListenerPortMapping
interface VirtualRouterSpecListenerPortMappingproperty port
port: pulumi.Input<number>;The port used for the port mapping.
property protocol
protocol: pulumi.Input<string>;The protocol used for the port mapping. Valid values are http and tcp.
interface VirtualServiceSpec
interface VirtualServiceSpecproperty provider
provider?: pulumi.Input<VirtualServiceSpecProvider>;The App Mesh object that is acting as the provider for a virtual service. You can specify a single virtual node or virtual router.
interface VirtualServiceSpecProvider
interface VirtualServiceSpecProviderproperty virtualNode
virtualNode?: pulumi.Input<VirtualServiceSpecProviderVirtualNode>;The virtual node associated with a virtual service.
property virtualRouter
virtualRouter?: pulumi.Input<VirtualServiceSpecProviderVirtualRouter>;The virtual router associated with a virtual service.
interface VirtualServiceSpecProviderVirtualNode
interface VirtualServiceSpecProviderVirtualNodeproperty virtualNodeName
virtualNodeName: pulumi.Input<string>;The name of the virtual node that is acting as a service provider.
interface VirtualServiceSpecProviderVirtualRouter
interface VirtualServiceSpecProviderVirtualRouterproperty virtualRouterName
virtualRouterName: pulumi.Input<string>;The name of the virtual router that is acting as a service provider.
namespace appsync
interface DataSourceDynamodbConfig
interface DataSourceDynamodbConfigproperty region
region?: pulumi.Input<string>;AWS region of Elasticsearch domain. Defaults to current region.
property tableName
tableName: pulumi.Input<string>;Name of the DynamoDB table.
property useCallerCredentials
useCallerCredentials?: pulumi.Input<boolean>;Set to true to use Amazon Cognito credentials with this data source.
interface DataSourceElasticsearchConfig
interface DataSourceElasticsearchConfigproperty endpoint
endpoint: pulumi.Input<string>;HTTP URL.
property region
region?: pulumi.Input<string>;AWS region of Elasticsearch domain. Defaults to current region.
interface DataSourceHttpConfig
interface DataSourceHttpConfigproperty endpoint
endpoint: pulumi.Input<string>;HTTP URL.
interface DataSourceLambdaConfig
interface DataSourceLambdaConfigproperty functionArn
functionArn: pulumi.Input<string>;The ARN for the Lambda function.
interface GraphQLApiAdditionalAuthenticationProvider
interface GraphQLApiAdditionalAuthenticationProviderproperty authenticationType
authenticationType: pulumi.Input<string>;The authentication type. Valid values: API_KEY, AWS_IAM, AMAZON_COGNITO_USER_POOLS, OPENID_CONNECT
property openidConnectConfig
openidConnectConfig?: pulumi.Input<GraphQLApiAdditionalAuthenticationProviderOpenidConnectConfig>;Nested argument containing OpenID Connect configuration. Defined below.
property userPoolConfig
userPoolConfig?: pulumi.Input<GraphQLApiAdditionalAuthenticationProviderUserPoolConfig>;The Amazon Cognito User Pool configuration. Defined below.
interface GraphQLApiAdditionalAuthenticationProviderOpenidConnectConfig
interface GraphQLApiAdditionalAuthenticationProviderOpenidConnectConfigproperty authTtl
authTtl?: pulumi.Input<number>;Number of milliseconds a token is valid after being authenticated.
property clientId
clientId?: pulumi.Input<string>;Client identifier of the Relying party at the OpenID identity provider. This identifier is typically obtained when the Relying party is registered with the OpenID identity provider. You can specify a regular expression so the AWS AppSync can validate against multiple client identifiers at a time.
property iatTtl
iatTtl?: pulumi.Input<number>;Number of milliseconds a token is valid after being issued to a user.
property issuer
issuer: pulumi.Input<string>;Issuer for the OpenID Connect configuration. The issuer returned by discovery MUST exactly match the value of iss in the ID Token.
interface GraphQLApiAdditionalAuthenticationProviderUserPoolConfig
interface GraphQLApiAdditionalAuthenticationProviderUserPoolConfigproperty appIdClientRegex
appIdClientRegex?: pulumi.Input<string>;A regular expression for validating the incoming Amazon Cognito User Pool app client ID.
property awsRegion
awsRegion?: pulumi.Input<string>;The AWS region in which the user pool was created.
property userPoolId
userPoolId: pulumi.Input<string>;The user pool ID.
interface GraphQLApiLogConfig
interface GraphQLApiLogConfigproperty cloudwatchLogsRoleArn
cloudwatchLogsRoleArn: pulumi.Input<string>;Amazon Resource Name of the service role that AWS AppSync will assume to publish to Amazon CloudWatch logs in your account.
property excludeVerboseContent
excludeVerboseContent?: pulumi.Input<boolean>;Set to TRUE to exclude sections that contain information such as headers, context, and evaluated mapping templates, regardless of logging level. Valid values: true, false. Default value: false
property fieldLogLevel
fieldLogLevel: pulumi.Input<string>;Field logging level. Valid values: ALL, ERROR, NONE.
interface GraphQLApiOpenidConnectConfig
interface GraphQLApiOpenidConnectConfigproperty authTtl
authTtl?: pulumi.Input<number>;Number of milliseconds a token is valid after being authenticated.
property clientId
clientId?: pulumi.Input<string>;Client identifier of the Relying party at the OpenID identity provider. This identifier is typically obtained when the Relying party is registered with the OpenID identity provider. You can specify a regular expression so the AWS AppSync can validate against multiple client identifiers at a time.
property iatTtl
iatTtl?: pulumi.Input<number>;Number of milliseconds a token is valid after being issued to a user.
property issuer
issuer: pulumi.Input<string>;Issuer for the OpenID Connect configuration. The issuer returned by discovery MUST exactly match the value of iss in the ID Token.
interface GraphQLApiUserPoolConfig
interface GraphQLApiUserPoolConfigproperty appIdClientRegex
appIdClientRegex?: pulumi.Input<string>;A regular expression for validating the incoming Amazon Cognito User Pool app client ID.
property awsRegion
awsRegion?: pulumi.Input<string>;The AWS region in which the user pool was created.
property defaultAction
defaultAction: pulumi.Input<string>;The action that you want your GraphQL API to take when a request that uses Amazon Cognito User Pool authentication doesn’t match the Amazon Cognito User Pool configuration. Valid: ALLOW and DENY
property userPoolId
userPoolId: pulumi.Input<string>;The user pool ID.
interface ResolverCachingConfig
interface ResolverCachingConfigproperty cachingKeys
cachingKeys?: pulumi.Input<pulumi.Input<string>[]>;The list of caching key.
property ttl
ttl?: pulumi.Input<number>;The TTL in seconds.
interface ResolverPipelineConfig
interface ResolverPipelineConfigproperty functions
functions?: pulumi.Input<pulumi.Input<string>[]>;The list of Function ID.
namespace athena
interface DatabaseEncryptionConfiguration
interface DatabaseEncryptionConfigurationproperty encryptionOption
encryptionOption: pulumi.Input<string>;The type of key; one of SSE_S3, SSE_KMS, CSE_KMS
property kmsKey
kmsKey?: pulumi.Input<string>;The KMS key ARN or ID; required for key types SSE_KMS and CSE_KMS.
interface WorkgroupConfiguration
interface WorkgroupConfigurationproperty bytesScannedCutoffPerQuery
bytesScannedCutoffPerQuery?: pulumi.Input<number>;Integer for the upper data usage limit (cutoff) for the amount of bytes a single query in a workgroup is allowed to scan. Must be at least 10485760.
property enforceWorkgroupConfiguration
enforceWorkgroupConfiguration?: pulumi.Input<boolean>;Boolean whether the settings for the workgroup override client-side settings. For more information, see Workgroup Settings Override Client-Side Settings. Defaults to true.
property publishCloudwatchMetricsEnabled
publishCloudwatchMetricsEnabled?: pulumi.Input<boolean>;Boolean whether Amazon CloudWatch metrics are enabled for the workgroup. Defaults to true.
property resultConfiguration
resultConfiguration?: pulumi.Input<WorkgroupConfigurationResultConfiguration>;Configuration block with result settings. Documented below.
interface WorkgroupConfigurationResultConfiguration
interface WorkgroupConfigurationResultConfigurationproperty encryptionConfiguration
encryptionConfiguration?: pulumi.Input<WorkgroupConfigurationResultConfigurationEncryptionConfiguration>;Configuration block with encryption settings. Documented below.
property outputLocation
outputLocation?: pulumi.Input<string>;The location in Amazon S3 where your query results are stored, such as s3://path/to/query/bucket/. For more information, see Queries and Query Result Files.
interface WorkgroupConfigurationResultConfigurationEncryptionConfiguration
interface WorkgroupConfigurationResultConfigurationEncryptionConfigurationproperty encryptionOption
encryptionOption?: pulumi.Input<string>;Indicates whether Amazon S3 server-side encryption with Amazon S3-managed keys (SSE_S3), server-side encryption with KMS-managed keys (SSE_KMS), or client-side encryption with KMS-managed keys (CSE_KMS) is used. If a query runs in a workgroup and the workgroup overrides client-side settings, then the workgroup’s setting for encryption is used. It specifies whether query results must be encrypted, for all queries that run in this workgroup.
property kmsKeyArn
kmsKeyArn?: pulumi.Input<string>;For SSE_KMS and CSE_KMS, this is the KMS key Amazon Resource Name (ARN).
namespace autoscaling
interface GroupInitialLifecycleHook
interface GroupInitialLifecycleHookproperty defaultResult
defaultResult?: pulumi.Input<string>;property heartbeatTimeout
heartbeatTimeout?: pulumi.Input<number>;property lifecycleTransition
lifecycleTransition: pulumi.Input<string>;property name
name: pulumi.Input<string>;The name of the auto scaling group. By default generated by this provider.
property notificationMetadata
notificationMetadata?: pulumi.Input<string>;property notificationTargetArn
notificationTargetArn?: pulumi.Input<string>;property roleArn
roleArn?: pulumi.Input<string>;interface GroupLaunchTemplate
interface GroupLaunchTemplateproperty id
id?: pulumi.Input<string>;The ID of the launch template. Conflicts with name.
property name
name?: pulumi.Input<string>;The name of the auto scaling group. By default generated by this provider.
property version
version?: pulumi.Input<string>;Template version. Can be version number, $Latest, or $Default. (Default: $Default).
interface GroupMixedInstancesPolicy
interface GroupMixedInstancesPolicyproperty instancesDistribution
instancesDistribution?: pulumi.Input<GroupMixedInstancesPolicyInstancesDistribution>;Nested argument containing settings on how to mix on-demand and Spot instances in the Auto Scaling group. Defined below.
property launchTemplate
launchTemplate: pulumi.Input<GroupMixedInstancesPolicyLaunchTemplate>;Nested argument containing launch template settings along with the overrides to specify multiple instance types and weights. Defined below.
interface GroupMixedInstancesPolicyInstancesDistribution
interface GroupMixedInstancesPolicyInstancesDistributionproperty onDemandAllocationStrategy
onDemandAllocationStrategy?: pulumi.Input<string>;Strategy to use when launching on-demand instances. Valid values: prioritized. Default: prioritized.
property onDemandBaseCapacity
onDemandBaseCapacity?: pulumi.Input<number>;Absolute minimum amount of desired capacity that must be fulfilled by on-demand instances. Default: 0.
property onDemandPercentageAboveBaseCapacity
onDemandPercentageAboveBaseCapacity?: pulumi.Input<number>;Percentage split between on-demand and Spot instances above the base on-demand capacity. Default: 100.
property spotAllocationStrategy
spotAllocationStrategy?: pulumi.Input<string>;How to allocate capacity across the Spot pools. Valid values: lowest-price, capacity-optimized. Default: lowest-price.
property spotInstancePools
spotInstancePools?: pulumi.Input<number>;Number of Spot pools per availability zone to allocate capacity. EC2 Auto Scaling selects the cheapest Spot pools and evenly allocates Spot capacity across the number of Spot pools that you specify. Default: 2.
property spotMaxPrice
spotMaxPrice?: pulumi.Input<string>;Maximum price per unit hour that the user is willing to pay for the Spot instances. Default: an empty string which means the on-demand price.
interface GroupMixedInstancesPolicyLaunchTemplate
interface GroupMixedInstancesPolicyLaunchTemplateproperty launchTemplateSpecification
launchTemplateSpecification: pulumi.Input<GroupMixedInstancesPolicyLaunchTemplateLaunchTemplateSpecification>;Nested argument defines the Launch Template. Defined below.
property overrides
overrides?: pulumi.Input<pulumi.Input<GroupMixedInstancesPolicyLaunchTemplateOverride>[]>;List of nested arguments provides the ability to specify multiple instance types. This will override the same parameter in the launch template. For on-demand instances, Auto Scaling considers the order of preference of instance types to launch based on the order specified in the overrides list. Defined below.
interface GroupMixedInstancesPolicyLaunchTemplateLaunchTemplateSpecification
interface GroupMixedInstancesPolicyLaunchTemplateLaunchTemplateSpecificationproperty launchTemplateId
launchTemplateId?: pulumi.Input<string>;The ID of the launch template. Conflicts with launchTemplateName.
property launchTemplateName
launchTemplateName?: pulumi.Input<string>;The name of the launch template. Conflicts with launchTemplateId.
property version
version?: pulumi.Input<string>;Template version. Can be version number, $Latest, or $Default. (Default: $Default).
interface GroupMixedInstancesPolicyLaunchTemplateOverride
interface GroupMixedInstancesPolicyLaunchTemplateOverrideproperty instanceType
instanceType?: pulumi.Input<string>;Override the instance type in the Launch Template.
property weightedCapacity
weightedCapacity?: pulumi.Input<string>;The number of capacity units, which gives the instance type a proportional weight to other instance types.
interface GroupTag
interface GroupTagproperty key
key: pulumi.Input<string>;Key
property propagateAtLaunch
propagateAtLaunch: pulumi.Input<boolean>;Enables propagation of the tag to Amazon EC2 instances launched via this ASG
property value
value: pulumi.Input<string>;Value
interface PolicyStepAdjustment
interface PolicyStepAdjustmentproperty metricIntervalLowerBound
metricIntervalLowerBound?: pulumi.Input<string>;The lower bound for the difference between the alarm threshold and the CloudWatch metric. Without a value, AWS will treat this bound as infinity.
property metricIntervalUpperBound
metricIntervalUpperBound?: pulumi.Input<string>;The upper bound for the difference between the alarm threshold and the CloudWatch metric. Without a value, AWS will treat this bound as infinity. The upper bound must be greater than the lower bound.
property scalingAdjustment
scalingAdjustment: pulumi.Input<number>;The number of members by which to scale, when the adjustment bounds are breached. A positive value scales up. A negative value scales down.
interface PolicyTargetTrackingConfiguration
interface PolicyTargetTrackingConfigurationproperty customizedMetricSpecification
customizedMetricSpecification?: pulumi.Input<PolicyTargetTrackingConfigurationCustomizedMetricSpecification>;A customized metric. Conflicts with predefinedMetricSpecification.
property disableScaleIn
disableScaleIn?: pulumi.Input<boolean>;Indicates whether scale in by the target tracking policy is disabled.
property predefinedMetricSpecification
predefinedMetricSpecification?: pulumi.Input<PolicyTargetTrackingConfigurationPredefinedMetricSpecification>;A predefined metric. Conflicts with customizedMetricSpecification.
property targetValue
targetValue: pulumi.Input<number>;The target value for the metric.
interface PolicyTargetTrackingConfigurationCustomizedMetricSpecification
interface PolicyTargetTrackingConfigurationCustomizedMetricSpecificationproperty metricDimensions
metricDimensions?: pulumi.Input<pulumi.Input<PolicyTargetTrackingConfigurationCustomizedMetricSpecificationMetricDimension>[]>;The dimensions of the metric.
property metricName
metricName: pulumi.Input<string>;The name of the metric.
property namespace
namespace: pulumi.Input<string>;The namespace of the metric.
property statistic
statistic: pulumi.Input<string>;The statistic of the metric.
property unit
unit?: pulumi.Input<string>;The unit of the metric.
interface PolicyTargetTrackingConfigurationCustomizedMetricSpecificationMetricDimension
interface PolicyTargetTrackingConfigurationCustomizedMetricSpecificationMetricDimensionproperty name
name: pulumi.Input<string>;The name of the dimension.
property value
value: pulumi.Input<string>;The value of the dimension.
interface PolicyTargetTrackingConfigurationPredefinedMetricSpecification
interface PolicyTargetTrackingConfigurationPredefinedMetricSpecificationproperty predefinedMetricType
predefinedMetricType: pulumi.Input<string>;The metric type.
property resourceLabel
resourceLabel?: pulumi.Input<string>;Identifies the resource associated with the metric type.
namespace backup
interface PlanRule
interface PlanRuleproperty completionWindow
completionWindow?: pulumi.Input<number>;The amount of time AWS Backup attempts a backup before canceling the job and returning an error.
property copyActions
copyActions?: pulumi.Input<pulumi.Input<PlanRuleCopyAction>[]>;Configuration block(s) with copy operation settings. Detailed below.
property lifecycle
lifecycle?: pulumi.Input<PlanRuleLifecycle>;The lifecycle defines when a protected resource is copied over to a backup vault and when it expires. Fields documented above.
property recoveryPointTags
recoveryPointTags?: pulumi.Input<{[key: string]: any}>;Metadata that you can assign to help organize the resources that you create.
property ruleName
ruleName: pulumi.Input<string>;An display name for a backup rule.
property schedule
schedule?: pulumi.Input<string>;A CRON expression specifying when AWS Backup initiates a backup job.
property startWindow
startWindow?: pulumi.Input<number>;The amount of time in minutes before beginning a backup.
property targetVaultName
targetVaultName: pulumi.Input<string>;The name of a logical container where backups are stored.
interface PlanRuleCopyAction
interface PlanRuleCopyActionproperty destinationVaultArn
destinationVaultArn: pulumi.Input<string>;An Amazon Resource Name (ARN) that uniquely identifies the destination backup vault for the copied backup.
property lifecycle
lifecycle?: pulumi.Input<PlanRuleCopyActionLifecycle>;The lifecycle defines when a protected resource is copied over to a backup vault and when it expires. Fields documented above.
interface PlanRuleCopyActionLifecycle
interface PlanRuleCopyActionLifecycleproperty coldStorageAfter
coldStorageAfter?: pulumi.Input<number>;Specifies the number of days after creation that a recovery point is moved to cold storage.
property deleteAfter
deleteAfter?: pulumi.Input<number>;Specifies the number of days after creation that a recovery point is deleted. Must be 90 days greater than coldStorageAfter.
interface PlanRuleLifecycle
interface PlanRuleLifecycleproperty coldStorageAfter
coldStorageAfter?: pulumi.Input<number>;Specifies the number of days after creation that a recovery point is moved to cold storage.
property deleteAfter
deleteAfter?: pulumi.Input<number>;Specifies the number of days after creation that a recovery point is deleted. Must be 90 days greater than coldStorageAfter.
interface SelectionSelectionTag
interface SelectionSelectionTagproperty key
key: pulumi.Input<string>;The key in a key-value pair.
property type
type: pulumi.Input<string>;An operation, such as StringEquals, that is applied to a key-value pair used to filter resources in a selection.
property value
value: pulumi.Input<string>;The value in a key-value pair.
namespace batch
interface ComputeEnvironmentComputeResources
interface ComputeEnvironmentComputeResourcesproperty allocationStrategy
allocationStrategy?: pulumi.Input<string>;The allocation strategy to use for the compute resource in case not enough instances of the best fitting instance type can be allocated. Valid items are BEST_FIT_PROGRESSIVE, SPOT_CAPACITY_OPTIMIZED or BEST_FIT. Defaults to BEST_FIT. See AWS docs for details.
property bidPercentage
bidPercentage?: pulumi.Input<number>;Integer of minimum percentage that a Spot Instance price must be when compared with the On-Demand price for that instance type before instances are launched. For example, if your bid percentage is 20% (20), then the Spot price must be below 20% of the current On-Demand price for that EC2 instance. This parameter is required for SPOT compute environments.
property desiredVcpus
desiredVcpus?: pulumi.Input<number>;The desired number of EC2 vCPUS in the compute environment.
property ec2KeyPair
ec2KeyPair?: pulumi.Input<string>;The EC2 key pair that is used for instances launched in the compute environment.
property imageId
imageId?: pulumi.Input<string>;The Amazon Machine Image (AMI) ID used for instances launched in the compute environment.
property instanceRole
instanceRole: pulumi.Input<string>;The Amazon ECS instance role applied to Amazon EC2 instances in a compute environment.
property instanceTypes
instanceTypes: pulumi.Input<pulumi.Input<string>[]>;A list of instance types that may be launched.
property launchTemplate
launchTemplate?: pulumi.Input<ComputeEnvironmentComputeResourcesLaunchTemplate>;The launch template to use for your compute resources. See details below.
property maxVcpus
maxVcpus: pulumi.Input<number>;The maximum number of EC2 vCPUs that an environment can reach.
property minVcpus
minVcpus: pulumi.Input<number>;The minimum number of EC2 vCPUs that an environment should maintain.
property securityGroupIds
securityGroupIds: pulumi.Input<pulumi.Input<string>[]>;A list of EC2 security group that are associated with instances launched in the compute environment.
property spotIamFleetRole
spotIamFleetRole?: pulumi.Input<string>;The Amazon Resource Name (ARN) of the Amazon EC2 Spot Fleet IAM role applied to a SPOT compute environment. This parameter is required for SPOT compute environments.
property subnets
subnets: pulumi.Input<pulumi.Input<string>[]>;A list of VPC subnets into which the compute resources are launched.
property tags
tags?: pulumi.Input<{[key: string]: any}>;Key-value pair tags to be applied to resources that are launched in the compute environment.
property type
type: pulumi.Input<string>;The type of compute environment. Valid items are EC2 or SPOT.
interface ComputeEnvironmentComputeResourcesLaunchTemplate
interface ComputeEnvironmentComputeResourcesLaunchTemplateproperty launchTemplateId
launchTemplateId?: pulumi.Input<string>;ID of the launch template. You must specify either the launch template ID or launch template name in the request, but not both.
property launchTemplateName
launchTemplateName?: pulumi.Input<string>;Name of the launch template.
property version
version?: pulumi.Input<string>;The version number of the launch template. Default: The default version of the launch template.
interface JobDefinitionRetryStrategy
interface JobDefinitionRetryStrategyproperty attempts
attempts?: pulumi.Input<number>;The number of times to move a job to the RUNNABLE status. You may specify between 1 and 10 attempts.
interface JobDefinitionTimeout
interface JobDefinitionTimeoutproperty attemptDurationSeconds
attemptDurationSeconds?: pulumi.Input<number>;The time duration in seconds after which AWS Batch terminates your jobs if they have not finished. The minimum value for the timeout is 60 seconds.
namespace budgets
interface BudgetCostTypes
interface BudgetCostTypesproperty includeCredit
includeCredit?: pulumi.Input<boolean>;A boolean value whether to include credits in the cost budget. Defaults to true
property includeDiscount
includeDiscount?: pulumi.Input<boolean>;Specifies whether a budget includes discounts. Defaults to true
property includeOtherSubscription
includeOtherSubscription?: pulumi.Input<boolean>;A boolean value whether to include other subscription costs in the cost budget. Defaults to true
property includeRecurring
includeRecurring?: pulumi.Input<boolean>;A boolean value whether to include recurring costs in the cost budget. Defaults to true
property includeRefund
includeRefund?: pulumi.Input<boolean>;A boolean value whether to include refunds in the cost budget. Defaults to true
property includeSubscription
includeSubscription?: pulumi.Input<boolean>;A boolean value whether to include subscriptions in the cost budget. Defaults to true
property includeSupport
includeSupport?: pulumi.Input<boolean>;A boolean value whether to include support costs in the cost budget. Defaults to true
property includeTax
includeTax?: pulumi.Input<boolean>;A boolean value whether to include tax in the cost budget. Defaults to true
property includeUpfront
includeUpfront?: pulumi.Input<boolean>;A boolean value whether to include upfront costs in the cost budget. Defaults to true
property useAmortized
useAmortized?: pulumi.Input<boolean>;Specifies whether a budget uses the amortized rate. Defaults to false
property useBlended
useBlended?: pulumi.Input<boolean>;A boolean value whether to use blended costs in the cost budget. Defaults to false
interface BudgetNotification
interface BudgetNotificationproperty comparisonOperator
comparisonOperator: pulumi.Input<string>;(Required) Comparison operator to use to evaluate the condition. Can be LESS_THAN, EQUAL_TO or GREATER_THAN.
property notificationType
notificationType: pulumi.Input<string>;(Required) What kind of budget value to notify on. Can be ACTUAL or FORECASTED
property subscriberEmailAddresses
subscriberEmailAddresses?: pulumi.Input<pulumi.Input<string>[]>;(Optional) E-Mail addresses to notify. Either this or subscriberSnsTopicArns is required.
property subscriberSnsTopicArns
subscriberSnsTopicArns?: pulumi.Input<pulumi.Input<string>[]>;(Optional) SNS topics to notify. Either this or subscriberEmailAddresses is required.
property threshold
threshold: pulumi.Input<number>;(Required) Threshold when the notification should be sent.
property thresholdType
thresholdType: pulumi.Input<string>;(Required) What kind of threshold is defined. Can be PERCENTAGE OR ABSOLUTE_VALUE.
namespace cfg
interface ConfigurationAggregatorAccountAggregationSource
interface ConfigurationAggregatorAccountAggregationSourceproperty accountIds
accountIds: pulumi.Input<pulumi.Input<string>[]>;List of 12-digit account IDs of the account(s) being aggregated.
property allRegions
allRegions?: pulumi.Input<boolean>;If true, aggregate existing AWS Config regions and future regions.
property regions
regions?: pulumi.Input<pulumi.Input<string>[]>;List of source regions being aggregated.
interface ConfigurationAggregatorOrganizationAggregationSource
interface ConfigurationAggregatorOrganizationAggregationSourceproperty allRegions
allRegions?: pulumi.Input<boolean>;If true, aggregate existing AWS Config regions and future regions.
property regions
regions?: pulumi.Input<pulumi.Input<string>[]>;List of source regions being aggregated.
property roleArn
roleArn: pulumi.Input<string>;ARN of the IAM role used to retrieve AWS Organization details associated with the aggregator account.
interface DeliveryChannelSnapshotDeliveryProperties
interface DeliveryChannelSnapshotDeliveryPropertiesproperty deliveryFrequency
deliveryFrequency?: pulumi.Input<string>;- The frequency with which AWS Config recurringly delivers configuration snapshots.
e.g.
One_HourorThree_Hours. Valid values are listed here.
interface RecorderRecordingGroup
interface RecorderRecordingGroupproperty allSupported
allSupported?: pulumi.Input<boolean>;Specifies whether AWS Config records configuration changes
for every supported type of regional resource (which includes any new type that will become supported in the future).
Conflicts with resourceTypes. Defaults to true.
property includeGlobalResourceTypes
includeGlobalResourceTypes?: pulumi.Input<boolean>;Specifies whether AWS Config includes all supported types of global resources
with the resources that it records. Requires allSupported = true. Conflicts with resourceTypes.
property resourceTypes
resourceTypes?: pulumi.Input<pulumi.Input<string>[]>;A list that specifies the types of AWS resources for which
AWS Config records configuration changes (for example, AWS::EC2::Instance or AWS::CloudTrail::Trail).
See relevant part of AWS Docs for available types.
interface RuleScope
interface RuleScopeproperty complianceResourceId
complianceResourceId?: pulumi.Input<string>;The IDs of the only AWS resource that you want to trigger an evaluation for the rule.
If you specify a resource ID, you must specify one resource type for complianceResourceTypes.
property complianceResourceTypes
complianceResourceTypes?: pulumi.Input<pulumi.Input<string>[]>;A list of resource types of only those AWS resources that you want to trigger an
evaluation for the rule. e.g. AWS::EC2::Instance. You can only specify one type if you also specify
a resource ID for complianceResourceId. See relevant part of AWS Docs for available types.
property tagKey
tagKey?: pulumi.Input<string>;The tag key that is applied to only those AWS resources that you want you want to trigger an evaluation for the rule.
property tagValue
tagValue?: pulumi.Input<string>;The tag value applied to only those AWS resources that you want to trigger an evaluation for the rule.
interface RuleSource
interface RuleSourceproperty owner
owner: pulumi.Input<string>;Indicates whether AWS or the customer owns and manages the AWS Config rule. Valid values are AWS or CUSTOM_LAMBDA. For more information about managed rules, see the AWS Config Managed Rules documentation. For more information about custom rules, see the AWS Config Custom Rules documentation. Custom Lambda Functions require permissions to allow the AWS Config service to invoke them, e.g. via the aws.lambda.Permission resource.
property sourceDetails
sourceDetails?: pulumi.Input<pulumi.Input<RuleSourceSourceDetail>[]>;Provides the source and type of the event that causes AWS Config to evaluate your AWS resources. Only valid if owner is CUSTOM_LAMBDA.
property sourceIdentifier
sourceIdentifier: pulumi.Input<string>;For AWS Config managed rules, a predefined identifier, e.g IAM_PASSWORD_POLICY. For custom Lambda rules, the identifier is the ARN of the Lambda Function, such as arn:aws:lambda:us-east-1:123456789012:function:custom_rule_name or the arn attribute of the aws.lambda.Function resource.
interface RuleSourceSourceDetail
interface RuleSourceSourceDetailproperty eventSource
eventSource?: pulumi.Input<string>;The source of the event, such as an AWS service, that triggers AWS Config
to evaluate your AWS resources. This defaults to aws.config and is the only valid value.
property maximumExecutionFrequency
maximumExecutionFrequency?: pulumi.Input<string>;The frequency that you want AWS Config to run evaluations for a rule that
is triggered periodically. If specified, requires messageType to be ScheduledNotification.
property messageType
messageType?: pulumi.Input<string>;The type of notification that triggers AWS Config to run an evaluation for a rule. You can specify the following notification types:
namespace cloudfront
interface DistributionCustomErrorResponse
interface DistributionCustomErrorResponseproperty errorCachingMinTtl
errorCachingMinTtl?: pulumi.Input<number>;The minimum amount of time you want HTTP error codes to stay in CloudFront caches before CloudFront queries your origin to see whether the object has been updated.
property errorCode
errorCode: pulumi.Input<number>;The 4xx or 5xx HTTP status code that you want to customize.
property responseCode
responseCode?: pulumi.Input<number>;The HTTP status code that you want CloudFront to return with the custom error page to the viewer.
property responsePagePath
responsePagePath?: pulumi.Input<string>;The path of the custom error page (for
example, /custom_404.html).
interface DistributionDefaultCacheBehavior
interface DistributionDefaultCacheBehaviorproperty allowedMethods
allowedMethods: pulumi.Input<pulumi.Input<string>[]>;Controls which HTTP methods CloudFront processes and forwards to your Amazon S3 bucket or your custom origin.
property cachedMethods
cachedMethods: pulumi.Input<pulumi.Input<string>[]>;Controls whether CloudFront caches the response to requests using the specified HTTP methods.
property compress
compress?: pulumi.Input<boolean>;Whether you want CloudFront to automatically
compress content for web requests that include Accept-Encoding: gzip in
the request header (default: false).
property defaultTtl
defaultTtl?: pulumi.Input<number>;The default amount of time (in seconds) that an
object is in a CloudFront cache before CloudFront forwards another request
in the absence of an Cache-Control max-age or Expires header. Defaults to
1 day.
property fieldLevelEncryptionId
fieldLevelEncryptionId?: pulumi.Input<string>;Field level encryption configuration ID
property forwardedValues
forwardedValues: pulumi.Input<DistributionDefaultCacheBehaviorForwardedValues>;The forwarded values configuration that specifies how CloudFront handles query strings, cookies and headers (maximum one).
property lambdaFunctionAssociations
lambdaFunctionAssociations?: pulumi.Input<pulumi.Input<DistributionDefaultCacheBehaviorLambdaFunctionAssociation>[]>;A config block that triggers a lambda function with specific actions. Defined below, maximum 4.
property maxTtl
maxTtl?: pulumi.Input<number>;The maximum amount of time (in seconds) that an
object is in a CloudFront cache before CloudFront forwards another request
to your origin to determine whether the object has been updated. Only
effective in the presence of Cache-Control max-age, Cache-Control
s-maxage, and Expires headers. Defaults to 365 days.
property minTtl
minTtl?: pulumi.Input<number>;The minimum amount of time that you want objects to stay in CloudFront caches before CloudFront queries your origin to see whether the object has been updated. Defaults to 0 seconds.
property smoothStreaming
smoothStreaming?: pulumi.Input<boolean>;Indicates whether you want to distribute media files in Microsoft Smooth Streaming format using the origin that is associated with this cache behavior.
property targetOriginId
targetOriginId: pulumi.Input<string>;The value of ID for the origin that you want CloudFront to route requests to when a request matches the path pattern either for a cache behavior or for the default cache behavior.
property trustedSigners
trustedSigners?: pulumi.Input<pulumi.Input<string>[]>;The AWS accounts, if any, that you want to allow to create signed URLs for private content.
property viewerProtocolPolicy
viewerProtocolPolicy: pulumi.Input<string>;Use this element to specify the
protocol that users can use to access the files in the origin specified by
TargetOriginId when a request matches the path pattern in PathPattern. One
of allow-all, https-only, or redirect-to-https.
interface DistributionDefaultCacheBehaviorForwardedValues
interface DistributionDefaultCacheBehaviorForwardedValuesproperty cookies
cookies: pulumi.Input<DistributionDefaultCacheBehaviorForwardedValuesCookies>;The forwarded values cookies that specifies how CloudFront handles cookies (maximum one).
property headers
headers?: pulumi.Input<pulumi.Input<string>[]>;Specifies the Headers, if any, that you want
CloudFront to vary upon for this cache behavior. Specify * to include all
headers.
property queryString
queryString: pulumi.Input<boolean>;Indicates whether you want CloudFront to forward query strings to the origin that is associated with this cache behavior.
property queryStringCacheKeys
queryStringCacheKeys?: pulumi.Input<pulumi.Input<string>[]>;When specified, along with a value of
true for queryString, all query strings are forwarded, however only the
query string keys listed in this argument are cached. When omitted with a
value of true for queryString, all query string keys are cached.
interface DistributionDefaultCacheBehaviorForwardedValuesCookies
interface DistributionDefaultCacheBehaviorForwardedValuesCookiesproperty forward
forward: pulumi.Input<string>;Specifies whether you want CloudFront to forward
cookies to the origin that is associated with this cache behavior. You can
specify all, none or whitelist. If whitelist, you must include the
subsequent whitelistedNames
property whitelistedNames
whitelistedNames?: pulumi.Input<pulumi.Input<string>[]>;If you have specified whitelist to
forward, the whitelisted cookies that you want CloudFront to forward to
your origin.
interface DistributionDefaultCacheBehaviorLambdaFunctionAssociation
interface DistributionDefaultCacheBehaviorLambdaFunctionAssociationproperty eventType
eventType: pulumi.Input<string>;The specific event to trigger this function.
Valid values: viewer-request, origin-request, viewer-response,
origin-response
property includeBody
includeBody?: pulumi.Input<boolean>;When set to true it exposes the request body to the lambda function. Defaults to false. Valid values: true, false.
property lambdaArn
lambdaArn: pulumi.Input<string>;ARN of the Lambda function.
interface DistributionLoggingConfig
interface DistributionLoggingConfigproperty bucket
bucket: pulumi.Input<string>;The Amazon S3 bucket to store the access logs in, for
example, myawslogbucket.s3.amazonaws.com.
property includeCookies
includeCookies?: pulumi.Input<boolean>;Specifies whether you want CloudFront to
include cookies in access logs (default: false).
property prefix
prefix?: pulumi.Input<string>;An optional string that you want CloudFront to prefix
to the access log filenames for this distribution, for example, myprefix/.
interface DistributionOrderedCacheBehavior
interface DistributionOrderedCacheBehaviorproperty allowedMethods
allowedMethods: pulumi.Input<pulumi.Input<string>[]>;Controls which HTTP methods CloudFront processes and forwards to your Amazon S3 bucket or your custom origin.
property cachedMethods
cachedMethods: pulumi.Input<pulumi.Input<string>[]>;Controls whether CloudFront caches the response to requests using the specified HTTP methods.
property compress
compress?: pulumi.Input<boolean>;Whether you want CloudFront to automatically
compress content for web requests that include Accept-Encoding: gzip in
the request header (default: false).
property defaultTtl
defaultTtl?: pulumi.Input<number>;The default amount of time (in seconds) that an
object is in a CloudFront cache before CloudFront forwards another request
in the absence of an Cache-Control max-age or Expires header. Defaults to
1 day.
property fieldLevelEncryptionId
fieldLevelEncryptionId?: pulumi.Input<string>;Field level encryption configuration ID
property forwardedValues
forwardedValues: pulumi.Input<DistributionOrderedCacheBehaviorForwardedValues>;The forwarded values configuration that specifies how CloudFront handles query strings, cookies and headers (maximum one).
property lambdaFunctionAssociations
lambdaFunctionAssociations?: pulumi.Input<pulumi.Input<DistributionOrderedCacheBehaviorLambdaFunctionAssociation>[]>;A config block that triggers a lambda function with specific actions. Defined below, maximum 4.
property maxTtl
maxTtl?: pulumi.Input<number>;The maximum amount of time (in seconds) that an
object is in a CloudFront cache before CloudFront forwards another request
to your origin to determine whether the object has been updated. Only
effective in the presence of Cache-Control max-age, Cache-Control
s-maxage, and Expires headers. Defaults to 365 days.
property minTtl
minTtl?: pulumi.Input<number>;The minimum amount of time that you want objects to stay in CloudFront caches before CloudFront queries your origin to see whether the object has been updated. Defaults to 0 seconds.
property pathPattern
pathPattern: pulumi.Input<string>;The pattern (for example, images/*.jpg) that
specifies which requests you want this cache behavior to apply to.
property smoothStreaming
smoothStreaming?: pulumi.Input<boolean>;Indicates whether you want to distribute media files in Microsoft Smooth Streaming format using the origin that is associated with this cache behavior.
property targetOriginId
targetOriginId: pulumi.Input<string>;The value of ID for the origin that you want CloudFront to route requests to when a request matches the path pattern either for a cache behavior or for the default cache behavior.
property trustedSigners
trustedSigners?: pulumi.Input<pulumi.Input<string>[]>;The AWS accounts, if any, that you want to allow to create signed URLs for private content.
property viewerProtocolPolicy
viewerProtocolPolicy: pulumi.Input<string>;Use this element to specify the
protocol that users can use to access the files in the origin specified by
TargetOriginId when a request matches the path pattern in PathPattern. One
of allow-all, https-only, or redirect-to-https.
interface DistributionOrderedCacheBehaviorForwardedValues
interface DistributionOrderedCacheBehaviorForwardedValuesproperty cookies
cookies: pulumi.Input<DistributionOrderedCacheBehaviorForwardedValuesCookies>;The forwarded values cookies that specifies how CloudFront handles cookies (maximum one).
property headers
headers?: pulumi.Input<pulumi.Input<string>[]>;Specifies the Headers, if any, that you want
CloudFront to vary upon for this cache behavior. Specify * to include all
headers.
property queryString
queryString: pulumi.Input<boolean>;Indicates whether you want CloudFront to forward query strings to the origin that is associated with this cache behavior.
property queryStringCacheKeys
queryStringCacheKeys?: pulumi.Input<pulumi.Input<string>[]>;When specified, along with a value of
true for queryString, all query strings are forwarded, however only the
query string keys listed in this argument are cached. When omitted with a
value of true for queryString, all query string keys are cached.
interface DistributionOrderedCacheBehaviorForwardedValuesCookies
interface DistributionOrderedCacheBehaviorForwardedValuesCookiesproperty forward
forward: pulumi.Input<string>;Specifies whether you want CloudFront to forward
cookies to the origin that is associated with this cache behavior. You can
specify all, none or whitelist. If whitelist, you must include the
subsequent whitelistedNames
property whitelistedNames
whitelistedNames?: pulumi.Input<pulumi.Input<string>[]>;If you have specified whitelist to
forward, the whitelisted cookies that you want CloudFront to forward to
your origin.
interface DistributionOrderedCacheBehaviorLambdaFunctionAssociation
interface DistributionOrderedCacheBehaviorLambdaFunctionAssociationproperty eventType
eventType: pulumi.Input<string>;The specific event to trigger this function.
Valid values: viewer-request, origin-request, viewer-response,
origin-response
property includeBody
includeBody?: pulumi.Input<boolean>;When set to true it exposes the request body to the lambda function. Defaults to false. Valid values: true, false.
property lambdaArn
lambdaArn: pulumi.Input<string>;ARN of the Lambda function.
interface DistributionOrigin
interface DistributionOriginproperty customHeaders
customHeaders?: pulumi.Input<pulumi.Input<DistributionOriginCustomHeader>[]>;One or more sub-resources with name and
value parameters that specify header data that will be sent to the origin
(multiples allowed).
property customOriginConfig
customOriginConfig?: pulumi.Input<DistributionOriginCustomOriginConfig>;The CloudFront custom
origin configuration information. If an S3
origin is required, use s3OriginConfig instead.
property domainName
domainName: pulumi.Input<string>;The DNS domain name of either the S3 bucket, or web site of your custom origin.
property originId
originId: pulumi.Input<string>;The unique identifier of the member origin
property originPath
originPath?: pulumi.Input<string>;An optional element that causes CloudFront to request your content from a directory in your Amazon S3 bucket or your custom origin.
property s3OriginConfig
s3OriginConfig?: pulumi.Input<DistributionOriginS3OriginConfig>;The CloudFront S3 origin
configuration information. If a custom origin is required, use
customOriginConfig instead.
interface DistributionOriginCustomHeader
interface DistributionOriginCustomHeaderproperty name
name: pulumi.Input<string>;property value
value: pulumi.Input<string>;interface DistributionOriginCustomOriginConfig
interface DistributionOriginCustomOriginConfigproperty httpPort
httpPort: pulumi.Input<number>;The HTTP port the custom origin listens on.
property httpsPort
httpsPort: pulumi.Input<number>;The HTTPS port the custom origin listens on.
property originKeepaliveTimeout
originKeepaliveTimeout?: pulumi.Input<number>;The Custom KeepAlive timeout, in seconds. By default, AWS enforces a limit of 60. But you can request an increase.
property originProtocolPolicy
originProtocolPolicy: pulumi.Input<string>;The origin protocol policy to apply to
your origin. One of http-only, https-only, or match-viewer.
property originReadTimeout
originReadTimeout?: pulumi.Input<number>;The Custom Read timeout, in seconds. By default, AWS enforces a limit of 60. But you can request an increase.
property originSslProtocols
originSslProtocols: pulumi.Input<pulumi.Input<string>[]>;The SSL/TLS protocols that you want
CloudFront to use when communicating with your origin over HTTPS. A list of
one or more of SSLv3, TLSv1, TLSv1.1, and TLSv1.2.
interface DistributionOriginGroup
interface DistributionOriginGroupproperty failoverCriteria
failoverCriteria: pulumi.Input<DistributionOriginGroupFailoverCriteria>;The failover criteria for when to failover to the secondary origin
property members
members: pulumi.Input<pulumi.Input<DistributionOriginGroupMember>[]>;Ordered member configuration blocks assigned to the origin group, where the first member is the primary origin. You must specify two members.
property originId
originId: pulumi.Input<string>;The unique identifier of the member origin
interface DistributionOriginGroupFailoverCriteria
interface DistributionOriginGroupFailoverCriteriaproperty statusCodes
statusCodes: pulumi.Input<pulumi.Input<number>[]>;A list of HTTP status codes for the origin group
interface DistributionOriginGroupMember
interface DistributionOriginGroupMemberproperty originId
originId: pulumi.Input<string>;The unique identifier of the member origin
interface DistributionOriginS3OriginConfig
interface DistributionOriginS3OriginConfigproperty originAccessIdentity
originAccessIdentity: pulumi.Input<string>;The [CloudFront origin access identity][5] to associate with the origin.
interface DistributionRestrictions
interface DistributionRestrictionsproperty geoRestriction
geoRestriction: pulumi.Input<DistributionRestrictionsGeoRestriction>;interface DistributionRestrictionsGeoRestriction
interface DistributionRestrictionsGeoRestrictionproperty locations
locations?: pulumi.Input<pulumi.Input<string>[]>;The [ISO 3166-1-alpha-2 codes][4] for which you
want CloudFront either to distribute your content (whitelist) or not
distribute your content (blacklist).
property restrictionType
restrictionType: pulumi.Input<string>;The method that you want to use to restrict
distribution of your content by country: none, whitelist, or
blacklist.
interface DistributionViewerCertificate
interface DistributionViewerCertificateproperty acmCertificateArn
acmCertificateArn?: pulumi.Input<string>;The ARN of the AWS Certificate Manager
certificate that you wish to use with this distribution. Specify this,
cloudfrontDefaultCertificate, or iamCertificateId. The ACM
certificate must be in US-EAST-1.
property cloudfrontDefaultCertificate
cloudfrontDefaultCertificate?: pulumi.Input<boolean>;true if you want viewers to use HTTPS
to request your objects and you’re using the CloudFront domain name for your
distribution. Specify this, acmCertificateArn, or iamCertificateId.
property iamCertificateId
iamCertificateId?: pulumi.Input<string>;The IAM certificate identifier of the custom viewer
certificate for this distribution if you are using a custom domain. Specify
this, acmCertificateArn, or cloudfrontDefaultCertificate.
property minimumProtocolVersion
minimumProtocolVersion?: pulumi.Input<string>;The minimum version of the SSL protocol that
you want CloudFront to use for HTTPS connections. Can only be set if
cloudfrontDefaultCertificate = false. One of SSLv3, TLSv1,
TLSv1_2016, TLSv1.1_2016 or TLSv1.2_2018. Default: TLSv1. NOTE:
If you are using a custom certificate (specified with acmCertificateArn
or iamCertificateId), and have specified sni-only in
sslSupportMethod, TLSv1 or later must be specified. If you have
specified vip in sslSupportMethod, only SSLv3 or TLSv1 can be
specified. If you have specified cloudfrontDefaultCertificate, TLSv1
must be specified.
property sslSupportMethod
sslSupportMethod?: pulumi.Input<string>;namespace cloudhsmv2
interface ClusterClusterCertificate
interface ClusterClusterCertificateproperty awsHardwareCertificate
awsHardwareCertificate?: pulumi.Input<string>;property clusterCertificate
clusterCertificate?: pulumi.Input<string>;property clusterCsr
clusterCsr?: pulumi.Input<string>;property hsmCertificate
hsmCertificate?: pulumi.Input<string>;property manufacturerHardwareCertificate
manufacturerHardwareCertificate?: pulumi.Input<string>;namespace cloudtrail
interface TrailEventSelector
interface TrailEventSelectorproperty dataResources
dataResources?: pulumi.Input<pulumi.Input<TrailEventSelectorDataResource>[]>;Specifies logging data events. Fields documented below.
property includeManagementEvents
includeManagementEvents?: pulumi.Input<boolean>;Specify if you want your event selector to include management events for your trail.
property readWriteType
readWriteType?: pulumi.Input<string>;Specify if you want your trail to log read-only events, write-only events, or all. By default, the value is All. You can specify only the following value: “ReadOnly”, “WriteOnly”, “All”. Defaults to All.
interface TrailEventSelectorDataResource
interface TrailEventSelectorDataResourceproperty type
type: pulumi.Input<string>;The resource type in which you want to log data events. You can specify only the following value: “AWS::S3::Object”, “AWS::Lambda::Function”
property values
values: pulumi.Input<pulumi.Input<string>[]>;A list of ARN for the specified S3 buckets and object prefixes..
namespace cloudwatch
interface EventPermissionCondition
interface EventPermissionConditionproperty key
key: pulumi.Input<string>;Key for the condition. Valid values: aws:PrincipalOrgID.
property type
type: pulumi.Input<string>;Type of condition. Value values: StringEquals.
property value
value: pulumi.Input<string>;Value for the key.
interface EventTargetBatchTarget
interface EventTargetBatchTargetproperty arraySize
arraySize?: pulumi.Input<number>;The size of the array, if this is an array batch job. Valid values are integers between 2 and 10,000.
property jobAttempts
jobAttempts?: pulumi.Input<number>;The number of times to attempt to retry, if the job fails. Valid values are 1 to 10.
property jobDefinition
jobDefinition: pulumi.Input<string>;The ARN or name of the job definition to use if the event target is an AWS Batch job. This job definition must already exist.
property jobName
jobName: pulumi.Input<string>;The name to use for this execution of the job, if the target is an AWS Batch job.
interface EventTargetEcsTarget
interface EventTargetEcsTargetproperty group
group?: pulumi.Input<string>;Specifies an ECS task group for the task. The maximum length is 255 characters.
property launchType
launchType?: pulumi.Input<string>;Specifies the launch type on which your task is running. The launch type that you specify here must match one of the launch type (compatibilities) of the target task. Valid values are EC2 or FARGATE.
property networkConfiguration
networkConfiguration?: pulumi.Input<EventTargetEcsTargetNetworkConfiguration>;Use this if the ECS task uses the awsvpc network mode. This specifies the VPC subnets and security groups associated with the task, and whether a public IP address is to be used. Required if launchType is FARGATE because the awsvpc mode is required for Fargate tasks.
property platformVersion
platformVersion?: pulumi.Input<string>;Specifies the platform version for the task. Specify only the numeric portion of the platform version, such as 1.1.0. This is used only if LaunchType is FARGATE. For more information about valid platform versions, see AWS Fargate Platform Versions.
property taskCount
taskCount?: pulumi.Input<number>;The number of tasks to create based on the TaskDefinition. The default is 1.
property taskDefinitionArn
taskDefinitionArn: pulumi.Input<string>;The ARN of the task definition to use if the event target is an Amazon ECS cluster.
interface EventTargetEcsTargetNetworkConfiguration
interface EventTargetEcsTargetNetworkConfigurationproperty assignPublicIp
assignPublicIp?: pulumi.Input<boolean>;Assign a public IP address to the ENI (Fargate launch type only). Valid values are true or false. Default false.
property securityGroups
securityGroups?: pulumi.Input<pulumi.Input<string>[]>;The security groups associated with the task or service. If you do not specify a security group, the default security group for the VPC is used.
property subnets
subnets: pulumi.Input<pulumi.Input<string>[]>;The subnets associated with the task or service.
interface EventTargetInputTransformer
interface EventTargetInputTransformerproperty inputPaths
inputPaths?: pulumi.Input<{[key: string]: any}>;Key value pairs specified in the form of JSONPath (for example, time = $.time)
property inputTemplate
inputTemplate: pulumi.Input<string>;Structure containing the template body.
interface EventTargetKinesisTarget
interface EventTargetKinesisTargetproperty partitionKeyPath
partitionKeyPath?: pulumi.Input<string>;The JSON path to be extracted from the event and used as the partition key.
interface EventTargetRunCommandTarget
interface EventTargetRunCommandTargetproperty key
key: pulumi.Input<string>;Can be either tag:tag-key or InstanceIds.
property values
values: pulumi.Input<pulumi.Input<string>[]>;If Key is tag:tag-key, Values is a list of tag values. If Key is InstanceIds, Values is a list of Amazon EC2 instance IDs.
interface EventTargetSqsTarget
interface EventTargetSqsTargetproperty messageGroupId
messageGroupId?: pulumi.Input<string>;The FIFO message group ID to use as the target.
interface LogMetricFilterMetricTransformation
interface LogMetricFilterMetricTransformationproperty defaultValue
defaultValue?: pulumi.Input<string>;The value to emit when a filter pattern does not match a log event.
property name
name: pulumi.Input<string>;The name of the CloudWatch metric to which the monitored log information should be published (e.g. ErrorCount)
property namespace
namespace: pulumi.Input<string>;The destination namespace of the CloudWatch metric.
property value
value: pulumi.Input<string>;What to publish to the metric. For example, if you’re counting the occurrences of a particular term like “Error”, the value will be “1” for each occurrence. If you’re counting the bytes transferred the published value will be the value in the log event.
interface MetricAlarmMetricQuery
interface MetricAlarmMetricQueryproperty expression
expression?: pulumi.Input<string>;The math expression to be performed on the returned data, if this object is performing a math expression. This expression can use the id of the other metrics to refer to those metrics, and can also use the id of other expressions to use the result of those expressions. For more information about metric math expressions, see Metric Math Syntax and Functions in the Amazon CloudWatch User Guide.
property id
id: pulumi.Input<string>;A short name used to tie this object to the results in the response. If you are performing math expressions on this set of data, this name represents that data and can serve as a variable in the mathematical expression. The valid characters are letters, numbers, and underscore. The first character must be a lowercase letter.
property label
label?: pulumi.Input<string>;A human-readable label for this metric or expression. This is especially useful if this is an expression, so that you know what the value represents.
property metric
metric?: pulumi.Input<MetricAlarmMetricQueryMetric>;The metric to be returned, along with statistics, period, and units. Use this parameter only if this object is retrieving a metric and not performing a math expression on returned data.
property returnData
returnData?: pulumi.Input<boolean>;Specify exactly one metricQuery to be true to use that metricQuery result as the alarm.
interface MetricAlarmMetricQueryMetric
interface MetricAlarmMetricQueryMetricproperty dimensions
dimensions?: pulumi.Input<{[key: string]: any}>;The dimensions for this metric. For the list of available dimensions see the AWS documentation here.
property metricName
metricName: pulumi.Input<string>;The name for this metric. See docs for supported metrics.
property namespace
namespace?: pulumi.Input<string>;The namespace for this metric. See docs for the list of namespaces. See docs for supported metrics.
property period
period: pulumi.Input<number>;The period in seconds over which the specified stat is applied.
property stat
stat: pulumi.Input<string>;The statistic to apply to this metric.
Either of the following is supported: SampleCount, Average, Sum, Minimum, Maximum
property unit
unit?: pulumi.Input<string>;The unit for this metric.
namespace codebuild
interface ProjectArtifacts
interface ProjectArtifactsproperty artifactIdentifier
artifactIdentifier?: pulumi.Input<string>;The artifact identifier. Must be the same specified inside AWS CodeBuild buildspec.
property encryptionDisabled
encryptionDisabled?: pulumi.Input<boolean>;If set to true, output artifacts will not be encrypted. If type is set to NO_ARTIFACTS then this value will be ignored. Defaults to false.
property location
location?: pulumi.Input<string>;Information about the build output artifact location. If type is set to CODEPIPELINE or NO_ARTIFACTS then this value will be ignored. If type is set to S3, this is the name of the output bucket.
property name
name?: pulumi.Input<string>;The name of the project. If type is set to S3, this is the name of the output artifact object
property namespaceType
namespaceType?: pulumi.Input<string>;The namespace to use in storing build artifacts. If type is set to S3, then valid values for this parameter are: BUILD_ID or NONE.
property overrideArtifactName
overrideArtifactName?: pulumi.Input<boolean>;If set to true, a name specified in the build spec file overrides the artifact name.
property packaging
packaging?: pulumi.Input<string>;The type of build output artifact to create. If type is set to S3, valid values for this parameter are: NONE or ZIP
property path
path?: pulumi.Input<string>;If type is set to S3, this is the path to the output artifact
property type
type: pulumi.Input<string>;The build output artifact’s type. Valid values for this parameter are: CODEPIPELINE, NO_ARTIFACTS or S3.
interface ProjectCache
interface ProjectCacheproperty location
location?: pulumi.Input<string>;The location where the AWS CodeBuild project stores cached resources. For type S3 the value must be a valid S3 bucket name/prefix.
property modes
modes?: pulumi.Input<pulumi.Input<string>[]>;Specifies settings that AWS CodeBuild uses to store and reuse build dependencies. Valid values: LOCAL_SOURCE_CACHE, LOCAL_DOCKER_LAYER_CACHE, and LOCAL_CUSTOM_CACHE
property type
type?: pulumi.Input<string>;The type of storage that will be used for the AWS CodeBuild project cache. Valid values: NO_CACHE, LOCAL, and S3. Defaults to NO_CACHE.
interface ProjectEnvironment
interface ProjectEnvironmentproperty certificate
certificate?: pulumi.Input<string>;The ARN of the S3 bucket, path prefix and object key that contains the PEM-encoded certificate.
property computeType
computeType: pulumi.Input<string>;Information about the compute resources the build project will use. Available values for this parameter are: BUILD_GENERAL1_SMALL, BUILD_GENERAL1_MEDIUM, BUILD_GENERAL1_LARGE or BUILD_GENERAL1_2XLARGE. BUILD_GENERAL1_SMALL is only valid if type is set to LINUX_CONTAINER. When type is set to LINUX_GPU_CONTAINER, computeType need to be BUILD_GENERAL1_LARGE.
property environmentVariables
environmentVariables?: pulumi.Input<pulumi.Input<ProjectEnvironmentEnvironmentVariable>[]>;A set of environment variables to make available to builds for this build project.
property image
image: pulumi.Input<string>;The Docker image to use for this build project. Valid values include Docker images provided by CodeBuild (e.g aws/codebuild/standard:2.0), Docker Hub images (e.g. nginx:latest), and full Docker repository URIs such as those for ECR (e.g. 137112412989.dkr.ecr.us-west-2.amazonaws.com/amazonlinux:latest).
property imagePullCredentialsType
imagePullCredentialsType?: pulumi.Input<string>;The type of credentials AWS CodeBuild uses to pull images in your build. Available values for this parameter are CODEBUILD or SERVICE_ROLE. When you use a cross-account or private registry image, you must use SERVICE_ROLE credentials. When you use an AWS CodeBuild curated image, you must use CODEBUILD credentials. Default to CODEBUILD
property privilegedMode
privilegedMode?: pulumi.Input<boolean>;If set to true, enables running the Docker daemon inside a Docker container. Defaults to false.
property registryCredential
registryCredential?: pulumi.Input<ProjectEnvironmentRegistryCredential>;Information about credentials for access to a private Docker registry. Registry Credential config blocks are documented below.
property type
type: pulumi.Input<string>;The type of build environment to use for related builds. Available values are: LINUX_CONTAINER, LINUX_GPU_CONTAINER, WINDOWS_CONTAINER or ARM_CONTAINER.
interface ProjectEnvironmentEnvironmentVariable
interface ProjectEnvironmentEnvironmentVariableproperty name
name: pulumi.Input<string>;The environment variable’s name or key.
property type
type?: pulumi.Input<string>;The type of environment variable. Valid values: PARAMETER_STORE, PLAINTEXT.
property value
value: pulumi.Input<string>;The environment variable’s value.
interface ProjectEnvironmentRegistryCredential
interface ProjectEnvironmentRegistryCredentialproperty credential
credential: pulumi.Input<string>;The Amazon Resource Name (ARN) or name of credentials created using AWS Secrets Manager.
property credentialProvider
credentialProvider: pulumi.Input<string>;The service that created the credentials to access a private Docker registry. The valid value, SECRETS_MANAGER, is for AWS Secrets Manager.
interface ProjectLogsConfig
interface ProjectLogsConfigproperty cloudwatchLogs
cloudwatchLogs?: pulumi.Input<ProjectLogsConfigCloudwatchLogs>;Configuration for the builds to store logs to CloudWatch
property s3Logs
s3Logs?: pulumi.Input<ProjectLogsConfigS3Logs>;Configuration for the builds to store logs to S3.
interface ProjectLogsConfigCloudwatchLogs
interface ProjectLogsConfigCloudwatchLogsproperty groupName
groupName?: pulumi.Input<string>;The group name of the logs in CloudWatch Logs.
property status
status?: pulumi.Input<string>;Current status of logs in S3 for a build project. Valid values: ENABLED, DISABLED. Defaults to DISABLED.
property streamName
streamName?: pulumi.Input<string>;The stream name of the logs in CloudWatch Logs.
interface ProjectLogsConfigS3Logs
interface ProjectLogsConfigS3Logsproperty encryptionDisabled
encryptionDisabled?: pulumi.Input<boolean>;If set to true, output artifacts will not be encrypted. If type is set to NO_ARTIFACTS then this value will be ignored. Defaults to false.
property location
location?: pulumi.Input<string>;Information about the build output artifact location. If type is set to CODEPIPELINE or NO_ARTIFACTS then this value will be ignored. If type is set to S3, this is the name of the output bucket.
property status
status?: pulumi.Input<string>;Current status of logs in CloudWatch Logs for a build project. Valid values: ENABLED, DISABLED. Defaults to ENABLED.
interface ProjectSecondaryArtifact
interface ProjectSecondaryArtifactproperty artifactIdentifier
artifactIdentifier: pulumi.Input<string>;The artifact identifier. Must be the same specified inside AWS CodeBuild buildspec.
property encryptionDisabled
encryptionDisabled?: pulumi.Input<boolean>;If set to true, output artifacts will not be encrypted. If type is set to NO_ARTIFACTS then this value will be ignored. Defaults to false.
property location
location?: pulumi.Input<string>;Information about the build output artifact location. If type is set to CODEPIPELINE or NO_ARTIFACTS then this value will be ignored. If type is set to S3, this is the name of the output bucket. If path is not also specified, then location can also specify the path of the output artifact in the output bucket.
property name
name?: pulumi.Input<string>;The name of the project. If type is set to S3, this is the name of the output artifact object
property namespaceType
namespaceType?: pulumi.Input<string>;The namespace to use in storing build artifacts. If type is set to S3, then valid values for this parameter are: BUILD_ID or NONE.
property overrideArtifactName
overrideArtifactName?: pulumi.Input<boolean>;If set to true, a name specified in the build spec file overrides the artifact name.
property packaging
packaging?: pulumi.Input<string>;The type of build output artifact to create. If type is set to S3, valid values for this parameter are: NONE or ZIP
property path
path?: pulumi.Input<string>;If type is set to S3, this is the path to the output artifact
property type
type: pulumi.Input<string>;The build output artifact’s type. Valid values for this parameter are: CODEPIPELINE, NO_ARTIFACTS or S3.
interface ProjectSecondarySource
interface ProjectSecondarySourceproperty auths
auths?: pulumi.Input<pulumi.Input<ProjectSecondarySourceAuth>[]>;Information about the authorization settings for AWS CodeBuild to access the source code to be built. Auth blocks are documented below.
property buildspec
buildspec?: pulumi.Input<string>;The build spec declaration to use for this build project’s related builds.
property gitCloneDepth
gitCloneDepth?: pulumi.Input<number>;Truncate git history to this many commits.
property gitSubmodulesConfig
gitSubmodulesConfig?: pulumi.Input<ProjectSecondarySourceGitSubmodulesConfig>;Information about the Git submodules configuration for an AWS CodeBuild build project. Git submodules config blocks are documented below. This option is only valid when the type is CODECOMMIT, GITHUB or GITHUB_ENTERPRISE.
property insecureSsl
insecureSsl?: pulumi.Input<boolean>;Ignore SSL warnings when connecting to source control.
property location
location?: pulumi.Input<string>;The location of the source code from git or s3.
property reportBuildStatus
reportBuildStatus?: pulumi.Input<boolean>;Set to true to report the status of a build’s start and finish to your source provider. This option is only valid when your source provider is GITHUB, BITBUCKET, or GITHUB_ENTERPRISE.
property sourceIdentifier
sourceIdentifier: pulumi.Input<string>;The source identifier. Source data will be put inside a folder named as this parameter inside AWS CodeBuild source directory
property type
type: pulumi.Input<string>;The type of repository that contains the source code to be built. Valid values for this parameter are: CODECOMMIT, CODEPIPELINE, GITHUB, GITHUB_ENTERPRISE, BITBUCKET or S3.
interface ProjectSecondarySourceAuth
interface ProjectSecondarySourceAuthproperty resource
resource?: pulumi.Input<string>;The resource value that applies to the specified authorization type.
property type
type: pulumi.Input<string>;The authorization type to use. The only valid value is OAUTH
interface ProjectSecondarySourceGitSubmodulesConfig
interface ProjectSecondarySourceGitSubmodulesConfigproperty fetchSubmodules
fetchSubmodules: pulumi.Input<boolean>;If set to true, fetches Git submodules for the AWS CodeBuild build project.
interface ProjectSource
interface ProjectSourceproperty auths
auths?: pulumi.Input<pulumi.Input<ProjectSourceAuth>[]>;Information about the authorization settings for AWS CodeBuild to access the source code to be built. Auth blocks are documented below.
property buildspec
buildspec?: pulumi.Input<string>;The build spec declaration to use for this build project’s related builds. This must be set when type is NO_SOURCE.
property gitCloneDepth
gitCloneDepth?: pulumi.Input<number>;Truncate git history to this many commits.
property gitSubmodulesConfig
gitSubmodulesConfig?: pulumi.Input<ProjectSourceGitSubmodulesConfig>;Information about the Git submodules configuration for an AWS CodeBuild build project. Git submodules config blocks are documented below. This option is only valid when the type is CODECOMMIT, GITHUB or GITHUB_ENTERPRISE.
property insecureSsl
insecureSsl?: pulumi.Input<boolean>;Ignore SSL warnings when connecting to source control.
property location
location?: pulumi.Input<string>;The location of the source code from git or s3.
property reportBuildStatus
reportBuildStatus?: pulumi.Input<boolean>;Set to true to report the status of a build’s start and finish to your source provider. This option is only valid when the type is BITBUCKET or GITHUB.
property type
type: pulumi.Input<string>;The type of repository that contains the source code to be built. Valid values for this parameter are: CODECOMMIT, CODEPIPELINE, GITHUB, GITHUB_ENTERPRISE, BITBUCKET, S3 or NO_SOURCE.
interface ProjectSourceAuth
interface ProjectSourceAuthproperty resource
resource?: pulumi.Input<string>;The resource value that applies to the specified authorization type.
property type
type: pulumi.Input<string>;The authorization type to use. The only valid value is OAUTH
interface ProjectSourceGitSubmodulesConfig
interface ProjectSourceGitSubmodulesConfigproperty fetchSubmodules
fetchSubmodules: pulumi.Input<boolean>;If set to true, fetches Git submodules for the AWS CodeBuild build project.
interface ProjectVpcConfig
interface ProjectVpcConfigproperty securityGroupIds
securityGroupIds: pulumi.Input<pulumi.Input<string>[]>;The security group IDs to assign to running builds.
property subnets
subnets: pulumi.Input<pulumi.Input<string>[]>;The subnet IDs within which to run builds.
property vpcId
vpcId: pulumi.Input<string>;The ID of the VPC within which to run builds.
interface WebhookFilterGroup
interface WebhookFilterGroupproperty filters
filters?: pulumi.Input<pulumi.Input<WebhookFilterGroupFilter>[]>;A webhook filter for the group. Filter blocks are documented below.
interface WebhookFilterGroupFilter
interface WebhookFilterGroupFilterproperty excludeMatchedPattern
excludeMatchedPattern?: pulumi.Input<boolean>;If set to true, the specified filter does not trigger a build. Defaults to false.
property pattern
pattern: pulumi.Input<string>;For a filter that uses EVENT type, a comma-separated string that specifies one event: PUSH, PULL_REQUEST_CREATED, PULL_REQUEST_UPDATED, PULL_REQUEST_REOPENED. PULL_REQUEST_MERGED works with GitHub & GitHub Enterprise only. For a filter that uses any of the other filter types, a regular expression.
property type
type: pulumi.Input<string>;The webhook filter group’s type. Valid values for this parameter are: EVENT, BASE_REF, HEAD_REF, ACTOR_ACCOUNT_ID, FILE_PATH. At least one filter group must specify EVENT as its type.
namespace codecommit
interface TriggerTrigger
interface TriggerTriggerproperty branches
branches?: pulumi.Input<pulumi.Input<string>[]>;The branches that will be included in the trigger configuration. If no branches are specified, the trigger will apply to all branches.
property customData
customData?: pulumi.Input<string>;Any custom data associated with the trigger that will be included in the information sent to the target of the trigger.
property destinationArn
destinationArn: pulumi.Input<string>;The ARN of the resource that is the target for a trigger. For example, the ARN of a topic in Amazon Simple Notification Service (SNS).
property events
events: pulumi.Input<pulumi.Input<string>[]>;The repository events that will cause the trigger to run actions in another service, such as sending a notification through Amazon Simple Notification Service (SNS). If no events are specified, the trigger will run for all repository events. Event types include: all, updateReference, createReference, deleteReference.
property name
name: pulumi.Input<string>;The name of the trigger.
namespace codedeploy
interface DeploymentConfigMinimumHealthyHosts
interface DeploymentConfigMinimumHealthyHostsproperty type
type?: pulumi.Input<string>;The type can either be FLEET_PERCENT or HOST_COUNT.
property value
value?: pulumi.Input<number>;The value when the type is FLEET_PERCENT represents the minimum number of healthy instances as
a percentage of the total number of instances in the deployment. If you specify FLEET_PERCENT, at the start of the
deployment, AWS CodeDeploy converts the percentage to the equivalent number of instance and rounds up fractional instances.
When the type is HOST_COUNT, the value represents the minimum number of healthy instances as an absolute value.
interface DeploymentConfigTrafficRoutingConfig
interface DeploymentConfigTrafficRoutingConfigproperty timeBasedCanary
timeBasedCanary?: pulumi.Input<DeploymentConfigTrafficRoutingConfigTimeBasedCanary>;The time based canary configuration information. If type is TimeBasedLinear, use timeBasedLinear instead.
property timeBasedLinear
timeBasedLinear?: pulumi.Input<DeploymentConfigTrafficRoutingConfigTimeBasedLinear>;The time based linear configuration information. If type is TimeBasedCanary, use timeBasedCanary instead.
property type
type?: pulumi.Input<string>;Type of traffic routing config. One of TimeBasedCanary, TimeBasedLinear, AllAtOnce.
interface DeploymentConfigTrafficRoutingConfigTimeBasedCanary
interface DeploymentConfigTrafficRoutingConfigTimeBasedCanaryproperty interval
interval?: pulumi.Input<number>;The number of minutes between the first and second traffic shifts of a TimeBasedCanary deployment.
property percentage
percentage?: pulumi.Input<number>;The percentage of traffic to shift in the first increment of a TimeBasedCanary deployment.
interface DeploymentConfigTrafficRoutingConfigTimeBasedLinear
interface DeploymentConfigTrafficRoutingConfigTimeBasedLinearproperty interval
interval?: pulumi.Input<number>;The number of minutes between each incremental traffic shift of a TimeBasedLinear deployment.
property percentage
percentage?: pulumi.Input<number>;The percentage of traffic that is shifted at the start of each increment of a TimeBasedLinear deployment.
interface DeploymentGroupAlarmConfiguration
interface DeploymentGroupAlarmConfigurationproperty alarms
alarms?: pulumi.Input<pulumi.Input<string>[]>;A list of alarms configured for the deployment group. A maximum of 10 alarms can be added to a deployment group.
property enabled
enabled?: pulumi.Input<boolean>;Indicates whether the alarm configuration is enabled. This option is useful when you want to temporarily deactivate alarm monitoring for a deployment group without having to add the same alarms again later.
property ignorePollAlarmFailure
ignorePollAlarmFailure?: pulumi.Input<boolean>;Indicates whether a deployment should continue if information about the current state of alarms cannot be retrieved from CloudWatch. The default value is false.
* true: The deployment will proceed even if alarm status information can’t be retrieved.
* false: The deployment will stop if alarm status information can’t be retrieved.
interface DeploymentGroupAutoRollbackConfiguration
interface DeploymentGroupAutoRollbackConfigurationproperty enabled
enabled?: pulumi.Input<boolean>;Indicates whether a defined automatic rollback configuration is currently enabled for this Deployment Group. If you enable automatic rollback, you must specify at least one event type.
property events
events?: pulumi.Input<pulumi.Input<string>[]>;The event type or types that trigger a rollback. Supported types are DEPLOYMENT_FAILURE and DEPLOYMENT_STOP_ON_ALARM.
interface DeploymentGroupBlueGreenDeploymentConfig
interface DeploymentGroupBlueGreenDeploymentConfigproperty deploymentReadyOption
deploymentReadyOption?: pulumi.Input<DeploymentGroupBlueGreenDeploymentConfigDeploymentReadyOption>;Information about the action to take when newly provisioned instances are ready to receive traffic in a blue/green deployment (documented below).
property greenFleetProvisioningOption
greenFleetProvisioningOption?: pulumi.Input<DeploymentGroupBlueGreenDeploymentConfigGreenFleetProvisioningOption>;Information about how instances are provisioned for a replacement environment in a blue/green deployment (documented below).
property terminateBlueInstancesOnDeploymentSuccess
terminateBlueInstancesOnDeploymentSuccess?: pulumi.Input<DeploymentGroupBlueGreenDeploymentConfigTerminateBlueInstancesOnDeploymentSuccess>;Information about whether to terminate instances in the original fleet during a blue/green deployment (documented below).
interface DeploymentGroupBlueGreenDeploymentConfigDeploymentReadyOption
interface DeploymentGroupBlueGreenDeploymentConfigDeploymentReadyOptionproperty actionOnTimeout
actionOnTimeout?: pulumi.Input<string>;When to reroute traffic from an original environment to a replacement environment in a blue/green deployment.
* CONTINUE_DEPLOYMENT: Register new instances with the load balancer immediately after the new application revision is installed on the instances in the replacement environment.
* STOP_DEPLOYMENT: Do not register new instances with load balancer unless traffic is rerouted manually. If traffic is not rerouted manually before the end of the specified wait period, the deployment status is changed to Stopped.
property waitTimeInMinutes
waitTimeInMinutes?: pulumi.Input<number>;The number of minutes to wait before the status of a blue/green deployment changed to Stopped if rerouting is not started manually. Applies only to the STOP_DEPLOYMENT option for actionOnTimeout.
interface DeploymentGroupBlueGreenDeploymentConfigGreenFleetProvisioningOption
interface DeploymentGroupBlueGreenDeploymentConfigGreenFleetProvisioningOptionproperty action
action?: pulumi.Input<string>;The method used to add instances to a replacement environment.
* DISCOVER_EXISTING: Use instances that already exist or will be created manually.
* COPY_AUTO_SCALING_GROUP: Use settings from a specified Auto Scaling group to define and create instances in a new Auto Scaling group. Exactly one Auto Scaling group must be specified when selecting COPY_AUTO_SCALING_GROUP. Use autoscalingGroups to specify the Auto Scaling group.
interface DeploymentGroupBlueGreenDeploymentConfigTerminateBlueInstancesOnDeploymentSuccess
interface DeploymentGroupBlueGreenDeploymentConfigTerminateBlueInstancesOnDeploymentSuccessproperty action
action?: pulumi.Input<string>;The action to take on instances in the original environment after a successful blue/green deployment.
* TERMINATE: Instances are terminated after a specified wait time.
* KEEP_ALIVE: Instances are left running after they are deregistered from the load balancer and removed from the deployment group.
property terminationWaitTimeInMinutes
terminationWaitTimeInMinutes?: pulumi.Input<number>;The number of minutes to wait after a successful blue/green deployment before terminating instances from the original environment.
interface DeploymentGroupDeploymentStyle
interface DeploymentGroupDeploymentStyleproperty deploymentOption
deploymentOption?: pulumi.Input<string>;Indicates whether to route deployment traffic behind a load balancer. Valid Values are WITH_TRAFFIC_CONTROL or WITHOUT_TRAFFIC_CONTROL. Default is WITHOUT_TRAFFIC_CONTROL.
property deploymentType
deploymentType?: pulumi.Input<string>;Indicates whether to run an in-place deployment or a blue/green deployment. Valid Values are IN_PLACE or BLUE_GREEN. Default is IN_PLACE.
interface DeploymentGroupEc2TagFilter
interface DeploymentGroupEc2TagFilterproperty key
key?: pulumi.Input<string>;The key of the tag filter.
property type
type?: pulumi.Input<string>;The type of the tag filter, either KEY_ONLY, VALUE_ONLY, or KEY_AND_VALUE.
property value
value?: pulumi.Input<string>;The value of the tag filter.
interface DeploymentGroupEc2TagSet
interface DeploymentGroupEc2TagSetproperty ec2TagFilters
ec2TagFilters?: pulumi.Input<pulumi.Input<DeploymentGroupEc2TagSetEc2TagFilter>[]>;Tag filters associated with the deployment group. See the AWS docs for details.
interface DeploymentGroupEc2TagSetEc2TagFilter
interface DeploymentGroupEc2TagSetEc2TagFilterproperty key
key?: pulumi.Input<string>;The key of the tag filter.
property type
type?: pulumi.Input<string>;The type of the tag filter, either KEY_ONLY, VALUE_ONLY, or KEY_AND_VALUE.
property value
value?: pulumi.Input<string>;The value of the tag filter.
interface DeploymentGroupEcsService
interface DeploymentGroupEcsServiceproperty clusterName
clusterName: pulumi.Input<string>;The name of the ECS cluster.
property serviceName
serviceName: pulumi.Input<string>;The name of the ECS service.
interface DeploymentGroupLoadBalancerInfo
interface DeploymentGroupLoadBalancerInfoproperty elbInfos
elbInfos?: pulumi.Input<pulumi.Input<DeploymentGroupLoadBalancerInfoElbInfo>[]>;The Classic Elastic Load Balancer to use in a deployment. Conflicts with targetGroupInfo and targetGroupPairInfo.
property targetGroupInfos
targetGroupInfos?: pulumi.Input<pulumi.Input<DeploymentGroupLoadBalancerInfoTargetGroupInfo>[]>;The (Application/Network Load Balancer) target group to use in a deployment. Conflicts with elbInfo and targetGroupPairInfo.
property targetGroupPairInfo
targetGroupPairInfo?: pulumi.Input<DeploymentGroupLoadBalancerInfoTargetGroupPairInfo>;The (Application/Network Load Balancer) target group pair to use in a deployment. Conflicts with elbInfo and targetGroupInfo.
interface DeploymentGroupLoadBalancerInfoElbInfo
interface DeploymentGroupLoadBalancerInfoElbInfoproperty name
name?: pulumi.Input<string>;The name of the load balancer that will be used to route traffic from original instances to replacement instances in a blue/green deployment. For in-place deployments, the name of the load balancer that instances are deregistered from so they are not serving traffic during a deployment, and then re-registered with after the deployment completes.
interface DeploymentGroupLoadBalancerInfoTargetGroupInfo
interface DeploymentGroupLoadBalancerInfoTargetGroupInfoproperty name
name?: pulumi.Input<string>;The name of the target group that instances in the original environment are deregistered from, and instances in the replacement environment registered with. For in-place deployments, the name of the target group that instances are deregistered from, so they are not serving traffic during a deployment, and then re-registered with after the deployment completes.
interface DeploymentGroupLoadBalancerInfoTargetGroupPairInfo
interface DeploymentGroupLoadBalancerInfoTargetGroupPairInfoproperty prodTrafficRoute
prodTrafficRoute: pulumi.Input<DeploymentGroupLoadBalancerInfoTargetGroupPairInfoProdTrafficRoute>;Configuration block for the production traffic route (documented below).
property targetGroups
targetGroups: pulumi.Input<pulumi.Input<DeploymentGroupLoadBalancerInfoTargetGroupPairInfoTargetGroup>[]>;Configuration blocks for a target group within a target group pair (documented below).
property testTrafficRoute
testTrafficRoute?: pulumi.Input<DeploymentGroupLoadBalancerInfoTargetGroupPairInfoTestTrafficRoute>;Configuration block for the test traffic route (documented below).
interface DeploymentGroupLoadBalancerInfoTargetGroupPairInfoProdTrafficRoute
interface DeploymentGroupLoadBalancerInfoTargetGroupPairInfoProdTrafficRouteproperty listenerArns
listenerArns: pulumi.Input<pulumi.Input<string>[]>;List of Amazon Resource Names (ARNs) of the load balancer listeners.
interface DeploymentGroupLoadBalancerInfoTargetGroupPairInfoTargetGroup
interface DeploymentGroupLoadBalancerInfoTargetGroupPairInfoTargetGroupproperty name
name: pulumi.Input<string>;Name of the target group.
interface DeploymentGroupLoadBalancerInfoTargetGroupPairInfoTestTrafficRoute
interface DeploymentGroupLoadBalancerInfoTargetGroupPairInfoTestTrafficRouteproperty listenerArns
listenerArns: pulumi.Input<pulumi.Input<string>[]>;List of Amazon Resource Names (ARNs) of the load balancer listeners.
interface DeploymentGroupOnPremisesInstanceTagFilter
interface DeploymentGroupOnPremisesInstanceTagFilterproperty key
key?: pulumi.Input<string>;The key of the tag filter.
property type
type?: pulumi.Input<string>;The type of the tag filter, either KEY_ONLY, VALUE_ONLY, or KEY_AND_VALUE.
property value
value?: pulumi.Input<string>;The value of the tag filter.
interface DeploymentGroupTriggerConfiguration
interface DeploymentGroupTriggerConfigurationproperty triggerEvents
triggerEvents: pulumi.Input<pulumi.Input<string>[]>;The event type or types for which notifications are triggered. Some values that are supported: DeploymentStart, DeploymentSuccess, DeploymentFailure, DeploymentStop, DeploymentRollback, InstanceStart, InstanceSuccess, InstanceFailure. See the CodeDeploy documentation for all possible values.
property triggerName
triggerName: pulumi.Input<string>;The name of the notification trigger.
property triggerTargetArn
triggerTargetArn: pulumi.Input<string>;The ARN of the SNS topic through which notifications are sent.
namespace codepipeline
interface PipelineArtifactStore
interface PipelineArtifactStoreproperty encryptionKey
encryptionKey?: pulumi.Input<PipelineArtifactStoreEncryptionKey>;The encryption key block AWS CodePipeline uses to encrypt the data in the artifact store, such as an AWS Key Management Service (AWS KMS) key. If you don’t specify a key, AWS CodePipeline uses the default key for Amazon Simple Storage Service (Amazon S3). An encryptionKey block is documented below.
property location
location: pulumi.Input<string>;The location where AWS CodePipeline stores artifacts for a pipeline; currently only S3 is supported.
property region
region?: pulumi.Input<string>;The region where the artifact store is located. Required for a cross-region CodePipeline, do not provide for a single-region CodePipeline.
property type
type: pulumi.Input<string>;The type of the artifact store, such as Amazon S3
interface PipelineArtifactStoreEncryptionKey
interface PipelineArtifactStoreEncryptionKeyproperty id
id: pulumi.Input<string>;The KMS key ARN or ID
property type
type: pulumi.Input<string>;The type of key; currently only KMS is supported
interface PipelineStage
interface PipelineStageproperty actions
actions: pulumi.Input<pulumi.Input<PipelineStageAction>[]>;The action(s) to include in the stage. Defined as an action block below
property name
name: pulumi.Input<string>;The name of the stage.
interface PipelineStageAction
interface PipelineStageActionproperty category
category: pulumi.Input<string>;A category defines what kind of action can be taken in the stage, and constrains the provider type for the action. Possible values are Approval, Build, Deploy, Invoke, Source and Test.
property configuration
configuration?: pulumi.Input<{[key: string]: pulumi.Input<string>}>;A Map of the action declaration’s configuration. Find out more about configuring action configurations in the Reference Pipeline Structure documentation.
property inputArtifacts
inputArtifacts?: pulumi.Input<pulumi.Input<string>[]>;A list of artifact names to be worked on.
property name
name: pulumi.Input<string>;The action declaration’s name.
property namespace
namespace?: pulumi.Input<string>;The namespace all output variables will be accessed from.
property outputArtifacts
outputArtifacts?: pulumi.Input<pulumi.Input<string>[]>;A list of artifact names to output. Output artifact names must be unique within a pipeline.
property owner
owner: pulumi.Input<string>;The creator of the action being called. Possible values are AWS, Custom and ThirdParty.
property provider
provider: pulumi.Input<string>;The provider of the service being called by the action. Valid providers are determined by the action category. For example, an action in the Deploy category type might have a provider of AWS CodeDeploy, which would be specified as CodeDeploy.
property region
region?: pulumi.Input<string>;The region in which to run the action.
property roleArn
roleArn?: pulumi.Input<string>;The ARN of the IAM service role that will perform the declared action. This is assumed through the roleArn for the pipeline.
property runOrder
runOrder?: pulumi.Input<number>;The order in which actions are run.
property version
version: pulumi.Input<string>;A string that identifies the action type.
interface WebhookAuthenticationConfiguration
interface WebhookAuthenticationConfigurationproperty allowedIpRange
allowedIpRange?: pulumi.Input<string>;A valid CIDR block for IP filtering. Required for IP.
property secretToken
secretToken?: pulumi.Input<string>;The shared secret for the GitHub repository webhook. Set this as secret in your githubRepositoryWebhook’s configuration block. Required for GITHUB_HMAC.
interface WebhookFilter
interface WebhookFilterproperty jsonPath
jsonPath: pulumi.Input<string>;The JSON path to filter on.
property matchEquals
matchEquals: pulumi.Input<string>;The value to match on (e.g. refs/heads/{Branch}). See AWS docs for details.
namespace codestarnotifications
interface NotificationRuleTarget
interface NotificationRuleTargetproperty address
address: pulumi.Input<string>;The ARN of notification rule target. For example, a SNS Topic ARN.
property status
status?: pulumi.Input<string>;The status of the notification rule. Possible values are ENABLED and DISABLED, default is ENABLED.
property type
type?: pulumi.Input<string>;The type of the notification target. Default value is SNS.
namespace cognito
interface IdentityPoolCognitoIdentityProvider
interface IdentityPoolCognitoIdentityProviderproperty clientId
clientId?: pulumi.Input<string>;The client ID for the Amazon Cognito Identity User Pool.
property providerName
providerName?: pulumi.Input<string>;The provider name for an Amazon Cognito Identity User Pool.
property serverSideTokenCheck
serverSideTokenCheck?: pulumi.Input<boolean>;Whether server-side token validation is enabled for the identity provider’s token or not.
interface IdentityPoolRoleAttachmentRoleMapping
interface IdentityPoolRoleAttachmentRoleMappingproperty ambiguousRoleResolution
ambiguousRoleResolution?: pulumi.Input<string>;Specifies the action to be taken if either no rules match the claim value for the Rules type, or there is no cognito:preferred_role claim and there are multiple cognito:roles matches for the Token type. Required if you specify Token or Rules as the Type.
property identityProvider
identityProvider: pulumi.Input<string>;A string identifying the identity provider, for example, “graph.facebook.com” or “cognito-idp.us-east-1.amazonaws.com/us-east-1_abcdefghi:app_client_id”.
property mappingRules
mappingRules?: pulumi.Input<pulumi.Input<IdentityPoolRoleAttachmentRoleMappingMappingRule>[]>;The Rules Configuration to be used for mapping users to roles. You can specify up to 25 rules per identity provider. Rules are evaluated in order. The first one to match specifies the role.
property type
type: pulumi.Input<string>;The role mapping type.
interface IdentityPoolRoleAttachmentRoleMappingMappingRule
interface IdentityPoolRoleAttachmentRoleMappingMappingRuleproperty claim
claim: pulumi.Input<string>;The claim name that must be present in the token, for example, “isAdmin” or “paid”.
property matchType
matchType: pulumi.Input<string>;The match condition that specifies how closely the claim value in the IdP token must match Value.
property roleArn
roleArn: pulumi.Input<string>;The role ARN.
property value
value: pulumi.Input<string>;A brief string that the claim must match, for example, “paid” or “yes”.
interface ResourceServerScope
interface ResourceServerScopeproperty scopeDescription
scopeDescription: pulumi.Input<string>;The scope description.
property scopeName
scopeName: pulumi.Input<string>;The scope name.
interface UserPoolAdminCreateUserConfig
interface UserPoolAdminCreateUserConfigproperty allowAdminCreateUserOnly
allowAdminCreateUserOnly?: pulumi.Input<boolean>;Set to True if only the administrator is allowed to create user profiles. Set to False if users can sign themselves up via an app.
property inviteMessageTemplate
inviteMessageTemplate?: pulumi.Input<UserPoolAdminCreateUserConfigInviteMessageTemplate>;The invite message template structure.
property unusedAccountValidityDays
unusedAccountValidityDays?: pulumi.Input<number>;DEPRECATED Use password_policy.temporary_password_validity_days instead - The user account expiration limit, in days, after which the account is no longer usable.
interface UserPoolAdminCreateUserConfigInviteMessageTemplate
interface UserPoolAdminCreateUserConfigInviteMessageTemplateproperty emailMessage
emailMessage?: pulumi.Input<string>;The email message template. Must contain the {####} placeholder. Conflicts with emailVerificationMessage argument.
property emailSubject
emailSubject?: pulumi.Input<string>;The subject line for the email message template. Conflicts with emailVerificationSubject argument.
property smsMessage
smsMessage?: pulumi.Input<string>;The SMS message template. Must contain the {####} placeholder. Conflicts with smsVerificationMessage argument.
interface UserPoolClientAnalyticsConfiguration
interface UserPoolClientAnalyticsConfigurationproperty applicationId
applicationId: pulumi.Input<string>;The application ID for an Amazon Pinpoint application.
property externalId
externalId: pulumi.Input<string>;An ID for the Analytics Configuration.
property roleArn
roleArn: pulumi.Input<string>;The ARN of an IAM role that authorizes Amazon Cognito to publish events to Amazon Pinpoint analytics.
property userDataShared
userDataShared?: pulumi.Input<boolean>;If set to true, Amazon Cognito will include user data in the events it publishes to Amazon Pinpoint analytics.
interface UserPoolDeviceConfiguration
interface UserPoolDeviceConfigurationproperty challengeRequiredOnNewDevice
challengeRequiredOnNewDevice?: pulumi.Input<boolean>;Indicates whether a challenge is required on a new device. Only applicable to a new device.
property deviceOnlyRememberedOnUserPrompt
deviceOnlyRememberedOnUserPrompt?: pulumi.Input<boolean>;If true, a device is only remembered on user prompt.
interface UserPoolEmailConfiguration
interface UserPoolEmailConfigurationproperty emailSendingAccount
emailSendingAccount?: pulumi.Input<string>;The email delivery method to use. COGNITO_DEFAULT for the default email functionality built into Cognito or DEVELOPER to use your Amazon SES configuration.
property fromEmailAddress
fromEmailAddress?: pulumi.Input<string>;Sender’s email address or sender’s display name with their email address (e.g. john@example.com, John Smith <john@example.com> or \"John Smith Ph.D.\" <john@example.com>). Escaped double quotes are required around display names that contain certain characters as specified in RFC 5322.
property replyToEmailAddress
replyToEmailAddress?: pulumi.Input<string>;The REPLY-TO email address.
property sourceArn
sourceArn?: pulumi.Input<string>;The ARN of the SES verified email identity to to use. Required if emailSendingAccount is set to DEVELOPER.
interface UserPoolLambdaConfig
interface UserPoolLambdaConfigproperty createAuthChallenge
createAuthChallenge?: pulumi.Input<string>;The ARN of the lambda creating an authentication challenge.
property customMessage
customMessage?: pulumi.Input<string>;A custom Message AWS Lambda trigger.
property defineAuthChallenge
defineAuthChallenge?: pulumi.Input<string>;Defines the authentication challenge.
property postAuthentication
postAuthentication?: pulumi.Input<string>;A post-authentication AWS Lambda trigger.
property postConfirmation
postConfirmation?: pulumi.Input<string>;A post-confirmation AWS Lambda trigger.
property preAuthentication
preAuthentication?: pulumi.Input<string>;A pre-authentication AWS Lambda trigger.
property preSignUp
preSignUp?: pulumi.Input<string>;A pre-registration AWS Lambda trigger.
property preTokenGeneration
preTokenGeneration?: pulumi.Input<string>;Allow to customize identity token claims before token generation.
property userMigration
userMigration?: pulumi.Input<string>;The user migration Lambda config type.
property verifyAuthChallengeResponse
verifyAuthChallengeResponse?: pulumi.Input<string>;Verifies the authentication challenge response.
interface UserPoolPasswordPolicy
interface UserPoolPasswordPolicyproperty minimumLength
minimumLength?: pulumi.Input<number>;The minimum length of the password policy that you have set.
property requireLowercase
requireLowercase?: pulumi.Input<boolean>;Whether you have required users to use at least one lowercase letter in their password.
property requireNumbers
requireNumbers?: pulumi.Input<boolean>;Whether you have required users to use at least one number in their password.
property requireSymbols
requireSymbols?: pulumi.Input<boolean>;Whether you have required users to use at least one symbol in their password.
property requireUppercase
requireUppercase?: pulumi.Input<boolean>;Whether you have required users to use at least one uppercase letter in their password.
property temporaryPasswordValidityDays
temporaryPasswordValidityDays?: pulumi.Input<number>;In the password policy you have set, refers to the number of days a temporary password is valid. If the user does not sign-in during this time, their password will need to be reset by an administrator.
interface UserPoolSchema
interface UserPoolSchemaproperty attributeDataType
attributeDataType: pulumi.Input<string>;The attribute data type. Must be one of Boolean, Number, String, DateTime.
property developerOnlyAttribute
developerOnlyAttribute?: pulumi.Input<boolean>;Specifies whether the attribute type is developer only.
property mutable
mutable?: pulumi.Input<boolean>;Specifies whether the attribute can be changed once it has been created.
property name
name: pulumi.Input<string>;The name of the attribute.
property numberAttributeConstraints
numberAttributeConstraints?: pulumi.Input<UserPoolSchemaNumberAttributeConstraints>;Specifies the constraints for an attribute of the number type.
property required
required?: pulumi.Input<boolean>;Specifies whether a user pool attribute is required. If the attribute is required and the user does not provide a value, registration or sign-in will fail.
property stringAttributeConstraints
stringAttributeConstraints?: pulumi.Input<UserPoolSchemaStringAttributeConstraints>;-Specifies the constraints for an attribute of the string type.
interface UserPoolSchemaNumberAttributeConstraints
interface UserPoolSchemaNumberAttributeConstraintsproperty maxValue
maxValue?: pulumi.Input<string>;The maximum value of an attribute that is of the number data type.
property minValue
minValue?: pulumi.Input<string>;The minimum value of an attribute that is of the number data type.
interface UserPoolSchemaStringAttributeConstraints
interface UserPoolSchemaStringAttributeConstraintsproperty maxLength
maxLength?: pulumi.Input<string>;The maximum length of an attribute value of the string type.
property minLength
minLength?: pulumi.Input<string>;The minimum length of an attribute value of the string type.
interface UserPoolSmsConfiguration
interface UserPoolSmsConfigurationproperty externalId
externalId: pulumi.Input<string>;The external ID used in IAM role trust relationships. For more information about using external IDs, see How to Use an External ID When Granting Access to Your AWS Resources to a Third Party.
property snsCallerArn
snsCallerArn: pulumi.Input<string>;The ARN of the Amazon SNS caller. This is usually the IAM role that you’ve given Cognito permission to assume.
interface UserPoolSoftwareTokenMfaConfiguration
interface UserPoolSoftwareTokenMfaConfigurationproperty enabled
enabled: pulumi.Input<boolean>;Boolean whether to enable software token Multi-Factor (MFA) tokens, such as Time-based One-Time Password (TOTP). To disable software token MFA when smsConfiguration is not present, the mfaConfiguration argument must be set to OFF and the softwareTokenMfaConfiguration configuration block must be fully removed.
interface UserPoolUsernameConfiguration
interface UserPoolUsernameConfigurationproperty caseSensitive
caseSensitive: pulumi.Input<boolean>;Specifies whether username case sensitivity will be applied for all users in the user pool through Cognito APIs.
interface UserPoolUserPoolAddOns
interface UserPoolUserPoolAddOnsproperty advancedSecurityMode
advancedSecurityMode: pulumi.Input<string>;The mode for advanced security, must be one of OFF, AUDIT or ENFORCED.
interface UserPoolVerificationMessageTemplate
interface UserPoolVerificationMessageTemplateproperty defaultEmailOption
defaultEmailOption?: pulumi.Input<string>;The default email option. Must be either CONFIRM_WITH_CODE or CONFIRM_WITH_LINK. Defaults to CONFIRM_WITH_CODE.
property emailMessage
emailMessage?: pulumi.Input<string>;The email message template. Must contain the {####} placeholder. Conflicts with emailVerificationMessage argument.
property emailMessageByLink
emailMessageByLink?: pulumi.Input<string>;The email message template for sending a confirmation link to the user, it must contain the {##Click Here##} placeholder.
property emailSubject
emailSubject?: pulumi.Input<string>;The subject line for the email message template. Conflicts with emailVerificationSubject argument.
property emailSubjectByLink
emailSubjectByLink?: pulumi.Input<string>;The subject line for the email message template for sending a confirmation link to the user.
property smsMessage
smsMessage?: pulumi.Input<string>;The SMS message template. Must contain the {####} placeholder. Conflicts with smsVerificationMessage argument.
namespace datasync
interface EfsLocationEc2Config
interface EfsLocationEc2Configproperty securityGroupArns
securityGroupArns: pulumi.Input<pulumi.Input<string>[]>;List of Amazon Resource Names (ARNs) of the EC2 Security Groups that are associated with the EFS Mount Target.
property subnetArn
subnetArn: pulumi.Input<string>;Amazon Resource Name (ARN) of the EC2 Subnet that is associated with the EFS Mount Target.
interface LocationSmbMountOptions
interface LocationSmbMountOptionsproperty version
version?: pulumi.Input<string>;The specific SMB version that you want DataSync to use for mounting your SMB share. Valid values: AUTOMATIC, SMB2, and SMB3. Default: AUTOMATIC
interface NfsLocationOnPremConfig
interface NfsLocationOnPremConfigproperty agentArns
agentArns: pulumi.Input<pulumi.Input<string>[]>;List of Amazon Resource Names (ARNs) of the DataSync Agents used to connect to the NFS server.
interface S3LocationS3Config
interface S3LocationS3Configproperty bucketAccessRoleArn
bucketAccessRoleArn: pulumi.Input<string>;Amazon Resource Names (ARN) of the IAM Role used to connect to the S3 Bucket.
interface TaskOptions
interface TaskOptionsproperty atime
atime?: pulumi.Input<string>;A file metadata that shows the last time a file was accessed (that is when the file was read or written to). If set to BEST_EFFORT, the DataSync Task attempts to preserve the original (that is, the version before sync PREPARING phase) atime attribute on all source files. Valid values: BEST_EFFORT, NONE. Default: BEST_EFFORT.
property bytesPerSecond
bytesPerSecond?: pulumi.Input<number>;Limits the bandwidth utilized. For example, to set a maximum of 1 MB, set this value to 1048576. Value values: -1 or greater. Default: -1 (unlimited).
property gid
gid?: pulumi.Input<string>;Group identifier of the file’s owners. Valid values: BOTH, INT_VALUE, NAME, NONE. Default: INT_VALUE (preserve integer value of the ID).
property mtime
mtime?: pulumi.Input<string>;A file metadata that indicates the last time a file was modified (written to) before the sync PREPARING phase. Value values: NONE, PRESERVE. Default: PRESERVE.
property posixPermissions
posixPermissions?: pulumi.Input<string>;Determines which users or groups can access a file for a specific purpose such as reading, writing, or execution of the file. Valid values: NONE, PRESERVE. Default: PRESERVE.
property preserveDeletedFiles
preserveDeletedFiles?: pulumi.Input<string>;Whether files deleted in the source should be removed or preserved in the destination file system. Valid values: PRESERVE, REMOVE. Default: PRESERVE.
property preserveDevices
preserveDevices?: pulumi.Input<string>;Whether the DataSync Task should preserve the metadata of block and character devices in the source files system, and recreate the files with that device name and metadata on the destination. The DataSync Task can’t sync the actual contents of such devices, because many of the devices are non-terminal and don’t return an end of file (EOF) marker. Valid values: NONE, PRESERVE. Default: NONE (ignore special devices).
property uid
uid?: pulumi.Input<string>;User identifier of the file’s owners. Valid values: BOTH, INT_VALUE, NAME, NONE. Default: INT_VALUE (preserve integer value of the ID).
property verifyMode
verifyMode?: pulumi.Input<string>;Whether a data integrity verification should be performed at the end of a task execution after all data and metadata have been transferred. Valid values: NONE, POINT_IN_TIME_CONSISTENT, ONLY_FILES_TRANSFERRED. Default: POINT_IN_TIME_CONSISTENT.
namespace dax
interface ClusterNode
interface ClusterNodeproperty address
address?: pulumi.Input<string>;property availabilityZone
availabilityZone?: pulumi.Input<string>;property id
id?: pulumi.Input<string>;property port
port?: pulumi.Input<number>;The port used by the configuration endpoint
interface ClusterServerSideEncryption
interface ClusterServerSideEncryptionproperty enabled
enabled?: pulumi.Input<boolean>;Whether to enable encryption at rest. Defaults to false.
interface ParameterGroupParameter
interface ParameterGroupParameterproperty name
name: pulumi.Input<string>;The name of the parameter.
property value
value: pulumi.Input<string>;The value for the parameter.
namespace directoryservice
interface DirectoryConnectSettings
interface DirectoryConnectSettingsproperty availabilityZones
availabilityZones?: pulumi.Input<pulumi.Input<string>[]>;property connectIps
connectIps?: pulumi.Input<pulumi.Input<string>[]>;The IP addresses of the AD Connector servers.
property customerDnsIps
customerDnsIps: pulumi.Input<pulumi.Input<string>[]>;The DNS IP addresses of the domain to connect to.
property customerUsername
customerUsername: pulumi.Input<string>;The username corresponding to the password provided.
property subnetIds
subnetIds: pulumi.Input<pulumi.Input<string>[]>;The identifiers of the subnets for the directory servers (2 subnets in 2 different AZs).
property vpcId
vpcId: pulumi.Input<string>;The identifier of the VPC that the directory is in.
interface DirectoryVpcSettings
interface DirectoryVpcSettingsproperty availabilityZones
availabilityZones?: pulumi.Input<pulumi.Input<string>[]>;property subnetIds
subnetIds: pulumi.Input<pulumi.Input<string>[]>;The identifiers of the subnets for the directory servers (2 subnets in 2 different AZs).
property vpcId
vpcId: pulumi.Input<string>;The identifier of the VPC that the directory is in.
namespace dlm
interface LifecyclePolicyPolicyDetails
interface LifecyclePolicyPolicyDetailsproperty resourceTypes
resourceTypes: pulumi.Input<pulumi.Input<string>[]>;A list of resource types that should be targeted by the lifecycle policy. VOLUME is currently the only allowed value.
property schedules
schedules: pulumi.Input<pulumi.Input<LifecyclePolicyPolicyDetailsSchedule>[]>;See the schedule configuration block.
property targetTags
targetTags: pulumi.Input<{[key: string]: any}>;A map of tag keys and their values. Any resources that match the resourceTypes and are tagged with any of these tags will be targeted.
interface LifecyclePolicyPolicyDetailsSchedule
interface LifecyclePolicyPolicyDetailsScheduleproperty copyTags
copyTags?: pulumi.Input<boolean>;Copy all user-defined tags on a source volume to snapshots of the volume created by this policy.
property createRule
createRule: pulumi.Input<LifecyclePolicyPolicyDetailsScheduleCreateRule>;See the createRule block. Max of 1 per schedule.
property name
name: pulumi.Input<string>;A name for the schedule.
property retainRule
retainRule: pulumi.Input<LifecyclePolicyPolicyDetailsScheduleRetainRule>;See the retainRule block. Max of 1 per schedule.
property tagsToAdd
tagsToAdd?: pulumi.Input<{[key: string]: any}>;A map of tag keys and their values. DLM lifecycle policies will already tag the snapshot with the tags on the volume. This configuration adds extra tags on top of these.
interface LifecyclePolicyPolicyDetailsScheduleCreateRule
interface LifecyclePolicyPolicyDetailsScheduleCreateRuleproperty interval
interval: pulumi.Input<number>;How often this lifecycle policy should be evaluated. 1, 2,3,4,6,8,12 or 24 are valid values.
property intervalUnit
intervalUnit?: pulumi.Input<string>;The unit for how often the lifecycle policy should be evaluated. HOURS is currently the only allowed value and also the default value.
property times
times?: pulumi.Input<string>;A list of times in 24 hour clock format that sets when the lifecycle policy should be evaluated. Max of 1.
interface LifecyclePolicyPolicyDetailsScheduleRetainRule
interface LifecyclePolicyPolicyDetailsScheduleRetainRuleproperty count
count: pulumi.Input<number>;How many snapshots to keep. Must be an integer between 1 and 1000.
namespace dms
interface EndpointElasticsearchSettings
interface EndpointElasticsearchSettingsproperty endpointUri
endpointUri: pulumi.Input<string>;Endpoint for the Elasticsearch cluster.
property errorRetryDuration
errorRetryDuration?: pulumi.Input<number>;Maximum number of seconds for which DMS retries failed API requests to the Elasticsearch cluster. Defaults to 300.
property fullLoadErrorPercentage
fullLoadErrorPercentage?: pulumi.Input<number>;Maximum percentage of records that can fail to be written before a full load operation stops. Defaults to 10.
property serviceAccessRoleArn
serviceAccessRoleArn: pulumi.Input<string>;Amazon Resource Name (ARN) of the IAM Role with permissions to write to the Elasticsearch cluster.
interface EndpointKafkaSettings
interface EndpointKafkaSettingsproperty broker
broker: pulumi.Input<string>;Kafka broker location. Specify in the form broker-hostname-or-ip:port.
property topic
topic?: pulumi.Input<string>;Kafka topic for migration. Defaults to kafka-default-topic.
interface EndpointKinesisSettings
interface EndpointKinesisSettingsproperty messageFormat
messageFormat?: pulumi.Input<string>;Output format for the records created. Defaults to json. Valid values are json and jsonUnformatted (a single line with no tab).
property serviceAccessRoleArn
serviceAccessRoleArn?: pulumi.Input<string>;Amazon Resource Name (ARN) of the IAM Role with permissions to write to the Kinesis data stream.
property streamArn
streamArn?: pulumi.Input<string>;Amazon Resource Name (ARN) of the Kinesis data stream.
interface EndpointMongodbSettings
interface EndpointMongodbSettingsproperty authMechanism
authMechanism?: pulumi.Input<string>;Authentication mechanism to access the MongoDB source endpoint. Defaults to default.
property authSource
authSource?: pulumi.Input<string>;Authentication database name. Not used when authType is no. Defaults to admin.
property authType
authType?: pulumi.Input<string>;Authentication type to access the MongoDB source endpoint. Defaults to password.
property docsToInvestigate
docsToInvestigate?: pulumi.Input<string>;Number of documents to preview to determine the document organization. Use this setting when nestingLevel is set to one. Defaults to 1000.
property extractDocId
extractDocId?: pulumi.Input<string>;Document ID. Use this setting when nestingLevel is set to none. Defaults to false.
property nestingLevel
nestingLevel?: pulumi.Input<string>;Specifies either document or table mode. Defaults to none. Valid values are one (table mode) and none (document mode).
interface EndpointS3Settings
interface EndpointS3Settingsproperty bucketFolder
bucketFolder?: pulumi.Input<string>;S3 Bucket Object prefix.
property bucketName
bucketName?: pulumi.Input<string>;S3 Bucket name.
property compressionType
compressionType?: pulumi.Input<string>;Set to compress target files. Defaults to NONE. Valid values are GZIP and NONE.
property csvDelimiter
csvDelimiter?: pulumi.Input<string>;Delimiter used to separate columns in the source files. Defaults to ,.
property csvRowDelimiter
csvRowDelimiter?: pulumi.Input<string>;Delimiter used to separate rows in the source files. Defaults to \n.
property externalTableDefinition
externalTableDefinition?: pulumi.Input<string>;JSON document that describes how AWS DMS should interpret the data.
property serviceAccessRoleArn
serviceAccessRoleArn?: pulumi.Input<string>;Amazon Resource Name (ARN) of the IAM Role with permissions to read from or write to the S3 Bucket.
namespace docdb
interface ClusterParameterGroupParameter
interface ClusterParameterGroupParameterproperty applyMethod
applyMethod?: pulumi.Input<string>;Valid values are immediate and pending-reboot. Defaults to pending-reboot.
property name
name: pulumi.Input<string>;The name of the documentDB parameter.
property value
value: pulumi.Input<string>;The value of the documentDB parameter.
namespace dynamodb
interface GetTableServerSideEncryption
interface GetTableServerSideEncryptionproperty enabled
enabled?: undefined | false | true;property kmsKeyArn
kmsKeyArn?: undefined | string;interface GlobalTableReplica
interface GlobalTableReplicaproperty regionName
regionName: pulumi.Input<string>;AWS region name of replica DynamoDB Table. e.g. us-east-1
interface TableAttribute
interface TableAttributeproperty name
name: pulumi.Input<string>;The name of the index
property type
type: pulumi.Input<string>;Attribute type, which must be a scalar type: S, N, or B for (S)tring, (N)umber or (B)inary data
interface TableGlobalSecondaryIndex
interface TableGlobalSecondaryIndexproperty hashKey
hashKey: pulumi.Input<string>;The name of the hash key in the index; must be defined as an attribute in the resource.
property name
name: pulumi.Input<string>;The name of the index
property nonKeyAttributes
nonKeyAttributes?: pulumi.Input<pulumi.Input<string>[]>;Only required with INCLUDE as a
projection type; a list of attributes to project into the index. These
do not need to be defined as attributes on the table.
property projectionType
projectionType: pulumi.Input<string>;One of ALL, INCLUDE or KEYS_ONLY
where ALL projects every attribute into the index, KEYS_ONLY
projects just the hash and range key into the index, and INCLUDE
projects only the keys specified in the _non_keyattributes
parameter.
property rangeKey
rangeKey?: pulumi.Input<string>;The name of the range key; must be defined
property readCapacity
readCapacity?: pulumi.Input<number>;The number of read units for this index. Must be set if billingMode is set to PROVISIONED.
property writeCapacity
writeCapacity?: pulumi.Input<number>;The number of write units for this index. Must be set if billingMode is set to PROVISIONED.
interface TableLocalSecondaryIndex
interface TableLocalSecondaryIndexproperty name
name: pulumi.Input<string>;The name of the index
property nonKeyAttributes
nonKeyAttributes?: pulumi.Input<pulumi.Input<string>[]>;Only required with INCLUDE as a
projection type; a list of attributes to project into the index. These
do not need to be defined as attributes on the table.
property projectionType
projectionType: pulumi.Input<string>;One of ALL, INCLUDE or KEYS_ONLY
where ALL projects every attribute into the index, KEYS_ONLY
projects just the hash and range key into the index, and INCLUDE
projects only the keys specified in the _non_keyattributes
parameter.
property rangeKey
rangeKey: pulumi.Input<string>;The name of the range key; must be defined
interface TablePointInTimeRecovery
interface TablePointInTimeRecoveryproperty enabled
enabled: pulumi.Input<boolean>;Indicates whether ttl is enabled (true) or disabled (false).
interface TableReplica
interface TableReplicaproperty regionName
regionName: pulumi.Input<string>;Region name of the replica.
interface TableServerSideEncryption
interface TableServerSideEncryptionproperty enabled
enabled: pulumi.Input<boolean>;Indicates whether ttl is enabled (true) or disabled (false).
property kmsKeyArn
kmsKeyArn?: pulumi.Input<string>;The ARN of the CMK that should be used for the AWS KMS encryption.
This attribute should only be specified if the key is different from the default DynamoDB CMK, alias/aws/dynamodb.
interface TableTtl
interface TableTtlproperty attributeName
attributeName: pulumi.Input<string>;The name of the table attribute to store the TTL timestamp in.
property enabled
enabled?: pulumi.Input<boolean>;Indicates whether ttl is enabled (true) or disabled (false).
namespace ebs
interface GetSnapshotFilter
interface GetSnapshotFilterproperty name
name: string;property values
values: string[];interface GetSnapshotIdsFilter
interface GetSnapshotIdsFilterproperty name
name: string;property values
values: string[];interface GetVolumeFilter
interface GetVolumeFilterproperty name
name: string;property values
values: string[];namespace ec2
interface AmiCopyEbsBlockDevice
interface AmiCopyEbsBlockDeviceproperty deleteOnTermination
deleteOnTermination?: pulumi.Input<boolean>;Boolean controlling whether the EBS volumes created to support each created instance will be deleted once that instance is terminated.
property deviceName
deviceName?: pulumi.Input<string>;The path at which the device is exposed to created instances.
property encrypted
encrypted?: pulumi.Input<boolean>;Boolean controlling whether the created EBS volumes will be encrypted. Can’t be used with snapshotId.
property iops
iops?: pulumi.Input<number>;Number of I/O operations per second the created volumes will support.
property snapshotId
snapshotId?: pulumi.Input<string>;The id of an EBS snapshot that will be used to initialize the created
EBS volumes. If set, the volumeSize attribute must be at least as large as the referenced
snapshot.
property volumeSize
volumeSize?: pulumi.Input<number>;The size of created volumes in GiB.
If snapshotId is set and volumeSize is omitted then the volume will have the same size
as the selected snapshot.
property volumeType
volumeType?: pulumi.Input<string>;The type of EBS volume to create. Can be one of “standard” (the default), “io1” or “gp2”.
interface AmiCopyEphemeralBlockDevice
interface AmiCopyEphemeralBlockDeviceproperty deviceName
deviceName?: pulumi.Input<string>;The path at which the device is exposed to created instances.
property virtualName
virtualName?: pulumi.Input<string>;A name for the ephemeral device, of the form “ephemeralN” where N is a volume number starting from zero.
interface AmiEbsBlockDevice
interface AmiEbsBlockDeviceproperty deleteOnTermination
deleteOnTermination?: pulumi.Input<boolean>;Boolean controlling whether the EBS volumes created to support each created instance will be deleted once that instance is terminated.
property deviceName
deviceName: pulumi.Input<string>;The path at which the device is exposed to created instances.
property encrypted
encrypted?: pulumi.Input<boolean>;Boolean controlling whether the created EBS volumes will be encrypted. Can’t be used with snapshotId.
property iops
iops?: pulumi.Input<number>;Number of I/O operations per second the created volumes will support.
property snapshotId
snapshotId?: pulumi.Input<string>;The id of an EBS snapshot that will be used to initialize the created
EBS volumes. If set, the volumeSize attribute must be at least as large as the referenced
snapshot.
property volumeSize
volumeSize?: pulumi.Input<number>;The size of created volumes in GiB.
If snapshotId is set and volumeSize is omitted then the volume will have the same size
as the selected snapshot.
property volumeType
volumeType?: pulumi.Input<string>;The type of EBS volume to create. Can be one of “standard” (the default), “io1” or “gp2”.
interface AmiEphemeralBlockDevice
interface AmiEphemeralBlockDeviceproperty deviceName
deviceName: pulumi.Input<string>;The path at which the device is exposed to created instances.
property virtualName
virtualName: pulumi.Input<string>;A name for the ephemeral device, of the form “ephemeralN” where N is a volume number starting from zero.
interface AmiFromInstanceEbsBlockDevice
interface AmiFromInstanceEbsBlockDeviceproperty deleteOnTermination
deleteOnTermination?: pulumi.Input<boolean>;Boolean controlling whether the EBS volumes created to support each created instance will be deleted once that instance is terminated.
property deviceName
deviceName?: pulumi.Input<string>;The path at which the device is exposed to created instances.
property encrypted
encrypted?: pulumi.Input<boolean>;Boolean controlling whether the created EBS volumes will be encrypted. Can’t be used with snapshotId.
property iops
iops?: pulumi.Input<number>;Number of I/O operations per second the created volumes will support.
property snapshotId
snapshotId?: pulumi.Input<string>;The id of an EBS snapshot that will be used to initialize the created
EBS volumes. If set, the volumeSize attribute must be at least as large as the referenced
snapshot.
property volumeSize
volumeSize?: pulumi.Input<number>;The size of created volumes in GiB.
If snapshotId is set and volumeSize is omitted then the volume will have the same size
as the selected snapshot.
property volumeType
volumeType?: pulumi.Input<string>;The type of EBS volume to create. Can be one of “standard” (the default), “io1” or “gp2”.
interface AmiFromInstanceEphemeralBlockDevice
interface AmiFromInstanceEphemeralBlockDeviceproperty deviceName
deviceName?: pulumi.Input<string>;The path at which the device is exposed to created instances.
property virtualName
virtualName?: pulumi.Input<string>;A name for the ephemeral device, of the form “ephemeralN” where N is a volume number starting from zero.
interface DefaultNetworkAclEgress
interface DefaultNetworkAclEgressproperty action
action: pulumi.Input<string>;The action to take.
property cidrBlock
cidrBlock?: pulumi.Input<string>;The CIDR block to match. This must be a valid network mask.
property fromPort
fromPort: pulumi.Input<number>;The from port to match.
property icmpCode
icmpCode?: pulumi.Input<number>;The ICMP type code to be used. Default 0.
property icmpType
icmpType?: pulumi.Input<number>;The ICMP type to be used. Default 0.
property ipv6CidrBlock
ipv6CidrBlock?: pulumi.Input<string>;The IPv6 CIDR block.
property protocol
protocol: pulumi.Input<string>;The protocol to match. If using the -1 ‘all’ protocol, you must specify a from and to port of 0.
property ruleNo
ruleNo: pulumi.Input<number>;The rule number. Used for ordering.
property toPort
toPort: pulumi.Input<number>;The to port to match.
interface DefaultNetworkAclIngress
interface DefaultNetworkAclIngressproperty action
action: pulumi.Input<string>;The action to take.
property cidrBlock
cidrBlock?: pulumi.Input<string>;The CIDR block to match. This must be a valid network mask.
property fromPort
fromPort: pulumi.Input<number>;The from port to match.
property icmpCode
icmpCode?: pulumi.Input<number>;The ICMP type code to be used. Default 0.
property icmpType
icmpType?: pulumi.Input<number>;The ICMP type to be used. Default 0.
property ipv6CidrBlock
ipv6CidrBlock?: pulumi.Input<string>;The IPv6 CIDR block.
property protocol
protocol: pulumi.Input<string>;The protocol to match. If using the -1 ‘all’ protocol, you must specify a from and to port of 0.
property ruleNo
ruleNo: pulumi.Input<number>;The rule number. Used for ordering.
property toPort
toPort: pulumi.Input<number>;The to port to match.
interface DefaultRouteTableRoute
interface DefaultRouteTableRouteproperty cidrBlock
cidrBlock?: pulumi.Input<string>;The CIDR block of the route.
property egressOnlyGatewayId
egressOnlyGatewayId?: pulumi.Input<string>;Identifier of a VPC Egress Only Internet Gateway.
property gatewayId
gatewayId?: pulumi.Input<string>;Identifier of a VPC internet gateway or a virtual private gateway.
property instanceId
instanceId?: pulumi.Input<string>;Identifier of an EC2 instance.
property ipv6CidrBlock
ipv6CidrBlock?: pulumi.Input<string>;The Ipv6 CIDR block of the route
property natGatewayId
natGatewayId?: pulumi.Input<string>;Identifier of a VPC NAT gateway.
property networkInterfaceId
networkInterfaceId?: pulumi.Input<string>;Identifier of an EC2 network interface.
property transitGatewayId
transitGatewayId?: pulumi.Input<string>;Identifier of an EC2 Transit Gateway.
property vpcPeeringConnectionId
vpcPeeringConnectionId?: pulumi.Input<string>;Identifier of a VPC peering connection.
interface DefaultSecurityGroupEgress
interface DefaultSecurityGroupEgressproperty cidrBlocks
cidrBlocks?: pulumi.Input<pulumi.Input<string>[]>;property description
description?: pulumi.Input<string>;The description of the security group
property fromPort
fromPort: pulumi.Input<number>;property ipv6CidrBlocks
ipv6CidrBlocks?: pulumi.Input<pulumi.Input<string>[]>;property prefixListIds
prefixListIds?: pulumi.Input<pulumi.Input<string>[]>;property protocol
protocol: pulumi.Input<string>;property securityGroups
securityGroups?: pulumi.Input<pulumi.Input<string>[]>;property self
self?: pulumi.Input<boolean>;property toPort
toPort: pulumi.Input<number>;interface DefaultSecurityGroupIngress
interface DefaultSecurityGroupIngressproperty cidrBlocks
cidrBlocks?: pulumi.Input<pulumi.Input<string>[]>;property description
description?: pulumi.Input<string>;The description of the security group
property fromPort
fromPort: pulumi.Input<number>;property ipv6CidrBlocks
ipv6CidrBlocks?: pulumi.Input<pulumi.Input<string>[]>;property prefixListIds
prefixListIds?: pulumi.Input<pulumi.Input<string>[]>;property protocol
protocol: pulumi.Input<string>;property securityGroups
securityGroups?: pulumi.Input<pulumi.Input<string>[]>;property self
self?: pulumi.Input<boolean>;property toPort
toPort: pulumi.Input<number>;interface FleetLaunchTemplateConfig
interface FleetLaunchTemplateConfigproperty launchTemplateSpecification
launchTemplateSpecification: pulumi.Input<FleetLaunchTemplateConfigLaunchTemplateSpecification>;Nested argument containing EC2 Launch Template to use. Defined below.
property overrides
overrides?: pulumi.Input<pulumi.Input<FleetLaunchTemplateConfigOverride>[]>;Nested argument(s) containing parameters to override the same parameters in the Launch Template. Defined below.
interface FleetLaunchTemplateConfigLaunchTemplateSpecification
interface FleetLaunchTemplateConfigLaunchTemplateSpecificationproperty launchTemplateId
launchTemplateId?: pulumi.Input<string>;ID of the launch template.
property launchTemplateName
launchTemplateName?: pulumi.Input<string>;Name of the launch template.
property version
version: pulumi.Input<string>;Version number of the launch template.
interface FleetLaunchTemplateConfigOverride
interface FleetLaunchTemplateConfigOverrideproperty availabilityZone
availabilityZone?: pulumi.Input<string>;Availability Zone in which to launch the instances.
property instanceType
instanceType?: pulumi.Input<string>;Instance type.
property maxPrice
maxPrice?: pulumi.Input<string>;Maximum price per unit hour that you are willing to pay for a Spot Instance.
property priority
priority?: pulumi.Input<number>;Priority for the launch template override. If onDemandOptions allocationStrategy is set to prioritized, EC2 Fleet uses priority to determine which launch template override to use first in fulfilling On-Demand capacity. The highest priority is launched first. The lower the number, the higher the priority. If no number is set, the launch template override has the lowest priority. Valid values are whole numbers starting at 0.
property subnetId
subnetId?: pulumi.Input<string>;ID of the subnet in which to launch the instances.
property weightedCapacity
weightedCapacity?: pulumi.Input<number>;Number of units provided by the specified instance type.
interface FleetOnDemandOptions
interface FleetOnDemandOptionsproperty allocationStrategy
allocationStrategy?: pulumi.Input<string>;How to allocate the target capacity across the Spot pools. Valid values: diversified, lowestPrice. Default: lowestPrice.
interface FleetSpotOptions
interface FleetSpotOptionsproperty allocationStrategy
allocationStrategy?: pulumi.Input<string>;How to allocate the target capacity across the Spot pools. Valid values: diversified, lowestPrice. Default: lowestPrice.
property instanceInterruptionBehavior
instanceInterruptionBehavior?: pulumi.Input<string>;Behavior when a Spot Instance is interrupted. Valid values: hibernate, stop, terminate. Default: terminate.
property instancePoolsToUseCount
instancePoolsToUseCount?: pulumi.Input<number>;Number of Spot pools across which to allocate your target Spot capacity. Valid only when Spot allocationStrategy is set to lowestPrice. Default: 1.
interface FleetTargetCapacitySpecification
interface FleetTargetCapacitySpecificationproperty defaultTargetCapacityType
defaultTargetCapacityType: pulumi.Input<string>;Default target capacity type. Valid values: on-demand, spot.
property onDemandTargetCapacity
onDemandTargetCapacity?: pulumi.Input<number>;The number of On-Demand units to request.
property spotTargetCapacity
spotTargetCapacity?: pulumi.Input<number>;The number of Spot units to request.
property totalTargetCapacity
totalTargetCapacity: pulumi.Input<number>;The number of units to request, filled using defaultTargetCapacityType.
interface GetCoipPoolFilter
interface GetCoipPoolFilterproperty name
name: string;The name of the field to filter by, as defined by the underlying AWS API.
property values
values: string[];Set of values that are accepted for the given field. A COIP Pool will be selected if any one of the given values matches.
interface GetCoipPoolsFilter
interface GetCoipPoolsFilterproperty name
name: string;The name of the field to filter by, as defined by the underlying AWS API.
property values
values: string[];Set of values that are accepted for the given field. A COIP Pool will be selected if any one of the given values matches.
interface GetCustomerGatewayFilter
interface GetCustomerGatewayFilterproperty name
name: string;property values
values: string[];interface GetInstanceFilter
interface GetInstanceFilterproperty name
name: string;property values
values: string[];interface GetInstancesFilter
interface GetInstancesFilterproperty name
name: string;property values
values: string[];interface GetInstanceTypeOfferingFilter
interface GetInstanceTypeOfferingFilterproperty name
name: string;Name of the filter. The location filter depends on the top-level locationType argument and if not specified, defaults to the current region.
property values
values: string[];List of one or more values for the filter.
interface GetInstanceTypeOfferingsFilter
interface GetInstanceTypeOfferingsFilterproperty name
name: string;Name of the filter. The location filter depends on the top-level locationType argument and if not specified, defaults to the current region.
property values
values: string[];List of one or more values for the filter.
interface GetInternetGatewayFilter
interface GetInternetGatewayFilterproperty name
name: string;The name of the field to filter by, as defined by the underlying AWS API.
property values
values: string[];Set of values that are accepted for the given field. An Internet Gateway will be selected if any one of the given values matches.
interface GetLaunchTemplateFilter
interface GetLaunchTemplateFilterproperty name
name: string;The name of the filter field. Valid values can be found in the EC2 DescribeLaunchTemplates API Reference.
property values
values: string[];Set of values that are accepted for the given filter field. Results will be selected if any given value matches.
interface GetLocalGatewayFilter
interface GetLocalGatewayFilterproperty name
name: string;The name of the field to filter by, as defined by the underlying AWS API.
property values
values: string[];Set of values that are accepted for the given field. A Local Gateway will be selected if any one of the given values matches.
interface GetLocalGatewayRouteTableFilter
interface GetLocalGatewayRouteTableFilterproperty name
name: string;The name of the field to filter by, as defined by the underlying AWS API.
property values
values: string[];Set of values that are accepted for the given field. A local gateway route table will be selected if any one of the given values matches.
interface GetLocalGatewayRouteTablesFilter
interface GetLocalGatewayRouteTablesFilterproperty name
name: string;The name of the field to filter by, as defined by the underlying AWS API.
property values
values: string[];Set of values that are accepted for the given field. A Local Gateway Route Table will be selected if any one of the given values matches.
interface GetLocalGatewaysFilter
interface GetLocalGatewaysFilterproperty name
name: string;The name of the field to filter by, as defined by the underlying AWS API.
property values
values: string[];Set of values that are accepted for the given field. A Local Gateway will be selected if any one of the given values matches.
interface GetNatGatewayFilter
interface GetNatGatewayFilterproperty name
name: string;The name of the field to filter by, as defined by the underlying AWS API.
property values
values: string[];Set of values that are accepted for the given field. An Nat Gateway will be selected if any one of the given values matches.
interface GetNetworkAclsFilter
interface GetNetworkAclsFilterproperty name
name: string;The name of the field to filter by, as defined by the underlying AWS API.
property values
values: string[];Set of values that are accepted for the given field. A VPC will be selected if any one of the given values matches.
interface GetNetworkInterfaceFilter
interface GetNetworkInterfaceFilterproperty name
name: string;property values
values: string[];interface GetNetworkInterfacesFilter
interface GetNetworkInterfacesFilterproperty name
name: string;The name of the field to filter by, as defined by the underlying AWS API.
property values
values: string[];Set of values that are accepted for the given field.
interface GetRouteTableFilter
interface GetRouteTableFilterproperty name
name: string;The name of the field to filter by, as defined by the underlying AWS API.
property values
values: string[];Set of values that are accepted for the given field. A Route Table will be selected if any one of the given values matches.
interface GetRouteTablesFilter
interface GetRouteTablesFilterproperty name
name: string;The name of the field to filter by, as defined by the underlying AWS API.
property values
values: string[];Set of values that are accepted for the given field. A Route Table will be selected if any one of the given values matches.
interface GetSecurityGroupFilter
interface GetSecurityGroupFilterproperty name
name: string;The name of the field to filter by, as defined by the underlying AWS API.
property values
values: string[];Set of values that are accepted for the given field. A Security Group will be selected if any one of the given values matches.
interface GetSecurityGroupsFilter
interface GetSecurityGroupsFilterproperty name
name: string;property values
values: string[];interface GetSubnetFilter
interface GetSubnetFilterproperty name
name: string;The name of the field to filter by, as defined by
the underlying AWS API.
For example, if matching against tag Name, use:
property values
values: string[];Set of values that are accepted for the given field. A subnet will be selected if any one of the given values matches.
interface GetSubnetIdsFilter
interface GetSubnetIdsFilterproperty name
name: string;The name of the field to filter by, as defined by
the underlying AWS API.
For example, if matching against tag Name, use:
property values
values: string[];Set of values that are accepted for the given field. Subnet IDs will be selected if any one of the given values match.
interface GetVpcDhcpOptionsFilter
interface GetVpcDhcpOptionsFilterproperty name
name: string;The name of the field to filter.
property values
values: string[];Set of values for filtering.
interface GetVpcEndpointFilter
interface GetVpcEndpointFilterproperty name
name: string;The name of the field to filter by, as defined by the underlying AWS API.
property values
values: string[];Set of values that are accepted for the given field. A VPC Endpoint will be selected if any one of the given values matches.
interface GetVpcEndpointServiceFilter
interface GetVpcEndpointServiceFilterproperty name
name: string;The name of the filter field. Valid values can be found in the EC2 DescribeVpcEndpointServices API Reference.
property values
values: string[];Set of values that are accepted for the given filter field. Results will be selected if any given value matches.
interface GetVpcFilter
interface GetVpcFilterproperty name
name: string;The name of the field to filter by, as defined by the underlying AWS API.
property values
values: string[];Set of values that are accepted for the given field. A VPC will be selected if any one of the given values matches.
interface GetVpcPeeringConnectionFilter
interface GetVpcPeeringConnectionFilterproperty name
name: string;The name of the field to filter by, as defined by the underlying AWS API.
property values
values: string[];Set of values that are accepted for the given field. A VPC Peering Connection will be selected if any one of the given values matches.
interface GetVpcsFilter
interface GetVpcsFilterproperty name
name: string;The name of the field to filter by, as defined by the underlying AWS API.
property values
values: string[];Set of values that are accepted for the given field. A VPC will be selected if any one of the given values matches.
interface GetVpnGatewayFilter
interface GetVpnGatewayFilterproperty name
name: string;The name of the field to filter by, as defined by the underlying AWS API.
property values
values: string[];Set of values that are accepted for the given field. A VPN Gateway will be selected if any one of the given values matches.
interface InstanceCreditSpecification
interface InstanceCreditSpecificationproperty cpuCredits
cpuCredits?: pulumi.Input<string>;The credit option for CPU usage. Can be "standard" or "unlimited". T3 instances are launched as unlimited by default. T2 instances are launched as standard by default.
interface InstanceEbsBlockDevice
interface InstanceEbsBlockDeviceproperty deleteOnTermination
deleteOnTermination?: pulumi.Input<boolean>;Whether the volume should be destroyed
on instance termination (Default: true).
property deviceName
deviceName: pulumi.Input<string>;The name of the device to mount.
property encrypted
encrypted?: pulumi.Input<boolean>;Enables EBS
encryption
on the volume (Default: false). Cannot be used with snapshotId. Must be configured to perform drift detection.
property iops
iops?: pulumi.Input<number>;The amount of provisioned
IOPS.
This must be set with a volumeType of "io1".
property kmsKeyId
kmsKeyId?: pulumi.Input<string>;Amazon Resource Name (ARN) of the KMS Key to use when encrypting the volume. Must be configured to perform drift detection.
property snapshotId
snapshotId?: pulumi.Input<string>;The Snapshot ID to mount.
property volumeId
volumeId?: pulumi.Input<string>;property volumeSize
volumeSize?: pulumi.Input<number>;The size of the volume in gibibytes (GiB).
property volumeType
volumeType?: pulumi.Input<string>;The type of volume. Can be "standard", "gp2",
or "io1". (Default: "gp2").
interface InstanceEphemeralBlockDevice
interface InstanceEphemeralBlockDeviceproperty deviceName
deviceName: pulumi.Input<string>;The name of the block device to mount on the instance.
property noDevice
noDevice?: pulumi.Input<boolean>;Suppresses the specified device included in the AMI’s block device mapping.
property virtualName
virtualName?: pulumi.Input<string>;The Instance Store Device
Name
(e.g. "ephemeral0").
interface InstanceMetadataOptions
interface InstanceMetadataOptionsproperty httpEndpoint
httpEndpoint?: pulumi.Input<string>;Whether the metadata service is available. Can be "enabled" or "disabled". (Default: "enabled").
property httpPutResponseHopLimit
httpPutResponseHopLimit?: pulumi.Input<number>;The desired HTTP PUT response hop limit for instance metadata requests. The larger the number, the further instance metadata requests can travel. Can be an integer from 1 to 64. (Default: 1).
property httpTokens
httpTokens?: pulumi.Input<string>;Whether or not the metadata service requires session tokens, also referred to as Instance Metadata Service Version 2. Can be "optional" or "required". (Default: "optional").
interface InstanceNetworkInterface
interface InstanceNetworkInterfaceproperty deleteOnTermination
deleteOnTermination?: pulumi.Input<boolean>;Whether or not to delete the network interface on instance termination. Defaults to false. Currently, the only valid value is false, as this is only supported when creating new network interfaces when launching an instance.
property deviceIndex
deviceIndex: pulumi.Input<number>;The integer index of the network interface attachment. Limited by instance type.
property networkInterfaceId
networkInterfaceId: pulumi.Input<string>;The ID of the network interface to attach.
interface InstanceRootBlockDevice
interface InstanceRootBlockDeviceproperty deleteOnTermination
deleteOnTermination?: pulumi.Input<boolean>;Whether the volume should be destroyed
on instance termination (Default: true).
property deviceName
deviceName?: pulumi.Input<string>;The name of the device to mount.
property encrypted
encrypted?: pulumi.Input<boolean>;Enable volume encryption. (Default: false). Must be configured to perform drift detection.
property iops
iops?: pulumi.Input<number>;The amount of provisioned
IOPS.
This is only valid for volumeType of "io1", and must be specified if
using that type
property kmsKeyId
kmsKeyId?: pulumi.Input<string>;Amazon Resource Name (ARN) of the KMS Key to use when encrypting the volume. Must be configured to perform drift detection.
property volumeId
volumeId?: pulumi.Input<string>;property volumeSize
volumeSize?: pulumi.Input<number>;The size of the volume in gibibytes (GiB).
property volumeType
volumeType?: pulumi.Input<string>;The type of volume. Can be "standard", "gp2", "io1", "sc1", or "st1". (Default: "standard").
interface LaunchConfigurationEbsBlockDevice
interface LaunchConfigurationEbsBlockDeviceproperty deleteOnTermination
deleteOnTermination?: pulumi.Input<boolean>;property deviceName
deviceName: pulumi.Input<string>;property encrypted
encrypted?: pulumi.Input<boolean>;property iops
iops?: pulumi.Input<number>;property noDevice
noDevice?: pulumi.Input<boolean>;property snapshotId
snapshotId?: pulumi.Input<string>;property volumeSize
volumeSize?: pulumi.Input<number>;property volumeType
volumeType?: pulumi.Input<string>;interface LaunchConfigurationEphemeralBlockDevice
interface LaunchConfigurationEphemeralBlockDeviceproperty deviceName
deviceName: pulumi.Input<string>;property virtualName
virtualName: pulumi.Input<string>;interface LaunchConfigurationRootBlockDevice
interface LaunchConfigurationRootBlockDeviceproperty deleteOnTermination
deleteOnTermination?: pulumi.Input<boolean>;property encrypted
encrypted?: pulumi.Input<boolean>;property iops
iops?: pulumi.Input<number>;property volumeSize
volumeSize?: pulumi.Input<number>;property volumeType
volumeType?: pulumi.Input<string>;interface LaunchTemplateBlockDeviceMapping
interface LaunchTemplateBlockDeviceMappingproperty deviceName
deviceName?: pulumi.Input<string>;The name of the device to mount.
property ebs
ebs?: pulumi.Input<LaunchTemplateBlockDeviceMappingEbs>;Configure EBS volume properties.
property noDevice
noDevice?: pulumi.Input<string>;Suppresses the specified device included in the AMI’s block device mapping.
property virtualName
virtualName?: pulumi.Input<string>;The Instance Store Device
Name
(e.g. "ephemeral0").
interface LaunchTemplateBlockDeviceMappingEbs
interface LaunchTemplateBlockDeviceMappingEbsproperty deleteOnTermination
deleteOnTermination?: pulumi.Input<string>;Whether the volume should be destroyed on instance termination. Defaults to false if not set. See Preserving Amazon EBS Volumes on Instance Termination for more information.
property encrypted
encrypted?: pulumi.Input<string>;Enables EBS encryption
on the volume (Default: false). Cannot be used with snapshotId.
property iops
iops?: pulumi.Input<number>;The amount of provisioned
IOPS.
This must be set with a volumeType of "io1".
property kmsKeyId
kmsKeyId?: pulumi.Input<string>;The ARN of the AWS Key Management Service (AWS KMS) customer master key (CMK) to use when creating the encrypted volume.
encrypted must be set to true when this is set.
property snapshotId
snapshotId?: pulumi.Input<string>;The Snapshot ID to mount.
property volumeSize
volumeSize?: pulumi.Input<number>;The size of the volume in gigabytes.
property volumeType
volumeType?: pulumi.Input<string>;The type of volume. Can be "standard", "gp2", or "io1". (Default: "standard").
interface LaunchTemplateCapacityReservationSpecification
interface LaunchTemplateCapacityReservationSpecificationproperty capacityReservationPreference
capacityReservationPreference?: pulumi.Input<string>;Indicates the instance’s Capacity Reservation preferences. Can be open or none. (Default none).
property capacityReservationTarget
capacityReservationTarget?: pulumi.Input<LaunchTemplateCapacityReservationSpecificationCapacityReservationTarget>;Used to target a specific Capacity Reservation:
interface LaunchTemplateCapacityReservationSpecificationCapacityReservationTarget
interface LaunchTemplateCapacityReservationSpecificationCapacityReservationTargetproperty capacityReservationId
capacityReservationId?: pulumi.Input<string>;The ID of the Capacity Reservation to target.
interface LaunchTemplateCpuOptions
interface LaunchTemplateCpuOptionsproperty coreCount
coreCount?: pulumi.Input<number>;The number of CPU cores for the instance.
property threadsPerCore
threadsPerCore?: pulumi.Input<number>;The number of threads per CPU core. To disable Intel Hyper-Threading Technology for the instance, specify a value of 1. Otherwise, specify the default value of 2.
interface LaunchTemplateCreditSpecification
interface LaunchTemplateCreditSpecificationproperty cpuCredits
cpuCredits?: pulumi.Input<string>;The credit option for CPU usage. Can be "standard" or "unlimited". T3 instances are launched as unlimited by default. T2 instances are launched as standard by default.
interface LaunchTemplateElasticGpuSpecification
interface LaunchTemplateElasticGpuSpecificationproperty type
type: pulumi.Input<string>;The Elastic GPU Type
interface LaunchTemplateElasticInferenceAccelerator
interface LaunchTemplateElasticInferenceAcceleratorproperty type
type: pulumi.Input<string>;Accelerator type.
interface LaunchTemplateHibernationOptions
interface LaunchTemplateHibernationOptionsproperty configured
configured: pulumi.Input<boolean>;If set to true, the launched EC2 instance will hibernation enabled.
interface LaunchTemplateIamInstanceProfile
interface LaunchTemplateIamInstanceProfileproperty arn
arn?: pulumi.Input<string>;The Amazon Resource Name (ARN) of the instance profile.
property name
name?: pulumi.Input<string>;The name of the instance profile.
interface LaunchTemplateInstanceMarketOptions
interface LaunchTemplateInstanceMarketOptionsproperty marketType
marketType?: pulumi.Input<string>;The market type. Can be spot.
property spotOptions
spotOptions?: pulumi.Input<LaunchTemplateInstanceMarketOptionsSpotOptions>;The options for Spot Instance
interface LaunchTemplateInstanceMarketOptionsSpotOptions
interface LaunchTemplateInstanceMarketOptionsSpotOptionsproperty blockDurationMinutes
blockDurationMinutes?: pulumi.Input<number>;The required duration in minutes. This value must be a multiple of 60.
property instanceInterruptionBehavior
instanceInterruptionBehavior?: pulumi.Input<string>;The behavior when a Spot Instance is interrupted. Can be hibernate,
stop, or terminate. (Default: terminate).
property maxPrice
maxPrice?: pulumi.Input<string>;The maximum hourly price you’re willing to pay for the Spot Instances.
property spotInstanceType
spotInstanceType?: pulumi.Input<string>;The Spot Instance request type. Can be one-time, or persistent.
property validUntil
validUntil?: pulumi.Input<string>;The end date of the request.
interface LaunchTemplateLicenseSpecification
interface LaunchTemplateLicenseSpecificationproperty licenseConfigurationArn
licenseConfigurationArn: pulumi.Input<string>;ARN of the license configuration.
interface LaunchTemplateMetadataOptions
interface LaunchTemplateMetadataOptionsproperty httpEndpoint
httpEndpoint?: pulumi.Input<string>;Whether the metadata service is available. Can be "enabled" or "disabled". (Default: "enabled").
property httpPutResponseHopLimit
httpPutResponseHopLimit?: pulumi.Input<number>;The desired HTTP PUT response hop limit for instance metadata requests. The larger the number, the further instance metadata requests can travel. Can be an integer from 1 to 64. (Default: 1).
property httpTokens
httpTokens?: pulumi.Input<string>;Whether or not the metadata service requires session tokens, also referred to as Instance Metadata Service Version 2. Can be "optional" or "required". (Default: "optional").
interface LaunchTemplateMonitoring
interface LaunchTemplateMonitoringproperty enabled
enabled?: pulumi.Input<boolean>;If true, the launched EC2 instance will have detailed monitoring enabled.
interface LaunchTemplateNetworkInterface
interface LaunchTemplateNetworkInterfaceproperty associatePublicIpAddress
associatePublicIpAddress?: pulumi.Input<string>;Associate a public ip address with the network interface. Boolean value.
property deleteOnTermination
deleteOnTermination?: pulumi.Input<boolean>;Whether the network interface should be destroyed on instance termination. Defaults to false if not set.
property description
description?: pulumi.Input<string>;Description of the network interface.
property deviceIndex
deviceIndex?: pulumi.Input<number>;The integer index of the network interface attachment.
property ipv4AddressCount
ipv4AddressCount?: pulumi.Input<number>;The number of secondary private IPv4 addresses to assign to a network interface. Conflicts with ipv4Addresses
property ipv4Addresses
ipv4Addresses?: pulumi.Input<pulumi.Input<string>[]>;One or more private IPv4 addresses to associate. Conflicts with ipv4AddressCount
property ipv6AddressCount
ipv6AddressCount?: pulumi.Input<number>;The number of IPv6 addresses to assign to a network interface. Conflicts with ipv6Addresses
property ipv6Addresses
ipv6Addresses?: pulumi.Input<pulumi.Input<string>[]>;One or more specific IPv6 addresses from the IPv6 CIDR block range of your subnet. Conflicts with ipv6AddressCount
property networkInterfaceId
networkInterfaceId?: pulumi.Input<string>;The ID of the network interface to attach.
property privateIpAddress
privateIpAddress?: pulumi.Input<string>;The primary private IPv4 address.
property securityGroups
securityGroups?: pulumi.Input<pulumi.Input<string>[]>;A list of security group IDs to associate.
property subnetId
subnetId?: pulumi.Input<string>;The VPC Subnet ID to associate.
interface LaunchTemplatePlacement
interface LaunchTemplatePlacementproperty affinity
affinity?: pulumi.Input<string>;The affinity setting for an instance on a Dedicated Host.
property availabilityZone
availabilityZone?: pulumi.Input<string>;The Availability Zone for the instance.
property groupName
groupName?: pulumi.Input<string>;The name of the placement group for the instance.
property hostId
hostId?: pulumi.Input<string>;The ID of the Dedicated Host for the instance.
property partitionNumber
partitionNumber?: pulumi.Input<number>;The number of the partition the instance should launch in. Valid only if the placement group strategy is set to partition.
property spreadDomain
spreadDomain?: pulumi.Input<string>;Reserved for future use.
property tenancy
tenancy?: pulumi.Input<string>;The tenancy of the instance (if the instance is running in a VPC). Can be default, dedicated, or host.
interface LaunchTemplateTagSpecification
interface LaunchTemplateTagSpecificationproperty resourceType
resourceType?: pulumi.Input<string>;The type of resource to tag. Valid values are instance and volume.
property tags
tags?: pulumi.Input<{[key: string]: any}>;A map of tags to assign to the resource.
interface NetworkAclEgress
interface NetworkAclEgressproperty action
action: pulumi.Input<string>;The action to take.
property cidrBlock
cidrBlock?: pulumi.Input<string>;The CIDR block to match. This must be a valid network mask.
property fromPort
fromPort: pulumi.Input<number>;The from port to match.
property icmpCode
icmpCode?: pulumi.Input<number>;The ICMP type code to be used. Default 0.
property icmpType
icmpType?: pulumi.Input<number>;The ICMP type to be used. Default 0.
property ipv6CidrBlock
ipv6CidrBlock?: pulumi.Input<string>;The IPv6 CIDR block.
property protocol
protocol: pulumi.Input<string>;The protocol to match. If using the -1 ‘all’ protocol, you must specify a from and to port of 0.
property ruleNo
ruleNo: pulumi.Input<number>;The rule number. Used for ordering.
property toPort
toPort: pulumi.Input<number>;The to port to match.
interface NetworkAclIngress
interface NetworkAclIngressproperty action
action: pulumi.Input<string>;The action to take.
property cidrBlock
cidrBlock?: pulumi.Input<string>;The CIDR block to match. This must be a valid network mask.
property fromPort
fromPort: pulumi.Input<number>;The from port to match.
property icmpCode
icmpCode?: pulumi.Input<number>;The ICMP type code to be used. Default 0.
property icmpType
icmpType?: pulumi.Input<number>;The ICMP type to be used. Default 0.
property ipv6CidrBlock
ipv6CidrBlock?: pulumi.Input<string>;The IPv6 CIDR block.
property protocol
protocol: pulumi.Input<string>;The protocol to match. If using the -1 ‘all’ protocol, you must specify a from and to port of 0.
property ruleNo
ruleNo: pulumi.Input<number>;The rule number. Used for ordering.
property toPort
toPort: pulumi.Input<number>;The to port to match.
interface NetworkInterfaceAttachment
interface NetworkInterfaceAttachmentproperty attachmentId
attachmentId?: pulumi.Input<string>;property deviceIndex
deviceIndex: pulumi.Input<number>;Integer to define the devices index.
property instance
instance: pulumi.Input<string>;ID of the instance to attach to.
interface PeeringConnectionOptionsAccepter
interface PeeringConnectionOptionsAccepterproperty allowClassicLinkToRemoteVpc
allowClassicLinkToRemoteVpc?: pulumi.Input<boolean>;Allow a local linked EC2-Classic instance to communicate with instances in a peer VPC. This enables an outbound communication from the local ClassicLink connection to the remote VPC. This option is not supported for inter-region VPC peering.
property allowRemoteVpcDnsResolution
allowRemoteVpcDnsResolution?: pulumi.Input<boolean>;Allow a local VPC to resolve public DNS hostnames to private IP addresses when queried from instances in the peer VPC.
property allowVpcToRemoteClassicLink
allowVpcToRemoteClassicLink?: pulumi.Input<boolean>;Allow a local VPC to communicate with a linked EC2-Classic instance in a peer VPC. This enables an outbound communication from the local VPC to the remote ClassicLink connection. This option is not supported for inter-region VPC peering.
interface PeeringConnectionOptionsRequester
interface PeeringConnectionOptionsRequesterproperty allowClassicLinkToRemoteVpc
allowClassicLinkToRemoteVpc?: pulumi.Input<boolean>;Allow a local linked EC2-Classic instance to communicate with instances in a peer VPC. This enables an outbound communication from the local ClassicLink connection to the remote VPC. This option is not supported for inter-region VPC peering.
property allowRemoteVpcDnsResolution
allowRemoteVpcDnsResolution?: pulumi.Input<boolean>;Allow a local VPC to resolve public DNS hostnames to private IP addresses when queried from instances in the peer VPC.
property allowVpcToRemoteClassicLink
allowVpcToRemoteClassicLink?: pulumi.Input<boolean>;Allow a local VPC to communicate with a linked EC2-Classic instance in a peer VPC. This enables an outbound communication from the local VPC to the remote ClassicLink connection. This option is not supported for inter-region VPC peering.
interface RouteTableRoute
interface RouteTableRouteproperty cidrBlock
cidrBlock?: pulumi.Input<string>;The CIDR block of the route.
property egressOnlyGatewayId
egressOnlyGatewayId?: pulumi.Input<string>;Identifier of a VPC Egress Only Internet Gateway.
property gatewayId
gatewayId?: pulumi.Input<string>;Identifier of a VPC internet gateway or a virtual private gateway.
property instanceId
instanceId?: pulumi.Input<string>;Identifier of an EC2 instance.
property ipv6CidrBlock
ipv6CidrBlock?: pulumi.Input<string>;The Ipv6 CIDR block of the route.
property natGatewayId
natGatewayId?: pulumi.Input<string>;Identifier of a VPC NAT gateway.
property networkInterfaceId
networkInterfaceId?: pulumi.Input<string>;Identifier of an EC2 network interface.
property transitGatewayId
transitGatewayId?: pulumi.Input<string>;Identifier of an EC2 Transit Gateway.
property vpcPeeringConnectionId
vpcPeeringConnectionId?: pulumi.Input<string>;Identifier of a VPC peering connection.
interface SecurityGroupEgress
interface SecurityGroupEgressproperty cidrBlocks
cidrBlocks?: pulumi.Input<pulumi.Input<string>[]>;List of CIDR blocks.
property description
description?: pulumi.Input<string>;Description of this egress rule.
property fromPort
fromPort: pulumi.Input<number>;The start port (or ICMP type number if protocol is “icmp”)
property ipv6CidrBlocks
ipv6CidrBlocks?: pulumi.Input<pulumi.Input<string>[]>;List of IPv6 CIDR blocks.
property prefixListIds
prefixListIds?: pulumi.Input<pulumi.Input<string>[]>;List of prefix list IDs (for allowing access to VPC endpoints)
property protocol
protocol: pulumi.Input<string>;The protocol. If you select a protocol of
“-1” (semantically equivalent to "all", which is not a valid value here), you must specify a “fromPort” and “toPort” equal to 0. If not icmp, tcp, udp, or “-1” use the protocol number
property securityGroups
securityGroups?: pulumi.Input<pulumi.Input<string>[]>;List of security group Group Names if using EC2-Classic, or Group IDs if using a VPC.
property self
self?: pulumi.Input<boolean>;If true, the security group itself will be added as a source to this egress rule.
property toPort
toPort: pulumi.Input<number>;The end range port (or ICMP code if protocol is “icmp”).
interface SecurityGroupIngress
interface SecurityGroupIngressproperty cidrBlocks
cidrBlocks?: pulumi.Input<pulumi.Input<string>[]>;List of CIDR blocks.
property description
description?: pulumi.Input<string>;Description of this egress rule.
property fromPort
fromPort: pulumi.Input<number>;The start port (or ICMP type number if protocol is “icmp”)
property ipv6CidrBlocks
ipv6CidrBlocks?: pulumi.Input<pulumi.Input<string>[]>;List of IPv6 CIDR blocks.
property prefixListIds
prefixListIds?: pulumi.Input<pulumi.Input<string>[]>;List of prefix list IDs (for allowing access to VPC endpoints)
property protocol
protocol: pulumi.Input<string>;The protocol. If you select a protocol of
“-1” (semantically equivalent to "all", which is not a valid value here), you must specify a “fromPort” and “toPort” equal to 0. If not icmp, tcp, udp, or “-1” use the protocol number
property securityGroups
securityGroups?: pulumi.Input<pulumi.Input<string>[]>;List of security group Group Names if using EC2-Classic, or Group IDs if using a VPC.
property self
self?: pulumi.Input<boolean>;If true, the security group itself will be added as a source to this egress rule.
property toPort
toPort: pulumi.Input<number>;The end range port (or ICMP code if protocol is “icmp”).
interface SpotFleetRequestLaunchSpecification
interface SpotFleetRequestLaunchSpecificationproperty ami
ami: pulumi.Input<string>;property associatePublicIpAddress
associatePublicIpAddress?: pulumi.Input<boolean>;property availabilityZone
availabilityZone?: pulumi.Input<string>;The availability zone in which to place the request.
property ebsBlockDevices
ebsBlockDevices?: pulumi.Input<pulumi.Input<SpotFleetRequestLaunchSpecificationEbsBlockDevice>[]>;property ebsOptimized
ebsOptimized?: pulumi.Input<boolean>;property ephemeralBlockDevices
ephemeralBlockDevices?: pulumi.Input<pulumi.Input<SpotFleetRequestLaunchSpecificationEphemeralBlockDevice>[]>;property iamInstanceProfile
iamInstanceProfile?: pulumi.Input<string>;property iamInstanceProfileArn
iamInstanceProfileArn?: pulumi.Input<string>;property instanceType
instanceType: pulumi.Input<string>;The type of instance to request.
property keyName
keyName?: pulumi.Input<string>;property monitoring
monitoring?: pulumi.Input<boolean>;property placementGroup
placementGroup?: pulumi.Input<string>;property placementTenancy
placementTenancy?: pulumi.Input<string>;property rootBlockDevices
rootBlockDevices?: pulumi.Input<pulumi.Input<SpotFleetRequestLaunchSpecificationRootBlockDevice>[]>;property spotPrice
spotPrice?: pulumi.Input<string>;The maximum spot bid for this override request.
property subnetId
subnetId?: pulumi.Input<string>;The subnet in which to launch the requested instance.
property tags
tags?: pulumi.Input<{[key: string]: any}>;A map of tags to assign to the resource.
property userData
userData?: pulumi.Input<string>;property vpcSecurityGroupIds
vpcSecurityGroupIds?: pulumi.Input<pulumi.Input<string>[]>;property weightedCapacity
weightedCapacity?: pulumi.Input<string>;The capacity added to the fleet by a fulfilled request.
interface SpotFleetRequestLaunchSpecificationEbsBlockDevice
interface SpotFleetRequestLaunchSpecificationEbsBlockDeviceproperty deleteOnTermination
deleteOnTermination?: pulumi.Input<boolean>;property deviceName
deviceName: pulumi.Input<string>;property encrypted
encrypted?: pulumi.Input<boolean>;property iops
iops?: pulumi.Input<number>;property kmsKeyId
kmsKeyId?: pulumi.Input<string>;property snapshotId
snapshotId?: pulumi.Input<string>;property volumeSize
volumeSize?: pulumi.Input<number>;property volumeType
volumeType?: pulumi.Input<string>;interface SpotFleetRequestLaunchSpecificationEphemeralBlockDevice
interface SpotFleetRequestLaunchSpecificationEphemeralBlockDeviceproperty deviceName
deviceName: pulumi.Input<string>;property virtualName
virtualName: pulumi.Input<string>;interface SpotFleetRequestLaunchSpecificationRootBlockDevice
interface SpotFleetRequestLaunchSpecificationRootBlockDeviceproperty deleteOnTermination
deleteOnTermination?: pulumi.Input<boolean>;property encrypted
encrypted?: pulumi.Input<boolean>;property iops
iops?: pulumi.Input<number>;property kmsKeyId
kmsKeyId?: pulumi.Input<string>;property volumeSize
volumeSize?: pulumi.Input<number>;property volumeType
volumeType?: pulumi.Input<string>;interface SpotFleetRequestLaunchTemplateConfig
interface SpotFleetRequestLaunchTemplateConfigproperty launchTemplateSpecification
launchTemplateSpecification: pulumi.Input<SpotFleetRequestLaunchTemplateConfigLaunchTemplateSpecification>;Launch template specification. See Launch Template Specification below for more details.
property overrides
overrides?: pulumi.Input<pulumi.Input<SpotFleetRequestLaunchTemplateConfigOverride>[]>;One or more override configurations. See Overrides below for more details.
interface SpotFleetRequestLaunchTemplateConfigLaunchTemplateSpecification
interface SpotFleetRequestLaunchTemplateConfigLaunchTemplateSpecificationproperty id
id?: pulumi.Input<string>;The ID of the launch template. Conflicts with name.
property name
name?: pulumi.Input<string>;The name of the launch template. Conflicts with id.
property version
version?: pulumi.Input<string>;Template version. Unlike the autoscaling equivalent, does not support $Latest or $Default, so use the launchTemplate resource’s attribute, e.g. "${aws_launch_template.foo.latest_version}". It will use the default version if omitted.
interface SpotFleetRequestLaunchTemplateConfigOverride
interface SpotFleetRequestLaunchTemplateConfigOverrideproperty availabilityZone
availabilityZone?: pulumi.Input<string>;The availability zone in which to place the request.
property instanceType
instanceType?: pulumi.Input<string>;The type of instance to request.
property priority
priority?: pulumi.Input<number>;The priority for the launch template override. The lower the number, the higher the priority. If no number is set, the launch template override has the lowest priority.
property spotPrice
spotPrice?: pulumi.Input<string>;The maximum spot bid for this override request.
property subnetId
subnetId?: pulumi.Input<string>;The subnet in which to launch the requested instance.
property weightedCapacity
weightedCapacity?: pulumi.Input<number>;The capacity added to the fleet by a fulfilled request.
interface SpotInstanceRequestCreditSpecification
interface SpotInstanceRequestCreditSpecificationproperty cpuCredits
cpuCredits?: pulumi.Input<string>;The credit option for CPU usage. Can be "standard" or "unlimited". T3 instances are launched as unlimited by default. T2 instances are launched as standard by default.
interface SpotInstanceRequestEbsBlockDevice
interface SpotInstanceRequestEbsBlockDeviceproperty deleteOnTermination
deleteOnTermination?: pulumi.Input<boolean>;Whether the volume should be destroyed
on instance termination (Default: true).
property deviceName
deviceName: pulumi.Input<string>;The name of the device to mount.
property encrypted
encrypted?: pulumi.Input<boolean>;Enables EBS
encryption
on the volume (Default: false). Cannot be used with snapshotId. Must be configured to perform drift detection.
property iops
iops?: pulumi.Input<number>;The amount of provisioned
IOPS.
This must be set with a volumeType of "io1".
property kmsKeyId
kmsKeyId?: pulumi.Input<string>;Amazon Resource Name (ARN) of the KMS Key to use when encrypting the volume. Must be configured to perform drift detection.
property snapshotId
snapshotId?: pulumi.Input<string>;The Snapshot ID to mount.
property volumeId
volumeId?: pulumi.Input<string>;property volumeSize
volumeSize?: pulumi.Input<number>;The size of the volume in gibibytes (GiB).
property volumeType
volumeType?: pulumi.Input<string>;The type of volume. Can be "standard", "gp2",
or "io1". (Default: "gp2").
interface SpotInstanceRequestEphemeralBlockDevice
interface SpotInstanceRequestEphemeralBlockDeviceproperty deviceName
deviceName: pulumi.Input<string>;The name of the block device to mount on the instance.
property noDevice
noDevice?: pulumi.Input<boolean>;Suppresses the specified device included in the AMI’s block device mapping.
property virtualName
virtualName?: pulumi.Input<string>;The Instance Store Device
Name
(e.g. "ephemeral0").
interface SpotInstanceRequestMetadataOptions
interface SpotInstanceRequestMetadataOptionsproperty httpEndpoint
httpEndpoint?: pulumi.Input<string>;Whether the metadata service is available. Can be "enabled" or "disabled". (Default: "enabled").
property httpPutResponseHopLimit
httpPutResponseHopLimit?: pulumi.Input<number>;The desired HTTP PUT response hop limit for instance metadata requests. The larger the number, the further instance metadata requests can travel. Can be an integer from 1 to 64. (Default: 1).
property httpTokens
httpTokens?: pulumi.Input<string>;Whether or not the metadata service requires session tokens, also referred to as Instance Metadata Service Version 2. Can be "optional" or "required". (Default: "optional").
interface SpotInstanceRequestNetworkInterface
interface SpotInstanceRequestNetworkInterfaceproperty deleteOnTermination
deleteOnTermination?: pulumi.Input<boolean>;Whether or not to delete the network interface on instance termination. Defaults to false. Currently, the only valid value is false, as this is only supported when creating new network interfaces when launching an instance.
property deviceIndex
deviceIndex: pulumi.Input<number>;The integer index of the network interface attachment. Limited by instance type.
property networkInterfaceId
networkInterfaceId: pulumi.Input<string>;The ID of the network interface to attach.
interface SpotInstanceRequestRootBlockDevice
interface SpotInstanceRequestRootBlockDeviceproperty deleteOnTermination
deleteOnTermination?: pulumi.Input<boolean>;Whether the volume should be destroyed
on instance termination (Default: true).
property deviceName
deviceName?: pulumi.Input<string>;The name of the device to mount.
property encrypted
encrypted?: pulumi.Input<boolean>;Enable volume encryption. (Default: false). Must be configured to perform drift detection.
property iops
iops?: pulumi.Input<number>;The amount of provisioned
IOPS.
This is only valid for volumeType of "io1", and must be specified if
using that type
property kmsKeyId
kmsKeyId?: pulumi.Input<string>;Amazon Resource Name (ARN) of the KMS Key to use when encrypting the volume. Must be configured to perform drift detection.
property volumeId
volumeId?: pulumi.Input<string>;property volumeSize
volumeSize?: pulumi.Input<number>;The size of the volume in gibibytes (GiB).
property volumeType
volumeType?: pulumi.Input<string>;The type of volume. Can be "standard", "gp2", "io1", "sc1", or "st1". (Default: "standard").
interface TrafficMirrorFilterRuleDestinationPortRange
interface TrafficMirrorFilterRuleDestinationPortRangeproperty fromPort
fromPort?: pulumi.Input<number>;Starting port of the range
property toPort
toPort?: pulumi.Input<number>;Ending port of the range
interface TrafficMirrorFilterRuleSourcePortRange
interface TrafficMirrorFilterRuleSourcePortRangeproperty fromPort
fromPort?: pulumi.Input<number>;Starting port of the range
property toPort
toPort?: pulumi.Input<number>;Ending port of the range
interface VpcEndpointDnsEntry
interface VpcEndpointDnsEntryproperty dnsName
dnsName?: pulumi.Input<string>;The DNS name.
property hostedZoneId
hostedZoneId?: pulumi.Input<string>;The ID of the private hosted zone.
interface VpcPeeringConnectionAccepter
interface VpcPeeringConnectionAccepterproperty allowClassicLinkToRemoteVpc
allowClassicLinkToRemoteVpc?: pulumi.Input<boolean>;Allow a local linked EC2-Classic instance to communicate with instances in a peer VPC. This enables an outbound communication from the local ClassicLink connection to the remote VPC.
property allowRemoteVpcDnsResolution
allowRemoteVpcDnsResolution?: pulumi.Input<boolean>;Allow a local VPC to resolve public DNS hostnames to private IP addresses when queried from instances in the peer VPC. This is not supported for inter-region VPC peering.
property allowVpcToRemoteClassicLink
allowVpcToRemoteClassicLink?: pulumi.Input<boolean>;Allow a local VPC to communicate with a linked EC2-Classic instance in a peer VPC. This enables an outbound communication from the local VPC to the remote ClassicLink connection.
interface VpcPeeringConnectionAccepterAccepter
interface VpcPeeringConnectionAccepterAccepterproperty allowClassicLinkToRemoteVpc
allowClassicLinkToRemoteVpc?: pulumi.Input<boolean>;Indicates whether a local ClassicLink connection can communicate with the peer VPC over the VPC Peering Connection.
property allowRemoteVpcDnsResolution
allowRemoteVpcDnsResolution?: pulumi.Input<boolean>;Indicates whether a local VPC can resolve public DNS hostnames to private IP addresses when queried from instances in a peer VPC.
property allowVpcToRemoteClassicLink
allowVpcToRemoteClassicLink?: pulumi.Input<boolean>;Indicates whether a local VPC can communicate with a ClassicLink connection in the peer VPC over the VPC Peering Connection.
interface VpcPeeringConnectionAccepterRequester
interface VpcPeeringConnectionAccepterRequesterproperty allowClassicLinkToRemoteVpc
allowClassicLinkToRemoteVpc?: pulumi.Input<boolean>;Indicates whether a local ClassicLink connection can communicate with the peer VPC over the VPC Peering Connection.
property allowRemoteVpcDnsResolution
allowRemoteVpcDnsResolution?: pulumi.Input<boolean>;Indicates whether a local VPC can resolve public DNS hostnames to private IP addresses when queried from instances in a peer VPC.
property allowVpcToRemoteClassicLink
allowVpcToRemoteClassicLink?: pulumi.Input<boolean>;Indicates whether a local VPC can communicate with a ClassicLink connection in the peer VPC over the VPC Peering Connection.
interface VpcPeeringConnectionRequester
interface VpcPeeringConnectionRequesterproperty allowClassicLinkToRemoteVpc
allowClassicLinkToRemoteVpc?: pulumi.Input<boolean>;Allow a local linked EC2-Classic instance to communicate with instances in a peer VPC. This enables an outbound communication from the local ClassicLink connection to the remote VPC.
property allowRemoteVpcDnsResolution
allowRemoteVpcDnsResolution?: pulumi.Input<boolean>;Allow a local VPC to resolve public DNS hostnames to private IP addresses when queried from instances in the peer VPC. This is not supported for inter-region VPC peering.
property allowVpcToRemoteClassicLink
allowVpcToRemoteClassicLink?: pulumi.Input<boolean>;Allow a local VPC to communicate with a linked EC2-Classic instance in a peer VPC. This enables an outbound communication from the local VPC to the remote ClassicLink connection.
interface VpnConnectionRoute
interface VpnConnectionRouteproperty destinationCidrBlock
destinationCidrBlock?: pulumi.Input<string>;property source
source?: pulumi.Input<string>;property state
state?: pulumi.Input<string>;interface VpnConnectionVgwTelemetry
interface VpnConnectionVgwTelemetryproperty acceptedRouteCount
acceptedRouteCount?: pulumi.Input<number>;property lastStatusChange
lastStatusChange?: pulumi.Input<string>;property outsideIpAddress
outsideIpAddress?: pulumi.Input<string>;property status
status?: pulumi.Input<string>;property statusMessage
statusMessage?: pulumi.Input<string>;namespace ec2clientvpn
interface EndpointAuthenticationOption
interface EndpointAuthenticationOptionproperty activeDirectoryId
activeDirectoryId?: pulumi.Input<string>;The ID of the Active Directory to be used for authentication if type is directory-service-authentication.
property rootCertificateChainArn
rootCertificateChainArn?: pulumi.Input<string>;The ARN of the client certificate. The certificate must be signed by a certificate authority (CA) and it must be provisioned in AWS Certificate Manager (ACM). Only necessary when type is set to certificate-authentication.
property type
type: pulumi.Input<string>;The type of client authentication to be used. Specify certificate-authentication to use certificate-based authentication, or directory-service-authentication to use Active Directory authentication.
interface EndpointConnectionLogOptions
interface EndpointConnectionLogOptionsproperty cloudwatchLogGroup
cloudwatchLogGroup?: pulumi.Input<string>;The name of the CloudWatch Logs log group.
property cloudwatchLogStream
cloudwatchLogStream?: pulumi.Input<string>;The name of the CloudWatch Logs log stream to which the connection data is published.
property enabled
enabled: pulumi.Input<boolean>;Indicates whether connection logging is enabled.
namespace ec2transitgateway
interface GetDirectConnectGatewayAttachmentFilter
interface GetDirectConnectGatewayAttachmentFilterproperty name
name: string;The name of the filter field. Valid values can be found in the EC2 DescribeTransitGatewayAttachments API Reference.
property values
values: string[];Set of values that are accepted for the given filter field. Results will be selected if any given value matches.
interface GetPeeringAttachmentFilter
interface GetPeeringAttachmentFilterproperty name
name: string;The name of the field to filter by, as defined by the underlying AWS API.
property values
values: string[];Set of values that are accepted for the given field. An EC2 Transit Gateway Peering Attachment be selected if any one of the given values matches.
interface GetRouteTableFilter
interface GetRouteTableFilterproperty name
name: string;Name of the filter.
property values
values: string[];List of one or more values for the filter.
interface GetTransitGatewayFilter
interface GetTransitGatewayFilterproperty name
name: string;Name of the filter.
property values
values: string[];List of one or more values for the filter.
interface GetVpcAttachmentFilter
interface GetVpcAttachmentFilterproperty name
name: string;Name of the filter.
property values
values: string[];List of one or more values for the filter.
interface GetVpnAttachmentFilter
interface GetVpnAttachmentFilterproperty name
name: string;The name of the filter field. Valid values can be found in the EC2 DescribeTransitGatewayAttachments API Reference.
property values
values: string[];Set of values that are accepted for the given filter field. Results will be selected if any given value matches.
namespace ecr
interface RepositoryImageScanningConfiguration
interface RepositoryImageScanningConfigurationproperty scanOnPush
scanOnPush: pulumi.Input<boolean>;Indicates whether images are scanned after being pushed to the repository (true) or not scanned (false).
namespace ecs
interface CapacityProviderAutoScalingGroupProvider
interface CapacityProviderAutoScalingGroupProviderproperty autoScalingGroupArn
autoScalingGroupArn: pulumi.Input<string>;- The Amazon Resource Name (ARN) of the associated auto scaling group.
property managedScaling
managedScaling?: pulumi.Input<CapacityProviderAutoScalingGroupProviderManagedScaling>;- Nested argument defining the parameters of the auto scaling. Defined below.
property managedTerminationProtection
managedTerminationProtection?: pulumi.Input<string>;- Enables or disables container-aware termination of instances in the auto scaling group when scale-in happens. Valid values are
ENABLEDandDISABLED.
interface CapacityProviderAutoScalingGroupProviderManagedScaling
interface CapacityProviderAutoScalingGroupProviderManagedScalingproperty maximumScalingStepSize
maximumScalingStepSize?: pulumi.Input<number>;The maximum step adjustment size. A number between 1 and 10,000.
property minimumScalingStepSize
minimumScalingStepSize?: pulumi.Input<number>;The minimum step adjustment size. A number between 1 and 10,000.
property status
status?: pulumi.Input<string>;Whether auto scaling is managed by ECS. Valid values are ENABLED and DISABLED.
property targetCapacity
targetCapacity?: pulumi.Input<number>;The target utilization for the capacity provider. A number between 1 and 100.
interface ClusterDefaultCapacityProviderStrategy
interface ClusterDefaultCapacityProviderStrategyproperty base
base?: pulumi.Input<number>;The number of tasks, at a minimum, to run on the specified capacity provider. Only one capacity provider in a capacity provider strategy can have a base defined.
property capacityProvider
capacityProvider: pulumi.Input<string>;The short name of the capacity provider.
property weight
weight?: pulumi.Input<number>;The relative percentage of the total number of launched tasks that should use the specified capacity provider.
interface ClusterSetting
interface ClusterSettingproperty name
name: pulumi.Input<string>;Name of the setting to manage. Valid values: containerInsights.
property value
value: pulumi.Input<string>;The value to assign to the setting. Value values are enabled and disabled.
interface ServiceCapacityProviderStrategy
interface ServiceCapacityProviderStrategyproperty base
base?: pulumi.Input<number>;The number of tasks, at a minimum, to run on the specified capacity provider. Only one capacity provider in a capacity provider strategy can have a base defined.
property capacityProvider
capacityProvider: pulumi.Input<string>;The short name of the capacity provider.
property weight
weight?: pulumi.Input<number>;The relative percentage of the total number of launched tasks that should use the specified capacity provider.
interface ServiceDeploymentController
interface ServiceDeploymentControllerproperty type
type?: pulumi.Input<string>;Type of deployment controller. Valid values: CODE_DEPLOY, ECS. Default: ECS.
interface ServiceLoadBalancer
interface ServiceLoadBalancerproperty containerName
containerName: pulumi.Input<string>;The name of the container to associate with the load balancer (as it appears in a container definition).
property containerPort
containerPort: pulumi.Input<number>;The port on the container to associate with the load balancer.
property elbName
elbName?: pulumi.Input<string>;The name of the ELB (Classic) to associate with the service.
property targetGroupArn
targetGroupArn?: pulumi.Input<string>;The ARN of the Load Balancer target group to associate with the service.
interface ServiceNetworkConfiguration
interface ServiceNetworkConfigurationproperty assignPublicIp
assignPublicIp?: pulumi.Input<boolean>;Assign a public IP address to the ENI (Fargate launch type only). Valid values are true or false. Default false.
property securityGroups
securityGroups?: pulumi.Input<pulumi.Input<string>[]>;The security groups associated with the task or service. If you do not specify a security group, the default security group for the VPC is used.
property subnets
subnets: pulumi.Input<pulumi.Input<string>[]>;The subnets associated with the task or service.
interface ServiceOrderedPlacementStrategy
interface ServiceOrderedPlacementStrategyproperty field
field?: pulumi.Input<string>;For the spread placement strategy, valid values are instanceId (or host,
which has the same effect), or any platform or custom attribute that is applied to a container instance.
For the binpack type, valid values are memory and cpu. For the random type, this attribute is not
needed. For more information, see Placement Strategy.
property type
type: pulumi.Input<string>;The type of placement strategy. Must be one of: binpack, random, or spread
interface ServicePlacementConstraint
interface ServicePlacementConstraintproperty expression
expression?: pulumi.Input<string>;Cluster Query Language expression to apply to the constraint. Does not need to be specified
for the distinctInstance type.
For more information, see Cluster Query Language in the Amazon EC2 Container
Service Developer
Guide.
property type
type: pulumi.Input<string>;The type of constraint. The only valid values at this time are memberOf and distinctInstance.
interface ServiceServiceRegistries
interface ServiceServiceRegistriesproperty containerName
containerName?: pulumi.Input<string>;The container name value, already specified in the task definition, to be used for your service discovery service.
property containerPort
containerPort?: pulumi.Input<number>;The port value, already specified in the task definition, to be used for your service discovery service.
property port
port?: pulumi.Input<number>;The port value used if your Service Discovery service specified an SRV record.
property registryArn
registryArn: pulumi.Input<string>;The ARN of the Service Registry. The currently supported service registry is Amazon Route 53 Auto Naming Service(aws.servicediscovery.Service). For more information, see Service
interface TaskDefinitionInferenceAccelerator
interface TaskDefinitionInferenceAcceleratorproperty deviceName
deviceName: pulumi.Input<string>;The Elastic Inference accelerator device name. The deviceName must also be referenced in a container definition as a ResourceRequirement.
property deviceType
deviceType: pulumi.Input<string>;The Elastic Inference accelerator type to use.
interface TaskDefinitionPlacementConstraint
interface TaskDefinitionPlacementConstraintproperty expression
expression?: pulumi.Input<string>;Cluster Query Language expression to apply to the constraint. For more information, see Cluster Query Language in the Amazon EC2 Container Service Developer Guide.
property type
type: pulumi.Input<string>;The proxy type. The default value is APPMESH. The only supported value is APPMESH.
interface TaskDefinitionProxyConfiguration
interface TaskDefinitionProxyConfigurationproperty containerName
containerName: pulumi.Input<string>;The name of the container that will serve as the App Mesh proxy.
property properties
properties?: pulumi.Input<{[key: string]: pulumi.Input<string>}>;The set of network configuration parameters to provide the Container Network Interface (CNI) plugin, specified a key-value mapping.
property type
type?: pulumi.Input<string>;The proxy type. The default value is APPMESH. The only supported value is APPMESH.
interface TaskDefinitionVolume
interface TaskDefinitionVolumeproperty dockerVolumeConfiguration
dockerVolumeConfiguration?: pulumi.Input<TaskDefinitionVolumeDockerVolumeConfiguration>;Used to configure a docker volume
property efsVolumeConfiguration
efsVolumeConfiguration?: pulumi.Input<TaskDefinitionVolumeEfsVolumeConfiguration>;Used to configure a EFS volume. Can be used only with an EC2 type task.
property hostPath
hostPath?: pulumi.Input<string>;The path on the host container instance that is presented to the container. If not set, ECS will create a nonpersistent data volume that starts empty and is deleted after the task has finished.
property name
name: pulumi.Input<string>;The name of the volume. This name is referenced in the sourceVolume
parameter of container definition in the mountPoints section.
interface TaskDefinitionVolumeDockerVolumeConfiguration
interface TaskDefinitionVolumeDockerVolumeConfigurationproperty autoprovision
autoprovision?: pulumi.Input<boolean>;If this value is true, the Docker volume is created if it does not already exist. Note: This field is only used if the scope is shared.
property driver
driver?: pulumi.Input<string>;The Docker volume driver to use. The driver value must match the driver name provided by Docker because it is used for task placement.
property driverOpts
driverOpts?: pulumi.Input<{[key: string]: pulumi.Input<string>}>;A map of Docker driver specific options.
property labels
labels?: pulumi.Input<{[key: string]: pulumi.Input<string>}>;A map of custom metadata to add to your Docker volume.
property scope
scope?: pulumi.Input<string>;The scope for the Docker volume, which determines its lifecycle, either task or shared. Docker volumes that are scoped to a task are automatically provisioned when the task starts and destroyed when the task stops. Docker volumes that are scoped as shared persist after the task stops.
interface TaskDefinitionVolumeEfsVolumeConfiguration
interface TaskDefinitionVolumeEfsVolumeConfigurationproperty fileSystemId
fileSystemId: pulumi.Input<string>;The ID of the EFS File System.
property rootDirectory
rootDirectory?: pulumi.Input<string>;The path to mount on the host
namespace efs
interface AccessPointPosixUser
interface AccessPointPosixUserproperty gid
gid: pulumi.Input<number>;The POSIX group ID used for all file system operations using this access point.
property secondaryGids
secondaryGids?: pulumi.Input<pulumi.Input<number>[]>;Secondary POSIX group IDs used for all file system operations using this access point.
property uid
uid: pulumi.Input<number>;he POSIX user ID used for all file system operations using this access point.
interface AccessPointRootDirectory
interface AccessPointRootDirectoryproperty creationInfo
creationInfo?: pulumi.Input<AccessPointRootDirectoryCreationInfo>;Specifies the POSIX IDs and permissions to apply to the access point’s Root Directory. See Creation Info below.
property path
path?: pulumi.Input<string>;Specifies the path on the EFS file system to expose as the root directory to NFS clients using the access point to access the EFS file system. A path can have up to four subdirectories. If the specified path does not exist, you are required to provide creationInfo.
interface AccessPointRootDirectoryCreationInfo
interface AccessPointRootDirectoryCreationInfoproperty ownerGid
ownerGid: pulumi.Input<number>;Specifies the POSIX group ID to apply to the rootDirectory.
property ownerUid
ownerUid: pulumi.Input<number>;Specifies the POSIX user ID to apply to the rootDirectory.
property permissions
permissions: pulumi.Input<string>;Specifies the POSIX permissions to apply to the RootDirectory, in the format of an octal number representing the file’s mode bits.
interface FileSystemLifecyclePolicy
interface FileSystemLifecyclePolicyproperty transitionToIa
transitionToIa: pulumi.Input<string>;Indicates how long it takes to transition files to the IA storage class. Valid values: AFTER_7_DAYS, AFTER_14_DAYS, AFTER_30_DAYS, AFTER_60_DAYS, or AFTER_90_DAYS.
namespace eks
interface ClusterCertificateAuthority
interface ClusterCertificateAuthorityproperty data
data?: pulumi.Input<string>;The base64 encoded certificate data required to communicate with your cluster. Add this to the certificate-authority-data section of the kubeconfig file for your cluster.
interface ClusterEncryptionConfig
interface ClusterEncryptionConfigproperty provider
provider: pulumi.Input<ClusterEncryptionConfigProvider>;Configuration block with provider for encryption. Detailed below.
property resources
resources: pulumi.Input<pulumi.Input<string>[]>;List of strings with resources to be encrypted. Valid values: secrets
interface ClusterEncryptionConfigProvider
interface ClusterEncryptionConfigProviderproperty keyArn
keyArn: pulumi.Input<string>;Amazon Resource Name (ARN) of the Key Management Service (KMS) customer master key (CMK). The CMK must be symmetric, created in the same region as the cluster, and if the CMK was created in a different account, the user must have access to the CMK. For more information, see Allowing Users in Other Accounts to Use a CMK in the AWS Key Management Service Developer Guide.
interface ClusterIdentity
interface ClusterIdentityproperty oidcs
oidcs?: pulumi.Input<pulumi.Input<ClusterIdentityOidc>[]>;Nested attribute containing OpenID Connect identity provider information for the cluster.
interface ClusterIdentityOidc
interface ClusterIdentityOidcproperty issuer
issuer?: pulumi.Input<string>;Issuer URL for the OpenID Connect identity provider.
interface ClusterVpcConfig
interface ClusterVpcConfigproperty clusterSecurityGroupId
clusterSecurityGroupId?: pulumi.Input<string>;The cluster security group that was created by Amazon EKS for the cluster.
property endpointPrivateAccess
endpointPrivateAccess?: pulumi.Input<boolean>;Indicates whether or not the Amazon EKS private API server endpoint is enabled. Default is false.
property endpointPublicAccess
endpointPublicAccess?: pulumi.Input<boolean>;Indicates whether or not the Amazon EKS public API server endpoint is enabled. Default is true.
property publicAccessCidrs
publicAccessCidrs?: pulumi.Input<pulumi.Input<string>[]>;List of CIDR blocks. Indicates which CIDR blocks can access the Amazon EKS public API server endpoint when enabled. EKS defaults this to a list with 0.0.0.0/0. This provider will only perform drift detection of its value when present in a configuration.
property securityGroupIds
securityGroupIds?: pulumi.Input<pulumi.Input<string>[]>;List of security group IDs for the cross-account elastic network interfaces that Amazon EKS creates to use to allow communication between your worker nodes and the Kubernetes control plane.
property subnetIds
subnetIds: pulumi.Input<pulumi.Input<string>[]>;List of subnet IDs. Must be in at least two different availability zones. Amazon EKS creates cross-account elastic network interfaces in these subnets to allow communication between your worker nodes and the Kubernetes control plane.
property vpcId
vpcId?: pulumi.Input<string>;The VPC associated with your cluster.
interface FargateProfileSelector
interface FargateProfileSelectorproperty labels
labels?: pulumi.Input<{[key: string]: pulumi.Input<string>}>;Key-value map of Kubernetes labels for selection.
property namespace
namespace: pulumi.Input<string>;Kubernetes namespace for selection.
interface NodeGroupRemoteAccess
interface NodeGroupRemoteAccessproperty ec2SshKey
ec2SshKey?: pulumi.Input<string>;EC2 Key Pair name that provides access for SSH communication with the worker nodes in the EKS Node Group. If you specify this configuration, but do not specify sourceSecurityGroupIds when you create an EKS Node Group, port 22 on the worker nodes is opened to the Internet (0.0.0.0/0).
property sourceSecurityGroupIds
sourceSecurityGroupIds?: pulumi.Input<pulumi.Input<string>[]>;Set of EC2 Security Group IDs to allow SSH access (port 22) from on the worker nodes. If you specify ec2SshKey, but do not specify this configuration when you create an EKS Node Group, port 22 on the worker nodes is opened to the Internet (0.0.0.0/0).
interface NodeGroupResource
interface NodeGroupResourceproperty autoscalingGroups
autoscalingGroups?: pulumi.Input<pulumi.Input<NodeGroupResourceAutoscalingGroup>[]>;List of objects containing information about AutoScaling Groups.
property remoteAccessSecurityGroupId
remoteAccessSecurityGroupId?: pulumi.Input<string>;Identifier of the remote access EC2 Security Group.
interface NodeGroupResourceAutoscalingGroup
interface NodeGroupResourceAutoscalingGroupproperty name
name?: pulumi.Input<string>;Name of the AutoScaling Group.
interface NodeGroupScalingConfig
interface NodeGroupScalingConfigproperty desiredSize
desiredSize: pulumi.Input<number>;Desired number of worker nodes.
property maxSize
maxSize: pulumi.Input<number>;Maximum number of worker nodes.
property minSize
minSize: pulumi.Input<number>;Minimum number of worker nodes.
namespace elasticache
interface ClusterCacheNode
interface ClusterCacheNodeproperty address
address?: pulumi.Input<string>;property availabilityZone
availabilityZone?: pulumi.Input<string>;The Availability Zone for the cache cluster. If you want to create cache nodes in multi-az, use preferredAvailabilityZones instead. Default: System chosen Availability Zone.
property id
id?: pulumi.Input<string>;property port
port?: pulumi.Input<number>;The port number on which each of the cache nodes will accept connections. For Memcache the default is 11211, and for Redis the default port is 6379. Cannot be provided with replicationGroupId.
interface ParameterGroupParameter
interface ParameterGroupParameterproperty name
name: pulumi.Input<string>;The name of the ElastiCache parameter.
property value
value: pulumi.Input<string>;The value of the ElastiCache parameter.
interface ReplicationGroupClusterMode
interface ReplicationGroupClusterModeproperty numNodeGroups
numNodeGroups: pulumi.Input<number>;Specify the number of node groups (shards) for this Redis replication group. Changing this number will trigger an online resizing operation before other settings modifications.
property replicasPerNodeGroup
replicasPerNodeGroup: pulumi.Input<number>;Specify the number of replica nodes in each node group. Valid values are 0 to 5. Changing this number will force a new resource.
namespace elasticbeanstalk
interface ApplicationAppversionLifecycle
interface ApplicationAppversionLifecycleproperty deleteSourceFromS3
deleteSourceFromS3?: pulumi.Input<boolean>;Set to true to delete a version’s source bundle from S3 when the application version is deleted.
property maxAgeInDays
maxAgeInDays?: pulumi.Input<number>;The number of days to retain an application version (‘max_age_in_days’ and ‘max_count’ cannot be enabled simultaneously.).
property maxCount
maxCount?: pulumi.Input<number>;The maximum number of application versions to retain (‘max_age_in_days’ and ‘max_count’ cannot be enabled simultaneously.).
property serviceRole
serviceRole: pulumi.Input<string>;The ARN of an IAM service role under which the application version is deleted. Elastic Beanstalk must have permission to assume this role.
interface ConfigurationTemplateSetting
interface ConfigurationTemplateSettingproperty name
name: pulumi.Input<string>;A unique name for this Template.
property namespace
namespace: pulumi.Input<string>;property resource
resource?: pulumi.Input<string>;property value
value: pulumi.Input<string>;interface EnvironmentAllSetting
interface EnvironmentAllSettingproperty name
name: pulumi.Input<string>;A unique name for this Environment. This name is used in the application URL
property namespace
namespace: pulumi.Input<string>;property resource
resource?: pulumi.Input<string>;property value
value: pulumi.Input<string>;interface EnvironmentSetting
interface EnvironmentSettingproperty name
name: pulumi.Input<string>;A unique name for this Environment. This name is used in the application URL
property namespace
namespace: pulumi.Input<string>;property resource
resource?: pulumi.Input<string>;property value
value: pulumi.Input<string>;namespace elasticloadbalancing
interface LoadBalancerAccessLogs
interface LoadBalancerAccessLogsproperty bucket
bucket: pulumi.Input<string>;The S3 bucket name to store the logs in.
property bucketPrefix
bucketPrefix?: pulumi.Input<string>;The S3 bucket prefix. Logs are stored in the root if not configured.
property enabled
enabled?: pulumi.Input<boolean>;Boolean to enable / disable accessLogs. Default is true
property interval
interval?: pulumi.Input<number>;The publishing interval in minutes. Default: 60 minutes.
interface LoadBalancerHealthCheck
interface LoadBalancerHealthCheckproperty healthyThreshold
healthyThreshold: pulumi.Input<number>;The number of checks before the instance is declared healthy.
property interval
interval: pulumi.Input<number>;The interval between checks.
property target
target: pulumi.Input<string>;The target of the check. Valid pattern is “${PROTOCOL}:${PORT}${PATH}“, where PROTOCOL
values are:
* HTTP, HTTPS - PORT and PATH are required
* TCP, SSL - PORT is required, PATH is not supported
property timeout
timeout: pulumi.Input<number>;The length of time before the check times out.
property unhealthyThreshold
unhealthyThreshold: pulumi.Input<number>;The number of checks before the instance is declared unhealthy.
interface LoadBalancerListener
interface LoadBalancerListenerproperty instancePort
instancePort: pulumi.Input<number>;The port on the instance to route to
property instanceProtocol
instanceProtocol: pulumi.Input<string>;The protocol to use to the instance. Valid
values are HTTP, HTTPS, TCP, or SSL
property lbPort
lbPort: pulumi.Input<number>;The port to listen on for the load balancer
property lbProtocol
lbProtocol: pulumi.Input<string>;The protocol to listen on. Valid values are HTTP,
HTTPS, TCP, or SSL
property sslCertificateId
sslCertificateId?: pulumi.Input<string>;The ARN of an SSL certificate you have
uploaded to AWS IAM. Note ECDSA-specific restrictions below. Only valid when lbProtocol is either HTTPS or SSL
interface LoadBalancerPolicyPolicyAttribute
interface LoadBalancerPolicyPolicyAttributeproperty name
name?: pulumi.Input<string>;property value
value?: pulumi.Input<string>;interface SslNegotiationPolicyAttribute
interface SslNegotiationPolicyAttributeproperty name
name: pulumi.Input<string>;The name of the attribute
property value
value: pulumi.Input<string>;The value of the attribute
namespace elasticloadbalancingv2
interface ListenerDefaultAction
interface ListenerDefaultActionproperty authenticateCognito
authenticateCognito?: pulumi.Input<ListenerDefaultActionAuthenticateCognito>;property authenticateOidc
authenticateOidc?: pulumi.Input<ListenerDefaultActionAuthenticateOidc>;property fixedResponse
fixedResponse?: pulumi.Input<ListenerDefaultActionFixedResponse>;Information for creating an action that returns a custom HTTP response. Required if type is fixed-response.
property forward
forward?: pulumi.Input<ListenerDefaultActionForward>;Information for creating an action that distributes requests among one or more target groups. Specify only if type is forward. If you specify both forward block and targetGroupArn attribute, you can specify only one target group using forward and it must be the same target group specified in targetGroupArn.
property order
order?: pulumi.Input<number>;property redirect
redirect?: pulumi.Input<ListenerDefaultActionRedirect>;Information for creating a redirect action. Required if type is redirect.
property targetGroupArn
targetGroupArn?: pulumi.Input<string>;The ARN of the Target Group to which to route traffic. Specify only if type is forward and you want to route to a single target group. To route to one or more target groups, use a forward block instead.
property type
type: pulumi.Input<string>;The type of routing action. Valid values are forward, redirect, fixed-response, authenticate-cognito and authenticate-oidc.
interface ListenerDefaultActionAuthenticateCognito
interface ListenerDefaultActionAuthenticateCognitoproperty authenticationRequestExtraParams
authenticationRequestExtraParams?: pulumi.Input<{[key: string]: any}>;The query parameters to include in the redirect request to the authorization endpoint. Max: 10.
property onUnauthenticatedRequest
onUnauthenticatedRequest?: pulumi.Input<string>;The behavior if the user is not authenticated. Valid values: deny, allow and authenticate
property scope
scope?: pulumi.Input<string>;The set of user claims to be requested from the IdP.
property sessionCookieName
sessionCookieName?: pulumi.Input<string>;The name of the cookie used to maintain session information.
property sessionTimeout
sessionTimeout?: pulumi.Input<number>;The maximum duration of the authentication session, in seconds.
property userPoolArn
userPoolArn: pulumi.Input<string>;The ARN of the Cognito user pool.
property userPoolClientId
userPoolClientId: pulumi.Input<string>;The ID of the Cognito user pool client.
property userPoolDomain
userPoolDomain: pulumi.Input<string>;The domain prefix or fully-qualified domain name of the Cognito user pool.
interface ListenerDefaultActionAuthenticateOidc
interface ListenerDefaultActionAuthenticateOidcproperty authenticationRequestExtraParams
authenticationRequestExtraParams?: pulumi.Input<{[key: string]: any}>;The query parameters to include in the redirect request to the authorization endpoint. Max: 10.
property authorizationEndpoint
authorizationEndpoint: pulumi.Input<string>;The authorization endpoint of the IdP.
property clientId
clientId: pulumi.Input<string>;The OAuth 2.0 client identifier.
property clientSecret
clientSecret: pulumi.Input<string>;The OAuth 2.0 client secret.
property issuer
issuer: pulumi.Input<string>;The OIDC issuer identifier of the IdP.
property onUnauthenticatedRequest
onUnauthenticatedRequest?: pulumi.Input<string>;The behavior if the user is not authenticated. Valid values: deny, allow and authenticate
property scope
scope?: pulumi.Input<string>;The set of user claims to be requested from the IdP.
property sessionCookieName
sessionCookieName?: pulumi.Input<string>;The name of the cookie used to maintain session information.
property sessionTimeout
sessionTimeout?: pulumi.Input<number>;The maximum duration of the authentication session, in seconds.
property tokenEndpoint
tokenEndpoint: pulumi.Input<string>;The token endpoint of the IdP.
property userInfoEndpoint
userInfoEndpoint: pulumi.Input<string>;The user info endpoint of the IdP.
interface ListenerDefaultActionFixedResponse
interface ListenerDefaultActionFixedResponseproperty contentType
contentType: pulumi.Input<string>;The content type. Valid values are text/plain, text/css, text/html, application/javascript and application/json.
property messageBody
messageBody?: pulumi.Input<string>;The message body.
property statusCode
statusCode?: pulumi.Input<string>;The HTTP response code. Valid values are 2XX, 4XX, or 5XX.
interface ListenerDefaultActionForward
interface ListenerDefaultActionForwardproperty stickiness
stickiness?: pulumi.Input<ListenerDefaultActionForwardStickiness>;The target group stickiness for the rule.
property targetGroups
targetGroups: pulumi.Input<pulumi.Input<ListenerDefaultActionForwardTargetGroup>[]>;One or more target groups block.
interface ListenerDefaultActionForwardStickiness
interface ListenerDefaultActionForwardStickinessproperty duration
duration: pulumi.Input<number>;The time period, in seconds, during which requests from a client should be routed to the same target group. The range is 1-604800 seconds (7 days).
property enabled
enabled?: pulumi.Input<boolean>;Indicates whether target group stickiness is enabled.
interface ListenerDefaultActionForwardTargetGroup
interface ListenerDefaultActionForwardTargetGroupproperty arn
arn: pulumi.Input<string>;The Amazon Resource Name (ARN) of the target group.
property weight
weight?: pulumi.Input<number>;The weight. The range is 0 to 999.
interface ListenerDefaultActionRedirect
interface ListenerDefaultActionRedirectproperty host
host?: pulumi.Input<string>;The hostname. This component is not percent-encoded. The hostname can contain #{host}. Defaults to #{host}.
property path
path?: pulumi.Input<string>;The absolute path, starting with the leading “/”. This component is not percent-encoded. The path can contain #{host}, #{path}, and #{port}. Defaults to /#{path}.
property port
port?: pulumi.Input<string>;The port. Specify a value from 1 to 65535 or #{port}. Defaults to #{port}.
property protocol
protocol?: pulumi.Input<string>;The protocol. Valid values are HTTP, HTTPS, or #{protocol}. Defaults to #{protocol}.
property query
query?: pulumi.Input<string>;The query parameters, URL-encoded when necessary, but not percent-encoded. Do not include the leading “?”. Defaults to #{query}.
property statusCode
statusCode: pulumi.Input<string>;The HTTP redirect code. The redirect is either permanent (HTTP_301) or temporary (HTTP_302).
interface ListenerRuleAction
interface ListenerRuleActionproperty authenticateCognito
authenticateCognito?: pulumi.Input<ListenerRuleActionAuthenticateCognito>;Information for creating an authenticate action using Cognito. Required if type is authenticate-cognito.
property authenticateOidc
authenticateOidc?: pulumi.Input<ListenerRuleActionAuthenticateOidc>;Information for creating an authenticate action using OIDC. Required if type is authenticate-oidc.
property fixedResponse
fixedResponse?: pulumi.Input<ListenerRuleActionFixedResponse>;Information for creating an action that returns a custom HTTP response. Required if type is fixed-response.
property forward
forward?: pulumi.Input<ListenerRuleActionForward>;Information for creating an action that distributes requests among one or more target groups. Specify only if type is forward. If you specify both forward block and targetGroupArn attribute, you can specify only one target group using forward and it must be the same target group specified in targetGroupArn.
property order
order?: pulumi.Input<number>;property redirect
redirect?: pulumi.Input<ListenerRuleActionRedirect>;Information for creating a redirect action. Required if type is redirect.
property targetGroupArn
targetGroupArn?: pulumi.Input<string>;The ARN of the Target Group to which to route traffic. Specify only if type is forward and you want to route to a single target group. To route to one or more target groups, use a forward block instead.
property type
type: pulumi.Input<string>;The type of routing action. Valid values are forward, redirect, fixed-response, authenticate-cognito and authenticate-oidc.
interface ListenerRuleActionAuthenticateCognito
interface ListenerRuleActionAuthenticateCognitoproperty authenticationRequestExtraParams
authenticationRequestExtraParams?: pulumi.Input<{[key: string]: any}>;The query parameters to include in the redirect request to the authorization endpoint. Max: 10.
property onUnauthenticatedRequest
onUnauthenticatedRequest?: pulumi.Input<string>;The behavior if the user is not authenticated. Valid values: deny, allow and authenticate
property scope
scope?: pulumi.Input<string>;The set of user claims to be requested from the IdP.
property sessionCookieName
sessionCookieName?: pulumi.Input<string>;The name of the cookie used to maintain session information.
property sessionTimeout
sessionTimeout?: pulumi.Input<number>;The maximum duration of the authentication session, in seconds.
property userPoolArn
userPoolArn: pulumi.Input<string>;The ARN of the Cognito user pool.
property userPoolClientId
userPoolClientId: pulumi.Input<string>;The ID of the Cognito user pool client.
property userPoolDomain
userPoolDomain: pulumi.Input<string>;The domain prefix or fully-qualified domain name of the Cognito user pool.
interface ListenerRuleActionAuthenticateOidc
interface ListenerRuleActionAuthenticateOidcproperty authenticationRequestExtraParams
authenticationRequestExtraParams?: pulumi.Input<{[key: string]: any}>;The query parameters to include in the redirect request to the authorization endpoint. Max: 10.
property authorizationEndpoint
authorizationEndpoint: pulumi.Input<string>;The authorization endpoint of the IdP.
property clientId
clientId: pulumi.Input<string>;The OAuth 2.0 client identifier.
property clientSecret
clientSecret: pulumi.Input<string>;The OAuth 2.0 client secret.
property issuer
issuer: pulumi.Input<string>;The OIDC issuer identifier of the IdP.
property onUnauthenticatedRequest
onUnauthenticatedRequest?: pulumi.Input<string>;The behavior if the user is not authenticated. Valid values: deny, allow and authenticate
property scope
scope?: pulumi.Input<string>;The set of user claims to be requested from the IdP.
property sessionCookieName
sessionCookieName?: pulumi.Input<string>;The name of the cookie used to maintain session information.
property sessionTimeout
sessionTimeout?: pulumi.Input<number>;The maximum duration of the authentication session, in seconds.
property tokenEndpoint
tokenEndpoint: pulumi.Input<string>;The token endpoint of the IdP.
property userInfoEndpoint
userInfoEndpoint: pulumi.Input<string>;The user info endpoint of the IdP.
interface ListenerRuleActionFixedResponse
interface ListenerRuleActionFixedResponseproperty contentType
contentType: pulumi.Input<string>;The content type. Valid values are text/plain, text/css, text/html, application/javascript and application/json.
property messageBody
messageBody?: pulumi.Input<string>;The message body.
property statusCode
statusCode?: pulumi.Input<string>;The HTTP response code. Valid values are 2XX, 4XX, or 5XX.
interface ListenerRuleActionForward
interface ListenerRuleActionForwardproperty stickiness
stickiness?: pulumi.Input<ListenerRuleActionForwardStickiness>;The target group stickiness for the rule.
property targetGroups
targetGroups: pulumi.Input<pulumi.Input<ListenerRuleActionForwardTargetGroup>[]>;One or more target groups block.
interface ListenerRuleActionForwardStickiness
interface ListenerRuleActionForwardStickinessproperty duration
duration: pulumi.Input<number>;The time period, in seconds, during which requests from a client should be routed to the same target group. The range is 1-604800 seconds (7 days).
property enabled
enabled?: pulumi.Input<boolean>;Indicates whether target group stickiness is enabled.
interface ListenerRuleActionForwardTargetGroup
interface ListenerRuleActionForwardTargetGroupproperty arn
arn: pulumi.Input<string>;The Amazon Resource Name (ARN) of the target group.
property weight
weight?: pulumi.Input<number>;The weight. The range is 0 to 999.
interface ListenerRuleActionRedirect
interface ListenerRuleActionRedirectproperty host
host?: pulumi.Input<string>;The hostname. This component is not percent-encoded. The hostname can contain #{host}. Defaults to #{host}.
property path
path?: pulumi.Input<string>;The absolute path, starting with the leading “/”. This component is not percent-encoded. The path can contain #{host}, #{path}, and #{port}. Defaults to /#{path}.
property port
port?: pulumi.Input<string>;The port. Specify a value from 1 to 65535 or #{port}. Defaults to #{port}.
property protocol
protocol?: pulumi.Input<string>;The protocol. Valid values are HTTP, HTTPS, or #{protocol}. Defaults to #{protocol}.
property query
query?: pulumi.Input<string>;The query parameters, URL-encoded when necessary, but not percent-encoded. Do not include the leading “?”. Defaults to #{query}.
property statusCode
statusCode: pulumi.Input<string>;The HTTP redirect code. The redirect is either permanent (HTTP_301) or temporary (HTTP_302).
interface ListenerRuleCondition
interface ListenerRuleConditionproperty field
field?: pulumi.Input<string>;The type of condition. Valid values are host-header or path-pattern. Must also set values.
property hostHeader
hostHeader?: pulumi.Input<ListenerRuleConditionHostHeader>;Contains a single values item which is a list of host header patterns to match. The maximum size of each pattern is 128 characters. Comparison is case insensitive. Wildcard characters supported: * (matches 0 or more characters) and ? (matches exactly 1 character). Only one pattern needs to match for the condition to be satisfied.
property httpHeader
httpHeader?: pulumi.Input<ListenerRuleConditionHttpHeader>;HTTP headers to match. HTTP Header block fields documented below.
property httpRequestMethod
httpRequestMethod?: pulumi.Input<ListenerRuleConditionHttpRequestMethod>;Contains a single values item which is a list of HTTP request methods or verbs to match. Maximum size is 40 characters. Only allowed characters are A-Z, hyphen (-) and underscore (_). Comparison is case sensitive. Wildcards are not supported. Only one needs to match for the condition to be satisfied. AWS recommends that GET and HEAD requests are routed in the same way because the response to a HEAD request may be cached.
property pathPattern
pathPattern?: pulumi.Input<ListenerRuleConditionPathPattern>;Contains a single values item which is a list of path patterns to match against the request URL. Maximum size of each pattern is 128 characters. Comparison is case sensitive. Wildcard characters supported: * (matches 0 or more characters) and ? (matches exactly 1 character). Only one pattern needs to match for the condition to be satisfied. Path pattern is compared only to the path of the URL, not to its query string. To compare against the query string, use a queryString condition.
property queryStrings
queryStrings?: pulumi.Input<pulumi.Input<ListenerRuleConditionQueryString>[]>;Query strings to match. Query String block fields documented below.
property sourceIp
sourceIp?: pulumi.Input<ListenerRuleConditionSourceIp>;Contains a single values item which is a list of source IP CIDR notations to match. You can use both IPv4 and IPv6 addresses. Wildcards are not supported. Condition is satisfied if the source IP address of the request matches one of the CIDR blocks. Condition is not satisfied by the addresses in the X-Forwarded-For header, use httpHeader condition instead.
property values
values?: pulumi.Input<string>;List of exactly one pattern to match. Required when field is set.
interface ListenerRuleConditionHostHeader
interface ListenerRuleConditionHostHeaderproperty values
values?: pulumi.Input<pulumi.Input<string>[]>;List of exactly one pattern to match. Required when field is set.
interface ListenerRuleConditionHttpHeader
interface ListenerRuleConditionHttpHeaderproperty httpHeaderName
httpHeaderName: pulumi.Input<string>;Name of HTTP header to search. The maximum size is 40 characters. Comparison is case insensitive. Only RFC7240 characters are supported. Wildcards are not supported. You cannot use HTTP header condition to specify the host header, use a host-header condition instead.
property values
values: pulumi.Input<pulumi.Input<string>[]>;List of header value patterns to match. Maximum size of each pattern is 128 characters. Comparison is case insensitive. Wildcard characters supported: * (matches 0 or more characters) and ? (matches exactly 1 character). If the same header appears multiple times in the request they will be searched in order until a match is found. Only one pattern needs to match for the condition to be satisfied. To require that all of the strings are a match, create one condition block per string.
interface ListenerRuleConditionHttpRequestMethod
interface ListenerRuleConditionHttpRequestMethodproperty values
values: pulumi.Input<pulumi.Input<string>[]>;List of exactly one pattern to match. Required when field is set.
interface ListenerRuleConditionPathPattern
interface ListenerRuleConditionPathPatternproperty values
values?: pulumi.Input<pulumi.Input<string>[]>;List of exactly one pattern to match. Required when field is set.
interface ListenerRuleConditionQueryString
interface ListenerRuleConditionQueryStringproperty key
key?: pulumi.Input<string>;Query string key pattern to match.
property value
value: pulumi.Input<string>;Query string value pattern to match.
interface ListenerRuleConditionSourceIp
interface ListenerRuleConditionSourceIpproperty values
values: pulumi.Input<pulumi.Input<string>[]>;List of exactly one pattern to match. Required when field is set.
interface LoadBalancerAccessLogs
interface LoadBalancerAccessLogsproperty bucket
bucket: pulumi.Input<string>;The S3 bucket name to store the logs in.
property enabled
enabled?: pulumi.Input<boolean>;Boolean to enable / disable accessLogs. Defaults to false, even when bucket is specified.
property prefix
prefix?: pulumi.Input<string>;The S3 bucket prefix. Logs are stored in the root if not configured.
interface LoadBalancerSubnetMapping
interface LoadBalancerSubnetMappingproperty allocationId
allocationId?: pulumi.Input<string>;The allocation ID of the Elastic IP address.
property subnetId
subnetId: pulumi.Input<string>;The id of the subnet of which to attach to the load balancer. You can specify only one subnet per Availability Zone.
interface TargetGroupHealthCheck
interface TargetGroupHealthCheckproperty enabled
enabled?: pulumi.Input<boolean>;Boolean to enable / disable stickiness. Default is true
property healthyThreshold
healthyThreshold?: pulumi.Input<number>;The number of consecutive health checks successes required before considering an unhealthy target healthy. Defaults to 3.
property interval
interval?: pulumi.Input<number>;The approximate amount of time, in seconds, between health checks of an individual target. Minimum value 5 seconds, Maximum value 300 seconds. For lambda target groups, it needs to be greater as the timeout of the underlying lambda. Default 30 seconds.
property matcher
matcher?: pulumi.Input<string>;The HTTP codes to use when checking for a successful response from a target. You can specify multiple values (for example, “200,202”) or a range of values (for example, “200-299”). Applies to Application Load Balancers only (HTTP/HTTPS), not Network Load Balancers (TCP).
property path
path?: pulumi.Input<string>;The destination for the health check request. Applies to Application Load Balancers only (HTTP/HTTPS), not Network Load Balancers (TCP).
property port
port?: pulumi.Input<string>;The port on which targets receive traffic, unless overridden when registering a specific target. Required when targetType is instance or ip. Does not apply when targetType is lambda.
property protocol
protocol?: pulumi.Input<string>;The protocol to use for routing traffic to the targets. Should be one of “TCP”, “TLS”, “UDP”, “TCP_UDP”, “HTTP” or “HTTPS”. Required when targetType is instance or ip. Does not apply when targetType is lambda.
property timeout
timeout?: pulumi.Input<number>;The amount of time, in seconds, during which no response means a failed health check. For Application Load Balancers, the range is 2 to 120 seconds, and the default is 5 seconds for the instance target type and 30 seconds for the lambda target type. For Network Load Balancers, you cannot set a custom value, and the default is 10 seconds for TCP and HTTPS health checks and 6 seconds for HTTP health checks.
property unhealthyThreshold
unhealthyThreshold?: pulumi.Input<number>;The number of consecutive health check failures required before considering the target unhealthy . For Network Load Balancers, this value must be the same as the healthyThreshold. Defaults to 3.
interface TargetGroupStickiness
interface TargetGroupStickinessproperty cookieDuration
cookieDuration?: pulumi.Input<number>;The time period, in seconds, during which requests from a client should be routed to the same target. After this time period expires, the load balancer-generated cookie is considered stale. The range is 1 second to 1 week (604800 seconds). The default value is 1 day (86400 seconds).
property enabled
enabled?: pulumi.Input<boolean>;Indicates whether health checks are enabled. Defaults to true.
property type
type: pulumi.Input<string>;The type of sticky sessions. The only current possible value is lbCookie.
namespace elasticsearch
interface DomainClusterConfig
interface DomainClusterConfigproperty dedicatedMasterCount
dedicatedMasterCount?: pulumi.Input<number>;Number of dedicated master nodes in the cluster
property dedicatedMasterEnabled
dedicatedMasterEnabled?: pulumi.Input<boolean>;Indicates whether dedicated master nodes are enabled for the cluster.
property dedicatedMasterType
dedicatedMasterType?: pulumi.Input<string>;Instance type of the dedicated master nodes in the cluster.
property instanceCount
instanceCount?: pulumi.Input<number>;Number of instances in the cluster.
property instanceType
instanceType?: pulumi.Input<string>;Instance type of data nodes in the cluster.
property zoneAwarenessConfig
zoneAwarenessConfig?: pulumi.Input<DomainClusterConfigZoneAwarenessConfig>;Configuration block containing zone awareness settings. Documented below.
property zoneAwarenessEnabled
zoneAwarenessEnabled?: pulumi.Input<boolean>;Indicates whether zone awareness is enabled, set to true for multi-az deployment. To enable awareness with three Availability Zones, the availabilityZoneCount within the zoneAwarenessConfig must be set to 3.
interface DomainClusterConfigZoneAwarenessConfig
interface DomainClusterConfigZoneAwarenessConfigproperty availabilityZoneCount
availabilityZoneCount?: pulumi.Input<number>;Number of Availability Zones for the domain to use with zoneAwarenessEnabled. Defaults to 2. Valid values: 2 or 3.
interface DomainCognitoOptions
interface DomainCognitoOptionsproperty enabled
enabled?: pulumi.Input<boolean>;Specifies whether Amazon Cognito authentication with Kibana is enabled or not
property identityPoolId
identityPoolId: pulumi.Input<string>;ID of the Cognito Identity Pool to use
property roleArn
roleArn: pulumi.Input<string>;ARN of the IAM role that has the AmazonESCognitoAccess policy attached
property userPoolId
userPoolId: pulumi.Input<string>;ID of the Cognito User Pool to use
interface DomainDomainEndpointOptions
interface DomainDomainEndpointOptionsproperty enforceHttps
enforceHttps: pulumi.Input<boolean>;Whether or not to require HTTPS
property tlsSecurityPolicy
tlsSecurityPolicy?: pulumi.Input<string>;The name of the TLS security policy that needs to be applied to the HTTPS endpoint. Valid values: Policy-Min-TLS-1-0-2019-07 and Policy-Min-TLS-1-2-2019-07. This provider will only perform drift detection if a configuration value is provided.
interface DomainEbsOptions
interface DomainEbsOptionsproperty ebsEnabled
ebsEnabled: pulumi.Input<boolean>;Whether EBS volumes are attached to data nodes in the domain.
property iops
iops?: pulumi.Input<number>;The baseline input/output (I/O) performance of EBS volumes attached to data nodes. Applicable only for the Provisioned IOPS EBS volume type.
property volumeSize
volumeSize?: pulumi.Input<number>;The size of EBS volumes attached to data nodes (in GB).
Required if ebsEnabled is set to true.
property volumeType
volumeType?: pulumi.Input<string>;The type of EBS volumes attached to data nodes.
interface DomainEncryptAtRest
interface DomainEncryptAtRestproperty enabled
enabled: pulumi.Input<boolean>;Specifies whether Amazon Cognito authentication with Kibana is enabled or not
property kmsKeyId
kmsKeyId?: pulumi.Input<string>;The KMS key id to encrypt the Elasticsearch domain with. If not specified then it defaults to using the aws/es service KMS key.
interface DomainLogPublishingOption
interface DomainLogPublishingOptionproperty cloudwatchLogGroupArn
cloudwatchLogGroupArn: pulumi.Input<string>;ARN of the Cloudwatch log group to which log needs to be published.
property enabled
enabled?: pulumi.Input<boolean>;Specifies whether Amazon Cognito authentication with Kibana is enabled or not
property logType
logType: pulumi.Input<string>;A type of Elasticsearch log. Valid values: INDEX_SLOW_LOGS, SEARCH_SLOW_LOGS, ES_APPLICATION_LOGS
interface DomainNodeToNodeEncryption
interface DomainNodeToNodeEncryptionproperty enabled
enabled: pulumi.Input<boolean>;Specifies whether Amazon Cognito authentication with Kibana is enabled or not
interface DomainSnapshotOptions
interface DomainSnapshotOptionsproperty automatedSnapshotStartHour
automatedSnapshotStartHour: pulumi.Input<number>;Hour during which the service takes an automated daily snapshot of the indices in the domain.
interface DomainVpcOptions
interface DomainVpcOptionsproperty availabilityZones
availabilityZones?: pulumi.Input<pulumi.Input<string>[]>;property securityGroupIds
securityGroupIds?: pulumi.Input<pulumi.Input<string>[]>;List of VPC Security Group IDs to be applied to the Elasticsearch domain endpoints. If omitted, the default Security Group for the VPC will be used.
property subnetIds
subnetIds?: pulumi.Input<pulumi.Input<string>[]>;List of VPC Subnet IDs for the Elasticsearch domain endpoints to be created in.
property vpcId
vpcId?: pulumi.Input<string>;namespace elastictranscoder
interface PipelineContentConfig
interface PipelineContentConfigproperty bucket
bucket?: pulumi.Input<string>;The Amazon S3 bucket in which you want Elastic Transcoder to save transcoded files and playlists.
property storageClass
storageClass?: pulumi.Input<string>;The Amazon S3 storage class, Standard or ReducedRedundancy, that you want Elastic Transcoder to assign to the files and playlists that it stores in your Amazon S3 bucket.
interface PipelineContentConfigPermission
interface PipelineContentConfigPermissionproperty accesses
accesses?: pulumi.Input<pulumi.Input<string>[]>;The permission that you want to give to the AWS user that you specified in content_config_permissions.grantee
property grantee
grantee?: pulumi.Input<string>;The AWS user or group that you want to have access to transcoded files and playlists.
property granteeType
granteeType?: pulumi.Input<string>;Specify the type of value that appears in the content_config_permissions.grantee object. Valid values are Canonical, Email or Group.
interface PipelineNotifications
interface PipelineNotificationsproperty completed
completed?: pulumi.Input<string>;The topic ARN for the Amazon SNS topic that you want to notify when Elastic Transcoder has finished processing a job in this pipeline.
property error
error?: pulumi.Input<string>;The topic ARN for the Amazon SNS topic that you want to notify when Elastic Transcoder encounters an error condition while processing a job in this pipeline.
property progressing
progressing?: pulumi.Input<string>;The topic ARN for the Amazon Simple Notification Service (Amazon SNS) topic that you want to notify when Elastic Transcoder has started to process a job in this pipeline.
property warning
warning?: pulumi.Input<string>;The topic ARN for the Amazon SNS topic that you want to notify when Elastic Transcoder encounters a warning condition while processing a job in this pipeline.
interface PipelineThumbnailConfig
interface PipelineThumbnailConfigproperty bucket
bucket?: pulumi.Input<string>;The Amazon S3 bucket in which you want Elastic Transcoder to save thumbnail files.
property storageClass
storageClass?: pulumi.Input<string>;The Amazon S3 storage class, Standard or ReducedRedundancy, that you want Elastic Transcoder to assign to the thumbnails that it stores in your Amazon S3 bucket.
interface PipelineThumbnailConfigPermission
interface PipelineThumbnailConfigPermissionproperty accesses
accesses?: pulumi.Input<pulumi.Input<string>[]>;The permission that you want to give to the AWS user that you specified in thumbnail_config_permissions.grantee.
property grantee
grantee?: pulumi.Input<string>;The AWS user or group that you want to have access to thumbnail files.
property granteeType
granteeType?: pulumi.Input<string>;Specify the type of value that appears in the thumbnail_config_permissions.grantee object.
interface PresetAudio
interface PresetAudioproperty audioPackingMode
audioPackingMode?: pulumi.Input<string>;The method of organizing audio channels and tracks. Use Audio:Channels to specify the number of channels in your output, and Audio:AudioPackingMode to specify the number of tracks and their relation to the channels. If you do not specify an Audio:AudioPackingMode, Elastic Transcoder uses SingleTrack.
property bitRate
bitRate?: pulumi.Input<string>;The bit rate of the audio stream in the output file, in kilobits/second. Enter an integer between 64 and 320, inclusive.
property channels
channels?: pulumi.Input<string>;The number of audio channels in the output file
property codec
codec?: pulumi.Input<string>;The audio codec for the output file. Valid values are AAC, flac, mp2, mp3, pcm, and vorbis.
property sampleRate
sampleRate?: pulumi.Input<string>;The sample rate of the audio stream in the output file, in hertz. Valid values are: auto, 22050, 32000, 44100, 48000, 96000
interface PresetAudioCodecOptions
interface PresetAudioCodecOptionsproperty bitDepth
bitDepth?: pulumi.Input<string>;The bit depth of a sample is how many bits of information are included in the audio samples. Valid values are 16 and 24. (FLAC/PCM Only)
property bitOrder
bitOrder?: pulumi.Input<string>;The order the bits of a PCM sample are stored in. The supported value is LittleEndian. (PCM Only)
property profile
profile?: pulumi.Input<string>;If you specified AAC for Audio:Codec, choose the AAC profile for the output file.
property signed
signed?: pulumi.Input<string>;Whether audio samples are represented with negative and positive numbers (signed) or only positive numbers (unsigned). The supported value is Signed. (PCM Only)
interface PresetThumbnails
interface PresetThumbnailsproperty aspectRatio
aspectRatio?: pulumi.Input<string>;The aspect ratio of thumbnails. The following values are valid: auto, 1:1, 4:3, 3:2, 16:9
property format
format?: pulumi.Input<string>;The format of thumbnails, if any. Valid formats are jpg and png.
property interval
interval?: pulumi.Input<string>;The approximate number of seconds between thumbnails. The value must be an integer. The actual interval can vary by several seconds from one thumbnail to the next.
property maxHeight
maxHeight?: pulumi.Input<string>;The maximum height of thumbnails, in pixels. If you specify auto, Elastic Transcoder uses 1080 (Full HD) as the default value. If you specify a numeric value, enter an even integer between 32 and 3072, inclusive.
property maxWidth
maxWidth?: pulumi.Input<string>;The maximum width of thumbnails, in pixels. If you specify auto, Elastic Transcoder uses 1920 (Full HD) as the default value. If you specify a numeric value, enter an even integer between 32 and 4096, inclusive.
property paddingPolicy
paddingPolicy?: pulumi.Input<string>;When you set PaddingPolicy to Pad, Elastic Transcoder might add black bars to the top and bottom and/or left and right sides of thumbnails to make the total size of the thumbnails match the values that you specified for thumbnail MaxWidth and MaxHeight settings.
property resolution
resolution?: pulumi.Input<string>;The width and height of thumbnail files in pixels, in the format WidthxHeight, where both values are even integers. The values cannot exceed the width and height that you specified in the Video:Resolution object. (To better control resolution and aspect ratio of thumbnails, we recommend that you use the thumbnail values maxWidth, maxHeight, sizingPolicy, and paddingPolicy instead of resolution and aspectRatio. The two groups of settings are mutually exclusive. Do not use them together)
property sizingPolicy
sizingPolicy?: pulumi.Input<string>;A value that controls scaling of thumbnails. Valid values are: Fit, Fill, Stretch, Keep, ShrinkToFit, and ShrinkToFill.
interface PresetVideo
interface PresetVideoproperty aspectRatio
aspectRatio?: pulumi.Input<string>;The display aspect ratio of the video in the output file. Valid values are: auto, 1:1, 4:3, 3:2, 16:9. (Note; to better control resolution and aspect ratio of output videos, we recommend that you use the values maxWidth, maxHeight, sizingPolicy, paddingPolicy, and displayAspectRatio instead of resolution and aspectRatio.)
property bitRate
bitRate?: pulumi.Input<string>;The bit rate of the video stream in the output file, in kilobits/second. You can configure variable bit rate or constant bit rate encoding.
property codec
codec?: pulumi.Input<string>;The video codec for the output file. Valid values are gif, H.264, mpeg2, vp8, and vp9.
property displayAspectRatio
displayAspectRatio?: pulumi.Input<string>;The value that Elastic Transcoder adds to the metadata in the output file. If you set DisplayAspectRatio to auto, Elastic Transcoder chooses an aspect ratio that ensures square pixels. If you specify another option, Elastic Transcoder sets that value in the output file.
property fixedGop
fixedGop?: pulumi.Input<string>;Whether to use a fixed value for Video:FixedGOP. Not applicable for containers of type gif. Valid values are true and false. Also known as, Fixed Number of Frames Between Keyframes.
property frameRate
frameRate?: pulumi.Input<string>;The frames per second for the video stream in the output file. The following values are valid: auto, 10, 15, 23.97, 24, 25, 29.97, 30, 50, 60.
property keyframesMaxDist
keyframesMaxDist?: pulumi.Input<string>;The maximum number of frames between key frames. Not applicable for containers of type gif.
property maxFrameRate
maxFrameRate?: pulumi.Input<string>;If you specify auto for FrameRate, Elastic Transcoder uses the frame rate of the input video for the frame rate of the output video, up to the maximum frame rate. If you do not specify a MaxFrameRate, Elastic Transcoder will use a default of 30.
property maxHeight
maxHeight?: pulumi.Input<string>;The maximum height of the output video in pixels. If you specify auto, Elastic Transcoder uses 1080 (Full HD) as the default value. If you specify a numeric value, enter an even integer between 96 and 3072, inclusive.
property maxWidth
maxWidth?: pulumi.Input<string>;The maximum width of the output video in pixels. If you specify auto, Elastic Transcoder uses 1920 (Full HD) as the default value. If you specify a numeric value, enter an even integer between 128 and 4096, inclusive.
property paddingPolicy
paddingPolicy?: pulumi.Input<string>;When you set PaddingPolicy to Pad, Elastic Transcoder might add black bars to the top and bottom and/or left and right sides of the output video to make the total size of the output video match the values that you specified for maxWidth and maxHeight.
property resolution
resolution?: pulumi.Input<string>;The width and height of the video in the output file, in pixels. Valid values are auto and widthxheight. (see note for aspectRatio)
property sizingPolicy
sizingPolicy?: pulumi.Input<string>;A value that controls scaling of the output video. Valid values are: Fit, Fill, Stretch, Keep, ShrinkToFit, ShrinkToFill.
interface PresetVideoWatermark
interface PresetVideoWatermarkproperty horizontalAlign
horizontalAlign?: pulumi.Input<string>;The horizontal position of the watermark unless you specify a nonzero value for horzontalOffset.
property horizontalOffset
horizontalOffset?: pulumi.Input<string>;The amount by which you want the horizontal position of the watermark to be offset from the position specified by horizontalAlign.
property id
id?: pulumi.Input<string>;A unique identifier for the settings for one watermark. The value of Id can be up to 40 characters long. You can specify settings for up to four watermarks.
property maxHeight
maxHeight?: pulumi.Input<string>;The maximum height of the watermark.
property maxWidth
maxWidth?: pulumi.Input<string>;The maximum width of the watermark.
property opacity
opacity?: pulumi.Input<string>;A percentage that indicates how much you want a watermark to obscure the video in the location where it appears.
property sizingPolicy
sizingPolicy?: pulumi.Input<string>;A value that controls scaling of the watermark. Valid values are: Fit, Stretch, ShrinkToFit
property target
target?: pulumi.Input<string>;A value that determines how Elastic Transcoder interprets values that you specified for video_watermarks.horizontal_offset, video_watermarks.vertical_offset, video_watermarks.max_width, and video_watermarks.max_height. Valid values are Content and Frame.
property verticalAlign
verticalAlign?: pulumi.Input<string>;The vertical position of the watermark unless you specify a nonzero value for verticalAlign. Valid values are Top, Bottom, Center.
property verticalOffset
verticalOffset?: pulumi.Input<string>;The amount by which you want the vertical position of the watermark to be offset from the position specified by verticalAlign
namespace elb
interface LoadBalancerAccessLogs
interface LoadBalancerAccessLogsproperty bucket
bucket: pulumi.Input<string>;The S3 bucket name to store the logs in.
property bucketPrefix
bucketPrefix?: pulumi.Input<string>;The S3 bucket prefix. Logs are stored in the root if not configured.
property enabled
enabled?: pulumi.Input<boolean>;Boolean to enable / disable accessLogs. Default is true
property interval
interval?: pulumi.Input<number>;The publishing interval in minutes. Default: 60 minutes.
interface LoadBalancerHealthCheck
interface LoadBalancerHealthCheckproperty healthyThreshold
healthyThreshold: pulumi.Input<number>;The number of checks before the instance is declared healthy.
property interval
interval: pulumi.Input<number>;The interval between checks.
property target
target: pulumi.Input<string>;The target of the check. Valid pattern is “${PROTOCOL}:${PORT}${PATH}“, where PROTOCOL
values are:
* HTTP, HTTPS - PORT and PATH are required
* TCP, SSL - PORT is required, PATH is not supported
property timeout
timeout: pulumi.Input<number>;The length of time before the check times out.
property unhealthyThreshold
unhealthyThreshold: pulumi.Input<number>;The number of checks before the instance is declared unhealthy.
interface LoadBalancerListener
interface LoadBalancerListenerproperty instancePort
instancePort: pulumi.Input<number>;The port on the instance to route to
property instanceProtocol
instanceProtocol: pulumi.Input<string>;The protocol to use to the instance. Valid
values are HTTP, HTTPS, TCP, or SSL
property lbPort
lbPort: pulumi.Input<number>;The port to listen on for the load balancer
property lbProtocol
lbProtocol: pulumi.Input<string>;The protocol to listen on. Valid values are HTTP,
HTTPS, TCP, or SSL
property sslCertificateId
sslCertificateId?: pulumi.Input<string>;The ARN of an SSL certificate you have
uploaded to AWS IAM. Note ECDSA-specific restrictions below. Only valid when lbProtocol is either HTTPS or SSL
interface LoadBalancerPolicyPolicyAttribute
interface LoadBalancerPolicyPolicyAttributeproperty name
name?: pulumi.Input<string>;property value
value?: pulumi.Input<string>;interface SslNegotiationPolicyAttribute
interface SslNegotiationPolicyAttributeproperty name
name: pulumi.Input<string>;The name of the attribute
property value
value: pulumi.Input<string>;The value of the attribute
namespace emr
interface ClusterBootstrapAction
interface ClusterBootstrapActionproperty args
args?: pulumi.Input<pulumi.Input<string>[]>;List of command line arguments passed to the JAR file’s main function when executed.
property name
name: pulumi.Input<string>;The name of the step.
property path
path: pulumi.Input<string>;Location of the script to run during a bootstrap action. Can be either a location in Amazon S3 or on a local file system
interface ClusterCoreInstanceGroup
interface ClusterCoreInstanceGroupproperty autoscalingPolicy
autoscalingPolicy?: pulumi.Input<string>;The autoscaling policy document. This is a JSON formatted string. See EMR Auto Scaling
property bidPrice
bidPrice?: pulumi.Input<string>;Bid price for each EC2 instance in the instance group, expressed in USD. By setting this attribute, the instance group is being declared as a Spot Instance, and will implicitly create a Spot request. Leave this blank to use On-Demand Instances.
property ebsConfigs
ebsConfigs?: pulumi.Input<pulumi.Input<ClusterCoreInstanceGroupEbsConfig>[]>;Configuration block(s) for EBS volumes attached to each instance in the instance group. Detailed below.
property id
id?: pulumi.Input<string>;The ID of the EMR Cluster
property instanceCount
instanceCount?: pulumi.Input<number>;Target number of instances for the instance group. Must be 1 or 3. Defaults to 1. Launching with multiple master nodes is only supported in EMR version 5.23.0+, and requires this resource’s coreInstanceGroup to be configured. Public (Internet accessible) instances must be created in VPC subnets that have map public IP on launch enabled. Termination protection is automatically enabled when launched with multiple master nodes and this provider must have the terminationProtection = false configuration applied before destroying this resource.
property instanceType
instanceType: pulumi.Input<string>;EC2 instance type for all instances in the instance group.
property name
name?: pulumi.Input<string>;The name of the step.
interface ClusterCoreInstanceGroupEbsConfig
interface ClusterCoreInstanceGroupEbsConfigproperty iops
iops?: pulumi.Input<number>;The number of I/O operations per second (IOPS) that the volume supports
property size
size: pulumi.Input<number>;The volume size, in gibibytes (GiB).
property type
type: pulumi.Input<string>;The volume type. Valid options are gp2, io1, standard and st1. See EBS Volume Types.
property volumesPerInstance
volumesPerInstance?: pulumi.Input<number>;The number of EBS volumes with this configuration to attach to each EC2 instance in the instance group (default is 1)
interface ClusterEc2Attributes
interface ClusterEc2Attributesproperty additionalMasterSecurityGroups
additionalMasterSecurityGroups?: pulumi.Input<string>;String containing a comma separated list of additional Amazon EC2 security group IDs for the master node
property additionalSlaveSecurityGroups
additionalSlaveSecurityGroups?: pulumi.Input<string>;String containing a comma separated list of additional Amazon EC2 security group IDs for the slave nodes as a comma separated string
property emrManagedMasterSecurityGroup
emrManagedMasterSecurityGroup?: pulumi.Input<string>;Identifier of the Amazon EC2 EMR-Managed security group for the master node
property emrManagedSlaveSecurityGroup
emrManagedSlaveSecurityGroup?: pulumi.Input<string>;Identifier of the Amazon EC2 EMR-Managed security group for the slave nodes
property instanceProfile
instanceProfile: pulumi.Input<string>;Instance Profile for EC2 instances of the cluster assume this role
property keyName
keyName?: pulumi.Input<string>;Amazon EC2 key pair that can be used to ssh to the master node as the user called hadoop
property serviceAccessSecurityGroup
serviceAccessSecurityGroup?: pulumi.Input<string>;Identifier of the Amazon EC2 service-access security group - required when the cluster runs on a private subnet
property subnetId
subnetId?: pulumi.Input<string>;VPC subnet id where you want the job flow to launch. Cannot specify the cc1.4xlarge instance type for nodes of a job flow launched in a Amazon VPC
interface ClusterInstanceGroup
interface ClusterInstanceGroupproperty autoscalingPolicy
autoscalingPolicy?: pulumi.Input<string>;The autoscaling policy document. This is a JSON formatted string. See EMR Auto Scaling
property bidPrice
bidPrice?: pulumi.Input<string>;Bid price for each EC2 instance in the instance group, expressed in USD. By setting this attribute, the instance group is being declared as a Spot Instance, and will implicitly create a Spot request. Leave this blank to use On-Demand Instances.
property ebsConfigs
ebsConfigs?: pulumi.Input<pulumi.Input<ClusterInstanceGroupEbsConfig>[]>;Configuration block(s) for EBS volumes attached to each instance in the instance group. Detailed below.
property id
id?: pulumi.Input<string>;The ID of the EMR Cluster
property instanceCount
instanceCount?: pulumi.Input<number>;Target number of instances for the instance group. Must be 1 or 3. Defaults to 1. Launching with multiple master nodes is only supported in EMR version 5.23.0+, and requires this resource’s coreInstanceGroup to be configured. Public (Internet accessible) instances must be created in VPC subnets that have map public IP on launch enabled. Termination protection is automatically enabled when launched with multiple master nodes and this provider must have the terminationProtection = false configuration applied before destroying this resource.
property instanceRole
instanceRole: pulumi.Input<string>;The role of the instance group in the cluster. Valid values are: MASTER, CORE, and TASK.
property instanceType
instanceType: pulumi.Input<string>;EC2 instance type for all instances in the instance group.
property name
name?: pulumi.Input<string>;The name of the step.
interface ClusterInstanceGroupEbsConfig
interface ClusterInstanceGroupEbsConfigproperty iops
iops?: pulumi.Input<number>;The number of I/O operations per second (IOPS) that the volume supports
property size
size: pulumi.Input<number>;The volume size, in gibibytes (GiB).
property type
type: pulumi.Input<string>;The volume type. Valid options are gp2, io1, standard and st1. See EBS Volume Types.
property volumesPerInstance
volumesPerInstance?: pulumi.Input<number>;The number of EBS volumes with this configuration to attach to each EC2 instance in the instance group (default is 1)
interface ClusterKerberosAttributes
interface ClusterKerberosAttributesproperty adDomainJoinPassword
adDomainJoinPassword?: pulumi.Input<string>;The Active Directory password for adDomainJoinUser. This provider cannot perform drift detection of this configuration.
property adDomainJoinUser
adDomainJoinUser?: pulumi.Input<string>;Required only when establishing a cross-realm trust with an Active Directory domain. A user with sufficient privileges to join resources to the domain. This provider cannot perform drift detection of this configuration.
property crossRealmTrustPrincipalPassword
crossRealmTrustPrincipalPassword?: pulumi.Input<string>;Required only when establishing a cross-realm trust with a KDC in a different realm. The cross-realm principal password, which must be identical across realms. This provider cannot perform drift detection of this configuration.
property kdcAdminPassword
kdcAdminPassword: pulumi.Input<string>;The password used within the cluster for the kadmin service on the cluster-dedicated KDC, which maintains Kerberos principals, password policies, and keytabs for the cluster. This provider cannot perform drift detection of this configuration.
property realm
realm: pulumi.Input<string>;The name of the Kerberos realm to which all nodes in a cluster belong. For example, EC2.INTERNAL
interface ClusterMasterInstanceGroup
interface ClusterMasterInstanceGroupproperty bidPrice
bidPrice?: pulumi.Input<string>;Bid price for each EC2 instance in the instance group, expressed in USD. By setting this attribute, the instance group is being declared as a Spot Instance, and will implicitly create a Spot request. Leave this blank to use On-Demand Instances.
property ebsConfigs
ebsConfigs?: pulumi.Input<pulumi.Input<ClusterMasterInstanceGroupEbsConfig>[]>;Configuration block(s) for EBS volumes attached to each instance in the instance group. Detailed below.
property id
id?: pulumi.Input<string>;The ID of the EMR Cluster
property instanceCount
instanceCount?: pulumi.Input<number>;Target number of instances for the instance group. Must be 1 or 3. Defaults to 1. Launching with multiple master nodes is only supported in EMR version 5.23.0+, and requires this resource’s coreInstanceGroup to be configured. Public (Internet accessible) instances must be created in VPC subnets that have map public IP on launch enabled. Termination protection is automatically enabled when launched with multiple master nodes and this provider must have the terminationProtection = false configuration applied before destroying this resource.
property instanceType
instanceType: pulumi.Input<string>;EC2 instance type for all instances in the instance group.
property name
name?: pulumi.Input<string>;The name of the step.
interface ClusterMasterInstanceGroupEbsConfig
interface ClusterMasterInstanceGroupEbsConfigproperty iops
iops?: pulumi.Input<number>;The number of I/O operations per second (IOPS) that the volume supports
property size
size: pulumi.Input<number>;The volume size, in gibibytes (GiB).
property type
type: pulumi.Input<string>;The volume type. Valid options are gp2, io1, standard and st1. See EBS Volume Types.
property volumesPerInstance
volumesPerInstance?: pulumi.Input<number>;The number of EBS volumes with this configuration to attach to each EC2 instance in the instance group (default is 1)
interface ClusterStep
interface ClusterStepproperty actionOnFailure
actionOnFailure: pulumi.Input<string>;The action to take if the step fails. Valid values: TERMINATE_JOB_FLOW, TERMINATE_CLUSTER, CANCEL_AND_WAIT, and CONTINUE
property hadoopJarStep
hadoopJarStep: pulumi.Input<ClusterStepHadoopJarStep>;The JAR file used for the step. Defined below.
property name
name: pulumi.Input<string>;The name of the step.
interface ClusterStepHadoopJarStep
interface ClusterStepHadoopJarStepproperty args
args?: pulumi.Input<pulumi.Input<string>[]>;List of command line arguments passed to the JAR file’s main function when executed.
property jar
jar: pulumi.Input<string>;Path to a JAR file run during the step.
property mainClass
mainClass?: pulumi.Input<string>;Name of the main class in the specified Java file. If not specified, the JAR file should specify a Main-Class in its manifest file.
property properties
properties?: pulumi.Input<{[key: string]: any}>;Key-Value map of Java properties that are set when the step runs. You can use these properties to pass key value pairs to your main function.
interface InstanceGroupEbsConfig
interface InstanceGroupEbsConfigproperty iops
iops?: pulumi.Input<number>;The number of I/O operations per second (IOPS) that the volume supports.
property size
size: pulumi.Input<number>;The volume size, in gibibytes (GiB). This can be a number from 1 - 1024. If the volume type is EBS-optimized, the minimum value is 10.
property type
type: pulumi.Input<string>;The volume type. Valid options are ‘gp2’, ‘io1’ and ‘standard’.
property volumesPerInstance
volumesPerInstance?: pulumi.Input<number>;The number of EBS Volumes to attach per instance.
namespace fsx
interface WindowsFileSystemSelfManagedActiveDirectory
interface WindowsFileSystemSelfManagedActiveDirectoryproperty dnsIps
dnsIps: pulumi.Input<pulumi.Input<string>[]>;A list of up to two IP addresses of DNS servers or domain controllers in the self-managed AD directory. The IP addresses need to be either in the same VPC CIDR range as the file system or in the private IP version 4 (IPv4) address ranges as specified in RFC 1918.
property domainName
domainName: pulumi.Input<string>;The fully qualified domain name of the self-managed AD directory. For example, corp.example.com.
property fileSystemAdministratorsGroup
fileSystemAdministratorsGroup?: pulumi.Input<string>;The name of the domain group whose members are granted administrative privileges for the file system. Administrative privileges include taking ownership of files and folders, and setting audit controls (audit ACLs) on files and folders. The group that you specify must already exist in your domain. Defaults to Domain Admins.
property organizationalUnitDistinguishedName
organizationalUnitDistinguishedName?: pulumi.Input<string>;The fully qualified distinguished name of the organizational unit within your self-managed AD directory that the Windows File Server instance will join. For example, OU=FSx,DC=yourdomain,DC=corp,DC=com. Only accepts OU as the direct parent of the file system. If none is provided, the FSx file system is created in the default location of your self-managed AD directory. To learn more, see RFC 2253.
property password
password: pulumi.Input<string>;The password for the service account on your self-managed AD domain that Amazon FSx will use to join to your AD domain.
property username
username: pulumi.Input<string>;The user name for the service account on your self-managed AD domain that Amazon FSx will use to join to your AD domain.
namespace gamelift
interface AliasRoutingStrategy
interface AliasRoutingStrategyproperty fleetId
fleetId?: pulumi.Input<string>;ID of the Gamelift Fleet to point the alias to.
property message
message?: pulumi.Input<string>;Message text to be used with the TERMINAL routing strategy.
property type
type: pulumi.Input<string>;Type of routing strategy. e.g. SIMPLE or TERMINAL
interface BuildStorageLocation
interface BuildStorageLocationproperty bucket
bucket: pulumi.Input<string>;Name of your S3 bucket.
property key
key: pulumi.Input<string>;Name of the zip file containing your build files.
property roleArn
roleArn: pulumi.Input<string>;ARN of the access role that allows Amazon GameLift to access your S3 bucket.
interface FleetEc2InboundPermission
interface FleetEc2InboundPermissionproperty fromPort
fromPort: pulumi.Input<number>;Starting value for a range of allowed port numbers.
property ipRange
ipRange: pulumi.Input<string>;Range of allowed IP addresses expressed in CIDR notation. e.g. 000.000.000.000/[subnet mask] or 0.0.0.0/[subnet mask].
property protocol
protocol: pulumi.Input<string>;Network communication protocol used by the fleet. e.g. TCP or UDP
property toPort
toPort: pulumi.Input<number>;Ending value for a range of allowed port numbers. Port numbers are end-inclusive. This value must be higher than fromPort.
interface FleetResourceCreationLimitPolicy
interface FleetResourceCreationLimitPolicyproperty newGameSessionsPerCreator
newGameSessionsPerCreator?: pulumi.Input<number>;Maximum number of game sessions that an individual can create during the policy period.
property policyPeriodInMinutes
policyPeriodInMinutes?: pulumi.Input<number>;Time span used in evaluating the resource creation limit policy.
interface FleetRuntimeConfiguration
interface FleetRuntimeConfigurationproperty gameSessionActivationTimeoutSeconds
gameSessionActivationTimeoutSeconds?: pulumi.Input<number>;Maximum amount of time (in seconds) that a game session can remain in status ACTIVATING.
property maxConcurrentGameSessionActivations
maxConcurrentGameSessionActivations?: pulumi.Input<number>;Maximum number of game sessions with status ACTIVATING to allow on an instance simultaneously.
property serverProcesses
serverProcesses?: pulumi.Input<pulumi.Input<FleetRuntimeConfigurationServerProcess>[]>;Collection of server process configurations that describe which server processes to run on each instance in a fleet. See below.
interface FleetRuntimeConfigurationServerProcess
interface FleetRuntimeConfigurationServerProcessproperty concurrentExecutions
concurrentExecutions: pulumi.Input<number>;Number of server processes using this configuration to run concurrently on an instance.
property launchPath
launchPath: pulumi.Input<string>;Location of the server executable in a game build. All game builds are installed on instances at the root : for Windows instances C:\game, and for Linux instances /local/game.
property parameters
parameters?: pulumi.Input<string>;Optional list of parameters to pass to the server executable on launch.
interface GameSessionQueuePlayerLatencyPolicy
interface GameSessionQueuePlayerLatencyPolicyproperty maximumIndividualPlayerLatencyMilliseconds
maximumIndividualPlayerLatencyMilliseconds: pulumi.Input<number>;Maximum latency value that is allowed for any player.
property policyDurationSeconds
policyDurationSeconds?: pulumi.Input<number>;Length of time that the policy is enforced while placing a new game session. Absence of value for this attribute means that the policy is enforced until the queue times out.
namespace glacier
interface VaultNotification
interface VaultNotificationproperty events
events: pulumi.Input<pulumi.Input<string>[]>;You can configure a vault to publish a notification for ArchiveRetrievalCompleted and InventoryRetrievalCompleted events.
property snsTopic
snsTopic: pulumi.Input<string>;The SNS Topic ARN.
namespace globalaccelerator
interface AcceleratorAttributes
interface AcceleratorAttributesproperty flowLogsEnabled
flowLogsEnabled?: pulumi.Input<boolean>;Indicates whether flow logs are enabled.
property flowLogsS3Bucket
flowLogsS3Bucket?: pulumi.Input<string>;The name of the Amazon S3 bucket for the flow logs.
property flowLogsS3Prefix
flowLogsS3Prefix?: pulumi.Input<string>;The prefix for the location in the Amazon S3 bucket for the flow logs.
interface AcceleratorIpSet
interface AcceleratorIpSetproperty ipAddresses
ipAddresses?: pulumi.Input<pulumi.Input<string>[]>;A list of IP addresses in the IP address set.
property ipFamily
ipFamily?: pulumi.Input<string>;The types of IP addresses included in this IP set.
interface EndpointGroupEndpointConfiguration
interface EndpointGroupEndpointConfigurationproperty endpointId
endpointId?: pulumi.Input<string>;An ID for the endpoint. If the endpoint is a Network Load Balancer or Application Load Balancer, this is the Amazon Resource Name (ARN) of the resource. If the endpoint is an Elastic IP address, this is the Elastic IP address allocation ID.
property weight
weight?: pulumi.Input<number>;The weight associated with the endpoint. When you add weights to endpoints, you configure AWS Global Accelerator to route traffic based on proportions that you specify.
interface ListenerPortRange
interface ListenerPortRangeproperty fromPort
fromPort?: pulumi.Input<number>;The first port in the range of ports, inclusive.
property toPort
toPort?: pulumi.Input<number>;The last port in the range of ports, inclusive.
namespace glue
interface CatalogTablePartitionKey
interface CatalogTablePartitionKeyproperty comment
comment?: pulumi.Input<string>;Free-form text comment.
property name
name: pulumi.Input<string>;Name of the SerDe.
property type
type?: pulumi.Input<string>;The datatype of data in the Column.
interface CatalogTableStorageDescriptor
interface CatalogTableStorageDescriptorproperty bucketColumns
bucketColumns?: pulumi.Input<pulumi.Input<string>[]>;A list of reducer grouping columns, clustering columns, and bucketing columns in the table.
property columns
columns?: pulumi.Input<pulumi.Input<CatalogTableStorageDescriptorColumn>[]>;A list of the Columns in the table.
property compressed
compressed?: pulumi.Input<boolean>;True if the data in the table is compressed, or False if not.
property inputFormat
inputFormat?: pulumi.Input<string>;The input format: SequenceFileInputFormat (binary), or TextInputFormat, or a custom format.
property location
location?: pulumi.Input<string>;The physical location of the table. By default this takes the form of the warehouse location, followed by the database location in the warehouse, followed by the table name.
property numberOfBuckets
numberOfBuckets?: pulumi.Input<number>;Must be specified if the table contains any dimension columns.
property outputFormat
outputFormat?: pulumi.Input<string>;The output format: SequenceFileOutputFormat (binary), or IgnoreKeyTextOutputFormat, or a custom format.
property parameters
parameters?: pulumi.Input<{[key: string]: pulumi.Input<string>}>;A map of initialization parameters for the SerDe, in key-value form.
property serDeInfo
serDeInfo?: pulumi.Input<CatalogTableStorageDescriptorSerDeInfo>;Serialization/deserialization (SerDe) information.
property skewedInfo
skewedInfo?: pulumi.Input<CatalogTableStorageDescriptorSkewedInfo>;Information about values that appear very frequently in a column (skewed values).
property sortColumns
sortColumns?: pulumi.Input<pulumi.Input<CatalogTableStorageDescriptorSortColumn>[]>;A list of Order objects specifying the sort order of each bucket in the table.
property storedAsSubDirectories
storedAsSubDirectories?: pulumi.Input<boolean>;True if the table data is stored in subdirectories, or False if not.
interface CatalogTableStorageDescriptorColumn
interface CatalogTableStorageDescriptorColumnproperty comment
comment?: pulumi.Input<string>;Free-form text comment.
property name
name: pulumi.Input<string>;Name of the SerDe.
property type
type?: pulumi.Input<string>;The datatype of data in the Column.
interface CatalogTableStorageDescriptorSerDeInfo
interface CatalogTableStorageDescriptorSerDeInfoproperty name
name?: pulumi.Input<string>;Name of the SerDe.
property parameters
parameters?: pulumi.Input<{[key: string]: pulumi.Input<string>}>;A map of initialization parameters for the SerDe, in key-value form.
property serializationLibrary
serializationLibrary?: pulumi.Input<string>;Usually the class that implements the SerDe. An example is: org.apache.hadoop.hive.serde2.columnar.ColumnarSerDe.
interface CatalogTableStorageDescriptorSkewedInfo
interface CatalogTableStorageDescriptorSkewedInfoproperty skewedColumnNames
skewedColumnNames?: pulumi.Input<pulumi.Input<string>[]>;A list of names of columns that contain skewed values.
property skewedColumnValueLocationMaps
skewedColumnValueLocationMaps?: pulumi.Input<{[key: string]: pulumi.Input<string>}>;A list of values that appear so frequently as to be considered skewed.
property skewedColumnValues
skewedColumnValues?: pulumi.Input<pulumi.Input<string>[]>;A map of skewed values to the columns that contain them.
interface CatalogTableStorageDescriptorSortColumn
interface CatalogTableStorageDescriptorSortColumnproperty column
column: pulumi.Input<string>;The name of the column.
property sortOrder
sortOrder: pulumi.Input<number>;Indicates that the column is sorted in ascending order (== 1), or in descending order (==0).
interface ClassifierCsvClassifier
interface ClassifierCsvClassifierproperty allowSingleColumn
allowSingleColumn?: pulumi.Input<boolean>;Enables the processing of files that contain only one column.
property containsHeader
containsHeader?: pulumi.Input<string>;Indicates whether the CSV file contains a header. This can be one of “ABSENT”, “PRESENT”, or “UNKNOWN”.
property delimiter
delimiter?: pulumi.Input<string>;The delimiter used in the Csv to separate columns.
property disableValueTrimming
disableValueTrimming?: pulumi.Input<boolean>;Specifies whether to trim column values.
property headers
headers?: pulumi.Input<pulumi.Input<string>[]>;A list of strings representing column names.
property quoteSymbol
quoteSymbol?: pulumi.Input<string>;A custom symbol to denote what combines content into a single column value. It must be different from the column delimiter.
interface ClassifierGrokClassifier
interface ClassifierGrokClassifierproperty classification
classification: pulumi.Input<string>;An identifier of the data format that the classifier matches.
property customPatterns
customPatterns?: pulumi.Input<string>;Custom grok patterns used by this classifier.
property grokPattern
grokPattern: pulumi.Input<string>;The grok pattern used by this classifier.
interface ClassifierJsonClassifier
interface ClassifierJsonClassifierproperty jsonPath
jsonPath: pulumi.Input<string>;A JsonPath string defining the JSON data for the classifier to classify. AWS Glue supports a subset of JsonPath, as described in Writing JsonPath Custom Classifiers.
interface ClassifierXmlClassifier
interface ClassifierXmlClassifierproperty classification
classification: pulumi.Input<string>;An identifier of the data format that the classifier matches.
property rowTag
rowTag: pulumi.Input<string>;The XML tag designating the element that contains each record in an XML document being parsed. Note that this cannot identify a self-closing element (closed by />). An empty row element that contains only attributes can be parsed as long as it ends with a closing tag (for example, <row item_a="A" item_b="B"></row> is okay, but <row item_a="A" item_b="B" /> is not).
interface ConnectionPhysicalConnectionRequirements
interface ConnectionPhysicalConnectionRequirementsproperty availabilityZone
availabilityZone?: pulumi.Input<string>;The availability zone of the connection. This field is redundant and implied by subnetId, but is currently an api requirement.
property securityGroupIdLists
securityGroupIdLists?: pulumi.Input<pulumi.Input<string>[]>;The security group ID list used by the connection.
property subnetId
subnetId?: pulumi.Input<string>;The subnet ID used by the connection.
interface CrawlerCatalogTarget
interface CrawlerCatalogTargetproperty databaseName
databaseName: pulumi.Input<string>;The name of the Glue database to be synchronized.
property tables
tables: pulumi.Input<pulumi.Input<string>[]>;A list of catalog tables to be synchronized.
interface CrawlerDynamodbTarget
interface CrawlerDynamodbTargetproperty path
path: pulumi.Input<string>;The name of the DynamoDB table to crawl.
interface CrawlerJdbcTarget
interface CrawlerJdbcTargetproperty connectionName
connectionName: pulumi.Input<string>;The name of the connection to use to connect to the JDBC target.
property exclusions
exclusions?: pulumi.Input<pulumi.Input<string>[]>;A list of glob patterns used to exclude from the crawl.
property path
path: pulumi.Input<string>;The path of the JDBC target.
interface CrawlerS3Target
interface CrawlerS3Targetproperty exclusions
exclusions?: pulumi.Input<pulumi.Input<string>[]>;A list of glob patterns used to exclude from the crawl.
property path
path: pulumi.Input<string>;The name of the DynamoDB table to crawl.
interface CrawlerSchemaChangePolicy
interface CrawlerSchemaChangePolicyproperty deleteBehavior
deleteBehavior?: pulumi.Input<string>;The deletion behavior when the crawler finds a deleted object. Valid values: LOG, DELETE_FROM_DATABASE, or DEPRECATE_IN_DATABASE. Defaults to DEPRECATE_IN_DATABASE.
property updateBehavior
updateBehavior?: pulumi.Input<string>;The update behavior when the crawler finds a changed schema. Valid values: LOG or UPDATE_IN_DATABASE. Defaults to UPDATE_IN_DATABASE.
interface GetScriptDagEdge
interface GetScriptDagEdgeproperty source
source: string;The ID of the node at which the edge starts.
property target
target: string;The ID of the node at which the edge ends.
property targetParameter
targetParameter?: undefined | string;The target of the edge.
interface GetScriptDagNode
interface GetScriptDagNodeproperty args
args: GetScriptDagNodeArg[];Nested configuration an argument or property of a node. Defined below.
property id
id: string;A node identifier that is unique within the node’s graph.
property lineNumber
lineNumber?: undefined | number;The line number of the node.
property nodeType
nodeType: string;The type of node this is.
interface GetScriptDagNodeArg
interface GetScriptDagNodeArgproperty name
name: string;The name of the argument or property.
property param
param?: undefined | false | true;Boolean if the value is used as a parameter. Defaults to false.
property value
value: string;The value of the argument or property.
interface JobCommand
interface JobCommandproperty name
name?: pulumi.Input<string>;The name of the job command. Defaults to glueetl. Use pythonshell for Python Shell Job Type, maxCapacity needs to be set if pythonshell is chosen.
property pythonVersion
pythonVersion?: pulumi.Input<string>;The Python version being used to execute a Python shell job. Allowed values are 2 or 3.
property scriptLocation
scriptLocation: pulumi.Input<string>;Specifies the S3 path to a script that executes a job.
interface JobExecutionProperty
interface JobExecutionPropertyproperty maxConcurrentRuns
maxConcurrentRuns?: pulumi.Input<number>;The maximum number of concurrent runs allowed for a job. The default is 1.
interface JobNotificationProperty
interface JobNotificationPropertyproperty notifyDelayAfter
notifyDelayAfter?: pulumi.Input<number>;After a job run starts, the number of minutes to wait before sending a job run delay notification.
interface SecurityConfigurationEncryptionConfiguration
interface SecurityConfigurationEncryptionConfigurationproperty cloudwatchEncryption
cloudwatchEncryption: pulumi.Input<SecurityConfigurationEncryptionConfigurationCloudwatchEncryption>;property jobBookmarksEncryption
jobBookmarksEncryption: pulumi.Input<SecurityConfigurationEncryptionConfigurationJobBookmarksEncryption>;property s3Encryption
s3Encryption: pulumi.Input<SecurityConfigurationEncryptionConfigurationS3Encryption>;A s3Encryption block as described below, which contains encryption configuration for S3 data.
interface SecurityConfigurationEncryptionConfigurationCloudwatchEncryption
interface SecurityConfigurationEncryptionConfigurationCloudwatchEncryptionproperty cloudwatchEncryptionMode
cloudwatchEncryptionMode?: pulumi.Input<string>;Encryption mode to use for CloudWatch data. Valid values: DISABLED, SSE-KMS. Default value: DISABLED.
property kmsKeyArn
kmsKeyArn?: pulumi.Input<string>;Amazon Resource Name (ARN) of the KMS key to be used to encrypt the data.
interface SecurityConfigurationEncryptionConfigurationJobBookmarksEncryption
interface SecurityConfigurationEncryptionConfigurationJobBookmarksEncryptionproperty jobBookmarksEncryptionMode
jobBookmarksEncryptionMode?: pulumi.Input<string>;Encryption mode to use for job bookmarks data. Valid values: CSE-KMS, DISABLED. Default value: DISABLED.
property kmsKeyArn
kmsKeyArn?: pulumi.Input<string>;Amazon Resource Name (ARN) of the KMS key to be used to encrypt the data.
interface SecurityConfigurationEncryptionConfigurationS3Encryption
interface SecurityConfigurationEncryptionConfigurationS3Encryptionproperty kmsKeyArn
kmsKeyArn?: pulumi.Input<string>;Amazon Resource Name (ARN) of the KMS key to be used to encrypt the data.
property s3EncryptionMode
s3EncryptionMode?: pulumi.Input<string>;Encryption mode to use for S3 data. Valid values: DISABLED, SSE-KMS, SSE-S3. Default value: DISABLED.
interface TriggerAction
interface TriggerActionproperty arguments
arguments?: pulumi.Input<{[key: string]: any}>;Arguments to be passed to the job. You can specify arguments here that your own job-execution script consumes, as well as arguments that AWS Glue itself consumes.
property crawlerName
crawlerName?: pulumi.Input<string>;The name of the crawler to be executed. Conflicts with jobName.
property jobName
jobName?: pulumi.Input<string>;The name of a job to be executed. Conflicts with crawlerName.
property timeout
timeout?: pulumi.Input<number>;The job run timeout in minutes. It overrides the timeout value of the job.
interface TriggerPredicate
interface TriggerPredicateproperty conditions
conditions: pulumi.Input<pulumi.Input<TriggerPredicateCondition>[]>;A list of the conditions that determine when the trigger will fire. Defined below.
property logical
logical?: pulumi.Input<string>;How to handle multiple conditions. Defaults to AND. Valid values are AND or ANY.
interface TriggerPredicateCondition
interface TriggerPredicateConditionproperty crawlState
crawlState?: pulumi.Input<string>;The condition crawl state. Currently, the values supported are RUNNING, SUCCEEDED, CANCELLED, and FAILED. If this is specified, crawlerName must also be specified. Conflicts with state.
property crawlerName
crawlerName?: pulumi.Input<string>;The name of the crawler to watch. If this is specified, crawlState must also be specified. Conflicts with jobName.
property jobName
jobName?: pulumi.Input<string>;The name of the job to watch. If this is specified, state must also be specified. Conflicts with crawlerName.
property logicalOperator
logicalOperator?: pulumi.Input<string>;A logical operator. Defaults to EQUALS.
property state
state?: pulumi.Input<string>;The condition job state. Currently, the values supported are SUCCEEDED, STOPPED, TIMEOUT and FAILED. If this is specified, jobName must also be specified. Conflicts with crawlerState.
namespace iam
interface GetPolicyDocumentStatement
interface GetPolicyDocumentStatementproperty actions
actions?: string[];A list of actions that this statement either allows
or denies. For example, ["ec2:RunInstances", "s3:*"].
property conditions
conditions?: GetPolicyDocumentStatementCondition[];A nested configuration block (described below) that defines a further, possibly-service-specific condition that constrains whether this statement applies.
property effect
effect?: undefined | string;Either “Allow” or “Deny”, to specify whether this statement allows or denies the given actions. The default is “Allow”.
property notActions
notActions?: string[];A list of actions that this statement does not apply to. Used to apply a policy statement to all actions except those listed.
property notPrincipals
notPrincipals?: GetPolicyDocumentStatementNotPrincipal[];Like principals except gives resources that
the statement does not apply to.
property notResources
notResources?: string[];A list of resource ARNs that this statement does not apply to. Used to apply a policy statement to all resources except those listed.
property principals
principals?: GetPolicyDocumentStatementPrincipal[];A nested configuration block (described below) specifying a resource (or resource pattern) to which this statement applies.
property resources
resources?: string[];A list of resource ARNs that this statement applies to. This is required by AWS if used for an IAM policy.
property sid
sid?: undefined | string;An ID for the policy statement.
interface GetPolicyDocumentStatementCondition
interface GetPolicyDocumentStatementConditionproperty test
test: string;The name of the IAM condition operator to evaluate.
property values
values: string[];The values to evaluate the condition against. If multiple values are provided, the condition matches if at least one of them applies. (That is, the tests are combined with the “OR” boolean operation.)
property variable
variable: string;The name of a
Context Variable
to apply the condition to. Context variables may either be standard AWS
variables starting with aws:, or service-specific variables prefixed with
the service name.
interface GetPolicyDocumentStatementNotPrincipal
interface GetPolicyDocumentStatementNotPrincipalproperty identifiers
identifiers: string[];List of identifiers for principals. When type
is “AWS”, these are IAM user or role ARNs. When type is “Service”, these are AWS Service roles e.g. lambda.amazonaws.com. When type is “Federated”, these are web identity users or SAML provider ARNs.
property type
type: string;The type of principal. For AWS ARNs this is “AWS”. For AWS services (e.g. Lambda), this is “Service”. For Federated access the type is “Federated”.
interface GetPolicyDocumentStatementPrincipal
interface GetPolicyDocumentStatementPrincipalproperty identifiers
identifiers: string[];List of identifiers for principals. When type
is “AWS”, these are IAM user or role ARNs. When type is “Service”, these are AWS Service roles e.g. lambda.amazonaws.com. When type is “Federated”, these are web identity users or SAML provider ARNs.
property type
type: string;The type of principal. For AWS ARNs this is “AWS”. For AWS services (e.g. Lambda), this is “Service”. For Federated access the type is “Federated”.
namespace iot
interface ThingTypeProperties
interface ThingTypePropertiesproperty description
description?: pulumi.Input<string>;The description of the thing type.
property searchableAttributes
searchableAttributes?: pulumi.Input<pulumi.Input<string>[]>;A list of searchable thing attribute names.
interface TopicRuleCloudwatchAlarm
interface TopicRuleCloudwatchAlarmproperty alarmName
alarmName: pulumi.Input<string>;The CloudWatch alarm name.
property roleArn
roleArn: pulumi.Input<string>;The IAM role ARN that allows access to the CloudWatch alarm.
property stateReason
stateReason: pulumi.Input<string>;The reason for the alarm change.
property stateValue
stateValue: pulumi.Input<string>;The value of the alarm state. Acceptable values are: OK, ALARM, INSUFFICIENT_DATA.
interface TopicRuleCloudwatchMetric
interface TopicRuleCloudwatchMetricproperty metricName
metricName: pulumi.Input<string>;The CloudWatch metric name.
property metricNamespace
metricNamespace: pulumi.Input<string>;The CloudWatch metric namespace name.
property metricTimestamp
metricTimestamp?: pulumi.Input<string>;An optional Unix timestamp (http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/cloudwatch_concepts.html#about_timestamp).
property metricUnit
metricUnit: pulumi.Input<string>;The metric unit (supported units can be found here: http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/cloudwatch_concepts.html#Unit)
property metricValue
metricValue: pulumi.Input<string>;The CloudWatch metric value.
property roleArn
roleArn: pulumi.Input<string>;The IAM role ARN that allows access to the CloudWatch metric.
interface TopicRuleDynamodb
interface TopicRuleDynamodbproperty hashKeyField
hashKeyField: pulumi.Input<string>;The hash key name.
property hashKeyType
hashKeyType?: pulumi.Input<string>;The hash key type. Valid values are “STRING” or “NUMBER”.
property hashKeyValue
hashKeyValue: pulumi.Input<string>;The hash key value.
property operation
operation?: pulumi.Input<string>;The operation. Valid values are “INSERT”, “UPDATE”, or “DELETE”.
property payloadField
payloadField?: pulumi.Input<string>;The action payload.
property rangeKeyField
rangeKeyField?: pulumi.Input<string>;The range key name.
property rangeKeyType
rangeKeyType?: pulumi.Input<string>;The range key type. Valid values are “STRING” or “NUMBER”.
property rangeKeyValue
rangeKeyValue?: pulumi.Input<string>;The range key value.
property roleArn
roleArn: pulumi.Input<string>;The ARN of the IAM role that grants access to the DynamoDB table.
property tableName
tableName: pulumi.Input<string>;The name of the DynamoDB table.
interface TopicRuleDynamodbv2
interface TopicRuleDynamodbv2property putItem
putItem?: pulumi.Input<TopicRuleDynamodbv2PutItem>;Configuration block with DynamoDB Table to which the message will be written. Nested arguments below.
property roleArn
roleArn: pulumi.Input<string>;The IAM role ARN that allows access to the CloudWatch alarm.
interface TopicRuleDynamodbv2PutItem
interface TopicRuleDynamodbv2PutItemproperty tableName
tableName: pulumi.Input<string>;The name of the DynamoDB table.
interface TopicRuleElasticsearch
interface TopicRuleElasticsearchproperty endpoint
endpoint: pulumi.Input<string>;The endpoint of your Elasticsearch domain.
property id
id: pulumi.Input<string>;The unique identifier for the document you are storing.
property index
index: pulumi.Input<string>;The Elasticsearch index where you want to store your data.
property roleArn
roleArn: pulumi.Input<string>;The IAM role ARN that has access to Elasticsearch.
property type
type: pulumi.Input<string>;The type of document you are storing.
interface TopicRuleFirehose
interface TopicRuleFirehoseproperty deliveryStreamName
deliveryStreamName: pulumi.Input<string>;The delivery stream name.
property roleArn
roleArn: pulumi.Input<string>;The IAM role ARN that grants access to the Amazon Kinesis Firehose stream.
property separator
separator?: pulumi.Input<string>;A character separator that is used to separate records written to the Firehose stream. Valid values are: ‘\n’ (newline), ‘\t’ (tab), ‘\r\n’ (Windows newline), ‘,’ (comma).
interface TopicRuleIotAnalytic
interface TopicRuleIotAnalyticproperty channelName
channelName: pulumi.Input<string>;Name of AWS IOT Analytics channel.
property roleArn
roleArn: pulumi.Input<string>;The ARN of the IAM role that grants access.
interface TopicRuleIotEvent
interface TopicRuleIotEventproperty inputName
inputName: pulumi.Input<string>;The name of the AWS IoT Events input.
property messageId
messageId?: pulumi.Input<string>;Use this to ensure that only one input (message) with a given messageId is processed by an AWS IoT Events detector.
property roleArn
roleArn: pulumi.Input<string>;The ARN of the IAM role that grants access.
interface TopicRuleKinesis
interface TopicRuleKinesisproperty partitionKey
partitionKey?: pulumi.Input<string>;The partition key.
property roleArn
roleArn: pulumi.Input<string>;The ARN of the IAM role that grants access to the Amazon Kinesis stream.
property streamName
streamName: pulumi.Input<string>;The name of the Amazon Kinesis stream.
interface TopicRuleLambda
interface TopicRuleLambdaproperty functionArn
functionArn: pulumi.Input<string>;The ARN of the Lambda function.
interface TopicRuleRepublish
interface TopicRuleRepublishproperty qos
qos?: pulumi.Input<number>;The Quality of Service (QoS) level to use when republishing messages. Valid values are 0 or 1. The default value is 0.
property roleArn
roleArn: pulumi.Input<string>;The ARN of the IAM role that grants access.
property topic
topic: pulumi.Input<string>;The name of the MQTT topic the message should be republished to.
interface TopicRuleS3
interface TopicRuleS3property bucketName
bucketName: pulumi.Input<string>;The Amazon S3 bucket name.
property key
key: pulumi.Input<string>;The object key.
property roleArn
roleArn: pulumi.Input<string>;The IAM role ARN that allows access to the CloudWatch alarm.
interface TopicRuleSns
interface TopicRuleSnsproperty messageFormat
messageFormat?: pulumi.Input<string>;The message format of the message to publish. Accepted values are “JSON” and “RAW”.
property roleArn
roleArn: pulumi.Input<string>;The ARN of the IAM role that grants access.
property targetArn
targetArn: pulumi.Input<string>;The ARN of the SNS topic.
interface TopicRuleSqs
interface TopicRuleSqsproperty queueUrl
queueUrl: pulumi.Input<string>;The URL of the Amazon SQS queue.
property roleArn
roleArn: pulumi.Input<string>;The ARN of the IAM role that grants access.
property useBase64
useBase64: pulumi.Input<boolean>;Specifies whether to use Base64 encoding.
interface TopicRuleStepFunction
interface TopicRuleStepFunctionproperty executionNamePrefix
executionNamePrefix?: pulumi.Input<string>;The prefix used to generate, along with a UUID, the unique state machine execution name.
property roleArn
roleArn: pulumi.Input<string>;The ARN of the IAM role that grants access to start execution of the state machine.
property stateMachineName
stateMachineName: pulumi.Input<string>;The name of the Step Functions state machine whose execution will be started.
namespace kinesis
interface AnalyticsApplicationCloudwatchLoggingOptions
interface AnalyticsApplicationCloudwatchLoggingOptionsproperty id
id?: pulumi.Input<string>;The ARN of the Kinesis Analytics Application.
property logStreamArn
logStreamArn: pulumi.Input<string>;The ARN of the CloudWatch Log Stream.
property roleArn
roleArn: pulumi.Input<string>;The ARN of the IAM Role used to send application messages.
interface AnalyticsApplicationInputs
interface AnalyticsApplicationInputsproperty id
id?: pulumi.Input<string>;The ARN of the Kinesis Analytics Application.
property kinesisFirehose
kinesisFirehose?: pulumi.Input<AnalyticsApplicationInputsKinesisFirehose>;The Kinesis Firehose configuration for the streaming source. Conflicts with kinesisStream.
See Kinesis Firehose below for more details.
property kinesisStream
kinesisStream?: pulumi.Input<AnalyticsApplicationInputsKinesisStream>;The Kinesis Stream configuration for the streaming source. Conflicts with kinesisFirehose.
See Kinesis Stream below for more details.
property namePrefix
namePrefix: pulumi.Input<string>;The Name Prefix to use when creating an in-application stream.
property parallelism
parallelism?: pulumi.Input<AnalyticsApplicationInputsParallelism>;The number of Parallel in-application streams to create. See Parallelism below for more details.
property processingConfiguration
processingConfiguration?: pulumi.Input<AnalyticsApplicationInputsProcessingConfiguration>;The Processing Configuration to transform records as they are received from the stream. See Processing Configuration below for more details.
property schema
schema: pulumi.Input<AnalyticsApplicationInputsSchema>;The Schema format of the data in the streaming source. See Source Schema below for more details.
property startingPositionConfigurations
startingPositionConfigurations?: pulumi.Input<pulumi.Input<AnalyticsApplicationInputsStartingPositionConfiguration>[]>;property streamNames
streamNames?: pulumi.Input<pulumi.Input<string>[]>;interface AnalyticsApplicationInputsKinesisFirehose
interface AnalyticsApplicationInputsKinesisFirehoseproperty resourceArn
resourceArn: pulumi.Input<string>;The ARN of the Kinesis Firehose delivery stream.
property roleArn
roleArn: pulumi.Input<string>;The ARN of the IAM Role used to access the stream.
interface AnalyticsApplicationInputsKinesisStream
interface AnalyticsApplicationInputsKinesisStreamproperty resourceArn
resourceArn: pulumi.Input<string>;The ARN of the Kinesis Stream.
property roleArn
roleArn: pulumi.Input<string>;The ARN of the IAM Role used to access the stream.
interface AnalyticsApplicationInputsParallelism
interface AnalyticsApplicationInputsParallelismproperty count
count: pulumi.Input<number>;The Count of streams.
interface AnalyticsApplicationInputsProcessingConfiguration
interface AnalyticsApplicationInputsProcessingConfigurationproperty lambda
lambda: pulumi.Input<AnalyticsApplicationInputsProcessingConfigurationLambda>;The Lambda function configuration. See Lambda below for more details.
interface AnalyticsApplicationInputsProcessingConfigurationLambda
interface AnalyticsApplicationInputsProcessingConfigurationLambdaproperty resourceArn
resourceArn: pulumi.Input<string>;The ARN of the Lambda function.
property roleArn
roleArn: pulumi.Input<string>;The ARN of the IAM Role used to access the Lambda function.
interface AnalyticsApplicationInputsSchema
interface AnalyticsApplicationInputsSchemaproperty recordColumns
recordColumns: pulumi.Input<pulumi.Input<AnalyticsApplicationInputsSchemaRecordColumn>[]>;The Record Column mapping for the streaming source data element. See Record Columns below for more details.
property recordEncoding
recordEncoding?: pulumi.Input<string>;The Encoding of the record in the streaming source.
property recordFormat
recordFormat: pulumi.Input<AnalyticsApplicationInputsSchemaRecordFormat>;The Record Format and mapping information to schematize a record. See Record Format below for more details.
interface AnalyticsApplicationInputsSchemaRecordColumn
interface AnalyticsApplicationInputsSchemaRecordColumnproperty mapping
mapping?: pulumi.Input<string>;The Mapping reference to the data element.
property name
name: pulumi.Input<string>;Name of the column.
property sqlType
sqlType: pulumi.Input<string>;The SQL Type of the column.
interface AnalyticsApplicationInputsSchemaRecordFormat
interface AnalyticsApplicationInputsSchemaRecordFormatproperty mappingParameters
mappingParameters?: pulumi.Input<AnalyticsApplicationInputsSchemaRecordFormatMappingParameters>;The Mapping Information for the record format. See Mapping Parameters below for more details.
property recordFormatType
recordFormatType?: pulumi.Input<string>;The type of Record Format. Can be CSV or JSON.
interface AnalyticsApplicationInputsSchemaRecordFormatMappingParameters
interface AnalyticsApplicationInputsSchemaRecordFormatMappingParametersproperty csv
csv?: pulumi.Input<AnalyticsApplicationInputsSchemaRecordFormatMappingParametersCsv>;Mapping information when the record format uses delimiters. See CSV Mapping Parameters below for more details.
property json
json?: pulumi.Input<AnalyticsApplicationInputsSchemaRecordFormatMappingParametersJson>;Mapping information when JSON is the record format on the streaming source. See JSON Mapping Parameters below for more details.
interface AnalyticsApplicationInputsSchemaRecordFormatMappingParametersCsv
interface AnalyticsApplicationInputsSchemaRecordFormatMappingParametersCsvproperty recordColumnDelimiter
recordColumnDelimiter: pulumi.Input<string>;The Column Delimiter.
property recordRowDelimiter
recordRowDelimiter: pulumi.Input<string>;The Row Delimiter.
interface AnalyticsApplicationInputsSchemaRecordFormatMappingParametersJson
interface AnalyticsApplicationInputsSchemaRecordFormatMappingParametersJsonproperty recordRowPath
recordRowPath: pulumi.Input<string>;Path to the top-level parent that contains the records.
interface AnalyticsApplicationInputsStartingPositionConfiguration
interface AnalyticsApplicationInputsStartingPositionConfigurationproperty startingPosition
startingPosition?: pulumi.Input<string>;interface AnalyticsApplicationOutput
interface AnalyticsApplicationOutputproperty id
id?: pulumi.Input<string>;The ARN of the Kinesis Analytics Application.
property kinesisFirehose
kinesisFirehose?: pulumi.Input<AnalyticsApplicationOutputKinesisFirehose>;The Kinesis Firehose configuration for the destination stream. Conflicts with kinesisStream.
See Kinesis Firehose below for more details.
property kinesisStream
kinesisStream?: pulumi.Input<AnalyticsApplicationOutputKinesisStream>;The Kinesis Stream configuration for the destination stream. Conflicts with kinesisFirehose.
See Kinesis Stream below for more details.
property lambda
lambda?: pulumi.Input<AnalyticsApplicationOutputLambda>;The Lambda function destination. See Lambda below for more details.
property name
name: pulumi.Input<string>;The Name of the in-application stream.
property schema
schema: pulumi.Input<AnalyticsApplicationOutputSchema>;The Schema format of the data written to the destination. See Destination Schema below for more details.
interface AnalyticsApplicationOutputKinesisFirehose
interface AnalyticsApplicationOutputKinesisFirehoseproperty resourceArn
resourceArn: pulumi.Input<string>;The ARN of the Kinesis Firehose delivery stream.
property roleArn
roleArn: pulumi.Input<string>;The ARN of the IAM Role used to access the stream.
interface AnalyticsApplicationOutputKinesisStream
interface AnalyticsApplicationOutputKinesisStreamproperty resourceArn
resourceArn: pulumi.Input<string>;The ARN of the Kinesis Stream.
property roleArn
roleArn: pulumi.Input<string>;The ARN of the IAM Role used to access the stream.
interface AnalyticsApplicationOutputLambda
interface AnalyticsApplicationOutputLambdaproperty resourceArn
resourceArn: pulumi.Input<string>;The ARN of the Lambda function.
property roleArn
roleArn: pulumi.Input<string>;The ARN of the IAM Role used to access the Lambda function.
interface AnalyticsApplicationOutputSchema
interface AnalyticsApplicationOutputSchemaproperty recordFormatType
recordFormatType?: pulumi.Input<string>;The Format Type of the records on the output stream. Can be CSV or JSON.
interface AnalyticsApplicationReferenceDataSources
interface AnalyticsApplicationReferenceDataSourcesproperty id
id?: pulumi.Input<string>;The ARN of the Kinesis Analytics Application.
property s3
s3: pulumi.Input<AnalyticsApplicationReferenceDataSourcesS3>;The S3 configuration for the reference data source. See S3 Reference below for more details.
property schema
schema: pulumi.Input<AnalyticsApplicationReferenceDataSourcesSchema>;The Schema format of the data in the streaming source. See Source Schema below for more details.
property tableName
tableName: pulumi.Input<string>;The in-application Table Name.
interface AnalyticsApplicationReferenceDataSourcesS3
interface AnalyticsApplicationReferenceDataSourcesS3property bucketArn
bucketArn: pulumi.Input<string>;The S3 Bucket ARN.
property fileKey
fileKey: pulumi.Input<string>;The File Key name containing reference data.
property roleArn
roleArn: pulumi.Input<string>;The ARN of the IAM Role used to send application messages.
interface AnalyticsApplicationReferenceDataSourcesSchema
interface AnalyticsApplicationReferenceDataSourcesSchemaproperty recordColumns
recordColumns: pulumi.Input<pulumi.Input<AnalyticsApplicationReferenceDataSourcesSchemaRecordColumn>[]>;The Record Column mapping for the streaming source data element. See Record Columns below for more details.
property recordEncoding
recordEncoding?: pulumi.Input<string>;The Encoding of the record in the streaming source.
property recordFormat
recordFormat: pulumi.Input<AnalyticsApplicationReferenceDataSourcesSchemaRecordFormat>;The Record Format and mapping information to schematize a record. See Record Format below for more details.
interface AnalyticsApplicationReferenceDataSourcesSchemaRecordColumn
interface AnalyticsApplicationReferenceDataSourcesSchemaRecordColumnproperty mapping
mapping?: pulumi.Input<string>;The Mapping reference to the data element.
property name
name: pulumi.Input<string>;Name of the column.
property sqlType
sqlType: pulumi.Input<string>;The SQL Type of the column.
interface AnalyticsApplicationReferenceDataSourcesSchemaRecordFormat
interface AnalyticsApplicationReferenceDataSourcesSchemaRecordFormatproperty mappingParameters
mappingParameters?: pulumi.Input<AnalyticsApplicationReferenceDataSourcesSchemaRecordFormatMappingParameters>;The Mapping Information for the record format. See Mapping Parameters below for more details.
property recordFormatType
recordFormatType?: pulumi.Input<string>;The type of Record Format. Can be CSV or JSON.
interface AnalyticsApplicationReferenceDataSourcesSchemaRecordFormatMappingParameters
interface AnalyticsApplicationReferenceDataSourcesSchemaRecordFormatMappingParametersproperty csv
csv?: pulumi.Input<AnalyticsApplicationReferenceDataSourcesSchemaRecordFormatMappingParametersCsv>;Mapping information when the record format uses delimiters. See CSV Mapping Parameters below for more details.
property json
json?: pulumi.Input<AnalyticsApplicationReferenceDataSourcesSchemaRecordFormatMappingParametersJson>;Mapping information when JSON is the record format on the streaming source. See JSON Mapping Parameters below for more details.
interface AnalyticsApplicationReferenceDataSourcesSchemaRecordFormatMappingParametersCsv
interface AnalyticsApplicationReferenceDataSourcesSchemaRecordFormatMappingParametersCsvproperty recordColumnDelimiter
recordColumnDelimiter: pulumi.Input<string>;The Column Delimiter.
property recordRowDelimiter
recordRowDelimiter: pulumi.Input<string>;The Row Delimiter.
interface AnalyticsApplicationReferenceDataSourcesSchemaRecordFormatMappingParametersJson
interface AnalyticsApplicationReferenceDataSourcesSchemaRecordFormatMappingParametersJsonproperty recordRowPath
recordRowPath: pulumi.Input<string>;Path to the top-level parent that contains the records.
interface FirehoseDeliveryStreamElasticsearchConfiguration
interface FirehoseDeliveryStreamElasticsearchConfigurationproperty bufferingInterval
bufferingInterval?: pulumi.Input<number>;Buffer incoming data for the specified period of time, in seconds between 60 to 900, before delivering it to the destination. The default value is 300s.
property bufferingSize
bufferingSize?: pulumi.Input<number>;Buffer incoming data to the specified size, in MBs between 1 to 100, before delivering it to the destination. The default value is 5MB.
property cloudwatchLoggingOptions
cloudwatchLoggingOptions?: pulumi.Input<FirehoseDeliveryStreamElasticsearchConfigurationCloudwatchLoggingOptions>;The CloudWatch Logging Options for the delivery stream. More details are given below
property domainArn
domainArn: pulumi.Input<string>;The ARN of the Amazon ES domain. The IAM role must have permission for DescribeElasticsearchDomain, DescribeElasticsearchDomains, and DescribeElasticsearchDomainConfig after assuming RoleARN. The pattern needs to be arn:.*.
property indexName
indexName: pulumi.Input<string>;The Elasticsearch index name.
property indexRotationPeriod
indexRotationPeriod?: pulumi.Input<string>;The Elasticsearch index rotation period. Index rotation appends a timestamp to the IndexName to facilitate expiration of old data. Valid values are NoRotation, OneHour, OneDay, OneWeek, and OneMonth. The default value is OneDay.
property processingConfiguration
processingConfiguration?: pulumi.Input<FirehoseDeliveryStreamElasticsearchConfigurationProcessingConfiguration>;The data processing configuration. More details are given below.
property retryDuration
retryDuration?: pulumi.Input<number>;After an initial failure to deliver to Amazon Elasticsearch, the total amount of time, in seconds between 0 to 7200, during which Firehose re-attempts delivery (including the first attempt). After this time has elapsed, the failed documents are written to Amazon S3. The default value is 300s. There will be no retry if the value is 0.
property roleArn
roleArn: pulumi.Input<string>;The ARN of the IAM role to be assumed by Firehose for calling the Amazon ES Configuration API and for indexing documents. The pattern needs to be arn:.*.
property s3BackupMode
s3BackupMode?: pulumi.Input<string>;Defines how documents should be delivered to Amazon S3. Valid values are FailedDocumentsOnly and AllDocuments. Default value is FailedDocumentsOnly.
property typeName
typeName?: pulumi.Input<string>;The Elasticsearch type name with maximum length of 100 characters.
interface FirehoseDeliveryStreamElasticsearchConfigurationCloudwatchLoggingOptions
interface FirehoseDeliveryStreamElasticsearchConfigurationCloudwatchLoggingOptionsproperty enabled
enabled?: pulumi.Input<boolean>;Enables or disables the logging. Defaults to false.
property logGroupName
logGroupName?: pulumi.Input<string>;The CloudWatch group name for logging. This value is required if enabled is true.
property logStreamName
logStreamName?: pulumi.Input<string>;The CloudWatch log stream name for logging. This value is required if enabled is true.
interface FirehoseDeliveryStreamElasticsearchConfigurationProcessingConfiguration
interface FirehoseDeliveryStreamElasticsearchConfigurationProcessingConfigurationproperty enabled
enabled?: pulumi.Input<boolean>;Enables or disables data processing.
property processors
processors?: pulumi.Input<pulumi.Input<FirehoseDeliveryStreamElasticsearchConfigurationProcessingConfigurationProcessor>[]>;Array of data processors. More details are given below
interface FirehoseDeliveryStreamElasticsearchConfigurationProcessingConfigurationProcessor
interface FirehoseDeliveryStreamElasticsearchConfigurationProcessingConfigurationProcessorproperty parameters
parameters?: pulumi.Input<pulumi.Input<FirehoseDeliveryStreamElasticsearchConfigurationProcessingConfigurationProcessorParameter>[]>;Array of processor parameters. More details are given below
property type
type: pulumi.Input<string>;The type of processor. Valid Values: Lambda
interface FirehoseDeliveryStreamElasticsearchConfigurationProcessingConfigurationProcessorParameter
interface FirehoseDeliveryStreamElasticsearchConfigurationProcessingConfigurationProcessorParameterproperty parameterName
parameterName: pulumi.Input<string>;Parameter name. Valid Values: LambdaArn, NumberOfRetries, RoleArn, BufferSizeInMBs, BufferIntervalInSeconds
property parameterValue
parameterValue: pulumi.Input<string>;Parameter value. Must be between 1 and 512 length (inclusive). When providing a Lambda ARN, you should specify the resource version as well.
interface FirehoseDeliveryStreamExtendedS3Configuration
interface FirehoseDeliveryStreamExtendedS3Configurationproperty bucketArn
bucketArn: pulumi.Input<string>;The ARN of the S3 bucket
property bufferInterval
bufferInterval?: pulumi.Input<number>;Buffer incoming data for the specified period of time, in seconds, before delivering it to the destination. The default value is 300.
property bufferSize
bufferSize?: pulumi.Input<number>;Buffer incoming data to the specified size, in MBs, before delivering it to the destination. The default value is 5. We recommend setting SizeInMBs to a value greater than the amount of data you typically ingest into the delivery stream in 10 seconds. For example, if you typically ingest data at 1 MB/sec set SizeInMBs to be 10 MB or higher.
property cloudwatchLoggingOptions
cloudwatchLoggingOptions?: pulumi.Input<FirehoseDeliveryStreamExtendedS3ConfigurationCloudwatchLoggingOptions>;The CloudWatch Logging Options for the delivery stream. More details are given below
property compressionFormat
compressionFormat?: pulumi.Input<string>;The compression format. If no value is specified, the default is UNCOMPRESSED. Other supported values are GZIP, ZIP & Snappy. If the destination is redshift you cannot use ZIP or Snappy.
property dataFormatConversionConfiguration
dataFormatConversionConfiguration?: pulumi.Input<FirehoseDeliveryStreamExtendedS3ConfigurationDataFormatConversionConfiguration>;Nested argument for the serializer, deserializer, and schema for converting data from the JSON format to the Parquet or ORC format before writing it to Amazon S3. More details given below.
property errorOutputPrefix
errorOutputPrefix?: pulumi.Input<string>;Prefix added to failed records before writing them to S3. This prefix appears immediately following the bucket name.
property kmsKeyArn
kmsKeyArn?: pulumi.Input<string>;Specifies the KMS key ARN the stream will use to encrypt data. If not set, no encryption will be used.
property prefix
prefix?: pulumi.Input<string>;The “YYYY/MM/DD/HH” time format prefix is automatically used for delivered S3 files. You can specify an extra prefix to be added in front of the time format prefix. Note that if the prefix ends with a slash, it appears as a folder in the S3 bucket
property processingConfiguration
processingConfiguration?: pulumi.Input<FirehoseDeliveryStreamExtendedS3ConfigurationProcessingConfiguration>;The data processing configuration. More details are given below.
property roleArn
roleArn: pulumi.Input<string>;The role that Kinesis Data Firehose can use to access AWS Glue. This role must be in the same account you use for Kinesis Data Firehose. Cross-account roles aren’t allowed.
property s3BackupConfiguration
s3BackupConfiguration?: pulumi.Input<FirehoseDeliveryStreamExtendedS3ConfigurationS3BackupConfiguration>;The configuration for backup in Amazon S3. Required if s3BackupMode is Enabled. Supports the same fields as s3Configuration object.
property s3BackupMode
s3BackupMode?: pulumi.Input<string>;The Amazon S3 backup mode. Valid values are Disabled and Enabled. Default value is Disabled.
interface FirehoseDeliveryStreamExtendedS3ConfigurationCloudwatchLoggingOptions
interface FirehoseDeliveryStreamExtendedS3ConfigurationCloudwatchLoggingOptionsproperty enabled
enabled?: pulumi.Input<boolean>;Enables or disables the logging. Defaults to false.
property logGroupName
logGroupName?: pulumi.Input<string>;The CloudWatch group name for logging. This value is required if enabled is true.
property logStreamName
logStreamName?: pulumi.Input<string>;The CloudWatch log stream name for logging. This value is required if enabled is true.
interface FirehoseDeliveryStreamExtendedS3ConfigurationDataFormatConversionConfiguration
interface FirehoseDeliveryStreamExtendedS3ConfigurationDataFormatConversionConfigurationproperty enabled
enabled?: pulumi.Input<boolean>;Defaults to true. Set it to false if you want to disable format conversion while preserving the configuration details.
property inputFormatConfiguration
inputFormatConfiguration: pulumi.Input<FirehoseDeliveryStreamExtendedS3ConfigurationDataFormatConversionConfigurationInputFormatConfiguration>;Nested argument that specifies the deserializer that you want Kinesis Data Firehose to use to convert the format of your data from JSON. More details below.
property outputFormatConfiguration
outputFormatConfiguration: pulumi.Input<FirehoseDeliveryStreamExtendedS3ConfigurationDataFormatConversionConfigurationOutputFormatConfiguration>;Nested argument that specifies the serializer that you want Kinesis Data Firehose to use to convert the format of your data to the Parquet or ORC format. More details below.
property schemaConfiguration
schemaConfiguration: pulumi.Input<FirehoseDeliveryStreamExtendedS3ConfigurationDataFormatConversionConfigurationSchemaConfiguration>;Nested argument that specifies the AWS Glue Data Catalog table that contains the column information. More details below.
interface FirehoseDeliveryStreamExtendedS3ConfigurationDataFormatConversionConfigurationInputFormatConfiguration
interface FirehoseDeliveryStreamExtendedS3ConfigurationDataFormatConversionConfigurationInputFormatConfigurationproperty deserializer
deserializer: pulumi.Input<FirehoseDeliveryStreamExtendedS3ConfigurationDataFormatConversionConfigurationInputFormatConfigurationDeserializer>;Nested argument that specifies which deserializer to use. You can choose either the Apache Hive JSON SerDe or the OpenX JSON SerDe. More details below.
interface FirehoseDeliveryStreamExtendedS3ConfigurationDataFormatConversionConfigurationInputFormatConfigurationDeserializer
interface FirehoseDeliveryStreamExtendedS3ConfigurationDataFormatConversionConfigurationInputFormatConfigurationDeserializerproperty hiveJsonSerDe
hiveJsonSerDe?: pulumi.Input<FirehoseDeliveryStreamExtendedS3ConfigurationDataFormatConversionConfigurationInputFormatConfigurationDeserializerHiveJsonSerDe>;Nested argument that specifies the native Hive / HCatalog JsonSerDe. More details below.
property openXJsonSerDe
openXJsonSerDe?: pulumi.Input<FirehoseDeliveryStreamExtendedS3ConfigurationDataFormatConversionConfigurationInputFormatConfigurationDeserializerOpenXJsonSerDe>;Nested argument that specifies the OpenX SerDe. More details below.
interface FirehoseDeliveryStreamExtendedS3ConfigurationDataFormatConversionConfigurationInputFormatConfigurationDeserializerHiveJsonSerDe
interface FirehoseDeliveryStreamExtendedS3ConfigurationDataFormatConversionConfigurationInputFormatConfigurationDeserializerHiveJsonSerDeproperty timestampFormats
timestampFormats?: pulumi.Input<pulumi.Input<string>[]>;A list of how you want Kinesis Data Firehose to parse the date and time stamps that may be present in your input data JSON. To specify these format strings, follow the pattern syntax of JodaTime’s DateTimeFormat format strings. For more information, see Class DateTimeFormat. You can also use the special value millis to parse time stamps in epoch milliseconds. If you don’t specify a format, Kinesis Data Firehose uses java.sql.Timestamp::valueOf by default.
interface FirehoseDeliveryStreamExtendedS3ConfigurationDataFormatConversionConfigurationInputFormatConfigurationDeserializerOpenXJsonSerDe
interface FirehoseDeliveryStreamExtendedS3ConfigurationDataFormatConversionConfigurationInputFormatConfigurationDeserializerOpenXJsonSerDeproperty caseInsensitive
caseInsensitive?: pulumi.Input<boolean>;When set to true, which is the default, Kinesis Data Firehose converts JSON keys to lowercase before deserializing them.
property columnToJsonKeyMappings
columnToJsonKeyMappings?: pulumi.Input<{[key: string]: pulumi.Input<string>}>;A map of column names to JSON keys that aren’t identical to the column names. This is useful when the JSON contains keys that are Hive keywords. For example, timestamp is a Hive keyword. If you have a JSON key named timestamp, set this parameter to { ts = "timestamp" } to map this key to a column named ts.
property convertDotsInJsonKeysToUnderscores
convertDotsInJsonKeysToUnderscores?: pulumi.Input<boolean>;When set to true, specifies that the names of the keys include dots and that you want Kinesis Data Firehose to replace them with underscores. This is useful because Apache Hive does not allow dots in column names. For example, if the JSON contains a key whose name is “a.b”, you can define the column name to be “aB” when using this option. Defaults to false.
interface FirehoseDeliveryStreamExtendedS3ConfigurationDataFormatConversionConfigurationOutputFormatConfiguration
interface FirehoseDeliveryStreamExtendedS3ConfigurationDataFormatConversionConfigurationOutputFormatConfigurationproperty serializer
serializer: pulumi.Input<FirehoseDeliveryStreamExtendedS3ConfigurationDataFormatConversionConfigurationOutputFormatConfigurationSerializer>;Nested argument that specifies which serializer to use. You can choose either the ORC SerDe or the Parquet SerDe. More details below.
interface FirehoseDeliveryStreamExtendedS3ConfigurationDataFormatConversionConfigurationOutputFormatConfigurationSerializer
interface FirehoseDeliveryStreamExtendedS3ConfigurationDataFormatConversionConfigurationOutputFormatConfigurationSerializerproperty orcSerDe
orcSerDe?: pulumi.Input<FirehoseDeliveryStreamExtendedS3ConfigurationDataFormatConversionConfigurationOutputFormatConfigurationSerializerOrcSerDe>;Nested argument that specifies converting data to the ORC format before storing it in Amazon S3. For more information, see Apache ORC. More details below.
property parquetSerDe
parquetSerDe?: pulumi.Input<FirehoseDeliveryStreamExtendedS3ConfigurationDataFormatConversionConfigurationOutputFormatConfigurationSerializerParquetSerDe>;Nested argument that specifies converting data to the Parquet format before storing it in Amazon S3. For more information, see Apache Parquet. More details below.
interface FirehoseDeliveryStreamExtendedS3ConfigurationDataFormatConversionConfigurationOutputFormatConfigurationSerializerOrcSerDe
interface FirehoseDeliveryStreamExtendedS3ConfigurationDataFormatConversionConfigurationOutputFormatConfigurationSerializerOrcSerDeproperty blockSizeBytes
blockSizeBytes?: pulumi.Input<number>;The Hadoop Distributed File System (HDFS) block size. This is useful if you intend to copy the data from Amazon S3 to HDFS before querying. The default is 256 MiB and the minimum is 64 MiB. Kinesis Data Firehose uses this value for padding calculations.
property bloomFilterColumns
bloomFilterColumns?: pulumi.Input<pulumi.Input<string>[]>;A list of column names for which you want Kinesis Data Firehose to create bloom filters.
property bloomFilterFalsePositiveProbability
bloomFilterFalsePositiveProbability?: pulumi.Input<number>;The Bloom filter false positive probability (FPP). The lower the FPP, the bigger the Bloom filter. The default value is 0.05, the minimum is 0, and the maximum is 1.
property compression
compression?: pulumi.Input<string>;The compression code to use over data blocks. The possible values are UNCOMPRESSED, SNAPPY, and GZIP, with the default being SNAPPY. Use SNAPPY for higher decompression speed. Use GZIP if the compression ratio is more important than speed.
property dictionaryKeyThreshold
dictionaryKeyThreshold?: pulumi.Input<number>;A float that represents the fraction of the total number of non-null rows. To turn off dictionary encoding, set this fraction to a number that is less than the number of distinct keys in a dictionary. To always use dictionary encoding, set this threshold to 1.
property enablePadding
enablePadding?: pulumi.Input<boolean>;Set this to true to indicate that you want stripes to be padded to the HDFS block boundaries. This is useful if you intend to copy the data from Amazon S3 to HDFS before querying. The default is false.
property formatVersion
formatVersion?: pulumi.Input<string>;The version of the file to write. The possible values are V0_11 and V0_12. The default is V0_12.
property paddingTolerance
paddingTolerance?: pulumi.Input<number>;A float between 0 and 1 that defines the tolerance for block padding as a decimal fraction of stripe size. The default value is 0.05, which means 5 percent of stripe size. For the default values of 64 MiB ORC stripes and 256 MiB HDFS blocks, the default block padding tolerance of 5 percent reserves a maximum of 3.2 MiB for padding within the 256 MiB block. In such a case, if the available size within the block is more than 3.2 MiB, a new, smaller stripe is inserted to fit within that space. This ensures that no stripe crosses block boundaries and causes remote reads within a node-local task. Kinesis Data Firehose ignores this parameter when enablePadding is false.
property rowIndexStride
rowIndexStride?: pulumi.Input<number>;The number of rows between index entries. The default is 10000 and the minimum is 1000.
property stripeSizeBytes
stripeSizeBytes?: pulumi.Input<number>;The number of bytes in each stripe. The default is 64 MiB and the minimum is 8 MiB.
interface FirehoseDeliveryStreamExtendedS3ConfigurationDataFormatConversionConfigurationOutputFormatConfigurationSerializerParquetSerDe
interface FirehoseDeliveryStreamExtendedS3ConfigurationDataFormatConversionConfigurationOutputFormatConfigurationSerializerParquetSerDeproperty blockSizeBytes
blockSizeBytes?: pulumi.Input<number>;The Hadoop Distributed File System (HDFS) block size. This is useful if you intend to copy the data from Amazon S3 to HDFS before querying. The default is 256 MiB and the minimum is 64 MiB. Kinesis Data Firehose uses this value for padding calculations.
property compression
compression?: pulumi.Input<string>;The compression code to use over data blocks. The possible values are UNCOMPRESSED, SNAPPY, and GZIP, with the default being SNAPPY. Use SNAPPY for higher decompression speed. Use GZIP if the compression ratio is more important than speed.
property enableDictionaryCompression
enableDictionaryCompression?: pulumi.Input<boolean>;Indicates whether to enable dictionary compression.
property maxPaddingBytes
maxPaddingBytes?: pulumi.Input<number>;The maximum amount of padding to apply. This is useful if you intend to copy the data from Amazon S3 to HDFS before querying. The default is 0.
property pageSizeBytes
pageSizeBytes?: pulumi.Input<number>;The Parquet page size. Column chunks are divided into pages. A page is conceptually an indivisible unit (in terms of compression and encoding). The minimum value is 64 KiB and the default is 1 MiB.
property writerVersion
writerVersion?: pulumi.Input<string>;Indicates the version of row format to output. The possible values are V1 and V2. The default is V1.
interface FirehoseDeliveryStreamExtendedS3ConfigurationDataFormatConversionConfigurationSchemaConfiguration
interface FirehoseDeliveryStreamExtendedS3ConfigurationDataFormatConversionConfigurationSchemaConfigurationproperty catalogId
catalogId?: pulumi.Input<string>;The ID of the AWS Glue Data Catalog. If you don’t supply this, the AWS account ID is used by default.
property databaseName
databaseName: pulumi.Input<string>;Specifies the name of the AWS Glue database that contains the schema for the output data.
property region
region?: pulumi.Input<string>;If you don’t specify an AWS Region, the default is the current region.
property roleArn
roleArn: pulumi.Input<string>;The role that Kinesis Data Firehose can use to access AWS Glue. This role must be in the same account you use for Kinesis Data Firehose. Cross-account roles aren’t allowed.
property tableName
tableName: pulumi.Input<string>;Specifies the AWS Glue table that contains the column information that constitutes your data schema.
property versionId
versionId?: pulumi.Input<string>;Specifies the table version for the output data schema. Defaults to LATEST.
interface FirehoseDeliveryStreamExtendedS3ConfigurationProcessingConfiguration
interface FirehoseDeliveryStreamExtendedS3ConfigurationProcessingConfigurationproperty enabled
enabled?: pulumi.Input<boolean>;Enables or disables data processing.
property processors
processors?: pulumi.Input<pulumi.Input<FirehoseDeliveryStreamExtendedS3ConfigurationProcessingConfigurationProcessor>[]>;Array of data processors. More details are given below
interface FirehoseDeliveryStreamExtendedS3ConfigurationProcessingConfigurationProcessor
interface FirehoseDeliveryStreamExtendedS3ConfigurationProcessingConfigurationProcessorproperty parameters
parameters?: pulumi.Input<pulumi.Input<FirehoseDeliveryStreamExtendedS3ConfigurationProcessingConfigurationProcessorParameter>[]>;Array of processor parameters. More details are given below
property type
type: pulumi.Input<string>;The type of processor. Valid Values: Lambda
interface FirehoseDeliveryStreamExtendedS3ConfigurationProcessingConfigurationProcessorParameter
interface FirehoseDeliveryStreamExtendedS3ConfigurationProcessingConfigurationProcessorParameterproperty parameterName
parameterName: pulumi.Input<string>;Parameter name. Valid Values: LambdaArn, NumberOfRetries, RoleArn, BufferSizeInMBs, BufferIntervalInSeconds
property parameterValue
parameterValue: pulumi.Input<string>;Parameter value. Must be between 1 and 512 length (inclusive). When providing a Lambda ARN, you should specify the resource version as well.
interface FirehoseDeliveryStreamExtendedS3ConfigurationS3BackupConfiguration
interface FirehoseDeliveryStreamExtendedS3ConfigurationS3BackupConfigurationproperty bucketArn
bucketArn: pulumi.Input<string>;The ARN of the S3 bucket
property bufferInterval
bufferInterval?: pulumi.Input<number>;Buffer incoming data for the specified period of time, in seconds, before delivering it to the destination. The default value is 300.
property bufferSize
bufferSize?: pulumi.Input<number>;Buffer incoming data to the specified size, in MBs, before delivering it to the destination. The default value is 5. We recommend setting SizeInMBs to a value greater than the amount of data you typically ingest into the delivery stream in 10 seconds. For example, if you typically ingest data at 1 MB/sec set SizeInMBs to be 10 MB or higher.
property cloudwatchLoggingOptions
cloudwatchLoggingOptions?: pulumi.Input<FirehoseDeliveryStreamExtendedS3ConfigurationS3BackupConfigurationCloudwatchLoggingOptions>;The CloudWatch Logging Options for the delivery stream. More details are given below
property compressionFormat
compressionFormat?: pulumi.Input<string>;The compression format. If no value is specified, the default is UNCOMPRESSED. Other supported values are GZIP, ZIP & Snappy. If the destination is redshift you cannot use ZIP or Snappy.
property kmsKeyArn
kmsKeyArn?: pulumi.Input<string>;Specifies the KMS key ARN the stream will use to encrypt data. If not set, no encryption will be used.
property prefix
prefix?: pulumi.Input<string>;The “YYYY/MM/DD/HH” time format prefix is automatically used for delivered S3 files. You can specify an extra prefix to be added in front of the time format prefix. Note that if the prefix ends with a slash, it appears as a folder in the S3 bucket
property roleArn
roleArn: pulumi.Input<string>;The role that Kinesis Data Firehose can use to access AWS Glue. This role must be in the same account you use for Kinesis Data Firehose. Cross-account roles aren’t allowed.
interface FirehoseDeliveryStreamExtendedS3ConfigurationS3BackupConfigurationCloudwatchLoggingOptions
interface FirehoseDeliveryStreamExtendedS3ConfigurationS3BackupConfigurationCloudwatchLoggingOptionsproperty enabled
enabled?: pulumi.Input<boolean>;Enables or disables the logging. Defaults to false.
property logGroupName
logGroupName?: pulumi.Input<string>;The CloudWatch group name for logging. This value is required if enabled is true.
property logStreamName
logStreamName?: pulumi.Input<string>;The CloudWatch log stream name for logging. This value is required if enabled is true.
interface FirehoseDeliveryStreamKinesisSourceConfiguration
interface FirehoseDeliveryStreamKinesisSourceConfigurationproperty kinesisStreamArn
kinesisStreamArn: pulumi.Input<string>;The kinesis stream used as the source of the firehose delivery stream.
property roleArn
roleArn: pulumi.Input<string>;The ARN of the role that provides access to the source Kinesis stream.
interface FirehoseDeliveryStreamRedshiftConfiguration
interface FirehoseDeliveryStreamRedshiftConfigurationproperty cloudwatchLoggingOptions
cloudwatchLoggingOptions?: pulumi.Input<FirehoseDeliveryStreamRedshiftConfigurationCloudwatchLoggingOptions>;The CloudWatch Logging Options for the delivery stream. More details are given below
property clusterJdbcurl
clusterJdbcurl: pulumi.Input<string>;The jdbcurl of the redshift cluster.
property copyOptions
copyOptions?: pulumi.Input<string>;Copy options for copying the data from the s3 intermediate bucket into redshift, for example to change the default delimiter. For valid values, see the AWS documentation
property dataTableColumns
dataTableColumns?: pulumi.Input<string>;The data table columns that will be targeted by the copy command.
property dataTableName
dataTableName: pulumi.Input<string>;The name of the table in the redshift cluster that the s3 bucket will copy to.
property password
password: pulumi.Input<string>;The password for the username above.
property processingConfiguration
processingConfiguration?: pulumi.Input<FirehoseDeliveryStreamRedshiftConfigurationProcessingConfiguration>;The data processing configuration. More details are given below.
property retryDuration
retryDuration?: pulumi.Input<number>;The length of time during which Firehose retries delivery after a failure, starting from the initial request and including the first attempt. The default value is 3600 seconds (60 minutes). Firehose does not retry if the value of DurationInSeconds is 0 (zero) or if the first delivery attempt takes longer than the current value.
property roleArn
roleArn: pulumi.Input<string>;The arn of the role the stream assumes.
property s3BackupConfiguration
s3BackupConfiguration?: pulumi.Input<FirehoseDeliveryStreamRedshiftConfigurationS3BackupConfiguration>;The configuration for backup in Amazon S3. Required if s3BackupMode is Enabled. Supports the same fields as s3Configuration object.
property s3BackupMode
s3BackupMode?: pulumi.Input<string>;The Amazon S3 backup mode. Valid values are Disabled and Enabled. Default value is Disabled.
property username
username: pulumi.Input<string>;The username that the firehose delivery stream will assume. It is strongly recommended that the username and password provided is used exclusively for Amazon Kinesis Firehose purposes, and that the permissions for the account are restricted for Amazon Redshift INSERT permissions.
interface FirehoseDeliveryStreamRedshiftConfigurationCloudwatchLoggingOptions
interface FirehoseDeliveryStreamRedshiftConfigurationCloudwatchLoggingOptionsproperty enabled
enabled?: pulumi.Input<boolean>;Enables or disables the logging. Defaults to false.
property logGroupName
logGroupName?: pulumi.Input<string>;The CloudWatch group name for logging. This value is required if enabled is true.
property logStreamName
logStreamName?: pulumi.Input<string>;The CloudWatch log stream name for logging. This value is required if enabled is true.
interface FirehoseDeliveryStreamRedshiftConfigurationProcessingConfiguration
interface FirehoseDeliveryStreamRedshiftConfigurationProcessingConfigurationproperty enabled
enabled?: pulumi.Input<boolean>;Enables or disables data processing.
property processors
processors?: pulumi.Input<pulumi.Input<FirehoseDeliveryStreamRedshiftConfigurationProcessingConfigurationProcessor>[]>;Array of data processors. More details are given below
interface FirehoseDeliveryStreamRedshiftConfigurationProcessingConfigurationProcessor
interface FirehoseDeliveryStreamRedshiftConfigurationProcessingConfigurationProcessorproperty parameters
parameters?: pulumi.Input<pulumi.Input<FirehoseDeliveryStreamRedshiftConfigurationProcessingConfigurationProcessorParameter>[]>;Array of processor parameters. More details are given below
property type
type: pulumi.Input<string>;The type of processor. Valid Values: Lambda
interface FirehoseDeliveryStreamRedshiftConfigurationProcessingConfigurationProcessorParameter
interface FirehoseDeliveryStreamRedshiftConfigurationProcessingConfigurationProcessorParameterproperty parameterName
parameterName: pulumi.Input<string>;Parameter name. Valid Values: LambdaArn, NumberOfRetries, RoleArn, BufferSizeInMBs, BufferIntervalInSeconds
property parameterValue
parameterValue: pulumi.Input<string>;Parameter value. Must be between 1 and 512 length (inclusive). When providing a Lambda ARN, you should specify the resource version as well.
interface FirehoseDeliveryStreamRedshiftConfigurationS3BackupConfiguration
interface FirehoseDeliveryStreamRedshiftConfigurationS3BackupConfigurationproperty bucketArn
bucketArn: pulumi.Input<string>;The ARN of the S3 bucket
property bufferInterval
bufferInterval?: pulumi.Input<number>;Buffer incoming data for the specified period of time, in seconds, before delivering it to the destination. The default value is 300.
property bufferSize
bufferSize?: pulumi.Input<number>;Buffer incoming data to the specified size, in MBs, before delivering it to the destination. The default value is 5. We recommend setting SizeInMBs to a value greater than the amount of data you typically ingest into the delivery stream in 10 seconds. For example, if you typically ingest data at 1 MB/sec set SizeInMBs to be 10 MB or higher.
property cloudwatchLoggingOptions
cloudwatchLoggingOptions?: pulumi.Input<FirehoseDeliveryStreamRedshiftConfigurationS3BackupConfigurationCloudwatchLoggingOptions>;The CloudWatch Logging Options for the delivery stream. More details are given below
property compressionFormat
compressionFormat?: pulumi.Input<string>;The compression format. If no value is specified, the default is UNCOMPRESSED. Other supported values are GZIP, ZIP & Snappy. If the destination is redshift you cannot use ZIP or Snappy.
property kmsKeyArn
kmsKeyArn?: pulumi.Input<string>;Specifies the KMS key ARN the stream will use to encrypt data. If not set, no encryption will be used.
property prefix
prefix?: pulumi.Input<string>;The “YYYY/MM/DD/HH” time format prefix is automatically used for delivered S3 files. You can specify an extra prefix to be added in front of the time format prefix. Note that if the prefix ends with a slash, it appears as a folder in the S3 bucket
property roleArn
roleArn: pulumi.Input<string>;The role that Kinesis Data Firehose can use to access AWS Glue. This role must be in the same account you use for Kinesis Data Firehose. Cross-account roles aren’t allowed.
interface FirehoseDeliveryStreamRedshiftConfigurationS3BackupConfigurationCloudwatchLoggingOptions
interface FirehoseDeliveryStreamRedshiftConfigurationS3BackupConfigurationCloudwatchLoggingOptionsproperty enabled
enabled?: pulumi.Input<boolean>;Enables or disables the logging. Defaults to false.
property logGroupName
logGroupName?: pulumi.Input<string>;The CloudWatch group name for logging. This value is required if enabled is true.
property logStreamName
logStreamName?: pulumi.Input<string>;The CloudWatch log stream name for logging. This value is required if enabled is true.
interface FirehoseDeliveryStreamS3Configuration
interface FirehoseDeliveryStreamS3Configurationproperty bucketArn
bucketArn: pulumi.Input<string>;The ARN of the S3 bucket
property bufferInterval
bufferInterval?: pulumi.Input<number>;Buffer incoming data for the specified period of time, in seconds, before delivering it to the destination. The default value is 300.
property bufferSize
bufferSize?: pulumi.Input<number>;Buffer incoming data to the specified size, in MBs, before delivering it to the destination. The default value is 5. We recommend setting SizeInMBs to a value greater than the amount of data you typically ingest into the delivery stream in 10 seconds. For example, if you typically ingest data at 1 MB/sec set SizeInMBs to be 10 MB or higher.
property cloudwatchLoggingOptions
cloudwatchLoggingOptions?: pulumi.Input<FirehoseDeliveryStreamS3ConfigurationCloudwatchLoggingOptions>;The CloudWatch Logging Options for the delivery stream. More details are given below
property compressionFormat
compressionFormat?: pulumi.Input<string>;The compression format. If no value is specified, the default is UNCOMPRESSED. Other supported values are GZIP, ZIP & Snappy. If the destination is redshift you cannot use ZIP or Snappy.
property kmsKeyArn
kmsKeyArn?: pulumi.Input<string>;Specifies the KMS key ARN the stream will use to encrypt data. If not set, no encryption will be used.
property prefix
prefix?: pulumi.Input<string>;The “YYYY/MM/DD/HH” time format prefix is automatically used for delivered S3 files. You can specify an extra prefix to be added in front of the time format prefix. Note that if the prefix ends with a slash, it appears as a folder in the S3 bucket
property roleArn
roleArn: pulumi.Input<string>;The role that Kinesis Data Firehose can use to access AWS Glue. This role must be in the same account you use for Kinesis Data Firehose. Cross-account roles aren’t allowed.
interface FirehoseDeliveryStreamS3ConfigurationCloudwatchLoggingOptions
interface FirehoseDeliveryStreamS3ConfigurationCloudwatchLoggingOptionsproperty enabled
enabled?: pulumi.Input<boolean>;Enables or disables the logging. Defaults to false.
property logGroupName
logGroupName?: pulumi.Input<string>;The CloudWatch group name for logging. This value is required if enabled is true.
property logStreamName
logStreamName?: pulumi.Input<string>;The CloudWatch log stream name for logging. This value is required if enabled is true.
interface FirehoseDeliveryStreamServerSideEncryption
interface FirehoseDeliveryStreamServerSideEncryptionproperty enabled
enabled?: pulumi.Input<boolean>;Whether to enable encryption at rest. Default is false.
interface FirehoseDeliveryStreamSplunkConfiguration
interface FirehoseDeliveryStreamSplunkConfigurationproperty cloudwatchLoggingOptions
cloudwatchLoggingOptions?: pulumi.Input<FirehoseDeliveryStreamSplunkConfigurationCloudwatchLoggingOptions>;The CloudWatch Logging Options for the delivery stream. More details are given below.
property hecAcknowledgmentTimeout
hecAcknowledgmentTimeout?: pulumi.Input<number>;The amount of time, in seconds between 180 and 600, that Kinesis Firehose waits to receive an acknowledgment from Splunk after it sends it data.
property hecEndpoint
hecEndpoint: pulumi.Input<string>;The HTTP Event Collector (HEC) endpoint to which Kinesis Firehose sends your data.
property hecEndpointType
hecEndpointType?: pulumi.Input<string>;The HEC endpoint type. Valid values are Raw or Event. The default value is Raw.
property hecToken
hecToken: pulumi.Input<string>;The GUID that you obtain from your Splunk cluster when you create a new HEC endpoint.
property processingConfiguration
processingConfiguration?: pulumi.Input<FirehoseDeliveryStreamSplunkConfigurationProcessingConfiguration>;The data processing configuration. More details are given below.
property retryDuration
retryDuration?: pulumi.Input<number>;After an initial failure to deliver to Splunk, the total amount of time, in seconds between 0 to 7200, during which Firehose re-attempts delivery (including the first attempt). After this time has elapsed, the failed documents are written to Amazon S3. The default value is 300s. There will be no retry if the value is 0.
property s3BackupMode
s3BackupMode?: pulumi.Input<string>;Defines how documents should be delivered to Amazon S3. Valid values are FailedEventsOnly and AllEvents. Default value is FailedEventsOnly.
interface FirehoseDeliveryStreamSplunkConfigurationCloudwatchLoggingOptions
interface FirehoseDeliveryStreamSplunkConfigurationCloudwatchLoggingOptionsproperty enabled
enabled?: pulumi.Input<boolean>;Enables or disables the logging. Defaults to false.
property logGroupName
logGroupName?: pulumi.Input<string>;The CloudWatch group name for logging. This value is required if enabled is true.
property logStreamName
logStreamName?: pulumi.Input<string>;The CloudWatch log stream name for logging. This value is required if enabled is true.
interface FirehoseDeliveryStreamSplunkConfigurationProcessingConfiguration
interface FirehoseDeliveryStreamSplunkConfigurationProcessingConfigurationproperty enabled
enabled?: pulumi.Input<boolean>;Enables or disables data processing.
property processors
processors?: pulumi.Input<pulumi.Input<FirehoseDeliveryStreamSplunkConfigurationProcessingConfigurationProcessor>[]>;Array of data processors. More details are given below
interface FirehoseDeliveryStreamSplunkConfigurationProcessingConfigurationProcessor
interface FirehoseDeliveryStreamSplunkConfigurationProcessingConfigurationProcessorproperty parameters
parameters?: pulumi.Input<pulumi.Input<FirehoseDeliveryStreamSplunkConfigurationProcessingConfigurationProcessorParameter>[]>;Array of processor parameters. More details are given below
property type
type: pulumi.Input<string>;The type of processor. Valid Values: Lambda
interface FirehoseDeliveryStreamSplunkConfigurationProcessingConfigurationProcessorParameter
interface FirehoseDeliveryStreamSplunkConfigurationProcessingConfigurationProcessorParameterproperty parameterName
parameterName: pulumi.Input<string>;Parameter name. Valid Values: LambdaArn, NumberOfRetries, RoleArn, BufferSizeInMBs, BufferIntervalInSeconds
property parameterValue
parameterValue: pulumi.Input<string>;Parameter value. Must be between 1 and 512 length (inclusive). When providing a Lambda ARN, you should specify the resource version as well.
namespace kms
interface GetSecretSecret
interface GetSecretSecretproperty context
context?: undefined | {[key: string]: string};property grantTokens
grantTokens?: string[];property name
name: string;property payload
payload: string;interface GetSecretsSecret
interface GetSecretsSecretproperty context
context?: undefined | {[key: string]: string};An optional mapping that makes up the Encryption Context for the secret.
property grantTokens
grantTokens?: string[];An optional list of Grant Tokens for the secret.
property name
name: string;The name to export this secret under in the attributes.
property payload
payload: string;Base64 encoded payload, as returned from a KMS encrypt operation.
interface GrantConstraint
interface GrantConstraintproperty encryptionContextEquals
encryptionContextEquals?: pulumi.Input<{[key: string]: pulumi.Input<string>}>;A list of key-value pairs that must match the encryption context in subsequent cryptographic operation requests. The grant allows the operation only when the encryption context in the request is the same as the encryption context specified in this constraint. Conflicts with encryptionContextSubset.
property encryptionContextSubset
encryptionContextSubset?: pulumi.Input<{[key: string]: pulumi.Input<string>}>;A list of key-value pairs that must be included in the encryption context of subsequent cryptographic operation requests. The grant allows the cryptographic operation only when the encryption context in the request includes the key-value pairs specified in this constraint, although it can include additional key-value pairs. Conflicts with encryptionContextEquals.
namespace lambda
interface AliasRoutingConfig
interface AliasRoutingConfigproperty additionalVersionWeights
additionalVersionWeights?: pulumi.Input<{[key: string]: pulumi.Input<number>}>;A map that defines the proportion of events that should be sent to different versions of a lambda function.
interface EventSourceMappingDestinationConfig
interface EventSourceMappingDestinationConfigproperty onFailure
onFailure?: pulumi.Input<EventSourceMappingDestinationConfigOnFailure>;The destination configuration for failed invocations. Detailed below.
interface EventSourceMappingDestinationConfigOnFailure
interface EventSourceMappingDestinationConfigOnFailureproperty destinationArn
destinationArn: pulumi.Input<string>;The Amazon Resource Name (ARN) of the destination resource.
interface FunctionDeadLetterConfig
interface FunctionDeadLetterConfigproperty targetArn
targetArn: pulumi.Input<string>;The ARN of an SNS topic or SQS queue to notify when an invocation fails. If this
option is used, the function’s IAM role must be granted suitable access to write to the target object,
which means allowing either the sns:Publish or sqs:SendMessage action on this ARN, depending on
which service is targeted.
interface FunctionEnvironment
interface FunctionEnvironmentproperty variables
variables?: pulumi.Input<{[key: string]: pulumi.Input<string>}>;A map that defines environment variables for the Lambda function.
interface FunctionEventInvokeConfigDestinationConfig
interface FunctionEventInvokeConfigDestinationConfigproperty onFailure
onFailure?: pulumi.Input<FunctionEventInvokeConfigDestinationConfigOnFailure>;Configuration block with destination configuration for failed asynchronous invocations. See below for details.
property onSuccess
onSuccess?: pulumi.Input<FunctionEventInvokeConfigDestinationConfigOnSuccess>;Configuration block with destination configuration for successful asynchronous invocations. See below for details.
interface FunctionEventInvokeConfigDestinationConfigOnFailure
interface FunctionEventInvokeConfigDestinationConfigOnFailureproperty destination
destination: pulumi.Input<string>;Amazon Resource Name (ARN) of the destination resource. See the Lambda Developer Guide for acceptable resource types and associated IAM permissions.
interface FunctionEventInvokeConfigDestinationConfigOnSuccess
interface FunctionEventInvokeConfigDestinationConfigOnSuccessproperty destination
destination: pulumi.Input<string>;Amazon Resource Name (ARN) of the destination resource. See the Lambda Developer Guide for acceptable resource types and associated IAM permissions.
interface FunctionFileSystemConfig
interface FunctionFileSystemConfigproperty arn
arn: pulumi.Input<string>;The ARN of the EFS Access Profile that provides access to the file system.
property localMountPath
localMountPath: pulumi.Input<string>;The path where the function can access the file system, starting with /mnt/.
interface FunctionTracingConfig
interface FunctionTracingConfigproperty mode
mode: pulumi.Input<string>;Can be either PassThrough or Active. If PassThrough, Lambda will only trace
the request from an upstream service if it contains a tracing header with
“sampled=1”. If Active, Lambda will respect any tracing header it receives
from an upstream service. If no tracing header is received, Lambda will call
X-Ray for a tracing decision.
interface FunctionVpcConfig
interface FunctionVpcConfigproperty securityGroupIds
securityGroupIds: pulumi.Input<pulumi.Input<string>[]>;A list of security group IDs associated with the Lambda function.
property subnetIds
subnetIds: pulumi.Input<pulumi.Input<string>[]>;A list of subnet IDs associated with the Lambda function.
property vpcId
vpcId?: pulumi.Input<string>;namespace lb
interface ListenerDefaultAction
interface ListenerDefaultActionproperty authenticateCognito
authenticateCognito?: pulumi.Input<ListenerDefaultActionAuthenticateCognito>;property authenticateOidc
authenticateOidc?: pulumi.Input<ListenerDefaultActionAuthenticateOidc>;property fixedResponse
fixedResponse?: pulumi.Input<ListenerDefaultActionFixedResponse>;Information for creating an action that returns a custom HTTP response. Required if type is fixed-response.
property forward
forward?: pulumi.Input<ListenerDefaultActionForward>;Information for creating an action that distributes requests among one or more target groups. Specify only if type is forward. If you specify both forward block and targetGroupArn attribute, you can specify only one target group using forward and it must be the same target group specified in targetGroupArn.
property order
order?: pulumi.Input<number>;property redirect
redirect?: pulumi.Input<ListenerDefaultActionRedirect>;Information for creating a redirect action. Required if type is redirect.
property targetGroupArn
targetGroupArn?: pulumi.Input<string>;The ARN of the Target Group to which to route traffic. Specify only if type is forward and you want to route to a single target group. To route to one or more target groups, use a forward block instead.
property type
type: pulumi.Input<string>;The type of routing action. Valid values are forward, redirect, fixed-response, authenticate-cognito and authenticate-oidc.
interface ListenerDefaultActionAuthenticateCognito
interface ListenerDefaultActionAuthenticateCognitoproperty authenticationRequestExtraParams
authenticationRequestExtraParams?: pulumi.Input<{[key: string]: any}>;The query parameters to include in the redirect request to the authorization endpoint. Max: 10.
property onUnauthenticatedRequest
onUnauthenticatedRequest?: pulumi.Input<string>;The behavior if the user is not authenticated. Valid values: deny, allow and authenticate
property scope
scope?: pulumi.Input<string>;The set of user claims to be requested from the IdP.
property sessionCookieName
sessionCookieName?: pulumi.Input<string>;The name of the cookie used to maintain session information.
property sessionTimeout
sessionTimeout?: pulumi.Input<number>;The maximum duration of the authentication session, in seconds.
property userPoolArn
userPoolArn: pulumi.Input<string>;The ARN of the Cognito user pool.
property userPoolClientId
userPoolClientId: pulumi.Input<string>;The ID of the Cognito user pool client.
property userPoolDomain
userPoolDomain: pulumi.Input<string>;The domain prefix or fully-qualified domain name of the Cognito user pool.
interface ListenerDefaultActionAuthenticateOidc
interface ListenerDefaultActionAuthenticateOidcproperty authenticationRequestExtraParams
authenticationRequestExtraParams?: pulumi.Input<{[key: string]: any}>;The query parameters to include in the redirect request to the authorization endpoint. Max: 10.
property authorizationEndpoint
authorizationEndpoint: pulumi.Input<string>;The authorization endpoint of the IdP.
property clientId
clientId: pulumi.Input<string>;The OAuth 2.0 client identifier.
property clientSecret
clientSecret: pulumi.Input<string>;The OAuth 2.0 client secret.
property issuer
issuer: pulumi.Input<string>;The OIDC issuer identifier of the IdP.
property onUnauthenticatedRequest
onUnauthenticatedRequest?: pulumi.Input<string>;The behavior if the user is not authenticated. Valid values: deny, allow and authenticate
property scope
scope?: pulumi.Input<string>;The set of user claims to be requested from the IdP.
property sessionCookieName
sessionCookieName?: pulumi.Input<string>;The name of the cookie used to maintain session information.
property sessionTimeout
sessionTimeout?: pulumi.Input<number>;The maximum duration of the authentication session, in seconds.
property tokenEndpoint
tokenEndpoint: pulumi.Input<string>;The token endpoint of the IdP.
property userInfoEndpoint
userInfoEndpoint: pulumi.Input<string>;The user info endpoint of the IdP.
interface ListenerDefaultActionFixedResponse
interface ListenerDefaultActionFixedResponseproperty contentType
contentType: pulumi.Input<string>;The content type. Valid values are text/plain, text/css, text/html, application/javascript and application/json.
property messageBody
messageBody?: pulumi.Input<string>;The message body.
property statusCode
statusCode?: pulumi.Input<string>;The HTTP response code. Valid values are 2XX, 4XX, or 5XX.
interface ListenerDefaultActionForward
interface ListenerDefaultActionForwardproperty stickiness
stickiness?: pulumi.Input<ListenerDefaultActionForwardStickiness>;The target group stickiness for the rule.
property targetGroups
targetGroups: pulumi.Input<pulumi.Input<ListenerDefaultActionForwardTargetGroup>[]>;One or more target groups block.
interface ListenerDefaultActionForwardStickiness
interface ListenerDefaultActionForwardStickinessproperty duration
duration: pulumi.Input<number>;The time period, in seconds, during which requests from a client should be routed to the same target group. The range is 1-604800 seconds (7 days).
property enabled
enabled?: pulumi.Input<boolean>;Indicates whether target group stickiness is enabled.
interface ListenerDefaultActionForwardTargetGroup
interface ListenerDefaultActionForwardTargetGroupproperty arn
arn: pulumi.Input<string>;The Amazon Resource Name (ARN) of the target group.
property weight
weight?: pulumi.Input<number>;The weight. The range is 0 to 999.
interface ListenerDefaultActionRedirect
interface ListenerDefaultActionRedirectproperty host
host?: pulumi.Input<string>;The hostname. This component is not percent-encoded. The hostname can contain #{host}. Defaults to #{host}.
property path
path?: pulumi.Input<string>;The absolute path, starting with the leading “/”. This component is not percent-encoded. The path can contain #{host}, #{path}, and #{port}. Defaults to /#{path}.
property port
port?: pulumi.Input<string>;The port. Specify a value from 1 to 65535 or #{port}. Defaults to #{port}.
property protocol
protocol?: pulumi.Input<string>;The protocol. Valid values are HTTP, HTTPS, or #{protocol}. Defaults to #{protocol}.
property query
query?: pulumi.Input<string>;The query parameters, URL-encoded when necessary, but not percent-encoded. Do not include the leading “?”. Defaults to #{query}.
property statusCode
statusCode: pulumi.Input<string>;The HTTP redirect code. The redirect is either permanent (HTTP_301) or temporary (HTTP_302).
interface ListenerRuleAction
interface ListenerRuleActionproperty authenticateCognito
authenticateCognito?: pulumi.Input<ListenerRuleActionAuthenticateCognito>;Information for creating an authenticate action using Cognito. Required if type is authenticate-cognito.
property authenticateOidc
authenticateOidc?: pulumi.Input<ListenerRuleActionAuthenticateOidc>;Information for creating an authenticate action using OIDC. Required if type is authenticate-oidc.
property fixedResponse
fixedResponse?: pulumi.Input<ListenerRuleActionFixedResponse>;Information for creating an action that returns a custom HTTP response. Required if type is fixed-response.
property forward
forward?: pulumi.Input<ListenerRuleActionForward>;Information for creating an action that distributes requests among one or more target groups. Specify only if type is forward. If you specify both forward block and targetGroupArn attribute, you can specify only one target group using forward and it must be the same target group specified in targetGroupArn.
property order
order?: pulumi.Input<number>;property redirect
redirect?: pulumi.Input<ListenerRuleActionRedirect>;Information for creating a redirect action. Required if type is redirect.
property targetGroupArn
targetGroupArn?: pulumi.Input<string>;The ARN of the Target Group to which to route traffic. Specify only if type is forward and you want to route to a single target group. To route to one or more target groups, use a forward block instead.
property type
type: pulumi.Input<string>;The type of routing action. Valid values are forward, redirect, fixed-response, authenticate-cognito and authenticate-oidc.
interface ListenerRuleActionAuthenticateCognito
interface ListenerRuleActionAuthenticateCognitoproperty authenticationRequestExtraParams
authenticationRequestExtraParams?: pulumi.Input<{[key: string]: any}>;The query parameters to include in the redirect request to the authorization endpoint. Max: 10.
property onUnauthenticatedRequest
onUnauthenticatedRequest?: pulumi.Input<string>;The behavior if the user is not authenticated. Valid values: deny, allow and authenticate
property scope
scope?: pulumi.Input<string>;The set of user claims to be requested from the IdP.
property sessionCookieName
sessionCookieName?: pulumi.Input<string>;The name of the cookie used to maintain session information.
property sessionTimeout
sessionTimeout?: pulumi.Input<number>;The maximum duration of the authentication session, in seconds.
property userPoolArn
userPoolArn: pulumi.Input<string>;The ARN of the Cognito user pool.
property userPoolClientId
userPoolClientId: pulumi.Input<string>;The ID of the Cognito user pool client.
property userPoolDomain
userPoolDomain: pulumi.Input<string>;The domain prefix or fully-qualified domain name of the Cognito user pool.
interface ListenerRuleActionAuthenticateOidc
interface ListenerRuleActionAuthenticateOidcproperty authenticationRequestExtraParams
authenticationRequestExtraParams?: pulumi.Input<{[key: string]: any}>;The query parameters to include in the redirect request to the authorization endpoint. Max: 10.
property authorizationEndpoint
authorizationEndpoint: pulumi.Input<string>;The authorization endpoint of the IdP.
property clientId
clientId: pulumi.Input<string>;The OAuth 2.0 client identifier.
property clientSecret
clientSecret: pulumi.Input<string>;The OAuth 2.0 client secret.
property issuer
issuer: pulumi.Input<string>;The OIDC issuer identifier of the IdP.
property onUnauthenticatedRequest
onUnauthenticatedRequest?: pulumi.Input<string>;The behavior if the user is not authenticated. Valid values: deny, allow and authenticate
property scope
scope?: pulumi.Input<string>;The set of user claims to be requested from the IdP.
property sessionCookieName
sessionCookieName?: pulumi.Input<string>;The name of the cookie used to maintain session information.
property sessionTimeout
sessionTimeout?: pulumi.Input<number>;The maximum duration of the authentication session, in seconds.
property tokenEndpoint
tokenEndpoint: pulumi.Input<string>;The token endpoint of the IdP.
property userInfoEndpoint
userInfoEndpoint: pulumi.Input<string>;The user info endpoint of the IdP.
interface ListenerRuleActionFixedResponse
interface ListenerRuleActionFixedResponseproperty contentType
contentType: pulumi.Input<string>;The content type. Valid values are text/plain, text/css, text/html, application/javascript and application/json.
property messageBody
messageBody?: pulumi.Input<string>;The message body.
property statusCode
statusCode?: pulumi.Input<string>;The HTTP response code. Valid values are 2XX, 4XX, or 5XX.
interface ListenerRuleActionForward
interface ListenerRuleActionForwardproperty stickiness
stickiness?: pulumi.Input<ListenerRuleActionForwardStickiness>;The target group stickiness for the rule.
property targetGroups
targetGroups: pulumi.Input<pulumi.Input<ListenerRuleActionForwardTargetGroup>[]>;One or more target groups block.
interface ListenerRuleActionForwardStickiness
interface ListenerRuleActionForwardStickinessproperty duration
duration: pulumi.Input<number>;The time period, in seconds, during which requests from a client should be routed to the same target group. The range is 1-604800 seconds (7 days).
property enabled
enabled?: pulumi.Input<boolean>;Indicates whether target group stickiness is enabled.
interface ListenerRuleActionForwardTargetGroup
interface ListenerRuleActionForwardTargetGroupproperty arn
arn: pulumi.Input<string>;The Amazon Resource Name (ARN) of the target group.
property weight
weight?: pulumi.Input<number>;The weight. The range is 0 to 999.
interface ListenerRuleActionRedirect
interface ListenerRuleActionRedirectproperty host
host?: pulumi.Input<string>;The hostname. This component is not percent-encoded. The hostname can contain #{host}. Defaults to #{host}.
property path
path?: pulumi.Input<string>;The absolute path, starting with the leading “/”. This component is not percent-encoded. The path can contain #{host}, #{path}, and #{port}. Defaults to /#{path}.
property port
port?: pulumi.Input<string>;The port. Specify a value from 1 to 65535 or #{port}. Defaults to #{port}.
property protocol
protocol?: pulumi.Input<string>;The protocol. Valid values are HTTP, HTTPS, or #{protocol}. Defaults to #{protocol}.
property query
query?: pulumi.Input<string>;The query parameters, URL-encoded when necessary, but not percent-encoded. Do not include the leading “?”. Defaults to #{query}.
property statusCode
statusCode: pulumi.Input<string>;The HTTP redirect code. The redirect is either permanent (HTTP_301) or temporary (HTTP_302).
interface ListenerRuleCondition
interface ListenerRuleConditionproperty field
field?: pulumi.Input<string>;The type of condition. Valid values are host-header or path-pattern. Must also set values.
property hostHeader
hostHeader?: pulumi.Input<ListenerRuleConditionHostHeader>;Contains a single values item which is a list of host header patterns to match. The maximum size of each pattern is 128 characters. Comparison is case insensitive. Wildcard characters supported: * (matches 0 or more characters) and ? (matches exactly 1 character). Only one pattern needs to match for the condition to be satisfied.
property httpHeader
httpHeader?: pulumi.Input<ListenerRuleConditionHttpHeader>;HTTP headers to match. HTTP Header block fields documented below.
property httpRequestMethod
httpRequestMethod?: pulumi.Input<ListenerRuleConditionHttpRequestMethod>;Contains a single values item which is a list of HTTP request methods or verbs to match. Maximum size is 40 characters. Only allowed characters are A-Z, hyphen (-) and underscore (_). Comparison is case sensitive. Wildcards are not supported. Only one needs to match for the condition to be satisfied. AWS recommends that GET and HEAD requests are routed in the same way because the response to a HEAD request may be cached.
property pathPattern
pathPattern?: pulumi.Input<ListenerRuleConditionPathPattern>;Contains a single values item which is a list of path patterns to match against the request URL. Maximum size of each pattern is 128 characters. Comparison is case sensitive. Wildcard characters supported: * (matches 0 or more characters) and ? (matches exactly 1 character). Only one pattern needs to match for the condition to be satisfied. Path pattern is compared only to the path of the URL, not to its query string. To compare against the query string, use a queryString condition.
property queryStrings
queryStrings?: pulumi.Input<pulumi.Input<ListenerRuleConditionQueryString>[]>;Query strings to match. Query String block fields documented below.
property sourceIp
sourceIp?: pulumi.Input<ListenerRuleConditionSourceIp>;Contains a single values item which is a list of source IP CIDR notations to match. You can use both IPv4 and IPv6 addresses. Wildcards are not supported. Condition is satisfied if the source IP address of the request matches one of the CIDR blocks. Condition is not satisfied by the addresses in the X-Forwarded-For header, use httpHeader condition instead.
property values
values?: pulumi.Input<string>;List of exactly one pattern to match. Required when field is set.
interface ListenerRuleConditionHostHeader
interface ListenerRuleConditionHostHeaderproperty values
values?: pulumi.Input<pulumi.Input<string>[]>;List of exactly one pattern to match. Required when field is set.
interface ListenerRuleConditionHttpHeader
interface ListenerRuleConditionHttpHeaderproperty httpHeaderName
httpHeaderName: pulumi.Input<string>;Name of HTTP header to search. The maximum size is 40 characters. Comparison is case insensitive. Only RFC7240 characters are supported. Wildcards are not supported. You cannot use HTTP header condition to specify the host header, use a host-header condition instead.
property values
values: pulumi.Input<pulumi.Input<string>[]>;List of header value patterns to match. Maximum size of each pattern is 128 characters. Comparison is case insensitive. Wildcard characters supported: * (matches 0 or more characters) and ? (matches exactly 1 character). If the same header appears multiple times in the request they will be searched in order until a match is found. Only one pattern needs to match for the condition to be satisfied. To require that all of the strings are a match, create one condition block per string.
interface ListenerRuleConditionHttpRequestMethod
interface ListenerRuleConditionHttpRequestMethodproperty values
values: pulumi.Input<pulumi.Input<string>[]>;List of exactly one pattern to match. Required when field is set.
interface ListenerRuleConditionPathPattern
interface ListenerRuleConditionPathPatternproperty values
values?: pulumi.Input<pulumi.Input<string>[]>;List of exactly one pattern to match. Required when field is set.
interface ListenerRuleConditionQueryString
interface ListenerRuleConditionQueryStringproperty key
key?: pulumi.Input<string>;Query string key pattern to match.
property value
value: pulumi.Input<string>;Query string value pattern to match.
interface ListenerRuleConditionSourceIp
interface ListenerRuleConditionSourceIpproperty values
values: pulumi.Input<pulumi.Input<string>[]>;List of exactly one pattern to match. Required when field is set.
interface LoadBalancerAccessLogs
interface LoadBalancerAccessLogsproperty bucket
bucket: pulumi.Input<string>;The S3 bucket name to store the logs in.
property enabled
enabled?: pulumi.Input<boolean>;Boolean to enable / disable accessLogs. Defaults to false, even when bucket is specified.
property prefix
prefix?: pulumi.Input<string>;The S3 bucket prefix. Logs are stored in the root if not configured.
interface LoadBalancerSubnetMapping
interface LoadBalancerSubnetMappingproperty allocationId
allocationId?: pulumi.Input<string>;The allocation ID of the Elastic IP address.
property subnetId
subnetId: pulumi.Input<string>;The id of the subnet of which to attach to the load balancer. You can specify only one subnet per Availability Zone.
interface TargetGroupHealthCheck
interface TargetGroupHealthCheckproperty enabled
enabled?: pulumi.Input<boolean>;Boolean to enable / disable stickiness. Default is true
property healthyThreshold
healthyThreshold?: pulumi.Input<number>;The number of consecutive health checks successes required before considering an unhealthy target healthy. Defaults to 3.
property interval
interval?: pulumi.Input<number>;The approximate amount of time, in seconds, between health checks of an individual target. Minimum value 5 seconds, Maximum value 300 seconds. For lambda target groups, it needs to be greater as the timeout of the underlying lambda. Default 30 seconds.
property matcher
matcher?: pulumi.Input<string>;The HTTP codes to use when checking for a successful response from a target. You can specify multiple values (for example, “200,202”) or a range of values (for example, “200-299”). Applies to Application Load Balancers only (HTTP/HTTPS), not Network Load Balancers (TCP).
property path
path?: pulumi.Input<string>;The destination for the health check request. Applies to Application Load Balancers only (HTTP/HTTPS), not Network Load Balancers (TCP).
property port
port?: pulumi.Input<string>;The port on which targets receive traffic, unless overridden when registering a specific target. Required when targetType is instance or ip. Does not apply when targetType is lambda.
property protocol
protocol?: pulumi.Input<string>;The protocol to use for routing traffic to the targets. Should be one of “TCP”, “TLS”, “UDP”, “TCP_UDP”, “HTTP” or “HTTPS”. Required when targetType is instance or ip. Does not apply when targetType is lambda.
property timeout
timeout?: pulumi.Input<number>;The amount of time, in seconds, during which no response means a failed health check. For Application Load Balancers, the range is 2 to 120 seconds, and the default is 5 seconds for the instance target type and 30 seconds for the lambda target type. For Network Load Balancers, you cannot set a custom value, and the default is 10 seconds for TCP and HTTPS health checks and 6 seconds for HTTP health checks.
property unhealthyThreshold
unhealthyThreshold?: pulumi.Input<number>;The number of consecutive health check failures required before considering the target unhealthy . For Network Load Balancers, this value must be the same as the healthyThreshold. Defaults to 3.
interface TargetGroupStickiness
interface TargetGroupStickinessproperty cookieDuration
cookieDuration?: pulumi.Input<number>;The time period, in seconds, during which requests from a client should be routed to the same target. After this time period expires, the load balancer-generated cookie is considered stale. The range is 1 second to 1 week (604800 seconds). The default value is 1 day (86400 seconds).
property enabled
enabled?: pulumi.Input<boolean>;Indicates whether health checks are enabled. Defaults to true.
property type
type: pulumi.Input<string>;The type of sticky sessions. The only current possible value is lbCookie.
namespace macie
interface S3BucketAssociationClassificationType
interface S3BucketAssociationClassificationTypeproperty continuous
continuous?: pulumi.Input<string>;A string value indicating that Macie perform a one-time classification of all of the existing objects in the bucket.
The only valid value is the default value, FULL.
property oneTime
oneTime?: pulumi.Input<string>;A string value indicating whether or not Macie performs a one-time classification of all of the existing objects in the bucket.
Valid values are NONE and FULL. Defaults to NONE indicating that Macie only classifies objects that are added after the association was created.
namespace mediaconvert
interface QueueReservationPlanSettings
interface QueueReservationPlanSettingsproperty commitment
commitment: pulumi.Input<string>;The length of the term of your reserved queue pricing plan commitment. Valid value is ONE_YEAR.
property renewalType
renewalType: pulumi.Input<string>;Specifies whether the term of your reserved queue pricing plan. Valid values are AUTO_RENEW or EXPIRE.
property reservedSlots
reservedSlots: pulumi.Input<number>;Specifies the number of reserved transcode slots (RTS) for queue.
namespace mediapackage
interface ChannelHlsIngest
interface ChannelHlsIngestproperty ingestEndpoints
ingestEndpoints?: pulumi.Input<pulumi.Input<ChannelHlsIngestIngestEndpoint>[]>;A list of the ingest endpoints
interface ChannelHlsIngestIngestEndpoint
interface ChannelHlsIngestIngestEndpointproperty password
password?: pulumi.Input<string>;The password
property url
url?: pulumi.Input<string>;The URL
property username
username?: pulumi.Input<string>;The username
namespace mq
interface BrokerConfiguration
interface BrokerConfigurationproperty id
id?: pulumi.Input<string>;The Configuration ID.
property revision
revision?: pulumi.Input<number>;Revision of the Configuration.
interface BrokerEncryptionOptions
interface BrokerEncryptionOptionsproperty kmsKeyId
kmsKeyId?: pulumi.Input<string>;Amazon Resource Name (ARN) of Key Management Service (KMS) Customer Master Key (CMK) to use for encryption at rest. Requires setting useAwsOwnedKey to false. To perform drift detection when AWS managed CMKs or customer managed CMKs are in use, this value must be configured.
property useAwsOwnedKey
useAwsOwnedKey?: pulumi.Input<boolean>;Boolean to enable an AWS owned Key Management Service (KMS) Customer Master Key (CMK) that is not in your account. Defaults to true. Setting to false without configuring kmsKeyId will create an AWS managed Customer Master Key (CMK) aliased to aws/mq in your account.
interface BrokerInstance
interface BrokerInstanceproperty consoleUrl
consoleUrl?: pulumi.Input<string>;property endpoints
endpoints?: pulumi.Input<pulumi.Input<string>[]>;property ipAddress
ipAddress?: pulumi.Input<string>;interface BrokerLogs
interface BrokerLogsproperty audit
audit?: pulumi.Input<boolean>;Enables audit logging. User management action made using JMX or the ActiveMQ Web Console is logged. Defaults to false.
property general
general?: pulumi.Input<boolean>;Enables general logging via CloudWatch. Defaults to false.
interface BrokerMaintenanceWindowStartTime
interface BrokerMaintenanceWindowStartTimeproperty dayOfWeek
dayOfWeek: pulumi.Input<string>;The day of the week. e.g. MONDAY, TUESDAY, or WEDNESDAY
property timeOfDay
timeOfDay: pulumi.Input<string>;The time, in 24-hour format. e.g. 02:00
property timeZone
timeZone: pulumi.Input<string>;The time zone, UTC by default, in either the Country/City format, or the UTC offset format. e.g. CET
interface BrokerUser
interface BrokerUserproperty consoleAccess
consoleAccess?: pulumi.Input<boolean>;Whether to enable access to the ActiveMQ Web Console for the user.
property groups
groups?: pulumi.Input<pulumi.Input<string>[]>;The list of groups (20 maximum) to which the ActiveMQ user belongs.
property password
password: pulumi.Input<string>;The password of the user. It must be 12 to 250 characters long, at least 4 unique characters, and must not contain commas.
property username
username: pulumi.Input<string>;The username of the user.
interface GetBrokerLogs
interface GetBrokerLogsproperty audit
audit?: undefined | false | true;property general
general?: undefined | false | true;namespace msk
interface ClusterBrokerNodeGroupInfo
interface ClusterBrokerNodeGroupInfoproperty azDistribution
azDistribution?: pulumi.Input<string>;The distribution of broker nodes across availability zones (documentation). Currently the only valid value is DEFAULT.
property clientSubnets
clientSubnets: pulumi.Input<pulumi.Input<string>[]>;A list of subnets to connect to in client VPC (documentation).
property ebsVolumeSize
ebsVolumeSize: pulumi.Input<number>;The size in GiB of the EBS volume for the data drive on each broker node.
property instanceType
instanceType: pulumi.Input<string>;Specify the instance type to use for the kafka brokers. e.g. kafka.m5.large. (Pricing info)
property securityGroups
securityGroups: pulumi.Input<pulumi.Input<string>[]>;A list of the security groups to associate with the elastic network interfaces to control who can communicate with the cluster.
interface ClusterClientAuthentication
interface ClusterClientAuthenticationproperty tls
tls?: pulumi.Input<ClusterClientAuthenticationTls>;Configuration block for specifying TLS client authentication. See below.
interface ClusterClientAuthenticationTls
interface ClusterClientAuthenticationTlsproperty certificateAuthorityArns
certificateAuthorityArns?: pulumi.Input<pulumi.Input<string>[]>;List of ACM Certificate Authority Amazon Resource Names (ARNs).
interface ClusterConfigurationInfo
interface ClusterConfigurationInfoproperty arn
arn: pulumi.Input<string>;Amazon Resource Name (ARN) of the MSK Configuration to use in the cluster.
property revision
revision: pulumi.Input<number>;Revision of the MSK Configuration to use in the cluster.
interface ClusterEncryptionInfo
interface ClusterEncryptionInfoproperty encryptionAtRestKmsKeyArn
encryptionAtRestKmsKeyArn?: pulumi.Input<string>;You may specify a KMS key short ID or ARN (it will always output an ARN) to use for encrypting your data at rest. If no key is specified, an AWS managed KMS (‘aws/msk’ managed service) key will be used for encrypting the data at rest.
property encryptionInTransit
encryptionInTransit?: pulumi.Input<ClusterEncryptionInfoEncryptionInTransit>;Configuration block to specify encryption in transit. See below.
interface ClusterEncryptionInfoEncryptionInTransit
interface ClusterEncryptionInfoEncryptionInTransitproperty clientBroker
clientBroker?: pulumi.Input<string>;Encryption setting for data in transit between clients and brokers. Valid values: TLS, TLS_PLAINTEXT, and PLAINTEXT. Default value is TLS_PLAINTEXT when encryptionInTransit block defined, but TLS when encryptionInTransit block omitted.
property inCluster
inCluster?: pulumi.Input<boolean>;Whether data communication among broker nodes is encrypted. Default value: true.
interface ClusterLoggingInfo
interface ClusterLoggingInfoproperty brokerLogs
brokerLogs: pulumi.Input<ClusterLoggingInfoBrokerLogs>;Configuration block for Broker Logs settings for logging info. See below.
interface ClusterLoggingInfoBrokerLogs
interface ClusterLoggingInfoBrokerLogsproperty cloudwatchLogs
cloudwatchLogs?: pulumi.Input<ClusterLoggingInfoBrokerLogsCloudwatchLogs>;property firehose
firehose?: pulumi.Input<ClusterLoggingInfoBrokerLogsFirehose>;property s3
s3?: pulumi.Input<ClusterLoggingInfoBrokerLogsS3>;interface ClusterLoggingInfoBrokerLogsCloudwatchLogs
interface ClusterLoggingInfoBrokerLogsCloudwatchLogsproperty enabled
enabled: pulumi.Input<boolean>;Indicates whether you want to enable or disable streaming broker logs to Cloudwatch Logs.
property logGroup
logGroup?: pulumi.Input<string>;Name of the Cloudwatch Log Group to deliver logs to.
interface ClusterLoggingInfoBrokerLogsFirehose
interface ClusterLoggingInfoBrokerLogsFirehoseproperty deliveryStream
deliveryStream?: pulumi.Input<string>;Name of the Kinesis Data Firehose delivery stream to deliver logs to.
property enabled
enabled: pulumi.Input<boolean>;Indicates whether you want to enable or disable streaming broker logs to Cloudwatch Logs.
interface ClusterLoggingInfoBrokerLogsS3
interface ClusterLoggingInfoBrokerLogsS3property bucket
bucket?: pulumi.Input<string>;Name of the S3 bucket to deliver logs to.
property enabled
enabled: pulumi.Input<boolean>;Indicates whether you want to enable or disable streaming broker logs to Cloudwatch Logs.
property prefix
prefix?: pulumi.Input<string>;Prefix to append to the folder name.
interface ClusterOpenMonitoring
interface ClusterOpenMonitoringproperty prometheus
prometheus: pulumi.Input<ClusterOpenMonitoringPrometheus>;Configuration block for Prometheus settings for open monitoring. See below.
interface ClusterOpenMonitoringPrometheus
interface ClusterOpenMonitoringPrometheusproperty jmxExporter
jmxExporter?: pulumi.Input<ClusterOpenMonitoringPrometheusJmxExporter>;Configuration block for JMX Exporter. See below.
property nodeExporter
nodeExporter?: pulumi.Input<ClusterOpenMonitoringPrometheusNodeExporter>;Configuration block for Node Exporter. See below.
interface ClusterOpenMonitoringPrometheusJmxExporter
interface ClusterOpenMonitoringPrometheusJmxExporterproperty enabledInBroker
enabledInBroker: pulumi.Input<boolean>;Indicates whether you want to enable or disable the JMX Exporter.
interface ClusterOpenMonitoringPrometheusNodeExporter
interface ClusterOpenMonitoringPrometheusNodeExporterproperty enabledInBroker
enabledInBroker: pulumi.Input<boolean>;Indicates whether you want to enable or disable the JMX Exporter.
namespace neptune
interface ClusterParameterGroupParameter
interface ClusterParameterGroupParameterproperty applyMethod
applyMethod?: pulumi.Input<string>;Valid values are immediate and pending-reboot. Defaults to pending-reboot.
property name
name: pulumi.Input<string>;The name of the neptune parameter.
property value
value: pulumi.Input<string>;The value of the neptune parameter.
interface ParameterGroupParameter
interface ParameterGroupParameterproperty applyMethod
applyMethod?: pulumi.Input<string>;The apply method of the Neptune parameter. Valid values are immediate and pending-reboot. Defaults to pending-reboot.
property name
name: pulumi.Input<string>;The name of the Neptune parameter.
property value
value: pulumi.Input<string>;The value of the Neptune parameter.
namespace opsworks
interface ApplicationAppSource
interface ApplicationAppSourceproperty password
password?: pulumi.Input<string>;Password to use when authenticating to the source. This provider cannot perform drift detection of this configuration.
property revision
revision?: pulumi.Input<string>;For sources that are version-aware, the revision to use.
property sshKey
sshKey?: pulumi.Input<string>;SSH key to use when authenticating to the source. This provider cannot perform drift detection of this configuration.
property type
type: pulumi.Input<string>;The type of source to use. For example, “archive”.
property url
url?: pulumi.Input<string>;The URL where the app resource can be found.
property username
username?: pulumi.Input<string>;Username to use when authenticating to the source.
interface ApplicationEnvironment
interface ApplicationEnvironmentproperty key
key: pulumi.Input<string>;Variable name.
property secure
secure?: pulumi.Input<boolean>;Set visibility of the variable value to true or false.
property value
value: pulumi.Input<string>;Variable value.
interface ApplicationSslConfiguration
interface ApplicationSslConfigurationproperty certificate
certificate: pulumi.Input<string>;The contents of the certificate’s domain.crt file.
property chain
chain?: pulumi.Input<string>;Can be used to specify an intermediate certificate authority key or client authentication.
property privateKey
privateKey: pulumi.Input<string>;The private key; the contents of the certificate’s domain.key file.
interface CustomLayerEbsVolume
interface CustomLayerEbsVolumeproperty encrypted
encrypted?: pulumi.Input<boolean>;Encrypt the volume.
property iops
iops?: pulumi.Input<number>;For PIOPS volumes, the IOPS per disk.
property mountPoint
mountPoint: pulumi.Input<string>;The path to mount the EBS volume on the layer’s instances.
property numberOfDisks
numberOfDisks: pulumi.Input<number>;The number of disks to use for the EBS volume.
property raidLevel
raidLevel?: pulumi.Input<string>;The RAID level to use for the volume.
property size
size: pulumi.Input<number>;The size of the volume in gigabytes.
property type
type?: pulumi.Input<string>;The type of volume to create. This may be standard (the default), io1 or gp2.
interface GangliaLayerEbsVolume
interface GangliaLayerEbsVolumeproperty encrypted
encrypted?: pulumi.Input<boolean>;property iops
iops?: pulumi.Input<number>;For PIOPS volumes, the IOPS per disk.
property mountPoint
mountPoint: pulumi.Input<string>;The path to mount the EBS volume on the layer’s instances.
property numberOfDisks
numberOfDisks: pulumi.Input<number>;The number of disks to use for the EBS volume.
property raidLevel
raidLevel?: pulumi.Input<string>;The RAID level to use for the volume.
property size
size: pulumi.Input<number>;The size of the volume in gigabytes.
property type
type?: pulumi.Input<string>;The type of volume to create. This may be standard (the default), io1 or gp2.
interface HaproxyLayerEbsVolume
interface HaproxyLayerEbsVolumeproperty encrypted
encrypted?: pulumi.Input<boolean>;property iops
iops?: pulumi.Input<number>;For PIOPS volumes, the IOPS per disk.
property mountPoint
mountPoint: pulumi.Input<string>;The path to mount the EBS volume on the layer’s instances.
property numberOfDisks
numberOfDisks: pulumi.Input<number>;The number of disks to use for the EBS volume.
property raidLevel
raidLevel?: pulumi.Input<string>;The RAID level to use for the volume.
property size
size: pulumi.Input<number>;The size of the volume in gigabytes.
property type
type?: pulumi.Input<string>;The type of volume to create. This may be standard (the default), io1 or gp2.
interface InstanceEbsBlockDevice
interface InstanceEbsBlockDeviceproperty deleteOnTermination
deleteOnTermination?: pulumi.Input<boolean>;property deviceName
deviceName: pulumi.Input<string>;property iops
iops?: pulumi.Input<number>;property snapshotId
snapshotId?: pulumi.Input<string>;property volumeSize
volumeSize?: pulumi.Input<number>;property volumeType
volumeType?: pulumi.Input<string>;interface InstanceEphemeralBlockDevice
interface InstanceEphemeralBlockDeviceproperty deviceName
deviceName: pulumi.Input<string>;property virtualName
virtualName: pulumi.Input<string>;interface InstanceRootBlockDevice
interface InstanceRootBlockDeviceproperty deleteOnTermination
deleteOnTermination?: pulumi.Input<boolean>;property iops
iops?: pulumi.Input<number>;property volumeSize
volumeSize?: pulumi.Input<number>;property volumeType
volumeType?: pulumi.Input<string>;interface JavaAppLayerEbsVolume
interface JavaAppLayerEbsVolumeproperty encrypted
encrypted?: pulumi.Input<boolean>;property iops
iops?: pulumi.Input<number>;For PIOPS volumes, the IOPS per disk.
property mountPoint
mountPoint: pulumi.Input<string>;The path to mount the EBS volume on the layer’s instances.
property numberOfDisks
numberOfDisks: pulumi.Input<number>;The number of disks to use for the EBS volume.
property raidLevel
raidLevel?: pulumi.Input<string>;The RAID level to use for the volume.
property size
size: pulumi.Input<number>;The size of the volume in gigabytes.
property type
type?: pulumi.Input<string>;The type of volume to create. This may be standard (the default), io1 or gp2.
interface MemcachedLayerEbsVolume
interface MemcachedLayerEbsVolumeproperty encrypted
encrypted?: pulumi.Input<boolean>;property iops
iops?: pulumi.Input<number>;For PIOPS volumes, the IOPS per disk.
property mountPoint
mountPoint: pulumi.Input<string>;The path to mount the EBS volume on the layer’s instances.
property numberOfDisks
numberOfDisks: pulumi.Input<number>;The number of disks to use for the EBS volume.
property raidLevel
raidLevel?: pulumi.Input<string>;The RAID level to use for the volume.
property size
size: pulumi.Input<number>;The size of the volume in gigabytes.
property type
type?: pulumi.Input<string>;The type of volume to create. This may be standard (the default), io1 or gp2.
interface MysqlLayerEbsVolume
interface MysqlLayerEbsVolumeproperty encrypted
encrypted?: pulumi.Input<boolean>;property iops
iops?: pulumi.Input<number>;For PIOPS volumes, the IOPS per disk.
property mountPoint
mountPoint: pulumi.Input<string>;The path to mount the EBS volume on the layer’s instances.
property numberOfDisks
numberOfDisks: pulumi.Input<number>;The number of disks to use for the EBS volume.
property raidLevel
raidLevel?: pulumi.Input<string>;The RAID level to use for the volume.
property size
size: pulumi.Input<number>;The size of the volume in gigabytes.
property type
type?: pulumi.Input<string>;The type of volume to create. This may be standard (the default), io1 or gp2.
interface NodejsAppLayerEbsVolume
interface NodejsAppLayerEbsVolumeproperty encrypted
encrypted?: pulumi.Input<boolean>;property iops
iops?: pulumi.Input<number>;For PIOPS volumes, the IOPS per disk.
property mountPoint
mountPoint: pulumi.Input<string>;The path to mount the EBS volume on the layer’s instances.
property numberOfDisks
numberOfDisks: pulumi.Input<number>;The number of disks to use for the EBS volume.
property raidLevel
raidLevel?: pulumi.Input<string>;The RAID level to use for the volume.
property size
size: pulumi.Input<number>;The size of the volume in gigabytes.
property type
type?: pulumi.Input<string>;The type of volume to create. This may be standard (the default), io1 or gp2.
interface PhpAppLayerEbsVolume
interface PhpAppLayerEbsVolumeproperty encrypted
encrypted?: pulumi.Input<boolean>;property iops
iops?: pulumi.Input<number>;For PIOPS volumes, the IOPS per disk.
property mountPoint
mountPoint: pulumi.Input<string>;The path to mount the EBS volume on the layer’s instances.
property numberOfDisks
numberOfDisks: pulumi.Input<number>;The number of disks to use for the EBS volume.
property raidLevel
raidLevel?: pulumi.Input<string>;The RAID level to use for the volume.
property size
size: pulumi.Input<number>;The size of the volume in gigabytes.
property type
type?: pulumi.Input<string>;The type of volume to create. This may be standard (the default), io1 or gp2.
interface RailsAppLayerEbsVolume
interface RailsAppLayerEbsVolumeproperty encrypted
encrypted?: pulumi.Input<boolean>;property iops
iops?: pulumi.Input<number>;For PIOPS volumes, the IOPS per disk.
property mountPoint
mountPoint: pulumi.Input<string>;The path to mount the EBS volume on the layer’s instances.
property numberOfDisks
numberOfDisks: pulumi.Input<number>;The number of disks to use for the EBS volume.
property raidLevel
raidLevel?: pulumi.Input<string>;The RAID level to use for the volume.
property size
size: pulumi.Input<number>;The size of the volume in gigabytes.
property type
type?: pulumi.Input<string>;The type of volume to create. This may be standard (the default), io1 or gp2.
interface StackCustomCookbooksSource
interface StackCustomCookbooksSourceproperty password
password?: pulumi.Input<string>;Password to use when authenticating to the source. The provider cannot perform drift detection of this configuration.
property revision
revision?: pulumi.Input<string>;For sources that are version-aware, the revision to use.
property sshKey
sshKey?: pulumi.Input<string>;SSH key to use when authenticating to the source. The provider cannot perform drift detection of this configuration.
property type
type: pulumi.Input<string>;The type of source to use. For example, “archive”.
property url
url: pulumi.Input<string>;The URL where the cookbooks resource can be found.
property username
username?: pulumi.Input<string>;Username to use when authenticating to the source.
interface StaticWebLayerEbsVolume
interface StaticWebLayerEbsVolumeproperty encrypted
encrypted?: pulumi.Input<boolean>;property iops
iops?: pulumi.Input<number>;For PIOPS volumes, the IOPS per disk.
property mountPoint
mountPoint: pulumi.Input<string>;The path to mount the EBS volume on the layer’s instances.
property numberOfDisks
numberOfDisks: pulumi.Input<number>;The number of disks to use for the EBS volume.
property raidLevel
raidLevel?: pulumi.Input<string>;The RAID level to use for the volume.
property size
size: pulumi.Input<number>;The size of the volume in gigabytes.
property type
type?: pulumi.Input<string>;The type of volume to create. This may be standard (the default), io1 or gp2.
namespace organizations
interface OrganizationAccount
interface OrganizationAccountproperty arn
arn?: pulumi.Input<string>;ARN of the root
property email
email?: pulumi.Input<string>;Email of the account
property id
id?: pulumi.Input<string>;Identifier of the root
property name
name?: pulumi.Input<string>;The name of the policy type
property status
status?: pulumi.Input<string>;The status of the policy type as it relates to the associated root
interface OrganizationalUnitAccount
interface OrganizationalUnitAccountproperty arn
arn?: pulumi.Input<string>;ARN of the organizational unit
property email
email?: pulumi.Input<string>;Email of the account
property id
id?: pulumi.Input<string>;Identifier of the organization unit
property name
name?: pulumi.Input<string>;The name for the organizational unit
interface OrganizationNonMasterAccount
interface OrganizationNonMasterAccountproperty arn
arn?: pulumi.Input<string>;ARN of the root
property email
email?: pulumi.Input<string>;Email of the account
property id
id?: pulumi.Input<string>;Identifier of the root
property name
name?: pulumi.Input<string>;The name of the policy type
property status
status?: pulumi.Input<string>;The status of the policy type as it relates to the associated root
interface OrganizationRoot
interface OrganizationRootproperty arn
arn?: pulumi.Input<string>;ARN of the root
property id
id?: pulumi.Input<string>;Identifier of the root
property name
name?: pulumi.Input<string>;The name of the policy type
property policyTypes
policyTypes?: pulumi.Input<pulumi.Input<OrganizationRootPolicyType>[]>;List of policy types enabled for this root. All elements have these attributes:
interface OrganizationRootPolicyType
interface OrganizationRootPolicyTypeproperty status
status?: pulumi.Input<string>;The status of the policy type as it relates to the associated root
property type
type?: pulumi.Input<string>;namespace pinpoint
interface AppCampaignHook
interface AppCampaignHookproperty lambdaFunctionName
lambdaFunctionName?: pulumi.Input<string>;Lambda function name or ARN to be called for delivery. Conflicts with webUrl
property mode
mode?: pulumi.Input<string>;What mode Lambda should be invoked in. Valid values for this parameter are DELIVERY, FILTER.
property webUrl
webUrl?: pulumi.Input<string>;Web URL to call for hook. If the URL has authentication specified it will be added as authentication to the request. Conflicts with lambdaFunctionName
interface AppLimits
interface AppLimitsproperty daily
daily?: pulumi.Input<number>;The maximum number of messages that the campaign can send daily.
property maximumDuration
maximumDuration?: pulumi.Input<number>;The length of time (in seconds) that the campaign can run before it ends and message deliveries stop. This duration begins at the scheduled start time for the campaign. The minimum value is 60.
property messagesPerSecond
messagesPerSecond?: pulumi.Input<number>;The number of messages that the campaign can send per second. The minimum value is 50, and the maximum is 20000.
property total
total?: pulumi.Input<number>;The maximum total number of messages that the campaign can send.
interface AppQuietTime
interface AppQuietTimeproperty end
end?: pulumi.Input<string>;The default end time for quiet time in ISO 8601 format. Required if start is set
property start
start?: pulumi.Input<string>;The default start time for quiet time in ISO 8601 format. Required if end is set
namespace pricing
interface GetProductFilter
interface GetProductFilterproperty field
field: string;The product attribute name that you want to filter on.
property value
value: string;The product attribute value that you want to filter on.
namespace ram
interface GetResourceShareFilter
interface GetResourceShareFilterproperty name
name: string;The name of the tag key to filter on.
property values
values: string[];The value of the tag key.
namespace rds
interface ClusterParameterGroupParameter
interface ClusterParameterGroupParameterproperty applyMethod
applyMethod?: pulumi.Input<string>;“immediate” (default), or “pending-reboot”. Some engines can’t apply some parameters without a reboot, and you will need to specify “pending-reboot” here.
property name
name: pulumi.Input<string>;The name of the DB parameter.
property value
value: pulumi.Input<string>;The value of the DB parameter.
interface ClusterS3Import
interface ClusterS3Importproperty bucketName
bucketName: pulumi.Input<string>;The bucket name where your backup is stored
property bucketPrefix
bucketPrefix?: pulumi.Input<string>;Can be blank, but is the path to your backup
property ingestionRole
ingestionRole: pulumi.Input<string>;Role applied to load the data.
property sourceEngine
sourceEngine: pulumi.Input<string>;Source engine for the backup
property sourceEngineVersion
sourceEngineVersion: pulumi.Input<string>;Version of the source engine used to make the backup
interface ClusterScalingConfiguration
interface ClusterScalingConfigurationproperty autoPause
autoPause?: pulumi.Input<boolean>;Whether to enable automatic pause. A DB cluster can be paused only when it’s idle (it has no connections). If a DB cluster is paused for more than seven days, the DB cluster might be backed up with a snapshot. In this case, the DB cluster is restored when there is a request to connect to it. Defaults to true.
property maxCapacity
maxCapacity?: pulumi.Input<number>;The maximum capacity. The maximum capacity must be greater than or equal to the minimum capacity. Valid capacity values are 1, 2, 4, 8, 16, 32, 64, 128, and 256. Defaults to 16.
property minCapacity
minCapacity?: pulumi.Input<number>;The minimum capacity. The minimum capacity must be lesser than or equal to the maximum capacity. Valid capacity values are 1, 2, 4, 8, 16, 32, 64, 128, and 256. Defaults to 2.
property secondsUntilAutoPause
secondsUntilAutoPause?: pulumi.Input<number>;The time, in seconds, before an Aurora DB cluster in serverless mode is paused. Valid values are 300 through 86400. Defaults to 300.
property timeoutAction
timeoutAction?: pulumi.Input<string>;The action to take when the timeout is reached. Valid values: ForceApplyCapacityChange, RollbackCapacityChange. Defaults to RollbackCapacityChange. See documentation.
interface InstanceS3Import
interface InstanceS3Importproperty bucketName
bucketName: pulumi.Input<string>;The bucket name where your backup is stored
property bucketPrefix
bucketPrefix?: pulumi.Input<string>;Can be blank, but is the path to your backup
property ingestionRole
ingestionRole: pulumi.Input<string>;Role applied to load the data.
property sourceEngine
sourceEngine: pulumi.Input<string>;Source engine for the backup
property sourceEngineVersion
sourceEngineVersion: pulumi.Input<string>;Version of the source engine used to make the backup
interface OptionGroupOption
interface OptionGroupOptionproperty dbSecurityGroupMemberships
dbSecurityGroupMemberships?: pulumi.Input<pulumi.Input<string>[]>;A list of DB Security Groups for which the option is enabled.
property optionName
optionName: pulumi.Input<string>;The Name of the Option (e.g. MEMCACHED).
property optionSettings
optionSettings?: pulumi.Input<pulumi.Input<OptionGroupOptionOptionSetting>[]>;A list of option settings to apply.
property port
port?: pulumi.Input<number>;The Port number when connecting to the Option (e.g. 11211).
property version
version?: pulumi.Input<string>;The version of the option (e.g. 13.1.0.0).
property vpcSecurityGroupMemberships
vpcSecurityGroupMemberships?: pulumi.Input<pulumi.Input<string>[]>;A list of VPC Security Groups for which the option is enabled.
interface OptionGroupOptionOptionSetting
interface OptionGroupOptionOptionSettingproperty name
name: pulumi.Input<string>;The Name of the setting.
property value
value: pulumi.Input<string>;The Value of the setting.
interface ParameterGroupParameter
interface ParameterGroupParameterproperty applyMethod
applyMethod?: pulumi.Input<string>;“immediate” (default), or “pending-reboot”. Some engines can’t apply some parameters without a reboot, and you will need to specify “pending-reboot” here.
property name
name: pulumi.Input<string>;The name of the DB parameter.
property value
value: pulumi.Input<string>;The value of the DB parameter.
interface SecurityGroupIngress
interface SecurityGroupIngressproperty cidr
cidr?: pulumi.Input<string>;The CIDR block to accept
property securityGroupId
securityGroupId?: pulumi.Input<string>;The ID of the security group to authorize
property securityGroupName
securityGroupName?: pulumi.Input<string>;The name of the security group to authorize
property securityGroupOwnerId
securityGroupOwnerId?: pulumi.Input<string>;The owner Id of the security group provided
by securityGroupName.
namespace redshift
interface ClusterLogging
interface ClusterLoggingproperty bucketName
bucketName?: pulumi.Input<string>;The name of an existing S3 bucket where the log files are to be stored. Must be in the same region as the cluster and the cluster must have read bucket and put object permissions. For more information on the permissions required for the bucket, please read the AWS documentation
property enable
enable: pulumi.Input<boolean>;Enables logging information such as queries and connection attempts, for the specified Amazon Redshift cluster.
property s3KeyPrefix
s3KeyPrefix?: pulumi.Input<string>;The prefix applied to the log file names.
interface ClusterSnapshotCopy
interface ClusterSnapshotCopyproperty destinationRegion
destinationRegion: pulumi.Input<string>;The destination region that you want to copy snapshots to.
property grantName
grantName?: pulumi.Input<string>;The name of the snapshot copy grant to use when snapshots of an AWS KMS-encrypted cluster are copied to the destination region.
property retentionPeriod
retentionPeriod?: pulumi.Input<number>;The number of days to retain automated snapshots in the destination region after they are copied from the source region. Defaults to 7.
interface ParameterGroupParameter
interface ParameterGroupParameterproperty name
name: pulumi.Input<string>;The name of the Redshift parameter.
property value
value: pulumi.Input<string>;The value of the Redshift parameter.
interface SecurityGroupIngress
interface SecurityGroupIngressproperty cidr
cidr?: pulumi.Input<string>;The CIDR block to accept
property securityGroupName
securityGroupName?: pulumi.Input<string>;The name of the security group to authorize
property securityGroupOwnerId
securityGroupOwnerId?: pulumi.Input<string>;The owner Id of the security group provided
by securityGroupName.
namespace resourcegroups
interface GroupResourceQuery
interface GroupResourceQueryproperty query
query: pulumi.Input<string>;The resource query as a JSON string.
property type
type?: pulumi.Input<string>;The type of the resource query. Defaults to TAG_FILTERS_1_0.
namespace route53
interface RecordAlias
interface RecordAliasproperty evaluateTargetHealth
evaluateTargetHealth: pulumi.Input<boolean>;Set to true if you want Route 53 to determine whether to respond to DNS queries using this resource record set by checking the health of the resource record set. Some resources have special requirements, see related part of documentation.
property name
name: pulumi.Input<string>;DNS domain name for a CloudFront distribution, S3 bucket, ELB, or another resource record set in this hosted zone.
property zoneId
zoneId: pulumi.Input<string>;Hosted zone ID for a CloudFront distribution, S3 bucket, ELB, or Route 53 hosted zone. See resource_elb.zone_id for example.
interface RecordFailoverRoutingPolicy
interface RecordFailoverRoutingPolicyproperty type
type: pulumi.Input<string>;PRIMARY or SECONDARY. A PRIMARY record will be served if its healthcheck is passing, otherwise the SECONDARY will be served. See http://docs.aws.amazon.com/Route53/latest/DeveloperGuide/dns-failover-configuring-options.html#dns-failover-failover-rrsets
interface RecordGeolocationRoutingPolicy
interface RecordGeolocationRoutingPolicyproperty continent
continent?: pulumi.Input<string>;A two-letter continent code. See http://docs.aws.amazon.com/Route53/latest/APIReference/API_GetGeoLocation.html for code details. Either continent or country must be specified.
property country
country?: pulumi.Input<string>;A two-character country code or * to indicate a default resource record set.
property subdivision
subdivision?: pulumi.Input<string>;A subdivision code for a country.
interface RecordLatencyRoutingPolicy
interface RecordLatencyRoutingPolicyproperty region
region: pulumi.Input<string>;An AWS region from which to measure latency. See http://docs.aws.amazon.com/Route53/latest/DeveloperGuide/routing-policy.html#routing-policy-latency
interface RecordWeightedRoutingPolicy
interface RecordWeightedRoutingPolicyproperty weight
weight: pulumi.Input<number>;A numeric value indicating the relative weight of the record. See http://docs.aws.amazon.com/Route53/latest/DeveloperGuide/routing-policy.html#routing-policy-weighted.
interface ResolverEndpointIpAddress
interface ResolverEndpointIpAddressproperty ip
ip?: pulumi.Input<string>;The IP address in the subnet that you want to use for DNS queries.
property ipId
ipId?: pulumi.Input<string>;property subnetId
subnetId: pulumi.Input<string>;The ID of the subnet that contains the IP address.
interface ResolverRuleTargetIp
interface ResolverRuleTargetIpproperty ip
ip: pulumi.Input<string>;One IP address that you want to forward DNS queries to. You can specify only IPv4 addresses.
property port
port?: pulumi.Input<number>;The port at ip that you want to forward DNS queries to. Default value is 53
interface ZoneVpc
interface ZoneVpcproperty vpcId
vpcId: pulumi.Input<string>;ID of the VPC to associate.
property vpcRegion
vpcRegion?: pulumi.Input<string>;Region of the VPC to associate. Defaults to AWS provider region.
namespace s3
interface AccessPointPublicAccessBlockConfiguration
interface AccessPointPublicAccessBlockConfigurationproperty blockPublicAcls
blockPublicAcls?: pulumi.Input<boolean>;Whether Amazon S3 should block public ACLs for buckets in this account. Defaults to true. Enabling this setting does not affect existing policies or ACLs. When set to true causes the following behavior:
* PUT Bucket acl and PUT Object acl calls fail if the specified ACL is public.
* PUT Object calls fail if the request includes a public ACL.
* PUT Bucket calls fail if the request includes a public ACL.
property blockPublicPolicy
blockPublicPolicy?: pulumi.Input<boolean>;Whether Amazon S3 should block public bucket policies for buckets in this account. Defaults to true. Enabling this setting does not affect existing bucket policies. When set to true causes Amazon S3 to:
* Reject calls to PUT Bucket policy if the specified bucket policy allows public access.
property ignorePublicAcls
ignorePublicAcls?: pulumi.Input<boolean>;Whether Amazon S3 should ignore public ACLs for buckets in this account. Defaults to true. Enabling this setting does not affect the persistence of any existing ACLs and doesn’t prevent new public ACLs from being set. When set to true causes Amazon S3 to:
* Ignore all public ACLs on buckets in this account and any objects that they contain.
property restrictPublicBuckets
restrictPublicBuckets?: pulumi.Input<boolean>;Whether Amazon S3 should restrict public bucket policies for buckets in this account. Defaults to true. Enabling this setting does not affect previously stored bucket policies, except that public and cross-account access within any public bucket policy, including non-public delegation to specific accounts, is blocked. When set to true:
* Only the bucket owner and AWS Services can access buckets with public policies.
interface AccessPointVpcConfiguration
interface AccessPointVpcConfigurationproperty vpcId
vpcId: pulumi.Input<string>;This access point will only allow connections from the specified VPC ID.
interface AnalyticsConfigurationFilter
interface AnalyticsConfigurationFilterproperty prefix
prefix?: pulumi.Input<string>;Object prefix for filtering.
property tags
tags?: pulumi.Input<{[key: string]: any}>;Set of object tags for filtering.
interface AnalyticsConfigurationStorageClassAnalysis
interface AnalyticsConfigurationStorageClassAnalysisproperty dataExport
dataExport: pulumi.Input<AnalyticsConfigurationStorageClassAnalysisDataExport>;Data export configuration (documented below).
interface AnalyticsConfigurationStorageClassAnalysisDataExport
interface AnalyticsConfigurationStorageClassAnalysisDataExportproperty destination
destination: pulumi.Input<AnalyticsConfigurationStorageClassAnalysisDataExportDestination>;Specifies the destination for the exported analytics data (documented below).
property outputSchemaVersion
outputSchemaVersion?: pulumi.Input<string>;The schema version of exported analytics data. Allowed values: V_1. Default value: V_1.
interface AnalyticsConfigurationStorageClassAnalysisDataExportDestination
interface AnalyticsConfigurationStorageClassAnalysisDataExportDestinationproperty s3BucketDestination
s3BucketDestination: pulumi.Input<AnalyticsConfigurationStorageClassAnalysisDataExportDestinationS3BucketDestination>;Analytics data export currently only supports an S3 bucket destination (documented below).
interface AnalyticsConfigurationStorageClassAnalysisDataExportDestinationS3BucketDestination
interface AnalyticsConfigurationStorageClassAnalysisDataExportDestinationS3BucketDestinationproperty bucketAccountId
bucketAccountId?: pulumi.Input<string>;The account ID that owns the destination bucket.
property bucketArn
bucketArn: pulumi.Input<string>;The ARN of the destination bucket.
property format
format?: pulumi.Input<string>;The output format of exported analytics data. Allowed values: CSV. Default value: CSV.
property prefix
prefix?: pulumi.Input<string>;Object prefix for filtering.
interface BucketCorsRule
interface BucketCorsRuleproperty allowedHeaders
allowedHeaders?: pulumi.Input<pulumi.Input<string>[]>;Specifies which headers are allowed.
property allowedMethods
allowedMethods: pulumi.Input<pulumi.Input<string>[]>;Specifies which methods are allowed. Can be GET, PUT, POST, DELETE or HEAD.
property allowedOrigins
allowedOrigins: pulumi.Input<pulumi.Input<string>[]>;Specifies which origins are allowed.
property exposeHeaders
exposeHeaders?: pulumi.Input<pulumi.Input<string>[]>;Specifies expose header in the response.
property maxAgeSeconds
maxAgeSeconds?: pulumi.Input<number>;Specifies time in seconds that browser can cache the response for a preflight request.
interface BucketGrant
interface BucketGrantproperty id
id?: pulumi.Input<string>;Canonical user id to grant for. Used only when type is CanonicalUser.
property permissions
permissions: pulumi.Input<pulumi.Input<string>[]>;List of permissions to apply for grantee. Valid values are READ, WRITE, READ_ACP, WRITE_ACP, FULL_CONTROL.
property type
type: pulumi.Input<string>;- Type of grantee to apply for. Valid values are
CanonicalUserandGroup.AmazonCustomerByEmailis not supported.
property uri
uri?: pulumi.Input<string>;Uri address to grant for. Used only when type is Group.
interface BucketLifecycleRule
interface BucketLifecycleRuleproperty abortIncompleteMultipartUploadDays
abortIncompleteMultipartUploadDays?: pulumi.Input<number>;Specifies the number of days after initiating a multipart upload when the multipart upload must be completed.
property enabled
enabled: pulumi.Input<boolean>;Specifies lifecycle rule status.
property expiration
expiration?: pulumi.Input<BucketLifecycleRuleExpiration>;Specifies a period in the object’s expire (documented below).
property id
id?: pulumi.Input<string>;Unique identifier for the rule.
property noncurrentVersionExpiration
noncurrentVersionExpiration?: pulumi.Input<BucketLifecycleRuleNoncurrentVersionExpiration>;Specifies when noncurrent object versions expire (documented below).
property noncurrentVersionTransitions
noncurrentVersionTransitions?: pulumi.Input<pulumi.Input<BucketLifecycleRuleNoncurrentVersionTransition>[]>;Specifies when noncurrent object versions transitions (documented below).
property prefix
prefix?: pulumi.Input<string>;Object key prefix identifying one or more objects to which the rule applies.
property tags
tags?: pulumi.Input<{[key: string]: any}>;Specifies object tags key and value.
property transitions
transitions?: pulumi.Input<pulumi.Input<BucketLifecycleRuleTransition>[]>;Specifies a period in the object’s transitions (documented below).
interface BucketLifecycleRuleExpiration
interface BucketLifecycleRuleExpirationproperty date
date?: pulumi.Input<string>;Specifies the date after which you want the corresponding action to take effect.
property days
days?: pulumi.Input<number>;Specifies the number of days after object creation when the specific rule action takes effect.
property expiredObjectDeleteMarker
expiredObjectDeleteMarker?: pulumi.Input<boolean>;On a versioned bucket (versioning-enabled or versioning-suspended bucket), you can add this element in the lifecycle configuration to direct Amazon S3 to delete expired object delete markers.
interface BucketLifecycleRuleNoncurrentVersionExpiration
interface BucketLifecycleRuleNoncurrentVersionExpirationproperty days
days?: pulumi.Input<number>;Specifies the number of days noncurrent object versions expire.
interface BucketLifecycleRuleNoncurrentVersionTransition
interface BucketLifecycleRuleNoncurrentVersionTransitionproperty days
days?: pulumi.Input<number>;Specifies the number of days noncurrent object versions transition.
property storageClass
storageClass: pulumi.Input<string>;Specifies the Amazon S3 storage class to which you want the noncurrent object versions to transition. Can be ONEZONE_IA, STANDARD_IA, INTELLIGENT_TIERING, GLACIER, or DEEP_ARCHIVE.
interface BucketLifecycleRuleTransition
interface BucketLifecycleRuleTransitionproperty date
date?: pulumi.Input<string>;Specifies the date after which you want the corresponding action to take effect.
property days
days?: pulumi.Input<number>;Specifies the number of days after object creation when the specific rule action takes effect.
property storageClass
storageClass: pulumi.Input<string>;Specifies the Amazon S3 storage class to which you want the object to transition. Can be ONEZONE_IA, STANDARD_IA, INTELLIGENT_TIERING, GLACIER, or DEEP_ARCHIVE.
interface BucketLogging
interface BucketLoggingproperty targetBucket
targetBucket: pulumi.Input<string>;The name of the bucket that will receive the log objects.
property targetPrefix
targetPrefix?: pulumi.Input<string>;To specify a key prefix for log objects.
interface BucketMetricFilter
interface BucketMetricFilterproperty prefix
prefix?: pulumi.Input<string>;Object prefix for filtering (singular).
property tags
tags?: pulumi.Input<{[key: string]: any}>;Object tags for filtering (up to 10).
interface BucketNotificationLambdaFunction
interface BucketNotificationLambdaFunctionproperty events
events: pulumi.Input<pulumi.Input<string>[]>;Specifies event for which to send notifications.
property filterPrefix
filterPrefix?: pulumi.Input<string>;Specifies object key name prefix.
property filterSuffix
filterSuffix?: pulumi.Input<string>;Specifies object key name suffix.
property id
id?: pulumi.Input<string>;Specifies unique identifier for each of the notification configurations.
property lambdaFunctionArn
lambdaFunctionArn?: pulumi.Input<string>;Specifies Amazon Lambda function ARN.
interface BucketNotificationQueue
interface BucketNotificationQueueproperty events
events: pulumi.Input<pulumi.Input<string>[]>;Specifies event for which to send notifications.
property filterPrefix
filterPrefix?: pulumi.Input<string>;Specifies object key name prefix.
property filterSuffix
filterSuffix?: pulumi.Input<string>;Specifies object key name suffix.
property id
id?: pulumi.Input<string>;Specifies unique identifier for each of the notification configurations.
property queueArn
queueArn: pulumi.Input<string>;Specifies Amazon SQS queue ARN.
interface BucketNotificationTopic
interface BucketNotificationTopicproperty events
events: pulumi.Input<pulumi.Input<string>[]>;Specifies event for which to send notifications.
property filterPrefix
filterPrefix?: pulumi.Input<string>;Specifies object key name prefix.
property filterSuffix
filterSuffix?: pulumi.Input<string>;Specifies object key name suffix.
property id
id?: pulumi.Input<string>;Specifies unique identifier for each of the notification configurations.
property topicArn
topicArn: pulumi.Input<string>;Specifies Amazon SNS topic ARN.
interface BucketObjectLockConfiguration
interface BucketObjectLockConfigurationproperty objectLockEnabled
objectLockEnabled: pulumi.Input<string>;Indicates whether this bucket has an Object Lock configuration enabled. Valid value is Enabled.
property rule
rule?: pulumi.Input<BucketObjectLockConfigurationRule>;The Object Lock rule in place for this bucket.
interface BucketObjectLockConfigurationRule
interface BucketObjectLockConfigurationRuleproperty defaultRetention
defaultRetention: pulumi.Input<BucketObjectLockConfigurationRuleDefaultRetention>;The default retention period that you want to apply to new objects placed in this bucket.
interface BucketObjectLockConfigurationRuleDefaultRetention
interface BucketObjectLockConfigurationRuleDefaultRetentionproperty days
days?: pulumi.Input<number>;The number of days that you want to specify for the default retention period.
property mode
mode: pulumi.Input<string>;The default Object Lock retention mode you want to apply to new objects placed in this bucket. Valid values are GOVERNANCE and COMPLIANCE.
property years
years?: pulumi.Input<number>;The number of years that you want to specify for the default retention period.
interface BucketReplicationConfiguration
interface BucketReplicationConfigurationproperty role
role: pulumi.Input<string>;The ARN of the IAM role for Amazon S3 to assume when replicating the objects.
property rules
rules: pulumi.Input<pulumi.Input<BucketReplicationConfigurationRule>[]>;Specifies the rules managing the replication (documented below).
interface BucketReplicationConfigurationRule
interface BucketReplicationConfigurationRuleproperty destination
destination: pulumi.Input<BucketReplicationConfigurationRuleDestination>;Specifies the destination for the rule (documented below).
property filter
filter?: pulumi.Input<BucketReplicationConfigurationRuleFilter>;Filter that identifies subset of objects to which the replication rule applies (documented below).
property id
id?: pulumi.Input<string>;Unique identifier for the rule.
property prefix
prefix?: pulumi.Input<string>;Object keyname prefix identifying one or more objects to which the rule applies.
property priority
priority?: pulumi.Input<number>;is optional (with a default value of 0) but must be unique between multiple rules
property sourceSelectionCriteria
sourceSelectionCriteria?: pulumi.Input<BucketReplicationConfigurationRuleSourceSelectionCriteria>;Specifies special object selection criteria (documented below).
property status
status: pulumi.Input<string>;The status of the rule. Either Enabled or Disabled. The rule is ignored if status is not Enabled.
interface BucketReplicationConfigurationRuleDestination
interface BucketReplicationConfigurationRuleDestinationproperty accessControlTranslation
accessControlTranslation?: pulumi.Input<BucketReplicationConfigurationRuleDestinationAccessControlTranslation>;Specifies the overrides to use for object owners on replication. Must be used in conjunction with accountId owner override configuration.
property accountId
accountId?: pulumi.Input<string>;The Account ID to use for overriding the object owner on replication. Must be used in conjunction with accessControlTranslation override configuration.
property bucket
bucket: pulumi.Input<string>;The ARN of the S3 bucket where you want Amazon S3 to store replicas of the object identified by the rule.
property replicaKmsKeyId
replicaKmsKeyId?: pulumi.Input<string>;Destination KMS encryption key ARN for SSE-KMS replication. Must be used in conjunction with
sseKmsEncryptedObjects source selection criteria.
property storageClass
storageClass?: pulumi.Input<string>;The class of storage used to store the object. Can be STANDARD, REDUCED_REDUNDANCY, STANDARD_IA, ONEZONE_IA, INTELLIGENT_TIERING, GLACIER, or DEEP_ARCHIVE.
interface BucketReplicationConfigurationRuleDestinationAccessControlTranslation
interface BucketReplicationConfigurationRuleDestinationAccessControlTranslationproperty owner
owner: pulumi.Input<string>;The override value for the owner on replicated objects. Currently only Destination is supported.
interface BucketReplicationConfigurationRuleFilter
interface BucketReplicationConfigurationRuleFilterproperty prefix
prefix?: pulumi.Input<string>;Object keyname prefix that identifies subset of objects to which the rule applies.
property tags
tags?: pulumi.Input<{[key: string]: any}>;A map of tags that identifies subset of objects to which the rule applies. The rule applies only to objects having all the tags in its tagset.
interface BucketReplicationConfigurationRuleSourceSelectionCriteria
interface BucketReplicationConfigurationRuleSourceSelectionCriteriaproperty sseKmsEncryptedObjects
sseKmsEncryptedObjects?: pulumi.Input<BucketReplicationConfigurationRuleSourceSelectionCriteriaSseKmsEncryptedObjects>;Match SSE-KMS encrypted objects (documented below). If specified, replicaKmsKeyId
in destination must be specified as well.
interface BucketReplicationConfigurationRuleSourceSelectionCriteriaSseKmsEncryptedObjects
interface BucketReplicationConfigurationRuleSourceSelectionCriteriaSseKmsEncryptedObjectsproperty enabled
enabled: pulumi.Input<boolean>;Boolean which indicates if this criteria is enabled.
interface BucketServerSideEncryptionConfiguration
interface BucketServerSideEncryptionConfigurationproperty rule
rule: pulumi.Input<BucketServerSideEncryptionConfigurationRule>;A single object for server-side encryption by default configuration. (documented below)
interface BucketServerSideEncryptionConfigurationRule
interface BucketServerSideEncryptionConfigurationRuleproperty applyServerSideEncryptionByDefault
applyServerSideEncryptionByDefault: pulumi.Input<BucketServerSideEncryptionConfigurationRuleApplyServerSideEncryptionByDefault>;A single object for setting server-side encryption by default. (documented below)
interface BucketServerSideEncryptionConfigurationRuleApplyServerSideEncryptionByDefault
interface BucketServerSideEncryptionConfigurationRuleApplyServerSideEncryptionByDefaultproperty kmsMasterKeyId
kmsMasterKeyId?: pulumi.Input<string>;The AWS KMS master key ID used for the SSE-KMS encryption. This can only be used when you set the value of sseAlgorithm as aws:kms. The default aws/s3 AWS KMS master key is used if this element is absent while the sseAlgorithm is aws:kms.
property sseAlgorithm
sseAlgorithm: pulumi.Input<string>;The server-side encryption algorithm to use. Valid values are AES256 and aws:kms
interface BucketVersioning
interface BucketVersioningproperty enabled
enabled?: pulumi.Input<boolean>;Enable versioning. Once you version-enable a bucket, it can never return to an unversioned state. You can, however, suspend versioning on that bucket.
property mfaDelete
mfaDelete?: pulumi.Input<boolean>;Enable MFA delete for either Change the versioning state of your bucket or Permanently delete an object version. Default is false. This cannot be used to toggle this setting but is available to allow managed buckets to reflect the state in AWS
interface BucketWebsite
interface BucketWebsiteproperty errorDocument
errorDocument?: pulumi.Input<string>;An absolute path to the document to return in case of a 4XX error.
property indexDocument
indexDocument?: pulumi.Input<string>;Amazon S3 returns this index document when requests are made to the root domain or any of the subfolders.
property redirectAllRequestsTo
redirectAllRequestsTo?: pulumi.Input<string>;A hostname to redirect all website requests for this bucket to. Hostname can optionally be prefixed with a protocol (http:// or https://) to use when redirecting requests. The default is the protocol that is used in the original request.
property routingRules
routingRules?: pulumi.Input<string | pulumi.Input<RoutingRule>[]>;A json array containing routing rules describing redirect behavior and when redirects are applied.
interface InventoryDestination
interface InventoryDestinationproperty bucket
bucket: pulumi.Input<InventoryDestinationBucket>;The S3 bucket configuration where inventory results are published (documented below).
interface InventoryDestinationBucket
interface InventoryDestinationBucketproperty accountId
accountId?: pulumi.Input<string>;The ID of the account that owns the destination bucket. Recommended to be set to prevent problems if the destination bucket ownership changes.
property bucketArn
bucketArn: pulumi.Input<string>;The Amazon S3 bucket ARN of the destination.
property encryption
encryption?: pulumi.Input<InventoryDestinationBucketEncryption>;Contains the type of server-side encryption to use to encrypt the inventory (documented below).
property format
format: pulumi.Input<string>;Specifies the output format of the inventory results. Can be CSV, ORC or Parquet.
property prefix
prefix?: pulumi.Input<string>;The prefix that is prepended to all inventory results.
interface InventoryDestinationBucketEncryption
interface InventoryDestinationBucketEncryptionproperty sseKms
sseKms?: pulumi.Input<InventoryDestinationBucketEncryptionSseKms>;Specifies to use server-side encryption with AWS KMS-managed keys to encrypt the inventory file (documented below).
property sseS3
sseS3?: pulumi.Input<InventoryDestinationBucketEncryptionSseS3>;Specifies to use server-side encryption with Amazon S3-managed keys (SSE-S3) to encrypt the inventory file.
interface InventoryDestinationBucketEncryptionSseKms
interface InventoryDestinationBucketEncryptionSseKmsproperty keyId
keyId: pulumi.Input<string>;The ARN of the KMS customer master key (CMK) used to encrypt the inventory file.
interface InventoryDestinationBucketEncryptionSseS3
interface InventoryDestinationBucketEncryptionSseS3interface InventoryFilter
interface InventoryFilterproperty prefix
prefix?: pulumi.Input<string>;The prefix that an object must have to be included in the inventory results.
interface InventorySchedule
interface InventoryScheduleproperty frequency
frequency: pulumi.Input<string>;Specifies how frequently inventory results are produced. Valid values: Daily, Weekly.
namespace sagemaker
interface EndpointConfigurationProductionVariant
interface EndpointConfigurationProductionVariantproperty acceleratorType
acceleratorType?: pulumi.Input<string>;The size of the Elastic Inference (EI) instance to use for the production variant.
property initialInstanceCount
initialInstanceCount: pulumi.Input<number>;Initial number of instances used for auto-scaling.
property initialVariantWeight
initialVariantWeight?: pulumi.Input<number>;Determines initial traffic distribution among all of the models that you specify in the endpoint configuration. If unspecified, it defaults to 1.0.
property instanceType
instanceType: pulumi.Input<string>;The type of instance to start.
property modelName
modelName: pulumi.Input<string>;The name of the model to use.
property variantName
variantName?: pulumi.Input<string>;The name of the variant. If omitted, this provider will assign a random, unique name.
interface ModelContainer
interface ModelContainerproperty containerHostname
containerHostname?: pulumi.Input<string>;The DNS host name for the container.
property environment
environment?: pulumi.Input<{[key: string]: any}>;Environment variables for the Docker container. A list of key value pairs.
property image
image: pulumi.Input<string>;The registry path where the inference code image is stored in Amazon ECR.
property modelDataUrl
modelDataUrl?: pulumi.Input<string>;The URL for the S3 location where model artifacts are stored.
interface ModelPrimaryContainer
interface ModelPrimaryContainerproperty containerHostname
containerHostname?: pulumi.Input<string>;The DNS host name for the container.
property environment
environment?: pulumi.Input<{[key: string]: any}>;Environment variables for the Docker container. A list of key value pairs.
property image
image: pulumi.Input<string>;The registry path where the inference code image is stored in Amazon ECR.
property modelDataUrl
modelDataUrl?: pulumi.Input<string>;The URL for the S3 location where model artifacts are stored.
interface ModelVpcConfig
interface ModelVpcConfigproperty securityGroupIds
securityGroupIds: pulumi.Input<pulumi.Input<string>[]>;property subnets
subnets: pulumi.Input<pulumi.Input<string>[]>;namespace secretsmanager
interface SecretRotationRules
interface SecretRotationRulesproperty automaticallyAfterDays
automaticallyAfterDays: pulumi.Input<number>;Specifies the number of days between automatic scheduled rotations of the secret.
namespace servicediscovery
interface ServiceDnsConfig
interface ServiceDnsConfigproperty dnsRecords
dnsRecords: pulumi.Input<pulumi.Input<ServiceDnsConfigDnsRecord>[]>;An array that contains one DnsRecord object for each resource record set.
property namespaceId
namespaceId: pulumi.Input<string>;The ID of the namespace to use for DNS configuration.
property routingPolicy
routingPolicy?: pulumi.Input<string>;The routing policy that you want to apply to all records that Route 53 creates when you register an instance and specify the service. Valid Values: MULTIVALUE, WEIGHTED
interface ServiceDnsConfigDnsRecord
interface ServiceDnsConfigDnsRecordproperty ttl
ttl: pulumi.Input<number>;The amount of time, in seconds, that you want DNS resolvers to cache the settings for this resource record set.
property type
type: pulumi.Input<string>;The type of health check that you want to create, which indicates how Route 53 determines whether an endpoint is healthy. Valid Values: HTTP, HTTPS, TCP
interface ServiceHealthCheckConfig
interface ServiceHealthCheckConfigproperty failureThreshold
failureThreshold?: pulumi.Input<number>;The number of 30-second intervals that you want service discovery to wait before it changes the health status of a service instance. Maximum value of 10.
property resourcePath
resourcePath?: pulumi.Input<string>;The path that you want Route 53 to request when performing health checks. Route 53 automatically adds the DNS name for the service. If you don’t specify a value, the default value is /.
property type
type?: pulumi.Input<string>;The type of health check that you want to create, which indicates how Route 53 determines whether an endpoint is healthy. Valid Values: HTTP, HTTPS, TCP
interface ServiceHealthCheckCustomConfig
interface ServiceHealthCheckCustomConfigproperty failureThreshold
failureThreshold?: pulumi.Input<number>;The number of 30-second intervals that you want service discovery to wait before it changes the health status of a service instance. Maximum value of 10.
namespace ses
interface EventDestinationCloudwatchDestination
interface EventDestinationCloudwatchDestinationproperty defaultValue
defaultValue: pulumi.Input<string>;The default value for the event
property dimensionName
dimensionName: pulumi.Input<string>;The name for the dimension
property valueSource
valueSource: pulumi.Input<string>;The source for the value. It can be either "messageTag" or "emailHeader"
interface EventDestinationKinesisDestination
interface EventDestinationKinesisDestinationproperty roleArn
roleArn: pulumi.Input<string>;The ARN of the role that has permissions to access the Kinesis Stream
property streamArn
streamArn: pulumi.Input<string>;The ARN of the Kinesis Stream
interface EventDestinationSnsDestination
interface EventDestinationSnsDestinationproperty topicArn
topicArn: pulumi.Input<string>;The ARN of the SNS topic
interface ReceiptRuleAddHeaderAction
interface ReceiptRuleAddHeaderActionproperty headerName
headerName: pulumi.Input<string>;The name of the header to add
property headerValue
headerValue: pulumi.Input<string>;The value of the header to add
property position
position: pulumi.Input<number>;The position of the action in the receipt rule
interface ReceiptRuleBounceAction
interface ReceiptRuleBounceActionproperty message
message: pulumi.Input<string>;The message to send
property position
position: pulumi.Input<number>;The position of the action in the receipt rule
property sender
sender: pulumi.Input<string>;The email address of the sender
property smtpReplyCode
smtpReplyCode: pulumi.Input<string>;The RFC 5321 SMTP reply code
property statusCode
statusCode?: pulumi.Input<string>;The RFC 3463 SMTP enhanced status code
property topicArn
topicArn?: pulumi.Input<string>;The ARN of an SNS topic to notify
interface ReceiptRuleLambdaAction
interface ReceiptRuleLambdaActionproperty functionArn
functionArn: pulumi.Input<string>;The ARN of the Lambda function to invoke
property invocationType
invocationType?: pulumi.Input<string>;Event or RequestResponse
property position
position: pulumi.Input<number>;The position of the action in the receipt rule
property topicArn
topicArn?: pulumi.Input<string>;The ARN of an SNS topic to notify
interface ReceiptRuleS3Action
interface ReceiptRuleS3Actionproperty bucketName
bucketName: pulumi.Input<string>;The name of the S3 bucket
property kmsKeyArn
kmsKeyArn?: pulumi.Input<string>;The ARN of the KMS key
property objectKeyPrefix
objectKeyPrefix?: pulumi.Input<string>;The key prefix of the S3 bucket
property position
position: pulumi.Input<number>;The position of the action in the receipt rule
property topicArn
topicArn?: pulumi.Input<string>;The ARN of an SNS topic to notify
interface ReceiptRuleSnsAction
interface ReceiptRuleSnsActionproperty position
position: pulumi.Input<number>;The position of the action in the receipt rule
property topicArn
topicArn: pulumi.Input<string>;The ARN of an SNS topic to notify
interface ReceiptRuleStopAction
interface ReceiptRuleStopActionproperty position
position: pulumi.Input<number>;The position of the action in the receipt rule
property scope
scope: pulumi.Input<string>;The scope to apply
property topicArn
topicArn?: pulumi.Input<string>;The ARN of an SNS topic to notify
interface ReceiptRuleWorkmailAction
interface ReceiptRuleWorkmailActionproperty organizationArn
organizationArn: pulumi.Input<string>;The ARN of the WorkMail organization
property position
position: pulumi.Input<number>;The position of the action in the receipt rule
property topicArn
topicArn?: pulumi.Input<string>;The ARN of an SNS topic to notify
namespace ssm
interface AssociationOutputLocation
interface AssociationOutputLocationproperty s3BucketName
s3BucketName: pulumi.Input<string>;The S3 bucket name.
property s3KeyPrefix
s3KeyPrefix?: pulumi.Input<string>;The S3 bucket prefix. Results stored in the root if not configured.
interface AssociationTarget
interface AssociationTargetproperty key
key: pulumi.Input<string>;Either InstanceIds or tag:Tag Name to specify an EC2 tag.
property values
values: pulumi.Input<pulumi.Input<string>[]>;A list of instance IDs or tag values. AWS currently limits this list size to one value.
interface DocumentAttachmentsSource
interface DocumentAttachmentsSourceproperty key
key: pulumi.Input<string>;The key describing the location of an attachment to a document. Valid key types include: SourceUrl and S3FileUrl
property name
name?: pulumi.Input<string>;The name of the document attachment file
property values
values: pulumi.Input<pulumi.Input<string>[]>;The value describing the location of an attachment to a document
interface DocumentParameter
interface DocumentParameterproperty defaultValue
defaultValue?: pulumi.Input<string>;property description
description?: pulumi.Input<string>;The description of the document.
property name
name?: pulumi.Input<string>;The name of the document.
property type
type?: pulumi.Input<string>;interface MaintenanceWindowTargetTarget
interface MaintenanceWindowTargetTargetproperty key
key: pulumi.Input<string>;property values
values: pulumi.Input<pulumi.Input<string>[]>;interface MaintenanceWindowTaskLoggingInfo
interface MaintenanceWindowTaskLoggingInfoproperty s3BucketName
s3BucketName: pulumi.Input<string>;property s3BucketPrefix
s3BucketPrefix?: pulumi.Input<string>;property s3Region
s3Region: pulumi.Input<string>;interface MaintenanceWindowTaskTarget
interface MaintenanceWindowTaskTargetproperty key
key: pulumi.Input<string>;property values
values: pulumi.Input<pulumi.Input<string>[]>;interface MaintenanceWindowTaskTaskInvocationParameters
interface MaintenanceWindowTaskTaskInvocationParametersproperty automationParameters
automationParameters?: pulumi.Input<MaintenanceWindowTaskTaskInvocationParametersAutomationParameters>;The parameters for an AUTOMATION task type. Documented below.
property lambdaParameters
lambdaParameters?: pulumi.Input<MaintenanceWindowTaskTaskInvocationParametersLambdaParameters>;The parameters for a LAMBDA task type. Documented below.
property runCommandParameters
runCommandParameters?: pulumi.Input<MaintenanceWindowTaskTaskInvocationParametersRunCommandParameters>;The parameters for a RUN_COMMAND task type. Documented below.
property stepFunctionsParameters
stepFunctionsParameters?: pulumi.Input<MaintenanceWindowTaskTaskInvocationParametersStepFunctionsParameters>;The parameters for a STEP_FUNCTIONS task type. Documented below.
interface MaintenanceWindowTaskTaskInvocationParametersAutomationParameters
interface MaintenanceWindowTaskTaskInvocationParametersAutomationParametersproperty documentVersion
documentVersion?: pulumi.Input<string>;The version of an Automation document to use during task execution.
property parameters
parameters?: pulumi.Input<pulumi.Input<MaintenanceWindowTaskTaskInvocationParametersAutomationParametersParameter>[]>;The parameters for the RUN_COMMAND task execution. Documented below.
interface MaintenanceWindowTaskTaskInvocationParametersAutomationParametersParameter
interface MaintenanceWindowTaskTaskInvocationParametersAutomationParametersParameterproperty name
name: pulumi.Input<string>;The parameter name.
property values
values: pulumi.Input<pulumi.Input<string>[]>;The array of strings.
interface MaintenanceWindowTaskTaskInvocationParametersLambdaParameters
interface MaintenanceWindowTaskTaskInvocationParametersLambdaParametersproperty clientContext
clientContext?: pulumi.Input<string>;Pass client-specific information to the Lambda function that you are invoking.
property payload
payload?: pulumi.Input<string>;JSON to provide to your Lambda function as input.
property qualifier
qualifier?: pulumi.Input<string>;Specify a Lambda function version or alias name.
interface MaintenanceWindowTaskTaskInvocationParametersRunCommandParameters
interface MaintenanceWindowTaskTaskInvocationParametersRunCommandParametersproperty comment
comment?: pulumi.Input<string>;Information about the command(s) to execute.
property documentHash
documentHash?: pulumi.Input<string>;The SHA-256 or SHA-1 hash created by the system when the document was created. SHA-1 hashes have been deprecated.
property documentHashType
documentHashType?: pulumi.Input<string>;SHA-256 or SHA-1. SHA-1 hashes have been deprecated. Valid values: Sha256 and Sha1
property notificationConfig
notificationConfig?: pulumi.Input<MaintenanceWindowTaskTaskInvocationParametersRunCommandParametersNotificationConfig>;Configurations for sending notifications about command status changes on a per-instance basis. Documented below.
property outputS3Bucket
outputS3Bucket?: pulumi.Input<string>;The name of the Amazon S3 bucket.
property outputS3KeyPrefix
outputS3KeyPrefix?: pulumi.Input<string>;The Amazon S3 bucket subfolder.
property parameters
parameters?: pulumi.Input<pulumi.Input<MaintenanceWindowTaskTaskInvocationParametersRunCommandParametersParameter>[]>;The parameters for the RUN_COMMAND task execution. Documented below.
property serviceRoleArn
serviceRoleArn?: pulumi.Input<string>;The IAM service role to assume during task execution.
property timeoutSeconds
timeoutSeconds?: pulumi.Input<number>;If this time is reached and the command has not already started executing, it doesn’t run.
interface MaintenanceWindowTaskTaskInvocationParametersRunCommandParametersNotificationConfig
interface MaintenanceWindowTaskTaskInvocationParametersRunCommandParametersNotificationConfigproperty notificationArn
notificationArn?: pulumi.Input<string>;An Amazon Resource Name (ARN) for a Simple Notification Service (SNS) topic. Run Command pushes notifications about command status changes to this topic.
property notificationEvents
notificationEvents?: pulumi.Input<pulumi.Input<string>[]>;The different events for which you can receive notifications. Valid values: All, InProgress, Success, TimedOut, Cancelled, and Failed
property notificationType
notificationType?: pulumi.Input<string>;When specified with Command, receive notification when the status of a command changes. When specified with Invocation, for commands sent to multiple instances, receive notification on a per-instance basis when the status of a command changes. Valid values: Command and Invocation
interface MaintenanceWindowTaskTaskInvocationParametersRunCommandParametersParameter
interface MaintenanceWindowTaskTaskInvocationParametersRunCommandParametersParameterproperty name
name: pulumi.Input<string>;The parameter name.
property values
values: pulumi.Input<pulumi.Input<string>[]>;The array of strings.
interface MaintenanceWindowTaskTaskInvocationParametersStepFunctionsParameters
interface MaintenanceWindowTaskTaskInvocationParametersStepFunctionsParametersproperty input
input?: pulumi.Input<string>;The inputs for the STEP_FUNCTION task.
property name
name?: pulumi.Input<string>;The name of the STEP_FUNCTION task.
interface MaintenanceWindowTaskTaskParameter
interface MaintenanceWindowTaskTaskParameterproperty name
name: pulumi.Input<string>;The name of the maintenance window task.
property values
values: pulumi.Input<pulumi.Input<string>[]>;interface PatchBaselineApprovalRule
interface PatchBaselineApprovalRuleproperty approveAfterDays
approveAfterDays: pulumi.Input<number>;The number of days after the release date of each patch matched by the rule the patch is marked as approved in the patch baseline. Valid Range: 0 to 100.
property complianceLevel
complianceLevel?: pulumi.Input<string>;Defines the compliance level for patches approved by this rule. Valid compliance levels include the following: CRITICAL, HIGH, MEDIUM, LOW, INFORMATIONAL, UNSPECIFIED. The default value is UNSPECIFIED.
property enableNonSecurity
enableNonSecurity?: pulumi.Input<boolean>;Boolean enabling the application of non-security updates. The default value is ‘false’. Valid for Linux instances only.
property patchFilters
patchFilters: pulumi.Input<pulumi.Input<PatchBaselineApprovalRulePatchFilter>[]>;The patch filter group that defines the criteria for the rule. Up to 5 patch filters can be specified per approval rule using Key/Value pairs. Valid Keys are PATCH_SET | PRODUCT | CLASSIFICATION | MSRC_SEVERITY | PATCH_ID.
interface PatchBaselineApprovalRulePatchFilter
interface PatchBaselineApprovalRulePatchFilterproperty key
key: pulumi.Input<string>;property values
values: pulumi.Input<pulumi.Input<string>[]>;interface PatchBaselineGlobalFilter
interface PatchBaselineGlobalFilterproperty key
key: pulumi.Input<string>;property values
values: pulumi.Input<pulumi.Input<string>[]>;interface ResourceDataSyncS3Destination
interface ResourceDataSyncS3Destinationproperty bucketName
bucketName: pulumi.Input<string>;Name of S3 bucket where the aggregated data is stored.
property kmsKeyArn
kmsKeyArn?: pulumi.Input<string>;ARN of an encryption key for a destination in Amazon S3.
property prefix
prefix?: pulumi.Input<string>;Prefix for the bucket.
property region
region: pulumi.Input<string>;Region with the bucket targeted by the Resource Data Sync.
property syncFormat
syncFormat?: pulumi.Input<string>;A supported sync format. Only JsonSerDe is currently supported. Defaults to JsonSerDe.
namespace storagegateway
interface GatewaySmbActiveDirectorySettings
interface GatewaySmbActiveDirectorySettingsproperty domainName
domainName: pulumi.Input<string>;The name of the domain that you want the gateway to join.
property password
password: pulumi.Input<string>;The password of the user who has permission to add the gateway to the Active Directory domain.
property username
username: pulumi.Input<string>;The user name of user who has permission to add the gateway to the Active Directory domain.
interface NfsFileShareNfsFileShareDefaults
interface NfsFileShareNfsFileShareDefaultsproperty directoryMode
directoryMode?: pulumi.Input<string>;The Unix directory mode in the string form “nnnn”. Defaults to "0777".
property fileMode
fileMode?: pulumi.Input<string>;The Unix file mode in the string form “nnnn”. Defaults to "0666".
property groupId
groupId?: pulumi.Input<number>;The default group ID for the file share (unless the files have another group ID specified). Defaults to 65534 (nfsnobody). Valid values: 0 through 4294967294.
property ownerId
ownerId?: pulumi.Input<number>;The default owner ID for the file share (unless the files have another owner ID specified). Defaults to 65534 (nfsnobody). Valid values: 0 through 4294967294.
namespace transfer
interface ServerEndpointDetails
interface ServerEndpointDetailsproperty vpcEndpointId
vpcEndpointId: pulumi.Input<string>;The ID of the VPC endpoint.
namespace waf
interface ByteMatchSetByteMatchTuple
interface ByteMatchSetByteMatchTupleproperty fieldToMatch
fieldToMatch: pulumi.Input<ByteMatchSetByteMatchTupleFieldToMatch>;The part of a web request that you want to search, such as a specified header or a query string.
property positionalConstraint
positionalConstraint: pulumi.Input<string>;Within the portion of a web request that you want to search
(for example, in the query string, if any), specify where you want to search.
e.g. CONTAINS, CONTAINS_WORD or EXACTLY.
See docs
for all supported values.
property targetString
targetString?: pulumi.Input<string>;The value that you want to search for. e.g. HEADER, METHOD or BODY.
See docs
for all supported values.
property textTransformation
textTransformation: pulumi.Input<string>;Text transformations used to eliminate unusual formatting that attackers use in web requests in an effort to bypass AWS WAF.
If you specify a transformation, AWS WAF performs the transformation on targetString before inspecting a request for a match.
e.g. CMD_LINE, HTML_ENTITY_DECODE or NONE.
See docs
for all supported values.
interface ByteMatchSetByteMatchTupleFieldToMatch
interface ByteMatchSetByteMatchTupleFieldToMatchproperty data
data?: pulumi.Input<string>;When type is HEADER, enter the name of the header that you want to search, e.g. User-Agent or Referer.
If type is any other value, omit this field.
property type
type: pulumi.Input<string>;The part of the web request that you want AWS WAF to search for a specified string.
e.g. HEADER, METHOD or BODY.
See docs
for all supported values.
interface GeoMatchSetGeoMatchConstraint
interface GeoMatchSetGeoMatchConstraintproperty type
type: pulumi.Input<string>;The type of geographical area you want AWS WAF to search for. Currently Country is the only valid value.
property value
value: pulumi.Input<string>;The country that you want AWS WAF to search for.
This is the two-letter country code, e.g. US, CA, RU, CN, etc.
See docs for all supported values.
interface IpSetIpSetDescriptor
interface IpSetIpSetDescriptorproperty type
type: pulumi.Input<string>;Type of the IP address - IPV4 or IPV6.
property value
value: pulumi.Input<string>;An IPv4 or IPv6 address specified via CIDR notation.
e.g. 192.0.2.44/32 or 1111:0000:0000:0000:0000:0000:0000:0000/64
interface RateBasedRulePredicate
interface RateBasedRulePredicateproperty dataId
dataId: pulumi.Input<string>;A unique identifier for a predicate in the rule, such as Byte Match Set ID or IPSet ID.
property negated
negated: pulumi.Input<boolean>;Set this to false if you want to allow, block, or count requests
based on the settings in the specified ByteMatchSet, IPSet, SqlInjectionMatchSet, XssMatchSet, or SizeConstraintSet.
For example, if an IPSet includes the IP address 192.0.2.44, AWS WAF will allow or block requests based on that IP address.
If set to true, AWS WAF will allow, block, or count requests based on all IP addresses except 192.0.2.44.
property type
type: pulumi.Input<string>;The type of predicate in a rule. Valid values: ByteMatch, GeoMatch, IPMatch, RegexMatch, SizeConstraint, SqlInjectionMatch, or XssMatch.
interface RegexMatchSetRegexMatchTuple
interface RegexMatchSetRegexMatchTupleproperty fieldToMatch
fieldToMatch: pulumi.Input<RegexMatchSetRegexMatchTupleFieldToMatch>;The part of a web request that you want to search, such as a specified header or a query string.
property regexPatternSetId
regexPatternSetId: pulumi.Input<string>;The ID of a WAF Regex Pattern Set.
property textTransformation
textTransformation: pulumi.Input<string>;Text transformations used to eliminate unusual formatting that attackers use in web requests in an effort to bypass AWS WAF.
e.g. CMD_LINE, HTML_ENTITY_DECODE or NONE.
See docs
for all supported values.
interface RegexMatchSetRegexMatchTupleFieldToMatch
interface RegexMatchSetRegexMatchTupleFieldToMatchproperty data
data?: pulumi.Input<string>;When type is HEADER, enter the name of the header that you want to search, e.g. User-Agent or Referer.
If type is any other value, omit this field.
property type
type: pulumi.Input<string>;The part of the web request that you want AWS WAF to search for a specified string.
e.g. HEADER, METHOD or BODY.
See docs
for all supported values.
interface RuleGroupActivatedRule
interface RuleGroupActivatedRuleproperty action
action: pulumi.Input<RuleGroupActivatedRuleAction>;Specifies the action that CloudFront or AWS WAF takes when a web request matches the conditions in the rule.
property priority
priority: pulumi.Input<number>;Specifies the order in which the rules are evaluated. Rules with a lower value are evaluated before rules with a higher value.
property ruleId
ruleId: pulumi.Input<string>;The ID of a wafRule
property type
type?: pulumi.Input<string>;The rule type, either REGULAR, RATE_BASED, or GROUP. Defaults to REGULAR.
interface RuleGroupActivatedRuleAction
interface RuleGroupActivatedRuleActionproperty type
type: pulumi.Input<string>;The rule type, either REGULAR, RATE_BASED, or GROUP. Defaults to REGULAR.
interface RulePredicate
interface RulePredicateproperty dataId
dataId: pulumi.Input<string>;A unique identifier for a predicate in the rule, such as Byte Match Set ID or IPSet ID.
property negated
negated: pulumi.Input<boolean>;Set this to false if you want to allow, block, or count requests
based on the settings in the specified wafByteMatchSet, wafIpset, aws.waf.SizeConstraintSet, aws.waf.SqlInjectionMatchSet or aws.waf.XssMatchSet.
For example, if an IPSet includes the IP address 192.0.2.44, AWS WAF will allow or block requests based on that IP address.
If set to true, AWS WAF will allow, block, or count requests based on all IP addresses except 192.0.2.44.
property type
type: pulumi.Input<string>;The type of predicate in a rule. Valid values: ByteMatch, GeoMatch, IPMatch, RegexMatch, SizeConstraint, SqlInjectionMatch, or XssMatch.
interface SizeConstraintSetSizeConstraint
interface SizeConstraintSetSizeConstraintproperty comparisonOperator
comparisonOperator: pulumi.Input<string>;The type of comparison you want to perform.
e.g. EQ, NE, LT, GT.
See docs for all supported values.
property fieldToMatch
fieldToMatch: pulumi.Input<SizeConstraintSetSizeConstraintFieldToMatch>;Specifies where in a web request to look for the size constraint.
property size
size: pulumi.Input<number>;The size in bytes that you want to compare against the size of the specified fieldToMatch.
Valid values are between 0 - 21474836480 bytes (0 - 20 GB).
property textTransformation
textTransformation: pulumi.Input<string>;Text transformations used to eliminate unusual formatting that attackers use in web requests in an effort to bypass AWS WAF.
If you specify a transformation, AWS WAF performs the transformation on fieldToMatch before inspecting a request for a match.
e.g. CMD_LINE, HTML_ENTITY_DECODE or NONE.
See docs
for all supported values.
Note: if you choose BODY as type, you must choose NONE because CloudFront forwards only the first 8192 bytes for inspection.
interface SizeConstraintSetSizeConstraintFieldToMatch
interface SizeConstraintSetSizeConstraintFieldToMatchproperty data
data?: pulumi.Input<string>;When type is HEADER, enter the name of the header that you want to search, e.g. User-Agent or Referer.
If type is any other value, omit this field.
property type
type: pulumi.Input<string>;The part of the web request that you want AWS WAF to search for a specified string.
e.g. HEADER, METHOD or BODY.
See docs
for all supported values.
interface SqlInjectionMatchSetSqlInjectionMatchTuple
interface SqlInjectionMatchSetSqlInjectionMatchTupleproperty fieldToMatch
fieldToMatch: pulumi.Input<SqlInjectionMatchSetSqlInjectionMatchTupleFieldToMatch>;Specifies where in a web request to look for snippets of malicious SQL code.
property textTransformation
textTransformation: pulumi.Input<string>;Text transformations used to eliminate unusual formatting that attackers use in web requests in an effort to bypass AWS WAF.
If you specify a transformation, AWS WAF performs the transformation on fieldToMatch before inspecting a request for a match.
e.g. CMD_LINE, HTML_ENTITY_DECODE or NONE.
See docs
for all supported values.
interface SqlInjectionMatchSetSqlInjectionMatchTupleFieldToMatch
interface SqlInjectionMatchSetSqlInjectionMatchTupleFieldToMatchproperty data
data?: pulumi.Input<string>;When type is HEADER, enter the name of the header that you want to search, e.g. User-Agent or Referer.
If type is any other value, omit this field.
property type
type: pulumi.Input<string>;The part of the web request that you want AWS WAF to search for a specified string.
e.g. HEADER, METHOD or BODY.
See docs
for all supported values.
interface WebAclDefaultAction
interface WebAclDefaultActionproperty type
type: pulumi.Input<string>;The rule type, either REGULAR, as defined by Rule, RATE_BASED, as defined by RateBasedRule, or GROUP, as defined by RuleGroup. The default is REGULAR. If you add a RATE_BASED rule, you need to set type as RATE_BASED. If you add a GROUP rule, you need to set type as GROUP.
interface WebAclLoggingConfiguration
interface WebAclLoggingConfigurationproperty logDestination
logDestination: pulumi.Input<string>;Amazon Resource Name (ARN) of Kinesis Firehose Delivery Stream
property redactedFields
redactedFields?: pulumi.Input<WebAclLoggingConfigurationRedactedFields>;Configuration block containing parts of the request that you want redacted from the logs. Detailed below.
interface WebAclLoggingConfigurationRedactedFields
interface WebAclLoggingConfigurationRedactedFieldsproperty fieldToMatches
fieldToMatches: pulumi.Input<pulumi.Input<WebAclLoggingConfigurationRedactedFieldsFieldToMatch>[]>;Set of configuration blocks for fields to redact. Detailed below.
interface WebAclLoggingConfigurationRedactedFieldsFieldToMatch
interface WebAclLoggingConfigurationRedactedFieldsFieldToMatchproperty data
data?: pulumi.Input<string>;When the value of type is HEADER, enter the name of the header that you want the WAF to search, for example, User-Agent or Referer. If the value of type is any other value, omit data.
property type
type: pulumi.Input<string>;The rule type, either REGULAR, as defined by Rule, RATE_BASED, as defined by RateBasedRule, or GROUP, as defined by RuleGroup. The default is REGULAR. If you add a RATE_BASED rule, you need to set type as RATE_BASED. If you add a GROUP rule, you need to set type as GROUP.
interface WebAclRule
interface WebAclRuleproperty action
action?: pulumi.Input<WebAclRuleAction>;The action that CloudFront or AWS WAF takes when a web request matches the conditions in the rule. Not used if type is GROUP.
property overrideAction
overrideAction?: pulumi.Input<WebAclRuleOverrideAction>;Override the action that a group requests CloudFront or AWS WAF takes when a web request matches the conditions in the rule. Only used if type is GROUP.
property priority
priority: pulumi.Input<number>;Specifies the order in which the rules in a WebACL are evaluated. Rules with a lower value are evaluated before rules with a higher value.
property ruleId
ruleId: pulumi.Input<string>;ID of the associated WAF (Global) rule (e.g. aws.waf.Rule). WAF (Regional) rules cannot be used.
property type
type?: pulumi.Input<string>;The rule type, either REGULAR, as defined by Rule, RATE_BASED, as defined by RateBasedRule, or GROUP, as defined by RuleGroup. The default is REGULAR. If you add a RATE_BASED rule, you need to set type as RATE_BASED. If you add a GROUP rule, you need to set type as GROUP.
interface WebAclRuleAction
interface WebAclRuleActionproperty type
type: pulumi.Input<string>;The rule type, either REGULAR, as defined by Rule, RATE_BASED, as defined by RateBasedRule, or GROUP, as defined by RuleGroup. The default is REGULAR. If you add a RATE_BASED rule, you need to set type as RATE_BASED. If you add a GROUP rule, you need to set type as GROUP.
interface WebAclRuleOverrideAction
interface WebAclRuleOverrideActionproperty type
type: pulumi.Input<string>;The rule type, either REGULAR, as defined by Rule, RATE_BASED, as defined by RateBasedRule, or GROUP, as defined by RuleGroup. The default is REGULAR. If you add a RATE_BASED rule, you need to set type as RATE_BASED. If you add a GROUP rule, you need to set type as GROUP.
interface XssMatchSetXssMatchTuple
interface XssMatchSetXssMatchTupleproperty fieldToMatch
fieldToMatch: pulumi.Input<XssMatchSetXssMatchTupleFieldToMatch>;Specifies where in a web request to look for cross-site scripting attacks.
property textTransformation
textTransformation: pulumi.Input<string>;Text transformations used to eliminate unusual formatting that attackers use in web requests in an effort to bypass AWS WAF.
If you specify a transformation, AWS WAF performs the transformation on targetString before inspecting a request for a match.
e.g. CMD_LINE, HTML_ENTITY_DECODE or NONE.
See docs
for all supported values.
interface XssMatchSetXssMatchTupleFieldToMatch
interface XssMatchSetXssMatchTupleFieldToMatchproperty data
data?: pulumi.Input<string>;When type is HEADER, enter the name of the header that you want to search, e.g. User-Agent or Referer.
If type is any other value, omit this field.
property type
type: pulumi.Input<string>;The part of the web request that you want AWS WAF to search for a specified string.
e.g. HEADER, METHOD or BODY.
See docs
for all supported values.
namespace wafregional
interface ByteMatchSetByteMatchTuple
interface ByteMatchSetByteMatchTupleproperty fieldToMatch
fieldToMatch: pulumi.Input<ByteMatchSetByteMatchTupleFieldToMatch>;Settings for the ByteMatchTuple. FieldToMatch documented below.
property positionalConstraint
positionalConstraint: pulumi.Input<string>;Within the portion of a web request that you want to search.
property targetString
targetString?: pulumi.Input<string>;The value that you want AWS WAF to search for. The maximum length of the value is 50 bytes.
property textTransformation
textTransformation: pulumi.Input<string>;The formatting way for web request.
interface ByteMatchSetByteMatchTupleFieldToMatch
interface ByteMatchSetByteMatchTupleFieldToMatchproperty data
data?: pulumi.Input<string>;When the value of Type is HEADER, enter the name of the header that you want AWS WAF to search, for example, User-Agent or Referer. If the value of Type is any other value, omit Data.
property type
type: pulumi.Input<string>;The part of the web request that you want AWS WAF to search for a specified string.
interface GeoMatchSetGeoMatchConstraint
interface GeoMatchSetGeoMatchConstraintproperty type
type: pulumi.Input<string>;The type of geographical area you want AWS WAF to search for. Currently Country is the only valid value.
property value
value: pulumi.Input<string>;The country that you want AWS WAF to search for.
This is the two-letter country code, e.g. US, CA, RU, CN, etc.
See docs for all supported values.
interface IpSetIpSetDescriptor
interface IpSetIpSetDescriptorproperty type
type: pulumi.Input<string>;The string like IPV4 or IPV6.
property value
value: pulumi.Input<string>;The CIDR notation.
interface RateBasedRulePredicate
interface RateBasedRulePredicateproperty dataId
dataId: pulumi.Input<string>;A unique identifier for a predicate in the rule, such as Byte Match Set ID or IPSet ID.
property negated
negated: pulumi.Input<boolean>;Set this to false if you want to allow, block, or count requests
based on the settings in the specified ByteMatchSet, IPSet, SqlInjectionMatchSet, XssMatchSet, or SizeConstraintSet.
For example, if an IPSet includes the IP address 192.0.2.44, AWS WAF will allow or block requests based on that IP address.
If set to true, AWS WAF will allow, block, or count requests based on all IP addresses except 192.0.2.44.
property type
type: pulumi.Input<string>;The type of predicate in a rule. Valid values: ByteMatch, GeoMatch, IPMatch, RegexMatch, SizeConstraint, SqlInjectionMatch, or XssMatch.
interface RegexMatchSetRegexMatchTuple
interface RegexMatchSetRegexMatchTupleproperty fieldToMatch
fieldToMatch: pulumi.Input<RegexMatchSetRegexMatchTupleFieldToMatch>;The part of a web request that you want to search, such as a specified header or a query string.
property regexPatternSetId
regexPatternSetId: pulumi.Input<string>;The ID of a WAF Regex Pattern Set.
property textTransformation
textTransformation: pulumi.Input<string>;Text transformations used to eliminate unusual formatting that attackers use in web requests in an effort to bypass AWS WAF.
e.g. CMD_LINE, HTML_ENTITY_DECODE or NONE.
See docs
for all supported values.
interface RegexMatchSetRegexMatchTupleFieldToMatch
interface RegexMatchSetRegexMatchTupleFieldToMatchproperty data
data?: pulumi.Input<string>;When type is HEADER, enter the name of the header that you want to search, e.g. User-Agent or Referer.
If type is any other value, omit this field.
property type
type: pulumi.Input<string>;The part of the web request that you want AWS WAF to search for a specified string.
e.g. HEADER, METHOD or BODY.
See docs
for all supported values.
interface RuleGroupActivatedRule
interface RuleGroupActivatedRuleproperty action
action: pulumi.Input<RuleGroupActivatedRuleAction>;Specifies the action that CloudFront or AWS WAF takes when a web request matches the conditions in the rule.
property priority
priority: pulumi.Input<number>;Specifies the order in which the rules are evaluated. Rules with a lower value are evaluated before rules with a higher value.
property ruleId
ruleId: pulumi.Input<string>;The ID of a wafRegionalRule
property type
type?: pulumi.Input<string>;The rule type, either REGULAR, RATE_BASED, or GROUP. Defaults to REGULAR.
interface RuleGroupActivatedRuleAction
interface RuleGroupActivatedRuleActionproperty type
type: pulumi.Input<string>;The rule type, either REGULAR, RATE_BASED, or GROUP. Defaults to REGULAR.
interface RulePredicate
interface RulePredicateproperty dataId
dataId: pulumi.Input<string>;property negated
negated: pulumi.Input<boolean>;property type
type: pulumi.Input<string>;interface SizeConstraintSetSizeConstraint
interface SizeConstraintSetSizeConstraintproperty comparisonOperator
comparisonOperator: pulumi.Input<string>;The type of comparison you want to perform.
e.g. EQ, NE, LT, GT.
See docs for all supported values.
property fieldToMatch
fieldToMatch: pulumi.Input<SizeConstraintSetSizeConstraintFieldToMatch>;Specifies where in a web request to look for the size constraint.
property size
size: pulumi.Input<number>;The size in bytes that you want to compare against the size of the specified fieldToMatch.
Valid values are between 0 - 21474836480 bytes (0 - 20 GB).
property textTransformation
textTransformation: pulumi.Input<string>;Text transformations used to eliminate unusual formatting that attackers use in web requests in an effort to bypass AWS WAF.
If you specify a transformation, AWS WAF performs the transformation on fieldToMatch before inspecting a request for a match.
e.g. CMD_LINE, HTML_ENTITY_DECODE or NONE.
See docs
for all supported values.
Note: if you choose BODY as type, you must choose NONE because CloudFront forwards only the first 8192 bytes for inspection.
interface SizeConstraintSetSizeConstraintFieldToMatch
interface SizeConstraintSetSizeConstraintFieldToMatchproperty data
data?: pulumi.Input<string>;When type is HEADER, enter the name of the header that you want to search, e.g. User-Agent or Referer.
If type is any other value, omit this field.
property type
type: pulumi.Input<string>;The part of the web request that you want AWS WAF to search for a specified string.
e.g. HEADER, METHOD or BODY.
See docs
for all supported values.
interface SqlInjectionMatchSetSqlInjectionMatchTuple
interface SqlInjectionMatchSetSqlInjectionMatchTupleproperty fieldToMatch
fieldToMatch: pulumi.Input<SqlInjectionMatchSetSqlInjectionMatchTupleFieldToMatch>;Specifies where in a web request to look for snippets of malicious SQL code.
property textTransformation
textTransformation: pulumi.Input<string>;Text transformations used to eliminate unusual formatting that attackers use in web requests in an effort to bypass AWS WAF.
If you specify a transformation, AWS WAF performs the transformation on fieldToMatch before inspecting a request for a match.
e.g. CMD_LINE, HTML_ENTITY_DECODE or NONE.
See docs
for all supported values.
interface SqlInjectionMatchSetSqlInjectionMatchTupleFieldToMatch
interface SqlInjectionMatchSetSqlInjectionMatchTupleFieldToMatchproperty data
data?: pulumi.Input<string>;When type is HEADER, enter the name of the header that you want to search, e.g. User-Agent or Referer.
If type is any other value, omit this field.
property type
type: pulumi.Input<string>;The part of the web request that you want AWS WAF to search for a specified string.
e.g. HEADER, METHOD or BODY.
See docs
for all supported values.
interface WebAclDefaultAction
interface WebAclDefaultActionproperty type
type: pulumi.Input<string>;Specifies how you want AWS WAF Regional to respond to requests that match the settings in a rule. e.g. ALLOW, BLOCK or COUNT
interface WebAclLoggingConfiguration
interface WebAclLoggingConfigurationproperty logDestination
logDestination: pulumi.Input<string>;Amazon Resource Name (ARN) of Kinesis Firehose Delivery Stream
property redactedFields
redactedFields?: pulumi.Input<WebAclLoggingConfigurationRedactedFields>;Configuration block containing parts of the request that you want redacted from the logs. Detailed below.
interface WebAclLoggingConfigurationRedactedFields
interface WebAclLoggingConfigurationRedactedFieldsproperty fieldToMatches
fieldToMatches: pulumi.Input<pulumi.Input<WebAclLoggingConfigurationRedactedFieldsFieldToMatch>[]>;Set of configuration blocks for fields to redact. Detailed below.
interface WebAclLoggingConfigurationRedactedFieldsFieldToMatch
interface WebAclLoggingConfigurationRedactedFieldsFieldToMatchproperty data
data?: pulumi.Input<string>;When the value of type is HEADER, enter the name of the header that you want the WAF to search, for example, User-Agent or Referer. If the value of type is any other value, omit data.
property type
type: pulumi.Input<string>;Specifies how you want AWS WAF Regional to respond to requests that match the settings in a rule. e.g. ALLOW, BLOCK or COUNT
interface WebAclRule
interface WebAclRuleproperty action
action?: pulumi.Input<WebAclRuleAction>;Configuration block of the action that CloudFront or AWS WAF takes when a web request matches the conditions in the rule. Not used if type is GROUP. Detailed below.
property overrideAction
overrideAction?: pulumi.Input<WebAclRuleOverrideAction>;Configuration block of the override the action that a group requests CloudFront or AWS WAF takes when a web request matches the conditions in the rule. Only used if type is GROUP. Detailed below.
property priority
priority: pulumi.Input<number>;Specifies the order in which the rules in a WebACL are evaluated. Rules with a lower value are evaluated before rules with a higher value.
property ruleId
ruleId: pulumi.Input<string>;ID of the associated WAF (Regional) rule (e.g. aws.wafregional.Rule). WAF (Global) rules cannot be used.
property type
type?: pulumi.Input<string>;Specifies how you want AWS WAF Regional to respond to requests that match the settings in a rule. e.g. ALLOW, BLOCK or COUNT
interface WebAclRuleAction
interface WebAclRuleActionproperty type
type: pulumi.Input<string>;Specifies how you want AWS WAF Regional to respond to requests that match the settings in a rule. e.g. ALLOW, BLOCK or COUNT
interface WebAclRuleOverrideAction
interface WebAclRuleOverrideActionproperty type
type: pulumi.Input<string>;Specifies how you want AWS WAF Regional to respond to requests that match the settings in a rule. e.g. ALLOW, BLOCK or COUNT
interface XssMatchSetXssMatchTuple
interface XssMatchSetXssMatchTupleproperty fieldToMatch
fieldToMatch: pulumi.Input<XssMatchSetXssMatchTupleFieldToMatch>;Specifies where in a web request to look for cross-site scripting attacks.
property textTransformation
textTransformation: pulumi.Input<string>;Which text transformation, if any, to perform on the web request before inspecting the request for cross-site scripting attacks.
interface XssMatchSetXssMatchTupleFieldToMatch
interface XssMatchSetXssMatchTupleFieldToMatchproperty data
data?: pulumi.Input<string>;When the value of type is HEADER, enter the name of the header that you want the WAF to search, for example, User-Agent or Referer. If the value of type is any other value, omit data.
property type
type: pulumi.Input<string>;The part of the web request that you want AWS WAF to search for a specified string. e.g. HEADER or METHOD
namespace wafv2
interface RegexPatternSetRegularExpression
interface RegexPatternSetRegularExpressionproperty regexString
regexString: pulumi.Input<string>;The string representing the regular expression, see the AWS WAF documentation for more information.
namespace worklink
interface FleetIdentityProvider
interface FleetIdentityProviderproperty samlMetadata
samlMetadata: pulumi.Input<string>;The SAML metadata document provided by the customer’s identity provider.
property type
type: pulumi.Input<string>;The type of identity provider.
interface FleetNetwork
interface FleetNetworkproperty securityGroupIds
securityGroupIds: pulumi.Input<pulumi.Input<string>[]>;A list of security group IDs associated with access to the provided subnets.
property subnetIds
subnetIds: pulumi.Input<pulumi.Input<string>[]>;A list of subnet IDs used for X-ENI connections from Amazon WorkLink rendering containers.
property vpcId
vpcId: pulumi.Input<string>;The VPC ID with connectivity to associated websites.
namespace workspaces
interface DirectorySelfServicePermissions
interface DirectorySelfServicePermissionsproperty changeComputeType
changeComputeType?: pulumi.Input<boolean>;Whether WorkSpaces directory users can change the compute type (bundle) for their workspace. Default false.
property increaseVolumeSize
increaseVolumeSize?: pulumi.Input<boolean>;Whether WorkSpaces directory users can increase the volume size of the drives on their workspace. Default false.
property rebuildWorkspace
rebuildWorkspace?: pulumi.Input<boolean>;Whether WorkSpaces directory users can rebuild the operating system of a workspace to its original state. Default false.
property restartWorkspace
restartWorkspace?: pulumi.Input<boolean>;Whether WorkSpaces directory users can restart their workspace. Default true.
property switchRunningMode
switchRunningMode?: pulumi.Input<boolean>;Whether WorkSpaces directory users can switch the running mode of their workspace. Default false.
interface IpGroupRule
interface IpGroupRuleproperty description
description?: pulumi.Input<string>;The description.
property source
source: pulumi.Input<string>;The IP address range, in CIDR notation, e.g. 10.0.0.0/16
interface WorkspaceWorkspaceProperties
interface WorkspaceWorkspacePropertiesproperty computeTypeName
computeTypeName?: pulumi.Input<string>;The compute type. For more information, see Amazon WorkSpaces Bundles. Valid values are VALUE, STANDARD, PERFORMANCE, POWER, GRAPHICS, POWERPRO and GRAPHICSPRO.
property rootVolumeSizeGib
rootVolumeSizeGib?: pulumi.Input<number>;The size of the root volume.
property runningMode
runningMode?: pulumi.Input<string>;The running mode. For more information, see Manage the WorkSpace Running Mode. Valid values are AUTO_STOP and ALWAYS_ON.
property runningModeAutoStopTimeoutInMinutes
runningModeAutoStopTimeoutInMinutes?: pulumi.Input<number>;The time after a user logs off when WorkSpaces are automatically stopped. Configured in 60-minute intervals.
property userVolumeSizeGib
userVolumeSizeGib?: pulumi.Input<number>;The size of the user storage.
APIs
interface GetAmiFilter
interface GetAmiFilterproperty name
name: string;The name of the AMI that was provided during image creation.
property values
values: string[];interface GetAmiIdsFilter
interface GetAmiIdsFilterproperty name
name: string;property values
values: string[];interface GetAutoscalingGroupsFilter
interface GetAutoscalingGroupsFilterproperty name
name: string;The name of the filter. The valid values are: auto-scaling-group, key, value, and propagate-at-launch.
property values
values: string[];The value of the filter.
interface GetAvailabilityZoneFilter
interface GetAvailabilityZoneFilterproperty name
name: string;The name of the filter field. Valid values can be found in the EC2 DescribeAvailabilityZones API Reference.
property values
values: string[];Set of values that are accepted for the given filter field. Results will be selected if any given value matches.
interface GetAvailabilityZonesFilter
interface GetAvailabilityZonesFilterproperty name
name: string;The name of the filter field. Valid values can be found in the EC2 DescribeAvailabilityZones API Reference.
property values
values: string[];Set of values that are accepted for the given filter field. Results will be selected if any given value matches.
interface GetElasticIpFilter
interface GetElasticIpFilterproperty name
name: string;property values
values: string[];interface GetPrefixListFilter
interface GetPrefixListFilterproperty name
name: string;The name of the filter field. Valid values can be found in the EC2 DescribePrefixLists API Reference.
property values
values: string[];Set of values that are accepted for the given filter field. Results will be selected if any given value matches.
interface GetRegionsFilter
interface GetRegionsFilterproperty name
name: string;The name of the filter field. Valid values can be found in the [describe-regions AWS CLI Reference][1].
property values
values: string[];Set of values that are accepted for the given filter field. Results will be selected if any given value matches.
interface ProviderAssumeRole
interface ProviderAssumeRoleproperty externalId
externalId?: pulumi.Input<string>;property policy
policy?: pulumi.Input<string>;property roleArn
roleArn?: pulumi.Input<string>;property sessionName
sessionName?: pulumi.Input<string>;interface ProviderEndpoint
interface ProviderEndpointproperty accessanalyzer
accessanalyzer?: pulumi.Input<string>;property acm
acm?: pulumi.Input<string>;property acmpca
acmpca?: pulumi.Input<string>;property amplify
amplify?: pulumi.Input<string>;property apigateway
apigateway?: pulumi.Input<string>;property applicationautoscaling
applicationautoscaling?: pulumi.Input<string>;property applicationinsights
applicationinsights?: pulumi.Input<string>;property appmesh
appmesh?: pulumi.Input<string>;property appstream
appstream?: pulumi.Input<string>;property appsync
appsync?: pulumi.Input<string>;property athena
athena?: pulumi.Input<string>;property autoscaling
autoscaling?: pulumi.Input<string>;property autoscalingplans
autoscalingplans?: pulumi.Input<string>;property backup
backup?: pulumi.Input<string>;property batch
batch?: pulumi.Input<string>;property budgets
budgets?: pulumi.Input<string>;property cloud9
cloud9?: pulumi.Input<string>;property cloudformation
cloudformation?: pulumi.Input<string>;property cloudfront
cloudfront?: pulumi.Input<string>;property cloudhsm
cloudhsm?: pulumi.Input<string>;property cloudsearch
cloudsearch?: pulumi.Input<string>;property cloudtrail
cloudtrail?: pulumi.Input<string>;property cloudwatch
cloudwatch?: pulumi.Input<string>;property cloudwatchevents
cloudwatchevents?: pulumi.Input<string>;property cloudwatchlogs
cloudwatchlogs?: pulumi.Input<string>;property codebuild
codebuild?: pulumi.Input<string>;property codecommit
codecommit?: pulumi.Input<string>;property codedeploy
codedeploy?: pulumi.Input<string>;property codepipeline
codepipeline?: pulumi.Input<string>;property cognitoidentity
cognitoidentity?: pulumi.Input<string>;property cognitoidp
cognitoidp?: pulumi.Input<string>;property configservice
configservice?: pulumi.Input<string>;property cur
cur?: pulumi.Input<string>;property dataexchange
dataexchange?: pulumi.Input<string>;property datapipeline
datapipeline?: pulumi.Input<string>;property datasync
datasync?: pulumi.Input<string>;property dax
dax?: pulumi.Input<string>;property devicefarm
devicefarm?: pulumi.Input<string>;property directconnect
directconnect?: pulumi.Input<string>;property dlm
dlm?: pulumi.Input<string>;property dms
dms?: pulumi.Input<string>;property docdb
docdb?: pulumi.Input<string>;property ds
ds?: pulumi.Input<string>;property dynamodb
dynamodb?: pulumi.Input<string>;property ec2
ec2?: pulumi.Input<string>;property ecr
ecr?: pulumi.Input<string>;property ecs
ecs?: pulumi.Input<string>;property efs
efs?: pulumi.Input<string>;property eks
eks?: pulumi.Input<string>;property elasticache
elasticache?: pulumi.Input<string>;property elasticbeanstalk
elasticbeanstalk?: pulumi.Input<string>;property elastictranscoder
elastictranscoder?: pulumi.Input<string>;property elb
elb?: pulumi.Input<string>;property emr
emr?: pulumi.Input<string>;property es
es?: pulumi.Input<string>;property firehose
firehose?: pulumi.Input<string>;property fms
fms?: pulumi.Input<string>;property forecast
forecast?: pulumi.Input<string>;property fsx
fsx?: pulumi.Input<string>;property gamelift
gamelift?: pulumi.Input<string>;property glacier
glacier?: pulumi.Input<string>;property globalaccelerator
globalaccelerator?: pulumi.Input<string>;property glue
glue?: pulumi.Input<string>;property greengrass
greengrass?: pulumi.Input<string>;property guardduty
guardduty?: pulumi.Input<string>;property iam
iam?: pulumi.Input<string>;property imagebuilder
imagebuilder?: pulumi.Input<string>;property inspector
inspector?: pulumi.Input<string>;property iot
iot?: pulumi.Input<string>;property iotanalytics
iotanalytics?: pulumi.Input<string>;property iotevents
iotevents?: pulumi.Input<string>;property kafka
kafka?: pulumi.Input<string>;property kinesis
kinesis?: pulumi.Input<string>;property kinesisAnalytics
kinesisAnalytics?: pulumi.Input<string>;property kinesisanalytics
kinesisanalytics?: pulumi.Input<string>;property kinesisanalyticsv2
kinesisanalyticsv2?: pulumi.Input<string>;property kinesisvideo
kinesisvideo?: pulumi.Input<string>;property kms
kms?: pulumi.Input<string>;property lakeformation
lakeformation?: pulumi.Input<string>;property lambda
lambda?: pulumi.Input<string>;property lexmodels
lexmodels?: pulumi.Input<string>;property licensemanager
licensemanager?: pulumi.Input<string>;property lightsail
lightsail?: pulumi.Input<string>;property macie
macie?: pulumi.Input<string>;property managedblockchain
managedblockchain?: pulumi.Input<string>;property marketplacecatalog
marketplacecatalog?: pulumi.Input<string>;property mediaconnect
mediaconnect?: pulumi.Input<string>;property mediaconvert
mediaconvert?: pulumi.Input<string>;property medialive
medialive?: pulumi.Input<string>;property mediapackage
mediapackage?: pulumi.Input<string>;property mediastore
mediastore?: pulumi.Input<string>;property mediastoredata
mediastoredata?: pulumi.Input<string>;property mq
mq?: pulumi.Input<string>;property neptune
neptune?: pulumi.Input<string>;property networkmanager
networkmanager?: pulumi.Input<string>;property opsworks
opsworks?: pulumi.Input<string>;property organizations
organizations?: pulumi.Input<string>;property personalize
personalize?: pulumi.Input<string>;property pinpoint
pinpoint?: pulumi.Input<string>;property pricing
pricing?: pulumi.Input<string>;property qldb
qldb?: pulumi.Input<string>;property quicksight
quicksight?: pulumi.Input<string>;property r53
r53?: pulumi.Input<string>;property ram
ram?: pulumi.Input<string>;property rds
rds?: pulumi.Input<string>;property redshift
redshift?: pulumi.Input<string>;property resourcegroups
resourcegroups?: pulumi.Input<string>;property route53
route53?: pulumi.Input<string>;property route53domains
route53domains?: pulumi.Input<string>;property route53resolver
route53resolver?: pulumi.Input<string>;property s3
s3?: pulumi.Input<string>;property s3control
s3control?: pulumi.Input<string>;property sagemaker
sagemaker?: pulumi.Input<string>;property sdb
sdb?: pulumi.Input<string>;property secretsmanager
secretsmanager?: pulumi.Input<string>;property securityhub
securityhub?: pulumi.Input<string>;property serverlessrepo
serverlessrepo?: pulumi.Input<string>;property servicecatalog
servicecatalog?: pulumi.Input<string>;property servicediscovery
servicediscovery?: pulumi.Input<string>;property servicequotas
servicequotas?: pulumi.Input<string>;property ses
ses?: pulumi.Input<string>;property shield
shield?: pulumi.Input<string>;property sns
sns?: pulumi.Input<string>;property sqs
sqs?: pulumi.Input<string>;property ssm
ssm?: pulumi.Input<string>;property stepfunctions
stepfunctions?: pulumi.Input<string>;property storagegateway
storagegateway?: pulumi.Input<string>;property sts
sts?: pulumi.Input<string>;property swf
swf?: pulumi.Input<string>;property synthetics
synthetics?: pulumi.Input<string>;property transfer
transfer?: pulumi.Input<string>;property waf
waf?: pulumi.Input<string>;property wafregional
wafregional?: pulumi.Input<string>;property wafv2
wafv2?: pulumi.Input<string>;property worklink
worklink?: pulumi.Input<string>;property workmail
workmail?: pulumi.Input<string>;property workspaces
workspaces?: pulumi.Input<string>;property xray
xray?: pulumi.Input<string>;interface ProviderIgnoreTags
interface ProviderIgnoreTagsproperty keyPrefixes
keyPrefixes?: pulumi.Input<pulumi.Input<string>[]>;property keys
keys?: pulumi.Input<pulumi.Input<string>[]>;